last executing test programs: 3.792338009s ago: executing program 0 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x20, 0x0, 0x40004}, 0x20002004) 3.704733321s ago: executing program 2 (id=384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x64000090) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf={0xbe, &(0x7f0000000640)="0dce365678afe97cee744e42b95fbb4eb99342855eb32f7b9653ddf2529ff44fccdeb68208cf46dddc9998a2e8b0a64a0e32038cacfdb5d81cc8d5e1cb0f91efbfc791fb395e2efcc2a520b54ad958a782ea1c8fbb07014bcd9b45661850d54295cf72fd2ad26fff68211d5a55327fe1fc48f5bdbc058946c87cd5c0cd1b729fedf93523cc79a46eb9b9fd33aeda829a0b9807564ab5beccb5798f87e3dde3b39a89fc13065f2e9bfbe564363b128d2a0a563a6084dfb372994bb0678de7"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, 0x0, 0x0) (async) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.647723273s ago: executing program 0 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002100), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000002500)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002140)={0x44, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000023c0)=r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg$unix(r10, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r7, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.597146946s ago: executing program 3 (id=387): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400005850000009500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x460}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x50}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r6, &(0x7f00000000c0)=@ethernet={0x306, @remote}, 0x80) r7 = socket(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="f59a7b49db6c4dae000100000000000000000000e73f06e20cbe67bd0a81e30809d9912dc2be78590300000000000000422310d0d403964c9c3f71696112d45b08aa4cafb328abb390557bacb1fd47df42da3186417854d51c430f7d19f98c1d374dc478e2b3fbdb98cf3c5cd86851b9d28a33d1e66e5431997cfcfb3d26ff8b8ae89a0c01564e41b16b4a711dedf7dbba357e3977a6ba3fc572b44b98bc299c21e44885b1dc53f32c06c764e9411c89bcfb8a334ac9ae936b3b508585eff3243e6a7503e4a1dd8302026ae0aeaedd6d1d05470fef4263132cc7901846ef"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200027bd7000fddba025860000000c009900ffffff7f1e00000008009f0001e71c00080026006c090000"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x2000c801) socket(0x10, 0x80003, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 3.494045874s ago: executing program 1 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000007c00)={0x0, 0x0, &(0x7f0000007bc0)={&(0x7f0000006b00)={0x24, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0x10, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "2ba894d1b52ab38e58"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000300000003000000"], 0x40}}, 0x0) 3.383857786s ago: executing program 0 (id=390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e8fffffd0000005e2a8785c6256442a5e68e6600"/40], 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x5) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x10000000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8102, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010100}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000c4080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.22405132s ago: executing program 1 (id=391): socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c200000008"], 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_NAT_DST={0x4}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcb50}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5c000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x48000000}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x44001}, 0x24008050) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001afa0800020004000c00060000000364bc24eab556a7052d1e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.169168309s ago: executing program 2 (id=392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x24000804}, 0x400c010) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x24000804}, 0x400c010) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd99, 0x4) sendto$inet(r2, 0x0, 0x62, 0x4000, 0x0, 0x0) recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/29, 0x1d}, 0xffff7fff}], 0x1, 0x20102, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x90000, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x90000, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c000780060004400000000006000540100000000800084000000074"], 0x64}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00'}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r7, &(0x7f0000000340)=""/49, 0x31) (async) read(r7, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES64, @ANYRES16=r1, @ANYRESHEX=r0], 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2.890787689s ago: executing program 2 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000028fe171c2fb23bd90000004ae000"/36], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0xfffffee5, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x24004084) close(r3) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x5, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x115, 0x115, 0x7, [@datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x8, 0xfffffffe}], 'u'}, @union={0x7, 0x8, 0x0, 0x5, 0x1, 0x7ff, [{0x0, 0x4, 0xfffffc00}, {0xc, 0x4, 0x80000000}, {0xc, 0x5, 0x7f}, {0x0, 0x2, 0x5}, {0xd, 0x1, 0x9}, {0x9, 0x4, 0xfffff001}, {0x9, 0x3, 0x7ff}, {0x3, 0x2, 0x1}]}, @const={0xe, 0x0, 0x0, 0xa, 0x65}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x1, 0x2}, {0x4, 0x5, 0x5}]}, @union={0xb, 0x5, 0x0, 0x5, 0x0, 0x1, [{0x1, 0x5, 0x111d}, {0x0, 0x4, 0x7}, {0x4, 0x1, 0x3ce0}, {0xa, 0x5, 0xfffffffb}, {0x6, 0x4, 0x7fffffff}]}]}, {0x0, [0x30, 0x0, 0x30, 0x61, 0x61]}}, &(0x7f0000001300)=""/4096, 0x137, 0x1000, 0x0, 0x401}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8dd1, 0x0, r1, 0x7, '\x00', 0x0, r5, 0x3, 0x5, 0x2}, 0x50) 2.765368357s ago: executing program 1 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 2.652038416s ago: executing program 2 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000090000000c000000000000090300000002000000000000070000000000f02d30302e615f00"], &(0x7f0000000380)=""/70, 0x39, 0x46, 0x1, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x100001}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7fff, 0x8f, &(0x7f0000000280)=""/143, 0x41000, 0x1b, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000680)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xe, 0x11a7, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x5, 0x4, 0x9}, 0x50) 2.626523035s ago: executing program 2 (id=398): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001700), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0xfffffffffffffdd9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002040)={'syztnl2\x00', &(0x7f0000001fc0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x0, 0x0, 0x2a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7800, 0xf000, 0x81, 0x9e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000faffffff00000000000000180100002e20000000020000000000007b1af8ff00000000bfa10000000000000701000062ffffffb702000008000000b703000000000000850000a78286b33037bbbad0df7f715d5a4a000600000095", @ANYBLOB="75b70a362932b36ab680056a121cb8f0c946339992e2db76d0271ba05b7413ca10d139f9483c3c3b44340487684edba93fdfb1373c58b58cca581d3116dce03e12903ad1c46c24949faa55bb956fb334f125f3b94e8d3fffd329dc224443aea461c3109e8caf6e120de6f5dc58d52991359feebc4facf326cdbd8df35e186f06f6924324f8b33cd6ce3d49b6998684ee304d31c113d7293944dbcf201158f818872d49029be50ff7222fcee51d002ba917eb4e1a6529"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x10001, 0x9, 0x20184, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={&(0x7f0000002840)=ANY=[@ANYBLOB="9feb01001800000000000000a3000000a30000000a0000000e00000000000007000000000c0000000000000e04000000000000000a0000000000000c010000000e00000001000006040000000d00000004000000090000000000001104000000080000000600000004000005070000000e00000002000000060000000f00000001000000080000000000000003000000030000000a00000002000000060000000f000000011c000f030000000100000009020000090000000a25dc00005f2e00306130006100"], &(0x7f0000002940)=""/40, 0xc6, 0x28, 0x1, 0x8, 0x10000}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000003678cebefe90ceda828f000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, 0x2b, 0xb, 0x70bd2a, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@empty}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x5b}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003b00)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="1f00000000000000001000000000008000200100", @ANYRES32=0x1, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="04000000010000000300"/24, @ANYRES32=r10, @ANYBLOB="3ae5b709000d5087de69b7d3151854c5fa"], 0x50) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x3, 0x0, 0x500, 0x6, 0x110022, r6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 2.335636807s ago: executing program 1 (id=399): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6}, 0x14) close(0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x44, 0x11, 0x1, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0) 2.333087555s ago: executing program 0 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8040) 2.322560861s ago: executing program 1 (id=403): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x84500, 0x0) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b1ec6e66", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf253e000000280001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000060000000093dea61cbc7d895f635f69735f6e756c746963617374000500830000000000"], 0xe0}}, 0x40000000) 2.321089939s ago: executing program 0 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x80, 0x34}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vcan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c885}, 0x10008071) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x78, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "1ee21e2806c41b5e626dc80c2f4f92"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f8471f9d6380923b2c3b72fbfb"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x2000c040) 2.204362986s ago: executing program 3 (id=405): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x37, 0x0, &(0x7f0000000380)="243c42e8680d85ffff03762f86dd262f01fe07a255f47b8fb1f66926049dafd7d7fbeb41bc4419d6852f1bb3d1d081fcab56252dd7c3f9", 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "292ff77936daa61219421539"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6ce7ef388e"}, @NL80211_KEY_SEQ={0x12, 0x4, "8f5d2de4f3eac1c607f24a5d1056"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0xb0b}, 0x14}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x4, 0xfc4, 0x4, 0x2, r7, 0x5, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x0, 0x30]}}, 0x0, 0x33, 0x0, 0x1, 0x3}, 0x28) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000540)={'veth1_to_bond\x00', @remote}) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb916}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}]}]}, 0xffffffffffffff70}, 0x1, 0x0, 0x0, 0x800}, 0x24004001) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.071014578s ago: executing program 0 (id=406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000800290b12f95cb3f386ec527d9281a9678000000"], 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) unshare(0x20000400) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) read(r8, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.655356454s ago: executing program 3 (id=408): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000007c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x62}, 0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000c00)={r5, "bff4678338cdeac2bddd8f5f460de415"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000040)={r5, 0x8, 0xffffffffffffff89, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = socket(0x2, 0x80805, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8) r11 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) r13 = socket$kcm(0x2, 0x5, 0x84) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r7, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r14}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x400}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r16, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r18}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}], 0x20, 0x40844}}], 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000500)="c86b6679eaf91805c66ebaeba61f45bd72ec8b566656d2cac7d4ff00e9517df4cfe5c74ac79848391a989348a399d7d644631d753f2890", 0x37}, {&(0x7f0000000580)="dd30dffae3968b5188c6c7bb0dae8742a528990b3359e5f43fbfbd", 0x1b}, {&(0x7f00000005c0)="5d01126fea3b6de999a4aebfdfbfa89ae84950d542290efdd4d151f950c8785e53efaef14b4e5b97dffa", 0x2a}, {&(0x7f0000000600)="60c315b6e4e042342e7527e2424aafefdad58b1639aad0198def47b3e80095ba7d0ec66df97345e9cab4a7fd75b5d6e57ce58956a6ba501bc498886db37c7edaaef58355637a8a3f1529953ebdc95e4fd34cbbb00f4e9b3440c67482bed22e4a20fff14969728eab53ea0c498e4f4ac400fc324ba8", 0x75}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="c63e0b5a6c2302f12559cd0cc94e473ae867bd09152483665a5152db4071a33084f43742982e0c0de4f32cbf63847fcf5ba262cc3f5ed6831fc04f888b9c1807ac7438b07253a80948da9a9a0d4794aabb7431479c118c681f9e3db06726640112ebfc18e97c90551b86155e0d01390ea9218a7b37b525acb33a3a7483f5931ecff50f5fd651f501af25410ef6aa3c7435bf431c3365e1d61e06420b2d58cf57a67f17cbd234af54ad0633535a2db833689d189fb3550d1532e323511680c106f8aff968eb75ae898cb0c4106facf249", 0xd0}, {&(0x7f0000001dc0)="e17aaa585694875d2106bb8fd3c0dbd11816bfa00890e0e7251c219a38d940f9366fe65385b38d10", 0x28}, {&(0x7f0000001e00)="f1f5c6f42ce7590fbf6ab4df710501a6914df51281ae67cee9a0322f0b912e32af9cefdb43e798aae7ff4560ff28f1ffa01213e110d1510d8d83828cf265b5416bcc49805d64e879e30204a832e56d7e4336ceed2eaf9b951648c78781abf01b7e5c1622ee1c41b41753d7da89e4cface4d7ee9e41636fbc46582a1a87ffb08af509f4716b511380ee3f454683dd0d5acbd882ed6b4e886698e31d8c562009da41c8c5bd860bd740146818c42edb1761b1b54ce63ed435565f0c56bf751e8ec71751d8175cf75f5ceff65e82b8657b257e95d849a9493064d301783ba10f5eca43d1", 0xe2}], 0x8, &(0x7f0000002040)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r0, r0, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r6, r0, 0xffffffffffffffff, r6, r1, r0, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r18, r21}}}], 0x120, 0x6000}}], 0x1, 0x8804) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) 1.642284424s ago: executing program 4 (id=409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="440900000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001800038014000080080003400000000208000a8004000100"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3e8, 0x205, 0x70bd29, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000810) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r6 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000000b80)="1a", 0x1}], 0x1}], 0x1, 0x4004041) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff7600000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000af9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) recvmmsg(r6, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x160, 0x0) 1.283981528s ago: executing program 2 (id=410): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe8}}, 0x4000041) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.283024083s ago: executing program 4 (id=411): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004090000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000140), &(0x7f0000000080)}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r10, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 1.261445304s ago: executing program 3 (id=412): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd4) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) (async) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e0000000e000000080000000020000008240500", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000050000000e000000000000000004000009129489b07ca824d4a95f5edce66e2d5988b991777726d2daad7d7aa7ba53843b903a344bd0b7cb8da877e8519aea9da282c23914795bfc2e284d6935433ec9c5b9facbc1b36aaf3ea421de97f535e9033888911df6db5fdc69a40f3d6feb64eb99d4a3e5cf3b", @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000b80)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095d9ac1a278db2e3a60b139860e2f8ce2d2a8564f6125fdbcadba40040b503fe6f5529864f3a2a7c021dfb8df4a9e31cf7b9f00b602b113c30724d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000980)=@ethtool_channels={0x3d, 0xbe, 0x3, 0x5, 0x9, 0x80000001, 0x3, 0xf}}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e0000000300000007000000ff00000080100100", @ANYRES32=r3, @ANYBLOB="fcffffff0000be435e3bc7070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300000045af00"/24, @ANYRES32, @ANYBLOB], 0x50) (async) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000100)="2fa20bdb5443df167bcadf985adfb7341cf1732e550a7556dc3f3e8b2adc7479ce4c2a16cc767bc540e789f61ec81431dd418d6f641f13d6a0c61640d52b6dc0cba789422b2e98", 0x47, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000080100002ee3feb746c2000000000400", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018450000010000000000000000000000bf91000000000000b7020000000000008500000089699bfdb7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x1, 0xfa, &(0x7f00000006c0)=""/250, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0x6, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2, r3, r7, r2, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) unshare(0x6a040000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000002c0)={@private2, r10}, 0x14) (async) r11 = socket$netlink(0x10, 0x3, 0xb) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r11) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r12, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000010"], 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x8044) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r14 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r14, 0x400448c8, &(0x7f0000000200)={r13, r13, 0x2, 0x0, 0x0, 0x42, 0xfa, 0x0, 0x5886, 0x61, 0x3, 0x3, 'syz1\x00'}) 832.713743ms ago: executing program 1 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000580)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socket(0xf, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="d88cc10c934803027ea21193", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0xffffffffffffff45, &(0x7f0000000000), 0x100000000000030e}, 0x9969578a970b8830) r11 = socket$unix(0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 779.964878ms ago: executing program 4 (id=414): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6}, 0x14) close(0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x44, 0x11, 0x1, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0) 744.943654ms ago: executing program 3 (id=415): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r1, 0x0, 0x0) (async) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000058c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x440c1}], 0x1, 0x40) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000002440)="17000000020002000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d4f5b7e4a96c6b06169dadc0f8d9485bbb6a880000d6c8db0000dba67e060000e9d20499887ef23f028a7a63c900000200df01800000deff0000000000000080c457681f009cee4a5acb3da4f3001fb7315033bf79ac2df5bc080236e226f7b68c8e7b0d16e1600c09205e9482843f441e8f49f298eeab22344122bbc500602002000000000000009e51da13268fb9", 0xb8) (async) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000002440)="17000000020002000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d4f5b7e4a96c6b06169dadc0f8d9485bbb6a880000d6c8db0000dba67e060000e9d20499887ef23f028a7a63c900000200df01800000deff0000000000000080c457681f009cee4a5acb3da4f3001fb7315033bf79ac2df5bc080236e226f7b68c8e7b0d16e1600c09205e9482843f441e8f49f298eeab22344122bbc500602002000000000000009e51da13268fb9", 0xb8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 533.155315ms ago: executing program 4 (id=416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x34}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vcan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c885}, 0x10008071) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x78, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "1ee21e2806c41b5e626dc80c2f4f92"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f8471f9d6380923b2c3b72fbfb"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x2000c040) 487.626143ms ago: executing program 3 (id=417): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) unshare(0x6a040000) unshare(0x40000200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) (async) mmap(&(0x7f000096d000/0x3000)=nil, 0x3000, 0x200000a, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x22020400) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) writev(r2, 0x0, 0x0) (async) bind$inet(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private2, 0x4e20, 0x81, 0x4e23, 0x0, 0xa, 0x80, 0x80, 0x29, 0x0, r4}, {0x5, 0x6, 0x7fffffff, 0x6, 0x9, 0x1, 0x3, 0xffffffffffff0000}, {0xb5, 0x4f, 0xfffffffffffffffe, 0x80000001}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4d2, 0x32}, 0x2, @in=@loopback, 0x34ff, 0x1, 0x2, 0x8, 0x3, 0x487b, 0x9}}, 0xe8) (async) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmsg(r1, 0x0, 0x40080) socket(0x10, 0x803, 0x0) 442.187141ms ago: executing program 4 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x50, 0x2, 0x0, 0x80080006}, {0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000340)=0x3) write$ppp(r1, &(0x7f0000000200)='Av', 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000100000000000000008000018180000", @ANYRES32=0x1, @ANYBLOB="000000000000000018130000", @ANYRES32=0x1, @ANYBLOB='\x00'/12, @ANYRES32=0x1, @ANYBLOB="000000000002000018500000080000000000000000000000186200000b00000000000000a800000018200000", @ANYRES32=0x1, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0xc0000000, 0xa9, &(0x7f0000000140)=""/169, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x40, 0x800}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=[{0x4, 0x3, 0x9, 0xa}, {0x5, 0x1, 0x8, 0x6}, {0x0, 0x5, 0x6, 0x3acd710aaba9fb1}, {0x0, 0x4, 0x0, 0xb}]}, 0x94) r3 = socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r3, @ANYRES64=r2], 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='ext4_remove_blocks\x00', r2, 0x0, 0xd937}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x240000d4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000000)=0x101, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0xa}]}}}}}}}}, 0x0) 0s ago: executing program 4 (id=419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 67.668656][ T5845] cgroup: Unknown subsys name 'net' [ 67.811527][ T5845] cgroup: Unknown subsys name 'cpuset' [ 67.819339][ T5845] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.125101][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.211769][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.221728][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.225259][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.229228][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.238432][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.243207][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.257018][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.257060][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.264319][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.279802][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.287526][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.296846][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.302490][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.304609][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.311891][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.318242][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.325431][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.333236][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.338835][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.355397][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.364864][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.365114][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.379429][ T5877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.387800][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.390268][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.512117][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.519169][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.721694][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 71.852279][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 71.872280][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.880292][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.887532][ T5858] bridge_slave_0: entered allmulticast mode [ 71.895488][ T5858] bridge_slave_0: entered promiscuous mode [ 71.911581][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 71.931264][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.938634][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.946216][ T5858] bridge_slave_1: entered allmulticast mode [ 71.953120][ T5858] bridge_slave_1: entered promiscuous mode [ 71.992807][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 72.033048][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.045311][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.110193][ T5858] team0: Port device team_slave_0 added [ 72.120318][ T5858] team0: Port device team_slave_1 added [ 72.141030][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 72.158844][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.166816][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.174519][ T5871] bridge_slave_0: entered allmulticast mode [ 72.182033][ T5871] bridge_slave_0: entered promiscuous mode [ 72.211201][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.218320][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.225737][ T5871] bridge_slave_1: entered allmulticast mode [ 72.232599][ T5871] bridge_slave_1: entered promiscuous mode [ 72.262809][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.269940][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.296098][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.308256][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.315495][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.341836][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.367837][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.375043][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.382465][ T5855] bridge_slave_0: entered allmulticast mode [ 72.389313][ T5855] bridge_slave_0: entered promiscuous mode [ 72.417317][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.426803][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.434006][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.441539][ T5855] bridge_slave_1: entered allmulticast mode [ 72.448255][ T5855] bridge_slave_1: entered promiscuous mode [ 72.458505][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.465682][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.473026][ T5867] bridge_slave_0: entered allmulticast mode [ 72.479911][ T5867] bridge_slave_0: entered promiscuous mode [ 72.489431][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.510360][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.517508][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.524989][ T5867] bridge_slave_1: entered allmulticast mode [ 72.532086][ T5867] bridge_slave_1: entered promiscuous mode [ 72.582070][ T5858] hsr_slave_0: entered promiscuous mode [ 72.588347][ T5858] hsr_slave_1: entered promiscuous mode [ 72.605570][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.617552][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.651080][ T5871] team0: Port device team_slave_0 added [ 72.672328][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.679543][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.686703][ T5857] bridge_slave_0: entered allmulticast mode [ 72.693975][ T5857] bridge_slave_0: entered promiscuous mode [ 72.702979][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.721530][ T5871] team0: Port device team_slave_1 added [ 72.741640][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.748753][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.756422][ T5857] bridge_slave_1: entered allmulticast mode [ 72.763253][ T5857] bridge_slave_1: entered promiscuous mode [ 72.778484][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.815592][ T5855] team0: Port device team_slave_0 added [ 72.822933][ T5855] team0: Port device team_slave_1 added [ 72.851432][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.858421][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.884983][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.908827][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.919549][ T5867] team0: Port device team_slave_0 added [ 72.926898][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.936592][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.944052][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.970071][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.984893][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.991987][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.018101][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.030191][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.037241][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.063229][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.075254][ T5867] team0: Port device team_slave_1 added [ 73.124201][ T5857] team0: Port device team_slave_0 added [ 73.134946][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.142287][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.168272][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.180597][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.187580][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.213776][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.226293][ T5857] team0: Port device team_slave_1 added [ 73.292610][ T5871] hsr_slave_0: entered promiscuous mode [ 73.298946][ T5871] hsr_slave_1: entered promiscuous mode [ 73.305535][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 73.311405][ T5871] Cannot create hsr debugfs directory [ 73.317369][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.324859][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.351314][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.363579][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.370633][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.396902][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.418921][ T5855] hsr_slave_0: entered promiscuous mode [ 73.425237][ T5855] hsr_slave_1: entered promiscuous mode [ 73.429340][ T5869] Bluetooth: hci1: command tx timeout [ 73.431105][ T5877] Bluetooth: hci4: command tx timeout [ 73.436189][ T5862] Bluetooth: hci0: command tx timeout [ 73.441575][ T5865] Bluetooth: hci2: command tx timeout [ 73.447033][ T5874] Bluetooth: hci3: command tx timeout [ 73.453808][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 73.463470][ T5855] Cannot create hsr debugfs directory [ 73.572106][ T5867] hsr_slave_0: entered promiscuous mode [ 73.578290][ T5867] hsr_slave_1: entered promiscuous mode [ 73.584820][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 73.590829][ T5867] Cannot create hsr debugfs directory [ 73.614825][ T5857] hsr_slave_0: entered promiscuous mode [ 73.621172][ T5857] hsr_slave_1: entered promiscuous mode [ 73.627178][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 73.633202][ T5857] Cannot create hsr debugfs directory [ 73.782324][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.803142][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.826161][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.851565][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.906346][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.923236][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.942687][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.952735][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.994172][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.003940][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.020701][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.030835][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.083360][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.095428][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.118920][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.130838][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.193564][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.203379][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.215351][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.231942][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.243427][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.261094][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.284580][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.322802][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.329982][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.344991][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.352145][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.366628][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.385058][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.392205][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.418553][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.425724][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.498193][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.517886][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.600971][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.620176][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.637984][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.645160][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.667997][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.679161][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.686299][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.717998][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.733903][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.741073][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.785886][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.793043][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.807957][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.815112][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.857786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.865004][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.881963][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.914251][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.965895][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.045193][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.090181][ T5855] veth0_vlan: entered promiscuous mode [ 75.113178][ T5855] veth1_vlan: entered promiscuous mode [ 75.126932][ T5858] veth0_vlan: entered promiscuous mode [ 75.165871][ T5858] veth1_vlan: entered promiscuous mode [ 75.188408][ T5855] veth0_macvtap: entered promiscuous mode [ 75.198841][ T5855] veth1_macvtap: entered promiscuous mode [ 75.265858][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.278594][ T5858] veth0_macvtap: entered promiscuous mode [ 75.288173][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.300469][ T5858] veth1_macvtap: entered promiscuous mode [ 75.324903][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.345061][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.372311][ T2966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.394350][ T2966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.412992][ T2966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.424265][ T2966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.441098][ T5867] veth0_vlan: entered promiscuous mode [ 75.456748][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.478096][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.491614][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.502846][ T5867] veth1_vlan: entered promiscuous mode [ 75.512378][ T5874] Bluetooth: hci4: command tx timeout [ 75.517855][ T5862] Bluetooth: hci2: command tx timeout [ 75.517867][ T5877] Bluetooth: hci3: command tx timeout [ 75.517901][ T5877] Bluetooth: hci0: command tx timeout [ 75.523323][ T5862] Bluetooth: hci1: command tx timeout [ 75.606186][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.615627][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630490][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.643592][ T5867] veth0_macvtap: entered promiscuous mode [ 75.651246][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.659888][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.673132][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.707085][ T5867] veth1_macvtap: entered promiscuous mode [ 75.729598][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.737468][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.782429][ T5857] veth0_vlan: entered promiscuous mode [ 75.808760][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.836584][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.848912][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.862504][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.875885][ T5857] veth1_vlan: entered promiscuous mode [ 75.902796][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.928151][ T3006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.937721][ T3006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.951865][ T5871] veth0_vlan: entered promiscuous mode [ 75.958400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.978843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.991843][ T3006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.024857][ T3006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.062159][ T5871] veth1_vlan: entered promiscuous mode [ 76.124568][ T5857] veth0_macvtap: entered promiscuous mode [ 76.177363][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.194451][ T5857] veth1_macvtap: entered promiscuous mode [ 76.207691][ T5977] netlink: get zone limit has 8 unknown bytes [ 76.218377][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.262072][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.311111][ T5979] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 76.354528][ T5871] veth0_macvtap: entered promiscuous mode [ 76.394476][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.400767][ T5871] veth1_macvtap: entered promiscuous mode [ 76.412435][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.413547][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.451515][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.467185][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.493781][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.519458][ T3006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.550838][ T3006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.573888][ T3006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.613207][ T3006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624138][ T3006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652788][ T3006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.780764][ T5987] Zero length message leads to an empty skb [ 76.792565][ T3006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.903389][ T3006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.935093][ T3006] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.963925][ T3006] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.974601][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.994188][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.003182][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.015059][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.018601][ T3006] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.039236][ T3006] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.100907][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.141227][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.164277][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.174995][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.188495][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8'. [ 77.276903][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.332071][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.442711][ T6007] netlink: 'syz.1.10': attribute type 33 has an invalid length. [ 77.457161][ T6007] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.541654][ T6001] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.586864][ T6014] netlink: 'syz.3.13': attribute type 3 has an invalid length. [ 77.595103][ T5865] Bluetooth: hci1: command tx timeout [ 77.602955][ T5874] Bluetooth: hci2: command tx timeout [ 77.603182][ T5865] Bluetooth: hci3: command tx timeout [ 77.608380][ T5874] Bluetooth: hci0: command tx timeout [ 77.620522][ T5877] Bluetooth: hci4: command tx timeout [ 77.631903][ T6014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 77.639680][ T6001] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 77.653478][ T6001] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 77.679582][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.692058][ T6005] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.064895][ T6030] netlink: 72 bytes leftover after parsing attributes in process `syz.3.19'. [ 78.261854][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 78.289344][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 78.349911][ T6054] netlink: 'syz.0.25': attribute type 20 has an invalid length. [ 78.383369][ T2966] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.430622][ T2966] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.463208][ T2966] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.512819][ T2966] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.794344][ T6079] veth0: entered promiscuous mode [ 79.436375][ T6105] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 79.470258][ T6105] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.471125][ T6106] bridge_slave_0: left allmulticast mode [ 79.476705][ T6105] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.499061][ T6106] bridge_slave_0: left promiscuous mode [ 79.506945][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.528742][ T6106] bridge_slave_1: left allmulticast mode [ 79.538881][ T6106] bridge_slave_1: left promiscuous mode [ 79.548433][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.566054][ T6106] bond0: (slave bond_slave_0): Releasing backup interface [ 79.603363][ T6106] bond0: (slave bond_slave_1): Releasing backup interface [ 79.632218][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.656569][ T6106] team0: Port device team_slave_0 removed [ 79.657094][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.672331][ T5865] Bluetooth: hci0: command tx timeout [ 79.672369][ T5865] Bluetooth: hci2: command tx timeout [ 79.672392][ T5865] Bluetooth: hci1: command tx timeout [ 79.679418][ T5877] Bluetooth: hci3: command tx timeout [ 79.692627][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.694778][ T5865] Bluetooth: hci4: command tx timeout [ 79.726076][ T6106] team0: Port device team_slave_1 removed [ 79.751206][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.752051][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.764210][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.785885][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.789213][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.799095][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.818267][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.832718][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.833914][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.840308][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.858738][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.901067][ T6107] 0ªX¹¦À: renamed from caif0 [ 79.909095][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.927662][ T6107] 0ªX¹¦À: entered allmulticast mode [ 79.938481][ T6107] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.226704][ T6131] syzkaller0: entered promiscuous mode [ 80.237106][ T6131] syzkaller0: entered allmulticast mode [ 80.247330][ T6122] tipc: Started in network mode [ 80.255646][ T6122] tipc: Node identity ca209d334303, cluster identity 4711 [ 80.265596][ T6122] tipc: Enabled bearer , priority 0 [ 80.308570][ T6131] tipc: Resetting bearer [ 80.327452][ T6121] tipc: Resetting bearer [ 80.351929][ T6121] tipc: Disabling bearer [ 80.506539][ T6142] FAULT_INJECTION: forcing a failure. [ 80.506539][ T6142] name failslab, interval 1, probability 0, space 0, times 1 [ 80.577480][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.2.48 Not tainted syzkaller #0 PREEMPT(full) [ 80.577512][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.577525][ T6142] Call Trace: [ 80.577533][ T6142] [ 80.577541][ T6142] dump_stack_lvl+0x189/0x250 [ 80.577571][ T6142] ? __pfx____ratelimit+0x10/0x10 [ 80.577602][ T6142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.577625][ T6142] ? __pfx__printk+0x10/0x10 [ 80.577653][ T6142] ? fs_reclaim_acquire+0x7d/0x100 [ 80.577684][ T6142] ? rcu_is_watching+0x15/0xb0 [ 80.577704][ T6142] ? __pfx___might_resched+0x10/0x10 [ 80.577722][ T6142] ? lock_acquire+0x5f/0x360 [ 80.577753][ T6142] should_fail_ex+0x414/0x560 [ 80.577781][ T6142] should_failslab+0xa8/0x100 [ 80.577812][ T6142] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 80.577846][ T6142] ? __alloc_skb+0x112/0x2d0 [ 80.577863][ T6142] ? __pfx_netlink_unicast+0x10/0x10 [ 80.577911][ T6142] __alloc_skb+0x112/0x2d0 [ 80.577932][ T6142] netlink_sendmsg+0x5c6/0xb30 [ 80.577962][ T6142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.577983][ T6142] ? is_bpf_text_address+0x26/0x2b0 [ 80.578013][ T6142] ? rcu_is_watching+0x15/0xb0 [ 80.578032][ T6142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 80.578051][ T6142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 80.578074][ T6142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.578093][ T6142] __sock_sendmsg+0x21c/0x270 [ 80.578122][ T6142] ____sys_sendmsg+0x52d/0x830 [ 80.578147][ T6142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.578174][ T6142] ? import_iovec+0x74/0xa0 [ 80.578199][ T6142] ___sys_sendmsg+0x21f/0x2a0 [ 80.578223][ T6142] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.578248][ T6142] ? kstrtouint+0x6e/0xe0 [ 80.578294][ T6142] ? rcu_is_watching+0x15/0xb0 [ 80.578314][ T6142] ? lock_release+0x4b/0x3e0 [ 80.578345][ T6142] ? __might_fault+0xcc/0x130 [ 80.578375][ T6142] __sys_sendmmsg+0x227/0x430 [ 80.578400][ T6142] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.578420][ T6142] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 80.578455][ T6142] ? ksys_write+0x22a/0x250 [ 80.578483][ T6142] ? __pfx_ksys_write+0x10/0x10 [ 80.578509][ T6142] ? rcu_is_watching+0x15/0xb0 [ 80.578532][ T6142] __x64_sys_sendmmsg+0xa0/0xc0 [ 80.578556][ T6142] do_syscall_64+0xfa/0x3b0 [ 80.578576][ T6142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.578597][ T6142] ? clear_bhb_loop+0x60/0xb0 [ 80.578620][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.578640][ T6142] RIP: 0033:0x7f044438ebe9 [ 80.578672][ T6142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.578690][ T6142] RSP: 002b:00007f04425f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.578713][ T6142] RAX: ffffffffffffffda RBX: 00007f04445b5fa0 RCX: 00007f044438ebe9 [ 80.578728][ T6142] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 80.578742][ T6142] RBP: 00007f04425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 80.578755][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.578767][ T6142] R13: 00007f04445b6038 R14: 00007f04445b5fa0 R15: 00007ffde6332fe8 [ 80.578791][ T6142] [ 81.260130][ T6150] tipc: Started in network mode [ 81.279881][ T6150] tipc: Node identity f62bf70cae14, cluster identity 4711 [ 81.317629][ T6150] tipc: Enabled bearer , priority 0 [ 81.345568][ T6160] syzkaller0: entered promiscuous mode [ 81.356679][ T6159] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 81.376029][ T6160] syzkaller0: entered allmulticast mode [ 81.382209][ T6159] __nla_validate_parse: 5 callbacks suppressed [ 81.382224][ T6159] netlink: 144 bytes leftover after parsing attributes in process `syz.4.55'. [ 81.415536][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.55'. [ 81.426866][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.55'. [ 81.437274][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 81.459765][ T6150] tipc: Resetting bearer [ 81.479329][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 81.495209][ T6164] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 81.503370][ T6149] tipc: Resetting bearer [ 81.543210][ T6164] netlink: 10 bytes leftover after parsing attributes in process `syz.2.56'. [ 81.575624][ T6149] tipc: Disabling bearer [ 81.630789][ T6164] nbd: socks must be embedded in a SOCK_ITEM attr [ 81.657648][ T6164] block nbd0: shutting down sockets [ 81.803358][ T6175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.971638][ T6189] syz.1.63 uses obsolete (PF_INET,SOCK_PACKET) [ 82.090163][ T6198] syzkaller1: entered promiscuous mode [ 82.096125][ T44] IPVS: starting estimator thread 0... [ 82.105749][ T6198] syzkaller1: entered allmulticast mode [ 82.189498][ T6201] IPVS: using max 37 ests per chain, 88800 per kthread [ 82.425738][ T6218] netlink: 'syz.4.74': attribute type 1 has an invalid length. [ 82.470744][ T6218] netlink: zone id is out of range [ 82.487694][ T6218] netlink: zone id is out of range [ 82.493674][ T6218] netlink: zone id is out of range [ 82.502383][ T6218] netlink: zone id is out of range [ 82.509172][ T6218] netlink: zone id is out of range [ 82.520691][ T6218] netlink: zone id is out of range [ 82.542781][ T6218] netlink: zone id is out of range [ 82.547977][ T6218] netlink: zone id is out of range [ 82.566032][ T6224] netlink: 'syz.2.75': attribute type 33 has an invalid length. [ 82.574900][ T6222] netlink: del zone limit has 4 unknown bytes [ 82.581190][ T6218] netlink: zone id is out of range [ 82.586502][ T6224] netlink: 152 bytes leftover after parsing attributes in process `syz.2.75'. [ 82.983111][ T6246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.028833][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.036554][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.159048][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.196491][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.363190][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 83.445678][ T6246] batadv_slave_1: entered promiscuous mode [ 83.544611][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.560811][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.567724][ T6267] sctp: [Deprecated]: syz.3.87 (pid 6267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.567724][ T6267] Use struct sctp_sack_info instead [ 83.591609][ T3006] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.613149][ T3006] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.641849][ T3006] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.692677][ T3006] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.709009][ T3006] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.738666][ T3006] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.754602][ T6244] batadv_slave_1: left promiscuous mode [ 83.901620][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 83.917272][ T6279] netlink: 68 bytes leftover after parsing attributes in process `syz.2.93'. [ 83.924809][ T6278] vlan2: entered allmulticast mode [ 83.931742][ T6278] bridge0: entered allmulticast mode [ 84.002761][ T6284] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 84.268831][ T6300] team0: Port device team_slave_0 removed [ 84.295051][ T6299] syz_tun: entered allmulticast mode [ 84.315596][ T6299] dvmrp8: entered allmulticast mode [ 84.414912][ T6310] netlink: 'syz.2.99': attribute type 23 has an invalid length. [ 84.656745][ T6295] syz_tun: left allmulticast mode [ 84.662693][ T6295] dvmrp8: left allmulticast mode [ 84.726605][ T6326] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 84.959682][ T6333] veth3: entered promiscuous mode [ 85.017694][ T6335] erspan0: entered allmulticast mode [ 85.183172][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.196803][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.208488][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.299898][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.514566][ T6358] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 85.545818][ T6358] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 85.601522][ T6356] team0: Port device team_slave_0 removed [ 85.637832][ T6358] veth0_vlan: entered allmulticast mode [ 86.026742][ T6390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.612888][ T6423] __nla_validate_parse: 12 callbacks suppressed [ 86.612907][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 86.628966][ T6423] netlink: 96 bytes leftover after parsing attributes in process `syz.1.132'. [ 86.908189][ T6442] netlink: 'syz.1.136': attribute type 13 has an invalid length. [ 86.916457][ T6442] netlink: 'syz.1.136': attribute type 17 has an invalid length. [ 86.985504][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.994672][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.144126][ T6446] netem: incorrect gi model size [ 87.149676][ T6446] netem: change failed [ 87.374008][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 87.448589][ T6454] netlink: 'syz.0.141': attribute type 2 has an invalid length. [ 87.489739][ T6463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.142'. [ 87.789757][ T6486] FAULT_INJECTION: forcing a failure. [ 87.789757][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.816769][ T6490] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 87.854663][ T6489] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 87.857097][ T6486] CPU: 0 UID: 0 PID: 6486 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT(full) [ 87.857126][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.857141][ T6486] Call Trace: [ 87.857149][ T6486] [ 87.857159][ T6486] dump_stack_lvl+0x189/0x250 [ 87.857192][ T6486] ? __pfx____ratelimit+0x10/0x10 [ 87.857226][ T6486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.857253][ T6486] ? __pfx__printk+0x10/0x10 [ 87.857282][ T6486] ? rcu_is_watching+0x15/0xb0 [ 87.857306][ T6486] ? lock_acquire+0x5f/0x360 [ 87.857349][ T6486] ? __might_fault+0xb0/0x130 [ 87.857381][ T6486] ? rcu_is_watching+0x15/0xb0 [ 87.857405][ T6486] should_fail_ex+0x414/0x560 [ 87.857457][ T6486] _copy_from_user+0x2d/0xb0 [ 87.857484][ T6486] __copy_msghdr+0x3c5/0x5b0 [ 87.857513][ T6486] ___sys_sendmsg+0x1a5/0x2a0 [ 87.857539][ T6486] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.857585][ T6486] ? __fget_files+0x2a/0x420 [ 87.857605][ T6486] ? __fget_files+0x3a0/0x420 [ 87.857634][ T6486] __x64_sys_sendmsg+0x19b/0x260 [ 87.857661][ T6486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.857695][ T6486] ? __pfx_ksys_write+0x10/0x10 [ 87.857724][ T6486] ? rcu_is_watching+0x15/0xb0 [ 87.857750][ T6486] ? rcu_is_watching+0x15/0xb0 [ 87.857773][ T6486] do_syscall_64+0xfa/0x3b0 [ 87.857797][ T6486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.857825][ T6486] ? clear_bhb_loop+0x60/0xb0 [ 87.857852][ T6486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.857874][ T6486] RIP: 0033:0x7f044438ebe9 [ 87.857895][ T6486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.857915][ T6486] RSP: 002b:00007f04425f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.857941][ T6486] RAX: ffffffffffffffda RBX: 00007f04445b5fa0 RCX: 00007f044438ebe9 [ 87.857959][ T6486] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 87.857973][ T6486] RBP: 00007f04425f6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.857988][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.858001][ T6486] R13: 00007f04445b6038 R14: 00007f04445b5fa0 R15: 00007ffde6332fe8 [ 87.858028][ T6486] [ 87.888550][ T6490] netlink: 'syz.0.149': attribute type 4 has an invalid length. [ 87.915567][ T6489] netlink: 'syz.0.149': attribute type 4 has an invalid length. [ 88.019640][ T6490] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.149'. [ 88.123434][ T6489] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.149'. [ 88.573365][ T6510] netlink: 'syz.3.156': attribute type 3 has an invalid length. [ 88.977105][ T6535] FAULT_INJECTION: forcing a failure. [ 88.977105][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.993660][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.4.160 Not tainted syzkaller #0 PREEMPT(full) [ 88.993706][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.993718][ T6535] Call Trace: [ 88.993725][ T6535] [ 88.993734][ T6535] dump_stack_lvl+0x189/0x250 [ 88.993763][ T6535] ? __pfx____ratelimit+0x10/0x10 [ 88.993793][ T6535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.993816][ T6535] ? __pfx__printk+0x10/0x10 [ 88.993846][ T6535] ? rcu_is_watching+0x15/0xb0 [ 88.993867][ T6535] should_fail_ex+0x414/0x560 [ 88.993896][ T6535] _copy_to_user+0x31/0xb0 [ 88.993920][ T6535] simple_read_from_buffer+0xe1/0x170 [ 88.993951][ T6535] proc_fail_nth_read+0x1b3/0x220 [ 88.993975][ T6535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.993999][ T6535] ? rw_verify_area+0x2a6/0x4d0 [ 88.994024][ T6535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.994046][ T6535] vfs_read+0x1fd/0xa30 [ 88.994070][ T6535] ? fdget_pos+0x247/0x320 [ 88.994089][ T6535] ? __pfx___mutex_lock+0x10/0x10 [ 88.994108][ T6535] ? __pfx_vfs_read+0x10/0x10 [ 88.994137][ T6535] ? __fget_files+0x3a0/0x420 [ 88.994153][ T6535] ? __fget_files+0x2a/0x420 [ 88.994182][ T6535] ksys_read+0x145/0x250 [ 88.994208][ T6535] ? __pfx_ksys_read+0x10/0x10 [ 88.994232][ T6535] ? rcu_is_watching+0x15/0xb0 [ 88.994254][ T6535] ? rcu_is_watching+0x15/0xb0 [ 88.994275][ T6535] do_syscall_64+0xfa/0x3b0 [ 88.994293][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.994313][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 88.994335][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.994354][ T6535] RIP: 0033:0x7fa0c378d5fc [ 88.994371][ T6535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.994388][ T6535] RSP: 002b:00007fa0c456c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.994410][ T6535] RAX: ffffffffffffffda RBX: 00007fa0c39b5fa0 RCX: 00007fa0c378d5fc [ 88.994425][ T6535] RDX: 000000000000000f RSI: 00007fa0c456c0a0 RDI: 0000000000000005 [ 88.994438][ T6535] RBP: 00007fa0c456c090 R08: 0000000000000000 R09: 0000000000000000 [ 88.994450][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.994462][ T6535] R13: 00007fa0c39b6038 R14: 00007fa0c39b5fa0 R15: 00007ffe711f3b68 [ 88.994484][ T6535] [ 89.257730][ T6541] FAULT_INJECTION: forcing a failure. [ 89.257730][ T6541] name failslab, interval 1, probability 0, space 0, times 0 [ 89.282454][ T6544] Illegal XDP return value 4294967282 on prog (id 57) dev N/A, expect packet loss! [ 89.284609][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.1.161 Not tainted syzkaller #0 PREEMPT(full) [ 89.284641][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.284654][ T6541] Call Trace: [ 89.284663][ T6541] [ 89.284672][ T6541] dump_stack_lvl+0x189/0x250 [ 89.284705][ T6541] ? __pfx____ratelimit+0x10/0x10 [ 89.284740][ T6541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.284767][ T6541] ? __pfx__printk+0x10/0x10 [ 89.284795][ T6541] ? lock_acquire+0x5f/0x360 [ 89.284830][ T6541] ? __pfx___might_resched+0x10/0x10 [ 89.284853][ T6541] ? lock_acquire+0x5f/0x360 [ 89.284887][ T6541] should_fail_ex+0x414/0x560 [ 89.284919][ T6541] should_failslab+0xa8/0x100 [ 89.284954][ T6541] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 89.284986][ T6541] ? __alloc_skb+0x112/0x2d0 [ 89.285027][ T6541] __alloc_skb+0x112/0x2d0 [ 89.285050][ T6541] alloc_skb_with_frags+0xca/0x890 [ 89.285072][ T6541] ? __mutex_trylock_common+0x153/0x260 [ 89.285098][ T6541] ? __pfx___mutex_trylock_common+0x10/0x10 [ 89.285127][ T6541] sock_alloc_send_pskb+0x857/0x990 [ 89.285166][ T6541] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 89.285198][ T6541] ? rcu_is_watching+0x15/0xb0 [ 89.285221][ T6541] ? pn_socket_bind+0x40d/0x550 [ 89.285248][ T6541] pn_sendmsg+0x1f5/0x420 [ 89.285276][ T6541] ? __pfx_pn_sendmsg+0x10/0x10 [ 89.285301][ T6541] ? pn_socket_bind+0x40d/0x550 [ 89.285326][ T6541] ? pn_socket_bind+0x40d/0x550 [ 89.285353][ T6541] pn_socket_sendmsg+0x1c3/0x230 [ 89.285390][ T6541] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 89.285419][ T6541] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 89.285444][ T6541] ? aa_sock_msg_perm+0xf1/0x1d0 [ 89.285466][ T6541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.285492][ T6541] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 89.285517][ T6541] __sock_sendmsg+0x21c/0x270 [ 89.285548][ T6541] ____sys_sendmsg+0x505/0x830 [ 89.285576][ T6541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.285598][ T6541] ? __might_fault+0xb0/0x130 [ 89.285634][ T6541] ? import_iovec+0x74/0xa0 [ 89.285661][ T6541] ___sys_sendmsg+0x21f/0x2a0 [ 89.285686][ T6541] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.285731][ T6541] ? __fget_files+0x2a/0x420 [ 89.285750][ T6541] ? __fget_files+0x3a0/0x420 [ 89.285775][ T6541] __x64_sys_sendmsg+0x19b/0x260 [ 89.285801][ T6541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.285832][ T6541] ? __pfx_ksys_write+0x10/0x10 [ 89.285860][ T6541] ? rcu_is_watching+0x15/0xb0 [ 89.285885][ T6541] ? rcu_is_watching+0x15/0xb0 [ 89.285909][ T6541] do_syscall_64+0xfa/0x3b0 [ 89.285930][ T6541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.285953][ T6541] ? clear_bhb_loop+0x60/0xb0 [ 89.285979][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.286000][ T6541] RIP: 0033:0x7f3002b8ebe9 [ 89.286020][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.286039][ T6541] RSP: 002b:00007f300399a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.286064][ T6541] RAX: ffffffffffffffda RBX: 00007f3002db5fa0 RCX: 00007f3002b8ebe9 [ 89.286082][ T6541] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 89.286096][ T6541] RBP: 00007f300399a090 R08: 0000000000000000 R09: 0000000000000000 [ 89.286110][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.286124][ T6541] R13: 00007f3002db6038 R14: 00007f3002db5fa0 R15: 00007ffcbdbe8868 [ 89.286148][ T6541] [ 89.647634][ T6547] dvmrp8: entered allmulticast mode [ 89.956639][ T6557] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 89.985625][ T6562] netlink: 'syz.0.169': attribute type 49 has an invalid length. [ 90.068659][ T6570] netlink: 56 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.103237][ T6570] netlink: 56 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.377776][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 90.456555][ T6600] netlink: 68 bytes leftover after parsing attributes in process `syz.3.181'. [ 90.468150][ T6600] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 90.758643][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.787995][ T6621] FAULT_INJECTION: forcing a failure. [ 90.787995][ T6621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.797226][ T6618] bond1: (slave geneve2): making interface the new active one [ 90.801691][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 90.801719][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.801733][ T6621] Call Trace: [ 90.801742][ T6621] [ 90.801750][ T6621] dump_stack_lvl+0x189/0x250 [ 90.801781][ T6621] ? __pfx____ratelimit+0x10/0x10 [ 90.801814][ T6621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.801839][ T6621] ? __pfx__printk+0x10/0x10 [ 90.801866][ T6621] ? __might_fault+0xb0/0x130 [ 90.801900][ T6621] ? rcu_is_watching+0x15/0xb0 [ 90.801924][ T6621] should_fail_ex+0x414/0x560 [ 90.801953][ T6621] _copy_from_iter+0x1db/0x16f0 [ 90.801981][ T6621] ? __pfx__copy_from_iter+0x10/0x10 [ 90.802005][ T6621] ? rcu_is_watching+0x15/0xb0 [ 90.802025][ T6621] ? skb_put+0x11b/0x210 [ 90.802047][ T6621] pn_sendmsg+0x2aa/0x420 [ 90.802074][ T6621] ? __pfx_pn_sendmsg+0x10/0x10 [ 90.802115][ T6621] ? pn_socket_bind+0x40d/0x550 [ 90.802140][ T6621] ? pn_socket_bind+0x40d/0x550 [ 90.802167][ T6621] pn_socket_sendmsg+0x1c3/0x230 [ 90.802189][ T6621] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 90.802215][ T6621] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 90.802241][ T6621] ? aa_sock_msg_perm+0xf1/0x1d0 [ 90.802263][ T6621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.802295][ T6621] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 90.802321][ T6621] __sock_sendmsg+0x21c/0x270 [ 90.802354][ T6621] ____sys_sendmsg+0x505/0x830 [ 90.802381][ T6621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.802402][ T6621] ? __might_fault+0xb0/0x130 [ 90.802437][ T6621] ? import_iovec+0x74/0xa0 [ 90.802466][ T6621] ___sys_sendmsg+0x21f/0x2a0 [ 90.802489][ T6621] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.802535][ T6621] ? __fget_files+0x2a/0x420 [ 90.802554][ T6621] ? __fget_files+0x3a0/0x420 [ 90.802580][ T6621] __x64_sys_sendmsg+0x19b/0x260 [ 90.802609][ T6621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.802639][ T6621] ? __pfx_ksys_write+0x10/0x10 [ 90.802669][ T6621] ? rcu_is_watching+0x15/0xb0 [ 90.802694][ T6621] ? rcu_is_watching+0x15/0xb0 [ 90.802718][ T6621] do_syscall_64+0xfa/0x3b0 [ 90.802741][ T6621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.802764][ T6621] ? clear_bhb_loop+0x60/0xb0 [ 90.802792][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.802813][ T6621] RIP: 0033:0x7fa0c378ebe9 [ 90.802834][ T6621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.802853][ T6621] RSP: 002b:00007fa0c456c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.802879][ T6621] RAX: ffffffffffffffda RBX: 00007fa0c39b5fa0 RCX: 00007fa0c378ebe9 [ 90.802896][ T6621] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 90.802909][ T6621] RBP: 00007fa0c456c090 R08: 0000000000000000 R09: 0000000000000000 [ 90.802924][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.802936][ T6621] R13: 00007fa0c39b6038 R14: 00007fa0c39b5fa0 R15: 00007ffe711f3b68 [ 90.802962][ T6621] [ 91.107156][ T6618] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 91.173267][ T2940] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.182843][ T2940] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.198929][ T2940] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.224287][ T2940] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.332718][ T6626] syzkaller0: entered promiscuous mode [ 91.353079][ T6626] syzkaller0: entered allmulticast mode [ 91.697525][ T6648] __nla_validate_parse: 5 callbacks suppressed [ 91.697545][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 91.768071][ T6641] tipc: MTU too low for tipc bearer [ 91.923371][ T6652] syzkaller0: entered promiscuous mode [ 91.942370][ T6659] netlink: 56 bytes leftover after parsing attributes in process `syz.3.198'. [ 91.969717][ T6652] syzkaller0: entered allmulticast mode [ 91.992801][ T10] cfg80211: failed to load regulatory.db [ 92.095400][ T6670] FAULT_INJECTION: forcing a failure. [ 92.095400][ T6670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.120707][ T6670] CPU: 1 UID: 0 PID: 6670 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(full) [ 92.120740][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.120753][ T6670] Call Trace: [ 92.120761][ T6670] [ 92.120770][ T6670] dump_stack_lvl+0x189/0x250 [ 92.120799][ T6670] ? __pfx____ratelimit+0x10/0x10 [ 92.120829][ T6670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.120853][ T6670] ? __pfx__printk+0x10/0x10 [ 92.120891][ T6670] ? rcu_is_watching+0x15/0xb0 [ 92.120912][ T6670] should_fail_ex+0x414/0x560 [ 92.120940][ T6670] _copy_to_user+0x31/0xb0 [ 92.120964][ T6670] simple_read_from_buffer+0xe1/0x170 [ 92.120995][ T6670] proc_fail_nth_read+0x1b3/0x220 [ 92.121020][ T6670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.121044][ T6670] ? rw_verify_area+0x2a6/0x4d0 [ 92.121069][ T6670] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.121092][ T6670] vfs_read+0x1fd/0xa30 [ 92.121116][ T6670] ? fdget_pos+0x247/0x320 [ 92.121135][ T6670] ? __pfx___mutex_lock+0x10/0x10 [ 92.121155][ T6670] ? __pfx_vfs_read+0x10/0x10 [ 92.121184][ T6670] ? __fget_files+0x3a0/0x420 [ 92.121200][ T6670] ? __fget_files+0x2a/0x420 [ 92.121221][ T6670] ksys_read+0x145/0x250 [ 92.121248][ T6670] ? __pfx_ksys_read+0x10/0x10 [ 92.121271][ T6670] ? rcu_is_watching+0x15/0xb0 [ 92.121292][ T6670] ? rcu_is_watching+0x15/0xb0 [ 92.121311][ T6670] do_syscall_64+0xfa/0x3b0 [ 92.121329][ T6670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.121347][ T6670] ? clear_bhb_loop+0x60/0xb0 [ 92.121368][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.121386][ T6670] RIP: 0033:0x7f280978d5fc [ 92.121403][ T6670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 92.121419][ T6670] RSP: 002b:00007f280a618030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.121440][ T6670] RAX: ffffffffffffffda RBX: 00007f28099b5fa0 RCX: 00007f280978d5fc [ 92.121455][ T6670] RDX: 000000000000000f RSI: 00007f280a6180a0 RDI: 0000000000000005 [ 92.121467][ T6670] RBP: 00007f280a618090 R08: 0000000000000000 R09: 0000000000000000 [ 92.121479][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.121489][ T6670] R13: 00007f28099b6038 R14: 00007f28099b5fa0 R15: 00007ffe02f55748 [ 92.121511][ T6670] [ 92.592937][ T6677] bond1: (slave geneve2): Releasing active interface [ 92.684142][ T6676] syzkaller1: entered promiscuous mode [ 92.689868][ T6676] syzkaller1: entered allmulticast mode [ 92.697188][ T6680] net_ratelimit: 19 callbacks suppressed [ 92.697207][ T6680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.948663][ T6699] netlink: 9 bytes leftover after parsing attributes in process `syz.4.210'. [ 92.973351][ T6699] gretap0: entered promiscuous mode [ 93.006666][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 93.163897][ T6715] validate_nla: 1 callbacks suppressed [ 93.163916][ T6715] netlink: 'syz.4.216': attribute type 21 has an invalid length. [ 93.178361][ T6715] netlink: 128 bytes leftover after parsing attributes in process `syz.4.216'. [ 93.188752][ T6715] netlink: 'syz.4.216': attribute type 5 has an invalid length. [ 93.198215][ T6715] netlink: 'syz.4.216': attribute type 6 has an invalid length. [ 93.213721][ T6715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.216'. [ 93.303106][ T6711] veth1_macvtap: left promiscuous mode [ 93.308620][ T6711] macsec0: entered promiscuous mode [ 93.615399][ T6742] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 93.692389][ T6744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.706021][ T6744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.774545][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.782075][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.817442][ T6763] netlink: 5 bytes leftover after parsing attributes in process `syz.0.229'. [ 93.845540][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.860658][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.865150][ T6763] netlink: 128 bytes leftover after parsing attributes in process `syz.0.229'. [ 93.970766][ T6744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.012771][ T6744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.062054][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.075992][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 94.077297][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.096052][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.122436][ T6744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.133023][ T6744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.147031][ T6774] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 94.154418][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.163782][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.181461][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.209627][ T6744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.238454][ T6744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.311557][ T6784] vlan0: entered promiscuous mode [ 94.328754][ T6787] lo speed is unknown, defaulting to 1000 [ 94.332437][ T6763] syz.0.229 (6763) used greatest stack depth: 17992 bytes left [ 94.338628][ T6787] lo speed is unknown, defaulting to 1000 [ 94.355599][ T6787] lo speed is unknown, defaulting to 1000 [ 94.390347][ T2940] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.399495][ T2940] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432430][ T2940] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.452180][ T2940] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.476473][ T2940] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.493371][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 94.508332][ T2940] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.527576][ T6791] IPv6: sit1: Disabled Multicast RS [ 94.545408][ T6787] infiniband syz0: set down [ 94.550264][ T6787] infiniband syz0: added lo [ 94.577358][ T1208] lo speed is unknown, defaulting to 1000 [ 94.584251][ T6787] RDS/IB: syz0: added [ 94.588353][ T6787] smc: adding ib device syz0 with port count 1 [ 94.594910][ T6787] smc: ib device syz0 port 1 has pnetid [ 94.602330][ T1208] lo speed is unknown, defaulting to 1000 [ 94.610059][ T6787] lo speed is unknown, defaulting to 1000 [ 94.611429][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.636461][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.068932][ T6787] lo speed is unknown, defaulting to 1000 [ 95.414112][ T6787] lo speed is unknown, defaulting to 1000 [ 95.758479][ T6787] lo speed is unknown, defaulting to 1000 [ 95.840487][ T6881] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 95.891838][ T6881] bridge_slave_0: left allmulticast mode [ 95.901144][ T6889] trusted_key: syz.2.264 sent an empty control message without MSG_MORE. [ 95.911665][ T6881] bridge_slave_0: left promiscuous mode [ 95.917741][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.931917][ T6881] bridge_slave_1: left allmulticast mode [ 95.937802][ T6881] bridge_slave_1: left promiscuous mode [ 95.944763][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.956619][ T6881] bond0: (slave bond_slave_0): Releasing backup interface [ 95.971060][ T6881] bond0: (slave bond_slave_1): Releasing backup interface [ 95.992455][ T6881] team0: Port device team_slave_0 removed [ 96.000766][ T6881] team0: Port device team_slave_1 removed [ 96.007005][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.014699][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.022942][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.030741][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.068447][ T6787] lo speed is unknown, defaulting to 1000 [ 96.141168][ T6894] tipc: MTU too low for tipc bearer [ 96.160825][ T6896] netlink: 'syz.1.266': attribute type 2 has an invalid length. [ 96.189313][ T6896] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 96.820262][ T6944] __nla_validate_parse: 14 callbacks suppressed [ 96.820281][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 96.841955][ T6944] netlink: 96 bytes leftover after parsing attributes in process `syz.1.284'. [ 96.909845][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 96.925185][ T6946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 96.996843][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 97.035003][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 97.190907][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 97.201245][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 97.312620][ T6975] netlink: 'syz.0.294': attribute type 12 has an invalid length. [ 97.322782][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 97.348722][ T6975] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.294'. [ 97.359511][ T6973] lo speed is unknown, defaulting to 1000 [ 97.606753][ T6988] FAULT_INJECTION: forcing a failure. [ 97.606753][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 97.627907][ T6989] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 97.650902][ T6988] CPU: 1 UID: 0 PID: 6988 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(full) [ 97.650931][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 97.650944][ T6988] Call Trace: [ 97.650952][ T6988] [ 97.650960][ T6988] dump_stack_lvl+0x189/0x250 [ 97.650990][ T6988] ? __pfx____ratelimit+0x10/0x10 [ 97.651025][ T6988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.651048][ T6988] ? __pfx__printk+0x10/0x10 [ 97.651077][ T6988] ? fs_reclaim_acquire+0x7d/0x100 [ 97.651108][ T6988] ? rcu_is_watching+0x15/0xb0 [ 97.651127][ T6988] ? __pfx___might_resched+0x10/0x10 [ 97.651144][ T6988] ? lock_acquire+0x5f/0x360 [ 97.651175][ T6988] should_fail_ex+0x414/0x560 [ 97.651204][ T6988] should_failslab+0xa8/0x100 [ 97.651234][ T6988] __kmalloc_noprof+0xcb/0x4f0 [ 97.651260][ T6988] ? skcipher_recvmsg+0xc6/0x11c0 [ 97.651285][ T6988] ? sock_kmalloc+0xd6/0x160 [ 97.651309][ T6988] sock_kmalloc+0xd6/0x160 [ 97.651333][ T6988] af_alg_alloc_areq+0x8d/0x260 [ 97.651368][ T6988] skcipher_recvmsg+0x356/0x11c0 [ 97.651397][ T6988] ? aa_sk_perm+0x81e/0x950 [ 97.651433][ T6988] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 97.651461][ T6988] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 97.651482][ T6988] ? security_socket_recvmsg+0x7e/0x2e0 [ 97.651505][ T6988] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 97.651532][ T6988] sock_recvmsg+0x22c/0x270 [ 97.651561][ T6988] sock_read_iter+0x231/0x2f0 [ 97.651585][ T6988] ? rcu_is_watching+0x15/0xb0 [ 97.651605][ T6988] ? __pfx_sock_read_iter+0x10/0x10 [ 97.651642][ T6988] do_iter_readv_writev+0x619/0x8b0 [ 97.651674][ T6988] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 97.651702][ T6988] ? common_file_perm+0x1b5/0x230 [ 97.651722][ T6988] ? bpf_lsm_file_permission+0x9/0x20 [ 97.651746][ T6988] ? security_file_permission+0x75/0x290 [ 97.651772][ T6988] ? rw_verify_area+0x2a6/0x4d0 [ 97.651800][ T6988] vfs_readv+0x253/0x850 [ 97.651821][ T6988] ? __pfx_vfs_readv+0x10/0x10 [ 97.651839][ T6988] ? vfs_write+0x956/0xb30 [ 97.651870][ T6988] ? lock_release+0x4b/0x3e0 [ 97.651902][ T6988] ? __fget_files+0x3a0/0x420 [ 97.651920][ T6988] ? __fget_files+0x2a/0x420 [ 97.651959][ T6988] do_readv+0x14d/0x2d0 [ 97.651980][ T6988] ? __pfx_do_readv+0x10/0x10 [ 97.651997][ T6988] ? rcu_is_watching+0x15/0xb0 [ 97.652020][ T6988] ? rcu_is_watching+0x15/0xb0 [ 97.652042][ T6988] do_syscall_64+0xfa/0x3b0 [ 97.652062][ T6988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.652083][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 97.652118][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.652137][ T6988] RIP: 0033:0x7f280978ebe9 [ 97.652173][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.652190][ T6988] RSP: 002b:00007f280a618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 97.652212][ T6988] RAX: ffffffffffffffda RBX: 00007f28099b5fa0 RCX: 00007f280978ebe9 [ 97.652228][ T6988] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 97.652241][ T6988] RBP: 00007f280a618090 R08: 0000000000000000 R09: 0000000000000000 [ 97.652253][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.652265][ T6988] R13: 00007f28099b6038 R14: 00007f28099b5fa0 R15: 00007ffe02f55748 [ 97.652289][ T6988] [ 97.654551][ T6989] team0: Port device dummy0 added [ 97.930673][ T6990] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 98.085694][ T6990] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.095364][ T6992] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 98.118492][ T6990] team0: Failed to send options change via netlink (err -105) [ 98.126640][ T6990] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.150326][ T6990] team0: Port device dummy0 removed [ 98.158783][ T6990] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.172832][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.220831][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.260126][ T7001] Bluetooth: MGMT ver 1.23 [ 98.310308][ T6992] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 98.885581][ T7031] tipc: Enabled bearer , priority 0 [ 98.895486][ T7031] syzkaller0: entered promiscuous mode [ 98.923730][ T7031] syzkaller0: entered allmulticast mode [ 98.998503][ T7031] tipc: Resetting bearer [ 99.015493][ T7027] tipc: Resetting bearer [ 99.057665][ T7027] tipc: Disabling bearer [ 99.317867][ T7043] FAULT_INJECTION: forcing a failure. [ 99.317867][ T7043] name failslab, interval 1, probability 0, space 0, times 0 [ 99.343807][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.1.311 Not tainted syzkaller #0 PREEMPT(full) [ 99.343836][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.343849][ T7043] Call Trace: [ 99.343857][ T7043] [ 99.343865][ T7043] dump_stack_lvl+0x189/0x250 [ 99.343895][ T7043] ? __pfx____ratelimit+0x10/0x10 [ 99.343925][ T7043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.343949][ T7043] ? __pfx__printk+0x10/0x10 [ 99.343978][ T7043] ? __pfx___might_resched+0x10/0x10 [ 99.343998][ T7043] ? lock_acquire+0x5f/0x360 [ 99.344029][ T7043] should_fail_ex+0x414/0x560 [ 99.344058][ T7043] should_failslab+0xa8/0x100 [ 99.344109][ T7043] __kmalloc_noprof+0xcb/0x4f0 [ 99.344136][ T7043] ? sock_kmalloc+0xd6/0x160 [ 99.344179][ T7043] sock_kmalloc+0xd6/0x160 [ 99.344204][ T7043] skcipher_recvmsg+0x55c/0x11c0 [ 99.344242][ T7043] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 99.344272][ T7043] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 99.344294][ T7043] ? security_socket_recvmsg+0x7e/0x2e0 [ 99.344318][ T7043] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 99.344345][ T7043] sock_recvmsg+0x22c/0x270 [ 99.344376][ T7043] sock_read_iter+0x231/0x2f0 [ 99.344401][ T7043] ? rcu_is_watching+0x15/0xb0 [ 99.344422][ T7043] ? __pfx_sock_read_iter+0x10/0x10 [ 99.344460][ T7043] do_iter_readv_writev+0x619/0x8b0 [ 99.344494][ T7043] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 99.344530][ T7043] ? common_file_perm+0x1b5/0x230 [ 99.344550][ T7043] ? bpf_lsm_file_permission+0x9/0x20 [ 99.344576][ T7043] ? security_file_permission+0x75/0x290 [ 99.344604][ T7043] ? rw_verify_area+0x2a6/0x4d0 [ 99.344632][ T7043] vfs_readv+0x253/0x850 [ 99.344661][ T7043] ? __pfx_vfs_readv+0x10/0x10 [ 99.344679][ T7043] ? vfs_write+0x956/0xb30 [ 99.344711][ T7043] ? lock_release+0x4b/0x3e0 [ 99.344744][ T7043] ? __fget_files+0x3a0/0x420 [ 99.344762][ T7043] ? __fget_files+0x2a/0x420 [ 99.344784][ T7043] do_readv+0x14d/0x2d0 [ 99.344805][ T7043] ? __pfx_do_readv+0x10/0x10 [ 99.344822][ T7043] ? rcu_is_watching+0x15/0xb0 [ 99.344845][ T7043] ? rcu_is_watching+0x15/0xb0 [ 99.344866][ T7043] do_syscall_64+0xfa/0x3b0 [ 99.344886][ T7043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.344907][ T7043] ? clear_bhb_loop+0x60/0xb0 [ 99.344930][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.344950][ T7043] RIP: 0033:0x7f3002b8ebe9 [ 99.344968][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.344986][ T7043] RSP: 002b:00007f300399a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 99.345026][ T7043] RAX: ffffffffffffffda RBX: 00007f3002db5fa0 RCX: 00007f3002b8ebe9 [ 99.345042][ T7043] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 99.345055][ T7043] RBP: 00007f300399a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.345068][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.345079][ T7043] R13: 00007f3002db6038 R14: 00007f3002db5fa0 R15: 00007ffcbdbe8868 [ 99.345103][ T7043] [ 99.943219][ T7062] bridge0: entered promiscuous mode [ 99.962088][ T7062] bridge0: entered allmulticast mode [ 100.004357][ T7066] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.060476][ T7060] lo speed is unknown, defaulting to 1000 [ 100.198378][ T7072] macsec1: entered promiscuous mode [ 100.218419][ T7072] gretap0: entered promiscuous mode [ 100.239456][ T7072] macsec1: entered allmulticast mode [ 100.253869][ T7072] gretap0: entered allmulticast mode [ 100.299515][ T7072] gretap0: left allmulticast mode [ 100.325350][ T7072] gretap0: left promiscuous mode [ 100.477296][ T3006] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.518858][ T3006] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.551861][ T3006] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.571129][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.663646][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.676268][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.694227][ T7089] lo speed is unknown, defaulting to 1000 [ 100.727683][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.764023][ T7105] geneve2: entered promiscuous mode [ 100.782120][ T7105] geneve2: entered allmulticast mode [ 101.139854][ T7116] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 101.271573][ T7123] ip6gre1: entered allmulticast mode [ 101.714718][ T7147] lo speed is unknown, defaulting to 1000 [ 101.793993][ T7158] Bluetooth: MGMT ver 1.23 [ 101.894025][ T7165] __nla_validate_parse: 13 callbacks suppressed [ 101.894055][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.340'. [ 102.000062][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 102.092817][ T7179] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 102.151461][ T7181] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 102.175083][ T7181] netlink: 228 bytes leftover after parsing attributes in process `syz.4.345'. [ 102.400442][ T7198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.400520][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 102.756562][ T7223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.357'. [ 102.798921][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 102.812933][ T7220] lo speed is unknown, defaulting to 1000 [ 102.836201][ T7208] macsec1: entered promiscuous mode [ 102.842715][ T7208] syzkaller0: entered promiscuous mode [ 102.865968][ T7208] batman_adv: batadv0: Adding interface: macsec1 [ 102.893976][ T7208] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.964433][ T7208] batman_adv: batadv0: Interface activated: macsec1 [ 102.964678][ T7228] sctp: [Deprecated]: syz.1.360 (pid 7228) Use of int in maxseg socket option. [ 102.964678][ T7228] Use struct sctp_assoc_value instead [ 103.165105][ T7207] batman_adv: batadv0: Interface deactivated: macsec1 [ 103.172378][ T7207] syzkaller0 (unregistering): left promiscuous mode [ 103.213037][ T7207] batman_adv: batadv0: Removing interface: macsec1 [ 103.379875][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 103.392235][ T7246] lo speed is unknown, defaulting to 1000 [ 103.504403][ T7255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.569793][ T7250] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 103.606950][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'. [ 103.829523][ T5865] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 103.829599][ T5877] Bluetooth: hci2: command 0x0401 tx timeout [ 103.963730][ T7279] netlink: 'syz.4.372': attribute type 21 has an invalid length. [ 104.106146][ T7279] netlink: 156 bytes leftover after parsing attributes in process `syz.4.372'. [ 104.160305][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 104.191084][ T7273] openvswitch: netlink: Message has 4 unknown bytes. [ 104.307317][ T7295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.314643][ T7295] IPv6: NLM_F_CREATE should be set when creating new route [ 104.345819][ T7296] openvswitch: netlink: IP tunnel dst address not specified [ 104.375690][ T7291] lo speed is unknown, defaulting to 1000 [ 104.489001][ T7296] tipc: Started in network mode [ 104.506934][ T7296] tipc: Node identity e66b56256b94, cluster identity 4711 [ 104.535963][ T7296] tipc: Enabled bearer , priority 0 [ 104.736665][ T7294] tipc: Disabling bearer [ 104.975678][ T7315] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 105.010740][ T7319] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 105.331979][ T7324] lo speed is unknown, defaulting to 1000 [ 105.395480][ T7335] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 105.423751][ T7335] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 105.444114][ T7335] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 105.454684][ T7335] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 105.462756][ T7335] netlink: 'syz.0.390': attribute type 2 has an invalid length. [ 105.514012][ T7341] sctp: [Deprecated]: syz.1.391 (pid 7341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.514012][ T7341] Use struct sctp_sack_info instead [ 105.774695][ T7327] macsec1: entered promiscuous mode [ 105.782587][ T7327] syzkaller0: entered promiscuous mode [ 105.804077][ T7327] syzkaller0: left promiscuous mode [ 106.344353][ T7389] tipc: Started in network mode [ 106.352125][ T7389] tipc: Node identity 26db443cc5ae, cluster identity 4711 [ 106.361119][ T7389] tipc: Enabled bearer , priority 0 [ 106.388896][ T7389] syzkaller0: entered promiscuous mode [ 106.421394][ T7389] syzkaller0: entered allmulticast mode [ 106.645869][ T7399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.702544][ T7404] bond1: (slave geneve2): making interface the new active one [ 106.716785][ T7404] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.730593][ T7388] tipc: Resetting bearer [ 106.751922][ T7388] tipc: Disabling bearer [ 106.783281][ T7393] lo speed is unknown, defaulting to 1000 [ 106.789916][ T2966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.805698][ T7406] dvmrp8: entered allmulticast mode [ 106.820475][ T7407] syz_tun: entered allmulticast mode [ 106.826258][ T2966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.855327][ T2966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.878726][ T2966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.057915][ T7406] lo speed is unknown, defaulting to 1000 [ 107.552004][ T7421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.610337][ T7421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.851946][ T7407] syz_tun: left allmulticast mode [ 107.857831][ T7407] dvmrp8: left allmulticast mode [ 107.898053][ T7436] __nla_validate_parse: 11 callbacks suppressed [ 107.898073][ T7436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.414'. [ 107.987936][ T7421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.010423][ T7421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.127515][ T7421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.144997][ T7421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.276460][ T7447] lo speed is unknown, defaulting to 1000 [ 108.312517][ T7421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.327265][ T7421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.385959][ T7455] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 108.422060][ T7446] lo speed is unknown, defaulting to 1000 [ 108.446648][ T2940] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.456947][ T2940] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.497311][ T2940] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.507409][ T2940] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516063][ T2940] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.531791][ T2940] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.553024][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.566922][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.579826][ T7418] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.589912][ T7418] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.618108][ T36] ================================================================== [ 108.626232][ T36] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 108.633808][ T36] Read of size 8 at addr ffff88807813b0b0 by task kworker/u8:2/36 [ 108.641627][ T36] [ 108.643981][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 108.644001][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.644014][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 108.644046][ T36] Call Trace: [ 108.644053][ T36] [ 108.644060][ T36] dump_stack_lvl+0x189/0x250 [ 108.644085][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.644105][ T36] ? lock_release+0x4b/0x3e0 [ 108.644133][ T36] ? __virt_addr_valid+0x4a5/0x5c0 [ 108.644157][ T36] print_report+0xca/0x240 [ 108.644173][ T36] ? __mutex_lock+0x147/0x1350 [ 108.644188][ T36] kasan_report+0x118/0x150 [ 108.644211][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 108.644236][ T36] ? __mutex_lock+0x147/0x1350 [ 108.644254][ T36] __mutex_lock+0x147/0x1350 [ 108.644280][ T36] ? __mutex_lock+0x5bb/0x1350 [ 108.644297][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 108.644325][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 108.644341][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 108.644363][ T36] ? rcu_is_watching+0x15/0xb0 [ 108.644384][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 108.644420][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 108.644436][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 108.644453][ T36] process_scheduled_works+0xae1/0x17b0 [ 108.644493][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.644515][ T36] worker_thread+0x8a0/0xda0 [ 108.644541][ T36] kthread+0x70e/0x8a0 [ 108.644563][ T36] ? __pfx_worker_thread+0x10/0x10 [ 108.644579][ T36] ? __pfx_kthread+0x10/0x10 [ 108.644599][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.644621][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.644646][ T36] ? __pfx_kthread+0x10/0x10 [ 108.644666][ T36] ret_from_fork+0x3f9/0x770 [ 108.644684][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 108.644702][ T36] ? __switch_to_asm+0x39/0x70 [ 108.644723][ T36] ? __switch_to_asm+0x33/0x70 [ 108.644744][ T36] ? __pfx_kthread+0x10/0x10 [ 108.644764][ T36] ret_from_fork_asm+0x1a/0x30 [ 108.644793][ T36] [ 108.644798][ T36] [ 108.848270][ T36] Allocated by task 7421: [ 108.852608][ T36] kasan_save_track+0x3e/0x80 [ 108.857297][ T36] __kasan_kmalloc+0x93/0xb0 [ 108.861938][ T36] __kmalloc_noprof+0x27a/0x4f0 [ 108.866804][ T36] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 108.872972][ T36] notifier_call_chain+0x1b3/0x3e0 [ 108.878091][ T36] register_netdevice+0x1608/0x1ae0 [ 108.883304][ T36] nsim_create+0xae8/0xf10 [ 108.887754][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 108.892888][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 108.898015][ T36] nsim_dev_reload_up+0x451/0x780 [ 108.903055][ T36] devlink_reload+0x4e9/0x8d0 [ 108.907751][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 108.913139][ T36] genl_family_rcv_msg_doit+0x212/0x300 [ 108.918702][ T36] genl_rcv_msg+0x60e/0x790 [ 108.923226][ T36] netlink_rcv_skb+0x208/0x470 [ 108.928021][ T36] genl_rcv+0x28/0x40 [ 108.932016][ T36] netlink_unicast+0x82f/0x9e0 [ 108.936808][ T36] netlink_sendmsg+0x805/0xb30 [ 108.941582][ T36] __sock_sendmsg+0x21c/0x270 [ 108.946284][ T36] ____sys_sendmsg+0x505/0x830 [ 108.951058][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 108.955830][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 108.960770][ T36] do_syscall_64+0xfa/0x3b0 [ 108.965280][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.971175][ T36] [ 108.973495][ T36] Freed by task 7418: [ 108.977487][ T36] kasan_save_track+0x3e/0x80 [ 108.982173][ T36] kasan_save_free_info+0x46/0x50 [ 108.987199][ T36] __kasan_slab_free+0x5b/0x80 [ 108.991968][ T36] kfree+0x18e/0x440 [ 108.995868][ T36] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 109.002115][ T36] notifier_call_chain+0x1b3/0x3e0 [ 109.007229][ T36] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 109.013653][ T36] unregister_netdevice_queue+0x33c/0x380 [ 109.019377][ T36] nsim_destroy+0x1dd/0x670 [ 109.023884][ T36] __nsim_dev_port_del+0x14d/0x1b0 [ 109.029001][ T36] nsim_dev_reload_destroy+0x288/0x490 [ 109.034472][ T36] nsim_dev_reload_down+0x8a/0xc0 [ 109.039510][ T36] devlink_reload+0x1b6/0x8d0 [ 109.044195][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 109.049592][ T36] genl_family_rcv_msg_doit+0x212/0x300 [ 109.055142][ T36] genl_rcv_msg+0x60e/0x790 [ 109.059650][ T36] netlink_rcv_skb+0x208/0x470 [ 109.064424][ T36] genl_rcv+0x28/0x40 [ 109.068509][ T36] netlink_unicast+0x82f/0x9e0 [ 109.073280][ T36] netlink_sendmsg+0x805/0xb30 [ 109.078042][ T36] __sock_sendmsg+0x21c/0x270 [ 109.082742][ T36] ____sys_sendmsg+0x505/0x830 [ 109.087511][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 109.092191][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 109.097146][ T36] do_syscall_64+0xfa/0x3b0 [ 109.101650][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.107544][ T36] [ 109.109873][ T36] Last potentially related work creation: [ 109.115587][ T36] kasan_save_stack+0x3e/0x60 [ 109.120275][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 109.125478][ T36] insert_work+0x3d/0x330 [ 109.129819][ T36] __queue_work+0xbaf/0xfb0 [ 109.134339][ T36] queue_work_on+0x181/0x270 [ 109.138944][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 109.144588][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 109.150078][ T36] geneve_offload_rx_ports+0xd7/0x160 [ 109.155478][ T36] geneve_netdevice_event+0x6a/0x80 [ 109.160811][ T36] notifier_call_chain+0x1b3/0x3e0 [ 109.165938][ T36] call_netdevice_notifiers+0x88/0xc0 [ 109.171323][ T36] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 109.177576][ T36] notifier_call_chain+0x1b3/0x3e0 [ 109.182705][ T36] register_netdevice+0x1608/0x1ae0 [ 109.187991][ T36] nsim_create+0xae8/0xf10 [ 109.192422][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 109.197546][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 109.202672][ T36] nsim_dev_reload_up+0x451/0x780 [ 109.207738][ T36] devlink_reload+0x4e9/0x8d0 [ 109.212428][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 109.217815][ T36] genl_family_rcv_msg_doit+0x212/0x300 [ 109.223390][ T36] genl_rcv_msg+0x60e/0x790 [ 109.227902][ T36] netlink_rcv_skb+0x208/0x470 [ 109.232691][ T36] genl_rcv+0x28/0x40 [ 109.236692][ T36] netlink_unicast+0x82f/0x9e0 [ 109.241463][ T36] netlink_sendmsg+0x805/0xb30 [ 109.246226][ T36] __sock_sendmsg+0x21c/0x270 [ 109.250923][ T36] ____sys_sendmsg+0x505/0x830 [ 109.255704][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 109.260393][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 109.265344][ T36] do_syscall_64+0xfa/0x3b0 [ 109.269858][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.275762][ T36] [ 109.278101][ T36] Second to last potentially related work creation: [ 109.284688][ T36] kasan_save_stack+0x3e/0x60 [ 109.289374][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 109.294592][ T36] insert_work+0x3d/0x330 [ 109.298932][ T36] __queue_work+0xcd2/0xfb0 [ 109.303441][ T36] queue_work_on+0x181/0x270 [ 109.308044][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 109.313692][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 109.319163][ T36] vxlan_offload_rx_ports+0x139/0x200 [ 109.324567][ T36] vxlan_netdevice_event+0x111/0x470 [ 109.329863][ T36] notifier_call_chain+0x1b3/0x3e0 [ 109.335069][ T36] call_netdevice_notifiers+0x88/0xc0 [ 109.340467][ T36] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 109.346723][ T36] notifier_call_chain+0x1b3/0x3e0 [ 109.351847][ T36] register_netdevice+0x1608/0x1ae0 [ 109.357059][ T36] nsim_create+0xae8/0xf10 [ 109.361482][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 109.366605][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 109.371736][ T36] nsim_dev_reload_up+0x451/0x780 [ 109.376774][ T36] devlink_reload+0x4e9/0x8d0 [ 109.381461][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 109.386841][ T36] genl_family_rcv_msg_doit+0x212/0x300 [ 109.392391][ T36] genl_rcv_msg+0x60e/0x790 [ 109.396899][ T36] netlink_rcv_skb+0x208/0x470 [ 109.401680][ T36] genl_rcv+0x28/0x40 [ 109.405665][ T36] netlink_unicast+0x82f/0x9e0 [ 109.410432][ T36] netlink_sendmsg+0x805/0xb30 [ 109.415195][ T36] __sock_sendmsg+0x21c/0x270 [ 109.419881][ T36] ____sys_sendmsg+0x505/0x830 [ 109.424647][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 109.429337][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 109.434285][ T36] do_syscall_64+0xfa/0x3b0 [ 109.438793][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.444696][ T36] [ 109.447018][ T36] The buggy address belongs to the object at ffff88807813b000 [ 109.447018][ T36] which belongs to the cache kmalloc-256 of size 256 [ 109.461080][ T36] The buggy address is located 176 bytes inside of [ 109.461080][ T36] freed 256-byte region [ffff88807813b000, ffff88807813b100) [ 109.474893][ T36] [ 109.477232][ T36] The buggy address belongs to the physical page: [ 109.483657][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7813a [ 109.492435][ T36] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.500940][ T36] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 109.508532][ T36] page_type: f5(slab) [ 109.512522][ T36] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 109.521128][ T36] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 109.529741][ T36] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 109.538431][ T36] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 109.547136][ T36] head: 00fff00000000001 ffffea0001e04e81 00000000ffffffff 00000000ffffffff [ 109.555852][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 109.564518][ T36] page dumped because: kasan: bad access detected [ 109.570937][ T36] page_owner tracks the page as allocated [ 109.576647][ T36] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5858, tgid 5858 (syz-executor), ts 74231112895, free_ts 74155631335 [ 109.598010][ T36] post_alloc_hook+0x240/0x2a0 [ 109.602980][ T36] get_page_from_freelist+0x21e4/0x22c0 [ 109.608532][ T36] __alloc_frozen_pages_noprof+0x181/0x370 [ 109.614347][ T36] alloc_pages_mpol+0x232/0x4a0 [ 109.619213][ T36] allocate_slab+0x8a/0x370 [ 109.623722][ T36] ___slab_alloc+0xbeb/0x1410 [ 109.628439][ T36] __kmalloc_noprof+0x305/0x4f0 [ 109.633302][ T36] fib_create_info+0x1728/0x3210 [ 109.638258][ T36] fib_table_insert+0xc6/0x1b50 [ 109.643109][ T36] fib_magic+0x2c4/0x390 [ 109.647489][ T36] fib_add_ifaddr+0x144/0x5f0 [ 109.652174][ T36] fib_netdev_event+0x382/0x490 [ 109.657156][ T36] notifier_call_chain+0x1b3/0x3e0 [ 109.662282][ T36] __dev_notify_flags+0x18d/0x2e0 [ 109.667330][ T36] netif_change_flags+0xe8/0x1a0 [ 109.672289][ T36] do_setlink+0xc55/0x41c0 [ 109.676722][ T36] page last free pid 5855 tgid 5855 stack trace: [ 109.683046][ T36] __free_frozen_pages+0xbc4/0xd30 [ 109.688171][ T36] __put_partials+0x156/0x1a0 [ 109.692850][ T36] put_cpu_partial+0x17c/0x250 [ 109.697612][ T36] __slab_free+0x2d5/0x3c0 [ 109.702032][ T36] qlist_free_all+0x97/0x140 [ 109.706627][ T36] kasan_quarantine_reduce+0x148/0x160 [ 109.712095][ T36] __kasan_slab_alloc+0x22/0x80 [ 109.716953][ T36] __kmalloc_node_noprof+0x21b/0x4e0 [ 109.722244][ T36] qdisc_alloc+0x97/0xaa0 [ 109.726589][ T36] qdisc_create_dflt+0x8e/0x4e0 [ 109.731483][ T36] dev_activate+0x378/0x1150 [ 109.736082][ T36] __dev_open+0x69c/0x880 [ 109.740419][ T36] __dev_change_flags+0x1ea/0x6d0 [ 109.745461][ T36] netif_change_flags+0x88/0x1a0 [ 109.750402][ T36] do_setlink+0xc55/0x41c0 [ 109.754824][ T36] rtnl_newlink+0x160b/0x1c70 [ 109.759521][ T36] [ 109.761845][ T36] Memory state around the buggy address: [ 109.767474][ T36] ffff88807813af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.775536][ T36] ffff88807813b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.783600][ T36] >ffff88807813b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.791669][ T36] ^ [ 109.797315][ T36] ffff88807813b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.805385][ T36] ffff88807813b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.813451][ T36] ================================================================== [ 109.913401][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.920656][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 109.929977][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.940061][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 109.947476][ T36] Call Trace: [ 109.950772][ T36] [ 109.953724][ T36] dump_stack_lvl+0x99/0x250 [ 109.958353][ T36] ? __asan_memcpy+0x40/0x70 [ 109.962971][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.968198][ T36] ? __pfx__printk+0x10/0x10 [ 109.972836][ T36] vpanic+0x281/0x750 [ 109.976868][ T36] ? preempt_schedule+0xae/0xc0 [ 109.981752][ T36] ? __pfx_vpanic+0x10/0x10 [ 109.986286][ T36] ? preempt_schedule_common+0x83/0xd0 [ 109.991783][ T36] ? preempt_schedule+0xae/0xc0 [ 109.996660][ T36] ? __pfx_preempt_schedule+0x10/0x10 [ 110.002059][ T36] panic+0xb9/0xc0 [ 110.005804][ T36] ? __pfx_panic+0x10/0x10 [ 110.010243][ T36] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 110.016160][ T36] ? __mutex_lock+0x147/0x1350 [ 110.020930][ T36] check_panic_on_warn+0x89/0xb0 [ 110.025880][ T36] ? __mutex_lock+0x147/0x1350 [ 110.030658][ T36] end_report+0x78/0x160 [ 110.034913][ T36] kasan_report+0x129/0x150 [ 110.039421][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 110.045336][ T36] ? __mutex_lock+0x147/0x1350 [ 110.050103][ T36] __mutex_lock+0x147/0x1350 [ 110.054697][ T36] ? __mutex_lock+0x5bb/0x1350 [ 110.059471][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 110.065722][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 110.070748][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 110.075952][ T36] ? rcu_is_watching+0x15/0xb0 [ 110.080719][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 110.086800][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 110.092522][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 110.098241][ T36] process_scheduled_works+0xae1/0x17b0 [ 110.103813][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.109810][ T36] worker_thread+0x8a0/0xda0 [ 110.114416][ T36] kthread+0x70e/0x8a0 [ 110.118496][ T36] ? __pfx_worker_thread+0x10/0x10 [ 110.123614][ T36] ? __pfx_kthread+0x10/0x10 [ 110.128217][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.133433][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.138642][ T36] ? __pfx_kthread+0x10/0x10 [ 110.143242][ T36] ret_from_fork+0x3f9/0x770 [ 110.147843][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 110.152968][ T36] ? __switch_to_asm+0x39/0x70 [ 110.157744][ T36] ? __switch_to_asm+0x33/0x70 [ 110.162517][ T36] ? __pfx_kthread+0x10/0x10 [ 110.167114][ T36] ret_from_fork_asm+0x1a/0x30 [ 110.171893][ T36] [ 110.175276][ T36] Kernel Offset: disabled [ 110.179603][ T36] Rebooting in 86400 seconds..