last executing test programs: 4m34.552182146s ago: executing program 4 (id=2912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x3ff, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000085, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffffffff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb51}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m34.31617353s ago: executing program 4 (id=2916): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000080040007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 4m34.108337782s ago: executing program 4 (id=2919): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000f5000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004000e18fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c3726e5672189e977c5d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9780e1d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a0b8b14c4b7a94fe18e88605aa6be1a0200000000000000"], 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0xb2, 0xf8, 0x8, 0x0, @mcast1, @private0, 0x10, 0x8000, 0x8, 0x7}}) recvmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/132, 0x84}, {&(0x7f00000008c0)=""/30, 0x1e}, {&(0x7f0000000900)=""/147, 0x93}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b80)}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f0000002880)=[{&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000cc0)=""/119, 0x77}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x3, &(0x7f00000028c0)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002a00)=""/59, 0x3b}, {&(0x7f0000002a40)=""/60, 0x3c}], 0x2, &(0x7f0000002ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000002b80)=""/60, 0x3c}, {&(0x7f0000002bc0)=""/183, 0xb7}, {&(0x7f0000000840)=""/44, 0x2c}, {&(0x7f0000002cc0)=""/104, 0x68}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x5}}], 0x5, 0x40000102, &(0x7f0000003f00)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd9, &(0x7f00000001c0)=""/217, 0x41100, 0x8}, 0x94) connect$packet(r0, &(0x7f0000000780)={0x11, 0x6, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="60020000", @ANYRES16=r5, @ANYBLOB="00012dbd7000fbdbdf2501000000040003001c000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="240001800800030003000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="040003000400020700000000000000000200000008000100", @ANYRES32=r3, @ANYBLOB="08000300010000005001028044000180080001000200000008000100010000000800010006000000080001000400000008000100000000000800010000000000080001000400000008000100060000002c000180080001000600000008000100adbe8c03080001000800000008000100010000000800010003000000440001800800010007000000080001000100000008000100080000000800010005000000080001000ad844180800010005000000080001000300000008000100010000003c00018008000100010000000800010008000000080001000800000008000100070000000800010008000000080001000500000008000100000000001c00018008000100070000000800010005000000080001000300000014000180080001000300000008000100040000002c00018008000100050000000800010004000000080001000600000008000100030000000800010007000000940002800c00018008000100070000000c00018008000100030000001c0001800800010007000000080001000600000008000100050000001c00018008000100050000000800010006000000080001000900000014000180080001000000000008000100010000002c00018008000100050000000800010008000000080001000300000008000100020000000800010002000000"], 0x260}, 0x1, 0x0, 0x0, 0x4010}, 0x20006884) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r4, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x93) syz_emit_ethernet(0x116, &(0x7f0000000d40)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0x7}, {}, {0x3, 0x0, 0x1}, {0x3ff}, {0x573, 0x0, 0x1}, {0x148, 0x0, 0x1}, {0xd, 0x0, 0x1}], @ipv4=@generic={{0x16, 0x4, 0x1, 0x18, 0xec, 0x64, 0x0, 0x9, 0x2e, 0x0, @rand_addr=0x64010101, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x8, [{@private=0xa010101, 0xfff}, {@rand_addr=0x64010102, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xf4, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x400}]}, @rr={0x7, 0xf, 0x50, [@local, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "88345093f9a7abec456ae61380abf4bc2c18a6a96c6d7ccb8936dbf233275bef66261d465f9b0983f1b06355d7e493ca978281b09ee65a92bd786a5cb6d2aa2d7fe3c8cf94cc0ada6ebde61bb5301baa16b0827b8ad4eb40fe5328e3cd18d5d716e1cd9f0297d6ed92c39a3020c5c93ff55e6a0c84e03c2ac0a5346a2fb8ba8b863b0f50558f2cd38874ad810606bc82dbfac2f0"}}}}}, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 4m33.680424304s ago: executing program 4 (id=2924): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x1) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000301010b00"], 0x24}}, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008eba, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000140)=""/53, 0x35}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x83, 0x7}, 0x4) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1e000000000000000000000000000048f6fa2c1aeb17f9bd883440b70ce57ab6d2f93a5ab83116b701b8344b8df1f2a081e514cead9fcebf1b2d0fec2135be4294e5938abf60d9b00bd183421e9a83015f5d85a83f309821e8cf6ea701a7b102a34cc86719154a64ce880365", @ANYBLOB="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", @ANYRES16=r9, @ANYRES8=r5, @ANYRES32=r6, @ANYRES64=r6], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000006000000000000004300000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 4m33.122335001s ago: executing program 4 (id=2931): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @remote}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x23e0, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x23b4, 0x2, [@TCA_U32_POLICE={0x14, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_U32_MARK={0x10, 0xa, {0x83e1, 0xf6a0}}, @TCA_U32_HASH={0x8, 0x2, 0x10001}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff2, 0x3}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_ACT={0x1790, 0x7, [@m_tunnel_key={0x103c, 0xf, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x168, 0x17, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0xa, 0xe, 0x4d3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1a30, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x0, 0x5, 0x1, 0x94}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x724, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xafe, 0x9, 0x2, 0x200, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7, 0x0, 0x7, 0x3}}]}, {0xc3, 0x6, "ab9853aae79474697dccef53bf596b0dbd68bc3cb88932d8bd29509e8c0e16c4362084ac6484c9fe7cabd42e53304b9eef0f161d2d39ad286ed6c9b62228c5161df3dd95b93f6477d19812d46c87e1a397341e8ff0a4262b3bec676f5f7a25bc110b6ff91a59c634c1d9cbf74e280419c250c3c85c9be748e46b5fdbcfaf6e530f495c6e14777f29ef9bc7986de9720b32b09df90ad0f6a0dd82ea3373b018269caf6b9e06c2687b5dab79bd5829f17c45ae3b3dfb9795f3e4e86b6e9ede26"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x70, 0x14, 0x0, 0x0, {{0x7}, {0x4}, {0x45, 0x6, "b51a889760398d26543ce18d9528f383ad6c0b2c495b8cbe54fc4796f7c9b1f121de0837473f5f591728bfbbac624822aac1b720de1da4b39d10516608c23a207f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x238, 0x1d, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x20000000, 0x0, 0x1}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x74b1, 0x3ff, 0x8, 0x6, 0x7}, 0x8d84f0aabf6b5897, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x5, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x20000000, 0xd9, 0x53}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2a76, 0x400, 0x20000000, 0x0, 0x5}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbb, 0xa9, 0x1, 0x5e3}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x0, 0x4}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x10000000, 0x2, 0x7b}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x465, 0x6, 0x7, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x427, 0x6, 0x4, 0x7, 0x2e3ffb28}, 0x4, r4}}]}, {0xcb, 0x6, "61f08bc33447a5630a45f6a02e7da05094b802891f3dfb1d466f5f88da629727b3455180e83ca5a85bc719f645b78779738209dc06810f554ceca2756f7935be10188680ffd805456055d8085a7f7adf4fb9430fa81da7f9e86e2cbbd79fb90c7f8c8a250971e7254b156cdd258a32459f72ebf0dfd83e9a73d056fb9ee0844b838afe18d97c52ba18f26a6fde58e4c2ac378b892bfdf9ccb45d437a13cbc7a39542d4955a66750e069a265c8453761c59e2d450398014ae316c6a9677a91456211d0e6f2a2430"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x84, 0x3, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x400, 0x1, 0x7, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x81, 0x4, 0xffff, 0x2}}]}, {0x27, 0x6, "6eda333d1c550ce9a80526118f2acb4d58581818e70bcced7e44787d512f3324111fe0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x64, 0x7, 0x0, 0x0, {{0xd}, {0x4}, {0x31, 0x6, "b61d89fd051e6fb77655020b9decbfb3c9e3dce2d207fdf5c30bbb691576957e492879c39261d52392efd057f7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0x58, 0x8, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x22}]}, {0x1e, 0x6, "8a4f30f21194a5b0c9a47c52269e41c5bdd7aa4b2dc0f2407dc6"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x6c, 0xc, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x10000, 0xffffffffffffffff, 0xd, 0x9}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}]}, {0x12, 0x6, "989bbfb80f951c376ad4bda4f1ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0xe8, 0x10, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xb, 0x4, 0x0, 0xffff61e3}, 0x4}}, @TCA_MPLS_TTL={0x5}]}, {0x95, 0x6, "0c2225a5b53befecad4c1df678a6ec3e488f995d068028fa664e7884b1c73c6f847d02aa14cf6e46a38c7d8895ba148f6b4dd3d51330ab3f836335d1ea61c775ed01ab9b7b476ca65cd9d653face0535568d351b93bbb654d1e634a7a4b5023110254461046ed0684ab195b34e179e26bac986a54648fa348cc587a55f0f1c55631d734bafd29ec3670d1067ad341f75a1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xac, 0x5, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x40, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4ceb}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x38, 0x6, "f5ddab512fb0689f041e102ccd5bc4c5d0ece3f684862ffb961e38a7228bec5fc24208533485ef921a28c525cb785eb8f17e871c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_POLICE={0xa4, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x815e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x4, 0x9, 0x70, {0x75, 0x0, 0x1, 0xffff, 0x40, 0xffffffff}, {0x0, 0x1, 0x9, 0x80, 0x5, 0x2}, 0x401, 0x0, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x5, 0x8000, 0x8, {0x9, 0x1, 0x5, 0x5, 0x1, 0x56}, {0xf9, 0x1, 0x3, 0x25d, 0x7}, 0x5, 0x4, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_SEL={0x6d4, 0x5, {0x0, 0xe, 0x78, 0x2, 0x2, 0x6, 0x0, 0xa5e, [{0x5, 0x1, 0x2}, {0x9, 0x8, 0x8000}, {0xff, 0x4, 0x499, 0x8}, {0x101, 0x5, 0x7, 0x1}, {0x0, 0x7, 0x2, 0x1}, {0x7ff, 0x80000000, 0xe, 0x1}, {0x1, 0x0, 0xcc, 0x5}, {0x6e, 0xfffffff6, 0x400, 0x4}, {0x3, 0x0, 0x9, 0x6}, {0x5, 0x63, 0x6, 0x6}, {0x1, 0xfffffffd, 0xfffffff7, 0x6}, {0x0, 0xcdd, 0x6, 0x2}, {0x83, 0x9, 0x7f000, 0x10a}, {0x2, 0x2, 0x2, 0x3}, {0x9, 0x3e6, 0x5, 0x10}, {0x7, 0x7, 0x2, 0xfffffffd}, {0x401, 0xe463, 0x2b0, 0x3}, {0x0, 0x1, 0x7f, 0x7}, {0x80000001, 0x6, 0xb, 0x7}, {0x101, 0x5, 0x59a, 0xffff}, {0x1, 0x21, 0x3, 0x200}, {0x1, 0xffffff18, 0x2c, 0xd50}, {0x8, 0x4, 0x4, 0x4}, {0x6f42, 0xf, 0x5, 0xffffffff}, {0x0, 0x8000, 0x4b, 0x6}, {0x7fc0000, 0x9, 0xf7f6, 0x1}, {0xac, 0x4d2, 0x6, 0x4}, {0x4, 0x6, 0x28, 0x7fff}, {0x62, 0xffffffff, 0x0, 0x9}, {0x101, 0x5, 0x728e}, {0xfff, 0xe, 0x1, 0xfffffff2}, {0x0, 0x9, 0x800, 0x9}, {0x3, 0x3, 0xbd46, 0x7}, {0x2, 0x0, 0x5, 0x63aadff2}, {0x7, 0x800, 0x1f33, 0x2}, {0x6b, 0x9b, 0x3, 0xc0}, {0x0, 0x7, 0x10000, 0x2}, {0x3, 0x5, 0x0, 0x7fff}, {0x7, 0xfb7b, 0x1ff, 0xf734}, {0x7, 0x7fff, 0xffffffff}, {0xc0d1, 0x1, 0xfffffff9, 0xa4}, {0x4, 0x6, 0xe3, 0x2}, {0x1, 0xe0, 0x302}, {0x401, 0x0, 0x1, 0x3}, {0x3ff, 0x9, 0x400, 0x59}, {0x1, 0x800, 0x6, 0x9d01}, {0x3, 0x5, 0x2, 0x7}, {0x7, 0x0, 0xfffffc01, 0x8}, {0x12d0939b, 0x7f, 0x1, 0xe1c}, {0x3d30, 0x7, 0x401, 0x40}, {0x7c30, 0x0, 0x9, 0xd1a1}, {0x0, 0xff, 0xff, 0x4}, {0x4, 0xafd3, 0xd, 0x9}, {0x1d7, 0x1, 0xbec, 0x2}, {0x2df6, 0x9, 0x0, 0x7fffffff}, {0x10000, 0x2, 0x9, 0x2}, {0x1028, 0x0, 0x800, 0x3}, {0xffff, 0x9, 0xfffffff7, 0x8}, {0x9, 0x7, 0xffffffff, 0xfffff800}, {0xffff6857, 0x8, 0x1, 0x400}, {0x9, 0x47c9, 0x4, 0x1}, {0xffff, 0x10001, 0x0, 0x80}, {0x16, 0x25, 0x2, 0x39c6}, {0xc36f, 0xf4, 0x8, 0xffb3}, {0x4, 0x8, 0x40, 0x8}, {0x6, 0x6, 0x6d6, 0x80000000}, {0x5, 0xfff, 0x6d4a, 0x5}, {0x7, 0x4, 0x34, 0x6}, {0x4, 0x7, 0x5, 0x7}, {0x994, 0xb, 0x2, 0x9330}, {0x7, 0x6, 0xe, 0x40db}, {0x5, 0x1, 0xfffffff0, 0x5}, {0x62cd, 0x3, 0x0, 0xfff}, {0x800, 0x9, 0xb7b4, 0x800}, {0x10, 0x8, 0xffff0f87, 0x2}, {0x1ff, 0x5, 0x0, 0x9}, {0x3, 0x100, 0x3, 0x53}, {0x3, 0x3, 0x2e9, 0x3}, {0x3dfd, 0x5, 0x1, 0x7}, {0x80000000, 0x5, 0x68}, {0x3, 0x3, 0x5, 0x8}, {0xfffffe01, 0x4d5, 0x4e, 0x10}, {0xff, 0x6, 0x2, 0x2}, {0x2, 0x200, 0x3}, {0x0, 0x5, 0x1, 0x3}, {0x8, 0x43e, 0x2, 0xc0}, {0x7, 0xee9b, 0xc, 0x10000}, {0x4, 0xc3, 0x0, 0xf28d}, {0x1, 0x3, 0x9, 0x4}, {0x3, 0xe8ef, 0x9, 0x2}, {0x0, 0xb751, 0x9, 0x7}, {0x80000001, 0x9, 0x4, 0x5}, {0xffff46fb, 0x4, 0x3, 0x7}, {0x4, 0x6, 0x7fffffff, 0x2}, {0xd, 0x0, 0x7ff, 0x6}, {0x9, 0x5, 0x9, 0x1}, {0x3c, 0x1, 0xd03e, 0x2}, {0xb, 0x3, 0xc, 0x7}, {0xff, 0x9, 0x7f}, {0x1, 0xf7, 0x4001, 0xfffffbff}, {0x80, 0x400, 0x7, 0xfffffe00}, {0x80000001, 0x10000, 0x3ff, 0x8}, {0xfffff077, 0x9, 0x3f0}, {0x1, 0xffff0000, 0x0, 0xf}, {0x875, 0x5, 0x22c, 0x1}, {0x9, 0xea, 0x5, 0x6}, {0x38c, 0x101, 0x312f, 0x3}, {0x8, 0x0, 0xfffffffc, 0x4}]}}, @TCA_U32_POLICE={0x460, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x2, 0x1, 0xa, 0x6, 0x6, 0x8, 0x4, 0x88, 0x25, 0x4, 0x3, 0x1ff, 0x2, 0xffff8000, 0x18000, 0x7, 0x4, 0x7, 0x9a, 0x1, 0xcba8, 0x9, 0x3, 0x2, 0x80, 0x6, 0x6, 0x80000000, 0x8ff, 0x8, 0x1, 0xf, 0x2, 0xcd0f, 0x7, 0x3, 0x400, 0xe9, 0x7, 0x800, 0x6, 0xad357db, 0x4, 0x7, 0xff, 0x6, 0x1000, 0x8c18, 0x7, 0x9, 0x800, 0x4d9c, 0x7, 0x7, 0xcc8, 0xb, 0x1, 0x8, 0x3, 0x81, 0x8b2, 0xf, 0xffffffff, 0xbc, 0x9, 0xaa, 0x8, 0x5, 0x3, 0xb, 0x9, 0xa, 0xb798, 0x7, 0xa626, 0x6, 0x6, 0x9, 0x10ac, 0x1, 0xba7, 0x4, 0x9, 0x3, 0x800, 0x5, 0x8, 0x6, 0xa0, 0x5, 0x1, 0x10000, 0x401, 0xd0, 0x9, 0x4, 0x7, 0x7, 0x2, 0x35e9ad16, 0x6, 0x7f, 0xffffffff, 0x6, 0x1, 0xff, 0x6, 0x3b9f0000, 0x7f, 0xd, 0xb4, 0x3, 0x9, 0x0, 0x6, 0x6, 0x6, 0x401, 0x4, 0x7, 0xfffffb3b, 0x7, 0x6, 0x4, 0x8, 0x1, 0x89d, 0x101, 0x8, 0xede5, 0x7fff, 0x7, 0x5, 0x58c3, 0xaf77, 0x3, 0xd, 0x9, 0x401, 0x9, 0x4, 0xffffff81, 0xb, 0x0, 0xc, 0x0, 0x2, 0xfff, 0x1, 0x6, 0x7, 0x5, 0x8, 0x1ff, 0xffff643b, 0x4, 0x851a, 0x7f, 0x3c, 0x0, 0x1, 0x7ff, 0x3, 0x7, 0x7fff, 0x835c, 0xadc9, 0xffffff00, 0x3, 0x2, 0xa84, 0x9, 0x8, 0xf07f, 0xc, 0x0, 0x4, 0xcc, 0xfffffff8, 0x3, 0xc, 0x8000, 0x220, 0x800, 0x4c, 0x5, 0xb, 0x8, 0xe, 0x3, 0xfffffff8, 0x3, 0x5, 0x5, 0x41, 0x40, 0xff, 0x4, 0x9, 0x7ff, 0x4, 0xe, 0x2b0, 0x40, 0x8, 0x800, 0x0, 0x1, 0x5, 0x7fff, 0x7, 0xffffff49, 0x5, 0x8f, 0x7, 0x1, 0x6, 0x209, 0x7c4, 0x9, 0x0, 0xe, 0x1, 0x1, 0x4, 0x2, 0xffff, 0x0, 0x6, 0x2, 0xb, 0x0, 0xc, 0x101, 0xfffffff7, 0x1, 0xfffff82a, 0x7, 0x0, 0x81, 0xb, 0xb, 0x3, 0x8c38, 0x800, 0x800, 0x3, 0x10, 0x2, 0x644, 0x58, 0x7fff, 0x2, 0x2, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x73, 0x20000000, 0x5, 0x2, 0xf, {0x4, 0x1, 0x800, 0x2, 0x55, 0x3}, {0xb, 0x0, 0x3, 0x9, 0x6, 0x1}, 0x7, 0xfffffffe, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]}]}}]}, 0x23e0}, 0x1, 0x0, 0x0, 0x240088c0}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m29.084604397s ago: executing program 4 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) 4m13.957534159s ago: executing program 32 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x0) 2m31.439623888s ago: executing program 5 (id=4531): unshare(0x20040600) r0 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fe00000000000000fd000000850000002f000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00ec000000000000b705000700000000000009000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES64=0x0], 0x0, 0x34, 0x0, 0xfffffffd, 0x4000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 2m31.264099493s ago: executing program 5 (id=4536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xa9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076804268c989e14f088a8", 0x0, 0x40500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) 2m31.004760376s ago: executing program 5 (id=4541): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00b0ff00bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000002700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.882771224s ago: executing program 5 (id=4543): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000", 0xb, 0x1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff18, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r4, 0x7800, 0x0, 0x4, 0x57, {{0x32, 0x4, 0x2, 0xd, 0xc8, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp={0x44, 0x24, 0xd4, 0x0, 0x4, [0x3821, 0x7, 0x9, 0x6, 0x0, 0x0, 0x2, 0x8]}, @timestamp={0x44, 0x18, 0xd, 0x0, 0xb, [0xe041, 0xfffffffe, 0x80, 0xdcc, 0x5]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x7, 0x9, "592e82c72ded61"}, {0x2, 0xd, "ce007734f4ad5b7e562fd8"}, {0x6, 0x6, "e46a38b4"}, {0x5, 0x6, "cd73ad14"}, {0x5, 0x2}, {0x2, 0x3, 'r'}, {0x5, 0x10, "884876c4a5e284ad49eb32c913d7"}]}, @ssrr={0x89, 0x1b, 0x72, [@local, @broadcast, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xd5, [@remote, @multicast2, @local]}, @timestamp={0x44, 0x10, 0x74, 0x0, 0xc, [0x100, 0x4159, 0x0]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@initdev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r8, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}]}, 0x50}}, 0x4040880) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1bd}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 2m30.331070309s ago: executing program 5 (id=4548): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000000)) 2m29.582339316s ago: executing program 5 (id=4556): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_channels={0x3d, 0xfffffffc, 0xa000, 0x0, 0x7, 0x0, 0x2, 0x6}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 2m14.494551739s ago: executing program 33 (id=4556): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_channels={0x3d, 0xfffffffc, 0xa000, 0x0, 0x7, 0x0, 0x2, 0x6}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/50], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 43.775591278s ago: executing program 6 (id=5983): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x5, 0x4) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40842}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0xfffffffffffffe91) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000008d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="26000000000000000000000077f16b8d7dea819d5e64bc", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$inet_buf(r5, 0x0, 0x25, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000001abf278d99f3c4d821000000000d00000085000000530000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) close(0x3) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f, 0xb, 0x0, &(0x7f0000000140)="9cb9f7d812b13ef4463594", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 43.532909538s ago: executing program 6 (id=5986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000014f8000000200002000a00000000000300ff020000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x8810) 43.220556889s ago: executing program 6 (id=5991): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0xffffff90, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 43.107333627s ago: executing program 6 (id=5993): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000180000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) 42.943664915s ago: executing program 6 (id=5996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x75) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$rds(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4041814}, 0x24048044) 42.755862557s ago: executing program 6 (id=5997): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0xfffffffb, 0x6, 0x2, 0x100, 0x3, 0x2000021}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff9d9c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c8c1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x6c, 0x16, 0x10, 0x70bd27, 0x25dfdbfe, {0xa, 0x18, 0x2a, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x6, 0x8000, 0x80000000}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10) 27.532838377s ago: executing program 34 (id=5997): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0xfffffffb, 0x6, 0x2, 0x100, 0x3, 0x2000021}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff9d9c}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c8c1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x6c, 0x16, 0x10, 0x70bd27, 0x25dfdbfe, {0xa, 0x18, 0x2a, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x6, 0x8000, 0x80000000}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10) 3.606569491s ago: executing program 1 (id=6482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r8, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0xffffff43}, {&(0x7f0000000540)=""/117, 0x75}], 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.104686436s ago: executing program 1 (id=6494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001811b0ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.925369947s ago: executing program 1 (id=6499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x75) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$rds(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/85, 0x55}], 0x1, 0x0, 0x0, 0x4041814}, 0x24048044) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) 2.784613124s ago: executing program 1 (id=6501): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}], 0x2, 0x6e, &(0x7f00000001c0), 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x75) socket(0x8, 0x6, 0x291) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$rds(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xfffffdc3}, {&(0x7f00000001c0)=""/85, 0x55}], 0x2, 0x0, 0x0, 0x4041814}, 0x24048044) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000000)=0x1021, 0x4) close(r0) 2.23073778s ago: executing program 7 (id=6506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000001f0000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) 2.028083165s ago: executing program 0 (id=6509): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 2.020694362s ago: executing program 7 (id=6510): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100040004000007010000f8ffffffb702000008000000b7030000100b0000850000002700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.828062549s ago: executing program 7 (id=6512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="ecb967ca6c20d948bb8151fc448462dd74626805b845df3d60799ef600f8be998e85058d44e5f6ecf5231629965dc9bd11f60aed000370bc108940442f43fce8f60ea15467f1e764891ff25efd7f84e51845bbd15b2c195ef3f4e6f09ac4e030cc88", 0x62}, {&(0x7f0000000280)="94087629b9f2e4b61d7e6356936fe2a15f7c7b6c44e1b72ea28913899f8190eda1fd8bc17401aa170a312394489fac5da9d82ba5bc3ffc1e7af6140d3da0733e70ac2698d35a1b3abe9fe1dc1c68a4f5f675f9d985cb582458006aadcade2ada1fb3cd640dd450bc439f73516984b81617ee4fe9a38399e7bcf8fca0b6450c248566b2bd3760b08f032fe0314699a17047650bb8e6f8caa11b681df179f32a32", 0xa0}, {&(0x7f0000000340)="2df538d7597de068fed41ccdd6b9192d1d8c0d07da1451f497772169a5707f783ab7d6b0a475445bb6f2357a87599dbba12b049ef3", 0x35}, {&(0x7f0000000580)="58fd826d17834f065e9cdd4fd779813f6196f53a25bcb2028745a8d1a66fd07eb9cab828a517ec3469d266de65e0754bcbe8ab6a1cf4fb5692beacd27056d62ceb209753d7deb11f6124cccd462c015137c9bce490da267af80b305dc93020fe4ffc7dfada4579290641082dafb29861e47a778f707cae3cc85a78b2ef42e2642176ea5a84a79996c338b3393a32afe9b31556e93eea00400e289deb34c1623070bc6658e9e6b2ae4b7abf", 0xab}, {&(0x7f0000000640)="8c4d29373767b752aa", 0x9}, {&(0x7f0000000680)="2ed812c0f7de46c030cf2370a9bb2b18ccee1c6396faf756800a146f765215791f0bce4e83777abe163bdbdf2ca8d17e05a432d90b6f324d4cb36556aa0647e524450ce791ce632df154769dd7bbedff14358b0062c8522ae9511d", 0x5b}, {&(0x7f0000000700)="68c3", 0x2}, {&(0x7f0000000740)="c4db6ef8c960615bfe046d84d842ec55094c44e021d0716e84554dae07c867d7237a03d0d175f04f12e1f07aa8e843303a13e723f60d9757489bc2a8a169fc114214f75fd91d24d6773eb099ea692edc4d1638430aced827f4a46d1eed31a2f190e365ea3d05182379f2d7f5bb3f2fcf6da639f791588cba012306dba4efe1dbc345398934a6438b3b76c2b410d3b4f565e5f6781069c301c212586b8b77deb2fb1d9a8acaab75d76378421d11776896b1a1d3fbae6426c699698340f670f1461dcd44c5d5", 0xc5}, {&(0x7f0000000840)="c73cdb60e9c9db4f6dc1d5e0ff772d52ca2e154b5417ed612ad5ab2678597039cb09683ea796b3493c", 0x29}], 0x9, &(0x7f0000000940)=[{0x60, 0x1, 0x72, "f41e544146551b7a733f2af7a09a031ba52cda431496371b742c21f992df1d01a7fde4bc018a75e2edfd8f0484b86ddd1b7e30f6054cfd49eccd821b7e46dcb0b1e66ce5a664251aa64ef95f86f14075"}], 0x60}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000001400128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14001300", @ANYRES16=r1, @ANYBLOB="210329bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) 1.32908961s ago: executing program 1 (id=6515): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0xffffff54) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.numa_stat\x00', 0x7a05, 0x1700) close(r1) (async) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "fbb96ba26649d644", "9f6710bc8150e8a1a10600b27caf0002", "8c76287d", "1bae9701b693bea7"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x0, 0x1d0, 0x3c8, 0x2b0, 0x3c8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x400000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'wg0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x912a97ef168388c6, 0xff, 0xffffff00], 'pim6reg0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x4c, 0xff, 0x4, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x4, 0xfe, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x0, 0x1d0, 0x3c8, 0x2b0, 0x3c8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x400000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'wg0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffff00, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0x912a97ef168388c6, 0xff, 0xffffff00], 'pim6reg0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x4c, 0xff, 0x4, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x4, 0xfe, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03a0005) (async) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03a0005) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)=':(\x00', 0x20801, &(0x7f0000000140)={@align=0x2, {0xfff, 0x2, 0x80000001, 0x4}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x2}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)=':(\x00', 0x20801, &(0x7f0000000140)={@align=0x2, {0xfff, 0x2, 0x80000001, 0x4}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x2}) r9 = accept4$phonet_pipe(r8, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x80800) accept4(r9, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000004c0)=0x80, 0x80800) (async) accept4(r9, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000004c0)=0x80, 0x80800) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x24048088}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e00030907000000fedbdfa507000000", @ANYRES8=r3, @ANYBLOB="090104001803000008000a00", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000050) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e00030907000000fedbdfa507000000", @ANYRES8=r3, @ANYBLOB="090104001803000008000a00", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20000050) 1.203669258s ago: executing program 0 (id=6517): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.011311003s ago: executing program 3 (id=6520): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)="f5ebe0f4f369b50f10d9a225803b80ffab92a7a344054baa940a") write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000080)={0x1, 0x2, 0x7fffffff, 0x2, 0x5, 0x1ff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x15c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4844) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x30}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa3a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x830) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xffffffffffff0283}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000600)=0x54, &(0x7f0000000640)=0x2) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040841}, 0x20000080) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000800)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10001}, 0x1c) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000840)) r8 = accept$inet6(r6, &(0x7f0000000940)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000980)=0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000009c0)={0x3, 0x8, 0x3, 0x1, 0x2, 0x81, 0xc0, 0x3, 0xc9, 0x4, 0x2, 0x6, 0x8, 0x1}, 0xe) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x449}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x336}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c1}, 0x40) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r11, 0x408, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf78}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4045) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000d40)={0x2, 0x0, 0xfffffffffffffffe, 0x8, 0xa549, 0x9d21}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x81}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000ec0)={0x0, 0xfffffffffffffcdb, 0x7f, 0x1}) 932.854771ms ago: executing program 2 (id=6521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000200000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021a00000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000007400038070000080080003400000000264000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x124}}, 0x0) 889.067211ms ago: executing program 3 (id=6522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000002000400850000001c000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3000}, 0x94) 887.695496ms ago: executing program 0 (id=6523): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100008004000007010000f8ffffffb702000008000000b7030000100b0000850000002700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 839.786684ms ago: executing program 1 (id=6524): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000015}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/208, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe1b}, 0x78) 839.425535ms ago: executing program 7 (id=6525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001811c0ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 766.589268ms ago: executing program 2 (id=6526): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000000000007110b3000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 749.32266ms ago: executing program 0 (id=6527): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {0x0, 0x0, 0x2}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0xa}, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@mpls_mc={0x8848, {[{0xd4b}, {0x2}, {0x80}], @llc={@snap={0x1, 0x1, "9398", "19dd63", 0xd, "d8569fcc81fd51115eac16f4aa32604c500a1fdd21a40329b877ee833f8e71b978974d6544a32ba37e3f4ba0f7845ca07eb20e8e6bb263fe6d95d7eab1c5e44a840728b83d7a2b8551fef36bd9e84b98bac328b254f6c66f61bec3e91374fc73ab3c0224ec735fbb8d75a7c3c63afb65d004bd6063f9d5c0eaa6974f40eb4ec95370df8734bb460f67c72df79ccfd282b01f21e6dd5049dac7348c978a0da98ff4bc34d2cd2f11a42637e3b457c013ae91da3f9a829ac6cb26e4873ebbde94dabfbe0e1c873c9b47a63941a7259abbe1b7f4191a9383b74a32b77abf3670c3365bc574039b288c5724009e33dd0dc1b69e8c19a2090d0d2753db23e65e613f87696799bfdbe017b012f168f4be5b891f7187e970b45eee247159d2b0734c55f0db2e78f8cec756284fa47a574dad64db301634e98424c288d8ab5866f41d9a24f8ee7af2677447a3c3776b61c75f763f5b84967c3e45872e558b3cefc4385fb91214e9c908a52794396a4b80935199b277d1ac7f5f4dcc0e716ceb52fca1c7b9f240d4a78406fa579519bcb80a0ca8151221edce8a5437374b7c98cac8ed42a7f880059b06aa9c0d02c7b0d73c237b3609e4c9852bf9fb9bf40ff38633102e06a4b6dc06425221853608e26a805d5b317ea99a5383420285a2e2b242504ca4d320a9142a2eed0c46a0c232d5d0624e34fd11cf925c0ea123d47918f6fb21c83f347e0f142a3d622f5f85d885970ee286497c5b044f3750bde098c621a837d92bf67367525625c7191875f5f33679238824144bc70fa7afc6851cc37009f0a4e1b0025cd435b4bbc731db0c21e2c09029cf8c870681d78d2507540d5f0347e54e95fa5018799056e5da6c80e7212584b0c331f20b6d0ccedf0b27ee8a0e050b1149c537f0238af04a4ebc0de2d75842456b00ce4059e80567ed6d036e7def572d1c3bda2a49b5da88363fe871b21386fc6b21335a91cd1afeccc5b1c34b389626730c09b5f88ab489119bd3b9c02e75ff0b61163fff17120b2bce582356ce27afa25e30cf0ec9526a4cd0da4e1122ce54f2428ff17a77c8d37b2d59bde37af243f132e39dc26db2c75bb82d6fb60ed05919731991aff0098814e6c394632be8a1445798e240eb7ff6f62140ecbb6318911f0f8efbd50d6ffad092352b63f9b07e4e9818e6ef9bffd3c7234fa17dcaa7436ecaa565e143dc0fa354c16a822247fa90694b62e699889f167049ccba8d6657d57f6b057767b4c83fad1cf333771560de3b29c0d2c4341e84867f3c3773e13b287eafbb14e512c9f6a7230100717d3a34e6f336b4a18cc8df58cfcacdf42eb2b2b3b7186fd0e43014732eadaa12cc981154ea3bffb961536917464515e4ea0ef81f8b6803c59925f5fceecf5b87e7683fe0089b46f96fa824e7866330ffe33ad1902dba2346019ee6e49aa23c53cac7d5f8dd969c1785cb9b2c0495e05eb0fc27bab70e96bd08a6d74f3e6180e5157410f6795be4d1754091f65044f1bf5d674adfab1c25437021d9a96390386037393a3339bce9e15410bd0268068eb22dae901d2b74f491bfd34ce01a4bc24509dcc17ddecfa344733b957bda587864a89176eb6d9a9a36576838dd91f10494b95ccb3dd1c12a3e80cc3d34a0526d5700397529033867828aba3a47f6892cdc54913e8453e46fd0ac44a402c806c1909a4cc7bbec750d42c6931dedb8d311b342c3ad02cb30a8c6b6be9c945a50d22fc28fca035f5748ce996d7b57a2554b20f634d42f10aff3f40fe7e203dec5289dcc53690e2062834c615d1627560452872c0075abba7670fecf37ddcf564db5c24f35e808526f63b61551914cf050ce778424083070b0994b461942ab08fe8ff5e421d526357973f7dca10ee91aa712196fffc67baebae578adbdf2b3f774b207b42a7bca25b433b2b4d03e17bf4b8080f51fe173bbede1a7591b8b7a50d05a929f234fdb0f8ec0adcd8722590f3d846106ede90fceae86192c4d8a78ca4d551d25d86b5938a7cf9a39515f7260044b1ed64ed28d10f3d4675552de8ae97454d41fc35be3ea35284ce05099666d4b28098b2bb6121ed20f95e1dd0366ba7260770a1843180742985d8ef56cb9888ec7e890a1cbf4c3321b7dec1df3fa93dac82d5c1eb383ea259406bd068f0504de37a5d801395d44d5030f1441b5e6f223f8803adeb32cc42a47542ee3ab0c7c0060815b618ad3445228c40a7e68d7910534b9857d439398747533713c16307b6386775e2301dec27c73e2a00088954c4aa6f653408ff336d200e61694a28c5534c87dce8a225860c1cbb87d4ffc42ac9faa317c1cd9998252abea4d316ac9dcd0b66f06af19c936f45f35ed5e7d739d01fce1c850cc942bf3f1f73b06f7ed0802ae8d56600ca515228824aaf653c879eeb679cd666cfe020484933aa232f8d5abba5db0e0413ab28d799b8775cc73bee5afd19b011623adb80866fe1abb9558be0719d4d65514da3281192acc2a0c0bf5e5c82205cacf2c2bb5a6382665ea83c0b61cbe9ba206685af6414a6209580bc66fd2f29fbc25d25117caa3312e6db903d63b43e7e17f5d6cf1fd13cb77055c4f3023112564ea2a8c20c23185d60b2cdd262bed59ac54438c68851b543ff4f6a30153cbc731224046c8d43fb628de999ed2d2f6c9ec4a6aa6d0cf1ef463f8da0bf718b2b79375c7c377e1090e9ced937b172f55854c4a491c9df2048fdc73c86bc59a91dcd64f42aaeb3cd7fb48981aaf1b6be18fcc7b4e106b9eb42db9ee62bb0a62b7d12a315a49d43df5e80d1314f96fab98aeda27ebe4abddafc61d82c92f3e598100bb51c9733b4622aacfdcb04346b6be8410e4d133d135b4889285e3aedb2df2402f8ebbaaccba6a893f8a105714bb16f593dac201920af916b14e5ed795d5e01a7e8c3b90a6d791e3c876a334d0fafda8b1dbf7e1e7f9a7a798e8e01a7be1538600e9c1f6c980f27f8400932437c0c4dd1a271d460a0ddf25806ae5f40a8249a1dd977ad792258caa5a44d32d49d954042575f74456dd15f59d1b02921f0cb1aaf6b075b1fbffb3c901e0f93a8c52793d8ad7c8f088825f72e62ef2c8349cac9918e5bebf4f0f2e1ac057d64ee324be93bb98cbb58c8b3d609194e3c0a66fac7182024d4ef7823356ba0f232b38d8edda2a8bf32502518df22bbab3be2aecc872475d7997cff90e198ff9527f9f45099ac9f24529a928a4a01d6cddac240f068b183bd8c32a0c3bab769a87913b328dffe545b044cf77b1be52b879c7d1e12283f396df4695ccad2b0f87fa193545b62155311ab52b2e4d5d56875b52056bfc14cc5e930048e613633df1a6e8344fb7a99bda1b430ff34c1c8c8ff579ec5ac58fac4653d2ed4234450f042b9b11c91eeba746f17119dc889502650b42003b78112af7c70e0ff90f4462561fd9cd62f49229541d67ae0eca2bcf5d2f295d9e78dd27b564e9b2ba07367e130b19f322f658ed5c7227456b636e0fb6fbd8a1afecf0b5fbde948acc42653f2a33b5939c3998bceca81e1e1677964f941a1a43eb90804ff24f6b060b6029dfbf35caed807115bd90791789d489eb8c5865181a3121dfea0c9c30658024ec38371cf918069ed306664c4462de39f59ad95692f4f204b7313f8e8582c460bed266b1e8736a8ffdabdf7a8b244493caaed8b63972b74672721ea455fb4ed81c3907caa209c3ef0cf99e916535fc6ea5e821a08215278fe7385785e8fe7a7d8ba79ce70935024f59696e48e5dce659e5946edcc071f1e39c78e3d69848aac0500ba59adb3dfde429ec21d9af07b7a0a72c43719aba21e9f47ceb4ae7e7a18e4e2b638167e9227b920544fb6ef692df87a06307159c3cc3d4ef6833044dd115bdb2e2e444b1f5b31165ac403471a0c1df8041bd52c245462f49329ea41dd1e0787648cfa76dbc281a5718e2d7ed667e4657d1876a6799198afb7c50c926b7ef494263a6483dd8c4dc77b5c229bca2e0b5811bf8c269c47721d553b544c79535f304bd048e6ae1cc2e42246590d70fb68b798624dcd43cddd65a25764a84325d22c30158567e7b521064b7474d7ea0eef58817b3efb1104e0848d161bc7171a7e54070b2dbb5a226752ce99c545faf39cf442064b9ea578642ef49b5ddb28a12686c8f871106271339ce939902c6950817d866f89f473912b0887f2221951a1ade99d32ba5ea72cb85ce982e5adb34bd1ade20dc6dc1afb127d95816e8b12ad8ef8ccbff19deba286b1ae1d94ce1d5661823be25e47f2906dd092dba4f2e80e42436a01a8ab5b6d8708366994cb2e8fcafd6a6722d45e69a50cfbc019591f49dfc5963eb7a8c5ef207e66da395348a26fe003d3b48f729c879d8564a4df6fe081fe0b5d18b5fa25d340e7e71d45b3e2c84881ed7487afa621c21918f6c9c3739954bae50125c46519a67d43cff1e0e1dea7b281a72879f5b3c1c01e7accda28d262da411ccf550e3546e9515c49bab6641be9602a7ceb95958b5ba6e1e18bf6d0b36f509d7237a55312169d4d9214554c04123c8fac94c99855772e894509fb1421ea308016337460b4e19e4571d04c002ff395640cc7a5903dd54802cd459c065b7c62a117010081b96223ef3cf0a0f6c5d688c700bc256a04ff17921f7a22671bebd9a63e26453f2ffe2ddc207ce281168a73ad5ac9faa545bce4e81ed41362713570d5b4fc1799f94cb2bf728707c3d60617887b74f32e26f1a71f0674a48d9e1e582ec3dab3a2e25198abbedb8dd89609d0893d0a6d1a666ac228fa53bb7a3cd57c64504a315ba3403697dd21b7e9067d218b8ac75d04c17b89e63b70d57604e2171574a4b7cd2f2df2ba44fae580e4225677a906d71b8a824dadc59d09f6afec3256d899ae89c7c1a4a452ecf4be6915ad2de130151b05698b4590c7f6817c2997946761b5cfe3c9fc067343e953a5ad292ba11b13f8fdcb0d656c9c5e90073b2150be2f3f085ec79a8dfdb0d2904851b7f1569f653f7644bfff07ee1727cfce57a92971efb2534e8f33fb600b9fed8b65ce19df514db72210472dc21adc1e4934c2547772579ec8a2829b6ab5b1548efc5ce0b00e952f8abb4dc22006008095f7b5741dfbb4dc4496653c6cd626b9707c902164489445cdf69b83cd2dd14297b28bd4aa816550d00f9d577a2eb8d493f840b2b9ef3e5763699fa726f17d8f4524da5169f7db6babb4dd3eedd0c589e8969698113c555283c2c21a257cd38c313b1c61ceda180371af8351b85552889d60b9f67ebb7092e0c86e77d67659695e26d2e24659cb8849397d2672a6ae340dc0b01e6d15779ff244c8e09c165c2df6b9e880af506ae24f27471022f06a8977559e3c53c4ba53f5a98c19e49185ffa8ef3a28fbe28756139252136d2a2b49fc4df43de30a353971c7c44df6842d7a1e1b8bf18e30063f5577922779d24acfb3bd4199fa07a02cd6db6fc82771012db730035df131b7f75369f83e6326dbd7196cf871a98800a3e3d6a5ef5ec3f2128316aac666937882639a1708764e345bb6350d45df5fd71235b81e716aecafee5569bd4cda43e88b0a22ec16befad783a6dda04f44981ecd12cabb41d36b6ed3d2076a714bc41ea6eb3f81ad980e02ed5cca7826ced94072c59a99e70d228237f4f1b10427da6ec0d97895902fbf8cc68ae9a19a4f5b2b37023f74ee0bf8bb805b134564d63a349582ac89b3c61d0a7e846e52ff57caeafd2fecece42a299056bbce2e37eadd8c7c08aa0c690e930aabacc6c07a4e06e7e0d159332a19eea644d190b555e3a2ee0"}}}}}}}, 0x1027) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, r2, 0x2, 0x46, 0x3}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}}, 0x4) 688.658704ms ago: executing program 3 (id=6528): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0xf00, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 686.969375ms ago: executing program 7 (id=6529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000b00)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0xfe19}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r1, 0x588414dba0ab044e, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85df58601495489}, 0x37375dbcb256b55) 686.713512ms ago: executing program 2 (id=6530): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000880), 0x0, 0x20004801) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x61, 0x4}, {0x45, 0x0, 0xfc}, {0x2}, {0x26}]}) 596.190795ms ago: executing program 3 (id=6531): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x5, 0x4) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40842}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0xfffffffffffffe91) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000008d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="26000000000000000000000077f16b8d7dea819d5e64bc", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$inet_buf(r5, 0x0, 0x25, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000001abf278d99f3c4d821000000000d00000085000000530000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) close(0x3) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da000085000000070000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f, 0xb, 0x0, &(0x7f0000000140)="9cb9f7d812b13ef4463594", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 542.388646ms ago: executing program 7 (id=6532): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014000000600000000028"], 0xfdef) 456.311784ms ago: executing program 2 (id=6533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250900000005001300070000000800140016000000055dfe132e6a4fb54df2b70fc5719486e0df"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(r4, 0x0, 0x200000c0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 390.073634ms ago: executing program 3 (id=6534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 279.987452ms ago: executing program 2 (id=6535): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4040840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 100.057333ms ago: executing program 0 (id=6536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000070000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x36, 0x0, &(0x7f0000000240)="e027429b49dcd4ff9782762f86dd21e91717c73f9ae529df2043ca50862bc9797b8fff68c17bd529bf996f5e3acc9c39914d6afb75cd", 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.108051ms ago: executing program 3 (id=6537): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x6, 0x0, 0x100, 0x4, 0x500000, r3}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2ea}], &(0x7f0000000100)='syzkaller\x00', 0x1ff, 0x2f, &(0x7f0000000180)=""/47, 0x40f00, 0x25, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xaa9}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwritev(r2, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB, @ANYRES32=r4], 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002f00090027010000fbdbdf25040000000c000c00400000"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffff8, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) 20.132729ms ago: executing program 2 (id=6538): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r3) write(r1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xbc}}, 0x84) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=6539): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000002000400850000001c000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4000}, 0x94) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.2.5566'. [ 632.567983][T24049] veth0_vlan: entered promiscuous mode [ 632.633011][T24049] veth1_vlan: entered promiscuous mode [ 632.705866][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5569'. [ 632.789016][T24049] veth0_macvtap: entered promiscuous mode [ 632.826396][T24564] netlink: 'syz.0.5570': attribute type 30 has an invalid length. [ 632.828773][T24049] veth1_macvtap: entered promiscuous mode [ 632.879866][T24564] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 632.903212][T24049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.963217][T24049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.014373][ T6265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.048435][ T6265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.097942][ T6265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.123039][ T6265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.299292][T24589] netlink: 'syz.2.5577': attribute type 12 has an invalid length. [ 633.439739][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.459969][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.568518][T20873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.569136][T24593] netlink: 'syz.6.5581': attribute type 2 has an invalid length. [ 633.584606][T20873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.635197][T24593] : entered promiscuous mode [ 633.665354][T24598] vlan3: entered allmulticast mode [ 633.674104][T24598] bridge0: port 3(vlan3) entered blocking state [ 633.681097][T24598] bridge0: port 3(vlan3) entered disabled state [ 633.695014][T24598] vlan3: entered promiscuous mode [ 633.729611][T24596] lo speed is unknown, defaulting to 1000 [ 633.747937][T24596] lo speed is unknown, defaulting to 1000 [ 633.781313][T24596] lo speed is unknown, defaulting to 1000 [ 633.801856][T24596] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 633.823891][T24596] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 633.875794][T24596] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 633.936916][T24596] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 634.136711][T24622] netlink: 'syz.6.5589': attribute type 12 has an invalid length. [ 634.152986][T24596] lo speed is unknown, defaulting to 1000 [ 634.164077][T24596] lo speed is unknown, defaulting to 1000 [ 634.182702][T24596] lo speed is unknown, defaulting to 1000 [ 634.195047][T24596] lo speed is unknown, defaulting to 1000 [ 634.232316][T24596] lo speed is unknown, defaulting to 1000 [ 634.264847][T24596] lo speed is unknown, defaulting to 1000 [ 634.283606][T24596] lo speed is unknown, defaulting to 1000 [ 634.304998][T24596] lo speed is unknown, defaulting to 1000 [ 634.319967][T24596] lo speed is unknown, defaulting to 1000 [ 634.511884][T24635] xt_hashlimit: size too large, truncated to 1048576 [ 634.514325][T24638] xt_hashlimit: size too large, truncated to 1048576 [ 634.835261][T24650] tipc: Enabling of bearer rejected, already enabled [ 634.917545][T24652] netlink: 'syz.1.5602': attribute type 12 has an invalid length. [ 635.002412][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5605'. [ 635.166771][T24666] netlink: 'syz.6.5609': attribute type 12 has an invalid length. [ 635.248359][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5609'. [ 635.455374][T24679] tipc: Enabling of bearer rejected, already enabled [ 635.671381][T24694] xt_hashlimit: size too large, truncated to 1048576 [ 635.686270][T24696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'. [ 636.078585][T24712] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 636.237300][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5630'. [ 636.499045][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5633'. [ 636.954371][T24756] siw: device registration error -23 [ 637.118038][T24773] IPv6: addrconf: prefix option has invalid lifetime [ 637.133938][T24775] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.204065][T24779] tipc: Started in network mode [ 637.217341][T24779] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 637.251502][T24779] tipc: Enabled bearer , priority 10 [ 637.527361][T24799] tipc: Failed to remove unknown binding: 66,0,0/4269801492:3839209432/3839209434 [ 637.570573][T24799] tipc: Failed to remove unknown binding: 66,0,0/4269801492:3839209432/3839209433 [ 637.582588][T24803] netlink: 'syz.0.5660': attribute type 2 has an invalid length. [ 637.590350][T24799] tipc: Failed to remove unknown binding: 66,0,0/4269801492:3839209432/3839209434 [ 637.591481][T24807] netlink: 'syz.3.5661': attribute type 12 has an invalid length. [ 637.608778][T24799] tipc: Failed to remove unknown binding: 66,0,0/4269801492:3839209432/3839209433 [ 637.634054][T24809] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.686354][T24803] : entered promiscuous mode [ 637.715990][T24813] FAULT_INJECTION: forcing a failure. [ 637.715990][T24813] name failslab, interval 1, probability 0, space 0, times 0 [ 637.751466][T24813] CPU: 1 UID: 0 PID: 24813 Comm: syz.6.5663 Not tainted syzkaller #0 PREEMPT(full) [ 637.751493][T24813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 637.751503][T24813] Call Trace: [ 637.751511][T24813] [ 637.751519][T24813] dump_stack_lvl+0xe8/0x150 [ 637.751553][T24813] should_fail_ex+0x40c/0x560 [ 637.751580][T24813] should_failslab+0xa8/0x100 [ 637.751609][T24813] __kmalloc_noprof+0xfe/0x720 [ 637.751634][T24813] ? tomoyo_encode+0x2ad/0x570 [ 637.751739][T24813] ? tomoyo_encode+0x2ad/0x570 [ 637.751766][T24813] tomoyo_encode+0x2ad/0x570 [ 637.751792][T24813] tomoyo_realpath_from_path+0x5fa/0x640 [ 637.751823][T24813] ? tomoyo_path_number_perm+0x219/0x5f0 [ 637.751884][T24813] tomoyo_path_number_perm+0x246/0x5f0 [ 637.751912][T24813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 637.751937][T24813] ? __lock_acquire+0x683/0x2cf0 [ 637.751976][T24813] ? hook_file_ioctl+0x1f0/0x5f0 [ 637.752074][T24813] ? __fget_files+0x2a/0x420 [ 637.752101][T24813] ? __fget_files+0x2a/0x420 [ 637.752123][T24813] ? __fget_files+0x3a2/0x420 [ 637.752145][T24813] ? __fget_files+0x2a/0x420 [ 637.752180][T24813] security_file_ioctl+0xc3/0x2a0 [ 637.752229][T24813] __se_sys_ioctl+0x47/0x170 [ 637.752248][T24813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.752270][T24813] do_syscall_64+0x174/0x580 [ 637.752297][T24813] ? trace_irq_disable+0x3b/0x140 [ 637.752320][T24813] ? clear_bhb_loop+0x40/0x90 [ 637.752343][T24813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.752362][T24813] RIP: 0033:0x7faf1f39de99 [ 637.752380][T24813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.752397][T24813] RSP: 002b:00007faf20315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.752416][T24813] RAX: ffffffffffffffda RBX: 00007faf1f625fa0 RCX: 00007faf1f39de99 [ 637.752429][T24813] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004 [ 637.752441][T24813] RBP: 00007faf20315090 R08: 0000000000000000 R09: 0000000000000000 [ 637.752452][T24813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.752463][T24813] R13: 00007faf1f626038 R14: 00007faf1f625fa0 R15: 00007ffd3015afd8 [ 637.752496][T24813] [ 637.752535][T24813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 638.099292][T24821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5666'. [ 638.185653][T24821] vlan5: entered allmulticast mode [ 638.201112][T24821] bridge3: entered allmulticast mode [ 638.253930][ T7206] tipc: Node number set to 4269801492 [ 638.345931][T24839] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5673'. [ 638.439523][T24845] bridge0: port 1(vlan2) entered blocking state [ 638.456172][T24845] bridge0: port 1(vlan2) entered disabled state [ 638.474356][T24845] vlan2: entered allmulticast mode [ 638.484300][T24845] geneve0: entered allmulticast mode [ 638.501111][T24845] vlan2: entered promiscuous mode [ 638.509764][T24845] geneve0: entered promiscuous mode [ 638.528532][T24844] lo speed is unknown, defaulting to 1000 [ 638.624498][T24852] syzkaller0: entered promiscuous mode [ 638.630246][T24852] syzkaller0: entered allmulticast mode [ 638.676534][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 639.179181][T24875] FAULT_INJECTION: forcing a failure. [ 639.179181][T24875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.257514][T24875] CPU: 1 UID: 0 PID: 24875 Comm: syz.2.5686 Not tainted syzkaller #0 PREEMPT(full) [ 639.257541][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.257552][T24875] Call Trace: [ 639.257559][T24875] [ 639.257567][T24875] dump_stack_lvl+0xe8/0x150 [ 639.257599][T24875] should_fail_ex+0x40c/0x560 [ 639.257626][T24875] _copy_from_user+0x2d/0xb0 [ 639.257654][T24875] inet6_ioctl+0x1ac/0x2e0 [ 639.257776][T24875] ? __pfx_inet6_ioctl+0x10/0x10 [ 639.257791][T24875] ? tomoyo_path_number_perm+0x219/0x5f0 [ 639.257827][T24875] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 639.257852][T24875] sock_do_ioctl+0x101/0x320 [ 639.257877][T24875] ? __pfx_sock_do_ioctl+0x10/0x10 [ 639.257896][T24875] ? hook_file_ioctl+0x1f0/0x5f0 [ 639.257936][T24875] sock_ioctl+0x57a/0x7e0 [ 639.257960][T24875] ? __pfx_sock_ioctl+0x10/0x10 [ 639.257980][T24875] ? __fget_files+0x2a/0x420 [ 639.258003][T24875] ? __fget_files+0x3a2/0x420 [ 639.258033][T24875] ? __fget_files+0x2a/0x420 [ 639.258059][T24875] ? bpf_lsm_file_ioctl+0x9/0x20 [ 639.258096][T24875] ? __pfx_sock_ioctl+0x10/0x10 [ 639.258114][T24875] __se_sys_ioctl+0xfc/0x170 [ 639.258130][T24875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.258151][T24875] do_syscall_64+0x174/0x580 [ 639.258178][T24875] ? trace_irq_disable+0x3b/0x140 [ 639.258201][T24875] ? clear_bhb_loop+0x40/0x90 [ 639.258223][T24875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.258241][T24875] RIP: 0033:0x7f8b25f9de99 [ 639.258258][T24875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.258274][T24875] RSP: 002b:00007f8b26db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.258293][T24875] RAX: ffffffffffffffda RBX: 00007f8b26225fa0 RCX: 00007f8b25f9de99 [ 639.258307][T24875] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004 [ 639.258317][T24875] RBP: 00007f8b26db8090 R08: 0000000000000000 R09: 0000000000000000 [ 639.258327][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.258338][T24875] R13: 00007f8b26226038 R14: 00007f8b26225fa0 R15: 00007ffcdc9fcf58 [ 639.258367][T24875] [ 639.621380][T24885] tipc: Enabling of bearer rejected, already enabled [ 640.200204][T24916] FAULT_INJECTION: forcing a failure. [ 640.200204][T24916] name failslab, interval 1, probability 0, space 0, times 0 [ 640.264615][T24916] CPU: 0 UID: 0 PID: 24916 Comm: syz.6.5702 Not tainted syzkaller #0 PREEMPT(full) [ 640.264638][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 640.264649][T24916] Call Trace: [ 640.264657][T24916] [ 640.264665][T24916] dump_stack_lvl+0xe8/0x150 [ 640.264698][T24916] should_fail_ex+0x40c/0x560 [ 640.264724][T24916] should_failslab+0xa8/0x100 [ 640.264753][T24916] __kmalloc_noprof+0xfe/0x720 [ 640.264785][T24916] ? tomoyo_encode+0x2ad/0x570 [ 640.264802][T24916] ? tomoyo_encode+0x2ad/0x570 [ 640.264824][T24916] tomoyo_encode+0x2ad/0x570 [ 640.264848][T24916] tomoyo_realpath_from_path+0x5fa/0x640 [ 640.264873][T24916] ? tomoyo_path_number_perm+0x219/0x5f0 [ 640.264898][T24916] tomoyo_path_number_perm+0x246/0x5f0 [ 640.264924][T24916] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 640.264948][T24916] ? __lock_acquire+0x683/0x2cf0 [ 640.264984][T24916] ? hook_file_ioctl+0x1f0/0x5f0 [ 640.265031][T24916] ? __fget_files+0x2a/0x420 [ 640.265058][T24916] ? __fget_files+0x2a/0x420 [ 640.265080][T24916] ? __fget_files+0x3a2/0x420 [ 640.265102][T24916] ? __fget_files+0x2a/0x420 [ 640.265129][T24916] security_file_ioctl+0xc3/0x2a0 [ 640.265156][T24916] __se_sys_ioctl+0x47/0x170 [ 640.265174][T24916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.265193][T24916] do_syscall_64+0x174/0x580 [ 640.265219][T24916] ? trace_irq_disable+0x3b/0x140 [ 640.265240][T24916] ? clear_bhb_loop+0x40/0x90 [ 640.265265][T24916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.265283][T24916] RIP: 0033:0x7faf1f39de99 [ 640.265302][T24916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.265318][T24916] RSP: 002b:00007faf20315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.265337][T24916] RAX: ffffffffffffffda RBX: 00007faf1f625fa0 RCX: 00007faf1f39de99 [ 640.265350][T24916] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004 [ 640.265361][T24916] RBP: 00007faf20315090 R08: 0000000000000000 R09: 0000000000000000 [ 640.265380][T24916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.265392][T24916] R13: 00007faf1f626038 R14: 00007faf1f625fa0 R15: 00007ffd3015afd8 [ 640.265424][T24916] [ 640.265442][T24916] ERROR: Out of memory at tomoyo_realpath_from_path. [ 640.479366][T24926] netlink: 'syz.2.5707': attribute type 12 has an invalid length. [ 640.598556][T24926] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 640.874017][T24933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5707'. [ 640.905537][T24949] xt_hashlimit: size too large, truncated to 1048576 [ 640.989066][T24939] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 641.493232][T24968] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 641.706139][T24984] FAULT_INJECTION: forcing a failure. [ 641.706139][T24984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.716904][T24986] tipc: Enabling of bearer rejected, already enabled [ 641.739837][T24984] CPU: 1 UID: 0 PID: 24984 Comm: syz.3.5722 Not tainted syzkaller #0 PREEMPT(full) [ 641.739870][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 641.739880][T24984] Call Trace: [ 641.739887][T24984] [ 641.739894][T24984] dump_stack_lvl+0xe8/0x150 [ 641.739926][T24984] should_fail_ex+0x40c/0x560 [ 641.739950][T24984] _copy_from_user+0x2d/0xb0 [ 641.739974][T24984] inet6_ioctl+0x1ac/0x2e0 [ 641.739999][T24984] ? __pfx_inet6_ioctl+0x10/0x10 [ 641.740013][T24984] ? tomoyo_path_number_perm+0x219/0x5f0 [ 641.740045][T24984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 641.740068][T24984] sock_do_ioctl+0x101/0x320 [ 641.740090][T24984] ? __pfx_sock_do_ioctl+0x10/0x10 [ 641.740106][T24984] ? hook_file_ioctl+0x1f0/0x5f0 [ 641.740143][T24984] sock_ioctl+0x57a/0x7e0 [ 641.740164][T24984] ? __pfx_sock_ioctl+0x10/0x10 [ 641.740182][T24984] ? __fget_files+0x2a/0x420 [ 641.740202][T24984] ? __fget_files+0x3a2/0x420 [ 641.740221][T24984] ? __fget_files+0x2a/0x420 [ 641.740243][T24984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 641.740267][T24984] ? __pfx_sock_ioctl+0x10/0x10 [ 641.740285][T24984] __se_sys_ioctl+0xfc/0x170 [ 641.740301][T24984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.740320][T24984] do_syscall_64+0x174/0x580 [ 641.740343][T24984] ? trace_irq_disable+0x3b/0x140 [ 641.740363][T24984] ? clear_bhb_loop+0x40/0x90 [ 641.740395][T24984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.740411][T24984] RIP: 0033:0x7f80d039de99 [ 641.740427][T24984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.740442][T24984] RSP: 002b:00007f80ce5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.740460][T24984] RAX: ffffffffffffffda RBX: 00007f80d0625fa0 RCX: 00007f80d039de99 [ 641.740472][T24984] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004 [ 641.740482][T24984] RBP: 00007f80ce5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 641.740492][T24984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.740501][T24984] R13: 00007f80d0626038 R14: 00007f80d0625fa0 R15: 00007ffda6077258 [ 641.740528][T24984] [ 641.818839][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 641.975257][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5723'. [ 641.993364][T24988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5726'. [ 642.074965][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 642.084060][T20876] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.097996][T20876] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.121123][T24988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5726'. [ 642.131547][T20876] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.148958][T25000] FAULT_INJECTION: forcing a failure. [ 642.148958][T25000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.171592][T20876] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.172146][T25000] CPU: 1 UID: 0 PID: 25000 Comm: syz.0.5729 Not tainted syzkaller #0 PREEMPT(full) [ 642.172171][T25000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.172182][T25000] Call Trace: [ 642.172189][T25000] [ 642.172197][T25000] dump_stack_lvl+0xe8/0x150 [ 642.172230][T25000] should_fail_ex+0x40c/0x560 [ 642.172256][T25000] _copy_to_user+0x31/0xb0 [ 642.172285][T25000] simple_read_from_buffer+0xe1/0x170 [ 642.172315][T25000] proc_fail_nth_read+0x1bb/0x230 [ 642.172342][T25000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.172370][T25000] ? rw_verify_area+0x24a/0x4c0 [ 642.172399][T25000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.172422][T25000] vfs_read+0x213/0xa80 [ 642.172453][T25000] ? __pfx___mutex_lock+0x10/0x10 [ 642.172481][T25000] ? __pfx_vfs_read+0x10/0x10 [ 642.172509][T25000] ? __fget_files+0x2a/0x420 [ 642.172536][T25000] ? __fget_files+0x3a2/0x420 [ 642.172558][T25000] ? __fget_files+0x2a/0x420 [ 642.172589][T25000] ksys_read+0x150/0x270 [ 642.172618][T25000] ? __pfx_ksys_read+0x10/0x10 [ 642.172652][T25000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.172672][T25000] do_syscall_64+0x174/0x580 [ 642.172697][T25000] ? trace_irq_disable+0x3b/0x140 [ 642.172721][T25000] ? clear_bhb_loop+0x40/0x90 [ 642.172749][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.172767][T25000] RIP: 0033:0x7f3f9915e6ce [ 642.172785][T25000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 642.172801][T25000] RSP: 002b:00007f3f9a01afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.172820][T25000] RAX: ffffffffffffffda RBX: 00007f3f9a01b6c0 RCX: 00007f3f9915e6ce [ 642.172834][T25000] RDX: 000000000000000f RSI: 00007f3f9a01b0a0 RDI: 0000000000000005 [ 642.172845][T25000] RBP: 00007f3f9a01b090 R08: 0000000000000000 R09: 0000000000000000 [ 642.172856][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.172867][T25000] R13: 00007f3f99426038 R14: 00007f3f99425fa0 R15: 00007ffd17a16cf8 [ 642.172897][T25000] [ 642.567857][T25011] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.5733'. [ 643.231573][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5750'. [ 643.654870][T25072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.765453][T25077] tipc: Enabling of bearer rejected, already enabled [ 643.810791][T25079] netlink: 'syz.3.5761': attribute type 1 has an invalid length. [ 643.842619][T25079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5761'. [ 643.918771][T25087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5765'. [ 644.158418][T25099] FAULT_INJECTION: forcing a failure. [ 644.158418][T25099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.179071][T25099] CPU: 1 UID: 0 PID: 25099 Comm: syz.1.5770 Not tainted syzkaller #0 PREEMPT(full) [ 644.179096][T25099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.179106][T25099] Call Trace: [ 644.179114][T25099] [ 644.179130][T25099] dump_stack_lvl+0xe8/0x150 [ 644.179163][T25099] should_fail_ex+0x40c/0x560 [ 644.179191][T25099] _copy_to_user+0x31/0xb0 [ 644.179218][T25099] simple_read_from_buffer+0xe1/0x170 [ 644.179248][T25099] proc_fail_nth_read+0x1bb/0x230 [ 644.179274][T25099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.179300][T25099] ? rw_verify_area+0x24a/0x4c0 [ 644.179329][T25099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.179352][T25099] vfs_read+0x213/0xa80 [ 644.179383][T25099] ? __pfx___mutex_lock+0x10/0x10 [ 644.179412][T25099] ? __pfx_vfs_read+0x10/0x10 [ 644.179438][T25099] ? __fget_files+0x2a/0x420 [ 644.179466][T25099] ? __fget_files+0x3a2/0x420 [ 644.179487][T25099] ? __fget_files+0x2a/0x420 [ 644.179519][T25099] ksys_read+0x150/0x270 [ 644.179548][T25099] ? __pfx_ksys_read+0x10/0x10 [ 644.179573][T25099] ? __pfx_sock_ioctl+0x10/0x10 [ 644.179598][T25099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.179617][T25099] do_syscall_64+0x174/0x580 [ 644.179642][T25099] ? trace_irq_disable+0x3b/0x140 [ 644.179666][T25099] ? clear_bhb_loop+0x40/0x90 [ 644.179689][T25099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.179709][T25099] RIP: 0033:0x7fd7b1f5e6ce [ 644.179727][T25099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.179743][T25099] RSP: 002b:00007fd7b2ef9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.179762][T25099] RAX: ffffffffffffffda RBX: 00007fd7b2efa6c0 RCX: 00007fd7b1f5e6ce [ 644.179776][T25099] RDX: 000000000000000f RSI: 00007fd7b2efa0a0 RDI: 0000000000000005 [ 644.179788][T25099] RBP: 00007fd7b2efa090 R08: 0000000000000000 R09: 0000000000000000 [ 644.179800][T25099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.179810][T25099] R13: 00007fd7b2226038 R14: 00007fd7b2225fa0 R15: 00007ffc9f8b1da8 [ 644.179841][T25099] [ 644.411450][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5771'. [ 644.634752][T25114] netlink: 'syz.3.5778': attribute type 4 has an invalid length. [ 644.665469][T25117] xt_hashlimit: size too large, truncated to 1048576 [ 644.676810][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5778'. [ 645.100270][T25136] lo speed is unknown, defaulting to 1000 [ 645.133943][T25137] lo speed is unknown, defaulting to 1000 [ 645.322295][T25153] FAULT_INJECTION: forcing a failure. [ 645.322295][T25153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.348166][T25153] CPU: 0 UID: 0 PID: 25153 Comm: syz.1.5789 Not tainted syzkaller #0 PREEMPT(full) [ 645.348193][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.348204][T25153] Call Trace: [ 645.348211][T25153] [ 645.348219][T25153] dump_stack_lvl+0xe8/0x150 [ 645.348250][T25153] should_fail_ex+0x40c/0x560 [ 645.348276][T25153] _copy_from_user+0x2d/0xb0 [ 645.348303][T25153] inet6_ioctl+0x1ac/0x2e0 [ 645.348323][T25153] ? __pfx_inet6_ioctl+0x10/0x10 [ 645.348338][T25153] ? tomoyo_path_number_perm+0x219/0x5f0 [ 645.348372][T25153] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 645.348396][T25153] sock_do_ioctl+0x101/0x320 [ 645.348419][T25153] ? __pfx_sock_do_ioctl+0x10/0x10 [ 645.348438][T25153] ? hook_file_ioctl+0x1f0/0x5f0 [ 645.348477][T25153] sock_ioctl+0x57a/0x7e0 [ 645.348497][T25153] ? __pfx_sock_ioctl+0x10/0x10 [ 645.348517][T25153] ? __fget_files+0x2a/0x420 [ 645.348539][T25153] ? __fget_files+0x3a2/0x420 [ 645.348562][T25153] ? __fget_files+0x2a/0x420 [ 645.348586][T25153] ? bpf_lsm_file_ioctl+0x9/0x20 [ 645.348609][T25153] ? __pfx_sock_ioctl+0x10/0x10 [ 645.348627][T25153] __se_sys_ioctl+0xfc/0x170 [ 645.348644][T25153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.348665][T25153] do_syscall_64+0x174/0x580 [ 645.348690][T25153] ? trace_irq_disable+0x3b/0x140 [ 645.348713][T25153] ? clear_bhb_loop+0x40/0x90 [ 645.348736][T25153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.348758][T25153] RIP: 0033:0x7fd7b1f9de99 [ 645.348775][T25153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.348792][T25153] RSP: 002b:00007fd7b2efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.348812][T25153] RAX: ffffffffffffffda RBX: 00007fd7b2225fa0 RCX: 00007fd7b1f9de99 [ 645.348827][T25153] RDX: 0000200000000080 RSI: 000000000000890c RDI: 0000000000000003 [ 645.348839][T25153] RBP: 00007fd7b2efa090 R08: 0000000000000000 R09: 0000000000000000 [ 645.348851][T25153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.348863][T25153] R13: 00007fd7b2226038 R14: 00007fd7b2225fa0 R15: 00007ffc9f8b1da8 [ 645.348893][T25153] [ 645.605192][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5791'. [ 646.004467][T25178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5797'. [ 646.144324][T25186] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5799'. [ 646.174929][T25186] netlink: 'syz.6.5799': attribute type 1 has an invalid length. [ 646.306164][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5804'. [ 646.328353][T25199] FAULT_INJECTION: forcing a failure. [ 646.328353][T25199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.394080][T25192] bond1: option primary_reselect: invalid value (6) [ 646.403171][T25199] CPU: 0 UID: 0 PID: 25199 Comm: syz.6.5805 Not tainted syzkaller #0 PREEMPT(full) [ 646.403198][T25199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.403209][T25199] Call Trace: [ 646.403218][T25199] [ 646.403227][T25199] dump_stack_lvl+0xe8/0x150 [ 646.403262][T25199] should_fail_ex+0x40c/0x560 [ 646.403290][T25199] _copy_to_user+0x31/0xb0 [ 646.403320][T25199] simple_read_from_buffer+0xe1/0x170 [ 646.403351][T25199] proc_fail_nth_read+0x1bb/0x230 [ 646.403381][T25199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.403410][T25199] ? rw_verify_area+0x24a/0x4c0 [ 646.403438][T25199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.403462][T25199] vfs_read+0x213/0xa80 [ 646.403495][T25199] ? __pfx___mutex_lock+0x10/0x10 [ 646.403524][T25199] ? __pfx_vfs_read+0x10/0x10 [ 646.403551][T25199] ? __fget_files+0x2a/0x420 [ 646.403576][T25199] ? __fget_files+0x3a2/0x420 [ 646.403599][T25199] ? __fget_files+0x2a/0x420 [ 646.403632][T25199] ksys_read+0x150/0x270 [ 646.403662][T25199] ? __pfx_ksys_read+0x10/0x10 [ 646.403689][T25199] ? __pfx_sock_ioctl+0x10/0x10 [ 646.403718][T25199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.403740][T25199] do_syscall_64+0x174/0x580 [ 646.403763][T25199] ? trace_irq_disable+0x3b/0x140 [ 646.403785][T25199] ? clear_bhb_loop+0x40/0x90 [ 646.403806][T25199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.403825][T25199] RIP: 0033:0x7faf1f35e6ce [ 646.403843][T25199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.403859][T25199] RSP: 002b:00007faf20314fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.403880][T25199] RAX: ffffffffffffffda RBX: 00007faf203156c0 RCX: 00007faf1f35e6ce [ 646.403895][T25199] RDX: 000000000000000f RSI: 00007faf203150a0 RDI: 0000000000000004 [ 646.403907][T25199] RBP: 00007faf20315090 R08: 0000000000000000 R09: 0000000000000000 [ 646.403919][T25199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.403930][T25199] R13: 00007faf1f626038 R14: 00007faf1f625fa0 R15: 00007ffd3015afd8 [ 646.403970][T25199] [ 646.624569][T25192] bond1 (unregistering): Released all slaves [ 646.924304][T25198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 646.974594][T25221] netlink: 'syz.2.5810': attribute type 6 has an invalid length. [ 647.052855][T11252] lo speed is unknown, defaulting to 1000 [ 647.061932][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.068143][T25223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5811'. [ 647.069108][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.096111][T11252] syz2: Port: 1 Link ACTIVE [ 647.541014][T20874] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.555113][ T6265] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.576825][ T6265] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.599432][ T6265] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.620654][T25254] tipc: Enabling of bearer rejected, already enabled [ 647.794175][T25262] xt_hashlimit: size too large, truncated to 1048576 [ 647.891322][T25270] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 647.907201][T25269] ipip0: entered promiscuous mode [ 648.447198][T25297] __nla_validate_parse: 7 callbacks suppressed [ 648.447217][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'. [ 648.476381][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5837'. [ 648.497083][T25297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5836'. [ 648.530189][T25299] tipc: Enabling of bearer rejected, failed to enable media [ 648.571887][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'. [ 648.581020][T25303] tipc: Enabling of bearer rejected, already enabled [ 648.604979][ T6265] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.607468][T25297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5836'. [ 648.643576][ T6265] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.658780][T25305] netlink: 'syz.6.5840': attribute type 27 has an invalid length. [ 648.685773][ T6265] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.716552][ T6265] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.919098][T25315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5844'. [ 649.606800][T25336] lo speed is unknown, defaulting to 1000 [ 649.809934][T25348] tipc: Enabling of bearer rejected, already enabled [ 649.929797][T25353] netlink: 'syz.0.5856': attribute type 6 has an invalid length. [ 650.595731][T25363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5859'. [ 650.655126][T25377] FAULT_INJECTION: forcing a failure. [ 650.655126][T25377] name failslab, interval 1, probability 0, space 0, times 0 [ 650.697438][T25377] CPU: 0 UID: 0 PID: 25377 Comm: syz.6.5863 Not tainted syzkaller #0 PREEMPT(full) [ 650.697465][T25377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 650.697477][T25377] Call Trace: [ 650.697485][T25377] [ 650.697494][T25377] dump_stack_lvl+0xe8/0x150 [ 650.697529][T25377] should_fail_ex+0x40c/0x560 [ 650.697557][T25377] should_failslab+0xa8/0x100 [ 650.697586][T25377] __kmalloc_cache_noprof+0xa8/0x660 [ 650.697613][T25377] ? rtnl_newlink+0x143/0x1c30 [ 650.697737][T25377] ? rtnl_newlink+0x143/0x1c30 [ 650.697770][T25377] rtnl_newlink+0x143/0x1c30 [ 650.697798][T25377] ? kasan_save_track+0x4f/0x80 [ 650.697820][T25377] ? kasan_save_track+0x3e/0x80 [ 650.697843][T25377] ? __kasan_slab_free+0x5c/0x80 [ 650.697866][T25377] ? kmem_cache_free+0x182/0x650 [ 650.697890][T25377] ? nlmon_xmit+0xb0/0x100 [ 650.697974][T25377] ? dev_hard_start_xmit+0x2cd/0x830 [ 650.697991][T25377] ? __dev_queue_xmit+0x1435/0x37f0 [ 650.698008][T25377] ? __netlink_deliver_tap+0x5b4/0x860 [ 650.698026][T25377] ? netlink_deliver_tap+0x19c/0x1b0 [ 650.698043][T25377] ? netlink_unicast+0x77f/0x940 [ 650.698068][T25377] ? netlink_sendmsg+0x813/0xb40 [ 650.698087][T25377] ? __pfx_rtnl_newlink+0x10/0x10 [ 650.698112][T25377] ? do_syscall_64+0x174/0x580 [ 650.698139][T25377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.698194][T25377] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.698217][T25377] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.698280][T25377] ? nlmon_xmit+0xb0/0x100 [ 650.698303][T25377] ? kmem_cache_free+0x182/0x650 [ 650.698336][T25377] ? __lock_acquire+0x683/0x2cf0 [ 650.698364][T25377] ? __dev_queue_xmit+0x29b/0x37f0 [ 650.698386][T25377] ? __local_bh_enable_ip+0xd0/0x130 [ 650.698423][T25377] ? lockdep_hardirqs_on+0x7a/0x110 [ 650.698449][T25377] ? __dev_queue_xmit+0x29b/0x37f0 [ 650.698467][T25377] ? __local_bh_enable_ip+0xd0/0x130 [ 650.698486][T25377] ? __dev_queue_xmit+0x29b/0x37f0 [ 650.698510][T25377] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 650.698535][T25377] ? __pfx_rtnl_newlink+0x10/0x10 [ 650.698573][T25377] ? __pfx_rtnl_newlink+0x10/0x10 [ 650.698597][T25377] rtnetlink_rcv_msg+0x802/0xc00 [ 650.698628][T25377] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 650.698653][T25377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.698677][T25377] ? ref_tracker_free+0x689/0x830 [ 650.698704][T25377] ? __pfx_ref_tracker_free+0x10/0x10 [ 650.698734][T25377] netlink_rcv_skb+0x226/0x4a0 [ 650.698763][T25377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.698791][T25377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 650.698834][T25377] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.698853][T25377] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.698877][T25377] netlink_unicast+0x7bb/0x940 [ 650.698914][T25377] netlink_sendmsg+0x813/0xb40 [ 650.698943][T25377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.698967][T25377] ? aa_sock_msg_perm+0xf1/0x1b0 [ 650.698991][T25377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.699009][T25377] sock_sendmsg_nosec+0x13a/0x180 [ 650.699036][T25377] ____sys_sendmsg+0x54e/0x850 [ 650.699071][T25377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.699109][T25377] ? import_iovec+0x73/0xa0 [ 650.699140][T25377] ___sys_sendmsg+0x2a5/0x360 [ 650.699167][T25377] ? __lock_acquire+0x683/0x2cf0 [ 650.699197][T25377] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.699268][T25377] ? __fget_files+0x2a/0x420 [ 650.699293][T25377] ? __fget_files+0x3a2/0x420 [ 650.699328][T25377] __x64_sys_sendmsg+0x1b1/0x290 [ 650.699360][T25377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.699407][T25377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.699427][T25377] do_syscall_64+0x174/0x580 [ 650.699453][T25377] ? trace_irq_disable+0x3b/0x140 [ 650.699476][T25377] ? clear_bhb_loop+0x40/0x90 [ 650.699499][T25377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.699518][T25377] RIP: 0033:0x7faf1f39de99 [ 650.699535][T25377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.699552][T25377] RSP: 002b:00007faf20315028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.699572][T25377] RAX: ffffffffffffffda RBX: 00007faf1f625fa0 RCX: 00007faf1f39de99 [ 650.699587][T25377] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 650.699600][T25377] RBP: 00007faf20315090 R08: 0000000000000000 R09: 0000000000000000 [ 650.699611][T25377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.699623][T25377] R13: 00007faf1f626038 R14: 00007faf1f625fa0 R15: 00007ffd3015afd8 [ 650.699653][T25377] [ 651.189313][T25381] IPVS: Error joining to the multicast group [ 651.368928][T25394] tipc: Enabling of bearer rejected, already enabled [ 651.483631][T25399] netlink: 'syz.0.5868': attribute type 1 has an invalid length. [ 651.663936][T25399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.684206][T25412] xt_hashlimit: size too large, truncated to 1048576 [ 651.784505][T25415] bond2: (slave geneve2): making interface the new active one [ 651.827798][T25415] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 652.150325][T25440] FAULT_INJECTION: forcing a failure. [ 652.150325][T25440] name failslab, interval 1, probability 0, space 0, times 0 [ 652.166313][T25440] CPU: 0 UID: 0 PID: 25440 Comm: syz.1.5880 Not tainted syzkaller #0 PREEMPT(full) [ 652.166343][T25440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 652.166355][T25440] Call Trace: [ 652.166363][T25440] [ 652.166371][T25440] dump_stack_lvl+0xe8/0x150 [ 652.166404][T25440] should_fail_ex+0x40c/0x560 [ 652.166431][T25440] should_failslab+0xa8/0x100 [ 652.166477][T25440] __kmalloc_cache_noprof+0xa8/0x660 [ 652.166501][T25440] ? rtnl_newlink+0x143/0x1c30 [ 652.166526][T25440] ? rtnl_newlink+0x143/0x1c30 [ 652.166558][T25440] rtnl_newlink+0x143/0x1c30 [ 652.166584][T25440] ? kasan_save_track+0x4f/0x80 [ 652.166604][T25440] ? kasan_save_track+0x3e/0x80 [ 652.166626][T25440] ? __kasan_slab_free+0x5c/0x80 [ 652.166648][T25440] ? kmem_cache_free+0x182/0x650 [ 652.166668][T25440] ? nlmon_xmit+0xb0/0x100 [ 652.166691][T25440] ? dev_hard_start_xmit+0x2cd/0x830 [ 652.166707][T25440] ? __dev_queue_xmit+0x1435/0x37f0 [ 652.166723][T25440] ? __netlink_deliver_tap+0x5b4/0x860 [ 652.166739][T25440] ? netlink_deliver_tap+0x19c/0x1b0 [ 652.166754][T25440] ? netlink_unicast+0x77f/0x940 [ 652.166777][T25440] ? netlink_sendmsg+0x813/0xb40 [ 652.166794][T25440] ? __pfx_rtnl_newlink+0x10/0x10 [ 652.166818][T25440] ? do_syscall_64+0x174/0x580 [ 652.166845][T25440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.166894][T25440] ? kasan_quarantine_put+0xbb/0x1f0 [ 652.166916][T25440] ? lockdep_hardirqs_on+0x7a/0x110 [ 652.166946][T25440] ? nlmon_xmit+0xb0/0x100 [ 652.166967][T25440] ? kmem_cache_free+0x182/0x650 [ 652.167000][T25440] ? __lock_acquire+0x683/0x2cf0 [ 652.167027][T25440] ? __dev_queue_xmit+0x29b/0x37f0 [ 652.167059][T25440] ? __local_bh_enable_ip+0xd0/0x130 [ 652.167080][T25440] ? lockdep_hardirqs_on+0x7a/0x110 [ 652.167104][T25440] ? __dev_queue_xmit+0x29b/0x37f0 [ 652.167121][T25440] ? __local_bh_enable_ip+0xd0/0x130 [ 652.167141][T25440] ? __dev_queue_xmit+0x29b/0x37f0 [ 652.167167][T25440] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 652.167193][T25440] ? __pfx_rtnl_newlink+0x10/0x10 [ 652.167229][T25440] ? __pfx_rtnl_newlink+0x10/0x10 [ 652.167253][T25440] rtnetlink_rcv_msg+0x802/0xc00 [ 652.167283][T25440] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 652.167308][T25440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 652.167333][T25440] ? ref_tracker_free+0x689/0x830 [ 652.167360][T25440] ? __pfx_ref_tracker_free+0x10/0x10 [ 652.167393][T25440] netlink_rcv_skb+0x226/0x4a0 [ 652.167422][T25440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 652.167449][T25440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 652.167489][T25440] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.167507][T25440] ? netlink_deliver_tap+0x2e/0x1b0 [ 652.167606][T25440] netlink_unicast+0x7bb/0x940 [ 652.167651][T25440] netlink_sendmsg+0x813/0xb40 [ 652.167677][T25440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.167706][T25440] ? aa_sock_msg_perm+0xf1/0x1b0 [ 652.167732][T25440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.167751][T25440] sock_sendmsg_nosec+0x13a/0x180 [ 652.167786][T25440] ____sys_sendmsg+0x54e/0x850 [ 652.167820][T25440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.167854][T25440] ? import_iovec+0x73/0xa0 [ 652.167882][T25440] ___sys_sendmsg+0x2a5/0x360 [ 652.167908][T25440] ? __lock_acquire+0x683/0x2cf0 [ 652.167937][T25440] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.168010][T25440] ? __fget_files+0x2a/0x420 [ 652.168034][T25440] ? __fget_files+0x3a2/0x420 [ 652.168076][T25440] __x64_sys_sendmsg+0x1b1/0x290 [ 652.168107][T25440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.168151][T25440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.168171][T25440] do_syscall_64+0x174/0x580 [ 652.168197][T25440] ? trace_irq_disable+0x3b/0x140 [ 652.168221][T25440] ? clear_bhb_loop+0x40/0x90 [ 652.168251][T25440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.168272][T25440] RIP: 0033:0x7fd7b1f9de99 [ 652.168291][T25440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.168307][T25440] RSP: 002b:00007fd7b2efa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.168328][T25440] RAX: ffffffffffffffda RBX: 00007fd7b2225fa0 RCX: 00007fd7b1f9de99 [ 652.168340][T25440] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 652.168352][T25440] RBP: 00007fd7b2efa090 R08: 0000000000000000 R09: 0000000000000000 [ 652.168364][T25440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.168375][T25440] R13: 00007fd7b2226038 R14: 00007fd7b2225fa0 R15: 00007ffc9f8b1da8 [ 652.168407][T25440] [ 653.099986][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.126429][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.139782][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.152096][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.162296][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.223738][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.232704][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.243498][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.257717][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.273600][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.395914][T25477] tipc: Enabling of bearer rejected, already enabled [ 653.639960][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5890'. [ 653.896346][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5893'. [ 653.945106][T25500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5893'. [ 654.002251][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5893'. [ 654.028189][T25500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5893'. [ 654.061080][T25465] lo speed is unknown, defaulting to 1000 [ 654.092957][T25508] netlink: 'syz.1.5896': attribute type 12 has an invalid length. [ 654.111629][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'. [ 654.214694][T25510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5898'. [ 654.358420][T25517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5900'. [ 654.360231][T25519] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 654.379947][T25517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5900'. [ 654.391798][T25517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5900'. [ 654.395801][T25520] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 654.536481][T25519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.633154][T20881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.645019][T20881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.674900][T25535] tipc: Enabling of bearer rejected, already enabled [ 654.837613][T25545] netlink: 'syz.0.5910': attribute type 12 has an invalid length. [ 654.862293][T20881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.875475][T20881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.379253][ T5638] Bluetooth: hci4: command tx timeout [ 657.425828][ T5638] Bluetooth: hci4: command tx timeout [ 658.034125][T20881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.044581][T20881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.069009][T25584] tipc: Enabling of bearer rejected, already enabled [ 658.252884][T20881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.264867][T20881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.437635][T25599] netlink: 'syz.0.5925': attribute type 12 has an invalid length. [ 658.532686][T25608] xt_hashlimit: size too large, truncated to 1048576 [ 658.773658][T25465] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.791380][T25465] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.810693][T25465] bridge_slave_0: entered allmulticast mode [ 658.818528][T25465] bridge_slave_0: entered promiscuous mode [ 658.841447][T25465] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.850659][T25465] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.870932][T25465] bridge_slave_1: entered allmulticast mode [ 658.878758][T25465] bridge_slave_1: entered promiscuous mode [ 659.005323][T25625] __nla_validate_parse: 13 callbacks suppressed [ 659.005342][T25625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5933'. [ 659.176080][T25465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.188733][T25622] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 659.224270][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5934'. [ 659.262324][T25630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5934'. [ 659.361874][T25465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.405586][T25632] tipc: Enabling of bearer rejected, failed to enable media [ 659.427441][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5934'. [ 659.453881][T25630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5934'. [ 659.493515][T20881] vlan2: left allmulticast mode [ 659.504039][ T5638] Bluetooth: hci4: command tx timeout [ 659.505688][T20881] geneve0: left allmulticast mode [ 659.546302][T20881] vlan2: left promiscuous mode [ 659.567434][T20881] geneve0: left promiscuous mode [ 659.576708][T25647] netlink: 'syz.0.5938': attribute type 12 has an invalid length. [ 659.597003][T20881] bridge0: port 1(vlan2) entered disabled state [ 659.634876][T20881] veth0_to_bond: left allmulticast mode [ 659.654506][T20881] veth0_to_bond: left promiscuous mode [ 659.670919][T20881] bridge0: port 3(veth0_to_bond) entered disabled state [ 659.682639][T20881] bridge_slave_1: left allmulticast mode [ 659.688530][T20881] bridge_slave_1: left promiscuous mode [ 659.696850][T20881] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.755394][T20881] dvmrp0: left allmulticast mode [ 659.765049][T20881] dvmrp1: left allmulticast mode [ 659.786133][T20881] batman_adv: batadv0: Interface deactivated: gretap2 [ 660.169186][T20881] batman_adv: batadv0: Removing interface: gretap2 [ 660.254093][T20881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.264907][T20881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.281148][T20881] bond0 (unregistering): Released all slaves [ 660.292580][T20881] bond1 (unregistering): Released all slaves [ 660.306862][T20881] bond2 (unregistering): Released all slaves [ 660.324842][T20881] bond3 (unregistering): Released all slaves [ 660.339812][T20881] bond4 (unregistering): Released all slaves [ 660.377897][T25465] team0: Port device team_slave_0 added [ 660.482837][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 660.555345][T25465] team0: Port device team_slave_1 added [ 660.631530][T20881] tipc: Disabling bearer [ 660.643273][T20881] tipc: Left network mode [ 660.670746][T25677] netlink: 'syz.0.5943': attribute type 3 has an invalid length. [ 660.729949][T25465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.742983][ T62] tipc: Subscription rejected, illegal request [ 660.755179][T25465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.838413][T25465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.877216][T25689] xt_hashlimit: size too large, truncated to 1048576 [ 660.884815][T25465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.896662][T25465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.984164][T25465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.199233][T25703] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 661.488644][T25465] hsr_slave_0: entered promiscuous mode [ 661.508007][T25465] hsr_slave_1: entered promiscuous mode [ 661.528524][T25465] debugfs: 'hsr0' already exists in 'hsr' [ 661.539331][T25465] Cannot create hsr debugfs directory [ 661.540216][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5950'. [ 661.591944][ T5638] Bluetooth: hci4: command tx timeout [ 661.849104][T25717] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.890954][T25717] bridge_slave_1: left promiscuous mode [ 661.908575][T25717] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.939438][T25717] bond0: (slave bond_slave_0): Releasing backup interface [ 661.986711][T25717] bond0: (slave bond_slave_1): Releasing backup interface [ 662.048576][T25717] team0: Port device team_slave_0 removed [ 662.080644][T25717] team0: Port device team_slave_1 removed [ 662.099520][T25717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.115108][T25717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.129824][T25717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.138271][T25717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.154433][T25717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.394944][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 662.405607][T25734] tipc: Enabling of bearer rejected, already enabled [ 662.476944][T25724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 662.499900][T25724] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 662.638190][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5957'. [ 662.889449][T20881] hsr_slave_0: left promiscuous mode [ 662.909731][T20881] hsr_slave_1: left promiscuous mode [ 662.923460][T25756] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5961'. [ 662.935144][T20881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.957384][T20881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.971065][T20881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.985607][T20881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.039885][T20881] veth1_vlan: left promiscuous mode [ 663.055369][T25761] netlink: 'syz.2.5963': attribute type 1 has an invalid length. [ 663.067802][T20881] veth0_vlan: left promiscuous mode [ 663.305332][T25765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5965'. [ 663.525332][T20881] team0 (unregistering): Port device team_slave_1 removed [ 663.548217][T20881] team0 (unregistering): Port device team_slave_0 removed [ 663.723389][T25761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 663.738267][T25766] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 663.748434][T25766] bond3: (slave batadv2): making interface the new active one [ 663.757312][T25766] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 663.772353][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 663.971534][T25784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 664.132791][T25791] xt_hashlimit: size too large, truncated to 1048576 [ 664.506922][T25807] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5974'. [ 664.673721][T20881] IPVS: stop unused estimator thread 0... [ 664.861930][T25821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5978'. [ 665.521163][T25850] tipc: Enabling of bearer rejected, already enabled [ 665.593998][T25857] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 665.776778][T25868] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5990'. [ 665.845304][T25465] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 665.868454][T25465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.902623][T25465] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 665.938521][T25465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.981784][T25465] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 666.008243][T25465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.046470][T25465] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 666.069662][T25465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 666.409221][T25465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.460281][T25465] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.491776][T20881] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.499084][T20881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.517835][T20881] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.525053][T20881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.077202][T25941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.324680][T25955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6010'. [ 667.598975][T25966] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6013'. [ 667.608970][T25465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.776677][T25465] veth0_vlan: entered promiscuous mode [ 667.837628][T25983] syzkaller0: entered promiscuous mode [ 667.854222][T25983] syzkaller0: entered allmulticast mode [ 667.876809][T25465] veth1_vlan: entered promiscuous mode [ 668.037315][T25465] veth0_macvtap: entered promiscuous mode [ 668.074513][T25465] veth1_macvtap: entered promiscuous mode [ 668.106842][T25465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.152296][T25465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.193328][T20873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.216292][T20873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.242467][T20873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.269803][T20873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.568599][ T6258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.605437][ T6258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.654158][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.661080][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'. [ 668.670885][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.298192][T26037] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.352339][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 669.372905][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 669.383272][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 669.398226][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 669.411218][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 669.463030][T26048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6036'. [ 669.617037][ T7199] IPVS: starting estimator thread 0... [ 669.675575][T26056] netlink: 'syz.3.6037': attribute type 12 has an invalid length. [ 669.731540][T26055] IPVS: using max 30 ests per chain, 72000 per kthread [ 669.765999][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6039'. [ 669.958546][T26068] netlink: 'syz.1.6043': attribute type 4 has an invalid length. [ 670.014956][T26070] netlink: 'syz.1.6043': attribute type 4 has an invalid length. [ 670.070296][T26068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6043'. [ 670.266631][T26047] lo speed is unknown, defaulting to 1000 [ 670.423135][T26089] netlink: 'syz.0.6049': attribute type 4 has an invalid length. [ 670.457743][T26088] syzkaller0: entered promiscuous mode [ 670.478588][T26088] syzkaller0: entered allmulticast mode [ 670.496867][T26088] tipc: Enabled bearer , priority 0 [ 670.560269][T26088] tipc: Resetting bearer [ 670.577299][T26094] sctp: [Deprecated]: syz.3.6051 (pid 26094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.577299][T26094] Use struct sctp_sack_info instead [ 670.654992][T26085] tipc: Resetting bearer [ 670.726410][T26085] tipc: Disabling bearer [ 670.739848][T26100] xt_hashlimit: size too large, truncated to 1048576 [ 670.975605][T26047] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.982971][T26047] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.990767][T26047] bridge_slave_0: entered allmulticast mode [ 670.998637][T26047] bridge_slave_0: entered promiscuous mode [ 671.009270][T26047] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.016611][T26047] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.024007][T26047] bridge_slave_1: entered allmulticast mode [ 671.032943][T26047] bridge_slave_1: entered promiscuous mode [ 671.074310][T26047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.086830][T26047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.128543][T26047] team0: Port device team_slave_0 added [ 671.137412][T26047] team0: Port device team_slave_1 added [ 671.173409][T26047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.181046][T26047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.208023][T26047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.222765][T26047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.229757][T26047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.263929][T26047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.330283][T26047] hsr_slave_0: entered promiscuous mode [ 671.337867][T26047] hsr_slave_1: entered promiscuous mode [ 671.346595][T26125] tipc: Enabling of bearer rejected, already enabled [ 671.501855][ T5638] Bluetooth: hci5: command tx timeout [ 671.577139][T26047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.578537][T26130] xt_hashlimit: size too large, truncated to 1048576 [ 671.749450][T26047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.892746][T26047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.940815][T26134] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.039948][T26047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.217379][T26154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6073'. [ 672.426219][T26163] syzkaller0: entered promiscuous mode [ 672.432037][T26163] syzkaller0: entered allmulticast mode [ 672.470923][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6076'. [ 672.474024][T26047] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.485972][T26165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6076'. [ 672.495792][T26165] netlink: 'syz.3.6076': attribute type 6 has an invalid length. [ 672.507479][T26047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.516375][T26047] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.527077][T26047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.535178][T26047] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.535285][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6076'. [ 672.553574][T26165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6076'. [ 672.557539][T26047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.562791][T26165] netlink: 'syz.3.6076': attribute type 6 has an invalid length. [ 672.570306][T26168] xt_hashlimit: size too large, truncated to 1048576 [ 672.631581][T26047] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 672.650907][T26047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.821355][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6079'. [ 672.836565][T26183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6079'. [ 672.862295][T26181] xt_hashlimit: size too large, truncated to 1048576 [ 672.862313][T20881] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.878080][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6079'. [ 672.889565][T20881] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.906062][T20881] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.927007][T20881] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.017390][T26047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.018908][T26187] netlink: 'syz.3.6080': attribute type 21 has an invalid length. [ 673.039354][T26187] netlink: 'syz.3.6080': attribute type 4 has an invalid length. [ 673.048703][T26187] netlink: 'syz.3.6080': attribute type 3 has an invalid length. [ 673.145804][T26047] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.268378][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.275703][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.308150][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.315387][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.583696][ T5638] Bluetooth: hci5: command tx timeout [ 673.869464][T26215] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 673.883627][T26215] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 673.937919][T26225] Cannot find del_set index 1 as target [ 674.179618][T26047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.244070][T26047] veth0_vlan: entered promiscuous mode [ 674.272988][T26047] veth1_vlan: entered promiscuous mode [ 674.346120][T26047] veth0_macvtap: entered promiscuous mode [ 674.367430][T26047] veth1_macvtap: entered promiscuous mode [ 674.432577][T26047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.472930][T26047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.508363][ T6258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.523194][ T6258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.551862][ T6258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.556281][T26246] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 674.576904][ T6258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.589182][T26248] xt_hashlimit: size too large, truncated to 1048576 [ 674.831649][ T6258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.854169][ T6258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.883874][T26256] netlink: 'syz.1.6098': attribute type 12 has an invalid length. [ 674.897850][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.934036][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.974947][T26259] batman_adv: batadv0: Adding interface: gretap1 [ 674.990352][T26259] batman_adv: batadv0: The MTU of interface gretap1 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.031979][T26259] batman_adv: batadv0: Interface activated: gretap1 [ 675.436925][T26290] netlink: 'syz.1.6109': attribute type 12 has an invalid length. [ 675.586597][T26297] xt_hashlimit: size too large, truncated to 1048576 [ 675.605193][T26298] nbd: socks must be embedded in a SOCK_ITEM attr [ 675.639777][T26298] __nla_validate_parse: 7 callbacks suppressed [ 675.639797][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6113'. [ 675.748386][T26305] ip6t_srh: unknown srh invflags BA61 [ 676.225103][T26330] xt_hashlimit: size too large, truncated to 1048576 [ 676.330050][T26334] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 676.352486][T26334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 676.464166][T26342] xt_hashlimit: size too large, truncated to 1048576 [ 676.502204][T26344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 676.652744][T26350] tipc: Enabling of bearer rejected, already enabled [ 676.736971][T26352] syzkaller0: entered promiscuous mode [ 676.750657][T26352] syzkaller0: entered allmulticast mode [ 677.031772][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6144'. [ 677.274770][T26386] xt_hashlimit: size too large, truncated to 1048576 [ 677.365063][T26389] xt_hashlimit: size too large, truncated to 1048576 [ 677.527168][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6152'. [ 677.711756][T26416] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6155'. [ 677.825092][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6157'. [ 678.468345][T26448] xt_hashlimit: size too large, truncated to 1048576 [ 678.712226][T26459] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.827998][T26462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6173'. [ 678.856574][T26462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6173'. [ 678.873323][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.889744][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.899783][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.907894][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.918319][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.974264][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.985400][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.995585][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 679.038779][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 679.047337][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 679.380104][T20875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.473057][T20875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.558296][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6181'. [ 679.760339][T20875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.773522][T20875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.817355][T26497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6184'. [ 679.955662][T26507] xt_hashlimit: size too large, truncated to 1048576 [ 679.967657][T20875] team0: Port device netdevsim1 removed [ 679.983657][T20875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.018763][T20875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.077796][T26511] netlink: 'syz.1.6187': attribute type 12 has an invalid length. [ 680.328200][T20875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.349981][T20875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.487872][T26460] lo speed is unknown, defaulting to 1000 [ 680.657668][T26533] __nla_validate_parse: 4 callbacks suppressed [ 680.657686][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6194'. [ 680.699162][T26533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6194'. [ 681.110916][ T5638] Bluetooth: hci2: command tx timeout [ 681.185500][T20875] vlan3: left allmulticast mode [ 681.200722][T20875] geneve0: left allmulticast mode [ 681.205818][T20875] vlan3: left promiscuous mode [ 681.213688][T20875] geneve0: left promiscuous mode [ 681.222096][T20875] bridge0: port 3(vlan3) entered disabled state [ 681.235248][T20875] bridge_slave_1: left allmulticast mode [ 681.241158][T20875] bridge_slave_1: left promiscuous mode [ 681.248721][T20875] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.262245][T20875] bridge_slave_0: left allmulticast mode [ 681.267927][T20875] bridge_slave_0: left promiscuous mode [ 681.290728][T20875] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.536707][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 681.558498][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 681.567671][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 681.583601][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 681.593983][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 681.856770][T20875] bond2 (unregistering): (slave geneve2): Releasing active interface [ 681.957663][T20875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.972391][T20875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.986764][T20875] bond0 (unregistering): Released all slaves [ 682.002839][T20875] bond1 (unregistering): Released all slaves [ 682.021215][T20875] bond2 (unregistering): Released all slaves [ 682.048544][T26565] syzkaller0: entered promiscuous mode [ 682.060767][T26565] syzkaller0: entered allmulticast mode [ 682.128930][T20875] : left promiscuous mode [ 682.238470][T20875] tipc: Disabling bearer [ 682.253373][T20875] tipc: Left network mode [ 682.339550][T26593] FAULT_INJECTION: forcing a failure. [ 682.339550][T26593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.355986][T26593] CPU: 0 UID: 0 PID: 26593 Comm: syz.3.6203 Not tainted syzkaller #0 PREEMPT(full) [ 682.356012][T26593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.356024][T26593] Call Trace: [ 682.356032][T26593] [ 682.356040][T26593] dump_stack_lvl+0xe8/0x150 [ 682.356076][T26593] should_fail_ex+0x40c/0x560 [ 682.356104][T26593] _copy_from_user+0x2d/0xb0 [ 682.356139][T26593] ___sys_sendmsg+0x1c6/0x360 [ 682.356177][T26593] ? __lock_acquire+0x683/0x2cf0 [ 682.356208][T26593] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.356271][T26593] ? __fget_files+0x2a/0x420 [ 682.356296][T26593] ? __fget_files+0x3a2/0x420 [ 682.356330][T26593] __x64_sys_sendmsg+0x1b1/0x290 [ 682.356361][T26593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.356408][T26593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.356431][T26593] do_syscall_64+0x174/0x580 [ 682.356458][T26593] ? trace_irq_disable+0x3b/0x140 [ 682.356483][T26593] ? clear_bhb_loop+0x40/0x90 [ 682.356507][T26593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.356526][T26593] RIP: 0033:0x7f0250d9de99 [ 682.356545][T26593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.356562][T26593] RSP: 002b:00007f0251bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.356582][T26593] RAX: ffffffffffffffda RBX: 00007f0251025fa0 RCX: 00007f0250d9de99 [ 682.356597][T26593] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 682.356610][T26593] RBP: 00007f0251bab090 R08: 0000000000000000 R09: 0000000000000000 [ 682.356622][T26593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.356634][T26593] R13: 00007f0251026038 R14: 00007f0251025fa0 R15: 00007ffd7b901908 [ 682.356663][T26593] [ 682.462954][T20875] IPVS: stopping master sync thread 19395 ... [ 682.614971][T26460] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.625795][T26460] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.633843][T26460] bridge_slave_0: entered allmulticast mode [ 682.643124][T26460] bridge_slave_0: entered promiscuous mode [ 682.652245][T26460] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.660133][T26460] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.671672][T26460] bridge_slave_1: entered allmulticast mode [ 682.678704][T26460] bridge_slave_1: entered promiscuous mode [ 682.698867][T26559] lo speed is unknown, defaulting to 1000 [ 682.738680][T26460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.751845][T26460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.816983][T26460] team0: Port device team_slave_0 added [ 682.835771][T26460] team0: Port device team_slave_1 added [ 682.886963][T20875] hsr_slave_0: left promiscuous mode [ 682.893477][T20875] hsr_slave_1: left promiscuous mode [ 682.899457][T20875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.908126][T20875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.917060][T20875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.926300][T20875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.934463][T20875] batman_adv: batadv0: Interface deactivated: macvlan2 [ 682.942107][T20875] batman_adv: batadv0: Removing interface: macvlan2 [ 682.949611][T20875] batman_adv: batadv0: Removing interface: vlan4 [ 682.962872][T20875] batadv_slave_1: left allmulticast mode [ 682.968632][T20875] batadv_slave_1: left promiscuous mode [ 682.974535][T20875] veth1_macvtap: left promiscuous mode [ 682.980238][T20875] veth1_vlan: left promiscuous mode [ 682.985952][T20875] veth0_vlan: left promiscuous mode [ 683.180726][ T5638] Bluetooth: hci2: command tx timeout [ 683.268256][T20875] team0 (unregistering): Port device team_slave_1 removed [ 683.288338][T20875] team0 (unregistering): Port device team_slave_0 removed [ 683.410641][T26460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.417790][T26460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.440826][T20876] smbdirect: ib_dev[syz2] removed [ 683.450444][T26460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.469735][ T7200] lo speed is unknown, defaulting to 1000 [ 683.482313][ T7200] syz2: Port: 1 Link DOWN [ 683.499273][T26460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.517092][T26460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.544979][T26460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.647334][T26460] hsr_slave_0: entered promiscuous mode [ 683.654004][T26460] hsr_slave_1: entered promiscuous mode [ 683.660189][T26460] debugfs: 'hsr0' already exists in 'hsr' [ 683.666047][ T5638] Bluetooth: hci6: command tx timeout [ 683.672299][T26460] Cannot create hsr debugfs directory [ 683.751918][T26542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.195878][T20875] IPVS: stop unused estimator thread 0... [ 684.570596][T26640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6211'. [ 684.685850][T26649] tipc: Enabling of bearer rejected, already enabled [ 684.697533][T26640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6211'. [ 684.710173][T26559] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.720816][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6211'. [ 684.737821][T26559] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.757567][T26559] bridge_slave_0: entered allmulticast mode [ 684.807938][T26559] bridge_slave_0: entered promiscuous mode [ 684.847203][T26559] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.874631][T26559] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.882749][T26559] bridge_slave_1: entered allmulticast mode [ 684.892215][T26559] bridge_slave_1: entered promiscuous mode [ 684.908229][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 684.946784][T26663] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6216'. [ 685.051701][T26559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.062252][T26668] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6217'. [ 685.089486][T26559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.254532][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6220'. [ 685.260688][ T5638] Bluetooth: hci2: command tx timeout [ 685.270209][T26559] team0: Port device team_slave_0 added [ 685.289348][T26559] team0: Port device team_slave_1 added [ 685.391563][T26559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.398858][T26559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.427181][T26559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.442737][T26559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.461664][T26559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.489308][T26682] FAULT_INJECTION: forcing a failure. [ 685.489308][T26682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.496776][T26684] IPv6: NLM_F_CREATE should be specified when creating new route [ 685.510875][T26559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.510957][T26682] CPU: 0 UID: 0 PID: 26682 Comm: syz.3.6224 Not tainted syzkaller #0 PREEMPT(full) [ 685.510979][T26682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.510991][T26682] Call Trace: [ 685.511000][T26682] [ 685.511009][T26682] dump_stack_lvl+0xe8/0x150 [ 685.511042][T26682] should_fail_ex+0x40c/0x560 [ 685.511069][T26682] _copy_from_iter+0x1d3/0x1660 [ 685.511092][T26682] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 685.511117][T26682] ? rcu_is_watching+0x15/0xb0 [ 685.511184][T26682] ? trace_kmem_cache_alloc+0x29/0xe0 [ 685.511208][T26682] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 685.511230][T26682] ? __pfx__copy_from_iter+0x10/0x10 [ 685.511254][T26682] ? __alloc_skb+0x276/0x7a0 [ 685.511277][T26682] ? __alloc_skb+0x276/0x7a0 [ 685.511308][T26682] ? netlink_sendmsg+0x650/0xb40 [ 685.511327][T26682] ? skb_put+0x112/0x210 [ 685.511365][T26682] netlink_sendmsg+0x6c0/0xb40 [ 685.511392][T26682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.511416][T26682] ? aa_sock_msg_perm+0xf1/0x1b0 [ 685.511441][T26682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.511459][T26682] sock_sendmsg_nosec+0x13a/0x180 [ 685.511489][T26682] ____sys_sendmsg+0x54e/0x850 [ 685.511522][T26682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.511566][T26682] ? import_iovec+0x73/0xa0 [ 685.511594][T26682] ___sys_sendmsg+0x2a5/0x360 [ 685.511621][T26682] ? __lock_acquire+0x683/0x2cf0 [ 685.511650][T26682] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.511710][T26682] ? __fget_files+0x2a/0x420 [ 685.511733][T26682] ? __fget_files+0x3a2/0x420 [ 685.511766][T26682] __x64_sys_sendmsg+0x1b1/0x290 [ 685.511796][T26682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.511841][T26682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.511862][T26682] do_syscall_64+0x174/0x580 [ 685.511888][T26682] ? trace_irq_disable+0x3b/0x140 [ 685.511911][T26682] ? clear_bhb_loop+0x40/0x90 [ 685.511935][T26682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.511954][T26682] RIP: 0033:0x7f0250d9de99 [ 685.511972][T26682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.511988][T26682] RSP: 002b:00007f0251bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.512009][T26682] RAX: ffffffffffffffda RBX: 00007f0251025fa0 RCX: 00007f0250d9de99 [ 685.512022][T26682] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 685.512035][T26682] RBP: 00007f0251bab090 R08: 0000000000000000 R09: 0000000000000000 [ 685.512046][T26682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.512058][T26682] R13: 00007f0251026038 R14: 00007f0251025fa0 R15: 00007ffd7b901908 [ 685.512088][T26682] [ 685.673741][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6226'. [ 685.740588][ T5638] Bluetooth: hci6: command tx timeout [ 685.751474][T26695] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6226'. [ 685.825251][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6228'. [ 685.837507][T26695] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6226'. [ 685.853840][T26697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6228'. [ 685.937035][T26699] netlink: 'syz.2.6229': attribute type 1 has an invalid length. [ 685.968986][T26701] netlink: 'syz.1.6230': attribute type 12 has an invalid length. [ 686.038292][T26559] hsr_slave_0: entered promiscuous mode [ 686.060728][T26559] hsr_slave_1: entered promiscuous mode [ 686.074617][T26559] debugfs: 'hsr0' already exists in 'hsr' [ 686.089319][T26559] Cannot create hsr debugfs directory [ 686.125928][T26706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6232'. [ 686.272968][T26713] FAULT_INJECTION: forcing a failure. [ 686.272968][T26713] name failslab, interval 1, probability 0, space 0, times 0 [ 686.301718][T26713] CPU: 1 UID: 0 PID: 26713 Comm: syz.1.6234 Not tainted syzkaller #0 PREEMPT(full) [ 686.301746][T26713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.301757][T26713] Call Trace: [ 686.301765][T26713] [ 686.301775][T26713] dump_stack_lvl+0xe8/0x150 [ 686.301808][T26713] should_fail_ex+0x40c/0x560 [ 686.301836][T26713] should_failslab+0xa8/0x100 [ 686.301865][T26713] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 686.301888][T26713] ? local_lock_release+0x9c/0x160 [ 686.301916][T26713] ? __alloc_skb+0x1d7/0x7a0 [ 686.301940][T26713] ? __alloc_skb+0x1d7/0x7a0 [ 686.301970][T26713] __alloc_skb+0x1d7/0x7a0 [ 686.302000][T26713] netlink_sendmsg+0x5d4/0xb40 [ 686.302030][T26713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.302054][T26713] ? aa_sock_msg_perm+0xf1/0x1b0 [ 686.302079][T26713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.302097][T26713] sock_sendmsg_nosec+0x13a/0x180 [ 686.302123][T26713] ____sys_sendmsg+0x54e/0x850 [ 686.302155][T26713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.302195][T26713] ? import_iovec+0x73/0xa0 [ 686.302225][T26713] ___sys_sendmsg+0x2a5/0x360 [ 686.302252][T26713] ? __lock_acquire+0x683/0x2cf0 [ 686.302282][T26713] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.302343][T26713] ? __fget_files+0x2a/0x420 [ 686.302367][T26713] ? __fget_files+0x3a2/0x420 [ 686.302400][T26713] __x64_sys_sendmsg+0x1b1/0x290 [ 686.302430][T26713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.302483][T26713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.302504][T26713] do_syscall_64+0x174/0x580 [ 686.302531][T26713] ? trace_irq_disable+0x3b/0x140 [ 686.302555][T26713] ? clear_bhb_loop+0x40/0x90 [ 686.302579][T26713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.302598][T26713] RIP: 0033:0x7fd7b1f9de99 [ 686.302617][T26713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.302634][T26713] RSP: 002b:00007fd7b2efa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.302655][T26713] RAX: ffffffffffffffda RBX: 00007fd7b2225fa0 RCX: 00007fd7b1f9de99 [ 686.302669][T26713] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 686.302682][T26713] RBP: 00007fd7b2efa090 R08: 0000000000000000 R09: 0000000000000000 [ 686.302694][T26713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.302706][T26713] R13: 00007fd7b2226038 R14: 00007fd7b2225fa0 R15: 00007ffc9f8b1da8 [ 686.302737][T26713] [ 686.396418][T26717] FAULT_INJECTION: forcing a failure. [ 686.396418][T26717] name failslab, interval 1, probability 0, space 0, times 0 [ 686.581207][T26717] CPU: 0 UID: 0 PID: 26717 Comm: syz.3.6235 Not tainted syzkaller #0 PREEMPT(full) [ 686.581234][T26717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 686.581244][T26717] Call Trace: [ 686.581251][T26717] [ 686.581259][T26717] dump_stack_lvl+0xe8/0x150 [ 686.581291][T26717] should_fail_ex+0x40c/0x560 [ 686.581316][T26717] should_failslab+0xa8/0x100 [ 686.581342][T26717] __kmalloc_cache_noprof+0xa8/0x660 [ 686.581366][T26717] ? rtnl_newlink+0x143/0x1c30 [ 686.581392][T26717] ? rtnl_newlink+0x143/0x1c30 [ 686.581422][T26717] rtnl_newlink+0x143/0x1c30 [ 686.581447][T26717] ? kasan_save_track+0x4f/0x80 [ 686.581468][T26717] ? kasan_save_track+0x3e/0x80 [ 686.581488][T26717] ? __kasan_slab_free+0x5c/0x80 [ 686.581509][T26717] ? kmem_cache_free+0x182/0x650 [ 686.581530][T26717] ? nlmon_xmit+0xb0/0x100 [ 686.581553][T26717] ? dev_hard_start_xmit+0x2cd/0x830 [ 686.581571][T26717] ? __dev_queue_xmit+0x1435/0x37f0 [ 686.581588][T26717] ? __netlink_deliver_tap+0x5b4/0x860 [ 686.581608][T26717] ? netlink_deliver_tap+0x19c/0x1b0 [ 686.581623][T26717] ? netlink_unicast+0x77f/0x940 [ 686.581645][T26717] ? netlink_sendmsg+0x813/0xb40 [ 686.581664][T26717] ? __pfx_rtnl_newlink+0x10/0x10 [ 686.581688][T26717] ? do_syscall_64+0x174/0x580 [ 686.581712][T26717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.581765][T26717] ? kasan_quarantine_put+0xbb/0x1f0 [ 686.581787][T26717] ? lockdep_hardirqs_on+0x7a/0x110 [ 686.581816][T26717] ? nlmon_xmit+0xb0/0x100 [ 686.581838][T26717] ? kmem_cache_free+0x182/0x650 [ 686.581880][T26717] ? __lock_acquire+0x683/0x2cf0 [ 686.581909][T26717] ? __dev_queue_xmit+0x29b/0x37f0 [ 686.581932][T26717] ? __local_bh_enable_ip+0xd0/0x130 [ 686.581954][T26717] ? lockdep_hardirqs_on+0x7a/0x110 [ 686.581980][T26717] ? __dev_queue_xmit+0x29b/0x37f0 [ 686.581997][T26717] ? __local_bh_enable_ip+0xd0/0x130 [ 686.582016][T26717] ? __dev_queue_xmit+0x29b/0x37f0 [ 686.582042][T26717] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 686.582069][T26717] ? __pfx_rtnl_newlink+0x10/0x10 [ 686.582107][T26717] ? __pfx_rtnl_newlink+0x10/0x10 [ 686.582131][T26717] rtnetlink_rcv_msg+0x802/0xc00 [ 686.582160][T26717] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 686.582186][T26717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 686.582210][T26717] ? ref_tracker_free+0x689/0x830 [ 686.582236][T26717] ? __pfx_ref_tracker_free+0x10/0x10 [ 686.582269][T26717] netlink_rcv_skb+0x226/0x4a0 [ 686.582298][T26717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 686.582326][T26717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 686.582367][T26717] ? netlink_deliver_tap+0x2e/0x1b0 [ 686.582385][T26717] ? netlink_deliver_tap+0x2e/0x1b0 [ 686.582409][T26717] netlink_unicast+0x7bb/0x940 [ 686.582447][T26717] netlink_sendmsg+0x813/0xb40 [ 686.582475][T26717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.582499][T26717] ? aa_sock_msg_perm+0xf1/0x1b0 [ 686.582524][T26717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.582543][T26717] sock_sendmsg_nosec+0x13a/0x180 [ 686.582568][T26717] ____sys_sendmsg+0x54e/0x850 [ 686.582603][T26717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.582640][T26717] ? import_iovec+0x73/0xa0 [ 686.582670][T26717] ___sys_sendmsg+0x2a5/0x360 [ 686.582696][T26717] ? __lock_acquire+0x683/0x2cf0 [ 686.582725][T26717] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.582788][T26717] ? __fget_files+0x2a/0x420 [ 686.582812][T26717] ? __fget_files+0x3a2/0x420 [ 686.582846][T26717] __x64_sys_sendmsg+0x1b1/0x290 [ 686.582884][T26717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 686.582928][T26717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.582949][T26717] do_syscall_64+0x174/0x580 [ 686.582974][T26717] ? trace_irq_disable+0x3b/0x140 [ 686.582998][T26717] ? clear_bhb_loop+0x40/0x90 [ 686.583022][T26717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.583041][T26717] RIP: 0033:0x7f0250d9de99 [ 686.583060][T26717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.583077][T26717] RSP: 002b:00007f0251bab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.583098][T26717] RAX: ffffffffffffffda RBX: 00007f0251025fa0 RCX: 00007f0250d9de99 [ 686.583112][T26717] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 686.583125][T26717] RBP: 00007f0251bab090 R08: 0000000000000000 R09: 0000000000000000 [ 686.583138][T26717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.583154][T26717] R13: 00007f0251026038 R14: 00007f0251025fa0 R15: 00007ffd7b901908 [ 686.583185][T26717] [ 687.103295][T26460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 687.114443][T26460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.151179][T26460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 687.164136][T26460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.172659][T26460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 687.203911][T26726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6238'. [ 687.214821][T26460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 687.241882][T26728] xt_hashlimit: size too large, truncated to 1048576 [ 687.250681][T26460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 687.271521][T26460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 687.341771][ T5638] Bluetooth: hci2: command tx timeout [ 687.593411][T26749] netlink: 'syz.1.6240': attribute type 12 has an invalid length. [ 687.794618][T26755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6242'. [ 687.810107][T26756] bridge0: port 3(vlan2) entered blocking state [ 687.817757][T26756] bridge0: port 3(vlan2) entered disabled state [ 687.820839][ T5638] Bluetooth: hci6: command tx timeout [ 687.843010][T26756] vlan2: entered allmulticast mode [ 687.876492][T26756] geneve0: entered allmulticast mode [ 687.919520][T26756] vlan2: entered promiscuous mode [ 687.931193][T26756] geneve0: entered promiscuous mode [ 687.975162][T26559] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 687.996363][T26559] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.018260][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'. [ 688.022211][T26559] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 688.050094][T26559] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.093325][T26766] veth0_to_team: entered promiscuous mode [ 688.113241][T26774] netlink: 'syz.2.6243': attribute type 4 has an invalid length. [ 688.122232][T26766] veth0_to_team: left promiscuous mode [ 688.176957][T26779] netlink: 'syz.2.6243': attribute type 4 has an invalid length. [ 688.229302][T26559] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 688.257718][T26559] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.281443][T26559] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 688.284319][T26785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6248'. [ 688.306084][T26559] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.401647][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.519400][T26767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.536313][T26767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.646159][T26788] netlink: 'syz.3.6249': attribute type 12 has an invalid length. [ 688.655892][ T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.697324][ T62] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.724834][ T62] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.734899][ T62] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.854444][T26809] xt_hashlimit: size too large, truncated to 1048576 [ 688.879236][T26460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.983865][T26460] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.058743][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.065972][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.113797][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.121032][ T6258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.198384][T26559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.286502][T26559] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.328675][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.335904][ T6258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.473012][T20874] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.480234][T20874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.900682][ T5638] Bluetooth: hci6: command tx timeout [ 690.225811][T26874] netlink: 'syz.2.6264': attribute type 10 has an invalid length. [ 690.308667][T26882] netlink: 'syz.2.6264': attribute type 1 has an invalid length. [ 690.337269][T26882] netlink: 'syz.2.6264': attribute type 2 has an invalid length. [ 690.699050][T26902] netlink: 'syz.3.6272': attribute type 23 has an invalid length. [ 690.903350][T26460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.072428][T26460] veth0_vlan: entered promiscuous mode [ 691.088606][T26920] tipc: Started in network mode [ 691.111339][T26920] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 691.125760][T26920] tipc: Enabled bearer , priority 10 [ 691.163315][T26559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.196847][T26460] veth1_vlan: entered promiscuous mode [ 691.305722][T26460] veth0_macvtap: entered promiscuous mode [ 691.311571][T26931] __nla_validate_parse: 10 callbacks suppressed [ 691.311588][T26931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6276'. [ 691.345772][T26460] veth1_macvtap: entered promiscuous mode [ 691.369337][T26931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6276'. [ 691.396618][T26460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.428720][T26460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.470506][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.517018][T20874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.552868][ T6265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.589299][ T6265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.871200][T20875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.913923][T20875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.027902][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.056730][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.101821][T26959] IPVS: length: 145 != 8 [ 692.184672][T26955] IPVS: Scheduler module ip_vs_sip not found [ 692.195635][T26559] veth0_vlan: entered promiscuous mode [ 692.256086][ T7200] tipc: Node number set to 4269801492 [ 692.288744][T26559] veth1_vlan: entered promiscuous mode [ 692.322366][T26965] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6285'. [ 692.358050][T26965] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6285'. [ 692.429870][T26559] veth0_macvtap: entered promiscuous mode [ 692.457950][T26559] veth1_macvtap: entered promiscuous mode [ 692.536289][T26559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.587993][T26559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.630425][ T62] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.652245][ T62] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.675132][ T62] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.717445][ T62] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.783654][T26984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6291'. [ 692.825345][T26979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.839548][T26997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6291'. [ 692.856797][T26979] bridge0: port 3(bond1) entered blocking state [ 692.873105][T26997] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6291'. [ 692.889841][T26979] bridge0: port 3(bond1) entered disabled state [ 692.905479][T26979] bond1: entered allmulticast mode [ 692.933826][T26979] bond1: entered promiscuous mode [ 693.018694][T26997] geneve2: entered promiscuous mode [ 693.052513][T26997] geneve2: entered allmulticast mode [ 693.537912][T20876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.561130][T20876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.600693][T27023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6297'. [ 693.671073][T27023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6297'. [ 693.682605][ T6258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.721031][ T6258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.767544][T27028] Cannot find set identified by id 0 to match [ 693.802783][T27028] netlink: 'syz.2.6299': attribute type 21 has an invalid length. [ 693.852783][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6299'. [ 693.867533][T27034] netlink: 'syz.0.6298': attribute type 1 has an invalid length. [ 694.145100][T27026] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 694.163319][T27026] bond1 (unregistering): Released all slaves [ 694.267959][T27031] vlan2: entered promiscuous mode [ 694.275683][T27031] bond0: entered promiscuous mode [ 694.282934][T27031] bond_slave_0: entered promiscuous mode [ 694.289076][T27031] bond_slave_1: entered promiscuous mode [ 694.564918][T27067] mac80211_hwsim hwsim45 »»»»»»: renamed from wlan0 [ 694.664714][T27073] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 695.059307][T27097] tipc: Started in network mode [ 695.072569][T27097] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 695.085844][T27097] tipc: Enabling of bearer rejected, failed to enable media [ 695.434175][T27123] FAULT_INJECTION: forcing a failure. [ 695.434175][T27123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.485899][T27123] CPU: 0 UID: 0 PID: 27123 Comm: syz.0.6329 Not tainted syzkaller #0 PREEMPT(full) [ 695.485925][T27123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.485937][T27123] Call Trace: [ 695.485945][T27123] [ 695.485954][T27123] dump_stack_lvl+0xe8/0x150 [ 695.485991][T27123] should_fail_ex+0x40c/0x560 [ 695.486019][T27123] _copy_from_user+0x2d/0xb0 [ 695.486047][T27123] ___sys_sendmsg+0x1c6/0x360 [ 695.486076][T27123] ? __lock_acquire+0x683/0x2cf0 [ 695.486105][T27123] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.486166][T27123] ? __fget_files+0x2a/0x420 [ 695.486190][T27123] ? __fget_files+0x3a2/0x420 [ 695.486219][T27123] __x64_sys_sendmsg+0x1b1/0x290 [ 695.486248][T27123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.486293][T27123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.486314][T27123] do_syscall_64+0x174/0x580 [ 695.486340][T27123] ? trace_irq_disable+0x3b/0x140 [ 695.486367][T27123] ? clear_bhb_loop+0x40/0x90 [ 695.486389][T27123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.486406][T27123] RIP: 0033:0x7f021b59de99 [ 695.486424][T27123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.486440][T27123] RSP: 002b:00007f021c3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.486459][T27123] RAX: ffffffffffffffda RBX: 00007f021b825fa0 RCX: 00007f021b59de99 [ 695.486472][T27123] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 695.486485][T27123] RBP: 00007f021c3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 695.486497][T27123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.486509][T27123] R13: 00007f021b826038 R14: 00007f021b825fa0 R15: 00007fffbcae5e38 [ 695.486540][T27123] [ 695.860715][T27138] tipc: Enabling of bearer rejected, already enabled [ 696.384494][ T5638] Bluetooth: hci6: command tx timeout [ 696.395045][T27169] __nla_validate_parse: 13 callbacks suppressed [ 696.395063][T27169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6343'. [ 696.414952][T27173] netlink: 'syz.7.6344': attribute type 3 has an invalid length. [ 696.449401][T27173] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6344'. [ 696.829461][T27175] tipc: Enabling of bearer rejected, already enabled [ 696.932864][T27183] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6349'. [ 696.957930][T27183] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6349'. [ 697.139351][T27195] netlink: 'syz.3.6354': attribute type 1 has an invalid length. [ 697.226739][T27205] netlink: 'syz.0.6356': attribute type 1 has an invalid length. [ 697.240338][T27195] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 697.338346][T27210] netlink: 'syz.0.6356': attribute type 10 has an invalid length. [ 697.396425][T27210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6356'. [ 697.428942][T27210] dummy0: entered promiscuous mode [ 697.620451][T27220] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 697.644000][T27224] netlink: 'syz.2.6362': attribute type 1 has an invalid length. [ 697.807778][T27235] x_tables: duplicate underflow at hook 3 [ 698.035910][T27200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 698.052880][T27200] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 698.057821][T27253] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 698.082905][T27200] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 698.090613][T27200] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 698.139657][T27257] tipc: Enabling of bearer rejected, failed to enable media [ 698.496247][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6378'. [ 698.594629][T27285] tipc: Enabling of bearer rejected, failed to enable media [ 698.849443][T27291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6383'. [ 698.860113][T27291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6383'. [ 698.870073][T27291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6383'. [ 699.329323][T27300] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 699.369091][T27305] block nbd0: Unsupported socket: should be TCP or UNIX. [ 699.372611][T27300] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 699.565359][T27300] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.587008][T27323] tipc: Enabling of bearer rejected, already enabled [ 699.749435][T27333] tipc: Enabled bearer , priority 25 [ 700.124393][T27357] netlink: 'syz.3.6405': attribute type 32 has an invalid length. [ 700.318573][T27367] tipc: Started in network mode [ 700.345473][T27367] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 700.390211][T27367] tipc: Enabled bearer , priority 10 [ 700.632699][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6411'. [ 700.864945][T27391] tipc: Enabling of bearer rejected, failed to enable media [ 700.973577][T27398] FAULT_INJECTION: forcing a failure. [ 700.973577][T27398] name failslab, interval 1, probability 0, space 0, times 0 [ 701.010473][T27398] CPU: 0 UID: 0 PID: 27398 Comm: syz.7.6416 Not tainted syzkaller #0 PREEMPT(full) [ 701.010499][T27398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.010510][T27398] Call Trace: [ 701.010518][T27398] [ 701.010526][T27398] dump_stack_lvl+0xe8/0x150 [ 701.010559][T27398] should_fail_ex+0x40c/0x560 [ 701.010586][T27398] should_failslab+0xa8/0x100 [ 701.010615][T27398] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 701.010638][T27398] ? local_lock_release+0x9c/0x160 [ 701.010665][T27398] ? __alloc_skb+0x1d7/0x7a0 [ 701.010688][T27398] ? __alloc_skb+0x1d7/0x7a0 [ 701.010720][T27398] __alloc_skb+0x1d7/0x7a0 [ 701.010748][T27398] netlink_ack+0x136/0xb30 [ 701.010782][T27398] ? __pfx___mutex_trylock_common+0x10/0x10 [ 701.010804][T27398] ? rcu_is_watching+0x15/0xb0 [ 701.010829][T27398] ? trace_contention_end+0x3d/0x140 [ 701.010852][T27398] netlink_rcv_skb+0x2a4/0x4a0 [ 701.010879][T27398] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 701.011034][T27398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 701.011078][T27398] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.011095][T27398] ? netlink_deliver_tap+0x2e/0x1b0 [ 701.011114][T27398] xfrm_netlink_rcv+0x79/0x90 [ 701.011140][T27398] netlink_unicast+0x7bb/0x940 [ 701.011174][T27398] netlink_sendmsg+0x813/0xb40 [ 701.011202][T27398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.011227][T27398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 701.011253][T27398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.011271][T27398] sock_sendmsg_nosec+0x13a/0x180 [ 701.011298][T27398] ____sys_sendmsg+0x54e/0x850 [ 701.011333][T27398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.011371][T27398] ? import_iovec+0x73/0xa0 [ 701.011403][T27398] ___sys_sendmsg+0x2a5/0x360 [ 701.011431][T27398] ? __lock_acquire+0x683/0x2cf0 [ 701.011460][T27398] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.011527][T27398] ? __fget_files+0x2a/0x420 [ 701.011551][T27398] ? __fget_files+0x3a2/0x420 [ 701.011583][T27398] __x64_sys_sendmsg+0x1b1/0x290 [ 701.011613][T27398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.011660][T27398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.011682][T27398] do_syscall_64+0x174/0x580 [ 701.011709][T27398] ? trace_irq_disable+0x3b/0x140 [ 701.011733][T27398] ? clear_bhb_loop+0x40/0x90 [ 701.011757][T27398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.011785][T27398] RIP: 0033:0x7f9b6cf9de99 [ 701.011805][T27398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.011821][T27398] RSP: 002b:00007f9b6ddf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.011842][T27398] RAX: ffffffffffffffda RBX: 00007f9b6d225fa0 RCX: 00007f9b6cf9de99 [ 701.011856][T27398] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 701.011868][T27398] RBP: 00007f9b6ddf5090 R08: 0000000000000000 R09: 0000000000000000 [ 701.011881][T27398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.011893][T27398] R13: 00007f9b6d226038 R14: 00007f9b6d225fa0 R15: 00007ffc42f155f8 [ 701.011926][T27398] [ 701.348411][T27406] tipc: Enabling of bearer rejected, already enabled [ 701.427918][T27408] xt_hashlimit: size too large, truncated to 1048576 [ 701.650572][ T7199] tipc: Node number set to 4269801492 [ 701.970928][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6429'. [ 702.005063][T27439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6430'. [ 702.074196][T27442] netlink: 'syz.2.6431': attribute type 12 has an invalid length. [ 702.218979][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6435'. [ 702.240052][T27448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6434'. [ 702.374825][T27458] syzkaller0: entered promiscuous mode [ 702.412055][T27458] syzkaller0: entered allmulticast mode [ 702.446163][T27463] bridge_slave_0: left allmulticast mode [ 702.461947][T27463] bridge_slave_0: left promiscuous mode [ 702.481912][T27463] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.532419][ T8216] udevd[8216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 702.546742][T27463] bridge_slave_1: left allmulticast mode [ 702.574095][ T8619] udevd[8619]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 702.579133][T27463] bridge_slave_1: left promiscuous mode [ 702.622372][T27463] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.636305][T27463] bond0: (slave bond_slave_0): Releasing backup interface [ 702.646352][T27463] bond0: (slave bond_slave_1): Releasing backup interface [ 702.663688][T27463] team0: Port device team_slave_0 removed [ 702.672753][T27463] team0: Port device team_slave_1 removed [ 702.679059][T27463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.689473][T27463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.698976][T27463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 702.732997][T27467] team0: Port device xfrm0 added [ 702.748128][T27476] vlan2: entered allmulticast mode [ 702.756334][T27476] bond0: entered allmulticast mode [ 702.762654][T27476] bond_slave_0: entered allmulticast mode [ 702.768588][T27476] bond_slave_1: entered allmulticast mode [ 702.780351][T27481] IPv6: NLM_F_CREATE should be specified when creating new route [ 702.919320][T27490] xt_hashlimit: size too large, truncated to 1048576 [ 703.088029][T27485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6446'. [ 703.247881][T27503] xt_hashlimit: size too large, truncated to 1048576 [ 703.513503][T27520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6451'. [ 703.552167][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6454'. [ 703.564774][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6454'. [ 703.590557][T27525] xt_hashlimit: size too large, truncated to 1048576 [ 703.676037][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6454'. [ 703.687339][T27532] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 703.698272][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6454'. [ 703.709378][T27531] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 703.986102][T27539] lo speed is unknown, defaulting to 1000 [ 704.006720][T27539] lo speed is unknown, defaulting to 1000 [ 704.133587][T27539] lo speed is unknown, defaulting to 1000 [ 704.155619][T27539] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 704.178792][T27539] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 704.202273][T27539] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 704.242230][T27539] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 704.364986][T27539] lo speed is unknown, defaulting to 1000 [ 704.400293][T27539] lo speed is unknown, defaulting to 1000 [ 704.412595][T27539] lo speed is unknown, defaulting to 1000 [ 704.421251][T27539] lo speed is unknown, defaulting to 1000 [ 704.433912][T27539] lo speed is unknown, defaulting to 1000 [ 704.467051][T27539] lo speed is unknown, defaulting to 1000 [ 704.512684][T27539] lo speed is unknown, defaulting to 1000 [ 704.529936][T27539] lo speed is unknown, defaulting to 1000 [ 704.547809][T27539] lo speed is unknown, defaulting to 1000 [ 704.563595][T27539] lo speed is unknown, defaulting to 1000 [ 704.581813][T27539] lo speed is unknown, defaulting to 1000 [ 704.818360][T27591] tipc: Enabling of bearer rejected, failed to enable media [ 704.822099][T27594] FAULT_INJECTION: forcing a failure. [ 704.822099][T27594] name failslab, interval 1, probability 0, space 0, times 0 [ 704.864335][T27594] CPU: 1 UID: 0 PID: 27594 Comm: syz.3.6477 Not tainted syzkaller #0 PREEMPT(full) [ 704.864361][T27594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.864371][T27594] Call Trace: [ 704.864379][T27594] [ 704.864389][T27594] dump_stack_lvl+0xe8/0x150 [ 704.864422][T27594] should_fail_ex+0x40c/0x560 [ 704.864449][T27594] should_failslab+0xa8/0x100 [ 704.864477][T27594] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 704.864497][T27594] ? local_lock_release+0x9c/0x160 [ 704.864522][T27594] ? __alloc_skb+0x1d7/0x7a0 [ 704.864541][T27594] ? __alloc_skb+0x1d7/0x7a0 [ 704.864569][T27594] __alloc_skb+0x1d7/0x7a0 [ 704.864595][T27594] netlink_sendmsg+0x5d4/0xb40 [ 704.864621][T27594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.864641][T27594] ? aa_sock_msg_perm+0xf1/0x1b0 [ 704.864665][T27594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.864681][T27594] sock_sendmsg_nosec+0x13a/0x180 [ 704.864705][T27594] ____sys_sendmsg+0x54e/0x850 [ 704.864737][T27594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.864773][T27594] ? import_iovec+0x73/0xa0 [ 704.864801][T27594] ___sys_sendmsg+0x2a5/0x360 [ 704.864825][T27594] ? __lock_acquire+0x683/0x2cf0 [ 704.864852][T27594] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.864885][T27594] ? kstrtouint+0x6e/0xe0 [ 704.864927][T27594] ? __fget_files+0x2a/0x420 [ 704.864952][T27594] ? __fget_files+0x3a2/0x420 [ 704.864986][T27594] __sys_sendmmsg+0x273/0x4d0 [ 704.865011][T27594] ? __pfx___sys_sendmmsg+0x10/0x10 [ 704.865057][T27594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.865101][T27594] ? ksys_write+0x242/0x270 [ 704.865132][T27594] ? __pfx_ksys_write+0x10/0x10 [ 704.865168][T27594] __x64_sys_sendmmsg+0xa0/0xc0 [ 704.865186][T27594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.865207][T27594] do_syscall_64+0x174/0x580 [ 704.865235][T27594] ? trace_irq_disable+0x3b/0x140 [ 704.865259][T27594] ? clear_bhb_loop+0x40/0x90 [ 704.865283][T27594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.865301][T27594] RIP: 0033:0x7f0250d9de99 [ 704.865320][T27594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.865334][T27594] RSP: 002b:00007f0251bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 704.865357][T27594] RAX: ffffffffffffffda RBX: 00007f0251025fa0 RCX: 00007f0250d9de99 [ 704.865369][T27594] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 704.865383][T27594] RBP: 00007f0251bab090 R08: 0000000000000000 R09: 0000000000000000 [ 704.865395][T27594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.865407][T27594] R13: 00007f0251026038 R14: 00007f0251025fa0 R15: 00007ffd7b901908 [ 704.865438][T27594] [ 705.250337][T27602] tipc: Enabling of bearer rejected, already enabled [ 705.508267][T27608] syzkaller0: entered promiscuous mode [ 705.523317][T27608] syzkaller0: entered allmulticast mode [ 705.934676][T27636] FAULT_INJECTION: forcing a failure. [ 705.934676][T27636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.023710][T27636] CPU: 1 UID: 0 PID: 27636 Comm: syz.7.6496 Not tainted syzkaller #0 PREEMPT(full) [ 706.023738][T27636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.023749][T27636] Call Trace: [ 706.023756][T27636] [ 706.023765][T27636] dump_stack_lvl+0xe8/0x150 [ 706.023799][T27636] should_fail_ex+0x40c/0x560 [ 706.023827][T27636] _copy_from_iter+0x1d3/0x1660 [ 706.023850][T27636] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 706.023874][T27636] ? rcu_is_watching+0x15/0xb0 [ 706.023902][T27636] ? trace_kmem_cache_alloc+0x29/0xe0 [ 706.023927][T27636] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 706.023950][T27636] ? __pfx__copy_from_iter+0x10/0x10 [ 706.023973][T27636] ? __alloc_skb+0x276/0x7a0 [ 706.023996][T27636] ? __alloc_skb+0x276/0x7a0 [ 706.024026][T27636] ? netlink_sendmsg+0x650/0xb40 [ 706.024045][T27636] ? skb_put+0x112/0x210 [ 706.024073][T27636] netlink_sendmsg+0x6c0/0xb40 [ 706.024099][T27636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.024121][T27636] ? aa_sock_msg_perm+0xf1/0x1b0 [ 706.024145][T27636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.024163][T27636] sock_sendmsg_nosec+0x13a/0x180 [ 706.024187][T27636] ____sys_sendmsg+0x54e/0x850 [ 706.024219][T27636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.024253][T27636] ? import_iovec+0x73/0xa0 [ 706.024282][T27636] ___sys_sendmsg+0x2a5/0x360 [ 706.024307][T27636] ? __lock_acquire+0x683/0x2cf0 [ 706.024338][T27636] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.024369][T27636] ? kstrtouint+0x6e/0xe0 [ 706.024410][T27636] ? __fget_files+0x2a/0x420 [ 706.024441][T27636] ? __fget_files+0x3a2/0x420 [ 706.024473][T27636] __sys_sendmmsg+0x273/0x4d0 [ 706.024496][T27636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 706.024533][T27636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 706.024574][T27636] ? ksys_write+0x242/0x270 [ 706.024604][T27636] ? __pfx_ksys_write+0x10/0x10 [ 706.024637][T27636] __x64_sys_sendmmsg+0xa0/0xc0 [ 706.024652][T27636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.024670][T27636] do_syscall_64+0x174/0x580 [ 706.024693][T27636] ? trace_irq_disable+0x3b/0x140 [ 706.024715][T27636] ? clear_bhb_loop+0x40/0x90 [ 706.024737][T27636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.024756][T27636] RIP: 0033:0x7f9b6cf9de99 [ 706.024775][T27636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.024791][T27636] RSP: 002b:00007f9b6ddf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 706.024812][T27636] RAX: ffffffffffffffda RBX: 00007f9b6d225fa0 RCX: 00007f9b6cf9de99 [ 706.024826][T27636] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 706.024839][T27636] RBP: 00007f9b6ddf5090 R08: 0000000000000000 R09: 0000000000000000 [ 706.024851][T27636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.024863][T27636] R13: 00007f9b6d226038 R14: 00007f9b6d225fa0 R15: 00007ffc42f155f8 [ 706.024895][T27636] [ 706.755520][T27665] openvswitch: netlink: Flow actions attr not present in new flow. [ 706.893430][T27665] block nbd6: server does not support multiple connections per device. [ 706.913980][T27665] block nbd6: shutting down sockets [ 707.147854][T27680] FAULT_INJECTION: forcing a failure. [ 707.147854][T27680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.181271][T27679] __nla_validate_parse: 9 callbacks suppressed [ 707.181291][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6512'. [ 707.207120][T27680] CPU: 1 UID: 0 PID: 27680 Comm: syz.3.6513 Not tainted syzkaller #0 PREEMPT(full) [ 707.207147][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.207158][T27680] Call Trace: [ 707.207166][T27680] [ 707.207175][T27680] dump_stack_lvl+0xe8/0x150 [ 707.207209][T27680] should_fail_ex+0x40c/0x560 [ 707.207237][T27680] _copy_from_iter+0x1d3/0x1660 [ 707.207258][T27680] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 707.207284][T27680] ? rcu_is_watching+0x15/0xb0 [ 707.207313][T27680] ? trace_kmem_cache_alloc+0x29/0xe0 [ 707.207338][T27680] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 707.207358][T27680] ? __pfx__copy_from_iter+0x10/0x10 [ 707.207382][T27680] ? __alloc_skb+0x276/0x7a0 [ 707.207407][T27680] ? __alloc_skb+0x276/0x7a0 [ 707.207437][T27680] ? netlink_sendmsg+0x650/0xb40 [ 707.207455][T27680] ? skb_put+0x112/0x210 [ 707.207484][T27680] netlink_sendmsg+0x6c0/0xb40 [ 707.207511][T27680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.207533][T27680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 707.207557][T27680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.207575][T27680] sock_sendmsg_nosec+0x13a/0x180 [ 707.207599][T27680] ____sys_sendmsg+0x54e/0x850 [ 707.207632][T27680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.207671][T27680] ? import_iovec+0x73/0xa0 [ 707.207700][T27680] ___sys_sendmsg+0x2a5/0x360 [ 707.207729][T27680] ? __lock_acquire+0x683/0x2cf0 [ 707.207759][T27680] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.207791][T27680] ? kstrtouint+0x6e/0xe0 [ 707.207838][T27680] ? __fget_files+0x2a/0x420 [ 707.207883][T27680] ? __fget_files+0x3a2/0x420 [ 707.207922][T27680] __sys_sendmmsg+0x273/0x4d0 [ 707.207948][T27680] ? __pfx___sys_sendmmsg+0x10/0x10 [ 707.207984][T27680] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 707.208028][T27680] ? ksys_write+0x242/0x270 [ 707.208058][T27680] ? __pfx_ksys_write+0x10/0x10 [ 707.208094][T27680] __x64_sys_sendmmsg+0xa0/0xc0 [ 707.208116][T27680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.208137][T27680] do_syscall_64+0x174/0x580 [ 707.208163][T27680] ? trace_irq_disable+0x3b/0x140 [ 707.208185][T27680] ? clear_bhb_loop+0x40/0x90 [ 707.208208][T27680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.208225][T27680] RIP: 0033:0x7f0250d9de99 [ 707.208243][T27680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.208261][T27680] RSP: 002b:00007f0251bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 707.208281][T27680] RAX: ffffffffffffffda RBX: 00007f0251025fa0 RCX: 00007f0250d9de99 [ 707.208295][T27680] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 707.208309][T27680] RBP: 00007f0251bab090 R08: 0000000000000000 R09: 0000000000000000 [ 707.208322][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.208334][T27680] R13: 00007f0251026038 R14: 00007f0251025fa0 R15: 00007ffd7b901908 [ 707.208364][T27680] [ 707.549285][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6514'. [ 707.664761][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6517'. [ 707.678905][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6517'. [ 707.732905][T27698] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6519'. [ 707.833952][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6517'. [ 707.855620][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6517'. [ 708.473101][T27738] xt_hashlimit: size too large, truncated to 1048576 [ 708.576905][T27746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6534'. [ 708.586648][T27746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6534'. [ 708.659563][T27750] netlink: 'syz.2.6535': attribute type 19 has an invalid length. [ 708.667881][T27750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6535'. [ 708.704644][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.705056][T27750] netlink: 'syz.2.6535': attribute type 19 has an invalid length. [ 708.727369][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.757688][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.802059][ T62] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.861178][ T30] INFO: task syz.5.4556:21479 blocked for more than 143 seconds. [ 708.884617][ T30] Not tainted syzkaller #0 [ 708.900845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.936594][ T30] task:syz.5.4556 state:D stack:24032 pid:21479 tgid:21473 ppid:16837 task_flags:0x400140 flags:0x00080002 [ 708.943538][T27757] netlink: 'syz.3.6537': attribute type 12 has an invalid length. [ 708.968548][ T30] Call Trace: [ 708.975492][ T30] [ 708.982491][ T30] __schedule+0x17d9/0x56c0 [ 708.992991][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.003909][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.009074][ T30] ? __pfx___schedule+0x10/0x10 [ 709.014416][ T30] ? schedule+0x90/0x2b0 [ 709.018803][ T30] schedule+0x164/0x2b0 [ 709.024335][ T30] schedule_preempt_disabled+0x13/0x30 [ 709.029864][ T30] __mutex_lock+0x7bf/0x1550 [ 709.034594][ T30] ? __mutex_lock+0x5d4/0x1550 [ 709.039471][ T30] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 709.045931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 709.051145][ T30] ? net_generic+0x1e/0x240 [ 709.055807][ T30] ? net_generic+0x1e/0x240 [ 709.060422][ T30] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 709.066460][ T30] ? rcu_is_watching+0x15/0xb0 [ 709.071444][ T30] ? trace_kmalloc+0x2a/0xf0 [ 709.076067][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 709.083014][ T30] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 709.089676][ T30] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 709.098103][ T30] ? __kmalloc_node_track_caller_noprof+0x2fd/0x730 [ 709.108008][ T30] ? netlink_dump+0x1e7/0xee0 [ 709.112856][ T30] ? netlink_dump+0x1e7/0xee0 [ 709.117665][ T30] genl_dumpit+0x10b/0x1b0 [ 709.122242][ T30] netlink_dump+0x711/0xee0 [ 709.126963][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 709.132210][ T30] ? genl_start+0x497/0x6d0 [ 709.136876][ T30] __netlink_dump_start+0x589/0x7b0 [ 709.142329][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 709.148111][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 709.154489][ T30] ? __pfx_genl_start+0x10/0x10 [ 709.159455][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 709.164526][ T30] ? __pfx_genl_done+0x10/0x10 [ 709.169328][ T30] ? bpf_lsm_capable+0x9/0x20 [ 709.180508][ T30] ? security_capable+0x7e/0x2c0 [ 709.186900][ T30] genl_rcv_msg+0x5e1/0x7a0 [ 709.191788][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.196878][ T30] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 709.205895][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 709.214821][ T30] netlink_rcv_skb+0x226/0x4a0 [ 709.219672][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.224825][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.230169][ T30] ? down_read+0x2be/0x330 [ 709.234715][ T30] genl_rcv+0x28/0x40 [ 709.238722][ T30] netlink_unicast+0x7bb/0x940 [ 709.243710][ T30] netlink_sendmsg+0x813/0xb40 [ 709.248537][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.254030][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.259023][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.264556][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 709.269705][ T30] ____sys_sendmsg+0x54e/0x850 [ 709.274647][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.279981][ T30] ? import_iovec+0x73/0xa0 [ 709.284575][ T30] ___sys_sendmsg+0x2a5/0x360 [ 709.289359][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.294552][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.299795][ T30] ? futex_wait+0x2a2/0x390 [ 709.304655][ T30] ? __fget_files+0x2a/0x420 [ 709.309296][ T30] ? __fget_files+0x3a2/0x420 [ 709.314287][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 709.319274][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.325212][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.333153][ T30] do_syscall_64+0x174/0x580 [ 709.337803][ T30] ? trace_irq_disable+0x3b/0x140 [ 709.343100][ T30] ? clear_bhb_loop+0x40/0x90 [ 709.347912][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.354304][ T30] RIP: 0033:0x7f0e45b9de99 [ 709.358770][ T30] RSP: 002b:00007f0e46aa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.367283][ T30] RAX: ffffffffffffffda RBX: 00007f0e45e26090 RCX: 00007f0e45b9de99 [ 709.375480][ T30] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 000000000000000d [ 709.383620][ T30] RBP: 00007f0e45c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 709.391656][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.399634][ T30] R13: 00007f0e45e26128 R14: 00007f0e45e26090 R15: 00007ffd1ff9cde8 [ 709.407736][ T30] [ 709.411363][ T30] [ 709.411363][ T30] Showing all locks held in the system: [ 709.419165][ T30] 1 lock held by khungtaskd/30: [ 709.424845][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 709.435827][ T30] 3 locks held by kworker/u8:4/62: [ 709.442128][ T30] #0: ffff888032251140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 709.454023][ T30] #1: ffffc9000202fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 709.466994][ T30] #2: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 709.477244][ T30] 2 locks held by getty/5373: [ 709.482001][ T30] #0: ffff888036d580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 709.492009][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 709.502546][ T30] 2 locks held by syz.4.2945/16356: [ 709.507766][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 709.517178][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 709.528706][ T30] 3 locks held by syz.5.4556/21479: [ 709.534075][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 709.542649][ T30] #1: ffff88807709f6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 709.553369][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 709.563940][ T30] 3 locks held by syz.6.5997/25897: [ 709.569133][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 709.577393][ T30] #1: ffff8880265fa6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 709.588055][ T30] #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 709.598775][ T30] 2 locks held by syz.7.6532/27737: [ 709.604032][ T30] #0: ffffffff9002c340 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 709.613311][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 709.624689][ T30] [ 709.627059][ T30] ============================================= [ 709.627059][ T30] [ 709.636132][ T30] NMI backtrace for cpu 1 [ 709.636152][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 709.636173][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.636184][ T30] Call Trace: [ 709.636192][ T30] [ 709.636201][ T30] dump_stack_lvl+0xe8/0x150 [ 709.636235][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 709.636263][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 709.636294][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 709.636373][ T30] sys_info+0x135/0x170 [ 709.636394][ T30] watchdog+0xfd7/0x1030 [ 709.636445][ T30] ? watchdog+0x1c7/0x1030 [ 709.636474][ T30] kthread+0x388/0x470 [ 709.636498][ T30] ? __pfx_watchdog+0x10/0x10 [ 709.636518][ T30] ? __pfx_kthread+0x10/0x10 [ 709.636545][ T30] ret_from_fork+0x514/0xb70 [ 709.636591][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 709.636618][ T30] ? __switch_to+0xc89/0x1420 [ 709.636644][ T30] ? __pfx_kthread+0x10/0x10 [ 709.636670][ T30] ret_from_fork_asm+0x1a/0x30 [ 709.636702][ T30] [ 709.636711][ T30] Sending NMI from CPU 1 to CPUs 0: [ 709.751149][ C0] NMI backtrace for cpu 0 [ 709.751168][ C0] CPU: 0 UID: 0 PID: 20873 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 709.751189][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.751201][ C0] Workqueue: krds_cp_wq#13/0 rds_connect_worker [ 709.751352][ C0] RIP: 0010:__lock_acquire+0x18fa/0x2cf0 [ 709.751379][ C0] Code: 14 25 ff 0f 00 00 39 05 30 a9 d1 12 73 06 89 05 28 a9 d1 12 48 8b 02 48 89 df 4c 39 e8 0f 84 34 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 20 fe ff ff 48 89 fb 48 c7 c7 d0 7d a2 [ 709.751395][ C0] RSP: 0018:ffffc90005af7280 EFLAGS: 00000006 [ 709.751409][ C0] RAX: ffffffff970d4448 RBX: 0000000000000111 RCX: 0000000000000002 [ 709.751422][ C0] RDX: ffffffff96f7f748 RSI: ffff88802f3e2b68 RDI: 0000000000000111 [ 709.751434][ C0] RBP: eba2c2c0a1e3ceaa R08: ffffc90005af7248 R09: 0000000000000020 [ 709.751447][ C0] R10: 0000000000000000 R11: ffffffff81a29270 R12: 0000000000000001 [ 709.751458][ C0] R13: ffffffff941540a8 R14: ffff88802f3e1f00 R15: ffffc90005af7310 [ 709.751472][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 709.751486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.751499][ C0] CR2: 00007f0250feb158 CR3: 000000007be00000 CR4: 00000000003526f0 [ 709.751514][ C0] Call Trace: [ 709.751521][ C0] [ 709.751540][ C0] ? ktime_get+0x45/0x220 [ 709.751561][ C0] lock_acquire+0x106/0x350 [ 709.751582][ C0] ? ktime_get+0x45/0x220 [ 709.751607][ C0] ? ktime_get+0x45/0x220 [ 709.751626][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 709.751648][ C0] ? ktime_get+0x45/0x220 [ 709.751667][ C0] ktime_get+0x45/0x220 [ 709.751688][ C0] clockevents_program_event+0x290/0x630 [ 709.751715][ C0] ? __hrtimer_rearm_deferred+0x99/0x420 [ 709.751733][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 709.751762][ C0] ? tick_program_event+0x8f/0x120 [ 709.751784][ C0] __hrtimer_rearm_deferred+0x26c/0x420 [ 709.751804][ C0] irqentry_exit+0x8b7/0x8f0 [ 709.751828][ C0] ? trace_irq_disable+0x3b/0x140 [ 709.751863][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 709.751881][ C0] RIP: 0010:tcp_chrono_stop+0x5d/0x6f0 [ 709.751966][ C0] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 0d 2d f5 f7 49 83 3e 00 74 0a e8 52 a0 87 f7 e9 4d 01 00 00 48 8d bb 84 09 00 00 48 89 f8 <48> c1 e8 03 42 0f b6 04 28 84 c0 0f 85 20 03 00 00 44 8b b3 84 09 [ 709.751981][ C0] RSP: 0018:ffffc90005af76c0 EFLAGS: 00000246 [ 709.751995][ C0] RAX: ffff88802134b084 RBX: ffff88802134a700 RCX: ffff88802f3e1f00 [ 709.752009][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88802134b084 [ 709.752020][ C0] RBP: 0000000000000001 R08: ffffffff905776f7 R09: 1ffffffff20aeede [ 709.752033][ C0] R10: dffffc0000000000 R11: fffffbfff20aeedf R12: dffffc0000000000 [ 709.752046][ C0] R13: dffffc0000000000 R14: ffff88802134a9b0 R15: 0000000000000000 [ 709.752069][ C0] tcp_write_queue_purge+0x31/0x360 [ 709.752088][ C0] ? tcp_cleanup_congestion_control+0x11d/0x180 [ 709.752139][ C0] tcp_v4_destroy_sock+0x277/0x570 [ 709.752160][ C0] ? __pfx_tcp_v4_destroy_sock+0x10/0x10 [ 709.752180][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 709.752198][ C0] ? __tcp_close+0x6b8/0xec0 [ 709.752214][ C0] ? __release_sock+0x33f/0x390 [ 709.752239][ C0] ? __tcp_close+0x6bf/0xec0 [ 709.752255][ C0] inet_csk_destroy_sock+0x165/0x340 [ 709.752303][ C0] ? __tcp_close+0x6bf/0xec0 [ 709.752319][ C0] __tcp_close+0xb34/0xec0 [ 709.752336][ C0] ? tcp_close+0x1d/0x110 [ 709.752354][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 709.752376][ C0] tcp_close+0x28/0x110 [ 709.752393][ C0] inet_release+0x143/0x190 [ 709.752439][ C0] sock_release+0x85/0x150 [ 709.752459][ C0] rds_tcp_conn_path_connect+0x77f/0x920 [ 709.752509][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 709.752530][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 709.752550][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 709.752570][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 709.752591][ C0] rds_connect_worker+0x1d8/0x290 [ 709.752617][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 709.752635][ C0] process_scheduled_works+0xa8e/0x14e0 [ 709.752665][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 709.752687][ C0] ? assign_work+0x3cf/0x5d0 [ 709.752706][ C0] worker_thread+0xa47/0xfb0 [ 709.752736][ C0] kthread+0x388/0x470 [ 709.752759][ C0] ? __pfx_worker_thread+0x10/0x10 [ 709.752778][ C0] ? __pfx_kthread+0x10/0x10 [ 709.752801][ C0] ret_from_fork+0x514/0xb70 [ 709.752826][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 709.752849][ C0] ? __switch_to+0xc89/0x1420 [ 709.752870][ C0] ? __pfx_kthread+0x10/0x10 [ 709.752893][ C0] ret_from_fork_asm+0x1a/0x30 [ 709.752917][ C0] [ 710.221187][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 710.228084][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 710.237208][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.247295][ T30] Call Trace: [ 710.250580][ T30] [ 710.253506][ T30] vpanic+0x56c/0xa60 [ 710.257494][ T30] ? __pfx___schedule+0x10/0x10 [ 710.262371][ T30] ? __pfx_vpanic+0x10/0x10 [ 710.266883][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 710.273135][ T30] panic+0xc5/0xd0 [ 710.276875][ T30] ? __pfx_panic+0x10/0x10 [ 710.281290][ T30] ? preempt_schedule_common+0x82/0xd0 [ 710.286753][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 710.292139][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 710.298293][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 710.304453][ T30] watchdog+0x1030/0x1030 [ 710.308804][ T30] ? watchdog+0x1c7/0x1030 [ 710.313477][ T30] kthread+0x388/0x470 [ 710.317547][ T30] ? __pfx_watchdog+0x10/0x10 [ 710.322223][ T30] ? __pfx_kthread+0x10/0x10 [ 710.326812][ T30] ret_from_fork+0x514/0xb70 [ 710.331406][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 710.336519][ T30] ? __switch_to+0xc89/0x1420 [ 710.341203][ T30] ? __pfx_kthread+0x10/0x10 [ 710.345802][ T30] ret_from_fork_asm+0x1a/0x30 [ 710.350659][ T30] [ 710.353937][ T30] Kernel Offset: disabled [ 710.358252][ T30] Rebooting in 86400 seconds..