last executing test programs: 5m48.144897691s ago: executing program 4 (id=312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x5, @local, 0x9}}, 0x0, 0x0, 0x32, 0x0, "67c314f7a94f22a2fa49f31b5399bef3a3ba422f889a59f0793c726adcd2ca0bc40068603f0dcb54ed445781976b171fbb80be7a6a4facdbd1c79dbf93c2559a94e50b620d865400ba8882c51a795db2"}, 0xd8) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 5m47.83272018s ago: executing program 4 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 5m47.609593138s ago: executing program 4 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x800) readv(r0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/227, 0xe3}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x12) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 5m47.215871931s ago: executing program 4 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5m46.031621871s ago: executing program 4 (id=331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) vmsplice(r3, &(0x7f0000000900)=[{&(0x7f0000000440)="ac6b80d53873f4b35e75dbf57ccf7e8e75", 0x11}, {&(0x7f0000000700)="40711d68611735f03b9fa5f8bbf7875ffb197e1c6db670a69bb2dd69d60085", 0x1f}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 5m45.512218693s ago: executing program 4 (id=334): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 5m45.182426007s ago: executing program 32 (id=334): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 3m17.188088675s ago: executing program 5 (id=1933): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x80}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x100, {0x9, 0x6, "506380", 0x1, 0x6c, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1}}}}}}}, 0x0) 3m16.908216049s ago: executing program 5 (id=1936): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m16.843534582s ago: executing program 5 (id=1938): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x40010120, 0x0, 0x0) 3m15.937344804s ago: executing program 5 (id=1955): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff"], 0x254}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}}, 0x0) 3m15.75172513s ago: executing program 5 (id=1956): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYBLOB="01000000010000001c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x30bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3m15.588173944s ago: executing program 5 (id=1957): r0 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24004000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000600)=0x1b, 0x54) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m0.546129965s ago: executing program 33 (id=1957): r0 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24004000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000600)=0x1b, 0x54) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m15.322225287s ago: executing program 1 (id=2692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0xe4efff7f}, 0x0) 2m15.197238086s ago: executing program 1 (id=2694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18004d1cd8b56a2c24dd6a0ef24a3a00000f00000000000000060000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x11d9279, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc855, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) epoll_create1(0x0) socket$kcm(0x2, 0x5, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r4 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async, rerun: 64) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async, rerun: 64) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bind$tipc(r4, 0x0, 0x0) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000000c0)=0x1, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$xdp(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, 0x4, 0x0, 0xe}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="6c11d712398418b084ec900b109be8e8d1afbf5563dc16905127602305ee764154a83cc92d8b252b5207f211795a857f649776c3045a43c9a1ed76fe3db00777f12aff69177ec3a68f376837412ba27baa40edf933d34a6d138328226ca70dd9574e75b5462ae40fd8bb9560ba6dc3b61cb633dd6ebbafa8", 0x78}, {&(0x7f0000000740)="873786d9829e0009f5f7ddab0076d4efdf206e4d6cd61f6aa0eee0cd39a1b57d043d7638b4bfc6c8d21bc9e8d9e2b01ab7ab2c7f20a9835007d1130ea2ae8e3a902befaf16e366e52c822f92172920e9af11d635e07e21ec09b2e248620cd3b2fed0a089bb83df85d47645f5cb599b14e19c88128bd3cfd0b19934ba92d19701368ba633456047fbb7895a6af9f34dbcc8a1c2ca4caeba4a84aac234891dd5d871ee7e8e", 0xa4}, {&(0x7f0000000d40)="fa78f29945ce7508bd15ce0294d268b29fb0684af18096581d7c8c77c13019427399c0e23fa95bad97e89946528643ab95ae9219f899255242c7c77800d32dfd46aebb1ddf4a0e413d0aac9fe6008f460f068e49d96a806d93d358944431fdc4bc01e0ff47bdae1f101595e673eada5d81423cf6d7c68ec0bd67defafc5db752b083bea785f19eac805f7cb0916e16396a1f7cdf05411f795caf9b901a614f9aea1249e400b3daf903cb0aca9a995aa8fcd5576f025a3747689735d468933c8682aa46ba6f81377ad681d4c2ad0c7222f30c7a6d9e65bc60eed5910abc4a42ebf476bb643423e69456af1363f427f4fcb2c244e8c9a1c178d01f8c150b215f4911394d7e16ff76583337297320f14ab747f8c1386fe8baf53e902c471800a7a324262164ae631f8ddc32ff353f5a455605972e5f2d6921d5d0fd1a62bebe981bbdce32aaca7d86b65d5363b060d283ec53aa8ad2ad31726e6442f822e03ba8cc0f3c92b4752c71727f0d2edd14a9c87387c15b23c8e8ab241d4dc69c5e6414d9c798c0009c66fdf7f8fe928176a69ea54be45609149874c6ceec07898ae8bc8beeb14961eedefdb5da161c5f463718837859cdf98c90867e803a52e34c389a649df4b20370792e2727890683403eb3a726708a13f31037b47f14f80c766dd23bf40fd562468116d7179a01112a65ce92f2c58aca07e3b12124829fc379d88dd92834f2d700f3c2ab27e1f6c2f589424c52c31b95e022d3295703d8b32fa3d1cf8cbe3db703c884cfd7db183ed3ebd07854be5adcf680fb20c468d8327aa0a2410e8ff1995821b7de9d71bfe5ae6d79e29f68906633e7525f274cd2f1335bcd7d654543cfa123392f8433458df549ed477c778784350b848fef0b84ef0e2dec3c0c47a39bcd2395420cb6931823a20fa98759b2b999c2b940bebf769355a3a4e4530701365323dab2d17a8ced891a2fcb927dfa23cb6e4b908932ab619043fbd484585814b73aaf96941521c5ce26961ba6daeb89c9fe3aec8e068302e0f890642ae5180f0591bdb713fbc4897b8ca73d5a71eedba466fb7286b32a1c727900b8a43ca98a7de1dcb4ed2e4d395cd4808aae80a4f431383a2b425db55e553210c4f6997d8b17179da9ab2bc686bfa1c5c5dc062bdc1cc02972a569e5d58915d6c4ef10228fffdd1451cfd8cbcd596f9c54045377bb3a1a9987fd2a86ca060eb68a1cede6a666aa40869651c0f2e37e121476277db3b85b1878c0b07a5d8d9cec126d9edc36e7549961c1ee41c44a5484f2d33aa7d105eef9653f261952d7bbbdcd78b9047c3620781793226fd665d890f78fded9af67c6913ef4ca9d6d2832e63f0825316f4f3de0cb9db710c00b59b78295e07c20fc625fcde35ab17f2ae3005db467da87f0c7f632eb2187f9a87e9ddc4880ee2da87a588ba41a854f71381895eea4d2dcb9a11cd589a31271548bfd78117235361b04605cef40129972f6381e7f6184146e606061b448e0f59c08d9363581ac719b4ecc1cbda3383df392dcbad4b269725d3297400da67a0f3b57a7c98a79da2973b0ff39d46e9b44a5e748c589f62a78aefdc5c168f3ec7c54485a094d3783c6c939d4988a6e04ef95b44d9fd2b4de817b3d2bf054d9ef4d485d1541d0c87ad2b6e3745dc99a20bb64ec959281c5d300f2bccc96d7ff0cc8bf509e5c3609203864897fa0636614a3323255f53dd3ae7ad2a1f51672395792b7157962b790a9667bd4ccd0d722a61eeef895c3ca397c494492a56b837673d5213a8c87b766207449a907b5f262b5dc9c4d63f1e34ab64250822c290631070f6aa103ab13e9c79d4b0531a5083505a3b5505f81d06986ed71cb9af4721005e0c00912dff86aeb4d13a84cee67384bc1ed2d6c031c4e91b2035806e017822cb4ca9bd0372bc38d0dd959a51df437c3ed893b0f4c053304580b4f65ed6821a8f7182672f7462deb5cb0e828081f1e5142ae640d51a2cac29ade66e380c450f4c4915b7a2aa5fe90fb41a5b0d05939af78631f220452f25879b0cb35443594677a2a014199e5f9810e1b8c44cac15ec912d676daba4a1cb087e3a40f15f22458f7214547cb1dbb8667d6eb19b6c6ec97e42fa327e70193c691ba14358ebe18e6f17272eb69fe720a81373df8e5929dc94b91de080541bce35794c2c09bd762381ab52c45f2cfbdf91d08e2c121f3a49f304150e00cd1455917da2cd0cf5d18f510fc6cd3f5624c8a8350d0987d4f249030c3c066c646d2f2db1509db3710ef31f4408b0ab5830a7b3a2c5be4abfb9cd29eece331bfdbfda046aef62f2ec107a8187986b321be3b6a1f5c6bac542d7bbb1bee5044f259ca4259bc104add51ff13ee4a879b43d34f3b5ee9ab83a123fc8ee8566d154edc0f70ee2dd8e5bd76d449ead00be8ac7e2d1ccb2ab00509b2d0d90d6273c6ca9010712f0ce04dadbdaeda1e5b317f28f2cde379c1b73d9983f713eeac6fe41a7ffb3d01a401db6d90b63ae04244e5f8b07b667d742f72ff29dfd44bdd08056d2fd272fd3e04d3cfe49e65889b2f3b3e0f62f447e013622401eb056b4d0a2283c57e37ccbffef8335a4b375645bbb3979c7aabd4eca7fca7f10437e309922f9d2fde95ce16f53b1cf4c3f9b26a50481e2d67473b851dbecd99c5ccce41a47ded003a4ccbbc5885ebdc02ab3c3fef8f44a8a39beb4be09c3763c6aa5d68d808848b4528dbebf7601e65335c7c2401303d5d4418550209ffb2159cc1011bb78bb89164013eb7ef8b9b2450b0588326a44012691d4a47d2f6daf43ac2d326df58eddf8286271a8f9d6e2b5bc8f134d56b0cf77b6c221834e96ccb0ff08983698321f2b567c1e0a53701ea77bba54926998a1810f67ea655d135a73f2f9eff644938eb08f51649a973a793915aff4c1ea2eb66b0e08d8982ce952daeb13bfe76ea865abfead7ecf02855485ae227b095d63f3f4be50eb7d8b4bf20f22f67fa6da3b42a630c66e92136bbc0d8f5aa56f4fb2e0f3a5fcd0b0edbceb9bd0e8a91725689da10bedbfd45b9962fd2e081fb86974dabfa5855ad7e79798f7b32ed8d1ffc608902bb76181baff95059d7a6c93bce6ad015c978ac8374af42f663203c8bc776104f202d5fdd410fa14790018d256d0fc20c9e2e9a9c9a8637f7ee9d3bb4e6803eb2afcc407701b8e19d523b5ad90116294aa2e393c7e3caeae676b74279c7c5d73ad4293263113b6cdefd3b111fac56712e14506c64465bfe785f12135e75759a89ff24568c12480af029ffa9e710c86507d31fc64fb326786c9fbc7312e932fbd8e0ec6ed72f8c4308cc0c6d7e9edd533d39ab8f2989ac4c5c488f9695af553b7c4d8a0f934644755bd271abe066533090e180955b205f9a9423d3b25b612a0082379dd1dfddbf6c1e46aabacdb165eccf579fef606aba81353e2d8b1d0a5dcbe3c61753a6b2d4c4c7d278a841b799db35d7a71d14c3a1fd873ce038f9d9fe4966e3df6ee89f69733ca8cd7085a9f5dd578ba64b1eaadad46d15d2a60a136d490fd85b871f877789e3342e8ccaf98e23d99efbacdcae657e8bfbbb14625e8c5c51258ddaf3e649fd46629bb872b6240aef90d632311527d82de019f29cd73dba726dcc40f8ff6babaed0e339b89f87dfb7d347f64d670783ccc44fdf01d5f04aeb2feeaf63bdde81415ed391de1fe1ad68faf9215844fa9b33915075f0a09192bbff1950c72a7323080192b5301fc76632faf4dfe0c8ee84a5fad1d5f518515c25a72a2a0803b4f0f4936ff25546c8dbe10fc1209f740b6e1d5a4521a4540c24d6a7448f17b6b315645ceec3615d49a9b1f17ef00865d2c7f42ecce64bf6e2fce79bc0c954cf8379f33193d53427e938a933efee49b6582782c63a40c70f84059c3389ec04b4daadb5ef10593d57be67a26586da009817f3bcd1c14e892b8291de4fb6175cd5ffbe5632c4f6e3cd2fa125c9d1114fa3293f60669f2680e9c6742a1defb37340b66e682f6d3f60ab9a4a59a10768db7e37629a4c0c971f38dd398f8313bef80548a4d5081e29e018fe3aedcec2b6922ea7c4f8f8a04c59a3f71b82922d5c3393b0d9996ea26f224611c0a70c6c7d972329eb831a15f12ba5ba5065565181f129d3dfada4a4b9e6bd7d5830456e7add2e7b2190b10682db8742a0bbce7e984f2bb7133b2ac7c3c081a7495e81376e19c3020f5ef3f38472b798c6f73b0011364ddb2e9965daac4c9f2673dd68301ceab36a179dc6e4ee365f276b6f4605cfcb0923776e2c8008f22dfb535d3b22ea56bf3610ebe37b2e639a23a12eb9b82c8cd55cdfc5357903052206b768866dcadafdd386fb376bbed0e11695850538bab0b81665e82ed724d075c71dffd0680e5e4e1524833bd67852cdf5aa22b42826f052071a96c9d9d690ae5bb6d88a2fef6d5d84d4a0901d81886d7450607aa8b69cdc2bee2793b113027dade6ab58c55e715b6bdeb9b2613f476001842d734c647d02cfd8bc6753cd90b2857123ac4d9ee8f9ac9fa3fd83a58fd60869881ef4d137bbb0bc7f6343e5a2bc35ab9bb4efd6dd49c7eba48ba0b7645214634977d2ff998ce70a11f0a923a4391ecbc0ec1ae1da25d181286b3bcfc49dfb4c1a0892391f9ea45fab0db83a35fe3a097b3166a543d67740d1b44e255cfe51d2fba1cb3aa009d49a6ddaa6dc8cad43d492adaac0925f9c500d921bc5f9e81fed53294fc19a5e77c6b88e0ca0e5b91abfc975f3817009e0982c236f9e34547b635088bc6dc339fcca13949413d01135980fa88f29bf0846c4ec58176201133f3a068ea18cc56c1bda076487004eb70f9a1a328cf759c51b8c54c6ba32fcc8f2d8039b0c399f28c9d40e27f1c1eae1aa5a2535db27e2b4656a24c8fe72056eec14f4376a45a3319e82a8c12764be8d11f5374bd587ffdf7fa8b520b09c8999d8b83ec811236a8e23605a47fbc2fd7512bb6fb5f56a22c2786b2526e1d4c95e8a8321116d0c0aad047f25cc24228d42f62b9188836f679ac03411b18f94c2789ff5d7f9cab6d0fbeab26b98780ea70447af54320fe4fea219328e615e189425733b1093bee10e6e8d36b6e73f68641f5bfc55844639740576158d9d7c43ff0d258906ce44be8a93804fc5ac2b61cc30a8d89f7373132cf94ae8ad8fc3f7aef3b36352c7d51bfe1ce70cf9665b1d8408cba8c073597c8998f31612732257e2654c949f52ec3cb0702a04ba2ceb8aa8c3e6f1a96caa6b88b54d4d0fe59f448fe08bcd0f4d5ccb7aeacffb33fd9f8f216125c49e2426d7a228063e12c542afd133de7170e00271632bcea63c6734b21a378083110326827ed56cdc13bb864222fef93f2ebc19726df19a35d278f372874ecfae306fb05605b74da77ca972b3f895ab7f4a865aba2a1857409854973251f8233aaac7d0a70098e68e3e0b4fdc60bc6791272631a971e5ad2b2338840252b2f033272a759906dfefb5a1f2b703055f6c7605e7bd65d81964212246d7b2423916a0bb6d73889502d4520313d2875f1d02a47a6bad131c0194b7c2536b4fa5f2c84610fc88687a9b6df49e142b5405a3f51ed21034f3da015faba51e130811fc25160a92d35c46910857272acb1fde2327377a66d96da5848061e2a3f96f56c5789a769e761bd4c0aebb544b5fa1a2609c2b5340b0eb44be020da29ac69167e0cdf8a3fcd85b377fb7226df69a317b0c0f841f1d3cc6ab48aa7b04057d7124cc591f740ae4fc27d25bbefed1ebf9e17462c4e59ab45488a339f669a40e3141098be2ca1f0d5a9aaac00d6048f020cc29b0", 0x1000}, {&(0x7f0000000840)="ea3a3523f840d539cd4d517377d7461d91546bea51d252050d4e61dd361145953780470a5e1582c6144546fc8bfdff88572500984d76d3b2da9a2ae22eed9a852344837fb43fea7b227a8ca7cd56d68a4fabb536342318216c0074182dd8dacfdd96d707d224dcdd7c907461a04ba21849a9f95016ec492162121536862ce54e515ef0c7e0cd03528b974f87fcc7aaed790667ef6d2ef0a59ba7630929cb624bb97537bbcda721af68e4a96d095d9eacbc3a8437d51480c5f2a8f7", 0xbb}, {&(0x7f0000000900)="4a8f3989cb6283724f598042f561fdb9f0c989c47bf895b960a34a0d51b099686cd0d65ee6f6ce8fbb9d600c5a063901e80c72577c8ee14cbbac54e0641f7bfbc3cc9070866951fc7595fa0a574cadc164293d690fa2000cfc5c7cf04c4bb3a6936090fe45051f244b4578959d", 0x6d}], 0x5, 0x0, 0x0, 0x40000}, 0x20044018) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) 2m14.737925527s ago: executing program 1 (id=2696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}}, 0x48010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1, 0x4, 0xca1a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0xfffffffffffffddf, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 2m14.408375165s ago: executing program 1 (id=2703): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000", 0x4d}], 0x1) 2m14.111019527s ago: executing program 1 (id=2707): r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl(r1, 0x8936, &(0x7f0000000000)) recvmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/207, 0xcf}], 0x2, &(0x7f00000003c0)=""/160, 0xa0}, 0x2020) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast1, 0xfffd, 0xfffe, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x4, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 2m13.804052888s ago: executing program 1 (id=2711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0x64, 0x32, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040000}, 0x800) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x12, 0x0, &(0x7f0000000180)) r8 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010000005683a3eb6c2cb7b60000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) 1m49.548335028s ago: executing program 34 (id=2711): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@gettaction={0x64, 0x32, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040000}, 0x800) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x12, 0x0, &(0x7f0000000180)) r8 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010000005683a3eb6c2cb7b60000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) 37.738690844s ago: executing program 7 (id=3746): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="effd00001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 37.566319829s ago: executing program 7 (id=3749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4100}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000002900)=""/4105, 0x1009}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) 37.292345534s ago: executing program 7 (id=3752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 36.609978518s ago: executing program 7 (id=3759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @multicast2}, &(0x7f0000000280)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, &(0x7f0000000140)=0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.356217146s ago: executing program 7 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000000000000a001b000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 35.693555321s ago: executing program 7 (id=3769): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="020003000000fbdbdf255500000008000300", @ANYRES32=r5, @ANYBLOB="56649118479e4a88736ed727a200000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r6, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x36}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) 33.664261719s ago: executing program 3 (id=3798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc1d689b989710dd0f9a418f90637db3aae7034a9b83e8c843ba835c6a500ae43e840688d0801a882ffb94b7a77bd2314217aac52d296d169395c0b3dc7339a389354e1e4ff0746e6b2e3fc0149a36e75eafc20d51812e984faeecb52ad9b89288bacf21c152290ff2f6781dc761a3e50d88a8b4da3e65782fa959d583c718cf64d09d330c381ae123bea01e7d25eb8f8be911f3928237e3878e505be36bb6852903dff1e77be22ccf3b3e1c8658a5b92c816c6f3f0306a196ec62d5a39ecf36528f18e639b26351b6bc9d1230482e5d8e2c9561de5204d98487364c50f7236c503db3665876f6c04f7f23d1606d36120f62e3fd3de4a7525678e3748905d5a14fa840297c7dda43e13e18fad1453d5c24ddcb4bef61ab494d4f620201993b1b20f339ec6409474a6f104edbe42e0df14633c9a40352f773600b335e6a7ec6f0b0511c6d55fb484696d3b3e2fa4346d26446cba1e2e7ae1de5df058e7c2b52a1d6bb2d2daff1c73a4718541d6b9882891870b3f17442bdc250de45202f7314cd6c3670c3061b9ea658f21e1c362d622316f158968f118a72bef80745a9159f3c77985ecd9bca98ccd482b96ab39701053e30fb4d6d5efc4ba8f33fe18b0df2ab24ad5b2169ed8569cc264f91481fe3accc27448231088f05d996f562fd1950e43313193d23338fc134753ef5127d57161597f99598d546e290123ac1c3df0f5ded6cad9f523e71f7d5ce0b7d41f0d2fc6f911bd6b578f156b7b85dcf90d423e1cb854bb18ddc6801fc30ce76df9c27c1d5d91e06e9209d061b43449d0abdf346c644db465ee610d3ed406af49cce6119a1ec2ac9846350367f99e7255e5be602f0cce16439f3c5beb7276f96f2f9dffc88da05c8b197b90bf4ca75be6d767dc10d1ff883728fcaecbde596ed9b01a456e417fb9ded7431323b19a6fa8f6fd0ec596410a887037ff6a0feb81ce0dffdfdec39a5b04ec962e87bc038e4436b2a8ac00e51bca0976eef42211107422ff30034cc62355fcf65b51325fcd25861ee487c695b51ba4be9b3c47ab47388e9a8dcce4507acbf5b16164f85d12161c8038019f589e0117a02161dcf2fc01968983bde59dceda258e008e337a3af1c1127258b8877558918caa71355ca8d17be32b10d61e72a0391b6ed88327d1f6d030877fe893f777de0e0ec863f15a50b40d003a9a941182a0639674bd0b4f4f9716fb1c2e115a6465fa731759793b86a9bb70ae0bb18d0c5e53c120d192a71302d15fff0c2c76ad1f9e1281c42a659ed7b67c4f4d7c3fcd56a022bf8f043006c61f254a80184519935bbc805eefba13ed54234322506f28f362065d6a68c35473280d4b8196754a11604a901cfdea47dc6f442fa73ffc6fe5e59bece8741407a57fd5f36a5906951fe75bea732413200bb85053ad500ea6245bea8abccbf5e8927261f752c12a2765827ea9908f084b862ce41b11443f73f0ec6aa095db1bbce0b14bce8397b45da28c2ac2f33c8ecce00bdf34cd00aa95d181ea33e08b7c8a768a365c4279e0b5d9352eb62c628909cc4191e0ff81fd84cc4c371ffc000d8841a9ebe70574993579cfd0e35574ef6e4cc6edf42deb8cb1e38b55fead366238d8d7d83902c6da5ad2ee63843db90090d57eeebd90ec9b08a6ffffd6c60e0b017e0c22d08cf1e22e2e63df06b62e5e0cfcd7b9441d2ca09b4e96c3b61ed1459fc24d83301148940e554f4d78c453c7e2f262f09aebee218ec5a22f874768e4c1afa870262f2f67155c94b17a36475dd421eaee27632427ede8330b1d74d2cd1a2d0a7de694a7d87ede13b5ea664e89f3d872512581adc606cd841a2abd2ed34efe3ec8e4f03d1e38fadfd08cb1b65f4eac10c48894b6fda1440ddd5d22b06214dbd483a5da821c4f447cce31df27c40b14f4471abccd35e6673aaa17133e78a589f45331399d930534edae0402e811a411d557c184c44ebec37a4e146d8076a070cf1f967ba3341e4e8e0c8b4b4617ee2bf3e8ae478567137641b6f6bc1fafd0d15cfed74198646906b5b853c8206ebf1e7e46bd74ae848281c4d89c02057de523e7e3e75567811685c1be1d2f5a57ff5b32fb8ef19e44f25226701f1b6b66cac452620cb7529b411cd833e3b1ad07bc781be7cda26eeccdb57f44308e765e13f357356e3fb83dcb4994b369fd3ee6aa6e405da03703c0dbd0e47110533992fd2be5bde2cbf6f7e777082427189766afbe426e6014ec9d041e96bcc900d5bdf4be72142ed1ab4c1d88afe8408145e06ddd3c2820f5d928309b3ef77afdd500568d76eb99ebd6f4ab78d5e43aa61b8a0ec27e1f6475691183e19f9e43ef1e94f2656da3eb693921f13aee4d4140fc4d56ac5ff3ec97163915a028c1ed16c7d08e6862503b18283b30489507e35945197c22733dee593f1d20a53dc5a463d5b8a058fa555c220de3fe5252a83e10f163babc01ec11c2e2197491ebb06b43919320c7237c0e55cbf927e0b5aaadd81c0c4c49a30ff2f9426b32311cbf09e1bcbe75c89aec74cf848d1b2194760a6edc734aebac9b429ae0438c620d4ad23b42deb8f7f1806ee8db02261b1e6d35742b1c85602c8099c0ed85cd89969f7b9ffd5906483e788d9f8c01e998c000f3005ea9efef9ca977530999344093bd6d234e500d784b22ccc8de58065451196dc977d8e8c8deac7d47b1ddc23f82f09159796a883d8b530fa193a20c53c22c5ffa3e5d411329f6489266ea75ff184b7ff1b301293b3ff5de6eb3658d826e6aa114eac2e572bf7d0d085e1e927af2bc1b21d1eaa37075a4778bec44521e5341c89c7589ca85b0cbda1060bca778906705be8791e479cb9867b4f6f06802ae76fba15b8fbf14bfd1b393bcef6f7997ac66bd87fcdda9387a519b5dbb61f7f970772a406bdce40f48511344070ed00a20880fdcc19732df83f0ba1bf6c94e201a7a2c833239ebf380720d3ddd644c8b3d78a0eae5d0d7d22937fc5c3e9295cd7a412897b9c1123ffc1aec8c49c768ed008f795e62ad47250ad92f90d4d2c903fdba9c19f8ce5dd5eb69c099ba28eac5717c975c7504ce86b168744f9944ca63ba1938c02918ca9bfb77fc4e97c093108b3d35b8330bc32758c7f3ee746315e758ccb5e220de655350eba786e400bc89e958862541506c6e4958d3fd0987686f2d6236abd0bd118fea29e09d6025f1ac9730e72177ef28399c25134261f785b5e1b7f20bde4e347da83f8dfe0c9080d48b9dc371d9e81174faf9ebcefd3804718b05bbd6f41f40e726d390b87e60afbdadd45cd2f0c4d7495b6a6f074259518838317973877d991ef156d2d39098b50e8b6e1bbfb4096d5801d64e0655be19f7390594ad273f83e7c5128a579e6faf44c76bfdd70d726c0ea4cb9f69976b5beee76f5bec995e49d26795c9731d36d013d628fd7ac2f0bfde44c434d2bfc547480ae597b3e1e5214f108255fa0d22eb69df4a1691c6614743298af40e283090a4039b8bdf9822a86caeabd18d12c506d3448c1b15efa929881029ca0f8d4861d5f7a2d06f0e1a2f18db910ab1bf391a690086eb91341e38649f8bbd8299c3e81e0c816f34629b191e722e9bfdb8610fd135d36b0335198e2a4c06e2f37b9efeeb85a07896674c979e720347fa61782ac09cacd7967a7484e55ea2bfd50a9cb3e1863a59e6ad867593237bdb2baebaf9c88df6b91b5801393186a64dd33ba3472c0a3cb99b7ed8c93f1b95832d75df45c65df69d818ad0680e39606045c996691fcbf1bc69b3f171a46fc81fa66877758c76f73c1d83cc3dddd321b1c03c6b56fa9e02bc3fa4bef43050420202370c5074c0abd08d94c9b75a871cee948ca2e055ab07e1c062e8a1435e06073dc5911d91237ce9fe8cdf47a345de4ca65febc8f48de09603e44d7f14e1e0c37428680dd3428f0f4563dc90e0714fe0a40689acc472394704b9feba33ec9bca45533cd4635b3249a24025c271e6661d0060de48689debb58be19a6cef15f39dd6f42828d8440bc5b9e6d3aae0f745f05181c9d74832c358b8438bf46f0f4f302ffafc395b226d5bd1c5d5b011c846be3d133470db70800297699c8ee17104945a73cc77c2c9cdae9383904dc428f76480558a40c0dc19cd9190dbb78ed1da18eea6694406f428c4ad3e8b4add1ececf520fc9ffbdbde06ac39b2ceb2f24b6054268f179d258a9b260490216f6169e5867c050f3898a555907bd18b18c6d11748cf43bf7b7b1a8eeef32cee7560eed7faea9218ff4f08f69835cd6b1af390f4159ed300faf2d8b5b5904a42bb3e926b383496fb018c8da32e13a952bb172d749edc6e1e38c1e88db1d75f141d3bed099f275e3d0e7fed711d1c4e882612dc7f33fc567a19ce4a901a5350b128d08eff31b1f660e108b146ac3d415ec86820207bf9a9c32d7df1e648cc68bf093faccc1c9e3e31a45ec81a1ce6ceef43240543476ae1305a6beeb8337a0e7c6dae864081fe962b7fd63326415e01b2ebfc770f1c5f8704add7da3a0380625c1162191af137b6a5ada314e0f7233b41e6e58f9ea7e1cf9927da4770bc2d4c45e71d5728930f5a02d740f124521490231229b99cbce370627517017e6d3d82526faecdd573e135d5bc3b96e1292e0b473471e2e93e8162eadf6fc2caced5f9aa494d0eadf8dc5442a9da1d9caf007f8e47c05eb38fa8f99e480c49957c7bae1efb2ce516bd690b7379e83f0493df617449fd9c61e6f9393750464e8d59eb10c8bc84"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) 33.601667127s ago: executing program 3 (id=3800): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) 33.505941218s ago: executing program 3 (id=3802): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080001000000000008000300"], 0x20}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 33.426375081s ago: executing program 3 (id=3803): bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff95}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 33.304318792s ago: executing program 3 (id=3804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20001100}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 33.220015766s ago: executing program 3 (id=3807): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 20.623536782s ago: executing program 35 (id=3769): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="020003000000fbdbdf255500000008000300", @ANYRES32=r5, @ANYBLOB="56649118479e4a88736ed727a200000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r6, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x36}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) 18.133455657s ago: executing program 36 (id=3807): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r2, 0x0, 0x3}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.896342261s ago: executing program 9 (id=4171): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x9}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.629474819s ago: executing program 6 (id=4176): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (fail_nth: 2) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.627326576s ago: executing program 9 (id=4177): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd2d, 0x25dfdbff, {0x80, 0x20, 0x20, 0xf2, 0xfd, 0x4, 0xfe, 0x1, 0x1000}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008085}, 0x8000) 2.552066148s ago: executing program 8 (id=4178): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) ioctl$FITHAW(r3, 0xc0045878) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r5}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061100c000000000095000000000000005652da618c1a525bee9585b5eb5f7aac7ea1ad84a49e0cefa05614f1a622dd2552b8383803f2d12c3191f6a0e20cb67bb4f6295120b6"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00'}) (async) ioctl$FITHAW(r3, 0xc0045878) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r5}, 0x10) (async) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r4, 0x0, r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061100c000000000095000000000000005652da618c1a525bee9585b5eb5f7aac7ea1ad84a49e0cefa05614f1a622dd2552b8383803f2d12c3191f6a0e20cb67bb4f6295120b6"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.223455863s ago: executing program 0 (id=4180): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x3000000000000, 0x0, 0x800}, 0x0) 2.15945131s ago: executing program 9 (id=4182): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x10, r8}, 0x10) sendmmsg(r9, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r11}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x25, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x2b, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.471765116s ago: executing program 6 (id=4183): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x7c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x0, 0x95}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0x1}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xdcb}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES8=r3], 0xe4}, 0x1, 0x0, 0x0, 0x8aca335e23ab05c7}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1.470177926s ago: executing program 0 (id=4185): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800080000000000000000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x20044840) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r7], 0x28}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) sendto$packet(r5, &(0x7f0000000d80)="c879f4a1641ca1e9e8529f29f1a89b916e998b5f94a517e14ec6a1f044b53797e5f25a9dabffe28244e42939c6bf9d9214b472e2ffe09feed91d1a04243a8f66572deaf5e4523f6d473778818a2eed04d2d2605e456efb0f995dcbcb3925271979d17ba01b11c2d28f7af29e6cda155d27df4c259ee0394615bde656153136f150cbaab4ec11e095e8eb8a6ac9d5d2b1a82b4118c63f10355aa1e644d51afad57b5deff1963d5f0bb45dc80a6ba05f80ceba90a323ef765afb93f45dd6000af4e5cb6fb2f91e56c4dc3515369240f4dddb7b0b31633125fdc91bdd4883bd57c0d4a5", 0xe2, 0x24000000, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r8, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x3c}}, 0x0) 1.467704506s ago: executing program 8 (id=4186): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000002c0)="67a2a94ecc91aab52f0f2cb09701479daaff2e9d905daa365b9755aa37ca084148f95553438452abb6fa895faaebcb9c80be49abf631f060a38c6e2eedc96b986a0d598ee3b58b303b8a15786e06b92122177ef8a50cb5a1475734b8250f8aca7b11b22ab8a8b2cd8779979194510b048838de61d4d20c2a33df2d645ace949d6cea4ad14ff3fc94d3a370452ee5629fa6d93769be4d81529ccaa871f2d83cd709b7c1cf9c29e2076e5a388b06d2ebaf3b374cb29f0ac006f7d0b8250d93d49a2905c3", 0xc3}, {&(0x7f0000000140)="ad86dd16b80bd85c93cf520f5c20a953b4fb098431f25395015d1a6500b0ccb63b190a", 0x23}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f00000003c0)="9a84cdf7a473e53ffb6b3b688dbf4c156b53c1558962e7e7978aff9f30ad90bc6d8367a89ed1b729f75e556ba1ad333dc96bf11721a2b97033acbcd774277c0074f0e3c147bbed8c7d6d651c7688f348801eeffe7e5b80d8f02564dd0a6d744e9361c44a3d42268a74ba731d818293e23f46581bab2298a626507b93cb6fc9a95e90d8ef379d4be23a1a869ea2e72bd05d70a7fc5dde3ae011605320c62006d3c0f1a7f82c2ada0f3d27720989865f48474fcbc4b1c66a108bbdd12782771914979a373434552742365654b345d2f16bf77c6ccd9696b0073b9dc26cefe9bebde709a390b89accbaa53168", 0xeb}], 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="189500"/17], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 1.466604201s ago: executing program 6 (id=4187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004340), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)={0x5c, r1, 0x801, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "1be4f75693f04f32d191a4e050d512e2855ef8f7084654605723385f"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0xf5ffffff) 1.465446259s ago: executing program 8 (id=4189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000500)={0x0, 0x52, &(0x7f00000004c0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000f08ea76b"], 0x20}}, 0x0) 1.443936586s ago: executing program 6 (id=4190): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x26, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 1.39652462s ago: executing program 2 (id=4191): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) (fail_nth: 1) 1.069275332s ago: executing program 0 (id=4192): syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="2f094301cbe5", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12109b", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x4, 0xad, 0x689}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000016c0), 0x280000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001700)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000001800)=0xe8) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0, 0x0}, &(0x7f0000001880)=0xc) (async) r6 = gettid() (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000018c0)=0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001900)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000001a00)=0xe8) sendmsg$netlink(r0, &(0x7f0000001bc0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)={0x12a0, 0x21, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@generic="4e6737d9fe10b8f507ffdffefd37bc2d3f2aad2e688c7a8e9ca8c0f28aca29cb572ea6a59de7f61246ee3f539599f28bef5cc1c0bbb511d58240808e4adbb8bea7cd75f040e52daf35fe10b339fb132a07cb74b2d5c2ec0baa58bc0fc88a1c82e14daedfbf2913343c2c7feb7e8a538fcbac4ba48bde8fba58d1e25edde4f8f2dcfd8860b597e02ae3c858eaacb6eebaeafeb547d31a5c03553abe6105fbdff4bcdf5875ac6c5e5f0e1c203e9447760c7d258f529290d0447be3ce06cb18e0aea16bf075118e0f25f34c99542a690bd8e413db282590341e70fc7e", @generic="a72d067b5683f95703e761", @nested={0x10e8, 0x5d, 0x0, 0x1, [@generic="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", @nested={0x4, 0xb1}, @typed={0xce, 0x95, 0x0, 0x0, @binary="235094dd78dd6828feae0ecaaff674636161ecbb73ef156dfa8a9e46363611d115e4a438bb8042ea592f213e0adccb338562ac6211d2d3323768d4dfdb1b702f9e8212831c50b5c6c0100d98dd0a46808aa508cfe15fdc5f3a3c33dca2f7cf9fb0ed1b087ab993a3e7bec62fc2437636a80e3dc767ccddb397af4a82e0fa532cee7dd6bda7ea72951ef6b457aca2c84d2eca8cd4eb9e7fca0fb9f4fb0608af418da76a74aa803744b3e8043f0f3b7a673b652fac6132b776d8060edc4e7c684e5b6f2709dff9dbd2ec0a"}, @nested={0x4, 0x144}, @typed={0xc, 0x136, 0x0, 0x0, @u64=0x3}]}, @generic="3b8691766cec4338897dc15fe245adb8c25e56dc0021bdfc432a6fd868dcdc7313e7023d605cae2466225de4a7eff7a00f8ec2bcd29d8755fc08eb945a9d86988a3a2b8a0e9503edbb561fbb2d534462f5cac4f0e710de7fe0c1c7f61aa9aacdddcfe97c47a1b8193e95f387ab74541bd38287b69d15bcd2dba60b3373466c5fdc8c1dc7d209a36538156186fcac72e9662dc66b25b1bb78723d4b6620bc9c7a7c413493aeca56f1c831a30da8db6622ec8f01eca580f2e4be6e4c60a2619a8155"]}, 0x12a0}, {&(0x7f00000014c0)={0x140, 0x15, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@generic="85851bf534d705a6d677e8057a5dbe54bcb65ff0b21837ccfb4eeee64f66fb6faeb5f71c33b301de7cfe2a708ef6b5cb0c19cd636d4986024fcd177dc6d26c93bcbf316e76cf1c4f0d369bbc43f063c8fce62512a09b71977eed2cfaf0e723f6259492d25c0e16345f1c5c140113446c0ab5f20e5f595127e45e1def6ab387bbd4fc2bfdbeba9ce9eaf156ec2b54399a0dccdb7e31f6a7bdf136ba3e041147e5e91789d130c1f01405be11", @typed={0x4, 0x7a}, @nested={0x4f, 0xc2, 0x0, 0x1, [@generic="457082cef49b7896ed70d216c14d73417ef8641eb573442d330f8b92ad4fd4449acd879dd63e3c7825bae231e8be5e824f222c4fd3ebb5ad7882b1fe72fde115bdc9676c83299e3a221999"]}, @nested={0x2e, 0x73, 0x0, 0x1, [@generic="0c82874334dc519702dbb443e9ed57153dfc56206cc7b4ea459164036a80ca711d07714879c4", @nested={0x4, 0xc6}]}]}, 0x140}, {&(0x7f0000001600)={0x9c, 0x29, 0x20, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8c, 0x2a, 0x0, 0x0, @binary="a4bbd9f6f92a97dc1ab10a290bd5b2c80964bbf6b92741e92a7451c6cec9ff125776fa697a00e553548c64e12d5a4d92d304b7869fdece38ac856fa244a917dcc1786cc7af63fcb505362e0efa80e1488922495cab51f38f133b8a2b79c178488069b873ceda8c083505a3d873d046c6b5e9ada14e7f2a7b4fce40ce09361bc895ec8cebd44ef674"}]}, 0x9c}], 0x3, &(0x7f0000001a40)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee00}}}], 0x158, 0x80}, 0x20000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000100000005000c00000000001400030067656e6576653100000001000000000095265c4b535c4325c946cb39e80edf8af32859c9f83eeca1828811ef90196538aa050ba898d1991156564c7c4794072ca36c71cf4da23898e502f745a88dae230c92d55f790341f6a7a3f436c04cd431b91d836a01ea5421544c130cbbdecd"], 0x58}}, 0x0) 1.068878875s ago: executing program 2 (id=4193): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (fail_nth: 3) bpf$MAP_CREATE(0x0, 0x0, 0x48) 940.344234ms ago: executing program 8 (id=4194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}], {0x14}}, 0x64}}, 0x0) 939.986921ms ago: executing program 9 (id=4195): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff3e, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r7, 0x1f4d2000) write$tun(r7, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x38, 0x68, 0x1, 0x70bd27, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010100}]}, 0x38}}, 0x40000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0xfffffd45) 919.073608ms ago: executing program 6 (id=4196): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="54000000020603cb22000000000000000000000010000300686173683a69702c6d6163e70800020073797a31000000000c00078008001300000000000500050002000000050004000000000005000100070000"], 0x54}}, 0x4040000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @private1, 0x2}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000100)="630e71", 0x3}], 0x1}}], 0x1, 0x24044005) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000340)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x0, 0x3, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000002060102000000000000000003000006040007800e0003006269746d61703a69700000000c000300686173683a69700005000400020000000900020073797a31789800000900020073797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100005ff28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c0420000000000001400128009000100640074680000000a00"/36], 0x3c}}, 0x0) 856.673886ms ago: executing program 0 (id=4197): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x200000000000000, 0x0, 0x800}, 0x0) 492.32509ms ago: executing program 2 (id=4198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getuid() sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000300)=[{&(0x7f0000000100)={0x0, 0x27, 0x20, 0x70bd25, 0x25dfdbfc, "", [@nested={0x0, 0xf1, 0x0, 0x1, [@typed={0x0, 0x121, 0x0, 0x0, @u64=0x188}, @generic="f08b65518b4b640e254327baae3c0ceeea6ea2b36e2aaa6f689dda2d4b80f03ea71adcc78cb526e416764a2d90ca9d0c14c51f5323d69a750c3a", @generic="ef298899d9ab8f0caab1e852d551e517f3cf25e08ec8f7d6ce54268bf5c97d7335c11f3d1f74433e095b9427975fd0a0d21888dfb9d8972327be7b4f650dbe61bc0e6fa68e41d20c935b2985511cd86c3835c43e5e6734670d2b0ec49dff04481f4811b6cd4267d43f1f171c1043d8dea041a012a2f6", @typed={0x0, 0x13e, 0x0, 0x0, @uid=r1}, @nested={0x0, 0x13d}, @nested={0x0, 0x87}]}, @typed={0x0, 0x9d, 0x0, 0x0, @ipv4=@empty}, @generic="1ef6ae8be472cdcabfa2b5525a0343f85f6f869b423476ed84fd7cd832b615f0e32c49bf30392f34fb43ee6a29371fc5a72bd4086f3ca82b3a0b3b4e18a22ade2ee1314bbf5f557f0078e9d7a3da93dd573c04f90dc7fd35b0f5ae6c29cf800257dd6f4d27567b9c361abe9394c8f117c9678106576782b14f97902dad66a8408c4994049c01dd920b7f7a19eda2de81db76251ec493e5bc87bf5e9d93b94e51ca6f7b26bc72f78bc7045329d648793fcc3d15e4d6b1ce3a1d3f9fa3bc6c02577253c35fd65edc863dad452992621cca1a7a53bcce358456e5d1843c2879", @typed={0x0, 0x10d, 0x0, 0x0, @u64=0x6}, @typed={0x0, 0xa, 0x0, 0x0, @u32=0x5}]}}, {&(0x7f0000000000)={0x0, 0x3e, 0x100, 0x70bd2b, 0x25dfdbfd}}], 0x0, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 491.908446ms ago: executing program 0 (id=4199): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00010000000000000000000c00000001000000000000e6"], 0x20}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0xd, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000003c0)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)="ad", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1}, 0xff, 0xfe}], 0x20) (async) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1}, 0xff, 0xfe}], 0x20) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000008d00000200000008000200000000002b3a50f59ac03c46a55b4a45834b1d0a6ce4d8ea8f8e68ac4de5fc9d300e71d64b5ee91bcd837afce2948ccffdb3da924d4e114fd101e906e30ebb1c6ee570d6bd2b595323a3568ade37"], 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000008d00000200000008000200000000002b3a50f59ac03c46a55b4a45834b1d0a6ce4d8ea8f8e68ac4de5fc9d300e71d64b5ee91bcd837afce2948ccffdb3da924d4e114fd101e906e30ebb1c6ee570d6bd2b595323a3568ade37"], 0x1c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, &(0x7f0000000100)=0x40000003, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 430.06392ms ago: executing program 2 (id=4200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xffef}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 412.053512ms ago: executing program 9 (id=4201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES64=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0100"/18, @ANYRES32=r6, @ANYBLOB="0c000e00760603013b000500"], 0x28}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x6, 0x2}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000ecb3150000", @ANYRES32=r7, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f0000000000)=0x100000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r11 = socket(0x10, 0x80002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900af94734485ee51cae3f5200100626f6e640000000014000280080013000000000008001200000000003050ec22dae6485b43d382c9242061c69abcc056b2af3384526e8191ebb96c2999"], 0x44}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000206aa2500000000000000000000000a05000400000000000900060073797a32f9ff00000c00078087778ae9000000000500050005000500050000000d000300686173683a6e65740000000000000000"], 0x54}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000200)="f27f1a1a561d9605e2787dc389753ec463a0630c06c33e96b5321d47b00e3dc72009ee95caea541a20c4e4aeb8dfb1", &(0x7f0000000340)=""/11, &(0x7f0000000380)="5257d57ba41025067a98340bdf0ffd5cb68aa2afc13ff5db3c898863ad57ad6f51420f", &(0x7f0000000740)="85ddb30eda59ffeb87e776c6722c57c6a24ca8528afb106b64cce807bc3c298826827742aea295aaf39b2bb2bad33edc93b43b2751a53043eb1e745b06c643ae031280f3b23142c13c4407e08915d44bb6d001ebbd34077ed76a36dbbcad874f403080ad36bb1e1337ac64c16b6112a798d7521300e82d3243997a55e599064e1cab6f290b720a5c98a67566a6466cb024ae2544b8627bfbccde02e01734aa7bc01ec1a664dcc8a4823126984ea2a9edfaf425b741ff296f0f5001d41bc10646381cda29cb076593edf122da0716fb3d1ba0f0db4d1c75502fb31af8b6288cc7c7fd7cefe1d763168b30e40bc17fe1d4", 0x5, r7, 0x4}, 0x38) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140), 0x0) socket$xdp(0x2c, 0x3, 0x0) 407.421665ms ago: executing program 6 (id=4202): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800080000000000000000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x20044840) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r7], 0x28}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) sendto$packet(r5, &(0x7f0000000d80)="c879f4a1641ca1e9e8529f29f1a89b916e998b5f94a517e14ec6a1f044b53797e5f25a9dabffe28244e42939c6bf9d9214b472e2ffe09feed91d1a04243a8f66572deaf5e4523f6d473778818a2eed04d2d2605e456efb0f995dcbcb3925271979d17ba01b11c2d28f7af29e6cda155d27df4c259ee0394615bde656153136f150cbaab4ec11e095e8eb8a6ac9d5d2b1a82b4118c63f10355aa1e644d51afad57b5deff1963d5f0bb45dc80a6ba05f80ceba90a323ef765afb93f45dd6000af4e5cb6fb2f91e56c4dc3515369240f4dddb7b0b31633125fdc91bdd4883bd57c0d4a5", 0xe2, 0x24000000, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r8, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x3c, 0x0, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x3c}}, 0x0) 216.222223ms ago: executing program 2 (id=4203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000cb57905407afcfacc5aa86564a2172f677c00e81c06a", @ANYRES16=r1, @ANYBLOB="00012abd7000ffdbdf2505000000140003800800030009000000080002000500000048000680040002003e0003000e68cb7e671a716d4211135f80e006e7fd8d66a07ec656dc10cae0b255d8c397ba05428941338ad84cac3164dc704499b8b695ecc9d2bdd169000000240009800800010005000000080001000300000008000200070000000800020039a80000"], 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x20000001) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) close(r4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="b000000044000701fcfffffffeffffff017c00009c0004809800498008002a00", @ANYRES32, @ANYBLOB="18004a8014002300fc02000000000000000000000000000114008700ff0100000000000000000000000000015d00c7801bc9aff29710760b591d32eb13bd647f378b2614e113fc5cd99b13746a6e4d64833267a828a886d4926e622907e837be203afee9058a0c68dc1fb7e6b9cca7237917348640e177c36e755085e7c851b904a8b26f655d59cda7000000"], 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 215.930841ms ago: executing program 8 (id=4204): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000efff0000080001000000000008000300"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x10) 193.884147ms ago: executing program 9 (id=4205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r4, @ANYRES32], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000800000002000001000000da3ecc0200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x891e, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000500), &(0x7f0000000280)=@udp=r4}, 0x20) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4, 0x8, 0x20, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "e6a004c9801448c7"}}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) 126.031902ms ago: executing program 0 (id=4206): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="080008000000000000000000000000090797e19eefee4f14f66fd644c7cf252c6ec774874cd2b6befb"], 0x20}}, 0x0) 331.26µs ago: executing program 2 (id=4207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x1a, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x6a, 0x10, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pimreg1\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ipvlan1\x00', 0x200}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) 0s ago: executing program 8 (id=4208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (fail_nth: 4) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): 10.101417][T15618] RSP: 002b:00007f7827f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.101438][T15618] RAX: ffffffffffffffda RBX: 00007f78273b5fa0 RCX: 00007f782718ebe9 [ 410.101451][T15618] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000013 [ 410.101462][T15618] RBP: 00007f7827f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 410.101473][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.101483][T15618] R13: 00007f78273b6038 R14: 00007f78273b5fa0 R15: 00007ffc685b05b8 [ 410.101518][T15618] [ 410.637025][T15629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3255'. [ 411.123824][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3264'. [ 411.303804][T15660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.339302][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3269'. [ 411.364876][T15661] netlink: 'syz.2.3269': attribute type 7 has an invalid length. [ 411.376887][T15661] netlink: 'syz.2.3269': attribute type 8 has an invalid length. [ 411.436125][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 411.814818][T15679] netlink: 696 bytes leftover after parsing attributes in process `syz.2.3276'. [ 411.858241][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3276'. [ 411.873446][T15682] FAULT_INJECTION: forcing a failure. [ 411.873446][T15682] name failslab, interval 1, probability 0, space 0, times 0 [ 411.894077][T15682] CPU: 0 UID: 0 PID: 15682 Comm: syz.3.3277 Not tainted syzkaller #0 PREEMPT(full) [ 411.894108][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.894121][T15682] Call Trace: [ 411.894129][T15682] [ 411.894138][T15682] dump_stack_lvl+0x189/0x250 [ 411.894168][T15682] ? __pfx____ratelimit+0x10/0x10 [ 411.894200][T15682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.894224][T15682] ? __pfx__printk+0x10/0x10 [ 411.894260][T15682] ? __pfx___might_resched+0x10/0x10 [ 411.894284][T15682] should_fail_ex+0x414/0x560 [ 411.894319][T15682] should_failslab+0xa8/0x100 [ 411.894351][T15682] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 411.894380][T15682] ? __alloc_skb+0x112/0x2d0 [ 411.894404][T15682] __alloc_skb+0x112/0x2d0 [ 411.894428][T15682] netlink_sendmsg+0x5c6/0xb30 [ 411.894459][T15682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.894483][T15682] ? aa_sock_msg_perm+0xf1/0x1d0 [ 411.894505][T15682] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.894528][T15682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.894556][T15682] __sock_sendmsg+0x219/0x270 [ 411.894587][T15682] ____sys_sendmsg+0x505/0x830 [ 411.894617][T15682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.894650][T15682] ? import_iovec+0x74/0xa0 [ 411.894679][T15682] ___sys_sendmsg+0x21f/0x2a0 [ 411.894705][T15682] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.894768][T15682] ? __fget_files+0x2a/0x420 [ 411.894797][T15682] ? __fget_files+0x3a0/0x420 [ 411.894840][T15682] __x64_sys_sendmsg+0x19b/0x260 [ 411.894865][T15682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.894900][T15682] ? __pfx_ksys_write+0x10/0x10 [ 411.894924][T15682] ? rcu_is_watching+0x15/0xb0 [ 411.894951][T15682] ? do_syscall_64+0xbe/0x3b0 [ 411.894975][T15682] do_syscall_64+0xfa/0x3b0 [ 411.894991][T15682] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.895021][T15682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.895042][T15682] ? clear_bhb_loop+0x60/0xb0 [ 411.895067][T15682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.895087][T15682] RIP: 0033:0x7fa13038ebe9 [ 411.895105][T15682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.895122][T15682] RSP: 002b:00007fa13125a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.895143][T15682] RAX: ffffffffffffffda RBX: 00007fa1305b5fa0 RCX: 00007fa13038ebe9 [ 411.895158][T15682] RDX: 0000000000004080 RSI: 0000200000000000 RDI: 0000000000000003 [ 411.895171][T15682] RBP: 00007fa13125a090 R08: 0000000000000000 R09: 0000000000000000 [ 411.895183][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.895195][T15682] R13: 00007fa1305b6038 R14: 00007fa1305b5fa0 R15: 00007ffe959e6a88 [ 411.895229][T15682] [ 411.912361][T15679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3276'. [ 412.264482][T15688] FAULT_INJECTION: forcing a failure. [ 412.264482][T15688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.312725][T15688] CPU: 1 UID: 0 PID: 15688 Comm: syz.3.3279 Not tainted syzkaller #0 PREEMPT(full) [ 412.312756][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.312791][T15688] Call Trace: [ 412.312800][T15688] [ 412.312809][T15688] dump_stack_lvl+0x189/0x250 [ 412.312844][T15688] ? __pfx____ratelimit+0x10/0x10 [ 412.312875][T15688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.312900][T15688] ? __pfx__printk+0x10/0x10 [ 412.312943][T15688] should_fail_ex+0x414/0x560 [ 412.312976][T15688] _copy_to_user+0x31/0xb0 [ 412.313004][T15688] simple_read_from_buffer+0xe1/0x170 [ 412.313048][T15688] proc_fail_nth_read+0x1b3/0x220 [ 412.313076][T15688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.313101][T15688] ? rw_verify_area+0x2a6/0x4d0 [ 412.313127][T15688] ? __lock_acquire+0xab9/0xd20 [ 412.313155][T15688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.313180][T15688] vfs_read+0x1fd/0xa30 [ 412.313204][T15688] ? fdget_pos+0x247/0x320 [ 412.313227][T15688] ? __pfx___mutex_lock+0x10/0x10 [ 412.313258][T15688] ? __pfx_vfs_read+0x10/0x10 [ 412.313292][T15688] ? __fget_files+0x2a/0x420 [ 412.313328][T15688] ? __fget_files+0x3a0/0x420 [ 412.313357][T15688] ? __fget_files+0x2a/0x420 [ 412.313397][T15688] ksys_read+0x145/0x250 [ 412.313431][T15688] ? __pfx_ksys_read+0x10/0x10 [ 412.313455][T15688] ? rcu_is_watching+0x15/0xb0 [ 412.313482][T15688] ? do_syscall_64+0xbe/0x3b0 [ 412.313504][T15688] do_syscall_64+0xfa/0x3b0 [ 412.313520][T15688] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.313546][T15688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.313565][T15688] ? clear_bhb_loop+0x60/0xb0 [ 412.313595][T15688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.313612][T15688] RIP: 0033:0x7fa13038d5fc [ 412.313630][T15688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 412.313646][T15688] RSP: 002b:00007fa13125a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.313665][T15688] RAX: ffffffffffffffda RBX: 00007fa1305b5fa0 RCX: 00007fa13038d5fc [ 412.313679][T15688] RDX: 000000000000000f RSI: 00007fa13125a0a0 RDI: 0000000000000006 [ 412.313690][T15688] RBP: 00007fa13125a090 R08: 0000000000000000 R09: 0000000000000000 [ 412.313701][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.313712][T15688] R13: 00007fa1305b6038 R14: 00007fa1305b5fa0 R15: 00007ffe959e6a88 [ 412.313742][T15688] [ 413.033453][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3283'. [ 413.115691][T15708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3288'. [ 413.367344][T15720] FAULT_INJECTION: forcing a failure. [ 413.367344][T15720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.394116][T15720] CPU: 1 UID: 0 PID: 15720 Comm: syz.0.3289 Not tainted syzkaller #0 PREEMPT(full) [ 413.394145][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.394157][T15720] Call Trace: [ 413.394165][T15720] [ 413.394175][T15720] dump_stack_lvl+0x189/0x250 [ 413.394203][T15720] ? __pfx____ratelimit+0x10/0x10 [ 413.394234][T15720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.394262][T15720] ? __pfx__printk+0x10/0x10 [ 413.394305][T15720] should_fail_ex+0x414/0x560 [ 413.394337][T15720] _copy_from_user+0x2d/0xb0 [ 413.394363][T15720] __copy_msghdr+0x3c5/0x5b0 [ 413.394390][T15720] ___sys_sendmsg+0x1a5/0x2a0 [ 413.394422][T15720] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.394484][T15720] ? __fget_files+0x2a/0x420 [ 413.394514][T15720] ? __fget_files+0x3a0/0x420 [ 413.394556][T15720] __sys_sendmmsg+0x227/0x430 [ 413.394582][T15720] ? __pfx___sys_sendmmsg+0x10/0x10 [ 413.394602][T15720] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 413.394665][T15720] ? ksys_write+0x22a/0x250 [ 413.394695][T15720] ? __pfx_ksys_write+0x10/0x10 [ 413.394718][T15720] ? rcu_is_watching+0x15/0xb0 [ 413.394746][T15720] __x64_sys_sendmmsg+0xa0/0xc0 [ 413.394771][T15720] do_syscall_64+0xfa/0x3b0 [ 413.394789][T15720] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.394818][T15720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.394837][T15720] ? clear_bhb_loop+0x60/0xb0 [ 413.394862][T15720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.394881][T15720] RIP: 0033:0x7f742cf8ebe9 [ 413.394899][T15720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.394917][T15720] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.394938][T15720] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 413.394954][T15720] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000003 [ 413.394966][T15720] RBP: 00007f742dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 413.394978][T15720] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.394990][T15720] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 413.395022][T15720] [ 413.703043][T15724] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 413.933054][T15733] netlink: 'syz.6.3295': attribute type 3 has an invalid length. [ 413.972358][T15733] netlink: 'syz.6.3295': attribute type 1 has an invalid length. [ 414.007249][T15733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.182460][T15744] netlink: 'syz.7.3299': attribute type 15 has an invalid length. [ 414.255901][ T13] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 414.313512][T15748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.390557][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.398761][ C1] lec:lec_tx_timeout: lec0 [ 414.403556][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.488172][T15765] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 414.636125][T15769] syzkaller0: entered promiscuous mode [ 414.648040][T15769] syzkaller0: entered allmulticast mode [ 414.902385][T15771] __nla_validate_parse: 5 callbacks suppressed [ 414.902405][T15771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3307'. [ 414.965342][T15776] FAULT_INJECTION: forcing a failure. [ 414.965342][T15776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.999574][T15776] CPU: 1 UID: 0 PID: 15776 Comm: syz.2.3308 Not tainted syzkaller #0 PREEMPT(full) [ 414.999605][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.999618][T15776] Call Trace: [ 414.999626][T15776] [ 414.999637][T15776] dump_stack_lvl+0x189/0x250 [ 414.999666][T15776] ? __pfx____ratelimit+0x10/0x10 [ 414.999697][T15776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.999722][T15776] ? __pfx__printk+0x10/0x10 [ 414.999766][T15776] should_fail_ex+0x414/0x560 [ 414.999799][T15776] _copy_to_user+0x31/0xb0 [ 414.999826][T15776] simple_read_from_buffer+0xe1/0x170 [ 414.999862][T15776] proc_fail_nth_read+0x1b3/0x220 [ 414.999890][T15776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.999917][T15776] ? rw_verify_area+0x2a6/0x4d0 [ 414.999947][T15776] ? __lock_acquire+0xab9/0xd20 [ 414.999977][T15776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.000003][T15776] vfs_read+0x1fd/0xa30 [ 415.000034][T15776] ? fdget_pos+0x247/0x320 [ 415.000057][T15776] ? __pfx___mutex_lock+0x10/0x10 [ 415.000089][T15776] ? __pfx_vfs_read+0x10/0x10 [ 415.000118][T15776] ? __fget_files+0x2a/0x420 [ 415.000153][T15776] ? __fget_files+0x3a0/0x420 [ 415.000181][T15776] ? __fget_files+0x2a/0x420 [ 415.000222][T15776] ksys_read+0x145/0x250 [ 415.000252][T15776] ? __pfx_ksys_read+0x10/0x10 [ 415.000282][T15776] ? do_syscall_64+0xbe/0x3b0 [ 415.000305][T15776] do_syscall_64+0xfa/0x3b0 [ 415.000323][T15776] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.000351][T15776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.000371][T15776] ? clear_bhb_loop+0x60/0xb0 [ 415.000394][T15776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.000413][T15776] RIP: 0033:0x7fcecc18d5fc [ 415.000431][T15776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.000448][T15776] RSP: 002b:00007fceccfef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.000469][T15776] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18d5fc [ 415.000483][T15776] RDX: 000000000000000f RSI: 00007fceccfef0a0 RDI: 0000000000000004 [ 415.000496][T15776] RBP: 00007fceccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 415.000508][T15776] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.000520][T15776] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 415.000555][T15776] [ 415.273969][T15778] tipc: Enabled bearer , priority 0 [ 415.354639][T15781] syzkaller0: entered promiscuous mode [ 415.360202][T15781] syzkaller0: entered allmulticast mode [ 415.499248][T15778] tipc: Resetting bearer [ 415.521950][ T55] block nbd3: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 90 seconds [ 415.539540][ T55] block nbd3: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 90 seconds [ 415.551323][ T55] block nbd3: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 90 seconds [ 415.588695][T15781] netlink: 'syz.7.3309': attribute type 1 has an invalid length. [ 415.658179][T15777] tipc: Resetting bearer [ 415.664565][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'. [ 415.754117][T15777] tipc: Disabling bearer [ 415.775129][T15804] FAULT_INJECTION: forcing a failure. [ 415.775129][T15804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.796635][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 415.819251][T15804] CPU: 1 UID: 0 PID: 15804 Comm: syz.6.3314 Not tainted syzkaller #0 PREEMPT(full) [ 415.819283][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.819295][T15804] Call Trace: [ 415.819303][T15804] [ 415.819312][T15804] dump_stack_lvl+0x189/0x250 [ 415.819341][T15804] ? __pfx____ratelimit+0x10/0x10 [ 415.819370][T15804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.819393][T15804] ? __pfx__printk+0x10/0x10 [ 415.819419][T15804] ? __might_fault+0xb0/0x130 [ 415.819457][T15804] should_fail_ex+0x414/0x560 [ 415.819488][T15804] _copy_from_user+0x2d/0xb0 [ 415.819512][T15804] ___sys_recvmsg+0x12e/0x510 [ 415.819543][T15804] ? __pfx____sys_recvmsg+0x10/0x10 [ 415.819591][T15804] ? __might_fault+0xb0/0x130 [ 415.819617][T15804] do_recvmmsg+0x307/0x770 [ 415.819643][T15804] ? __pfx_do_recvmmsg+0x10/0x10 [ 415.819672][T15804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 415.819712][T15804] __x64_sys_recvmmsg+0x190/0x240 [ 415.819734][T15804] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 415.819757][T15804] ? do_syscall_64+0xbe/0x3b0 [ 415.819775][T15804] do_syscall_64+0xfa/0x3b0 [ 415.819788][T15804] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.819811][T15804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.819827][T15804] ? clear_bhb_loop+0x60/0xb0 [ 415.819846][T15804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.819862][T15804] RIP: 0033:0x7f782718ebe9 [ 415.819876][T15804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.819890][T15804] RSP: 002b:00007f7827f6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 415.819908][T15804] RAX: ffffffffffffffda RBX: 00007f78273b6090 RCX: 00007f782718ebe9 [ 415.819920][T15804] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 415.819931][T15804] RBP: 00007f7827f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.819943][T15804] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 415.819953][T15804] R13: 00007f78273b6128 R14: 00007f78273b6090 R15: 00007ffc685b05b8 [ 415.819979][T15804] [ 416.028512][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 416.160559][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 416.441955][T15829] tipc: Enabled bearer , priority 0 [ 416.465298][T15829] syzkaller0: entered promiscuous mode [ 416.496141][T15829] syzkaller0: entered allmulticast mode [ 416.571415][T15829] tipc: Resetting bearer [ 416.612275][T15826] tipc: Resetting bearer [ 416.684633][T15826] tipc: Disabling bearer [ 416.843396][T15844] tipc: Enabling of bearer rejected, already enabled [ 416.877898][T15844] tipc: Resetting bearer [ 416.904293][T15848] openvswitch: netlink: Actions may not be safe on all matching packets [ 417.047523][T15853] netlink: 'syz.6.3338': attribute type 21 has an invalid length. [ 417.055774][T15853] netlink: 'syz.6.3338': attribute type 22 has an invalid length. [ 417.068548][T15853] netlink: 'syz.6.3338': attribute type 23 has an invalid length. [ 417.076965][T15853] netlink: 'syz.6.3338': attribute type 25 has an invalid length. [ 417.143557][T15853] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3338'. [ 417.356547][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3344'. [ 417.387857][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3344'. [ 417.417711][T15866] netlink: 'syz.6.3344': attribute type 10 has an invalid length. [ 417.444731][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.458008][T15866] bridge_slave_1: left allmulticast mode [ 417.466276][T15866] bridge_slave_1: left promiscuous mode [ 417.476074][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.499528][T15866] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 417.557609][T15872] tipc: Enabled bearer , priority 0 [ 417.588163][T15872] syzkaller0: entered promiscuous mode [ 417.613474][T15872] syzkaller0: entered allmulticast mode [ 417.705162][T15872] tipc: Resetting bearer [ 417.740059][T15869] tipc: Resetting bearer [ 417.821154][T15869] tipc: Disabling bearer [ 417.844576][T15887] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 418.425406][T15909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3359'. [ 418.835911][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3367'. [ 418.994796][T15930] netlink: 'syz.0.3368': attribute type 5 has an invalid length. [ 419.019030][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3368'. [ 419.272306][T15940] bond0: entered promiscuous mode [ 419.286064][T15940] bond_slave_0: entered promiscuous mode [ 419.295938][T15940] bond_slave_1: entered promiscuous mode [ 419.317787][T15940] bond0: left promiscuous mode [ 419.327544][T15940] bond_slave_0: left promiscuous mode [ 419.348383][T15940] bond_slave_1: left promiscuous mode [ 419.410413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 419.418527][ C1] lec:lec_tx_timeout: lec0 [ 419.423173][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 420.014060][T15979] netlink: 'syz.2.3382': attribute type 5 has an invalid length. [ 421.704870][T16049] __nla_validate_parse: 1 callbacks suppressed [ 421.704892][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 421.813972][T16055] netlink: 'syz.3.3410': attribute type 10 has an invalid length. [ 421.847630][T16055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3410'. [ 421.873775][T16055] ipvlan1: entered promiscuous mode [ 421.879171][T16055] ipvlan1: entered allmulticast mode [ 421.920753][T16055] veth0_vlan: entered allmulticast mode [ 421.941587][T16055] bridge0: port 1(ipvlan1) entered blocking state [ 421.969538][T16055] bridge0: port 1(ipvlan1) entered disabled state [ 421.980882][T16055] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 422.007737][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 422.027164][T16064] tipc: Enabled bearer , priority 0 [ 422.076093][T16064] syzkaller0: entered promiscuous mode [ 422.086076][T16064] syzkaller0: entered allmulticast mode [ 422.157141][T16071] FAULT_INJECTION: forcing a failure. [ 422.157141][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 422.177635][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.3.3416 Not tainted syzkaller #0 PREEMPT(full) [ 422.177665][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.177679][T16071] Call Trace: [ 422.177687][T16071] [ 422.177696][T16071] dump_stack_lvl+0x189/0x250 [ 422.177726][T16071] ? __pfx____ratelimit+0x10/0x10 [ 422.177757][T16071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.177783][T16071] ? __pfx__printk+0x10/0x10 [ 422.177819][T16071] ? __pfx___might_resched+0x10/0x10 [ 422.177838][T16071] ? fs_reclaim_acquire+0x7d/0x100 [ 422.177884][T16071] should_fail_ex+0x414/0x560 [ 422.177917][T16071] should_failslab+0xa8/0x100 [ 422.177949][T16071] __kmalloc_noprof+0xcb/0x4f0 [ 422.177974][T16071] ? kfree+0x4d/0x440 [ 422.177996][T16071] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 422.178023][T16071] tomoyo_realpath_from_path+0xe3/0x5d0 [ 422.178047][T16071] ? tomoyo_domain+0xd9/0x130 [ 422.178074][T16071] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 422.178104][T16071] tomoyo_path_number_perm+0x1e8/0x5a0 [ 422.178137][T16071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.178186][T16071] ? __lock_acquire+0xab9/0xd20 [ 422.178240][T16071] ? __fget_files+0x2a/0x420 [ 422.178275][T16071] ? __fget_files+0x2a/0x420 [ 422.178304][T16071] ? __fget_files+0x3a0/0x420 [ 422.178340][T16071] ? __fget_files+0x2a/0x420 [ 422.178376][T16071] security_file_ioctl+0xcb/0x2d0 [ 422.178406][T16071] __se_sys_ioctl+0x47/0x170 [ 422.178434][T16071] do_syscall_64+0xfa/0x3b0 [ 422.178452][T16071] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.178481][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.178502][T16071] ? clear_bhb_loop+0x60/0xb0 [ 422.178528][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.178547][T16071] RIP: 0033:0x7fa13038ebe9 [ 422.178565][T16071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.178584][T16071] RSP: 002b:00007fa13125a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.178606][T16071] RAX: ffffffffffffffda RBX: 00007fa1305b5fa0 RCX: 00007fa13038ebe9 [ 422.178620][T16071] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 422.178633][T16071] RBP: 00007fa13125a090 R08: 0000000000000000 R09: 0000000000000000 [ 422.178645][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.178657][T16071] R13: 00007fa1305b6038 R14: 00007fa1305b5fa0 R15: 00007ffe959e6a88 [ 422.178691][T16071] [ 422.178700][T16071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.185217][T16064] tipc: Resetting bearer [ 422.286951][T16078] netlink: 'syz.6.3415': attribute type 16 has an invalid length. [ 422.452289][T16063] tipc: Resetting bearer [ 422.452411][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3415'. [ 422.499179][T16063] tipc: Disabling bearer [ 422.933286][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3427'. [ 422.981915][T16112] tipc: Enabling of bearer rejected, already enabled [ 423.106748][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3430'. [ 423.164233][T16118] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 423.291020][T16123] netlink: 'syz.6.3434': attribute type 3 has an invalid length. [ 423.566233][T16134] FAULT_INJECTION: forcing a failure. [ 423.566233][T16134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.632873][T16134] CPU: 0 UID: 0 PID: 16134 Comm: syz.2.3438 Not tainted syzkaller #0 PREEMPT(full) [ 423.632903][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.632917][T16134] Call Trace: [ 423.632924][T16134] [ 423.632933][T16134] dump_stack_lvl+0x189/0x250 [ 423.632964][T16134] ? __pfx____ratelimit+0x10/0x10 [ 423.632994][T16134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.633019][T16134] ? __pfx__printk+0x10/0x10 [ 423.633048][T16134] ? __might_fault+0xb0/0x130 [ 423.633088][T16134] should_fail_ex+0x414/0x560 [ 423.633121][T16134] _copy_to_iter+0x404/0x1790 [ 423.633147][T16134] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 423.633186][T16134] ? __pfx__copy_to_iter+0x10/0x10 [ 423.633204][T16134] ? __skb_try_recv_from_queue+0x58f/0x730 [ 423.633236][T16134] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 423.633267][T16134] __skb_datagram_iter+0xf8/0x990 [ 423.633301][T16134] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 423.633336][T16134] skb_copy_datagram_iter+0xc5/0x230 [ 423.633365][T16134] netlink_recvmsg+0x2ab/0xa30 [ 423.633396][T16134] ? __pfx_netlink_recvmsg+0x10/0x10 [ 423.633419][T16134] ? __lock_acquire+0xab9/0xd20 [ 423.633447][T16134] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.633468][T16134] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 423.633492][T16134] ? __pfx_netlink_recvmsg+0x10/0x10 [ 423.633512][T16134] sock_recvmsg_nosec+0x186/0x1c0 [ 423.633545][T16134] ____sys_recvmsg+0x3aa/0x460 [ 423.633579][T16134] ? __pfx_____sys_recvmsg+0x10/0x10 [ 423.633624][T16134] ? import_iovec+0x74/0xa0 [ 423.633653][T16134] ___sys_recvmsg+0x1b5/0x510 [ 423.633682][T16134] ? __pfx____sys_recvmsg+0x10/0x10 [ 423.633741][T16134] ? __might_fault+0xb0/0x130 [ 423.633774][T16134] do_recvmmsg+0x307/0x770 [ 423.633808][T16134] ? __pfx_do_recvmmsg+0x10/0x10 [ 423.633846][T16134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.633898][T16134] __x64_sys_recvmmsg+0x190/0x240 [ 423.633925][T16134] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 423.633947][T16134] ? rcu_is_watching+0x15/0xb0 [ 423.633973][T16134] ? do_syscall_64+0xbe/0x3b0 [ 423.633997][T16134] do_syscall_64+0xfa/0x3b0 [ 423.634014][T16134] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.634044][T16134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.634064][T16134] ? clear_bhb_loop+0x60/0xb0 [ 423.634090][T16134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.634109][T16134] RIP: 0033:0x7fcecc18ebe9 [ 423.634127][T16134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.634145][T16134] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 423.634166][T16134] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 423.634181][T16134] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 423.634194][T16134] RBP: 00007fceccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 423.634206][T16134] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000002 [ 423.634219][T16134] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 423.634253][T16134] [ 424.010419][T16062] Bluetooth: hci5: command 0x0405 tx timeout [ 424.094735][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3445'. [ 424.151568][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 424.161099][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'. [ 424.298662][T16156] netlink: 'syz.0.3447': attribute type 3 has an invalid length. [ 424.358211][T16159] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3446'. [ 424.375721][T16159] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 424.404585][T16159] 0ªî{X¹¦: entered allmulticast mode [ 424.436749][T16159] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 424.530032][T16168] netlink: 'syz.0.3451': attribute type 83 has an invalid length. [ 424.577938][T16167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.591624][T16167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.639894][T16167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.674448][T16167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.748317][T16176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.786760][T16175] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 424.794149][T16175] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 424.804674][T16175] tipc: Resetting bearer [ 424.956955][T16177] tipc: Enabling of bearer rejected, already enabled [ 425.049280][T16182] gtp0: entered promiscuous mode [ 425.082196][T16182] gtp0: entered allmulticast mode [ 425.109855][T16186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.210407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 425.218516][ C1] lec:lec_tx_timeout: lec0 [ 425.224237][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 425.332872][T16191] netlink: 'syz.2.3461': attribute type 3 has an invalid length. [ 426.197220][T16236] netlink: 'syz.7.3475': attribute type 3 has an invalid length. [ 426.884545][T16263] netlink: 'syz.2.3486': attribute type 3 has an invalid length. [ 426.929046][T16264] __nla_validate_parse: 6 callbacks suppressed [ 426.929067][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3487'. [ 426.958930][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3487'. [ 427.641440][T16300] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3500'. [ 427.706107][T16303] netlink: 'syz.6.3502': attribute type 3 has an invalid length. [ 427.867726][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3505'. [ 427.966299][T16313] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 427.979801][T16313] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3507'. [ 427.984493][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3506'. [ 428.312346][T16329] netlink: 'syz.3.3511': attribute type 5 has an invalid length. [ 428.427411][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3514'. [ 428.464370][T16337] netlink: 'syz.0.3515': attribute type 3 has an invalid length. [ 428.610974][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3518'. [ 428.658724][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3519'. [ 428.797948][T16352] FAULT_INJECTION: forcing a failure. [ 428.797948][T16352] name failslab, interval 1, probability 0, space 0, times 0 [ 428.844142][T16352] CPU: 1 UID: 0 PID: 16352 Comm: syz.2.3520 Not tainted syzkaller #0 PREEMPT(full) [ 428.844171][T16352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.844183][T16352] Call Trace: [ 428.844192][T16352] [ 428.844201][T16352] dump_stack_lvl+0x189/0x250 [ 428.844231][T16352] ? __pfx____ratelimit+0x10/0x10 [ 428.844261][T16352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.844286][T16352] ? __pfx__printk+0x10/0x10 [ 428.844321][T16352] ? __pfx___might_resched+0x10/0x10 [ 428.844347][T16352] should_fail_ex+0x414/0x560 [ 428.844379][T16352] should_failslab+0xa8/0x100 [ 428.844411][T16352] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.844440][T16352] ? __alloc_skb+0x112/0x2d0 [ 428.844464][T16352] __alloc_skb+0x112/0x2d0 [ 428.844487][T16352] netlink_dump+0x1b7/0xe90 [ 428.844529][T16352] ? __pfx__copy_to_iter+0x10/0x10 [ 428.844548][T16352] ? __skb_try_recv_from_queue+0x58f/0x730 [ 428.844583][T16352] ? __pfx_netlink_dump+0x10/0x10 [ 428.844644][T16352] netlink_recvmsg+0x676/0xa30 [ 428.844683][T16352] ? __pfx_netlink_recvmsg+0x10/0x10 [ 428.844701][T16352] ? irqentry_exit+0x74/0x90 [ 428.844736][T16352] ? exc_page_fault+0x9f/0xf0 [ 428.844777][T16352] ? __pfx_netlink_recvmsg+0x10/0x10 [ 428.844797][T16352] sock_recvmsg_nosec+0x186/0x1c0 [ 428.844831][T16352] ____sys_recvmsg+0x3aa/0x460 [ 428.844866][T16352] ? __pfx_____sys_recvmsg+0x10/0x10 [ 428.844906][T16352] ? import_iovec+0x74/0xa0 [ 428.844933][T16352] ___sys_recvmsg+0x1b5/0x510 [ 428.844964][T16352] ? __pfx____sys_recvmsg+0x10/0x10 [ 428.845015][T16352] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 428.845056][T16352] do_recvmmsg+0x307/0x770 [ 428.845088][T16352] ? __pfx_do_recvmmsg+0x10/0x10 [ 428.845129][T16352] ? _copy_from_user+0x94/0xb0 [ 428.845172][T16352] __x64_sys_recvmmsg+0x1af/0x240 [ 428.845200][T16352] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 428.845222][T16352] ? rcu_is_watching+0x15/0xb0 [ 428.845249][T16352] ? do_syscall_64+0xbe/0x3b0 [ 428.845273][T16352] do_syscall_64+0xfa/0x3b0 [ 428.845290][T16352] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.845318][T16352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.845339][T16352] ? clear_bhb_loop+0x60/0xb0 [ 428.845365][T16352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.845384][T16352] RIP: 0033:0x7fcecc18ebe9 [ 428.845403][T16352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.845420][T16352] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 428.845442][T16352] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 428.845457][T16352] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 428.845470][T16352] RBP: 00007fceccfef090 R08: 00002000000001c0 R09: 0000000000000000 [ 428.845484][T16352] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 428.845495][T16352] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 428.845528][T16352] [ 429.182228][T16358] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 429.207344][T16358] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 429.290162][T16362] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 429.356952][T16367] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 429.361447][T16362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3525'. [ 429.437084][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.460248][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.468137][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.478618][T16371] netlink: 'syz.6.3528': attribute type 3 has an invalid length. [ 429.928969][T16392] FAULT_INJECTION: forcing a failure. [ 429.928969][T16392] name failslab, interval 1, probability 0, space 0, times 0 [ 429.957037][T16392] CPU: 0 UID: 0 PID: 16392 Comm: syz.0.3535 Not tainted syzkaller #0 PREEMPT(full) [ 429.957065][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.957076][T16392] Call Trace: [ 429.957083][T16392] [ 429.957091][T16392] dump_stack_lvl+0x189/0x250 [ 429.957117][T16392] ? __pfx____ratelimit+0x10/0x10 [ 429.957143][T16392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.957163][T16392] ? __pfx__printk+0x10/0x10 [ 429.957192][T16392] ? __pfx___might_resched+0x10/0x10 [ 429.957213][T16392] should_fail_ex+0x414/0x560 [ 429.957241][T16392] should_failslab+0xa8/0x100 [ 429.957268][T16392] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 429.957295][T16392] ? __alloc_skb+0x112/0x2d0 [ 429.957315][T16392] __alloc_skb+0x112/0x2d0 [ 429.957336][T16392] netlink_dump+0x1b7/0xe90 [ 429.957363][T16392] ? __pfx__copy_to_iter+0x10/0x10 [ 429.957380][T16392] ? __skb_try_recv_from_queue+0x58f/0x730 [ 429.957412][T16392] ? __pfx_netlink_dump+0x10/0x10 [ 429.957465][T16392] netlink_recvmsg+0x676/0xa30 [ 429.957488][T16392] ? __pfx_netlink_recvmsg+0x10/0x10 [ 429.957502][T16392] ? irqentry_exit+0x74/0x90 [ 429.957523][T16392] ? exc_page_fault+0x9f/0xf0 [ 429.957561][T16392] ? __pfx_netlink_recvmsg+0x10/0x10 [ 429.957580][T16392] sock_recvmsg_nosec+0x186/0x1c0 [ 429.957614][T16392] ____sys_recvmsg+0x3aa/0x460 [ 429.957659][T16392] ? __pfx_____sys_recvmsg+0x10/0x10 [ 429.957700][T16392] ? import_iovec+0x74/0xa0 [ 429.957727][T16392] ___sys_recvmsg+0x1b5/0x510 [ 429.957756][T16392] ? __pfx____sys_recvmsg+0x10/0x10 [ 429.957808][T16392] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 429.957851][T16392] do_recvmmsg+0x307/0x770 [ 429.957883][T16392] ? __pfx_do_recvmmsg+0x10/0x10 [ 429.957921][T16392] ? _copy_from_user+0x94/0xb0 [ 429.957963][T16392] __x64_sys_recvmmsg+0x1af/0x240 [ 429.957990][T16392] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 429.958020][T16392] ? do_syscall_64+0xbe/0x3b0 [ 429.958055][T16392] do_syscall_64+0xfa/0x3b0 [ 429.958072][T16392] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.958101][T16392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.958122][T16392] ? clear_bhb_loop+0x60/0xb0 [ 429.958147][T16392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.958166][T16392] RIP: 0033:0x7f742cf8ebe9 [ 429.958185][T16392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.958201][T16392] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.958223][T16392] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 429.958236][T16392] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 429.958249][T16392] RBP: 00007f742dec7090 R08: 00002000000001c0 R09: 0000000000000000 [ 429.958262][T16392] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 429.958274][T16392] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 429.958307][T16392] [ 430.250506][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 430.257384][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.258592][ C1] lec:lec_tx_timeout: lec0 [ 430.266512][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.273188][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.565589][T16409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.627925][T16409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.628847][T16411] netlink: 'syz.3.3542': attribute type 3 has an invalid length. [ 430.699418][T16409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.303824][T16440] bridge16: port 1(veth15) entered blocking state [ 431.312289][T16440] bridge16: port 1(veth15) entered disabled state [ 431.319315][T16440] veth15: entered allmulticast mode [ 431.327549][T16440] veth15: entered promiscuous mode [ 431.353621][T16449] netlink: 'syz.2.3557': attribute type 3 has an invalid length. [ 431.875556][T16477] netlink: 'syz.3.3568': attribute type 3 has an invalid length. [ 432.057812][T16491] __nla_validate_parse: 9 callbacks suppressed [ 432.057832][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 432.793564][T16517] netlink: 'syz.3.3581': attribute type 3 has an invalid length. [ 433.036351][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 433.120582][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.232018][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3588'. [ 433.365139][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'. [ 433.387956][T16543] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3589'. [ 433.395202][T16547] netlink: 18 bytes leftover after parsing attributes in process `syz.7.3591'. [ 433.634172][T16555] netlink: 'syz.3.3594': attribute type 3 has an invalid length. [ 433.726934][T16562] vlan2: entered allmulticast mode [ 433.738857][T16562] bond0: entered allmulticast mode [ 433.759893][T16562] bond_slave_0: entered allmulticast mode [ 433.791591][T16562] bond_slave_1: entered allmulticast mode [ 433.878396][T16566] tipc: Enabling of bearer rejected, already enabled [ 433.878737][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3600'. [ 433.921853][T16566] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 433.929332][T16566] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 433.992234][T16566] tipc: Resetting bearer [ 434.183464][T16577] netem: change failed [ 434.335962][T16594] delete_channel: no stack [ 434.478262][T16601] FAULT_INJECTION: forcing a failure. [ 434.478262][T16601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.497648][T16601] CPU: 1 UID: 0 PID: 16601 Comm: syz.7.3610 Not tainted syzkaller #0 PREEMPT(full) [ 434.497677][T16601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.497690][T16601] Call Trace: [ 434.497697][T16601] [ 434.497706][T16601] dump_stack_lvl+0x189/0x250 [ 434.497736][T16601] ? __pfx____ratelimit+0x10/0x10 [ 434.497767][T16601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.497792][T16601] ? __pfx__printk+0x10/0x10 [ 434.497820][T16601] ? __might_fault+0xb0/0x130 [ 434.497859][T16601] should_fail_ex+0x414/0x560 [ 434.497891][T16601] _copy_from_user+0x2d/0xb0 [ 434.497916][T16601] ___sys_recvmsg+0x12e/0x510 [ 434.497946][T16601] ? __pfx____sys_recvmsg+0x10/0x10 [ 434.498006][T16601] ? __might_fault+0xb0/0x130 [ 434.498037][T16601] do_recvmmsg+0x307/0x770 [ 434.498070][T16601] ? __pfx_do_recvmmsg+0x10/0x10 [ 434.498107][T16601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.498159][T16601] __x64_sys_recvmmsg+0x190/0x240 [ 434.498187][T16601] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 434.498208][T16601] ? rcu_is_watching+0x15/0xb0 [ 434.498245][T16601] ? do_syscall_64+0xbe/0x3b0 [ 434.498266][T16601] do_syscall_64+0xfa/0x3b0 [ 434.498282][T16601] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.498311][T16601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.498330][T16601] ? clear_bhb_loop+0x60/0xb0 [ 434.498353][T16601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.498372][T16601] RIP: 0033:0x7fd03578ebe9 [ 434.498390][T16601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.498406][T16601] RSP: 002b:00007fd03663d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 434.498428][T16601] RAX: ffffffffffffffda RBX: 00007fd0359b5fa0 RCX: 00007fd03578ebe9 [ 434.498443][T16601] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 434.498456][T16601] RBP: 00007fd03663d090 R08: 0000000000000000 R09: 0000000000000000 [ 434.498468][T16601] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 434.498481][T16601] R13: 00007fd0359b6038 R14: 00007fd0359b5fa0 R15: 00007fff79fbbd48 [ 434.498516][T16601] [ 434.754733][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 434.792493][T16607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3611'. [ 434.877976][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3612'. [ 435.057795][T16617] tipc: Enabled bearer , priority 0 [ 435.090714][T16617] syzkaller0: entered promiscuous mode [ 435.096255][T16617] syzkaller0: entered allmulticast mode [ 435.165541][T16617] tipc: Resetting bearer [ 435.193081][T16614] tipc: Resetting bearer [ 435.274651][T16614] tipc: Disabling bearer [ 435.290485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 435.298535][ C1] lec:lec_tx_timeout: lec0 [ 435.303889][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 435.564617][T16643] 8021q: VLANs not supported on pim6reg0 [ 436.078185][T16673] tipc: Enabling of bearer rejected, already enabled [ 436.095612][T16673] netem: change failed [ 436.572534][T16697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.595289][T16698] pimreg: left allmulticast mode [ 436.605032][T16698] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 436.655406][T16697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.724648][T16697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.982293][T16712] tipc: Enabled bearer , priority 0 [ 437.018066][T16712] syzkaller0: entered promiscuous mode [ 437.030725][T16712] syzkaller0: entered allmulticast mode [ 437.055101][T16712] tipc: Resetting bearer [ 437.077517][T16717] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 437.097318][T16711] tipc: Resetting bearer [ 437.116416][T16719] netlink: 'syz.3.3652': attribute type 1 has an invalid length. [ 437.126950][T16719] __nla_validate_parse: 6 callbacks suppressed [ 437.126970][T16719] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3652'. [ 437.165038][T16721] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 437.181197][T16711] tipc: Disabling bearer [ 437.223193][T16724] netlink: 'syz.0.3653': attribute type 1 has an invalid length. [ 437.234839][T16724] netlink: 'syz.0.3653': attribute type 2 has an invalid length. [ 437.242753][T16724] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.3653'. [ 437.268099][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3653'. [ 437.278143][T16724] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 437.302831][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3653'. [ 437.322616][T16724] bridge_slave_1: left allmulticast mode [ 437.329097][T16724] bridge_slave_1: left promiscuous mode [ 437.344710][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.394723][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.195416][T16769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.322110][T16776] netlink: 'syz.7.3671': attribute type 1 has an invalid length. [ 438.332104][T16769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.423955][T16769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.505473][ T49] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.545149][ T49] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.971718][T16834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.264095][T16847] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3692'. [ 440.310510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 440.318645][ C1] lec:lec_tx_timeout: lec0 [ 440.333964][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3694'. [ 440.480647][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.708450][T16871] netlink: 'syz.2.3704': attribute type 1 has an invalid length. [ 440.984142][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3710'. [ 441.126636][T16893] netlink: 'syz.6.3711': attribute type 22 has an invalid length. [ 441.134737][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 441.152011][T16893] netlink: 'syz.6.3711': attribute type 22 has an invalid length. [ 441.192024][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 441.318685][T16897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.405006][T16897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.429735][T16901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3716'. [ 441.488402][T16897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.346875][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3733'. [ 442.504361][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'. [ 442.617795][T16959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3739'. [ 442.793231][T16972] netlink: 'syz.3.3745': attribute type 27 has an invalid length. [ 443.004742][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 443.097665][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 443.248804][T16991] FAULT_INJECTION: forcing a failure. [ 443.248804][T16991] name failslab, interval 1, probability 0, space 0, times 0 [ 443.285310][T16991] CPU: 1 UID: 0 PID: 16991 Comm: syz.0.3751 Not tainted syzkaller #0 PREEMPT(full) [ 443.285356][T16991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.285370][T16991] Call Trace: [ 443.285379][T16991] [ 443.285388][T16991] dump_stack_lvl+0x189/0x250 [ 443.285419][T16991] ? __pfx____ratelimit+0x10/0x10 [ 443.285449][T16991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.285474][T16991] ? __pfx__printk+0x10/0x10 [ 443.285509][T16991] ? __pfx___might_resched+0x10/0x10 [ 443.285534][T16991] should_fail_ex+0x414/0x560 [ 443.285568][T16991] should_failslab+0xa8/0x100 [ 443.285602][T16991] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 443.285632][T16991] ? __alloc_skb+0x112/0x2d0 [ 443.285648][T16991] ? __pfx___mutex_trylock_common+0x10/0x10 [ 443.285677][T16991] __alloc_skb+0x112/0x2d0 [ 443.285700][T16991] netlink_dump+0x1b7/0xe90 [ 443.285738][T16991] ? __netlink_lookup+0xbd/0x810 [ 443.285762][T16991] ? __pfx_netlink_dump+0x10/0x10 [ 443.285789][T16991] ? __netlink_lookup+0x752/0x810 [ 443.285827][T16991] ? netlink_lookup+0x30/0x200 [ 443.285854][T16991] ? netlink_lookup+0x30/0x200 [ 443.285880][T16991] ? netlink_lookup+0x30/0x200 [ 443.285916][T16991] __netlink_dump_start+0x5cb/0x7e0 [ 443.285957][T16991] rtnetlink_rcv_msg+0x9eb/0xb70 [ 443.285990][T16991] ? __pfx_rtnl_dump_all+0x10/0x10 [ 443.286021][T16991] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 443.286050][T16991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 443.286079][T16991] ? ref_tracker_free+0x63a/0x7d0 [ 443.286107][T16991] ? __pfx_rtnl_dumpit+0x10/0x10 [ 443.286136][T16991] ? __pfx_rtnl_dump_all+0x10/0x10 [ 443.286181][T16991] netlink_rcv_skb+0x205/0x470 [ 443.286213][T16991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 443.286246][T16991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.286290][T16991] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.286331][T16991] netlink_unicast+0x82c/0x9e0 [ 443.286384][T16991] ? __pfx_netlink_unicast+0x10/0x10 [ 443.286414][T16991] ? netlink_sendmsg+0x642/0xb30 [ 443.286431][T16991] ? skb_put+0x11b/0x210 [ 443.286455][T16991] netlink_sendmsg+0x805/0xb30 [ 443.286486][T16991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.286507][T16991] ? __lock_acquire+0xab9/0xd20 [ 443.286535][T16991] ? aa_sock_msg_perm+0xf1/0x1d0 [ 443.286556][T16991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.286579][T16991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.286600][T16991] __sock_sendmsg+0x219/0x270 [ 443.286632][T16991] sock_write_iter+0x258/0x330 [ 443.286662][T16991] ? __pfx_sock_write_iter+0x10/0x10 [ 443.286701][T16991] ? bpf_lsm_file_permission+0x9/0x20 [ 443.286725][T16991] ? security_file_permission+0x75/0x290 [ 443.286762][T16991] vfs_write+0x5c9/0xb30 [ 443.286795][T16991] ? __pfx_sock_write_iter+0x10/0x10 [ 443.286822][T16991] ? __pfx_vfs_write+0x10/0x10 [ 443.286862][T16991] ? __fget_files+0x2a/0x420 [ 443.286903][T16991] ksys_write+0x145/0x250 [ 443.286934][T16991] ? __pfx_ksys_write+0x10/0x10 [ 443.286958][T16991] ? rcu_is_watching+0x15/0xb0 [ 443.286985][T16991] ? do_syscall_64+0xbe/0x3b0 [ 443.287009][T16991] do_syscall_64+0xfa/0x3b0 [ 443.287026][T16991] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.287055][T16991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.287076][T16991] ? clear_bhb_loop+0x60/0xb0 [ 443.287101][T16991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.287121][T16991] RIP: 0033:0x7f742cf8ebe9 [ 443.287140][T16991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.287159][T16991] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.287180][T16991] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 443.287195][T16991] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 443.287207][T16991] RBP: 00007f742dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 443.287220][T16991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.287231][T16991] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 443.287265][T16991] [ 443.784798][T16999] netlink: 'syz.3.3754': attribute type 10 has an invalid length. [ 443.812018][T16999] team0: Port device dummy0 added [ 444.035196][T17011] lo speed is unknown, defaulting to 1000 [ 444.185680][T17018] netlink: 360 bytes leftover after parsing attributes in process `syz.3.3758'. [ 444.253393][T17022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3758'. [ 444.694486][T17001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.772311][T17035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.989973][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3769'. [ 445.053914][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'. [ 445.102504][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3769'. [ 445.601472][ T55] block nbd3: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 120 seconds [ 445.613134][ T55] block nbd3: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 120 seconds [ 445.623048][T17070] siw: device registration error -23 [ 445.624348][ T55] block nbd3: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 120 seconds [ 446.287435][T17104] FAULT_INJECTION: forcing a failure. [ 446.287435][T17104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.308140][T17104] CPU: 0 UID: 0 PID: 17104 Comm: syz.0.3788 Not tainted syzkaller #0 PREEMPT(full) [ 446.308172][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.308186][T17104] Call Trace: [ 446.308194][T17104] [ 446.308203][T17104] dump_stack_lvl+0x189/0x250 [ 446.308234][T17104] ? __pfx____ratelimit+0x10/0x10 [ 446.308265][T17104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.308290][T17104] ? __pfx__printk+0x10/0x10 [ 446.308319][T17104] ? __might_fault+0xb0/0x130 [ 446.308360][T17104] should_fail_ex+0x414/0x560 [ 446.308394][T17104] _copy_from_user+0x2d/0xb0 [ 446.308420][T17104] rfcomm_dev_ioctl+0x119/0x1d20 [ 446.308445][T17104] ? kasan_quarantine_put+0xdd/0x220 [ 446.308475][T17104] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 446.308499][T17104] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 446.308531][T17104] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 446.308563][T17104] ? do_vfs_ioctl+0xbe8/0x1430 [ 446.308590][T17104] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 446.308623][T17104] sock_do_ioctl+0xdc/0x300 [ 446.308653][T17104] ? __pfx_sock_do_ioctl+0x10/0x10 [ 446.308677][T17104] ? __lock_acquire+0xab9/0xd20 [ 446.308725][T17104] sock_ioctl+0x576/0x790 [ 446.308754][T17104] ? __pfx_sock_ioctl+0x10/0x10 [ 446.308780][T17104] ? __fget_files+0x2a/0x420 [ 446.308810][T17104] ? __fget_files+0x3a0/0x420 [ 446.308839][T17104] ? __fget_files+0x2a/0x420 [ 446.308874][T17104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 446.308908][T17104] ? __pfx_sock_ioctl+0x10/0x10 [ 446.308933][T17104] __se_sys_ioctl+0xf9/0x170 [ 446.308961][T17104] do_syscall_64+0xfa/0x3b0 [ 446.308980][T17104] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.309010][T17104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.309032][T17104] ? clear_bhb_loop+0x60/0xb0 [ 446.309058][T17104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.309079][T17104] RIP: 0033:0x7f742cf8ebe9 [ 446.309107][T17104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.309125][T17104] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.309147][T17104] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 446.309164][T17104] RDX: 0000200000000100 RSI: 00000000800452d3 RDI: 0000000000000004 [ 446.309179][T17104] RBP: 00007f742dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 446.309192][T17104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.309205][T17104] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 446.309241][T17104] [ 446.756379][T17114] netdevsim netdevsim6: Direct firmware load for failed with error -2 [ 446.769725][T17114] netdevsim netdevsim6: Falling back to sysfs fallback for: [ 447.038981][T17129] lo: entered promiscuous mode [ 447.062311][T17129] tunl0: entered promiscuous mode [ 447.077825][T17129] gre0: entered promiscuous mode [ 447.104970][T17129] gretap0: entered promiscuous mode [ 447.128277][T17129] erspan0: entered promiscuous mode [ 447.159904][T17129] ip_vti0: entered promiscuous mode [ 447.215541][ T8550] lo speed is unknown, defaulting to 1000 [ 447.221801][ T8550] syz0: Port: 1 Link DOWN [ 447.227020][ T8550] lo speed is unknown, defaulting to 1000 [ 447.527409][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 447.534558][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 447.558709][T17158] __nla_validate_parse: 5 callbacks suppressed [ 447.558724][T17158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3808'. [ 447.590907][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 447.747570][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3813'. [ 447.835184][T17168] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 448.176040][T17187] FAULT_INJECTION: forcing a failure. [ 448.176040][T17187] name failslab, interval 1, probability 0, space 0, times 0 [ 448.199942][T17187] CPU: 1 UID: 0 PID: 17187 Comm: syz.6.3823 Not tainted syzkaller #0 PREEMPT(full) [ 448.199982][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.199997][T17187] Call Trace: [ 448.200006][T17187] [ 448.200015][T17187] dump_stack_lvl+0x189/0x250 [ 448.200047][T17187] ? __pfx____ratelimit+0x10/0x10 [ 448.200078][T17187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.200104][T17187] ? __pfx__printk+0x10/0x10 [ 448.200140][T17187] ? __pfx___might_resched+0x10/0x10 [ 448.200167][T17187] should_fail_ex+0x414/0x560 [ 448.200201][T17187] should_failslab+0xa8/0x100 [ 448.200234][T17187] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 448.200264][T17187] ? __alloc_skb+0x112/0x2d0 [ 448.200289][T17187] __alloc_skb+0x112/0x2d0 [ 448.200317][T17187] netlink_dump+0x1b7/0xe90 [ 448.200346][T17187] ? __pfx__copy_to_iter+0x10/0x10 [ 448.200365][T17187] ? __skb_try_recv_from_queue+0x58f/0x730 [ 448.200399][T17187] ? __pfx_netlink_dump+0x10/0x10 [ 448.200459][T17187] netlink_recvmsg+0x676/0xa30 [ 448.200491][T17187] ? __pfx_netlink_recvmsg+0x10/0x10 [ 448.200517][T17187] ? __lock_acquire+0xab9/0xd20 [ 448.200545][T17187] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.200568][T17187] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 448.200593][T17187] ? __pfx_netlink_recvmsg+0x10/0x10 [ 448.200615][T17187] sock_recvmsg_nosec+0x186/0x1c0 [ 448.200647][T17187] ____sys_recvmsg+0x3aa/0x460 [ 448.200682][T17187] ? __pfx_____sys_recvmsg+0x10/0x10 [ 448.200775][T17187] ? import_iovec+0x74/0xa0 [ 448.200804][T17187] ___sys_recvmsg+0x1b5/0x510 [ 448.200835][T17187] ? __pfx____sys_recvmsg+0x10/0x10 [ 448.200895][T17187] ? __might_fault+0xb0/0x130 [ 448.200929][T17187] do_recvmmsg+0x307/0x770 [ 448.200972][T17187] ? __pfx_do_recvmmsg+0x10/0x10 [ 448.201011][T17187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.201065][T17187] __x64_sys_recvmmsg+0x190/0x240 [ 448.201093][T17187] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 448.201115][T17187] ? rcu_is_watching+0x15/0xb0 [ 448.201142][T17187] ? do_syscall_64+0xbe/0x3b0 [ 448.201166][T17187] do_syscall_64+0xfa/0x3b0 [ 448.201184][T17187] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.201214][T17187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.201235][T17187] ? clear_bhb_loop+0x60/0xb0 [ 448.201261][T17187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.201282][T17187] RIP: 0033:0x7f782718ebe9 [ 448.201302][T17187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.201320][T17187] RSP: 002b:00007f7827f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 448.201342][T17187] RAX: ffffffffffffffda RBX: 00007f78273b5fa0 RCX: 00007f782718ebe9 [ 448.201358][T17187] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000004 [ 448.201371][T17187] RBP: 00007f7827f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 448.201385][T17187] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 448.201398][T17187] R13: 00007f78273b6038 R14: 00007f78273b5fa0 R15: 00007ffc685b05b8 [ 448.201434][T17187] [ 448.587256][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3825'. [ 448.794570][T17205] FAULT_INJECTION: forcing a failure. [ 448.794570][T17205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.808358][T17205] CPU: 1 UID: 0 PID: 17205 Comm: syz.0.3831 Not tainted syzkaller #0 PREEMPT(full) [ 448.808389][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.808403][T17205] Call Trace: [ 448.808412][T17205] [ 448.808422][T17205] dump_stack_lvl+0x189/0x250 [ 448.808452][T17205] ? __pfx____ratelimit+0x10/0x10 [ 448.808484][T17205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.808509][T17205] ? __pfx__printk+0x10/0x10 [ 448.808539][T17205] ? __might_fault+0xb0/0x130 [ 448.808582][T17205] should_fail_ex+0x414/0x560 [ 448.808616][T17205] _copy_from_user+0x2d/0xb0 [ 448.808642][T17205] ___sys_recvmsg+0x12e/0x510 [ 448.808672][T17205] ? __pfx____sys_recvmsg+0x10/0x10 [ 448.808725][T17205] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 448.808769][T17205] do_recvmmsg+0x307/0x770 [ 448.808803][T17205] ? __pfx_do_recvmmsg+0x10/0x10 [ 448.808842][T17205] ? _copy_from_user+0x94/0xb0 [ 448.808885][T17205] __x64_sys_recvmmsg+0x1af/0x240 [ 448.808912][T17205] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 448.808948][T17205] ? rcu_is_watching+0x15/0xb0 [ 448.808975][T17205] ? do_syscall_64+0xbe/0x3b0 [ 448.808999][T17205] do_syscall_64+0xfa/0x3b0 [ 448.809016][T17205] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.809045][T17205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.809066][T17205] ? clear_bhb_loop+0x60/0xb0 [ 448.809092][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.809112][T17205] RIP: 0033:0x7f742cf8ebe9 [ 448.809131][T17205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.809149][T17205] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 448.809171][T17205] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 448.809187][T17205] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 448.809201][T17205] RBP: 00007f742dec7090 R08: 00002000000001c0 R09: 0000000000000000 [ 448.809215][T17205] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 448.809228][T17205] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 448.809260][T17205] [ 449.098361][T17210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3830'. [ 449.137140][T17210] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3830'. [ 449.291525][T17218] tipc: Enabling of bearer rejected, already enabled [ 449.335239][T17218] netem: change failed [ 449.432009][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3839'. [ 449.509609][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3840'. [ 449.596794][T17224] hsr_slave_1 (unregistering): left promiscuous mode [ 449.610091][T17233] netlink: 'syz.2.3842': attribute type 21 has an invalid length. [ 449.618237][T17233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3842'. [ 449.816803][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'. [ 449.964018][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.035621][T17252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.060993][T17255] tipc: Enabling of bearer rejected, already enabled [ 450.076132][T17256] FAULT_INJECTION: forcing a failure. [ 450.076132][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 450.089169][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.104777][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.119055][T17256] CPU: 1 UID: 0 PID: 17256 Comm: syz.0.3850 Not tainted syzkaller #0 PREEMPT(full) [ 450.119085][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.119097][T17256] Call Trace: [ 450.119105][T17256] [ 450.119114][T17256] dump_stack_lvl+0x189/0x250 [ 450.119143][T17256] ? __pfx____ratelimit+0x10/0x10 [ 450.119174][T17256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.119197][T17256] ? __pfx__printk+0x10/0x10 [ 450.119224][T17256] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 450.119273][T17256] should_fail_ex+0x414/0x560 [ 450.119306][T17256] should_failslab+0xa8/0x100 [ 450.119339][T17256] kmem_cache_alloc_noprof+0x73/0x3c0 [ 450.119366][T17256] ? skb_clone+0x212/0x3a0 [ 450.119394][T17256] skb_clone+0x212/0x3a0 [ 450.119421][T17256] __netlink_deliver_tap+0x404/0x850 [ 450.119465][T17256] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.119497][T17256] netlink_deliver_tap+0x19c/0x1b0 [ 450.119529][T17256] netlink_dump+0x92b/0xe90 [ 450.119572][T17256] ? __pfx_netlink_dump+0x10/0x10 [ 450.119633][T17256] netlink_recvmsg+0x676/0xa30 [ 450.119665][T17256] ? __pfx_netlink_recvmsg+0x10/0x10 [ 450.119689][T17256] ? __lock_acquire+0xab9/0xd20 [ 450.119718][T17256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 450.119741][T17256] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 450.119765][T17256] ? __pfx_netlink_recvmsg+0x10/0x10 [ 450.119787][T17256] sock_recvmsg_nosec+0x186/0x1c0 [ 450.119820][T17256] ____sys_recvmsg+0x3aa/0x460 [ 450.119854][T17256] ? __pfx_____sys_recvmsg+0x10/0x10 [ 450.119896][T17256] ? import_iovec+0x74/0xa0 [ 450.119925][T17256] ___sys_recvmsg+0x1b5/0x510 [ 450.119956][T17256] ? __pfx____sys_recvmsg+0x10/0x10 [ 450.120025][T17256] ? __might_fault+0xb0/0x130 [ 450.120059][T17256] do_recvmmsg+0x307/0x770 [ 450.120095][T17256] ? __pfx_do_recvmmsg+0x10/0x10 [ 450.120134][T17256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.120189][T17256] __x64_sys_recvmmsg+0x190/0x240 [ 450.120217][T17256] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 450.120239][T17256] ? rcu_is_watching+0x15/0xb0 [ 450.120266][T17256] ? do_syscall_64+0xbe/0x3b0 [ 450.120290][T17256] do_syscall_64+0xfa/0x3b0 [ 450.120313][T17256] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.120342][T17256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.120363][T17256] ? clear_bhb_loop+0x60/0xb0 [ 450.120388][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.120409][T17256] RIP: 0033:0x7f742cf8ebe9 [ 450.120428][T17256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.120447][T17256] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 450.120470][T17256] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 450.120486][T17256] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000004 [ 450.120499][T17256] RBP: 00007f742dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 450.120513][T17256] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 450.120526][T17256] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 450.120561][T17256] [ 450.644279][ T5233] udevd[5233]: worker [12834] /devices/virtual/block/nbd3 is taking a long time [ 450.671477][T17271] netlink: 'syz.2.3857': attribute type 32 has an invalid length. [ 450.679788][T17271] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 453.200793][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 453.208914][ C1] lec:lec_tx_timeout: lec0 [ 453.928745][T17291] tipc: Enabling of bearer rejected, already enabled [ 453.943067][T17292] FAULT_INJECTION: forcing a failure. [ 453.943067][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.976803][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.6.3863 Not tainted syzkaller #0 PREEMPT(full) [ 453.976835][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.976849][T17292] Call Trace: [ 453.976859][T17292] [ 453.976869][T17292] dump_stack_lvl+0x189/0x250 [ 453.976900][T17292] ? __pfx____ratelimit+0x10/0x10 [ 453.976931][T17292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.976956][T17292] ? __pfx__printk+0x10/0x10 [ 453.976985][T17292] ? __might_fault+0xb0/0x130 [ 453.977028][T17292] should_fail_ex+0x414/0x560 [ 453.977062][T17292] _copy_from_user+0x2d/0xb0 [ 453.977088][T17292] ___sys_recvmsg+0x12e/0x510 [ 453.977119][T17292] ? __pfx____sys_recvmsg+0x10/0x10 [ 453.977179][T17292] ? __might_fault+0xb0/0x130 [ 453.977212][T17292] do_recvmmsg+0x307/0x770 [ 453.977246][T17292] ? __pfx_do_recvmmsg+0x10/0x10 [ 453.977284][T17292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 453.977337][T17292] __x64_sys_recvmmsg+0x190/0x240 [ 453.977365][T17292] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 453.977394][T17292] ? rcu_is_watching+0x15/0xb0 [ 453.977421][T17292] ? do_syscall_64+0xbe/0x3b0 [ 453.977445][T17292] do_syscall_64+0xfa/0x3b0 [ 453.977462][T17292] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.977492][T17292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.977512][T17292] ? clear_bhb_loop+0x60/0xb0 [ 453.977538][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.977558][T17292] RIP: 0033:0x7f782718ebe9 [ 453.977578][T17292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.977595][T17292] RSP: 002b:00007f7827f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 453.977617][T17292] RAX: ffffffffffffffda RBX: 00007f78273b5fa0 RCX: 00007f782718ebe9 [ 453.977633][T17292] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000004 [ 453.977647][T17292] RBP: 00007f7827f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 453.977659][T17292] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 453.977671][T17292] R13: 00007f78273b6038 R14: 00007f78273b5fa0 R15: 00007ffc685b05b8 [ 453.977711][T17292] [ 454.377712][T17306] netlink: 'syz.6.3868': attribute type 11 has an invalid length. [ 454.385881][T17306] netlink: 'syz.6.3868': attribute type 11 has an invalid length. [ 454.395048][T17306] __nla_validate_parse: 4 callbacks suppressed [ 454.395070][T17306] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3868'. [ 454.560710][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.622713][T17315] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3871'. [ 454.662351][T17317] sctp: [Deprecated]: syz.6.3872 (pid 17317) Use of int in max_burst socket option. [ 454.662351][T17317] Use struct sctp_assoc_value instead [ 454.798953][T17324] tipc: Enabled bearer , priority 0 [ 454.808683][T17324] syzkaller0: entered promiscuous mode [ 454.814494][T17324] syzkaller0: entered allmulticast mode [ 454.826317][T17324] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 454.847765][T17324] tipc: Resetting bearer [ 454.856085][T17323] tipc: Resetting bearer [ 454.875257][T17323] tipc: Disabling bearer [ 455.112763][T17333] netlink: 'syz.6.3879': attribute type 9 has an invalid length. [ 455.123090][T17307] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 455.294236][T17341] netlink: 'syz.6.3883': attribute type 1 has an invalid length. [ 455.343335][T17341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.508153][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 455.533801][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 457.218278][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 457.227992][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3927'. [ 457.539547][T17477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.552051][T17477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.906703][T17481] netlink: 'syz.6.3934': attribute type 3 has an invalid length. [ 457.914650][T17481] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3934'. [ 457.968339][T17483] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3935'. [ 458.276325][T17501] openvswitch: netlink: Flow actions attr not present in new flow. [ 458.647724][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3950'. [ 458.655065][T17521] tipc: Enabling of bearer rejected, failed to enable media [ 458.666893][T17519] bridge_slave_0: left allmulticast mode [ 458.672759][T17519] bridge_slave_0: left promiscuous mode [ 458.678719][T17519] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.064833][T17531] FAULT_INJECTION: forcing a failure. [ 459.064833][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 459.066429][T17529] syzkaller1: entered allmulticast mode [ 459.084581][T17531] CPU: 1 UID: 0 PID: 17531 Comm: syz.2.3955 Not tainted syzkaller #0 PREEMPT(full) [ 459.084611][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.084623][T17531] Call Trace: [ 459.084632][T17531] [ 459.084641][T17531] dump_stack_lvl+0x189/0x250 [ 459.084670][T17531] ? __pfx____ratelimit+0x10/0x10 [ 459.084697][T17531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.084718][T17531] ? __pfx__printk+0x10/0x10 [ 459.084746][T17531] ? __lock_acquire+0xab9/0xd20 [ 459.084782][T17531] should_fail_ex+0x414/0x560 [ 459.084811][T17531] should_failslab+0xa8/0x100 [ 459.084839][T17531] kmem_cache_alloc_noprof+0x73/0x3c0 [ 459.084863][T17531] ? skb_clone+0x212/0x3a0 [ 459.084888][T17531] skb_clone+0x212/0x3a0 [ 459.084913][T17531] __netlink_deliver_tap+0x404/0x850 [ 459.084954][T17531] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.084987][T17531] netlink_deliver_tap+0x19c/0x1b0 [ 459.085032][T17531] netlink_unicast+0x7fa/0x9e0 [ 459.085072][T17531] ? __pfx_netlink_unicast+0x10/0x10 [ 459.085103][T17531] ? netlink_sendmsg+0x642/0xb30 [ 459.085119][T17531] ? skb_put+0x11b/0x210 [ 459.085144][T17531] netlink_sendmsg+0x805/0xb30 [ 459.085175][T17531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.085198][T17531] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.085220][T17531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.085243][T17531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.085263][T17531] __sock_sendmsg+0x219/0x270 [ 459.085295][T17531] ____sys_sendmsg+0x505/0x830 [ 459.085325][T17531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.085358][T17531] ? import_iovec+0x74/0xa0 [ 459.085386][T17531] ___sys_sendmsg+0x21f/0x2a0 [ 459.085412][T17531] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.085477][T17531] ? __fget_files+0x2a/0x420 [ 459.085507][T17531] ? __fget_files+0x3a0/0x420 [ 459.085550][T17531] __x64_sys_sendmsg+0x19b/0x260 [ 459.085576][T17531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.085611][T17531] ? __pfx_ksys_write+0x10/0x10 [ 459.085635][T17531] ? rcu_is_watching+0x15/0xb0 [ 459.085662][T17531] ? do_syscall_64+0xbe/0x3b0 [ 459.085687][T17531] do_syscall_64+0xfa/0x3b0 [ 459.085704][T17531] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.085733][T17531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.085753][T17531] ? clear_bhb_loop+0x60/0xb0 [ 459.085778][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.085798][T17531] RIP: 0033:0x7fcecc18ebe9 [ 459.085818][T17531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.085836][T17531] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.085858][T17531] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 459.085873][T17531] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 459.085885][T17531] RBP: 00007fceccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 459.085897][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.085908][T17531] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 459.085941][T17531] [ 459.432399][T17533] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3956'. [ 459.709552][T17544] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3961'. [ 459.726516][T17544] lo: left promiscuous mode [ 459.731380][T17544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.848801][T17548] tipc: Resetting bearer [ 459.890834][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.949360][T17554] FAULT_INJECTION: forcing a failure. [ 459.949360][T17554] name failslab, interval 1, probability 0, space 0, times 0 [ 459.981988][T17554] CPU: 0 UID: 0 PID: 17554 Comm: syz.0.3966 Not tainted syzkaller #0 PREEMPT(full) [ 459.982019][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.982034][T17554] Call Trace: [ 459.982043][T17554] [ 459.982053][T17554] dump_stack_lvl+0x189/0x250 [ 459.982086][T17554] ? __pfx____ratelimit+0x10/0x10 [ 459.982118][T17554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.982143][T17554] ? __pfx__printk+0x10/0x10 [ 459.982180][T17554] ? __pfx___might_resched+0x10/0x10 [ 459.982201][T17554] ? fs_reclaim_acquire+0x7d/0x100 [ 459.982238][T17554] should_fail_ex+0x414/0x560 [ 459.982273][T17554] should_failslab+0xa8/0x100 [ 459.982306][T17554] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 459.982336][T17554] ? __alloc_skb+0x112/0x2d0 [ 459.982362][T17554] __alloc_skb+0x112/0x2d0 [ 459.982387][T17554] netlink_ack+0x146/0xa50 [ 459.982439][T17554] netlink_rcv_skb+0x28c/0x470 [ 459.982473][T17554] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 459.982505][T17554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.982549][T17554] ? bpf_lsm_capable+0x9/0x20 [ 459.982577][T17554] ? security_capable+0x7e/0x2e0 [ 459.982617][T17554] nfnetlink_rcv+0x26a/0x2520 [ 459.982650][T17554] ? __dev_queue_xmit+0x1d79/0x3b50 [ 459.982709][T17554] ? __dev_queue_xmit+0x27b/0x3b50 [ 459.982749][T17554] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.982776][T17554] ? __pfx___dev_queue_xmit+0x10/0x10 [ 459.982824][T17554] ? ref_tracker_free+0x63a/0x7d0 [ 459.982855][T17554] ? __asan_memcpy+0x40/0x70 [ 459.982879][T17554] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.982928][T17554] ? skb_clone+0x246/0x3a0 [ 459.982956][T17554] ? __netlink_deliver_tap+0x807/0x850 [ 459.982988][T17554] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.983026][T17554] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.983067][T17554] netlink_unicast+0x82c/0x9e0 [ 459.983154][T17554] ? __pfx_netlink_unicast+0x10/0x10 [ 459.983186][T17554] ? netlink_sendmsg+0x642/0xb30 [ 459.983203][T17554] ? skb_put+0x11b/0x210 [ 459.983229][T17554] netlink_sendmsg+0x805/0xb30 [ 459.983259][T17554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.983284][T17554] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.983306][T17554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.983329][T17554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.983350][T17554] __sock_sendmsg+0x219/0x270 [ 459.983382][T17554] ____sys_sendmsg+0x505/0x830 [ 459.983413][T17554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.983447][T17554] ? import_iovec+0x74/0xa0 [ 459.983476][T17554] ___sys_sendmsg+0x21f/0x2a0 [ 459.983502][T17554] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.983568][T17554] ? __fget_files+0x2a/0x420 [ 459.983598][T17554] ? __fget_files+0x3a0/0x420 [ 459.983642][T17554] __x64_sys_sendmsg+0x19b/0x260 [ 459.983669][T17554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.983704][T17554] ? __pfx_ksys_write+0x10/0x10 [ 459.983730][T17554] ? rcu_is_watching+0x15/0xb0 [ 459.983758][T17554] ? do_syscall_64+0xbe/0x3b0 [ 459.983783][T17554] do_syscall_64+0xfa/0x3b0 [ 459.983814][T17554] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.983845][T17554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.983867][T17554] ? clear_bhb_loop+0x60/0xb0 [ 459.983893][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.983914][T17554] RIP: 0033:0x7f742cf8ebe9 [ 459.983935][T17554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.983954][T17554] RSP: 002b:00007f742dec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.983978][T17554] RAX: ffffffffffffffda RBX: 00007f742d1b5fa0 RCX: 00007f742cf8ebe9 [ 459.983993][T17554] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 459.984006][T17554] RBP: 00007f742dec7090 R08: 0000000000000000 R09: 0000000000000000 [ 459.984019][T17554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.984032][T17554] R13: 00007f742d1b6038 R14: 00007f742d1b5fa0 R15: 00007ffdf3740a88 [ 459.984066][T17554] [ 460.391850][ T5961] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.680583][T16062] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.690274][T16062] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.720755][T16062] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.729375][T16062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.739743][T16062] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 460.808224][T17565] lo speed is unknown, defaulting to 1000 [ 461.984553][T17565] chnl_net:caif_netlink_parms(): no params data found [ 462.222911][T17565] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.230198][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.237717][T17565] bridge_slave_0: entered allmulticast mode [ 462.246556][T17565] bridge_slave_0: entered promiscuous mode [ 462.256563][T17565] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.263923][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.271344][T17565] bridge_slave_1: entered allmulticast mode [ 462.279774][T17565] bridge_slave_1: entered promiscuous mode [ 462.350088][T17565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.364426][T17565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.497104][T17565] team0: Port device team_slave_0 added [ 462.527091][T17565] team0: Port device team_slave_1 added [ 462.655571][T17565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.666404][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.695807][T17565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.717652][T17565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.725899][T17565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.753595][T17565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.804504][T16062] Bluetooth: hci7: command tx timeout [ 463.134379][ T5873] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 463.153578][ T5873] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 463.163700][ T5873] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 463.172224][ T5873] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 463.180172][ T5873] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 463.284546][T17565] hsr_slave_0: entered promiscuous mode [ 463.301655][T17565] hsr_slave_1: entered promiscuous mode [ 463.308245][T17565] debugfs: 'hsr0' already exists in 'hsr' [ 463.340424][T17565] Cannot create hsr debugfs directory [ 463.740997][T17672] bridge0: entered promiscuous mode [ 463.746473][T17672] bridge0: entered allmulticast mode [ 463.754947][T17654] lo speed is unknown, defaulting to 1000 [ 463.929908][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4011'. [ 464.353287][T17565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 464.392388][T17565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.427480][T17565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 464.468867][T17565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 464.643079][T17710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.844870][T17721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4021'. [ 464.886109][T16062] Bluetooth: hci7: command tx timeout [ 464.907037][T17565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.057358][T17565] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.149733][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.156979][T10073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.216963][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.224172][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.243032][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 465.258708][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4022'. [ 465.280725][T16062] Bluetooth: hci8: command tx timeout [ 465.606497][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4024'. [ 465.699909][T17654] chnl_net:caif_netlink_parms(): no params data found [ 465.987694][T17654] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.997605][T17654] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.015151][T17654] bridge_slave_0: entered allmulticast mode [ 466.025022][T17654] bridge_slave_0: entered promiscuous mode [ 466.038002][T17654] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.046542][T17654] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.054058][T17654] bridge_slave_1: entered allmulticast mode [ 466.063044][T17654] bridge_slave_1: entered promiscuous mode [ 466.163574][T17654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.181511][T17654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.224936][T17565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.230284][T17754] netlink: 'syz.0.4028': attribute type 4 has an invalid length. [ 466.322994][T17654] team0: Port device team_slave_0 added [ 466.354870][T17654] team0: Port device team_slave_1 added [ 466.520056][T17654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.531957][T17654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.573463][T17654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.587946][T17654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.595428][T17654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.633194][T17654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.960866][T16062] Bluetooth: hci7: command tx timeout [ 467.010660][T17782] netlink: 'syz.2.4032': attribute type 10 has an invalid length. [ 467.018558][T17782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4032'. [ 467.097176][T17654] hsr_slave_0: entered promiscuous mode [ 467.104717][T17654] hsr_slave_1: entered promiscuous mode [ 467.112021][T17654] debugfs: 'hsr0' already exists in 'hsr' [ 467.117799][T17654] Cannot create hsr debugfs directory [ 467.153449][T17782] batadv0: entered promiscuous mode [ 467.158735][T17782] batadv0: entered allmulticast mode [ 467.199058][T17782] bridge0: port 1(batadv0) entered blocking state [ 467.250553][T17782] bridge0: port 1(batadv0) entered disabled state [ 467.349507][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4034'. [ 467.360779][T16062] Bluetooth: hci8: command tx timeout [ 467.517111][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.609516][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.699184][ T1146] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 467.709222][ T1146] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 467.734542][T17565] veth0_vlan: entered promiscuous mode [ 467.750259][T17801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.808664][T17565] veth1_vlan: entered promiscuous mode [ 467.856201][T17803] FAULT_INJECTION: forcing a failure. [ 467.856201][T17803] name failslab, interval 1, probability 0, space 0, times 0 [ 467.869758][T17803] CPU: 0 UID: 0 PID: 17803 Comm: syz.6.4041 Not tainted syzkaller #0 PREEMPT(full) [ 467.869807][T17803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.869827][T17803] Call Trace: [ 467.869836][T17803] [ 467.869846][T17803] dump_stack_lvl+0x189/0x250 [ 467.869878][T17803] ? __pfx____ratelimit+0x10/0x10 [ 467.869916][T17803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.869942][T17803] ? __pfx__printk+0x10/0x10 [ 467.869979][T17803] ? __pfx___might_resched+0x10/0x10 [ 467.870006][T17803] should_fail_ex+0x414/0x560 [ 467.870041][T17803] should_failslab+0xa8/0x100 [ 467.870074][T17803] __kmalloc_cache_noprof+0x70/0x3d0 [ 467.870102][T17803] ? tipc_crypto_key_init+0x221/0x870 [ 467.870132][T17803] tipc_crypto_key_init+0x221/0x870 [ 467.870176][T17803] tipc_nl_node_set_key+0x680/0x9a0 [ 467.870205][T17803] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 467.870237][T17803] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 467.870275][T17803] genl_family_rcv_msg_doit+0x215/0x300 [ 467.870309][T17803] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.870369][T17803] genl_rcv_msg+0x60e/0x790 [ 467.870402][T17803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.870427][T17803] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 467.870451][T17803] ? __asan_memcpy+0x40/0x70 [ 467.870474][T17803] ? __pfx_ref_tracker_free+0x10/0x10 [ 467.870513][T17803] netlink_rcv_skb+0x205/0x470 [ 467.870541][T17803] ? __lock_acquire+0xab9/0xd20 [ 467.870571][T17803] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.870597][T17803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.870650][T17803] ? down_read+0x1ad/0x2e0 [ 467.870674][T17803] genl_rcv+0x28/0x40 [ 467.870696][T17803] netlink_unicast+0x82c/0x9e0 [ 467.870735][T17803] ? __pfx_netlink_unicast+0x10/0x10 [ 467.870766][T17803] ? netlink_sendmsg+0x642/0xb30 [ 467.870783][T17803] ? skb_put+0x11b/0x210 [ 467.870809][T17803] netlink_sendmsg+0x805/0xb30 [ 467.870840][T17803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.870863][T17803] ? aa_sock_msg_perm+0xf1/0x1d0 [ 467.870885][T17803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.870908][T17803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.870930][T17803] __sock_sendmsg+0x219/0x270 [ 467.870962][T17803] ____sys_sendmsg+0x505/0x830 [ 467.870993][T17803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.871029][T17803] ? import_iovec+0x74/0xa0 [ 467.871059][T17803] ___sys_sendmsg+0x21f/0x2a0 [ 467.871086][T17803] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.871156][T17803] ? __fget_files+0x2a/0x420 [ 467.871187][T17803] ? __fget_files+0x3a0/0x420 [ 467.871231][T17803] __x64_sys_sendmsg+0x19b/0x260 [ 467.871258][T17803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.871295][T17803] ? __pfx_ksys_write+0x10/0x10 [ 467.871321][T17803] ? rcu_is_watching+0x15/0xb0 [ 467.871350][T17803] ? do_syscall_64+0xbe/0x3b0 [ 467.871382][T17803] do_syscall_64+0xfa/0x3b0 [ 467.871400][T17803] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.871430][T17803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.871452][T17803] ? clear_bhb_loop+0x60/0xb0 [ 467.871478][T17803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.871499][T17803] RIP: 0033:0x7f782718ebe9 [ 467.871519][T17803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.871539][T17803] RSP: 002b:00007f7827f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.871562][T17803] RAX: ffffffffffffffda RBX: 00007f78273b5fa0 RCX: 00007f782718ebe9 [ 467.871578][T17803] RDX: 0000000000000000 RSI: 0000200000004680 RDI: 0000000000000003 [ 467.871592][T17803] RBP: 00007f7827f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 467.871605][T17803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.871618][T17803] R13: 00007f78273b6038 R14: 00007f78273b5fa0 R15: 00007ffc685b05b8 [ 467.871655][T17803] [ 468.349797][T17654] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 468.365907][T17654] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.390846][T17654] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.409899][T17654] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 468.480183][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4045'. [ 468.481802][T17565] veth0_macvtap: entered promiscuous mode [ 468.501051][T17565] veth1_macvtap: entered promiscuous mode [ 468.508436][T17812] bridge0: port 1(batadv0) entered disabled state [ 468.737279][T17565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.769067][T17565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.825618][ T1146] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.852271][ T1146] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.872629][ T1146] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.892590][ T1146] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.911334][T17830] netlink: 'syz.0.4051': attribute type 32 has an invalid length. [ 468.919209][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'. [ 468.939933][T17830] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 469.042348][T16062] Bluetooth: hci7: command tx timeout [ 469.254485][T17654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.274821][T17849] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4055'. [ 469.320676][T17849] netlink: 'syz.6.4055': attribute type 7 has an invalid length. [ 469.328471][T17849] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4055'. [ 469.371403][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.379414][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.426732][T17654] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.440532][T16062] Bluetooth: hci8: command tx timeout [ 469.494983][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.502290][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.533711][T10073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.543166][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.550423][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.567247][T10073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.711812][T17862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.837743][T17862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.910672][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'. [ 469.939627][T17855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.000236][T17870] tipc: Started in network mode [ 470.006420][T17870] tipc: Node identity 265a6522095b, cluster identity 4711 [ 470.015662][T17870] tipc: Enabled bearer , priority 0 [ 470.030243][T17870] syzkaller0: entered promiscuous mode [ 470.035960][T17870] syzkaller0: entered allmulticast mode [ 470.077357][T17870] tipc: Resetting bearer [ 470.090800][T17869] tipc: Resetting bearer [ 470.118754][T17869] tipc: Disabling bearer [ 470.407629][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4063'. [ 470.442848][T17654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.678171][T17899] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 470.743893][T17899] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4065'. [ 470.813332][T17899] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4065'. [ 470.842543][T17899] netlink: 'syz.6.4065': attribute type 6 has an invalid length. [ 470.851949][T17899] netlink: 'syz.6.4065': attribute type 5 has an invalid length. [ 470.908493][T17910] syzkaller1: entered promiscuous mode [ 470.920441][T17910] syzkaller1: entered allmulticast mode [ 470.931007][T17910] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4067'. [ 470.945707][T17899] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4065'. [ 471.242863][T17654] veth0_vlan: entered promiscuous mode [ 471.300011][T17654] veth1_vlan: entered promiscuous mode [ 471.418745][T17654] veth0_macvtap: entered promiscuous mode [ 471.469111][T17654] veth1_macvtap: entered promiscuous mode [ 471.521361][T16062] Bluetooth: hci8: command tx timeout [ 471.551251][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.554146][T17654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.578523][T17654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.608981][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.616397][T17932] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 471.660588][ T6006] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.670841][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.684946][ T6006] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.695949][T17928] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 471.709286][ T6006] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.780896][T17928] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 471.819259][ T6006] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.843754][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.885503][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.915084][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.948108][T17928] hsr0 speed is unknown, defaulting to 1000 [ 471.996023][T17928] hsr0 speed is unknown, defaulting to 1000 [ 472.001912][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4077'. [ 472.006318][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.038336][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.049056][T17928] hsr0 speed is unknown, defaulting to 1000 [ 472.075138][T17939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.075551][T17928] hsr0 speed is unknown, defaulting to 1000 [ 472.110682][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.121568][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.125759][T17928] hsr0 speed is unknown, defaulting to 1000 [ 472.173636][T17928] hsr0 speed is unknown, defaulting to 1000 [ 472.206021][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 472.628375][T17958] bond0: (slave rose0): Error: Slave does not support XDP [ 472.683075][T17965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4085'. [ 472.887545][T17971] netlink: 'syz.9.4089': attribute type 15 has an invalid length. [ 472.913077][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4089'. [ 472.953486][T17971] netlink: 'syz.9.4089': attribute type 15 has an invalid length. [ 473.285760][T17995] rdma_rxe: rxe_newlink: failed to add lo [ 473.371928][T18003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.468488][T18007] geneve2: entered promiscuous mode [ 473.474198][T18007] geneve2: entered allmulticast mode [ 473.496142][T18012] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 473.509744][T10073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.524022][T10073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.551842][T10073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.570170][T10073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.675758][T18021] netlink: 'syz.6.4104': attribute type 10 has an invalid length. [ 473.719863][T18023] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 473.750232][T18023] netlink: 'syz.2.4105': attribute type 1 has an invalid length. [ 473.828925][T18025] openvswitch: netlink: IPv6 tunnel dst address is zero [ 474.572187][T18074] netlink: 'syz.0.4124': attribute type 1 has an invalid length. [ 474.695374][T18084] FAULT_INJECTION: forcing a failure. [ 474.695374][T18084] name failslab, interval 1, probability 0, space 0, times 0 [ 474.768043][T18084] CPU: 0 UID: 0 PID: 18084 Comm: syz.6.4125 Not tainted syzkaller #0 PREEMPT(full) [ 474.768075][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.768089][T18084] Call Trace: [ 474.768098][T18084] [ 474.768108][T18084] dump_stack_lvl+0x189/0x250 [ 474.768140][T18084] ? __pfx____ratelimit+0x10/0x10 [ 474.768172][T18084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.768197][T18084] ? __pfx__printk+0x10/0x10 [ 474.768229][T18084] ? __lock_acquire+0xab9/0xd20 [ 474.768271][T18084] should_fail_ex+0x414/0x560 [ 474.768306][T18084] should_failslab+0xa8/0x100 [ 474.768340][T18084] kmem_cache_alloc_noprof+0x73/0x3c0 [ 474.768367][T18084] ? skb_clone+0x212/0x3a0 [ 474.768397][T18084] skb_clone+0x212/0x3a0 [ 474.768425][T18084] __netlink_deliver_tap+0x404/0x850 [ 474.768471][T18084] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.768503][T18084] netlink_deliver_tap+0x19c/0x1b0 [ 474.768535][T18084] netlink_unicast+0x7fa/0x9e0 [ 474.768575][T18084] ? __pfx_netlink_unicast+0x10/0x10 [ 474.768606][T18084] ? netlink_sendmsg+0x642/0xb30 [ 474.768623][T18084] ? skb_put+0x11b/0x210 [ 474.768649][T18084] netlink_sendmsg+0x805/0xb30 [ 474.768680][T18084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.768704][T18084] ? aa_sock_msg_perm+0xf1/0x1d0 [ 474.768727][T18084] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.768763][T18084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.768783][T18084] __sock_sendmsg+0x219/0x270 [ 474.768816][T18084] ____sys_sendmsg+0x505/0x830 [ 474.768846][T18084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.768880][T18084] ? import_iovec+0x74/0xa0 [ 474.768914][T18084] ___sys_sendmsg+0x21f/0x2a0 [ 474.768939][T18084] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.769004][T18084] ? __fget_files+0x2a/0x420 [ 474.769033][T18084] ? __fget_files+0x3a0/0x420 [ 474.769076][T18084] __x64_sys_sendmsg+0x19b/0x260 [ 474.769103][T18084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.769138][T18084] ? __pfx_ksys_write+0x10/0x10 [ 474.769172][T18084] ? do_syscall_64+0xbe/0x3b0 [ 474.769197][T18084] do_syscall_64+0xfa/0x3b0 [ 474.769214][T18084] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.769244][T18084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.769265][T18084] ? clear_bhb_loop+0x60/0xb0 [ 474.769291][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.769311][T18084] RIP: 0033:0x7f782718ebe9 [ 474.769331][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.769349][T18084] RSP: 002b:00007f7827f6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.769372][T18084] RAX: ffffffffffffffda RBX: 00007f78273b6090 RCX: 00007f782718ebe9 [ 474.769389][T18084] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 474.769403][T18084] RBP: 00007f7827f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 474.769416][T18084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.769429][T18084] R13: 00007f78273b6128 R14: 00007f78273b6090 R15: 00007ffc685b05b8 [ 474.769465][T18084] [ 475.079998][T18094] Dead loop on virtual device ip6_vti0, fix it urgently! [ 475.107327][T18084] __nla_validate_parse: 13 callbacks suppressed [ 475.107349][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4125'. [ 475.448883][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4132'. [ 475.466030][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4132'. [ 475.497145][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4132'. [ 475.528008][T18105] netlink: 'syz.8.4132': attribute type 10 has an invalid length. [ 475.619574][T18111] netlink: 'syz.9.4133': attribute type 4 has an invalid length. [ 475.647503][T18105] team0: Port device dummy0 added [ 475.672597][T18112] netlink: 'syz.9.4133': attribute type 4 has an invalid length. [ 475.693748][ T55] block nbd3: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 150 seconds [ 475.704714][ T55] block nbd3: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 150 seconds [ 475.716189][ T55] block nbd3: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 150 seconds [ 475.897181][T18119] sctp: [Deprecated]: syz.6.4138 (pid 18119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.897181][T18119] Use struct sctp_sack_info instead [ 475.927633][T18121] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4137'. [ 475.960482][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4137'. [ 476.104324][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4141'. [ 476.127942][T18132] netlink: 'syz.2.4140': attribute type 11 has an invalid length. [ 476.136280][T18132] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4140'. [ 476.583585][T18158] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4152'. [ 476.725472][T18165] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4154'. [ 476.846319][T18164] netlink: 'syz.9.4153': attribute type 5 has an invalid length. [ 477.025897][T18181] FAULT_INJECTION: forcing a failure. [ 477.025897][T18181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.054925][T18181] CPU: 0 UID: 0 PID: 18181 Comm: syz.2.4160 Not tainted syzkaller #0 PREEMPT(full) [ 477.054958][T18181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.054971][T18181] Call Trace: [ 477.054980][T18181] [ 477.054990][T18181] dump_stack_lvl+0x189/0x250 [ 477.055020][T18181] ? __pfx____ratelimit+0x10/0x10 [ 477.055052][T18181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.055078][T18181] ? __pfx__printk+0x10/0x10 [ 477.055109][T18181] ? __might_fault+0xb0/0x130 [ 477.055151][T18181] should_fail_ex+0x414/0x560 [ 477.055187][T18181] _copy_from_user+0x2d/0xb0 [ 477.055213][T18181] ___sys_recvmsg+0x12e/0x510 [ 477.055246][T18181] ? __pfx____sys_recvmsg+0x10/0x10 [ 477.055308][T18181] ? __might_fault+0xb0/0x130 [ 477.055341][T18181] do_recvmmsg+0x307/0x770 [ 477.055376][T18181] ? __pfx_do_recvmmsg+0x10/0x10 [ 477.055415][T18181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.055476][T18181] __x64_sys_recvmmsg+0x190/0x240 [ 477.055505][T18181] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 477.055528][T18181] ? rcu_is_watching+0x15/0xb0 [ 477.055556][T18181] ? do_syscall_64+0xbe/0x3b0 [ 477.055580][T18181] do_syscall_64+0xfa/0x3b0 [ 477.055597][T18181] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.055627][T18181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.055648][T18181] ? clear_bhb_loop+0x60/0xb0 [ 477.055674][T18181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.055694][T18181] RIP: 0033:0x7fcecc18ebe9 [ 477.055711][T18181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.055729][T18181] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 477.055750][T18181] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 477.055765][T18181] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000004 [ 477.055778][T18181] RBP: 00007fceccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 477.055799][T18181] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 477.055812][T18181] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 477.055847][T18181] [ 477.765166][T18207] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.774098][T18207] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.969980][T18218] FAULT_INJECTION: forcing a failure. [ 477.969980][T18218] name failslab, interval 1, probability 0, space 0, times 0 [ 477.989798][T18218] CPU: 1 UID: 0 PID: 18218 Comm: syz.6.4176 Not tainted syzkaller #0 PREEMPT(full) [ 477.989827][T18218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.989840][T18218] Call Trace: [ 477.989849][T18218] [ 477.989858][T18218] dump_stack_lvl+0x189/0x250 [ 477.989889][T18218] ? __pfx____ratelimit+0x10/0x10 [ 477.989921][T18218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.989945][T18218] ? __pfx__printk+0x10/0x10 [ 477.989978][T18218] ? __pfx___might_resched+0x10/0x10 [ 477.990000][T18218] ? fs_reclaim_acquire+0x7d/0x100 [ 477.990038][T18218] should_fail_ex+0x414/0x560 [ 477.990074][T18218] should_failslab+0xa8/0x100 [ 477.990106][T18218] __kmalloc_noprof+0xcb/0x4f0 [ 477.990134][T18218] ? tomoyo_encode+0x28b/0x550 [ 477.990161][T18218] tomoyo_encode+0x28b/0x550 [ 477.990191][T18218] tomoyo_realpath_from_path+0x58d/0x5d0 [ 477.990217][T18218] ? tomoyo_domain+0xd9/0x130 [ 477.990256][T18218] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 477.990285][T18218] tomoyo_path_number_perm+0x1e8/0x5a0 [ 477.990321][T18218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.990370][T18218] ? __lock_acquire+0xab9/0xd20 [ 477.990424][T18218] ? __fget_files+0x2a/0x420 [ 477.990459][T18218] ? __fget_files+0x2a/0x420 [ 477.990488][T18218] ? __fget_files+0x3a0/0x420 [ 477.990518][T18218] ? __fget_files+0x2a/0x420 [ 477.990554][T18218] security_file_ioctl+0xcb/0x2d0 [ 477.990584][T18218] __se_sys_ioctl+0x47/0x170 [ 477.990612][T18218] do_syscall_64+0xfa/0x3b0 [ 477.990631][T18218] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.990661][T18218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.990682][T18218] ? clear_bhb_loop+0x60/0xb0 [ 477.990708][T18218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.990729][T18218] RIP: 0033:0x7f782718ebe9 [ 477.990748][T18218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.990766][T18218] RSP: 002b:00007f7827f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.990788][T18218] RAX: ffffffffffffffda RBX: 00007f78273b5fa0 RCX: 00007f782718ebe9 [ 477.990804][T18218] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 477.990818][T18218] RBP: 00007f7827f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 477.990831][T18218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.990843][T18218] R13: 00007f78273b6038 R14: 00007f78273b5fa0 R15: 00007ffc685b05b8 [ 477.990876][T18218] [ 478.254134][T18218] ERROR: Out of memory at tomoyo_realpath_from_path. [ 478.286425][T18220] validate_nla: 1 callbacks suppressed [ 478.286446][T18220] netlink: 'syz.0.4175': attribute type 3 has an invalid length. [ 478.602186][T18244] FAULT_INJECTION: forcing a failure. [ 478.602186][T18244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.651548][T18244] CPU: 0 UID: 0 PID: 18244 Comm: syz.2.4184 Not tainted syzkaller #0 PREEMPT(full) [ 478.651579][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 478.651592][T18244] Call Trace: [ 478.651600][T18244] [ 478.651611][T18244] dump_stack_lvl+0x189/0x250 [ 478.651641][T18244] ? __pfx____ratelimit+0x10/0x10 [ 478.651672][T18244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.651697][T18244] ? __pfx__printk+0x10/0x10 [ 478.651726][T18244] ? __might_fault+0xb0/0x130 [ 478.651767][T18244] should_fail_ex+0x414/0x560 [ 478.651802][T18244] _copy_from_user+0x2d/0xb0 [ 478.651828][T18244] ___sys_recvmsg+0x12e/0x510 [ 478.651860][T18244] ? __pfx____sys_recvmsg+0x10/0x10 [ 478.651914][T18244] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 478.651959][T18244] do_recvmmsg+0x307/0x770 [ 478.651994][T18244] ? __pfx_do_recvmmsg+0x10/0x10 [ 478.652035][T18244] ? _copy_from_user+0x94/0xb0 [ 478.652078][T18244] __x64_sys_recvmmsg+0x1af/0x240 [ 478.652107][T18244] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 478.652129][T18244] ? rcu_is_watching+0x15/0xb0 [ 478.652157][T18244] ? do_syscall_64+0xbe/0x3b0 [ 478.652181][T18244] do_syscall_64+0xfa/0x3b0 [ 478.652199][T18244] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.652230][T18244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.652251][T18244] ? clear_bhb_loop+0x60/0xb0 [ 478.652277][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.652297][T18244] RIP: 0033:0x7fcecc18ebe9 [ 478.652316][T18244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.652335][T18244] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 478.652363][T18244] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 478.652380][T18244] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 478.652394][T18244] RBP: 00007fceccfef090 R08: 00002000000001c0 R09: 0000000000000000 [ 478.652408][T18244] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 478.652420][T18244] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 478.652455][T18244] [ 478.912276][T16062] Bluetooth: hci8: command tx timeout [ 478.929358][T18250] unknown channel width for channel at 909000KHz? [ 478.938402][T18250] netlink: 'syz.8.4186': attribute type 6 has an invalid length. [ 479.219616][T18266] FAULT_INJECTION: forcing a failure. [ 479.219616][T18266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.253275][T18266] CPU: 1 UID: 0 PID: 18266 Comm: syz.2.4191 Not tainted syzkaller #0 PREEMPT(full) [ 479.253306][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.253320][T18266] Call Trace: [ 479.253329][T18266] [ 479.253338][T18266] dump_stack_lvl+0x189/0x250 [ 479.253368][T18266] ? __pfx____ratelimit+0x10/0x10 [ 479.253399][T18266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.253424][T18266] ? __pfx__printk+0x10/0x10 [ 479.253453][T18266] ? __might_fault+0xb0/0x130 [ 479.253494][T18266] should_fail_ex+0x414/0x560 [ 479.253528][T18266] _copy_from_user+0x2d/0xb0 [ 479.253553][T18266] ___sys_sendmsg+0x158/0x2a0 [ 479.253580][T18266] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.253647][T18266] ? __fget_files+0x2a/0x420 [ 479.253676][T18266] ? __fget_files+0x3a0/0x420 [ 479.253717][T18266] __x64_sys_sendmsg+0x19b/0x260 [ 479.253743][T18266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.253777][T18266] ? __pfx_ksys_write+0x10/0x10 [ 479.253802][T18266] ? rcu_is_watching+0x15/0xb0 [ 479.253829][T18266] ? do_syscall_64+0xbe/0x3b0 [ 479.253852][T18266] do_syscall_64+0xfa/0x3b0 [ 479.253888][T18266] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.253917][T18266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.253939][T18266] ? clear_bhb_loop+0x60/0xb0 [ 479.253965][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.253985][T18266] RIP: 0033:0x7fcecc18ebe9 [ 479.254004][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.254023][T18266] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.254045][T18266] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 479.254061][T18266] RDX: 0000000024004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 479.254080][T18266] RBP: 00007fceccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 479.254094][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.254106][T18266] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 479.254141][T18266] [ 479.673699][T18276] FAULT_INJECTION: forcing a failure. [ 479.673699][T18276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.709416][T18276] CPU: 1 UID: 0 PID: 18276 Comm: syz.2.4193 Not tainted syzkaller #0 PREEMPT(full) [ 479.709447][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.709461][T18276] Call Trace: [ 479.709470][T18276] [ 479.709480][T18276] dump_stack_lvl+0x189/0x250 [ 479.709512][T18276] ? __pfx____ratelimit+0x10/0x10 [ 479.709554][T18276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.709578][T18276] ? __pfx__printk+0x10/0x10 [ 479.709608][T18276] ? __might_fault+0xb0/0x130 [ 479.709650][T18276] should_fail_ex+0x414/0x560 [ 479.709685][T18276] _copy_from_user+0x2d/0xb0 [ 479.709710][T18276] rfcomm_dev_ioctl+0x18d/0x1d20 [ 479.709736][T18276] ? kasan_quarantine_put+0xdd/0x220 [ 479.709767][T18276] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 479.709792][T18276] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 479.709831][T18276] ? do_vfs_ioctl+0xbe8/0x1430 [ 479.709860][T18276] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 479.709895][T18276] sock_do_ioctl+0xdc/0x300 [ 479.709926][T18276] ? __pfx_sock_do_ioctl+0x10/0x10 [ 479.709951][T18276] ? __lock_acquire+0xab9/0xd20 [ 479.710010][T18276] sock_ioctl+0x576/0x790 [ 479.710040][T18276] ? __pfx_sock_ioctl+0x10/0x10 [ 479.710068][T18276] ? __fget_files+0x2a/0x420 [ 479.710098][T18276] ? __fget_files+0x3a0/0x420 [ 479.710129][T18276] ? __fget_files+0x2a/0x420 [ 479.710163][T18276] ? bpf_lsm_file_ioctl+0x9/0x20 [ 479.710190][T18276] ? __pfx_sock_ioctl+0x10/0x10 [ 479.710216][T18276] __se_sys_ioctl+0xf9/0x170 [ 479.710245][T18276] do_syscall_64+0xfa/0x3b0 [ 479.710263][T18276] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.710296][T18276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.710317][T18276] ? clear_bhb_loop+0x60/0xb0 [ 479.710342][T18276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.710362][T18276] RIP: 0033:0x7fcecc18ebe9 [ 479.710382][T18276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.710401][T18276] RSP: 002b:00007fceccfef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.710423][T18276] RAX: ffffffffffffffda RBX: 00007fcecc3b5fa0 RCX: 00007fcecc18ebe9 [ 479.710439][T18276] RDX: 0000200000000100 RSI: 00000000400452c9 RDI: 0000000000000004 [ 479.710453][T18276] RBP: 00007fceccfef090 R08: 0000000000000000 R09: 0000000000000000 [ 479.710466][T18276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.710478][T18276] R13: 00007fcecc3b6038 R14: 00007fcecc3b5fa0 R15: 00007fff80e30748 [ 479.710513][T18276] [ 480.120860][T18286] __nla_validate_parse: 8 callbacks suppressed [ 480.120881][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4199'. [ 480.267992][T18296] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4201'. [ 480.499159][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4205'. [ 480.636506][T18308] gtp0: entered promiscuous mode [ 480.647708][T18315] FAULT_INJECTION: forcing a failure. [ 480.647708][T18315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.654397][T18308] gtp0: entered allmulticast mode [ 480.681931][T18312] veth0: entered promiscuous mode [ 480.690114][T18312] veth0: left promiscuous mode [ 480.697306][T18315] CPU: 1 UID: 0 PID: 18315 Comm: syz.8.4208 Not tainted syzkaller #0 PREEMPT(full) [ 480.697340][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.697354][T18315] Call Trace: [ 480.697362][T18315] [ 480.697371][T18315] dump_stack_lvl+0x189/0x250 [ 480.697401][T18315] ? __pfx____ratelimit+0x10/0x10 [ 480.697432][T18315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.697456][T18315] ? __pfx__printk+0x10/0x10 [ 480.697498][T18315] should_fail_ex+0x414/0x560 [ 480.697530][T18315] _copy_to_user+0x31/0xb0 [ 480.697556][T18315] simple_read_from_buffer+0xe1/0x170 [ 480.697590][T18315] proc_fail_nth_read+0x1b3/0x220 [ 480.697616][T18315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.697643][T18315] ? rw_verify_area+0x2a6/0x4d0 [ 480.697668][T18315] ? __lock_acquire+0xab9/0xd20 [ 480.697694][T18315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.697718][T18315] vfs_read+0x1fd/0xa30 [ 480.697742][T18315] ? fdget_pos+0x247/0x320 [ 480.697765][T18315] ? __pfx___mutex_lock+0x10/0x10 [ 480.697796][T18315] ? __pfx_vfs_read+0x10/0x10 [ 480.697824][T18315] ? __fget_files+0x2a/0x420 [ 480.697858][T18315] ? __fget_files+0x3a0/0x420 [ 480.697896][T18315] ? __fget_files+0x2a/0x420 [ 480.697935][T18315] ksys_read+0x145/0x250 [ 480.697969][T18315] ? __fget_files+0x3a0/0x420 [ 480.698001][T18315] ? __pfx_ksys_read+0x10/0x10 [ 480.698034][T18315] ? do_syscall_64+0xbe/0x3b0 [ 480.698057][T18315] do_syscall_64+0xfa/0x3b0 [ 480.698075][T18315] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.698103][T18315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.698124][T18315] ? clear_bhb_loop+0x60/0xb0 [ 480.698149][T18315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.698170][T18315] RIP: 0033:0x7fe77498d5fc [ 480.698190][T18315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 480.698209][T18315] RSP: 002b:00007fe772bee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.698231][T18315] RAX: ffffffffffffffda RBX: 00007fe774bb5fa0 RCX: 00007fe77498d5fc [ 480.698246][T18315] RDX: 000000000000000f RSI: 00007fe772bee0a0 RDI: 0000000000000003 [ 480.698260][T18315] RBP: 00007fe772bee090 R08: 0000000000000000 R09: 0000000000000000 [ 480.698271][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.698282][T18315] R13: 00007fe774bb6038 R14: 00007fe774bb5fa0 R15: 00007fff895b09e8 [ 480.698317][T18315] [ 481.147863][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4210'. [ 481.166990][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'. [ 481.199941][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4212'. [ 482.721629][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 504.481025][ T32] INFO: task syz.1.2711:14131 blocked for more than 143 seconds. [ 504.489056][ T32] Not tainted syzkaller #0 [ 504.494469][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.503375][ T32] task:syz.1.2711 state:D stack:26120 pid:14131 tgid:14129 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 504.515628][ T32] Call Trace: [ 504.518939][ T32] [ 504.522154][ T32] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 504.526735][ T32] ? __lock_acquire+0xab9/0xd20 [ 504.531710][ T32] ? __lock_acquire+0xab9/0xd20 [ 504.536614][ T32] ? __pfx___schedule+0x10/0x10 [ 504.548053][ T32] ? schedule+0x91/0x360 [ 504.553639][ T32] schedule+0x165/0x360 [ 504.557961][ T32] schedule_preempt_disabled+0x13/0x30 [ 504.600633][ T32] __mutex_lock+0x7e6/0x1350 [ 504.605328][ T32] ? __mutex_lock+0x5bb/0x1350 [ 504.610188][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 504.672146][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 504.677265][ T32] ? stack_trace_save+0x9c/0xe0 [ 504.723182][ T32] ? stack_depot_save_flags+0x40/0x860 [ 504.728756][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 504.761578][ T32] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 504.767740][ T32] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 504.776829][ T32] ? kmalloc_reserve+0x136/0x290 [ 504.782024][ T32] ? __alloc_skb+0x142/0x2d0 [ 504.786668][ T32] ? netlink_dump+0x1b7/0xe90 [ 504.800059][ T32] ? __netlink_dump_start+0x5cb/0x7e0 [ 504.806029][ T32] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 504.819885][ T32] ? genl_rcv_msg+0x5da/0x790 [ 504.824834][ T32] ? netlink_rcv_skb+0x205/0x470 [ 504.829834][ T32] ? genl_rcv+0x28/0x40 [ 504.850428][ T32] ? netlink_unicast+0x82c/0x9e0 [ 504.855446][ T32] ? netlink_sendmsg+0x805/0xb30 [ 504.875618][ T32] ? __sock_sendmsg+0x219/0x270 [ 504.890579][ T32] ? ____sys_sendmsg+0x505/0x830 [ 504.895595][ T32] ? ___sys_sendmsg+0x21f/0x2a0 [ 504.910518][ T32] ? __x64_sys_sendmsg+0x19b/0x260 [ 504.930540][ T32] ? do_syscall_64+0xfa/0x3b0 [ 504.935297][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.964009][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 504.970776][ T32] ? rcu_is_watching+0x15/0xb0 [ 504.975590][ T32] ? trace_kmalloc+0x1f/0xd0 [ 505.000565][ T32] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 505.007268][ T32] ? __build_skb_around+0x257/0x3e0 [ 505.023521][ T32] genl_dumpit+0x108/0x1b0 [ 505.028036][ T32] netlink_dump+0x6e4/0xe90 [ 505.051058][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 505.056207][ T32] ? genl_start+0x499/0x6c0 [ 505.080509][ T32] __netlink_dump_start+0x5cb/0x7e0 [ 505.085820][ T32] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 505.112206][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 505.118527][ T32] ? genl_get_cmd+0x496/0x910 [ 505.141330][ T32] ? __pfx_genl_start+0x10/0x10 [ 505.146265][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 505.170390][ T32] ? __pfx_genl_done+0x10/0x10 [ 505.175254][ T32] genl_rcv_msg+0x5da/0x790 [ 505.179802][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.216191][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 505.225142][ T32] ? __asan_memcpy+0x40/0x70 [ 505.229805][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 505.260487][ T32] netlink_rcv_skb+0x205/0x470 [ 505.265333][ T32] ? __lock_acquire+0xab9/0xd20 [ 505.270226][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.310830][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.316224][ T32] ? down_read+0x1ad/0x2e0 [ 505.342227][ T32] genl_rcv+0x28/0x40 [ 505.346286][ T32] netlink_unicast+0x82c/0x9e0 [ 505.370972][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 505.376347][ T32] ? netlink_sendmsg+0x642/0xb30 [ 505.385078][ T32] ? skb_put+0x11b/0x210 [ 505.389969][ T32] netlink_sendmsg+0x805/0xb30 [ 505.395091][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.400526][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 505.405566][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.410931][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.416247][ T32] __sock_sendmsg+0x219/0x270 [ 505.421044][ T32] ____sys_sendmsg+0x505/0x830 [ 505.425841][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.431202][ T32] ? import_iovec+0x74/0xa0 [ 505.435720][ T32] ___sys_sendmsg+0x21f/0x2a0 [ 505.440850][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.446127][ T32] ? __fget_files+0x2a/0x420 [ 505.452095][ T32] ? __fget_files+0x3a0/0x420 [ 505.456849][ T32] __x64_sys_sendmsg+0x19b/0x260 [ 505.461866][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.467358][ T32] ? rcu_is_watching+0x15/0xb0 [ 505.473820][ T32] ? do_syscall_64+0xbe/0x3b0 [ 505.478552][ T32] do_syscall_64+0xfa/0x3b0 [ 505.483280][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.488518][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.495469][ T32] ? clear_bhb_loop+0x60/0xb0 [ 505.500225][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.506468][ T32] RIP: 0033:0x7f63ba18ebe9 [ 505.511034][ T32] RSP: 002b:00007f63bb03b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.519507][ T32] RAX: ffffffffffffffda RBX: 00007f63ba3b5fa0 RCX: 00007f63ba18ebe9 [ 505.527624][ T32] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 505.535801][ T32] RBP: 00007f63ba211e19 R08: 0000000000000000 R09: 0000000000000000 [ 505.544027][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.553586][ T32] R13: 00007f63ba3b6038 R14: 00007f63ba3b5fa0 R15: 00007ffdfcb2b758 [ 505.564073][ T32] [ 505.575006][ T32] [ 505.575006][ T32] Showing all locks held in the system: [ 505.603488][ T32] 1 lock held by khungtaskd/32: [ 505.608402][ T32] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 505.638879][ T32] 3 locks held by kworker/1:2/919: [ 505.645511][ T32] 2 locks held by getty/5625: [ 505.650250][ T32] #0: ffff8880302a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.666669][ T32] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 505.697656][ T32] 1 lock held by syz-executor/5868: [ 505.709700][ T32] #0: ffffffff8f538a88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 505.719805][ T32] 5 locks held by kworker/u8:9/10073: [ 505.733304][ T32] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 505.749120][ T32] #1: ffffc9000259fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 505.760760][ T55] block nbd3: Possible stuck request ffff88802541e000: control (read@0,1024B). Runtime 180 seconds [ 505.772529][ T55] block nbd3: Possible stuck request ffff88802541e1c0: control (read@1024,1024B). Runtime 180 seconds [ 505.783987][ T55] block nbd3: Possible stuck request ffff88802541e380: control (read@2048,1024B). Runtime 180 seconds [ 505.806491][ T32] #2: ffffffff8f52bbf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 505.819913][ T32] #3: ffffffff8f538a88 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 505.837174][ T32] #4: ffff888030e494e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 505.860413][ T32] 2 locks held by syz.5.1957/11923: [ 505.865685][ T32] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 505.890819][ T32] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 505.918759][ T32] 1 lock held by syz-executor/12449: [ 505.938041][ T32] 1 lock held by udevd/12834: [ 505.950661][ T32] #0: ffff888024f45358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 505.960001][ T32] 3 locks held by syz.1.2711/14131: [ 505.988609][ T32] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 506.018739][ T32] #1: ffff88805616f6d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 506.052090][ T32] #2: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 506.062791][ T32] 2 locks held by syz.7.3769/17056: [ 506.068031][ T32] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 506.076415][ T32] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 506.087013][ T32] 2 locks held by syz.3.3807/17146: [ 506.092503][ T32] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 506.101061][ T32] #1: ffffffff8e418608 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 506.112595][ T32] 5 locks held by syz-executor/17654: [ 506.118016][ T32] #0: ffff888048a34dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 506.128157][ T32] #1: ffff888048a340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 506.139365][ T32] #2: ffffffff8f69d7c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 506.149507][ T32] #3: ffff8880280b8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 506.159243][ T32] #4: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 506.170428][ T32] [ 506.172812][ T32] ============================================= [ 506.172812][ T32] [ 506.199456][ T32] NMI backtrace for cpu 1 [ 506.199478][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 506.199501][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.199514][ T32] Call Trace: [ 506.199523][ T32] [ 506.199533][ T32] dump_stack_lvl+0x189/0x250 [ 506.199576][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.199602][ T32] ? __pfx__printk+0x10/0x10 [ 506.199646][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 506.199675][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 506.199704][ T32] ? __pfx__printk+0x10/0x10 [ 506.199737][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 506.199772][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 506.199802][ T32] watchdog+0xf93/0xfe0 [ 506.199838][ T32] ? watchdog+0x1de/0xfe0 [ 506.199873][ T32] kthread+0x70e/0x8a0 [ 506.199903][ T32] ? __pfx_watchdog+0x10/0x10 [ 506.199930][ T32] ? __pfx_kthread+0x10/0x10 [ 506.199958][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.199990][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.200018][ T32] ? __pfx_kthread+0x10/0x10 [ 506.200045][ T32] ret_from_fork+0x3f9/0x770 [ 506.200070][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 506.200098][ T32] ? __switch_to_asm+0x39/0x70 [ 506.200124][ T32] ? __switch_to_asm+0x33/0x70 [ 506.200150][ T32] ? __pfx_kthread+0x10/0x10 [ 506.200177][ T32] ret_from_fork_asm+0x1a/0x30 [ 506.200222][ T32] [ 506.200231][ T32] Sending NMI from CPU 1 to CPUs 0: [ 506.349539][ C0] NMI backtrace for cpu 0 [ 506.349559][ C0] CPU: 0 UID: 0 PID: 6006 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 506.349579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.349592][ C0] Workqueue: bat_events batadv_nc_worker [ 506.349622][ C0] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 506.349650][ C0] Code: 00 41 56 53 48 89 f3 49 89 fe e8 5e 14 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 506.349666][ C0] RSP: 0018:ffffc9000a83f970 EFLAGS: 00000202 [ 506.349681][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 01324004e8a93d00 [ 506.349701][ C0] RDX: 0000000000000000 RSI: ffffffff8b474aff RDI: 1ffffffff1c273dc [ 506.349713][ C0] RBP: ffffffff8b474ae2 R08: 0000000000000000 R09: 0000000000000000 [ 506.349725][ C0] R10: dffffc0000000000 R11: ffffffff8b474a10 R12: 0000000000000002 [ 506.349737][ C0] R13: ffffffff8e139ee0 R14: ffffffff8e139ee0 R15: 0000000000000000 [ 506.349750][ C0] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 506.349764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 506.349776][ C0] CR2: 0000563f67536000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 506.349797][ C0] Call Trace: [ 506.349805][ C0] [ 506.349814][ C0] lock_acquire+0x8d/0x360 [ 506.349843][ C0] ? batadv_nc_worker+0xd2/0x610 [ 506.349866][ C0] ? batadv_nc_worker+0xd2/0x610 [ 506.349888][ C0] batadv_nc_worker+0xef/0x610 [ 506.349909][ C0] ? batadv_nc_worker+0xd2/0x610 [ 506.349932][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 506.349951][ C0] process_scheduled_works+0xae1/0x17b0 [ 506.349986][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.350013][ C0] worker_thread+0x8a0/0xda0 [ 506.350033][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 506.350063][ C0] ? __kthread_parkme+0x7b/0x200 [ 506.350088][ C0] kthread+0x70e/0x8a0 [ 506.350111][ C0] ? __pfx_worker_thread+0x10/0x10 [ 506.350128][ C0] ? __pfx_kthread+0x10/0x10 [ 506.350150][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.350173][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.350197][ C0] ? __pfx_kthread+0x10/0x10 [ 506.350219][ C0] ret_from_fork+0x3f9/0x770 [ 506.350239][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 506.350260][ C0] ? __switch_to_asm+0x39/0x70 [ 506.350287][ C0] ? __switch_to_asm+0x33/0x70 [ 506.350309][ C0] ? __pfx_kthread+0x10/0x10 [ 506.350332][ C0] ret_from_fork_asm+0x1a/0x30 [ 506.350365][ C0] [ 506.350786][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 506.350806][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 506.350834][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.350850][ T32] Call Trace: [ 506.350862][ T32] [ 506.350873][ T32] dump_stack_lvl+0x99/0x250 [ 506.350906][ T32] ? __asan_memcpy+0x40/0x70 [ 506.350935][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.350964][ T32] ? __pfx__printk+0x10/0x10 [ 506.351015][ T32] vpanic+0x281/0x750 [ 506.351048][ T32] ? __pfx_vpanic+0x10/0x10 [ 506.351075][ T32] ? preempt_schedule+0xae/0xc0 [ 506.351111][ T32] ? preempt_schedule_common+0x83/0xd0 [ 506.351154][ T32] panic+0xb9/0xc0 [ 506.351182][ T32] ? __pfx_panic+0x10/0x10 [ 506.351212][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 506.351255][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 506.351290][ T32] watchdog+0xfd2/0xfe0 [ 506.351331][ T32] ? watchdog+0x1de/0xfe0 [ 506.351373][ T32] kthread+0x70e/0x8a0 [ 506.351408][ T32] ? __pfx_watchdog+0x10/0x10 [ 506.351442][ T32] ? __pfx_kthread+0x10/0x10 [ 506.351473][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.351506][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.351547][ T32] ? __pfx_kthread+0x10/0x10 [ 506.351578][ T32] ret_from_fork+0x3f9/0x770 [ 506.351607][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 506.351641][ T32] ? __switch_to_asm+0x39/0x70 [ 506.351672][ T32] ? __switch_to_asm+0x33/0x70 [ 506.351702][ T32] ? __pfx_kthread+0x10/0x10 [ 506.351734][ T32] ret_from_fork_asm+0x1a/0x30 [ 506.351785][ T32] [ 506.756438][ T32] Kernel Offset: disabled [ 506.760762][ T32] Rebooting in 86400 seconds..