last executing test programs: 4m37.586631973s ago: executing program 1 (id=614): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) 4m37.367911042s ago: executing program 1 (id=615): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140)={0x100, 0x6, 0x0, 0x8, 0x3}, 0x14) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r7, 0x0, 0xf3a, 0x6) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 4m37.264017382s ago: executing program 0 (id=616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000053c0)=ANY=[@ANYBLOB="8410000045000701feffffff00000000017c0000080001800400b18051104a8004009a8069048c738b595805d86f0136db6f78344ce0ab704c3d7a4ed283c5a0f7095c353a0c5e36811f0d1b941bd88e597cd049f6c05cd0b3317bd8088b21b513520b677e20560089573e5b5a63f486a4ec705af44b59e737ca2dfa361255a6f8fbc6e5f5f4855db513eea5f04a5003cb78a4e0ee0ac98d23900c57034a1e499637d7137534625f2a47fcddeb962d6454ed7139a8b2128b1d2fa3a3af7cfce839540eb68eb36c89f00c78b5b54136d23531e832937e2d9b05dc86570d8a68394aeed8ac7d65532ab1efdd775717e412046295c25ac120c97ae593267fa4b6cd258c758aa4899aa89776242e3e0d0070d25178d436e65e62a3d2de2deba33cc6bdf4be4b3eae339877c5cc71193041bb18fe687c5b28f982521650c1f657c2ed1e4a92930ab2fbecd760aea5a2e0e282b484ee6a064fdc86a75b675dca8269912258587006461bd64749b3e3a808138985d32941518d3a0426286bafdc051836c7ea6422a839f19720403b2924c95448cbca0dea97bf13b6a62aea14e89835ecce92c9ce72d1aca6ed75f36a16f9126f5907a1c4a29da9cbd5916621e125b3084252bd8092112e4975c8bd1f215bacda84e2899252b74a0f32d715543ebf916069f65011f7f6659b690dfd2c442bf009bfc13f710e77f9d9568676dc04eb29e073ec0011842916e8317ad48c4030f489dfcac99e70c4e97533b6b4c1a9a37d3b5dff7d34c19fbc43703e4c6b16e8e7d7be54885d3c01b4fbf3ba994c57c4f153458f132f23b13a05e3fd79a16b8565d369b7372b842af867d5e34fde80e40e4dd67dd493b58b4813782530dee663cd4a16b59ab8090a9f892d98ea941cf14cd9bddc8d9345de01c55d7f2d431fdd3cf3a6401fb00254a93dd49a8e0dace96a4c51270047f6f6f594d5b3457f30c1268f689edcbf8fcfa15fd7684efbf537ae26c1656f1fe5f89e322313ecc084d6ab58f5b2adb1ccebf86513a2c3f3327602a5d54bc77e86d714ff23217c069f8ec35cd90ed73f1cc183892c766501776375864197d4b5a670d6232152646172314f7dcee426a9c497b43418d51d84093c192dddee805752dd4dda81ab6b6a03df76b26d453110b3ee3ac220f7955af67e2132c5970006c3902c66ead032f1633bd7f5b6db516ef1437ab4ea7624f84521528a5fdf42dcb41ed390def9128eeb8055e19f4f520a7914eeebe657531b82222a8b3fd401d9673ca3174ef90a04c55eac65d82658e8bb3f6053dcad40239be1ca5a3e38d32962fe40799e834030ee8e6b1fd040920796d37d9df03d110f01995249e8c10ee306aba6e8a98b4cf60408c133faeaa6c0ac1ffdc45b8ec3c8c69d0c734359d455eabd8318a64fcbe7bd86bfcd70e2355f3e9a8dba290d35659ed57b91efa2dd4a10c86771fe1fe07bfa8ad2cf8ee25b77524f3cabb487734586263a92cf8b64b8baf2e02afcd5f53ee0b5179d0f6680d30e9ced80b19700a92a9440e0a9be572906188aa4d01d24da85e688e1f405080f7dbc6982ed61ad37dd8d1c4be1b6edd697082cac2ebf0364293aaa3155287db3a09e94064693bbbb3269bcb2e11c8313aa36585e2932c26a036afae8dfc7323dda1c3896d2e84661c9b6b1f2f4ec567c9af6444350564eaba800b43412756458545b651564ee62c015fddc429da5d44892dee6f5c3201cf872cfe468ff827a18eea534d381942068e751e27e0f877eec9fade55a4488d2e2a60391b2b36209d7a994fb58b3345d78d028d311f5702a2c55332e636e6f8d6526c565e330cc626d1ab2273fd94c1bd6b3a8b09334fd01406ff08260bea148f81c327f2f447c3c30a4b258f4ccbfc927b5e25aece9d7e407aa239c10a12e9d9f38edf119ee80fe73ea8aa2b61a351f9b3dfb6dc978c9baae7f53e08ad451c220682d0aea30085fb16d4b3c44814c430ca04267871fd680cf90ee7915b1b2fdbf9ba81c2af8132c3601e4f87856bf8cb8e8259dc07fe0cdf6ce0683236704daaa9da1ab67ce465a47c014aa2fba744f94cdfb8b14135452197727eb430f777c4e416ade7b91efaf4e5d80c9cd4c163c9e1b9c5b273d005be25591bc83cd8b99e5c694b6bba568703a2bff00c20884ac6ec4715ecfeb868b6cd5ea159adcf4654b073c47a4518878c0ffd3d11fa0807e8eff780f4da53fb06918c09bd1cb254320df74dcab7edbbeae606cb5deee816a0f9628a5c28919d226ee27cbfe4498a786ae74b0cacf1e3622a138ddc61ed7943c74b37fe1bbcbcb0f3b52fba0d5fbb019250fcafbabd4400dfebcff951248974947a3bfda7595c119a34e75391a768b24c2b7e077eea0a98e6c7d6f2aacb15c2754db89c5e8503d334f8b89c8967a99129e700691c588ef4bb337887085153bb738b9ec8d1ebb1df150edc0d9eebed878cf782ce13c9107f2b80b2d31d7ca32aeb8fe1dc09714025984b5dff3000e81400915853aeb6f3e36fe8d278e6b14ed629c7886aaa7fbe50a30704351185730556e79a5704550dedfc73b007a883eb57b48e37ee44926d00b9fe6c8953fbc78f15ee3e10ecf1f579e0e4d941c66ec8e2a71c2f3ec32fcc75d5c46c7f966c164101227db592592f17cbbea7f7f33a11178ae8186a53bf94a8c56cf9b4c35ab3dba02da97b0ae1e38e5c16392d5edf0d164c2d6a2fff9ad14b0fe811cbe365a41b37cc7d30457b1c665ccfc4342f9e39d40061ca4c94ed2a754b2098e10594a51941545f47846e6c328bef141a3fdb516d60d0b3a7e5a80376f9f93c25dc24735a4e542a41c967d6c8a3d8d32422632ca79bb36004cb7bc6198e13121dee4d48ace57d42816d4c44b043e7c2d36b28cc76965a6d5051bb9660c3d81b18f9345bf8a0348e054f10243a61edb9ffec667ecfe50fa8db9c597695506b27f0ff1048df7e5275e10d4f9742d8b69b315ac7b5b938db9061e0f2b01ac30cbd161a8ffd255bf277d9855a236f35d5c08cf7e132f298270f7c6e0b0fec767d0845b7499ec18b4f625d82db3ba4a5f28ef3bccb33a3c3311273def5e8751a55c355efa3011b0d89f8120dbb75c751db35f0b40a069d7dc218a5c1e2ad8b48d98fa87dba06a4cb5b6e774e885f5488c8fcface8ed86c6489527b04311f5ff7bb992179faecf3be6d807e6529a8e362b9e28d4a559917d48a41d19b1579710d9b3c64cb8b1568c319caeeeec614bcd16505cce9040fcdea9e19a106611f79a90c745c4b04c9f65da6b389a8d0a041944c6f236a4cefdf744f0d6fe100ef39393dfb48ebc9fe0bb777ddbca4acc8a226134e456da24b345f503e7f525d752f8e36b5db3242dbc64a813f4f18e4d62003a585a3c7695626ecd45d224933aac6763a1ae2127ae699ea227e03d17bf90c603674b0c9a291435fb33db6efefebe5a3028bd2ef844a4991f1420f75c47fd969f39789b4a895b8272cb8bb41da214b8bbe4acc6cca4b17cffb77bafef0fa7939e0c182d29ec1819cd3b5c236e33114c1827dc045825a888a0e045d5ce7cf6b7630d8e7f087012921288d80093674a8cb7475c5f2fe70d0d451ba975cb77bc640c1df6bf3056f25da9d666fdc193b6fed6a560b518e2d512249d59e1f7437ac722ad7115e9921bc579a3ad0723b47eda72e23ae80d6c7c7c993120c621dbc187189cf177ca9387ab656b538212c82b64f20b1a1d19bcba70db917510a10f40eb96210b7d1810abf45a9f82ece7ed82352066b7ae9ac326d6e1cb42039f748913adba9830e1a5d58015977882763d112821fa5c5a44af67722c4ac4e43d69aa53d8325326322f225ef42d62709b219a1cde1aaaf063e05653967214c4b42bdafcce33ecf77e5b60edd70e6423688cc61604cd0ff3138ad7297d70740763a8b89262db9ac71d353456ce9c13986b89af1921eb3194a9b3b7f0dc683f17529dff99bfe92fcf78c79fa42c49fc07a5d1609aa2a814914b4e82b7dc438da65149a39fa81ea84b4e9df3ed2ab56f1ee90af24903088678fb3c2da9fba542d6dcc90e1058ba875802bfc3148d73e4e712da8c18144a38a066b6f5d3797cbbaf51a30928429becb52e80cdb10b6c59bbd5525bdf51718d4318a61aaf0e9e6575238cbc7f2d64568dadaad11a6a75aaf7915b1369ce243773fb2b725fa376cb5dd95061c56d16fd44506987ba6a0fb62198629666b780464818c17c845f2f86bcad11b6fc8aac607c15f71b03bafa13c3e5dbda439a715bcd34951bf0b4da75b02f03b6db4b0000eb6112889583ae9832365bed5d2b82efbabf7a7c32ec6dd68c34b5120a9c94b7bd48c656cca8984cecde1f42b015bea1ab7e67d74637cb561435cebe78b370e370b4b9819403f46b6aaaa96f4b2848feed201d19eaa48dc3fe9ef27b05dc15915e798fa37835b3ed9f350bb01b1d9dd630cdcd3780789a90daa742317f75bd209e9d284aabd150211c656985de3b6639459626ab0867983ec5fe4f197e8dc38677d6346b9453bca58929a1672e61674d64f92a276a4b8b3bccd253e22c06c09c010683d7d8caf6f9de2605b553d0883317000ad9624ce0205730d84d2d88c3fe5f58c3b6d724e21b6daa2f47d663415afb403ccefccefdfdb2376eee87fd33a13c73091630882d5deced412bd7d5a85a459bc984b5e04792d69be1afc6907ea822e9e1d971604fde71adced1f02446841b9d9e1aed3ebd5c0117b81b10e402b61f07df55ae559ceebfa0fce5c345c363f7fa8be2ff0478fbce13633cd127c2101b235573e786b8262e874d0c9df00da93a12307f80e075ca3f3c35a56f054d6c4ef86d7163ca75a135ac07ddd4278a4f6ced1fdf26ee5ff6736509092dfde3b287e28913d5bdd7b728cff0991c87133b81b303dd673a9593815238b1bfe9e8bf5023bc3eb5dd2f724da65f6bf6763e6002b8fb56515486a64a812f2df8efbc3d6298cebce5cea59bf5aa8cb89f9e150617057272c57589573efa66ae743bb9ce08a61156387279f48f0e4ad8bdac35a69d68e669b9a7538a373d4e0699edd2ecaaae2284efc497692a3832486747d6c6c1e46666d5e7528042dcf1fcb6813fd0ebb522d00989ca4d1ec257d731c346aec509832166ad9dab322a01c06853177dcf95a08760555d455ae49a58a831a8cbf10169fd27192d61a85f7ee6bb2ea6f8ebb6cf6eb3e31a59c9a11cd4553176fbd1d3a4fc73b86380d5551a4bf575321972b511577b131a2734c88d0354cf5dbf188d1d5a3db7506e0a1a90d8dee1b497ddfe2a03a728a176a20cb4070e685f2902d38843d6247d0d6a9945c40b4562258cdc4c7107c6811b1281e061950fdc891dc832cd7ca2c3ad45c7e2f076de7d4837ad203fbf34b0a131b03cf2a2d62121eaedb58885d0cfe5ef9903865fd02a46361f849a3d8a1bbb54b6bacb3b2e9ef78003d6e0b670d2e504b7b1ca79f9e9237c44f5cc535836e6b63a5fee2eacd91e8b4a8f8e3902ae3f744713d9c751e6fc3a67b16e11e7af33cff329b68a7defb6c368901c563ce4762e79617b8fcabee5c6ffcb0b7e09461ee02bd3ea2dc554a802f590086db85c1628dd0559a67cf48716f42818e4fa7189af5da327e8e683dc5484e690d75c88e56771fe3373591dca0e11fa8fbe072df2a4b6216eac056b0403ca1d0a29968798e90815be350b4c11b0e55d9b1894fb34353a8adee093599ea73fe029d9415b149c65b992217ef89bd9418571835ad236fbec264ee7ed1dde4bf0a9769114ba57ebb3e06aeb92935e8382bb716d53766b00"/4117, @ANYRES32=r1, @ANYBLOB="0800d400", @ANYRES32=0x0, @ANYBLOB="0400f48040001000a282ab1bf10b036d0c79b16f1a56074852dec6c1f9947257ac94b0783957b6e394f7fbcf1a8e4ecd55ede3b8f189ea8ec6f0e4eea10016b6c4e0ad3900000008008100", @ANYRES32=0x0, @ANYBLOB="0c0004800c1a"], 0x1084}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3df9", 0x2}], 0x1}}], 0x1, 0x4008000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="2800000000000000170100000200000010"], 0x28}], 0x1, 0x40800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000f9ff070001"], 0x20}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x1409, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x80004) (async) r4 = socket$netlink(0x10, 0x3, 0xa) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0xd0) 4m37.055121431s ago: executing program 1 (id=619): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000580), &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x3, 0x3fa7, 0x2a, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, 0x700, 0x700, 0x8001}}) connect$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x15, r12, 0x1, 0x60, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="bd9b0b36298e49ed8c1bb119ec32d6fca973863f9fa8bea1bdf27db0896e87fca3375609c681ba3672b98606ae2a14184fcfd6954b09de37f578c7382f2713c9280ec0cd5edd4d3d80f14f7d20e99b1e1c7240e2d2756b54771cc22181b59034238d495631611e2247860616d1", @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf250f0000001800018014000200776c616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) 4m37.017353208s ago: executing program 0 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB="0000000000203dc35fe00100000000000000c00000000000005fc40d49a0895565b3bcd0c8649354074b4501dcc3894cd1462c0b8a80c7e32cbeaaed7f842fe8391f795c3b8fd6de055406da57764682480ca6176efb44e3cef2a302f3ec6bfbc5c7cdcac52799e6bc3ad555ee7a2715819ed9d6883187577c6befee1c9858648a8638c9c599bc2d4bd8cdddbb7d14246d586b25bf0c4f41a5c4de34", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r5, 0x4, 0xf41}, 0x8) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) 4m36.578698432s ago: executing program 1 (id=624): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x2, 0x4, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x80000001, 0x1}}) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=0x0], 0xc}}, {{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="9230fd47498b91ccc2b78f1feb544cf7539cd0acfff2cdf8a291710d702ad415d808a0cd9d38badca09fdf249f680c7d4014453922e4e5e9ce3b5f508dc282b1fb183d0149e89070dbaf0fb9a98f50456b35b9c5", 0x54}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000280)="1d35dbc28eeccf277535e77dd3ac40d6a40e15c86a792d8396c6112385e27f2def53c5534ebc6427907c912ae333e3e10edd081cb3bd4bb65d5f9c9056b3913adec471ce9c5a90e406457290b0de158dc06b3fe31035d7fc426b00132743", 0x5e}], 0x3, &(0x7f0000001600)=[{0x1010, 0x1, 0x9, "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"}], 0x1010}}], 0x2, 0x4040000) 4m35.997648966s ago: executing program 0 (id=632): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@remote}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 4m35.827918783s ago: executing program 0 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000088f80180c2000001aaaaaaaaaaaa88a8a00081000000894f45"], 0x72) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) (async, rerun: 64) socketpair(0x1, 0x3, 0x604, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) (async, rerun: 32) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000040)) (async, rerun: 32) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r2, 0x607d8000) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x9, 0x2, 0x0, r5}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 4m35.517472924s ago: executing program 1 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 4m35.418897463s ago: executing program 0 (id=638): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x3d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r4, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x100000}}, 0x40) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r7, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r8, r9, 0x4, r6}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x40, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r12, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb11001800000000000020180000001800000002000000000000000000000d020000000000000000000005ff0700000000092cb40d3ce00830651b96b28f546112495688f05f96e79bf9934f7a25dc204a905b6af73ce88046f849f477542c652cbc193f1e7d133bd65cf3d0f1257f39890b9d89b6e89245474add608a029a8cce8d3e5d0f78ad41c1cc1aecbc3fc82f1dcdbb958701f85bfb154fd53a0c20478a9f922d190fd995e8d70000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x32e}, 0x28) 4m35.039341739s ago: executing program 1 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000480)=0x1b) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x18, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x92fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x8094) 4m34.94392635s ago: executing program 0 (id=642): r0 = socket(0x8, 0x6, 0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x9}, &(0x7f00000000c0)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x10, 0xfffffffffffffff7, 0x400}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x21, 0x3, 0x29ae66f7, 0xffffffff, 0x2242, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x16, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}]}, &(0x7f0000000400)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x2, 0xde}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000880)=[r8], &(0x7f00000008c0)=[{0x1, 0x2, 0x8, 0xb}, {0x5, 0x4, 0xf, 0x5}, {0x5, 0x1, 0x8, 0x3}, {0x3, 0x2, 0x10, 0x4}, {0x1, 0x3, 0xb, 0xb}, {0x1, 0x4, 0xb, 0xc}], 0x10, 0x43}, 0x94) write$cgroup_pid(r3, &(0x7f0000000a00)=0xffffffffffffffff, 0x12) r10 = openat$cgroup_ro(r3, &(0x7f0000000a40)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000c40)={r9, 0x101, 0x9, 0x10}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x8, '\x00', r6, r10, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1f, 0x2, &(0x7f0000000a80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0xa, 0x1, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000b00)=""/143, 0x41000, 0x64, '\x00', r6, @fallback=0xe, r10, 0x8, &(0x7f0000000bc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x5, 0x8, 0x7fff}, 0x10, r7, r11, 0x9, &(0x7f0000000dc0)=[r2, r12, r8, 0xffffffffffffffff, r10, r5, r13, r10, r2, r8], &(0x7f0000000e00)=[{0x4, 0x3, 0xd, 0x4}, {0x0, 0x3, 0x7, 0x6}, {0x1, 0x1, 0x1, 0x5}, {0x4, 0x1, 0x5, 0x5}, {0x5, 0x4, 0x8, 0x3}, {0x5, 0x1, 0xc, 0x8}, {0x5, 0x4, 0x9}, {0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0x5, 0x6}], 0x10, 0x5}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000f80)={0xc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xbb, "09369e67edee8a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001f80)={{r14, 0x3, 0x83, 0x4, 0x10, 0x3, 0xff, 0x2, 0x1cd, 0x9, 0x8, 0x3, 0xfffffffffffffff9, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@bloom_filter={0x1e, 0x5, 0x9, 0x1000, 0x12828, r8, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x4, 0x3, @void, @value, @value=r11}, 0x50) getsockopt(r3, 0x1, 0x942e, &(0x7f00000020c0)=""/46, &(0x7f0000002100)=0x2e) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000002140), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r16, 0xc020f509, &(0x7f0000002180)={r11, 0x8, 0xfffffffffffffff8, 0xc8}) ioctl$PPPIOCNEWUNIT(r17, 0xc004743e, &(0x7f00000021c0)) sendmmsg$sock(r0, &(0x7f0000002200), 0x0, 0x4020040) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r18, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, r19, 0x10, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r20 = openat$cgroup_procs(r3, &(0x7f0000002380)='cgroup.procs\x00', 0x2, 0x0) write(r13, &(0x7f00000023c0)="2248b161cf03064d88e186e9a8cdbcfa05bcdaa236459c1654fb99877158d3", 0x1f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r20, 0xc0709411, &(0x7f0000002400)={{r15, 0xfffffffffffffffe, 0xf, 0xd, 0xf, 0x1c0000000, 0x8000000000000001, 0xba18, 0xfffffff8, 0x81, 0xfffff35c, 0xfffffffffffffffa, 0x7, 0x4}, 0x10, [0x0, 0x0]}) 4m34.623072462s ago: executing program 32 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000480)=0x1b) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x18, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x92fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x8094) 4m34.616044767s ago: executing program 33 (id=642): r0 = socket(0x8, 0x6, 0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x9}, &(0x7f00000000c0)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x10, 0xfffffffffffffff7, 0x400}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x21, 0x3, 0x29ae66f7, 0xffffffff, 0x2242, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x16, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}]}, &(0x7f0000000400)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x2, 0xde}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000880)=[r8], &(0x7f00000008c0)=[{0x1, 0x2, 0x8, 0xb}, {0x5, 0x4, 0xf, 0x5}, {0x5, 0x1, 0x8, 0x3}, {0x3, 0x2, 0x10, 0x4}, {0x1, 0x3, 0xb, 0xb}, {0x1, 0x4, 0xb, 0xc}], 0x10, 0x43}, 0x94) write$cgroup_pid(r3, &(0x7f0000000a00)=0xffffffffffffffff, 0x12) r10 = openat$cgroup_ro(r3, &(0x7f0000000a40)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000c40)={r9, 0x101, 0x9, 0x10}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x8, '\x00', r6, r10, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1f, 0x2, &(0x7f0000000a80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0xa, 0x1, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000b00)=""/143, 0x41000, 0x64, '\x00', r6, @fallback=0xe, r10, 0x8, &(0x7f0000000bc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x5, 0x8, 0x7fff}, 0x10, r7, r11, 0x9, &(0x7f0000000dc0)=[r2, r12, r8, 0xffffffffffffffff, r10, r5, r13, r10, r2, r8], &(0x7f0000000e00)=[{0x4, 0x3, 0xd, 0x4}, {0x0, 0x3, 0x7, 0x6}, {0x1, 0x1, 0x1, 0x5}, {0x4, 0x1, 0x5, 0x5}, {0x5, 0x4, 0x8, 0x3}, {0x5, 0x1, 0xc, 0x8}, {0x5, 0x4, 0x9}, {0x4, 0x5, 0x6, 0x5}, {0x3, 0x5, 0x5, 0x6}], 0x10, 0x5}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000000f80)={0xc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xbb, "09369e67edee8a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001f80)={{r14, 0x3, 0x83, 0x4, 0x10, 0x3, 0xff, 0x2, 0x1cd, 0x9, 0x8, 0x3, 0xfffffffffffffff9, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@bloom_filter={0x1e, 0x5, 0x9, 0x1000, 0x12828, r8, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x4, 0x3, @void, @value, @value=r11}, 0x50) getsockopt(r3, 0x1, 0x942e, &(0x7f00000020c0)=""/46, &(0x7f0000002100)=0x2e) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000002140), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r16, 0xc020f509, &(0x7f0000002180)={r11, 0x8, 0xfffffffffffffff8, 0xc8}) ioctl$PPPIOCNEWUNIT(r17, 0xc004743e, &(0x7f00000021c0)) sendmmsg$sock(r0, &(0x7f0000002200), 0x0, 0x4020040) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$net_dm(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r18, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, r19, 0x10, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r20 = openat$cgroup_procs(r3, &(0x7f0000002380)='cgroup.procs\x00', 0x2, 0x0) write(r13, &(0x7f00000023c0)="2248b161cf03064d88e186e9a8cdbcfa05bcdaa236459c1654fb99877158d3", 0x1f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r20, 0xc0709411, &(0x7f0000002400)={{r15, 0xfffffffffffffffe, 0xf, 0xd, 0xf, 0x1c0000000, 0x8000000000000001, 0xba18, 0xfffffff8, 0x81, 0xfffff35c, 0xfffffffffffffffa, 0x7, 0x4}, 0x10, [0x0, 0x0]}) 13.362212115s ago: executing program 3 (id=2959): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x12, 0x0, &(0x7f0000000440)="f4b84de4115d64244a0e839e88a80f81fb90", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000340), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r1, r3}) socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f00000027c0)="f49a8b0035bfa6eff24d1e567ee446cfd78d0e6c0f0408a5e1f78558ee550e85e8f206dd6235787feb5a13c5142461a33991ccf3c03289acfe618054f27040e892d4aeabb8babbca40e172d9e64225320b271bf7971b3c0974c1bf3e71de52988c16a06211d668c0794b477fb474c757e3a817de415cd8700eca28e5f450ee4b588d8d87cf20a0303eb200b63860a9c193fe4e94ee936c696045b8dbbd3fd1c2d06c96cc8921edf309d6d6a48033d23cfeb962cff902b856d95048d92614d73012818054ea2174f88344b0741acec84982cce2a462b0979e0327464524c5b04da6ee7fd95e8c4eff8f2451d60071dc12d2659ffbf132c6ee6d307d88cdd61878679f684ee73f55c58262adde32465f8b5999b9ab8be94bf3c9b3db58ed23fc0c29ea8a3d995361f7c5651afb63d28d421ee431e2499d21ea951eb8a799ab0a101e562b69e2d7f8151af7bbad955769b2207a69b05c858d3729cd0b76df5559ab3d9e4f4364c4e88c2ea77e08e52dfd9a147031d56af969ddf4ff155952cee41e44c2eda9860052d404de35267813c2534b3a7f06504be81322c46185771f5126d34ec2140b9189c6b39b590beb7d93e716d8a42aa091fab2974c5c968eafa4563483cda91458f960cdc7db1dfee5e39ba7d948b5eb4c04baeef3bacf6b56adf723a82bb6c08448d0b30e2102cb85811fd509060e9b51b91b1ff79264c6d06564c8cd4ef6d310d5960afcdd3aee838e212145a5c1c8bdc9866b7ea4d128e102e9835dca05b70cf34ad42db9d4e4939a9f1f698eeb21e0834fe6e0fc09a5212517202017165e3f8432ddcbdeb547f984a1a7f5798b764c1064426caf79e284975e4dab7b9f6f0375", 0x267) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003fc0)={0x6, 0xf, &(0x7f0000002d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 12.149081709s ago: executing program 3 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09016b729ac10000f18e07ffcf29fc2281616f010000000008", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000037c00000400f6000c0001800600060086dd"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 11.972243792s ago: executing program 3 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x27dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x14, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084732598c) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x27dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x14, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084732598c) (async) 11.784173012s ago: executing program 3 (id=2975): r0 = socket(0xa, 0x3, 0x3a) (async) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) connect$can_j1939(r3, &(0x7f0000000200)={0x1d, r4, 0xfffffffffffffffd, {0x0, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r4, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) 11.254590262s ago: executing program 2 (id=2978): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x110, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "d128be47491207a500026fa0e16dde76bb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffee9, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.250716035s ago: executing program 3 (id=2979): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x3c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}, @srh={0x0, 0x0, 0x4, 0x0, 0x5, 0x20, 0x5}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 10.958129433s ago: executing program 3 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x0, 0xffffffffffffffff, 0x80}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000800000850000000f00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) 5.171338889s ago: executing program 2 (id=3000): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x50, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x23}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x4}]}, 0x50}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x4, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x8d0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000000080), 0x2, 0x0) sendfile(r12, r12, 0x0, 0x200) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000100000000000800010000000000", 0x24) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6f1b16f710000d0429bd7000000000000000dd39dff25365f17f300000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c00028008001a00004c8b5547bf41f60d0d57000000060002000100000008000100040000000b0035006d6163766c616e300400000000000000eb84455efd6c55ce122520acd3149e456cbd342d662181e1d7d61577e83460c4dc5e97d898adfefd15d68300ec9f9c26ee11c24e397c410771b6a78f9b6f1c6eef34a3303a9806f606a71953aed6a922de4aef3521f9bf0a719379835cbc9faa7e422d197decd5da"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) 4.779964985s ago: executing program 2 (id=3003): setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0x100000000000000a, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x8, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet6(0xa, 0x8000e, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xbb}, [@func={0x85, 0x0, 0x1, 0x0, 0x8000002}, @call={0x85, 0x0, 0x0, 0x53}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$inet6(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xa4) bind$ax25(r5, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000140)={0x5, 0x6, 0x3, 0x8, 0x5, 0x35, 0x2, 0x7, 0x9, 0x3, 0x81, 0xd4, 0x2, 0xf7}, 0xe) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x14, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4040858) 4.581254097s ago: executing program 2 (id=3005): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@default, @netrom, @remote, @rose, @null, @netrom, @netrom, @rose]}, &(0x7f0000000080)=0x48) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0x7, 0x1}) socket$netlink(0x10, 0x3, 0x0) 4.337194081s ago: executing program 2 (id=3008): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private2, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) close(0x3) ppoll(&(0x7f0000000040)=[{r0, 0x112}, {r0, 0x200}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 4.18329421s ago: executing program 2 (id=3009): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) unshare(0x62040200) (async) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001900), 0x0, 0x10) recvmmsg(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/61, 0x3d}, {&(0x7f0000000e00)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x10000, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRES16, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32, @ANYBLOB="0a5d6cf53f021100000100"], 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbcb25050000000c0006000900000800000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4000885}, 0x80) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.992454622s ago: executing program 6 (id=3011): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) listen(r1, 0xffffffff) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "05150171", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x60, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000980)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/186, 0xba, 0x0, &(0x7f0000000900)=""/113, 0x71}, &(0x7f00000009c0)=0x40) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c07000002030101000000020000f6ffffff00020800010000000011"], 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getsadinfo={0x4c, 0x23, 0x800, 0x70bd27, 0x25dfdbfe, 0x0, [@encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e20, @in=@multicast2}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e24, 0x4e23, @in6=@private0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge_slave_1\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0xe, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffef7}}, @TCA_STAB={0x9a83c187102aa54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="40010000", @ANYRES16=r9, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r12 = accept$netrom(r7, &(0x7f00000006c0)={{0x3, @null}, [@remote, @null, @remote, @default, @remote, @bcast, @netrom, @null]}, &(0x7f0000000740)=0x48) ioctl$sock_netrom_SIOCADDRT(r12, 0x890b, &(0x7f00000007c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.89984797s ago: executing program 4 (id=3012): r0 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r3], 0x40}}, 0x51) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000440)="693d02495f257b1dc805c9d31620925b6e039b1f2925136b4a7051fdbeae6f90ddb943218ba1992ecce3ab8fcd2bccc3c0fb6d1b", &(0x7f0000000480)=@buf="7e5e03f4a4a691588ce02e6fe62133", 0x1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYRESHEX=r0, @ANYRES32=r10, @ANYBLOB="0900050006000000c3182a827ad8bec3d00a0018000303030303120000"], 0x30}}, 0x91) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r12, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000280)="67b9da118da0ff254aa50826451c369d75c3e6048757f7e8c55579bda7b0e03bba35f21c8763fb54889027eaa358d00755cba26b562cc2b6cb3dc25e6ea7d2759c4aaee5a0e44fdf2193b2f34404e36f977c495fa31f5e267c82265458c2b64faf6c2a659e8ccc333ce2bdb29531ea89f65e6db2a810c3da40b4bf236c2a48faab1435fc7c13b4ae00d06741044acf61b47be78a8c08189733063a0bc91bd2088437d30976a59e8a8a5c2a643b52963483516243edd870a7b3d175089c6337122acccbb0c46c801aa12654b5b7e5acdd42b8fb65969544256d219208280f1abed29eeb5fdc8e5cf71088058d", &(0x7f0000000180)=@udp6, 0x1}, 0x20) 3.767306774s ago: executing program 6 (id=3014): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x1953, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x3d}, @timestamp, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x2}, @sack_perm], 0x8) sendto$inet(r3, &(0x7f0000000380)='%', 0x1, 0x4000041, 0x0, 0x0) sendto$inet(r3, &(0x7f00000001c0)="7cfe", 0x2, 0x91, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r3, &(0x7f0000000300)='<', 0x1, 0x805, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) ioctl$sock_bt_hci(r5, 0x400448e3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x34, r8, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 3.585268678s ago: executing program 4 (id=3016): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'veth1_virt_wifi\x00', 0x2}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000740)=ANY=[@ANYBLOB="ffffffff000000002a52c0aae8c4d2767ad8890a68e3f727ca7e62af39752c6ac27f6c80", @ANYRES16=r3, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e000000000000000000080003000000000a"], 0x34}}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a008847bbbbbbbbbbbbbbbbbbbbbbbb88a83d0081004c0086dd6d101b01000811ff00000000000000000000100000000000ff020000000000000d000000000000014f194e2000089078"], 0x4a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a00000001000ffff27bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a45508e686211a17800128009000100766c616e000000006800028006000100040000000c000200010000001d000000340003800c000100ed00000001f8ffff0c000100000400003d0f00000c000100fbffffff070000000c00010000000034e69430361c0004800c08010003000000000001000c000100090000000000000008000500", @ANYRES32=r5], 0xa0}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000ca41dc281294879c4c1b34de1810498aebdd79c197de082f1ce1f2c70500"/46, @ANYRES16=r10, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=0x0, @ANYRESOCT=r8, @ANYRES8=r9, @ANYRES64, @ANYRES32=0x0], 0x1c}}, 0x4044080) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x200080d1}, 0x10) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) r12 = socket$packet(0x11, 0x2, 0x300) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="72e8f8362119b2bc6043bf0f873a9fbf20c5fbbccdb283671e0c92ec872935e470e7e659a31d7222ff2639488d181e45b2e33ab8ab2def51e9b6f6117262a3aba17537fa859c1d9daad3c40b2b9469d801abc625f195633a3dacc2a1417aeb5ecf4df19908ed64"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x15}, 0x23f58e5b666a3f06) (async) r14 = socket(0x10, 0x3, 0x0) (async) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 3.508058851s ago: executing program 6 (id=3017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) unshare(0x22020600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) recvmmsg$unix(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000180)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0xfffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @struct]}}, &(0x7f00000009c0)=""/4096, 0x3a, 0x1000, 0x1}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88ad55ad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x2d}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x24, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x14800) unshare(0xd00) 3.24072041s ago: executing program 4 (id=3019): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.078287064s ago: executing program 4 (id=3021): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000240)={{r1}, 0x2, &(0x7f0000000100)=[0x6, 0x10000], 0x0, 0x2}) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7}}}, 0x24}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x0, @any, 0x7ff}, 0xe) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000200)) (async) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) (async) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @remote, 0x2c0}, 0x1c) 2.990980793s ago: executing program 5 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 2.879909471s ago: executing program 4 (id=3023): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000000)=0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0xd3, 0x3, 0x81, 0x4}, 0x8) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r3, 0x9a7c}, &(0x7f00000001c0)=0x8) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000240)={0x2a, 0x4, 0x7fff}, 0xc) 2.732025453s ago: executing program 5 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xd7, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 2.528215396s ago: executing program 6 (id=3025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) unshare(0x20040400) r1 = socket(0x1e, 0x5, 0x800) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 2.403683492s ago: executing program 5 (id=3026): r0 = socket(0xa, 0x5, 0x5) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xaba2}}], 0x30, 0x4855}, 0x24000052) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r2 = socket(0x8, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000600)=0x50d, 0x4) listen(r3, 0xffffffff) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000400)) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) r5 = socket(0x2, 0x80802, 0x0) getsockopt$inet_opts(r5, 0x0, 0xf, &(0x7f0000001080)=""/3, &(0x7f0000000100)=0x3) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x100}, @in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x934d}], 0x38) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2104000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=@newqdisc={0x2b8, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0xffe0, 0xc}, {0xfff5, 0x11}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0xf3, 0x2, 0x8, 0x0, 0x4, 0x7c00}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xe3c, 0x800, 0x80000004, 0x800}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x3, 0x5, 0x0, 0x9dcf}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x2e, 0xa, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb662fc32ba8420b}]}}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xf0, 0xa, 0x4, 0x1, 0x9, 0xfffffffe, 0x4}}, {0xc, 0x2, [0xfffc, 0x2, 0x100, 0x2]}}, {{0x1c, 0x1, {0x1, 0x0, 0xa, 0x1, 0x0, 0xffffffff, 0xfff, 0x4}}, {0xc, 0x2, [0x3, 0x6, 0x3, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x35, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @TCA_STAB={0x1ac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x11, 0x3, 0x6, 0x4, 0x0, 0x8, 0xd, 0x8}}, {0x14, 0x2, [0x8, 0x101, 0x7, 0xf801, 0x2, 0x1, 0x6, 0xf]}}, {{0x1c, 0x1, {0x9f, 0x8, 0xd, 0x7fffffff, 0x1, 0x2cd, 0x0, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x2, 0x0, 0x4, 0x3ff, 0x0, 0x5, 0x6, 0x3}}, {0xa, 0x2, [0x338, 0x1, 0x9]}}, {{0x1c, 0x1, {0x3, 0x1, 0xd, 0x8, 0x1, 0x6, 0x9, 0x7}}, {0x12, 0x2, [0x1, 0x2, 0x2, 0x8, 0x9, 0x2, 0x1000]}}, {{0x1c, 0x1, {0x2, 0x4, 0x0, 0x0, 0x2, 0x5, 0x22, 0x3}}, {0xa, 0x2, [0x3, 0x5, 0x6]}}, {{0x1c, 0x1, {0xff, 0x8, 0x7, 0xc, 0x2, 0x5, 0xf786, 0x4}}, {0xc, 0x2, [0x1, 0x6, 0xfff7, 0x9]}}, {{0x1c, 0x1, {0xbf, 0x6, 0xa954, 0xffffffff, 0x2, 0x7fffffff, 0x4, 0x8}}, {0x14, 0x2, [0x2c1f, 0x3, 0x0, 0x6, 0x7, 0x0, 0x9, 0x6]}}, {{0x1c, 0x1, {0x3, 0x8, 0x518, 0xe2d, 0x1, 0xb69, 0x56a, 0x7}}, {0x12, 0x2, [0x92, 0xfff, 0xfff, 0x1000, 0xde, 0x81, 0x6]}}, {{0x1c, 0x1, {0xf3, 0x10, 0xa30, 0x2, 0x2, 0x5c8, 0x9, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0x2, 0x8, 0x10001, 0x2, 0x0, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0x2, 0x6, 0x5]}}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x8040}, 0x90) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x350, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4658e18b}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa534}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff34}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29ce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc00}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffba0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x178}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa39}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23d}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6ce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d3a}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x654e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x61f0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x3, 0x6}, {0x4, 0x10}}}, 0xfffffc96}, 0x1, 0x0, 0x0, 0x20000895}, 0x880) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) 2.212877005s ago: executing program 5 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x44, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.910310254s ago: executing program 5 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f00000000c0)="b3348e3c288c0164d39a411a64bdc83a164adeb6a3a02b18c418a3222679c5012510b2697e22ee28aed05f5e871128bab75f90bd200d77e1422309b979d66d6e6f55aeaa6c0e8517b186825feed2ad443cbab8256bd80ffab69d92909f2cc895d6ca36067197663302b9660d4b4880bbb8c87c0ccd4a58abfd86756c0452bd58dfbf2490cc31943d1367b7288c0ad53ed2"}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(r1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r10, 0x8935, &(0x7f0000000400)={'batadv0\x00'}) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "96bdb3"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) shutdown(r11, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 974.664954ms ago: executing program 5 (id=3029): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x16, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r2, 0x2f, 0x202c, 0x4}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000900"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, 0x0, &(0x7f0000000100)=r6}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000ffffffff0000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000000000000019000000000000001800"], 0x50) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 493.91437ms ago: executing program 6 (id=3030): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002"], 0xe4}, 0x1, 0x0, 0x0, 0x100}, 0x44000095) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x5452, &(0x7f0000000a00)={'geneve1\x00', @remote}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0xfffffc56, 0x0}, 0x2) close(r5) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030000000000000000002812000000000100697036746e6c00001800028014000700000000000000000000000000000000aa"], 0x54}}, 0x0) sendmsg$sock(r4, &(0x7f0000000300)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000080)="4c10a4dd594b0ae67cef271196c47bd1344c981c3785d1edf89ba03f33df2ced4126552775a6cab4beac875acbfb5b012a187063e1", 0x35}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x6bb0}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1008, &(0x7f0000001700)=""/4104, 0x40f00}, 0x94) 314.844968ms ago: executing program 4 (id=3031): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c287, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x0, 0x4}}}}]}, 0x40}}, 0x400c4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r9}, 0xc) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r9}, 0xc) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 0s ago: executing program 6 (id=3032): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, 0x3, 0x0, 0x8, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_address={0x3, 0x6, 0x6c, 0x20, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_nat_t_type={0x1}]}, 0x40}}, 0x4011) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000006cdb5ea4c0b75ab22b3bb021441599dde42c41310d691d9a37793a8ba48f0cbf3efece221222996e08119603ff5ddcb3c74b861aa263e9ab7197665ff8b7a3ee8a752e00a7b8f545aa2c7f"], 0x5c}}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0xfffffffd}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r10, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x4040010) kernel console output (not intermixed with test programs): de number set to 3241522169 [ 338.145761][T14127] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 338.236318][T14126] bond6: option downdelay: invalid value (18446744073709551615) [ 338.244573][T14126] bond6: option downdelay: allowed values 0 - 2147483647 [ 338.258114][T14126] bond6 (unregistering): Released all slaves [ 338.621946][T14139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2076'. [ 338.767506][T14143] FAULT_INJECTION: forcing a failure. [ 338.767506][T14143] name failslab, interval 1, probability 0, space 0, times 1 [ 338.812412][T14143] CPU: 1 UID: 0 PID: 14143 Comm: syz.4.2078 Not tainted syzkaller #0 PREEMPT(full) [ 338.812444][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.812458][T14143] Call Trace: [ 338.812467][T14143] [ 338.812477][T14143] dump_stack_lvl+0x189/0x250 [ 338.812506][T14143] ? __pfx____ratelimit+0x10/0x10 [ 338.812533][T14143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.812556][T14143] ? __pfx__printk+0x10/0x10 [ 338.812586][T14143] ? __pfx___might_resched+0x10/0x10 [ 338.812617][T14143] ? fs_reclaim_acquire+0x7d/0x100 [ 338.812656][T14143] should_fail_ex+0x414/0x560 [ 338.812689][T14143] should_failslab+0xa8/0x100 [ 338.812713][T14143] kmem_cache_alloc_node_noprof+0x77/0x710 [ 338.812745][T14143] ? __alloc_skb+0x112/0x2d0 [ 338.812775][T14143] __alloc_skb+0x112/0x2d0 [ 338.812802][T14143] netlink_sendmsg+0x5c6/0xb30 [ 338.812838][T14143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.812866][T14143] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.812900][T14143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.812921][T14143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.812946][T14143] __sock_sendmsg+0x21c/0x270 [ 338.812983][T14143] __sys_sendto+0x3bd/0x520 [ 338.813009][T14143] ? __pfx___sys_sendto+0x10/0x10 [ 338.813029][T14143] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 338.813074][T14143] ? __fget_files+0x3a0/0x420 [ 338.813108][T14143] ? ksys_write+0x22a/0x250 [ 338.813141][T14143] ? __pfx_ksys_write+0x10/0x10 [ 338.813181][T14143] __x64_sys_sendto+0xde/0x100 [ 338.813209][T14143] do_syscall_64+0xfa/0xfa0 [ 338.813235][T14143] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.813262][T14143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.813284][T14143] ? clear_bhb_loop+0x60/0xb0 [ 338.813311][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.813333][T14143] RIP: 0033:0x7fca72190d5c [ 338.813353][T14143] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 338.813371][T14143] RSP: 002b:00007fca72f6dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 338.813395][T14143] RAX: ffffffffffffffda RBX: 00007fca72f6dfc0 RCX: 00007fca72190d5c [ 338.813411][T14143] RDX: 0000000000000024 RSI: 00007fca72f6e010 RDI: 0000000000000003 [ 338.813425][T14143] RBP: 0000000000000000 R08: 00007fca72f6df14 R09: 000000000000000c [ 338.813439][T14143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 338.813452][T14143] R13: 00007fca72f6df68 R14: 00007fca72f6e010 R15: 0000000000000000 [ 338.813488][T14143] [ 339.902052][T14132] lo speed is unknown, defaulting to 1000 [ 339.950372][T14169] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 339.971542][T14169] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2086'. [ 340.146335][T14178] tipc: Enabled bearer , priority 0 [ 340.191185][T14175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2088'. [ 340.202264][T14182] syzkaller0: entered promiscuous mode [ 340.209265][T14180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.216511][T14180] IPv6: NLM_F_CREATE should be set when creating new route [ 340.263204][T14182] syzkaller0: entered allmulticast mode [ 340.298504][T14185] syz_tun: entered allmulticast mode [ 340.311853][T14178] tipc: Resetting bearer [ 340.334878][T14185] dvmrp1: entered allmulticast mode [ 340.359501][T14177] tipc: Resetting bearer [ 340.387436][T14177] tipc: Disabling bearer [ 340.448901][T14192] xt_policy: neither incoming nor outgoing policy selected [ 340.810650][T14185] lo speed is unknown, defaulting to 1000 [ 341.183655][T14184] syz_tun: left allmulticast mode [ 341.194683][T14195] __nla_validate_parse: 2 callbacks suppressed [ 341.194704][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 341.368702][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2099'. [ 341.655454][T14224] lo: entered allmulticast mode [ 341.687465][T14224] lo: left allmulticast mode [ 342.352979][T14256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2107'. [ 342.457256][T14256] syzkaller1: entered promiscuous mode [ 342.470156][T14256] syzkaller1: entered allmulticast mode [ 343.103769][T14267] lo speed is unknown, defaulting to 1000 [ 343.377024][T14298] netlink: 'syz.2.2116': attribute type 11 has an invalid length. [ 343.418571][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 343.437993][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 343.488853][T14308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2118'. [ 343.529898][T14308] 8021q: VLANs not supported on xfrm0 [ 343.700451][T14317] FAULT_INJECTION: forcing a failure. [ 343.700451][T14317] name failslab, interval 1, probability 0, space 0, times 0 [ 343.713725][T14317] CPU: 1 UID: 0 PID: 14317 Comm: syz.4.2122 Not tainted syzkaller #0 PREEMPT(full) [ 343.713753][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.713766][T14317] Call Trace: [ 343.713774][T14317] [ 343.713782][T14317] dump_stack_lvl+0x189/0x250 [ 343.713808][T14317] ? __pfx____ratelimit+0x10/0x10 [ 343.713832][T14317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.713859][T14317] ? __pfx__printk+0x10/0x10 [ 343.713884][T14317] ? __lock_acquire+0xab9/0xd20 [ 343.713912][T14317] should_fail_ex+0x414/0x560 [ 343.713940][T14317] should_failslab+0xa8/0x100 [ 343.713962][T14317] kmem_cache_alloc_noprof+0x74/0x6e0 [ 343.713990][T14317] ? skb_clone+0x212/0x3a0 [ 343.714021][T14317] skb_clone+0x212/0x3a0 [ 343.714050][T14317] __netlink_deliver_tap+0x404/0x850 [ 343.714085][T14317] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.714107][T14317] netlink_deliver_tap+0x19c/0x1b0 [ 343.714130][T14317] netlink_unicast+0x7fa/0x9e0 [ 343.714170][T14317] ? __pfx_netlink_unicast+0x10/0x10 [ 343.714210][T14317] ? netlink_sendmsg+0x642/0xb30 [ 343.714229][T14317] ? skb_put+0x11b/0x210 [ 343.714254][T14317] netlink_sendmsg+0x805/0xb30 [ 343.714285][T14317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.714311][T14317] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.714340][T14317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.714359][T14317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.714400][T14317] __sock_sendmsg+0x21c/0x270 [ 343.714435][T14317] __sys_sendto+0x3bd/0x520 [ 343.714461][T14317] ? __pfx___sys_sendto+0x10/0x10 [ 343.714480][T14317] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 343.714528][T14317] ? __fget_files+0x3a0/0x420 [ 343.714560][T14317] ? ksys_write+0x22a/0x250 [ 343.714592][T14317] ? __pfx_ksys_write+0x10/0x10 [ 343.714626][T14317] __x64_sys_sendto+0xde/0x100 [ 343.714653][T14317] do_syscall_64+0xfa/0xfa0 [ 343.714677][T14317] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.714702][T14317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.714723][T14317] ? clear_bhb_loop+0x60/0xb0 [ 343.714749][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.714770][T14317] RIP: 0033:0x7fca72190d5c [ 343.714789][T14317] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 343.714808][T14317] RSP: 002b:00007fca72f6dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 343.714830][T14317] RAX: ffffffffffffffda RBX: 00007fca72f6dfc0 RCX: 00007fca72190d5c [ 343.714846][T14317] RDX: 0000000000000024 RSI: 00007fca72f6e010 RDI: 0000000000000003 [ 343.714859][T14317] RBP: 0000000000000000 R08: 00007fca72f6df14 R09: 000000000000000c [ 343.714872][T14317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 343.714884][T14317] R13: 00007fca72f6df68 R14: 00007fca72f6e010 R15: 0000000000000000 [ 343.714919][T14317] [ 344.074660][T14323] netlink: 'syz.2.2124': attribute type 2 has an invalid length. [ 344.199304][T14327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2124'. [ 344.423813][T14327] netlink: 'syz.2.2124': attribute type 12 has an invalid length. [ 344.457570][T14327] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2124'. [ 344.877540][T14325] lo speed is unknown, defaulting to 1000 [ 345.093850][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2129'. [ 345.164655][T14347] netlink: 'syz.3.2129': attribute type 4 has an invalid length. [ 345.341632][T14341] lo speed is unknown, defaulting to 1000 [ 345.454769][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 345.872062][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.900448][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.934953][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.955390][T14353] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 345.990994][T14387] netlink: 'syz.2.2143': attribute type 21 has an invalid length. [ 346.055705][T14353] infiniband sy‹1: RDMA CMA: cma_listen_on_dev, error -98 [ 346.123444][T14390] nbd: must specify at least one socket [ 346.226606][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.245650][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.258397][T14392] netlink: 'syz.4.2144': attribute type 1 has an invalid length. [ 346.276047][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.287590][T14392] __nla_validate_parse: 1 callbacks suppressed [ 346.287610][T14392] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2144'. [ 346.315598][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.339939][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.358920][T14353] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.623535][T14407] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 346.891322][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2155'. [ 346.910705][T14421] syzkaller0: entered promiscuous mode [ 346.924467][T14421] syzkaller0: entered allmulticast mode [ 347.034683][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2156'. [ 347.075071][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2156'. [ 347.092529][T10814] wlan1: Trigger new scan to find an IBSS to join [ 347.112668][T14429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.195420][T14422] lo speed is unknown, defaulting to 1000 [ 347.240883][T14434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2157'. [ 347.530353][T14422] ªªªªª speed is unknown, defaulting to 1000 [ 347.959380][T14445] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2159'. [ 348.043621][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2162'. [ 348.244589][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 348.312665][T14466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 348.782578][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2166'. [ 349.464044][T14502] siw: device registration error -23 [ 349.526403][T14507] netlink: 'syz.5.2174': attribute type 28 has an invalid length. [ 349.565294][T14507] netlink: 'syz.5.2174': attribute type 1 has an invalid length. [ 349.805433][T14509] bond6: (slave bridge5): making interface the new active one [ 349.832795][T14509] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 349.945831][T14519] bond6: (slave bridge6): Enslaving as an active interface with a down link [ 350.059757][T10816] wlan1: Trigger new scan to find an IBSS to join [ 350.158345][T14544] netlink: 'syz.5.2181': attribute type 1 has an invalid length. [ 350.189230][T14542] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 350.212123][T14546] netlink: 'syz.6.2182': attribute type 1 has an invalid length. [ 350.382705][T14546] bond7: entered promiscuous mode [ 350.392093][T14546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.471520][T14550] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 350.494167][T14550] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 350.549199][T14542] vlan3: entered allmulticast mode [ 350.554533][T14542] bridge0: entered allmulticast mode [ 350.561082][T14542] bond9: (slave vlan3): Opening slave failed [ 350.663051][T14562] bond7: (slave bridge3): making interface the new active one [ 350.670841][T14562] bridge3: entered promiscuous mode [ 350.682834][T14562] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 350.724532][T14577] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 351.100703][T14567] lo speed is unknown, defaulting to 1000 [ 351.468317][T14567] ªªªªª speed is unknown, defaulting to 1000 [ 351.723842][T14607] lo speed is unknown, defaulting to 1000 [ 352.050559][T14607] ªªªªª speed is unknown, defaulting to 1000 [ 352.220472][T14641] xt_bpf: check failed: parse error [ 352.236879][T14638] team_slave_1: Caught tx_queue_len zero misconfig [ 352.480143][T14654] __nla_validate_parse: 3 callbacks suppressed [ 352.480164][T14654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2204'. [ 352.549157][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 352.972073][T14662] !: renamed from dummy0 (while UP) [ 353.018114][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2210'. [ 353.088436][T10814] wlan1: Trigger new scan to find an IBSS to join [ 353.418536][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 353.475415][T14692] syzkaller0: Caught tx_queue_len zero misconfig [ 353.511126][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 353.534262][T14695] netlink: 'syz.6.2216': attribute type 11 has an invalid length. [ 353.899575][T14662] lo speed is unknown, defaulting to 1000 [ 353.950964][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 353.962864][T14706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2218'. [ 354.048143][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 354.190437][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 354.254751][T14717] batadv_slave_1: left allmulticast mode [ 354.270194][T14717] bridge0: port 1(batadv_slave_1) entered disabled state [ 354.500357][T14662] ªªªªª speed is unknown, defaulting to 1000 [ 354.506699][T14682] lo speed is unknown, defaulting to 1000 [ 354.525067][T14727] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 354.598283][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'. [ 354.626900][T14724] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 354.995243][T14682] ªªªªª speed is unknown, defaulting to 1000 [ 355.175395][T14757] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2233'. [ 355.199954][T14760] netlink: 'syz.6.2233': attribute type 3 has an invalid length. [ 355.709034][T14781] block nbd0: Unsupported socket: should be TCP or UNIX. [ 355.717071][T14781] block nbd0: shutting down sockets [ 356.033925][T14796] netlink: 'syz.2.2242': attribute type 33 has an invalid length. [ 356.056638][T14796] `: renamed from team0 (while UP) [ 357.013664][T14845] syzkaller0: entered promiscuous mode [ 357.021862][T14845] syzkaller0: entered allmulticast mode [ 358.392963][T14832] __nla_validate_parse: 8 callbacks suppressed [ 358.392986][T14832] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2250'. [ 358.577299][T14869] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.2260'. [ 358.602942][T14869] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 358.740308][T14879] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2262'. [ 358.917617][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 358.949688][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 358.980743][T14904] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2267'. [ 358.988081][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 359.000012][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 359.016743][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 359.036206][T14892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 359.156512][T14907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.163827][T14907] IPv6: NLM_F_CREATE should be set when creating new route [ 359.354614][T14917] xt_hashlimit: size too large, truncated to 1048576 [ 359.406751][T14917] syz.2.2273: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 359.428200][T14917] CPU: 0 UID: 0 PID: 14917 Comm: syz.2.2273 Not tainted syzkaller #0 PREEMPT(full) [ 359.428230][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.428244][T14917] Call Trace: [ 359.428252][T14917] [ 359.428261][T14917] dump_stack_lvl+0x189/0x250 [ 359.428293][T14917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.428316][T14917] ? __pfx__printk+0x10/0x10 [ 359.428338][T14917] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 359.428368][T14917] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 359.428401][T14917] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 359.428434][T14917] warn_alloc+0x214/0x310 [ 359.428473][T14917] ? __pfx_warn_alloc+0x10/0x10 [ 359.428515][T14917] ? __get_vm_area_node+0x28f/0x300 [ 359.428545][T14917] ? htable_create+0x101/0x7a0 [ 359.428579][T14917] __vmalloc_node_range_noprof+0x690/0x12d0 [ 359.428635][T14917] ? alloc_pages_mpol+0x3cd/0x4a0 [ 359.428672][T14917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 359.428716][T14917] ? rcu_is_watching+0x15/0xb0 [ 359.428740][T14917] ? htable_create+0x101/0x7a0 [ 359.428768][T14917] __kvmalloc_node_noprof+0x674/0x910 [ 359.428800][T14917] ? htable_create+0x101/0x7a0 [ 359.428825][T14917] ? hashlimit_pernet+0x23/0x240 [ 359.428853][T14917] ? hashlimit_pernet+0x23/0x240 [ 359.428879][T14917] ? hashlimit_pernet+0x23/0x240 [ 359.428913][T14917] htable_create+0x101/0x7a0 [ 359.428947][T14917] hashlimit_mt_check_common+0x719/0xa10 [ 359.428986][T14917] xt_check_match+0x3ce/0xab0 [ 359.429020][T14917] ? __pfx_xt_check_match+0x10/0x10 [ 359.429050][T14917] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 359.429091][T14917] ? xt_find_match+0x1f7/0x250 [ 359.429124][T14917] translate_table+0x1553/0x2040 [ 359.429184][T14917] ? __pfx_translate_table+0x10/0x10 [ 359.429215][T14917] ? __might_fault+0xb0/0x130 [ 359.429259][T14917] ? _copy_from_user+0x94/0xb0 [ 359.429280][T14917] do_ip6t_set_ctl+0x970/0xce0 [ 359.429307][T14917] ? rcu_is_watching+0x15/0xb0 [ 359.429326][T14917] ? trace_contention_end+0x39/0x120 [ 359.429347][T14917] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 359.429391][T14917] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 359.429419][T14917] ? file_init_path+0x3b/0x590 [ 359.429442][T14917] ? __lock_acquire+0xab9/0xd20 [ 359.429462][T14917] nf_setsockopt+0x26f/0x290 [ 359.429490][T14917] rawv6_setsockopt+0x23b/0x5b0 [ 359.429519][T14917] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 359.429544][T14917] ? aa_sock_opt_perm+0xff/0x1b0 [ 359.429569][T14917] ? sock_common_setsockopt+0x36/0xc0 [ 359.429595][T14917] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 359.429623][T14917] do_sock_setsockopt+0x179/0x1b0 [ 359.429645][T14917] __x64_sys_setsockopt+0x13f/0x1b0 [ 359.429669][T14917] do_syscall_64+0xfa/0xfa0 [ 359.429696][T14917] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.429717][T14917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.429733][T14917] ? clear_bhb_loop+0x60/0xb0 [ 359.429754][T14917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.429770][T14917] RIP: 0033:0x7faafdd8eec9 [ 359.429786][T14917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.429800][T14917] RSP: 002b:00007faafec12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 359.429818][T14917] RAX: ffffffffffffffda RBX: 00007faafdfe5fa0 RCX: 00007faafdd8eec9 [ 359.429830][T14917] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 359.429841][T14917] RBP: 00007faafde11f91 R08: 0000000000000588 R09: 0000000000000000 [ 359.429851][T14917] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 359.429862][T14917] R13: 00007faafdfe6038 R14: 00007faafdfe5fa0 R15: 00007ffcdcc038d8 [ 359.429889][T14917] [ 359.457993][T14917] Mem-Info: [ 359.798236][T14917] active_anon:6737 inactive_anon:0 isolated_anon:0 [ 359.798236][T14917] active_file:3337 inactive_file:39992 isolated_file:0 [ 359.798236][T14917] unevictable:768 dirty:114 writeback:0 [ 359.798236][T14917] slab_reclaimable:13086 slab_unreclaimable:185465 [ 359.798236][T14917] mapped:35322 shmem:3406 pagetables:1129 [ 359.798236][T14917] sec_pagetables:0 bounce:0 [ 359.798236][T14917] kernel_misc_reclaimable:0 [ 359.798236][T14917] free:1237260 free_pcp:12534 free_cma:0 [ 359.850748][T14917] Node 0 active_anon:26948kB inactive_anon:0kB active_file:13348kB inactive_file:159768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141288kB dirty:452kB writeback:0kB shmem:12088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14216kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 359.871629][T14923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.884653][T14917] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 359.892945][T14923] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.920870][T14917] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.956899][T14917] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 359.963120][T14917] Node 0 DMA32 free:1036672kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26948kB inactive_anon:0kB active_file:13348kB inactive_file:159768kB unevictable:1536kB writepending:452kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:37076kB local_pcp:18136kB free_cma:0kB [ 360.000177][T14923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.016655][T14917] lowmem_reserve[]: 0 0 1 1 1 [ 360.026503][T14917] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.056608][T14917] lowmem_reserve[]: 0 0 0 0 0 [ 360.061692][T14917] Node 1 Normal free:3897008kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12884kB local_pcp:5604kB free_cma:0kB [ 360.127985][T14917] lowmem_reserve[]: 0 0 0 0 0 [ 360.132789][T14917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 360.157869][T14917] Node 0 DMA32: 1903*4kB (UME) 1084*8kB (UME) 458*16kB (UME) 585*32kB (UME) 160*64kB (UME) 80*128kB (UME) 43*256kB (UME) 15*512kB (UM) 16*1024kB (UME) 7*2048kB (UME) 227*4096kB (UM) = 1042012kB [ 360.191032][T14917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.214915][T14917] Node 1 Normal: 180*4kB (UME) 48*8kB (UME) 36*16kB (UME) 161*32kB (UME) 50*64kB (UME) 11*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3897008kB [ 360.235201][T14917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.276312][T14917] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 360.286027][T14917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.297775][T14917] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 360.307452][T14917] 44723 total pagecache pages [ 360.316477][T14917] 0 pages in swap cache [ 360.322638][T14917] Free swap = 124996kB [ 360.326846][T14917] Total swap = 124996kB [ 360.332011][T14917] 2097051 pages RAM [ 360.339058][T14917] 0 pages HighMem/MovableOnly [ 360.343956][T14917] 424543 pages reserved [ 360.350009][T14917] 0 pages cma reserved [ 360.499213][T14947] nbd: couldn't find device at index 0 [ 361.541204][T14984] tipc: Enabling of bearer rejected, already enabled [ 361.666875][T14984] tipc: Resetting bearer [ 361.776642][T14998] netlink: 'syz.3.2298': attribute type 3 has an invalid length. [ 361.838827][T15003] Unsupported ieee802154 address type: 0 [ 361.846367][T15002] Unsupported ieee802154 address type: 0 [ 362.856997][T15077] xt_TCPMSS: Only works on TCP SYN packets [ 363.214973][T15090] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 363.476460][T15094] geneve0: entered promiscuous mode [ 363.485023][T15094] macvtap1: entered promiscuous mode [ 363.490753][T15094] team0: entered promiscuous mode [ 363.497051][T15094] macvtap1: entered allmulticast mode [ 363.503231][T15094] team0: entered allmulticast mode [ 363.510359][T15094] geneve0: entered allmulticast mode [ 363.522344][T15094] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 363.546413][T15094] team0: left allmulticast mode [ 363.559094][T15094] geneve0: left allmulticast mode [ 363.570494][T15094] team0: left promiscuous mode [ 363.583066][T15094] geneve0: left promiscuous mode [ 363.826500][T15079] lo speed is unknown, defaulting to 1000 [ 364.103721][T15119] __nla_validate_parse: 135 callbacks suppressed [ 364.103743][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2328'. [ 364.272535][T15126] xt_NFQUEUE: number of queues (1024) out of range (got 66558) [ 364.333443][T15123] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2327'. [ 364.547341][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2330'. [ 364.951203][T15079] ªªªªª speed is unknown, defaulting to 1000 [ 365.758406][T15183] syzkaller0: entered promiscuous mode [ 365.771879][T15183] syzkaller0: entered allmulticast mode [ 365.816902][T15186] netlink: 'syz.6.2345': attribute type 16 has an invalid length. [ 365.845036][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 365.855269][T15186] netlink: 'syz.6.2345': attribute type 17 has an invalid length. [ 365.931022][T15189] tap0: tun_chr_ioctl cmd 1074025673 [ 366.168247][T15199] C: renamed from team_slave_0 [ 366.179638][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.200197][T15199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2347'. [ 366.238292][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.257513][T15214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2351'. [ 366.272047][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.280534][T15199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2347'. [ 366.293269][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2351'. [ 366.297218][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.319213][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.327095][T15199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2347'. [ 366.336568][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.384606][ T1098] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.400335][ T1098] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.419929][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.429459][T15199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2347'. [ 366.448609][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.498595][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.506377][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.545807][ T1098] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.556297][ T1098] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.582349][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.591039][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.677442][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.688225][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.724154][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.740242][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.771290][T15240] x_tables: unsorted entry at hook 2 [ 366.854097][T15199] validate_nla: 2 callbacks suppressed [ 366.854116][T15199] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 366.867890][T15199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.952101][T15249] FAULT_INJECTION: forcing a failure. [ 366.952101][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 366.988470][T15249] CPU: 1 UID: 0 PID: 15249 Comm: syz.3.2361 Not tainted syzkaller #0 PREEMPT(full) [ 366.988499][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.988517][T15249] Call Trace: [ 366.988525][T15249] [ 366.988535][T15249] dump_stack_lvl+0x189/0x250 [ 366.988562][T15249] ? __pfx____ratelimit+0x10/0x10 [ 366.988588][T15249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.988610][T15249] ? __pfx__printk+0x10/0x10 [ 366.988638][T15249] ? __pfx___might_resched+0x10/0x10 [ 366.988659][T15249] ? fs_reclaim_acquire+0x7d/0x100 [ 366.988695][T15249] should_fail_ex+0x414/0x560 [ 366.988725][T15249] should_failslab+0xa8/0x100 [ 366.988748][T15249] __kmalloc_noprof+0xcb/0x7f0 [ 366.988775][T15249] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 366.988805][T15249] ? rcu_is_watching+0x15/0xb0 [ 366.988833][T15249] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 366.988871][T15249] genl_family_rcv_msg_doit+0xb8/0x300 [ 366.988908][T15249] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 366.988942][T15249] ? __pfx_genl_get_cmd+0x10/0x10 [ 366.988994][T15249] genl_rcv_msg+0x60e/0x790 [ 366.989029][T15249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.989058][T15249] ? __pfx_ctrl_getfamily+0x10/0x10 [ 366.989086][T15249] ? __asan_memcpy+0x40/0x70 [ 366.989111][T15249] ? __pfx_ref_tracker_free+0x10/0x10 [ 366.989148][T15249] netlink_rcv_skb+0x205/0x470 [ 366.989167][T15249] ? __lock_acquire+0xab9/0xd20 [ 366.989188][T15249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.989218][T15249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.989262][T15249] ? down_read+0x1ad/0x2e0 [ 366.989295][T15249] genl_rcv+0x28/0x40 [ 366.989321][T15249] netlink_unicast+0x82f/0x9e0 [ 366.989364][T15249] ? __pfx_netlink_unicast+0x10/0x10 [ 366.989399][T15249] ? netlink_sendmsg+0x642/0xb30 [ 366.989419][T15249] ? skb_put+0x11b/0x210 [ 366.989446][T15249] netlink_sendmsg+0x805/0xb30 [ 366.989479][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.989507][T15249] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.989538][T15249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.989558][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.989582][T15249] __sock_sendmsg+0x21c/0x270 [ 366.989634][T15249] __sys_sendto+0x3bd/0x520 [ 366.989659][T15249] ? __pfx___sys_sendto+0x10/0x10 [ 366.989677][T15249] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 366.989720][T15249] ? __fget_files+0x3a0/0x420 [ 366.989752][T15249] ? ksys_write+0x22a/0x250 [ 366.989785][T15249] ? __pfx_ksys_write+0x10/0x10 [ 366.989818][T15249] __x64_sys_sendto+0xde/0x100 [ 366.989845][T15249] do_syscall_64+0xfa/0xfa0 [ 366.989871][T15249] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.989897][T15249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.989919][T15249] ? clear_bhb_loop+0x60/0xb0 [ 366.989946][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.989985][T15249] RIP: 0033:0x7eff22990d5c [ 366.990006][T15249] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 366.990024][T15249] RSP: 002b:00007eff23871ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 366.990048][T15249] RAX: ffffffffffffffda RBX: 00007eff23871fc0 RCX: 00007eff22990d5c [ 366.990064][T15249] RDX: 0000000000000024 RSI: 00007eff23872010 RDI: 0000000000000003 [ 366.990077][T15249] RBP: 0000000000000000 R08: 00007eff23871f14 R09: 000000000000000c [ 366.990091][T15249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 366.990104][T15249] R13: 00007eff23871f68 R14: 00007eff23872010 R15: 0000000000000000 [ 366.990142][T15249] [ 367.349088][T15247] xt_CT: No such helper "syz1" [ 367.406049][T15247] xt_TCPMSS: Only works on TCP SYN packets [ 367.836460][T15285] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 367.938615][T15293] IPv6: Can't replace route, no match found [ 368.046973][T15296] FAULT_INJECTION: forcing a failure. [ 368.046973][T15296] name failslab, interval 1, probability 0, space 0, times 0 [ 368.078097][T15296] CPU: 0 UID: 0 PID: 15296 Comm: syz.3.2375 Not tainted syzkaller #0 PREEMPT(full) [ 368.078145][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.078158][T15296] Call Trace: [ 368.078166][T15296] [ 368.078175][T15296] dump_stack_lvl+0x189/0x250 [ 368.078203][T15296] ? __pfx____ratelimit+0x10/0x10 [ 368.078229][T15296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.078252][T15296] ? __pfx__printk+0x10/0x10 [ 368.078281][T15296] ? __pfx___might_resched+0x10/0x10 [ 368.078304][T15296] ? fs_reclaim_acquire+0x7d/0x100 [ 368.078343][T15296] should_fail_ex+0x414/0x560 [ 368.078375][T15296] should_failslab+0xa8/0x100 [ 368.078398][T15296] kmem_cache_alloc_node_noprof+0x77/0x710 [ 368.078429][T15296] ? __alloc_skb+0x112/0x2d0 [ 368.078458][T15296] __alloc_skb+0x112/0x2d0 [ 368.078485][T15296] ctrl_getfamily+0x3a1/0x590 [ 368.078516][T15296] ? __pfx_ctrl_getfamily+0x10/0x10 [ 368.078545][T15296] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 368.078586][T15296] genl_family_rcv_msg_doit+0x212/0x300 [ 368.078631][T15296] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 368.078688][T15296] genl_rcv_msg+0x60e/0x790 [ 368.078725][T15296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.078752][T15296] ? __pfx_ctrl_getfamily+0x10/0x10 [ 368.078781][T15296] ? __asan_memcpy+0x40/0x70 [ 368.078808][T15296] ? __pfx_ref_tracker_free+0x10/0x10 [ 368.078846][T15296] netlink_rcv_skb+0x205/0x470 [ 368.078866][T15296] ? __lock_acquire+0xab9/0xd20 [ 368.078888][T15296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.078919][T15296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.078964][T15296] ? down_read+0x1ad/0x2e0 [ 368.078996][T15296] genl_rcv+0x28/0x40 [ 368.079022][T15296] netlink_unicast+0x82f/0x9e0 [ 368.079070][T15296] ? __pfx_netlink_unicast+0x10/0x10 [ 368.079105][T15296] ? netlink_sendmsg+0x642/0xb30 [ 368.079126][T15296] ? skb_put+0x11b/0x210 [ 368.079165][T15296] netlink_sendmsg+0x805/0xb30 [ 368.079197][T15296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.079242][T15296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 368.079274][T15296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.079295][T15296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.079319][T15296] __sock_sendmsg+0x21c/0x270 [ 368.079354][T15296] __sys_sendto+0x3bd/0x520 [ 368.079380][T15296] ? __pfx___sys_sendto+0x10/0x10 [ 368.079399][T15296] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 368.079453][T15296] ? __fget_files+0x3a0/0x420 [ 368.079484][T15296] ? ksys_write+0x22a/0x250 [ 368.079515][T15296] ? __pfx_ksys_write+0x10/0x10 [ 368.079547][T15296] __x64_sys_sendto+0xde/0x100 [ 368.079573][T15296] do_syscall_64+0xfa/0xfa0 [ 368.079618][T15296] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.079644][T15296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.079666][T15296] ? clear_bhb_loop+0x60/0xb0 [ 368.079693][T15296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.079714][T15296] RIP: 0033:0x7eff22990d5c [ 368.079733][T15296] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 368.079751][T15296] RSP: 002b:00007eff23871ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 368.079774][T15296] RAX: ffffffffffffffda RBX: 00007eff23871fc0 RCX: 00007eff22990d5c [ 368.079790][T15296] RDX: 0000000000000024 RSI: 00007eff23872010 RDI: 0000000000000003 [ 368.079803][T15296] RBP: 0000000000000000 R08: 00007eff23871f14 R09: 000000000000000c [ 368.079818][T15296] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 368.079830][T15296] R13: 00007eff23871f68 R14: 00007eff23872010 R15: 0000000000000000 [ 368.079867][T15296] [ 368.576720][T15298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.613149][T15298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 368.664041][T15305] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 368.681427][T15304] netlink: 'syz.3.2379': attribute type 6 has an invalid length. [ 368.691964][T15305] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 368.760927][T15298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.773762][T15298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 368.882699][T15298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.897115][T15298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.085609][T15298] bond2: (slave macvlan3): Removing an active aggregator [ 369.116566][T15298] bond2: (slave macvlan3): Releasing backup interface [ 369.197493][T15298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.211940][T15298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 369.214315][T15332] __nla_validate_parse: 7 callbacks suppressed [ 369.214336][T15332] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2384'. [ 369.379745][ T65] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 369.391085][ T65] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.403930][ T65] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 369.419319][ T65] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.429744][T15342] xt_TCPMSS: Only works on TCP SYN packets [ 369.463262][T10814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 369.480115][T10814] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.531391][ T65] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 369.536362][T15348] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2390'. [ 369.547868][ T65] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.564559][T15350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2390'. [ 369.637568][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 369.678524][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'. [ 369.718098][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2393'. [ 369.743965][ T65] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.744342][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2393'. [ 369.762468][ T65] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.804391][ T65] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.821743][ T65] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.945798][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 369.971923][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 370.004676][T15385] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 370.012964][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2399'. [ 370.505094][T15412] tc_dump_action: action bad kind [ 370.653339][T15399] lo speed is unknown, defaulting to 1000 [ 371.215641][T15399] ªªªªª speed is unknown, defaulting to 1000 [ 371.236465][T15404] lo speed is unknown, defaulting to 1000 [ 371.587208][T15451] sctp: [Deprecated]: syz.5.2420 (pid 15451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.587208][T15451] Use struct sctp_sack_info instead [ 371.807335][T15459] netlink: 'syz.5.2422': attribute type 12 has an invalid length. [ 371.992854][T15470] FAULT_INJECTION: forcing a failure. [ 371.992854][T15470] name failslab, interval 1, probability 0, space 0, times 0 [ 372.006207][T15470] CPU: 1 UID: 0 PID: 15470 Comm: syz.5.2425 Not tainted syzkaller #0 PREEMPT(full) [ 372.006237][T15470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.006250][T15470] Call Trace: [ 372.006258][T15470] [ 372.006268][T15470] dump_stack_lvl+0x189/0x250 [ 372.006295][T15470] ? __pfx____ratelimit+0x10/0x10 [ 372.006321][T15470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.006343][T15470] ? __pfx__printk+0x10/0x10 [ 372.006372][T15470] ? __pfx___might_resched+0x10/0x10 [ 372.006401][T15470] should_fail_ex+0x414/0x560 [ 372.006432][T15470] should_failslab+0xa8/0x100 [ 372.006455][T15470] kmem_cache_alloc_node_noprof+0x77/0x710 [ 372.006485][T15470] ? __alloc_skb+0x112/0x2d0 [ 372.006513][T15470] __alloc_skb+0x112/0x2d0 [ 372.006548][T15470] netlink_ack+0x146/0xa50 [ 372.006567][T15470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.006600][T15470] ? __asan_memcpy+0x40/0x70 [ 372.006627][T15470] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.006663][T15470] netlink_rcv_skb+0x28c/0x470 [ 372.006682][T15470] ? __lock_acquire+0xab9/0xd20 [ 372.006703][T15470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.006734][T15470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.006778][T15470] ? down_read+0x1ad/0x2e0 [ 372.006810][T15470] genl_rcv+0x28/0x40 [ 372.006836][T15470] netlink_unicast+0x82f/0x9e0 [ 372.006878][T15470] ? __pfx_netlink_unicast+0x10/0x10 [ 372.006913][T15470] ? netlink_sendmsg+0x642/0xb30 [ 372.006933][T15470] ? skb_put+0x11b/0x210 [ 372.006961][T15470] netlink_sendmsg+0x805/0xb30 [ 372.006994][T15470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.007022][T15470] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.007053][T15470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.007073][T15470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.007097][T15470] __sock_sendmsg+0x21c/0x270 [ 372.007132][T15470] __sys_sendto+0x3bd/0x520 [ 372.007157][T15470] ? __pfx___sys_sendto+0x10/0x10 [ 372.007177][T15470] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 372.007220][T15470] ? __fget_files+0x3a0/0x420 [ 372.007252][T15470] ? ksys_write+0x22a/0x250 [ 372.007284][T15470] ? __pfx_ksys_write+0x10/0x10 [ 372.007318][T15470] __x64_sys_sendto+0xde/0x100 [ 372.007345][T15470] do_syscall_64+0xfa/0xfa0 [ 372.007387][T15470] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.007413][T15470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.007435][T15470] ? clear_bhb_loop+0x60/0xb0 [ 372.007474][T15470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.007494][T15470] RIP: 0033:0x7f2273d90d5c [ 372.007531][T15470] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 372.007556][T15470] RSP: 002b:00007f2274b61ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 372.007580][T15470] RAX: ffffffffffffffda RBX: 00007f2274b61fc0 RCX: 00007f2273d90d5c [ 372.007597][T15470] RDX: 0000000000000024 RSI: 00007f2274b62010 RDI: 0000000000000003 [ 372.007611][T15470] RBP: 0000000000000000 R08: 00007f2274b61f14 R09: 000000000000000c [ 372.007625][T15470] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 372.007637][T15470] R13: 00007f2274b61f68 R14: 00007f2274b62010 R15: 0000000000000000 [ 372.007679][T15470] [ 372.045910][T15405] lo speed is unknown, defaulting to 1000 [ 372.204047][T15404] ªªªªª speed is unknown, defaulting to 1000 [ 372.717514][T15476] macsec1: entered allmulticast mode [ 372.723597][T15476] hsr0: entered allmulticast mode [ 372.732832][T15476] hsr_slave_0: entered allmulticast mode [ 372.922852][T15405] ªªªªª speed is unknown, defaulting to 1000 [ 373.084536][T15498] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 373.984941][T15539] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 374.539621][T15549] __nla_validate_parse: 5 callbacks suppressed [ 374.539654][T15549] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2448'. [ 374.617199][T15555] FAULT_INJECTION: forcing a failure. [ 374.617199][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 374.677924][T15555] CPU: 1 UID: 0 PID: 15555 Comm: syz.2.2449 Not tainted syzkaller #0 PREEMPT(full) [ 374.677956][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.677971][T15555] Call Trace: [ 374.677980][T15555] [ 374.677989][T15555] dump_stack_lvl+0x189/0x250 [ 374.678018][T15555] ? __pfx____ratelimit+0x10/0x10 [ 374.678044][T15555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.678068][T15555] ? __pfx__printk+0x10/0x10 [ 374.678087][T15555] ? netlink_sendmsg+0x805/0xb30 [ 374.678112][T15555] ? do_syscall_64+0xfa/0xfa0 [ 374.678151][T15555] should_fail_ex+0x414/0x560 [ 374.678184][T15555] should_failslab+0xa8/0x100 [ 374.678208][T15555] kmem_cache_alloc_noprof+0x74/0x6e0 [ 374.678257][T15555] ? skb_clone+0x212/0x3a0 [ 374.678290][T15555] skb_clone+0x212/0x3a0 [ 374.678320][T15555] __netlink_deliver_tap+0x404/0x850 [ 374.678357][T15555] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.678382][T15555] netlink_deliver_tap+0x19c/0x1b0 [ 374.678406][T15555] netlink_sendskb+0x68/0x140 [ 374.678450][T15555] netlink_unicast+0x397/0x9e0 [ 374.678477][T15555] ? __asan_memcpy+0x40/0x70 [ 374.678510][T15555] ? __pfx_netlink_unicast+0x10/0x10 [ 374.678550][T15555] netlink_rcv_skb+0x28c/0x470 [ 374.678567][T15555] ? __lock_acquire+0xab9/0xd20 [ 374.678587][T15555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.678614][T15555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.678654][T15555] ? down_read+0x1ad/0x2e0 [ 374.678685][T15555] genl_rcv+0x28/0x40 [ 374.678709][T15555] netlink_unicast+0x82f/0x9e0 [ 374.678749][T15555] ? __pfx_netlink_unicast+0x10/0x10 [ 374.678786][T15555] ? netlink_sendmsg+0x642/0xb30 [ 374.678804][T15555] ? skb_put+0x11b/0x210 [ 374.678829][T15555] netlink_sendmsg+0x805/0xb30 [ 374.678859][T15555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.678885][T15555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.678913][T15555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.678932][T15555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.678955][T15555] __sock_sendmsg+0x21c/0x270 [ 374.678989][T15555] __sys_sendto+0x3bd/0x520 [ 374.679014][T15555] ? __pfx___sys_sendto+0x10/0x10 [ 374.679031][T15555] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 374.679069][T15555] ? __fget_files+0x3a0/0x420 [ 374.679099][T15555] ? ksys_write+0x22a/0x250 [ 374.679129][T15555] ? __pfx_ksys_write+0x10/0x10 [ 374.679160][T15555] __x64_sys_sendto+0xde/0x100 [ 374.679185][T15555] do_syscall_64+0xfa/0xfa0 [ 374.679206][T15555] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.679238][T15555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.679259][T15555] ? clear_bhb_loop+0x60/0xb0 [ 374.679284][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.679304][T15555] RIP: 0033:0x7faafdd90d5c [ 374.679321][T15555] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 374.679339][T15555] RSP: 002b:00007faafec10ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 374.679361][T15555] RAX: ffffffffffffffda RBX: 00007faafec10fc0 RCX: 00007faafdd90d5c [ 374.679375][T15555] RDX: 0000000000000024 RSI: 00007faafec11010 RDI: 0000000000000003 [ 374.679389][T15555] RBP: 0000000000000000 R08: 00007faafec10f14 R09: 000000000000000c [ 374.679401][T15555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 374.679413][T15555] R13: 00007faafec10f68 R14: 00007faafec11010 R15: 0000000000000000 [ 374.679447][T15555] [ 374.749100][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 375.168719][T15579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2454'. [ 375.281388][T15581] syzkaller0: entered promiscuous mode [ 375.292468][T15581] syzkaller0: entered allmulticast mode [ 375.353989][T15591] netlink: 'syz.5.2458': attribute type 1 has an invalid length. [ 375.366352][T15591] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2458'. [ 376.196998][T15618] FAULT_INJECTION: forcing a failure. [ 376.196998][T15618] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 376.211561][T15618] CPU: 0 UID: 0 PID: 15618 Comm: syz.6.2466 Not tainted syzkaller #0 PREEMPT(full) [ 376.211590][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.211603][T15618] Call Trace: [ 376.211612][T15618] [ 376.211621][T15618] dump_stack_lvl+0x189/0x250 [ 376.211648][T15618] ? __pfx____ratelimit+0x10/0x10 [ 376.211691][T15618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.211713][T15618] ? __pfx__printk+0x10/0x10 [ 376.211736][T15618] ? fs_reclaim_acquire+0x7d/0x100 [ 376.211779][T15618] should_fail_ex+0x414/0x560 [ 376.211811][T15618] prepare_alloc_pages+0x213/0x610 [ 376.211852][T15618] __alloc_frozen_pages_noprof+0x123/0x370 [ 376.211890][T15618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.211921][T15618] ? policy_nodemask+0x27c/0x720 [ 376.211953][T15618] ? look_up_lock_class+0x74/0x170 [ 376.211983][T15618] alloc_pages_mpol+0x232/0x4a0 [ 376.212021][T15618] vma_alloc_folio_noprof+0xe4/0x200 [ 376.212069][T15618] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 376.212123][T15618] folio_prealloc+0x30/0x180 [ 376.212154][T15618] do_wp_page+0x1231/0x5800 [ 376.212202][T15618] ? __pfx_do_wp_page+0x10/0x10 [ 376.212225][T15618] ? do_raw_spin_lock+0x121/0x290 [ 376.212255][T15618] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.212294][T15618] __handle_mm_fault+0x1033/0x5400 [ 376.212335][T15618] ? lock_vma_under_rcu+0x1a3/0x450 [ 376.212365][T15618] ? __pfx___handle_mm_fault+0x10/0x10 [ 376.212406][T15618] ? lock_vma_under_rcu+0x3d2/0x450 [ 376.212438][T15618] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 376.212473][T15618] handle_mm_fault+0x40a/0x8e0 [ 376.212511][T15618] do_user_addr_fault+0xa7c/0x1380 [ 376.212540][T15618] ? rcu_is_watching+0x15/0xb0 [ 376.212563][T15618] ? trace_page_fault_user+0x84/0x1e0 [ 376.212591][T15618] exc_page_fault+0x82/0x100 [ 376.212618][T15618] asm_exc_page_fault+0x26/0x30 [ 376.212636][T15618] RIP: 0033:0x7fef5a3488d5 [ 376.212654][T15618] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 376.212672][T15618] RSP: 002b:00007fef5b258de0 EFLAGS: 00010293 [ 376.212689][T15618] RAX: 0000000000000008 RBX: 00007fef5b117d60 RCX: 0000000000000000 [ 376.212701][T15618] RDX: 0000000000000000 RSI: 00007fef5a44fb5e RDI: 00007fef5b117d60 [ 376.212713][T15618] RBP: 00007fef5b258f00 R08: 0000000000000000 R09: 0000000000000005 [ 376.212725][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef5a44f700 [ 376.212737][T15618] R13: 0000000000000016 R14: 00007fef5a5b7460 R15: 0000000000000000 [ 376.212770][T15618] [ 376.213045][T15618] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 376.263078][T15623] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2468'. [ 376.502703][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2468'. [ 376.533866][T15623] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2468'. [ 376.609165][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2470'. [ 377.042002][T15651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2477'. [ 377.260515][T15664] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 377.374069][T15670] netlink: 'syz.3.2483': attribute type 1 has an invalid length. [ 377.504511][T15670] veth7: entered promiscuous mode [ 377.516125][T10816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.545564][T10816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.081018][T15692] netlink: 'syz.4.2490': attribute type 3 has an invalid length. [ 378.098671][T15692] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2490'. [ 378.441589][T15716] netlink: 'syz.4.2497': attribute type 1 has an invalid length. [ 378.597404][T15723] vxcan2: entered promiscuous mode [ 378.905128][T15745] FAULT_INJECTION: forcing a failure. [ 378.905128][T15745] name failslab, interval 1, probability 0, space 0, times 0 [ 378.928120][T15745] CPU: 1 UID: 0 PID: 15745 Comm: syz.5.2505 Not tainted syzkaller #0 PREEMPT(full) [ 378.928164][T15745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.928184][T15745] Call Trace: [ 378.928193][T15745] [ 378.928202][T15745] dump_stack_lvl+0x189/0x250 [ 378.928230][T15745] ? __pfx____ratelimit+0x10/0x10 [ 378.928256][T15745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.928278][T15745] ? __pfx__printk+0x10/0x10 [ 378.928301][T15745] ? __mutex_trylock_common+0x153/0x260 [ 378.928340][T15745] should_fail_ex+0x414/0x560 [ 378.928371][T15745] should_failslab+0xa8/0x100 [ 378.928405][T15745] kmem_cache_alloc_noprof+0x74/0x6e0 [ 378.928432][T15745] ? skb_clone+0x212/0x3a0 [ 378.928462][T15745] skb_clone+0x212/0x3a0 [ 378.928491][T15745] __netlink_deliver_tap+0x404/0x850 [ 378.928526][T15745] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.928549][T15745] netlink_deliver_tap+0x19c/0x1b0 [ 378.928572][T15745] __netlink_sendskb+0x47/0x90 [ 378.928603][T15745] netlink_dump+0xa84/0xe90 [ 378.928644][T15745] ? __pfx_netlink_dump+0x10/0x10 [ 378.928681][T15745] ? netlink_recvmsg+0x5b2/0xa30 [ 378.928701][T15745] ? kmem_cache_free+0x19b/0x690 [ 378.928736][T15745] netlink_recvmsg+0x676/0xa30 [ 378.928768][T15745] ? __pfx_netlink_recvmsg+0x10/0x10 [ 378.928795][T15745] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.928824][T15745] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 378.928842][T15745] ? security_socket_recvmsg+0x7e/0x2e0 [ 378.928872][T15745] ? __pfx_netlink_recvmsg+0x10/0x10 [ 378.928894][T15745] sock_recvmsg+0x22c/0x270 [ 378.928929][T15745] __sys_recvfrom+0x1f6/0x340 [ 378.928954][T15745] ? __pfx___sys_recvfrom+0x10/0x10 [ 378.928972][T15745] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 378.929012][T15745] ? __fget_files+0x3a0/0x420 [ 378.929056][T15745] __x64_sys_recvfrom+0xde/0x100 [ 378.929081][T15745] do_syscall_64+0xfa/0xfa0 [ 378.929105][T15745] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.929128][T15745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.929148][T15745] ? clear_bhb_loop+0x60/0xb0 [ 378.929173][T15745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.929192][T15745] RIP: 0033:0x7f2273d90c94 [ 378.929209][T15745] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 378.929227][T15745] RSP: 002b:00007f2274b61ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 378.929247][T15745] RAX: ffffffffffffffda RBX: 00007f2274b61fc0 RCX: 00007f2273d90c94 [ 378.929262][T15745] RDX: 0000000000001000 RSI: 00007f2274b62010 RDI: 0000000000000003 [ 378.929275][T15745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 378.929290][T15745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 378.929302][T15745] R13: 00007f2274b61f68 R14: 00007f2274b62010 R15: 0000000000000000 [ 378.929336][T15745] [ 379.376399][T15761] tipc: Enabled bearer , priority 0 [ 379.385341][T15761] syzkaller0: entered promiscuous mode [ 379.390909][T15761] syzkaller0: entered allmulticast mode [ 379.544036][T15761] tipc: Resetting bearer [ 379.557106][T15777] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 379.594960][T15760] tipc: Resetting bearer [ 379.607231][T15780] nftables ruleset with unbound chain [ 379.641163][T15760] tipc: Disabling bearer [ 379.672586][T15783] FAULT_INJECTION: forcing a failure. [ 379.672586][T15783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.686201][T15781] tipc: Enabled bearer , priority 0 [ 379.693777][T15783] CPU: 1 UID: 0 PID: 15783 Comm: syz.5.2516 Not tainted syzkaller #0 PREEMPT(full) [ 379.693806][T15783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.693818][T15783] Call Trace: [ 379.693826][T15783] [ 379.693834][T15783] dump_stack_lvl+0x189/0x250 [ 379.693860][T15783] ? __pfx____ratelimit+0x10/0x10 [ 379.693883][T15783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.693903][T15783] ? __pfx__printk+0x10/0x10 [ 379.693921][T15783] ? __might_fault+0xb0/0x130 [ 379.693959][T15783] should_fail_ex+0x414/0x560 [ 379.693990][T15783] _copy_from_user+0x2d/0xb0 [ 379.694013][T15783] do_ipv6_setsockopt+0x23e/0x2eb0 [ 379.694051][T15783] ? get_pid_task+0x20/0x1f0 [ 379.694078][T15778] syzkaller0: entered promiscuous mode [ 379.694081][T15783] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 379.694117][T15783] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 379.694158][T15783] ? vfs_write+0x956/0xb30 [ 379.694198][T15783] ? __pfx___might_resched+0x10/0x10 [ 379.694237][T15783] ? __lock_acquire+0xab9/0xd20 [ 379.694271][T15783] ? aa_sk_perm+0x81e/0x950 [ 379.694308][T15783] ? __pfx_aa_sk_perm+0x10/0x10 [ 379.694342][T15783] ? aa_sock_opt_perm+0xff/0x1b0 [ 379.694381][T15783] ipv6_setsockopt+0x59/0x170 [ 379.694415][T15783] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 379.694458][T15783] do_sock_setsockopt+0x179/0x1b0 [ 379.694490][T15783] __x64_sys_setsockopt+0x13f/0x1b0 [ 379.694525][T15783] do_syscall_64+0xfa/0xfa0 [ 379.694563][T15783] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.694594][T15783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.694618][T15783] ? clear_bhb_loop+0x60/0xb0 [ 379.694648][T15783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.694671][T15783] RIP: 0033:0x7f2273d8eec9 [ 379.694695][T15783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.694715][T15783] RSP: 002b:00007f2274b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 379.694742][T15783] RAX: ffffffffffffffda RBX: 00007f2273fe5fa0 RCX: 00007f2273d8eec9 [ 379.694760][T15783] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 379.694775][T15783] RBP: 00007f2274b63090 R08: 00000000000005d0 R09: 0000000000000000 [ 379.694789][T15783] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 379.694804][T15783] R13: 00007f2273fe6038 R14: 00007f2273fe5fa0 R15: 00007fffe1e24238 [ 379.694846][T15783] [ 379.902344][T15785] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 379.972763][T15778] syzkaller0: entered allmulticast mode [ 380.043936][T15791] tipc: Resetting bearer [ 380.070867][T15776] tipc: Resetting bearer [ 380.153963][T15776] tipc: Disabling bearer [ 380.179731][T15805] bond0: (slave gretap0): Error: Device type is different from other slaves [ 380.373727][T15810] syzkaller1: entered promiscuous mode [ 380.396896][T15810] syzkaller1: entered allmulticast mode [ 380.431972][T15788] lo speed is unknown, defaulting to 1000 [ 380.735291][T15818] __nla_validate_parse: 5 callbacks suppressed [ 380.735309][T15818] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.2527'. [ 380.753052][T15820] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 380.860056][T15825] FAULT_INJECTION: forcing a failure. [ 380.860056][T15825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.873580][T15825] CPU: 1 UID: 0 PID: 15825 Comm: syz.5.2529 Not tainted syzkaller #0 PREEMPT(full) [ 380.873610][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.873623][T15825] Call Trace: [ 380.873632][T15825] [ 380.873640][T15825] dump_stack_lvl+0x189/0x250 [ 380.873668][T15825] ? __pfx____ratelimit+0x10/0x10 [ 380.873711][T15825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.873732][T15825] ? __pfx__printk+0x10/0x10 [ 380.873753][T15825] ? __might_fault+0xb0/0x130 [ 380.873792][T15825] should_fail_ex+0x414/0x560 [ 380.873821][T15825] _copy_from_user+0x2d/0xb0 [ 380.873841][T15825] do_ip6t_set_ctl+0x69f/0xce0 [ 380.873874][T15825] ? rcu_is_watching+0x15/0xb0 [ 380.873898][T15825] ? trace_contention_end+0x39/0x120 [ 380.873922][T15825] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 380.873973][T15825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.874011][T15825] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.874041][T15825] nf_setsockopt+0x26f/0x290 [ 380.874070][T15825] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.874103][T15825] do_sock_setsockopt+0x179/0x1b0 [ 380.874130][T15825] __x64_sys_setsockopt+0x13f/0x1b0 [ 380.874158][T15825] do_syscall_64+0xfa/0xfa0 [ 380.874181][T15825] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.874205][T15825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.874224][T15825] ? clear_bhb_loop+0x60/0xb0 [ 380.874249][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.874268][T15825] RIP: 0033:0x7f2273d8eec9 [ 380.874286][T15825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.874303][T15825] RSP: 002b:00007f2274b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.874324][T15825] RAX: ffffffffffffffda RBX: 00007f2273fe5fa0 RCX: 00007f2273d8eec9 [ 380.874339][T15825] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 380.874350][T15825] RBP: 00007f2274b63090 R08: 00000000000005d0 R09: 0000000000000000 [ 380.874363][T15825] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 380.874375][T15825] R13: 00007f2273fe6038 R14: 00007f2273fe5fa0 R15: 00007fffe1e24238 [ 380.874409][T15825] [ 381.103291][T15788] ªªªªª speed is unknown, defaulting to 1000 [ 381.128598][T15810] lo speed is unknown, defaulting to 1000 [ 381.308771][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2531'. [ 381.403001][T15836] netlink: 'syz.6.2533': attribute type 1 has an invalid length. [ 381.438889][T15836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2533'. [ 381.728954][T15810] ªªªªª speed is unknown, defaulting to 1000 [ 381.837104][T15857] FAULT_INJECTION: forcing a failure. [ 381.837104][T15857] name failslab, interval 1, probability 0, space 0, times 0 [ 381.879153][T15857] CPU: 0 UID: 0 PID: 15857 Comm: syz.5.2541 Not tainted syzkaller #0 PREEMPT(full) [ 381.879184][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.879197][T15857] Call Trace: [ 381.879204][T15857] [ 381.879213][T15857] dump_stack_lvl+0x189/0x250 [ 381.879239][T15857] ? __pfx____ratelimit+0x10/0x10 [ 381.879263][T15857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.879284][T15857] ? __pfx__printk+0x10/0x10 [ 381.879311][T15857] ? __pfx___might_resched+0x10/0x10 [ 381.879332][T15857] ? fs_reclaim_acquire+0x7d/0x100 [ 381.879367][T15857] should_fail_ex+0x414/0x560 [ 381.879397][T15857] should_failslab+0xa8/0x100 [ 381.879418][T15857] __kvmalloc_node_noprof+0x158/0x910 [ 381.879449][T15857] ? xt_alloc_table_info+0x40/0xb0 [ 381.879485][T15857] xt_alloc_table_info+0x40/0xb0 [ 381.879512][T15857] do_ip6t_set_ctl+0x88a/0xce0 [ 381.879545][T15857] ? rcu_is_watching+0x15/0xb0 [ 381.879569][T15857] ? trace_contention_end+0x39/0x120 [ 381.879601][T15857] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 381.879654][T15857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.879692][T15857] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.879723][T15857] nf_setsockopt+0x26f/0x290 [ 381.879752][T15857] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 381.879786][T15857] do_sock_setsockopt+0x179/0x1b0 [ 381.879813][T15857] __x64_sys_setsockopt+0x13f/0x1b0 [ 381.879842][T15857] do_syscall_64+0xfa/0xfa0 [ 381.879865][T15857] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.879889][T15857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.879909][T15857] ? clear_bhb_loop+0x60/0xb0 [ 381.879934][T15857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.879953][T15857] RIP: 0033:0x7f2273d8eec9 [ 381.879970][T15857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.879988][T15857] RSP: 002b:00007f2274b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.880009][T15857] RAX: ffffffffffffffda RBX: 00007f2273fe5fa0 RCX: 00007f2273d8eec9 [ 381.880041][T15857] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 381.880055][T15857] RBP: 00007f2274b63090 R08: 00000000000005d0 R09: 0000000000000000 [ 381.880069][T15857] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 381.880082][T15857] R13: 00007f2273fe6038 R14: 00007f2273fe5fa0 R15: 00007fffe1e24238 [ 381.880120][T15857] [ 382.175113][T15856] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 382.349824][T15868] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2543'. [ 382.358815][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'. [ 382.358846][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'. [ 382.457199][T15868] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2543'. [ 382.787542][T15878] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2548'. [ 382.842334][T15878] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 382.864850][T15878] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2548'. [ 383.227594][T15871] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2545'. [ 384.004607][T15904] lo speed is unknown, defaulting to 1000 [ 384.426938][T15950] netlink: 'syz.3.2568': attribute type 1 has an invalid length. [ 384.484748][T15953] FAULT_INJECTION: forcing a failure. [ 384.484748][T15953] name failslab, interval 1, probability 0, space 0, times 0 [ 384.521375][T15953] CPU: 1 UID: 0 PID: 15953 Comm: syz.2.2570 Not tainted syzkaller #0 PREEMPT(full) [ 384.521406][T15953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.521418][T15953] Call Trace: [ 384.521427][T15953] [ 384.521435][T15953] dump_stack_lvl+0x189/0x250 [ 384.521461][T15953] ? __pfx____ratelimit+0x10/0x10 [ 384.521485][T15953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.521506][T15953] ? __pfx__printk+0x10/0x10 [ 384.521533][T15953] ? __pfx___might_resched+0x10/0x10 [ 384.521553][T15953] ? fs_reclaim_acquire+0x7d/0x100 [ 384.521588][T15953] should_fail_ex+0x414/0x560 [ 384.521617][T15953] should_failslab+0xa8/0x100 [ 384.521638][T15953] __kvmalloc_node_noprof+0x158/0x910 [ 384.521666][T15953] ? do_ip6t_set_ctl+0x88a/0xce0 [ 384.521692][T15953] ? nf_setsockopt+0x26f/0x290 [ 384.521718][T15953] ? translate_table+0x19b/0x2040 [ 384.521742][T15953] ? do_syscall_64+0xfa/0xfa0 [ 384.521773][T15953] translate_table+0x19b/0x2040 [ 384.521835][T15953] ? __lock_acquire+0xab9/0xd20 [ 384.521875][T15953] ? __pfx_translate_table+0x10/0x10 [ 384.521905][T15953] ? __might_fault+0xb0/0x130 [ 384.521953][T15953] ? _copy_from_user+0x94/0xb0 [ 384.521978][T15953] do_ip6t_set_ctl+0x970/0xce0 [ 384.522009][T15953] ? rcu_is_watching+0x15/0xb0 [ 384.522033][T15953] ? trace_contention_end+0x39/0x120 [ 384.522062][T15953] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 384.522114][T15953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.522152][T15953] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.522183][T15953] nf_setsockopt+0x26f/0x290 [ 384.522211][T15953] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.522244][T15953] do_sock_setsockopt+0x179/0x1b0 [ 384.522271][T15953] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.522300][T15953] do_syscall_64+0xfa/0xfa0 [ 384.522323][T15953] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.522353][T15953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.522372][T15953] ? clear_bhb_loop+0x60/0xb0 [ 384.522397][T15953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.522416][T15953] RIP: 0033:0x7faafdd8eec9 [ 384.522433][T15953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.522451][T15953] RSP: 002b:00007faafec12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.522472][T15953] RAX: ffffffffffffffda RBX: 00007faafdfe5fa0 RCX: 00007faafdd8eec9 [ 384.522486][T15953] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 384.522498][T15953] RBP: 00007faafec12090 R08: 00000000000005d0 R09: 0000000000000000 [ 384.522511][T15953] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 384.522523][T15953] R13: 00007faafdfe6038 R14: 00007faafdfe5fa0 R15: 00007ffcdcc038d8 [ 384.522557][T15953] [ 384.881551][T15904] ªªªªª speed is unknown, defaulting to 1000 [ 384.889187][T15906] lo speed is unknown, defaulting to 1000 [ 385.449440][T15989] netlink: 'syz.4.2578': attribute type 21 has an invalid length. [ 385.466117][T15989] netlink: 'syz.4.2578': attribute type 5 has an invalid length. [ 385.520262][T15989] netlink: 'syz.4.2578': attribute type 6 has an invalid length. [ 385.627126][T15993] ipt_REJECT: TCP_RESET invalid for non-tcp [ 385.691031][T15971] lo speed is unknown, defaulting to 1000 [ 385.781660][T15997] __nla_validate_parse: 11 callbacks suppressed [ 385.781680][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 385.807872][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 385.839246][T15997] ip6tnl6: entered promiscuous mode [ 385.844580][T15997] ip6tnl6: entered allmulticast mode [ 385.938203][T16002] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 385.945807][T16002] FAULT_INJECTION: forcing a failure. [ 385.945807][T16002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.961401][T16002] CPU: 1 UID: 0 PID: 16002 Comm: syz.4.2583 Not tainted syzkaller #0 PREEMPT(full) [ 385.961429][T16002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.961442][T16002] Call Trace: [ 385.961450][T16002] [ 385.961458][T16002] dump_stack_lvl+0x189/0x250 [ 385.961485][T16002] ? __pfx____ratelimit+0x10/0x10 [ 385.961508][T16002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.961530][T16002] ? __pfx__printk+0x10/0x10 [ 385.961565][T16002] should_fail_ex+0x414/0x560 [ 385.961595][T16002] _copy_to_user+0x31/0xb0 [ 385.961618][T16002] simple_read_from_buffer+0xe1/0x170 [ 385.961653][T16002] proc_fail_nth_read+0x1b3/0x220 [ 385.961681][T16002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.961709][T16002] ? rw_verify_area+0x2a6/0x4d0 [ 385.961735][T16002] ? __lock_acquire+0xab9/0xd20 [ 385.961752][T16002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.961779][T16002] vfs_read+0x200/0xa30 [ 385.961805][T16002] ? fdget_pos+0x247/0x320 [ 385.961828][T16002] ? __pfx___mutex_lock+0x10/0x10 [ 385.961855][T16002] ? __pfx_vfs_read+0x10/0x10 [ 385.961881][T16002] ? __fget_files+0x2a/0x420 [ 385.961902][T16002] ? __fget_files+0x3a0/0x420 [ 385.961918][T16002] ? __fget_files+0x2a/0x420 [ 385.961946][T16002] ksys_read+0x145/0x250 [ 385.961976][T16002] ? __pfx_ksys_read+0x10/0x10 [ 385.962008][T16002] ? do_syscall_64+0xbe/0xfa0 [ 385.962037][T16002] do_syscall_64+0xfa/0xfa0 [ 385.962059][T16002] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.962084][T16002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.962104][T16002] ? clear_bhb_loop+0x60/0xb0 [ 385.962129][T16002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.962149][T16002] RIP: 0033:0x7fca7218d8dc [ 385.962167][T16002] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 385.962186][T16002] RSP: 002b:00007fca72f6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.962207][T16002] RAX: ffffffffffffffda RBX: 00007fca723e5fa0 RCX: 00007fca7218d8dc [ 385.962222][T16002] RDX: 000000000000000f RSI: 00007fca72f6f0a0 RDI: 0000000000000005 [ 385.962234][T16002] RBP: 00007fca72f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.962247][T16002] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 385.962260][T16002] R13: 00007fca723e6038 R14: 00007fca723e5fa0 R15: 00007ffcf4cdce08 [ 385.962301][T16002] [ 386.205830][T16003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2582'. [ 386.270134][T16003] netlink: 'syz.2.2582': attribute type 7 has an invalid length. [ 386.279173][T16003] netlink: 'syz.2.2582': attribute type 8 has an invalid length. [ 386.364306][T15906] ªªªªª speed is unknown, defaulting to 1000 [ 386.413445][T15971] ªªªªª speed is unknown, defaulting to 1000 [ 387.359985][T16031] netlink: 'syz.4.2590': attribute type 1 has an invalid length. [ 387.370491][T16031] netlink: 'syz.4.2590': attribute type 1 has an invalid length. [ 387.378416][T16031] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2590'. [ 388.024049][T16046] tipc: Enabled bearer , priority 0 [ 388.056036][T16046] syzkaller0: entered promiscuous mode [ 388.066122][T16046] syzkaller0: entered allmulticast mode [ 388.131317][T16046] tipc: Resetting bearer [ 388.151887][T16045] tipc: Resetting bearer [ 388.186619][T16045] tipc: Disabling bearer [ 388.220799][T16050] smc: net device veth0_to_bond applied user defined pnetid SYZ0 [ 388.253583][T16037] lo speed is unknown, defaulting to 1000 [ 388.459175][T16068] netlink: 2681 bytes leftover after parsing attributes in process `syz.3.2598'. [ 388.472969][T16068] netlink: 2681 bytes leftover after parsing attributes in process `syz.3.2598'. [ 388.490182][T16069] netlink: 2681 bytes leftover after parsing attributes in process `syz.3.2598'. [ 388.537189][T16073] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2599'. [ 388.559588][T16069] netlink: 2681 bytes leftover after parsing attributes in process `syz.3.2598'. [ 388.672148][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 388.783633][T16081] netlink: 'syz.3.2602': attribute type 1 has an invalid length. [ 388.912761][T16081] bond7: entered promiscuous mode [ 388.932759][T16081] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.994968][T16080] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.003358][T16080] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 389.016361][T16080] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 389.040591][T16080] bond7: (slave gre1): making interface the new active one [ 389.059676][T16080] gre1: entered promiscuous mode [ 389.066343][T16080] bond7: (slave gre1): Enslaving as an active interface with an up link [ 389.135437][T16037] ªªªªª speed is unknown, defaulting to 1000 [ 389.205192][T16036] lo speed is unknown, defaulting to 1000 [ 389.303703][T16105] netlink: 'syz.4.2607': attribute type 13 has an invalid length. [ 389.326450][T16103] netlink: 'syz.3.2609': attribute type 11 has an invalid length. [ 389.587777][T16036] ªªªªª speed is unknown, defaulting to 1000 [ 389.612383][T16111] netlink: 'syz.5.2611': attribute type 1 has an invalid length. [ 389.750936][T16113] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 390.212958][T16105] lo speed is unknown, defaulting to 1000 [ 390.636453][T16105] ªªªªª speed is unknown, defaulting to 1000 [ 390.666152][T16118] lo speed is unknown, defaulting to 1000 [ 391.083527][T16141] netlink: 'syz.5.2620': attribute type 3 has an invalid length. [ 391.095205][T16142] veth1_vlan: default FDB implementation only supports local addresses [ 391.104850][T16141] veth1_vlan: default FDB implementation only supports local addresses [ 391.149949][T16118] ªªªªª speed is unknown, defaulting to 1000 [ 392.454230][T16187] syz_tun: entered allmulticast mode [ 392.489908][T16186] syz_tun: left allmulticast mode [ 392.742522][T16198] tipc: Enabled bearer , priority 0 [ 392.751039][T16200] __nla_validate_parse: 3 callbacks suppressed [ 392.751057][T16200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 392.768759][T16198] syzkaller0: entered promiscuous mode [ 392.777498][T16198] syzkaller0: entered allmulticast mode [ 392.931673][T16191] lo speed is unknown, defaulting to 1000 [ 392.937530][T16202] syzkaller0: mtu less than device minimum [ 393.021649][T16194] tipc: Resetting bearer [ 393.111109][T16194] tipc: Disabling bearer [ 393.123991][T16216] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2638'. [ 393.167377][T16219] netlink: 'syz.4.2639': attribute type 4 has an invalid length. [ 393.167377][T16218] netlink: 'syz.4.2639': attribute type 4 has an invalid length. [ 393.224901][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 393.225001][T16191] ªªªªª speed is unknown, defaulting to 1000 [ 393.234608][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 393.400354][T16230] tipc: Enabled bearer , priority 0 [ 393.418888][T16234] netlink: 'syz.2.2643': attribute type 4 has an invalid length. [ 393.433427][T16230] syzkaller0: entered promiscuous mode [ 393.440878][T16230] syzkaller0: entered allmulticast mode [ 393.478464][ T5836] lo speed is unknown, defaulting to 1000 [ 393.484315][ T5836] syz0: Port: 1 Link DOWN [ 393.536214][ T5836] lo speed is unknown, defaulting to 1000 [ 393.540090][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2644'. [ 393.759866][T16226] tipc: Resetting bearer [ 393.850301][T16226] tipc: Disabling bearer [ 394.387886][T16258] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 394.455781][T16258] 8021q: adding VLAN 0 to HW filter on device bond10 [ 394.491484][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 394.660847][T16263] netlink: 'syz.6.2651': attribute type 1 has an invalid length. [ 394.732030][T16265] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2651'. [ 394.766870][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2651'. [ 394.770705][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2654'. [ 394.792027][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2651'. [ 395.262608][T16300] macsec1: entered allmulticast mode [ 395.268608][T16300] batadv0: entered allmulticast mode [ 395.306598][T16300] batadv0: left allmulticast mode [ 395.750598][T16328] netlink: 'syz.5.2667': attribute type 10 has an invalid length. [ 395.763159][T16335] netlink: 'syz.3.2668': attribute type 10 has an invalid length. [ 395.790069][T16335] team0: Port device dummy0 added [ 395.821886][T16335] netlink: 'syz.3.2668': attribute type 10 has an invalid length. [ 395.852001][T16328] dummy0: entered promiscuous mode [ 395.917040][T16341] netlink: 'syz.2.2669': attribute type 4 has an invalid length. [ 395.948143][T16335] team0: Port device dummy0 removed [ 395.956703][T16339] TCP: TCP_TX_DELAY enabled [ 395.964332][T16339] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 395.981298][T16337] nbd: couldn't find a device at index 0 [ 396.169757][T16325] lo speed is unknown, defaulting to 1000 [ 396.753263][T16325] ªªªªª speed is unknown, defaulting to 1000 [ 397.913685][T16413] netlink: 'syz.3.2691': attribute type 9 has an invalid length. [ 398.431954][T16431] __nla_validate_parse: 7 callbacks suppressed [ 398.431973][T16431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2697'. [ 398.653611][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2698'. [ 398.735469][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2698'. [ 398.838731][T16451] netlink: 'syz.6.2698': attribute type 2 has an invalid length. [ 398.935197][T16460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2701'. [ 398.972718][T16451] : entered promiscuous mode [ 398.991861][T16462] nbd: must specify a device to reconfigure [ 399.053225][T16433] lo speed is unknown, defaulting to 1000 [ 399.455189][T16470] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2704'. [ 399.477395][T16433] ªªªªª speed is unknown, defaulting to 1000 [ 399.591722][T16477] netlink: 'syz.2.2706': attribute type 1 has an invalid length. [ 399.610609][T16477] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2706'. [ 399.631113][T16477] netlink: 'syz.2.2706': attribute type 1 has an invalid length. [ 399.737809][T16446] lo speed is unknown, defaulting to 1000 [ 399.756407][T16479] tipc: Enabled bearer , priority 0 [ 399.768460][T16477] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 399.780568][T16477] tipc: Resetting bearer [ 399.851144][T16481] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2707'. [ 399.896379][T16477] tipc: Disabling bearer [ 400.103397][T16486] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 400.328647][T16470] lo speed is unknown, defaulting to 1000 [ 400.584893][T16470] ªªªªª speed is unknown, defaulting to 1000 [ 400.621548][T16446] ªªªªª speed is unknown, defaulting to 1000 [ 401.214277][T16508] netlink: 'syz.2.2712': attribute type 9 has an invalid length. [ 401.495661][T16508] can: request_module (can-proto-0) failed. [ 401.656478][T16495] lo speed is unknown, defaulting to 1000 [ 401.871421][T16499] lo speed is unknown, defaulting to 1000 [ 401.879154][T16495] ªªªªª speed is unknown, defaulting to 1000 [ 402.085267][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 402.098631][T16529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2716'. [ 402.258831][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 402.448730][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 402.557654][T16542] netlink: 'syz.6.2719': attribute type 1 has an invalid length. [ 402.595177][T16542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 402.695360][T16543] veth5: entered promiscuous mode [ 402.705203][T16499] ªªªªª speed is unknown, defaulting to 1000 [ 403.733639][T16557] macvtap0: entered allmulticast mode [ 403.739574][T16557] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 403.765988][T16557] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 404.219256][T16563] veth0_vlan: tun_chr_ioctl cmd 1074025677 [ 404.225313][T16563] veth0_vlan: linktype set to 825 [ 404.672361][T16560] lo speed is unknown, defaulting to 1000 [ 404.688652][T16586] tipc: Enabling of bearer rejected, already enabled [ 404.718960][T16586] veth0_to_batadv: entered promiscuous mode [ 404.724918][T16586] veth0_to_batadv: entered allmulticast mode [ 404.906338][T16589] tipc: Enabled bearer , priority 0 [ 404.945162][T16589] syzkaller0: entered promiscuous mode [ 404.962013][T16589] syzkaller0: entered allmulticast mode [ 404.977265][T16591] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 405.105766][T16591] bond11: entered promiscuous mode [ 405.118499][T16598] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 405.139528][T16591] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.239958][T16594] 8021q: adding VLAN 0 to HW filter on device bond12 [ 405.252399][T16594] bond11: (slave bond12): making interface the new active one [ 405.260123][T16594] bond12: entered promiscuous mode [ 405.266178][T16594] bond11: (slave bond12): Enslaving as an active interface with an up link [ 405.277508][T16596] tipc: Resetting bearer [ 405.325770][T16560] ªªªªª speed is unknown, defaulting to 1000 [ 405.346676][T16588] tipc: Resetting bearer [ 405.415219][T16588] tipc: Disabling bearer [ 405.442416][T16583] lo speed is unknown, defaulting to 1000 [ 405.596654][T16612] __nla_validate_parse: 2 callbacks suppressed [ 405.596674][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2738'. [ 405.614396][T16610] netlink: 'syz.3.2737': attribute type 4 has an invalid length. [ 405.623212][T16609] netlink: 'syz.3.2737': attribute type 4 has an invalid length. [ 405.692496][T16616] bond9: option resend_igmp: invalid value (18446744073709551614) [ 405.703158][T16616] bond9: option resend_igmp: allowed values 0 - 255 [ 405.712767][T16616] bond9 (unregistering): Released all slaves [ 405.828105][T16583] ªªªªª speed is unknown, defaulting to 1000 [ 406.165546][T16629] tipc: Enabled bearer , priority 0 [ 406.245039][T16629] syzkaller0: entered promiscuous mode [ 406.258002][T16629] syzkaller0: entered allmulticast mode [ 406.330158][T16629] tipc: Resetting bearer [ 406.341521][T16628] tipc: Resetting bearer [ 406.389089][T16628] tipc: Disabling bearer [ 406.508775][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 406.913039][T16656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2749'. [ 407.175158][T16667] netlink: 'syz.6.2752': attribute type 33 has an invalid length. [ 407.218736][T16667] netlink: 'syz.6.2752': attribute type 17 has an invalid length. [ 407.260256][T16667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.279409][T16668] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2752'. [ 407.425821][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2754'. [ 407.746046][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 407.781527][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.794186][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.802573][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.803740][T16681] syz_tun: entered promiscuous mode [ 407.819360][T16681] syz_tun: left promiscuous mode [ 407.829810][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.835291][T16692] netlink: 20824 bytes leftover after parsing attributes in process `syz.5.2756'. [ 407.849015][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.057069][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2760'. [ 408.230291][T16708] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 408.337209][T16688] lo speed is unknown, defaulting to 1000 [ 408.430157][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2767'. [ 408.492180][T16718] tipc: Enabled bearer , priority 0 [ 408.500683][T16718] syzkaller0: entered promiscuous mode [ 408.506378][T16718] syzkaller0: entered allmulticast mode [ 408.575476][T16722] tipc: Resetting bearer [ 408.768121][T16688] ªªªªª speed is unknown, defaulting to 1000 [ 408.966594][T16745] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2772'. [ 409.279951][T16717] tipc: Resetting bearer [ 409.310226][T16717] tipc: Disabling bearer [ 409.410017][T16688] chnl_net:caif_netlink_parms(): no params data found [ 409.541476][T16775] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 409.698691][T16783] sctp: [Deprecated]: syz.5.2779 (pid 16783) Use of int in max_burst socket option deprecated. [ 409.698691][T16783] Use struct sctp_assoc_value instead [ 409.726620][T16688] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.734428][T16688] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.843745][T16688] bridge_slave_0: entered allmulticast mode [ 409.863814][T16688] bridge_slave_0: entered promiscuous mode [ 409.904985][T16688] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.909631][ T5830] Bluetooth: hci2: command tx timeout [ 409.918671][T16688] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.925962][T16688] bridge_slave_1: entered allmulticast mode [ 409.939129][T16688] bridge_slave_1: entered promiscuous mode [ 410.054912][T16779] lo speed is unknown, defaulting to 1000 [ 410.070442][T16688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.091511][T16688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.432352][T16779] ªªªªª speed is unknown, defaulting to 1000 [ 410.443726][T16804] netlink: 'syz.2.2784': attribute type 2 has an invalid length. [ 410.474883][T16688] team0: Port device team_slave_0 added [ 410.489468][T16804] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 410.513724][T16688] team0: Port device team_slave_1 added [ 410.589135][T16688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.596217][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.622876][T16688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.675125][T16811] __nla_validate_parse: 6 callbacks suppressed [ 410.675142][T16811] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2786'. [ 410.750527][T16688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.757527][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.787313][T16688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.867008][T16823] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 410.878636][T16823] tipc: Enabled bearer , priority 10 [ 410.960675][T16826] netlink: 'syz.6.2789': attribute type 1 has an invalid length. [ 410.969695][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2789'. [ 410.998256][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.024455][T16688] hsr_slave_0: entered promiscuous mode [ 411.045272][T16688] hsr_slave_1: entered promiscuous mode [ 411.094603][T16831] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2791'. [ 411.139469][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 411.144801][T16830] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2791'. [ 411.240459][T16831] 8021q: adding VLAN 0 to HW filter on device bond9 [ 411.268453][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.662977][T16688] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.733894][T16827] lo speed is unknown, defaulting to 1000 [ 411.762672][T16688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.798496][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 411.922945][T16688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.978988][ T5830] Bluetooth: hci2: command tx timeout [ 412.031126][T16688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.074367][T16868] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2801'. [ 412.251210][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'. [ 412.281258][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2803'. [ 412.342964][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 412.367167][T16688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.402009][T16888] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2807'. [ 412.414774][T16827] ªªªªª speed is unknown, defaulting to 1000 [ 412.415174][T16688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.502169][T16688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.536827][T16688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.697310][T16901] sctp: [Deprecated]: syz.3.2809 (pid 16901) Use of int in max_burst socket option. [ 412.697310][T16901] Use struct sctp_assoc_value instead [ 412.842581][T16688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.847931][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 412.875420][T16688] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.970405][T16734] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.977697][T16734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.003314][T16734] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.010705][T16734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.068466][T16907] openvswitch: netlink: Message has 8 unknown bytes. [ 413.313053][T16912] tipc: Enabling of bearer rejected, failed to enable media [ 413.511736][T16923] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 413.680589][T16688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.734751][T16940] veth3: left promiscuous mode [ 413.761746][T16940] bond3: left promiscuous mode [ 413.776033][T16940] ip6gretap1: left promiscuous mode [ 413.801761][T16940] bond4: left promiscuous mode [ 413.820274][T16940] veth7: left promiscuous mode [ 413.836972][T16940] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode [ 413.853505][T16940] vlan2: left promiscuous mode [ 413.870639][T16940] bond0: left promiscuous mode [ 413.876240][T16940] ip6erspan0: left promiscuous mode [ 413.887892][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.058147][ T5830] Bluetooth: hci2: command tx timeout [ 414.235693][T16688] veth0_vlan: entered promiscuous mode [ 414.266483][T16688] veth1_vlan: entered promiscuous mode [ 414.350876][T16688] veth0_macvtap: entered promiscuous mode [ 414.389426][T16688] veth1_macvtap: entered promiscuous mode [ 414.470308][T16688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.511421][T16688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.637760][T16733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.677456][T16733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.710769][T16733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.725973][T16733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.830005][T16968] lo speed is unknown, defaulting to 1000 [ 414.927868][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.964905][T16996] dvmrp0: entered allmulticast mode [ 415.096763][T16968] ªªªªª speed is unknown, defaulting to 1000 [ 415.159551][T16997] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 415.179086][T16733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.191292][T16733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.351776][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.369029][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.666928][T17020] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 415.968016][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 416.131327][ T5830] Bluetooth: hci2: command tx timeout [ 416.331952][T17044] __nla_validate_parse: 4 callbacks suppressed [ 416.331972][T17044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2842'. [ 416.533912][T17056] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 416.573687][T17056] bond12 (unregistering): Released all slaves [ 416.606027][T17064] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 416.645239][T17064] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2848'. [ 416.853970][T17072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.007875][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 417.167084][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'. [ 417.214905][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'. [ 417.307297][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2858'. [ 417.359626][T17096] netlink: 'syz.2.2860': attribute type 14 has an invalid length. [ 417.508486][T17104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2863'. [ 417.803257][T17122] tipc: Enabling of bearer rejected, failed to enable media [ 417.819094][T17116] 8021q: VLANs not supported on sit0 [ 418.009706][T17125] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.031758][T17125] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.047918][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 418.048116][T17130] warn_alloc: 1 callbacks suppressed [ 418.048133][T17130] syz.5.2869: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 418.123577][T17130] CPU: 1 UID: 0 PID: 17130 Comm: syz.5.2869 Not tainted syzkaller #0 PREEMPT(full) [ 418.123607][T17130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.123619][T17130] Call Trace: [ 418.123627][T17130] [ 418.123635][T17130] dump_stack_lvl+0x189/0x250 [ 418.123659][T17130] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 418.123691][T17130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.123711][T17130] ? __pfx__printk+0x10/0x10 [ 418.123730][T17130] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 418.123773][T17130] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 418.123810][T17130] warn_alloc+0x214/0x310 [ 418.123848][T17130] ? __pfx_warn_alloc+0x10/0x10 [ 418.123889][T17130] ? __get_vm_area_node+0x28f/0x300 [ 418.123919][T17130] ? translate_table+0x1a8/0x1f90 [ 418.123953][T17130] __vmalloc_node_range_noprof+0x690/0x12d0 [ 418.124026][T17130] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 418.124055][T17130] ? translate_table+0x1a8/0x1f90 [ 418.124088][T17130] ? rcu_is_watching+0x15/0xb0 [ 418.124112][T17130] ? translate_table+0x1a8/0x1f90 [ 418.124143][T17130] __kvmalloc_node_noprof+0x674/0x910 [ 418.124176][T17130] ? translate_table+0x1a8/0x1f90 [ 418.124203][T17130] ? do_arpt_set_ctl+0x8ae/0xf10 [ 418.124231][T17130] ? nf_setsockopt+0x26f/0x290 [ 418.124258][T17130] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 418.124280][T17130] ? do_syscall_64+0xfa/0xfa0 [ 418.124313][T17130] translate_table+0x1a8/0x1f90 [ 418.124377][T17130] ? __pfx_translate_table+0x10/0x10 [ 418.124428][T17130] ? _copy_from_user+0x94/0xb0 [ 418.124455][T17130] do_arpt_set_ctl+0x993/0xf10 [ 418.124492][T17130] ? __pfx___mutex_trylock_common+0x10/0x10 [ 418.124516][T17130] ? __local_bh_enable_ip+0x12d/0x1c0 [ 418.124539][T17130] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 418.124571][T17130] ? rcu_is_watching+0x15/0xb0 [ 418.124594][T17130] ? trace_contention_end+0x39/0x120 [ 418.124637][T17130] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 418.124674][T17130] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.124714][T17130] ? __pfx_aa_sk_perm+0x10/0x10 [ 418.124745][T17130] nf_setsockopt+0x26f/0x290 [ 418.124775][T17130] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 418.124811][T17130] do_sock_setsockopt+0x179/0x1b0 [ 418.124840][T17130] __x64_sys_setsockopt+0x13f/0x1b0 [ 418.124871][T17130] do_syscall_64+0xfa/0xfa0 [ 418.124895][T17130] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.124921][T17130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.124942][T17130] ? clear_bhb_loop+0x60/0xb0 [ 418.124968][T17130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.124989][T17130] RIP: 0033:0x7f2273d8eec9 [ 418.125009][T17130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.125038][T17130] RSP: 002b:00007f2274b42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.125060][T17130] RAX: ffffffffffffffda RBX: 00007f2273fe6090 RCX: 00007f2273d8eec9 [ 418.125076][T17130] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 418.125087][T17130] RBP: 00007f2273e11f91 R08: 0000000000000068 R09: 0000000000000000 [ 418.125099][T17130] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 418.125112][T17130] R13: 00007f2273fe6128 R14: 00007f2273fe6090 R15: 00007fffe1e24238 [ 418.125148][T17130] [ 418.125172][T17130] Mem-Info: [ 418.369094][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2870'. [ 418.373841][T17130] active_anon:7230 inactive_anon:0 isolated_anon:0 [ 418.373841][T17130] active_file:3337 inactive_file:40018 isolated_file:0 [ 418.373841][T17130] unevictable:768 dirty:136 writeback:0 [ 418.373841][T17130] slab_reclaimable:13688 slab_unreclaimable:174486 [ 418.373841][T17130] mapped:31736 shmem:3850 pagetables:1149 [ 418.373841][T17130] sec_pagetables:0 bounce:0 [ 418.373841][T17130] kernel_misc_reclaimable:0 [ 418.373841][T17130] free:1240338 free_pcp:16066 free_cma:0 [ 418.422039][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 418.432240][T17130] Node 0 active_anon:29520kB inactive_anon:0kB active_file:13348kB inactive_file:159872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127544kB dirty:540kB writeback:0kB shmem:14464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14572kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 418.558307][T17135] netlink: 'syz.3.2870': attribute type 11 has an invalid length. [ 418.579514][T17130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 418.583492][T17125] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.611303][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 418.621314][T17125] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.632082][T17130] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.673181][T17130] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 418.679815][T17130] Node 0 DMA32 free:1045352kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30420kB inactive_anon:0kB active_file:13348kB inactive_file:159872kB unevictable:1536kB writepending:540kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:53352kB local_pcp:20540kB free_cma:0kB [ 418.720049][T17130] lowmem_reserve[]: 0 0 1 1 1 [ 418.724865][T17130] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.756916][T17130] lowmem_reserve[]: 0 0 0 0 0 [ 418.763680][T17130] Node 1 Normal free:3898840kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11072kB local_pcp:7040kB free_cma:0kB [ 418.813903][T17130] lowmem_reserve[]: 0 0 0 0 0 [ 418.820639][T17130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.834325][T17130] Node 0 DMA32: 370*4kB (UM) 149*8kB (UM) 28*16kB (U) 28*32kB (UME) 106*64kB (UME) 64*128kB (UME) 31*256kB (UM) 19*512kB (UME) 23*1024kB (UME) 7*2048kB (UM) 237*4096kB (UM) = 1045296kB [ 418.846397][T17125] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.858552][T17130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.882580][T17130] Node 1 Normal: 184*4kB (UME) 49*8kB (UME) 37*16kB (UME) 181*32kB (UME) 64*64kB (UME) 13*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3898840kB [ 418.903059][T17130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.914496][T17125] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.950049][T17130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.964832][T17130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.976413][T17130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.981372][T17142] syzkaller1: entered promiscuous mode [ 418.992723][T17130] 46976 total pagecache pages [ 418.997459][T17130] 0 pages in swap cache [ 419.009573][T17130] Free swap = 124996kB [ 419.011774][T17142] syzkaller1: entered allmulticast mode [ 419.013804][T17130] Total swap = 124996kB [ 419.024699][T17130] 2097051 pages RAM [ 419.029287][T17130] 0 pages HighMem/MovableOnly [ 419.035560][T17130] 424543 pages reserved [ 419.041835][T17130] 0 pages cma reserved [ 419.053141][T17125] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 419.065438][T17142] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 419.065978][T17125] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 419.088402][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 419.253574][T10814] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 419.277180][T10814] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.322025][T10814] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 419.343353][T10814] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.565241][T17158] team0 (unregistering): Port device geneve0 removed [ 419.617793][T16733] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 419.627939][T16733] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.636382][T17166] syz_tun: entered allmulticast mode [ 419.671977][T16733] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 419.688132][T16733] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.852497][T17170] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 419.871780][T17170] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 419.895609][T17170] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2880'. [ 419.948533][T17171] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 419.987041][T17171] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 420.027906][T17171] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2880'. [ 420.127919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 420.260650][T17165] syz_tun: left allmulticast mode [ 420.292178][T17151] lo speed is unknown, defaulting to 1000 [ 420.468835][T17182] syzkaller0: entered promiscuous mode [ 420.477992][T17182] syzkaller0: entered allmulticast mode [ 421.167843][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.091239][T17193] bond0: (slave syz_tun): Releasing backup interface [ 422.109707][T17151] ªªªªª speed is unknown, defaulting to 1000 [ 422.125914][T17204] syzkaller0: entered promiscuous mode [ 422.133769][T17204] syzkaller0: entered allmulticast mode [ 422.157208][T17219] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 422.177953][T17219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 422.198394][T17219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 422.207861][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 422.450434][T17226] __nla_validate_parse: 2 callbacks suppressed [ 422.450456][T17226] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2892'. [ 423.233195][T17270] netlink: 'syz.2.2900': attribute type 13 has an invalid length. [ 423.242182][T17270] netlink: 'syz.2.2900': attribute type 17 has an invalid length. [ 423.250175][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.414834][T17270] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 423.478524][ T5897] lo speed is unknown, defaulting to 1000 [ 423.484314][ T5897] syz0: Port: 1 Link ACTIVE [ 423.509146][ T5897] lo speed is unknown, defaulting to 1000 [ 423.637618][T17285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2905'. [ 423.807151][T17302] sctp: [Deprecated]: syz.6.2906 (pid 17302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.807151][T17302] Use struct sctp_sack_info instead [ 423.933493][T17296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.994812][T17296] netlink: 'syz.3.2909': attribute type 5 has an invalid length. [ 424.006621][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2909'. [ 424.165115][T17320] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 424.242952][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2914'. [ 424.287809][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 424.302400][T17331] xt_connbytes: Forcing CT accounting to be enabled [ 424.455918][T17341] netlink: zone id is out of range [ 424.461514][T17341] netlink: zone id is out of range [ 424.471708][T17341] netlink: zone id is out of range [ 424.477937][T17341] netlink: zone id is out of range [ 424.490745][T17341] netlink: zone id is out of range [ 424.503332][T17341] netlink: zone id is out of range [ 424.817536][T17362] netlink: 'syz.6.2924': attribute type 7 has an invalid length. [ 424.826184][T17362] netlink: 'syz.6.2924': attribute type 8 has an invalid length. [ 424.834709][T17362] netlink: 'syz.6.2924': attribute type 13 has an invalid length. [ 424.846806][T17362] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2924'. [ 425.054166][T17369] netlink: 'syz.6.2926': attribute type 7 has an invalid length. [ 425.076666][T16733] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.091226][T16733] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.103486][T17369] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2926'. [ 425.116866][T16733] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.136977][T16733] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.163378][T17378] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2928'. [ 425.451453][T17388] syzkaller0: entered promiscuous mode [ 425.462510][T17388] syzkaller0: entered allmulticast mode [ 426.005616][T17401] lo speed is unknown, defaulting to 1000 [ 426.220488][T17433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 426.379910][T17438] veth1_to_bond: entered allmulticast mode [ 426.592798][T17415] lo speed is unknown, defaulting to 1000 [ 426.600650][T17401] ªªªªª speed is unknown, defaulting to 1000 [ 427.140968][T17423] lo speed is unknown, defaulting to 1000 [ 427.152818][T17461] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 427.224027][T17461] veth9: entered promiscuous mode [ 427.236294][T17461] bond11: (slave veth9): Enslaving as a backup interface with a down link [ 427.413550][T17415] ªªªªª speed is unknown, defaulting to 1000 [ 427.434847][T17423] ªªªªª speed is unknown, defaulting to 1000 [ 427.525919][T17476] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2957'. [ 427.539536][T17476] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2957'. [ 427.639015][T17477] bond1: Removing last ns target with arp_interval on [ 427.671070][T17478] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 428.447854][ C0] net_ratelimit: 11 callbacks suppressed [ 428.447878][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 428.625454][T17508] bridge0: port 1(veth0_to_bridge) entered blocking state [ 428.638037][T17508] bridge0: port 1(veth0_to_bridge) entered disabled state [ 428.645566][T17508] veth0_to_bridge: entered allmulticast mode [ 428.692130][T17508] veth0_to_bridge: entered promiscuous mode [ 429.171665][T17531] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.2970'. [ 429.181524][T17531] openvswitch: netlink: Missing key (keys=40, expected=100) [ 429.225555][T17525] syzkaller1: entered promiscuous mode [ 429.233728][T17525] syzkaller1: entered allmulticast mode [ 429.388163][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2972'. [ 429.411077][T17541] netlink: 'syz.2.2973': attribute type 137 has an invalid length. [ 429.481389][T17542] pim6reg: entered allmulticast mode [ 429.488208][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 429.499541][T17542] pim6reg: left allmulticast mode [ 429.622511][T17550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'. [ 430.180038][T17575] ip6gre2: entered allmulticast mode [ 430.527752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 430.690067][T17579] lo speed is unknown, defaulting to 1000 [ 431.385125][T17579] ªªªªª speed is unknown, defaulting to 1000 [ 431.398049][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 431.407219][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 431.415341][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 431.431824][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 431.439919][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.463671][T10814] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.531158][T17583] lo speed is unknown, defaulting to 1000 [ 431.567831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.629108][T10814] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.710447][T10814] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.795658][T10814] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.824757][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2989'. [ 432.607885][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 432.941541][T10814] bond7 (unregistering): (slave gre1): Releasing backup interface [ 432.949917][T10814] gre1 (unregistering): left promiscuous mode [ 433.333536][T10814] bond1 (unregistering): Released all slaves [ 433.434703][T10814] bond2 (unregistering): Released all slaves [ 433.450158][T10814] bond3 (unregistering): Released all slaves [ 433.464613][T10814] bond4 (unregistering): Released all slaves [ 433.480320][T10814] bond5 (unregistering): Released all slaves [ 433.567871][ T5830] Bluetooth: hci1: command tx timeout [ 433.586620][T10814] bond0 (unregistering): Released all slaves [ 433.601932][T10814] bond6 (unregistering): Released all slaves [ 433.697520][T10814] bond7 (unregistering): Released all slaves [ 433.714509][T10814] bond8 (unregistering): Released all slaves [ 433.820110][T10814] bond9 (unregistering): Released all slaves [ 433.835197][T10814] bond10 (unregistering): Released all slaves [ 433.852255][T10814] bond11 (unregistering): (slave veth9): Releasing backup interface [ 433.862890][T10814] bond11 (unregistering): Released all slaves [ 433.877201][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2990'. [ 433.887036][T17593] lo speed is unknown, defaulting to 1000 [ 433.894153][T17609] tipc: Enabled bearer , priority 0 [ 433.895848][T17610] syzkaller0: entered promiscuous mode [ 433.919670][T17610] syzkaller0: entered allmulticast mode [ 434.040523][T17617] tipc: Resetting bearer [ 434.106207][T17617] tipc: Disabling bearer [ 434.145222][T10814] tipc: Disabling bearer [ 434.159907][T10814] tipc: Left network mode [ 434.249751][T17583] ªªªªª speed is unknown, defaulting to 1000 [ 434.374126][T17593] ªªªªª speed is unknown, defaulting to 1000 [ 434.543921][T17643] netlink: 'syz.6.2997': attribute type 4 has an invalid length. [ 434.556480][T17640] nbd: couldn't find device at index 0 [ 434.627244][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.641969][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.660028][T17643] netlink: 'syz.6.2997': attribute type 4 has an invalid length. [ 434.668739][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.682306][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.692036][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.702562][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.723162][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.734319][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 434.744785][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2995'. [ 435.648066][ T52] Bluetooth: hci1: command tx timeout [ 435.786406][T17658] xt_CT: No such helper "pptp" [ 435.858343][T17653] bond4: left allmulticast mode [ 435.906041][T17653] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode [ 436.013180][T10809] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.039210][T10809] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.061946][T10809] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.088231][T10809] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.463487][T17593] chnl_net:caif_netlink_parms(): no params data found [ 436.882507][T17682] netlink: 'syz.5.3006': attribute type 5 has an invalid length. [ 436.965806][T17593] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.980030][T17593] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.997554][T17593] bridge_slave_0: entered allmulticast mode [ 437.014721][T17593] bridge_slave_0: entered promiscuous mode [ 437.038901][T17593] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.046132][T17593] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.088439][T17593] bridge_slave_1: entered allmulticast mode [ 437.099905][T17593] bridge_slave_1: entered promiscuous mode [ 437.265828][T17704] netlink: 'syz.5.3010': attribute type 21 has an invalid length. [ 437.310605][T17593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.390797][T17593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.550067][T17593] team0: Port device team_slave_0 added [ 437.591477][T17593] team0: Port device team_slave_1 added [ 437.624052][T17720] tipc: Enabled bearer , priority 10 [ 437.728008][ T52] Bluetooth: hci1: command 0x040f tx timeout [ 437.815404][T17593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.826120][T17593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.852847][T17593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.866805][T17593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.874156][T17593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.901503][T17593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.035451][T17593] hsr_slave_0: entered promiscuous mode [ 438.056681][T17593] hsr_slave_1: entered promiscuous mode [ 438.065372][T17593] debugfs: 'hsr0' already exists in 'hsr' [ 438.072877][T17593] Cannot create hsr debugfs directory [ 438.113103][T17735] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 438.132188][T17735] bond9 (unregistering): Released all slaves [ 438.186519][T17695] lo speed is unknown, defaulting to 1000 [ 438.476638][T17755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.642915][T17755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.829659][T17755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.002153][T17695] ªªªªª speed is unknown, defaulting to 1000 [ 439.285745][T17755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.810338][ T5830] Bluetooth: hci1: command 0x040f tx timeout [ 440.498552][T16733] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.511768][T16733] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.637571][T16733] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.830852][T10809] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.013619][T17798] __nla_validate_parse: 8 callbacks suppressed [ 441.013638][T17798] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3030'. [ 441.104152][T10814] IPVS: stop unused estimator thread 0... [ 441.218742][T10814] ------------[ cut here ]------------ [ 441.224362][T10814] WARNING: CPU: 1 PID: 10814 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 441.234188][T10814] Modules linked in: [ 441.238368][T10814] CPU: 1 UID: 0 PID: 10814 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 441.249015][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.259655][T10814] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.264473][T10814] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 441.271567][T17800] siw: device registration error -23 [ 441.278004][T10814] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 69 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 59 14 f8 e8 14 cb ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 cb ce f7 90 0f 0b 90 e9 60 fe ff ff [ 441.298565][T10814] RSP: 0018:ffffc90003367878 EFLAGS: 00010293 [ 441.305427][T10814] RAX: ffffffff89f0c8ec RBX: ffff8880322ea480 RCX: ffff88807df03c80 [ 441.313674][T10814] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffff88807df03c80 [ 441.322297][T10814] RBP: ffffc90003367990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 441.330623][T10814] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da640 [ 441.338722][T10814] R13: 1ffff9200066cf3c R14: ffff8880322eb940 R15: dffffc0000000000 [ 441.346831][T10814] FS: 0000000000000000(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 441.355900][T10814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.362646][T10814] CR2: 00007fef5b1156c0 CR3: 0000000078180000 CR4: 00000000003526f0 [ 441.370747][T10814] Call Trace: [ 441.374061][T10814] [ 441.377270][T10814] xfrm_net_exit+0x2d/0x70 [ 441.382054][T10814] ops_undo_list+0x49a/0x990 [ 441.386702][T10814] ? __pfx_ops_undo_list+0x10/0x10 [ 441.391970][T10814] ? do_raw_spin_unlock+0x122/0x240 [ 441.397237][T10814] cleanup_net+0x4d8/0x820 [ 441.401856][T10814] ? __pfx_cleanup_net+0x10/0x10 [ 441.406834][T10814] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.412308][T10814] ? process_scheduled_works+0x9ef/0x17b0 [ 441.418146][T10814] ? process_scheduled_works+0x9ef/0x17b0 [ 441.423912][T10814] process_scheduled_works+0xae1/0x17b0 [ 441.429705][T10814] ? __pfx_process_scheduled_works+0x10/0x10 [ 441.435748][T10814] worker_thread+0x8a0/0xda0 [ 441.440504][T10814] kthread+0x711/0x8a0 [ 441.444626][T10814] ? __pfx_worker_thread+0x10/0x10 [ 441.449973][T10814] ? __pfx_kthread+0x10/0x10 [ 441.454634][T10814] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.459979][T10814] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.465213][T10814] ? __pfx_kthread+0x10/0x10 [ 441.469960][T10814] ret_from_fork+0x4bc/0x870 [ 441.474591][T10814] ? __pfx_ret_from_fork+0x10/0x10 [ 441.480178][T10814] ? __switch_to_asm+0x39/0x70 [ 441.484981][T10814] ? __switch_to_asm+0x33/0x70 [ 441.490414][T10814] ? __pfx_kthread+0x10/0x10 [ 441.495054][T10814] ret_from_fork_asm+0x1a/0x30 [ 441.500007][T10814] [ 441.503072][T10814] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.510369][T10814] CPU: 1 UID: 0 PID: 10814 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 441.520024][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.530212][T10814] Workqueue: netns cleanup_net [ 441.535010][T10814] Call Trace: [ 441.538302][T10814] [ 441.541263][T10814] dump_stack_lvl+0x99/0x250 [ 441.545874][T10814] ? __asan_memcpy+0x40/0x70 [ 441.550480][T10814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.555685][T10814] ? __pfx__printk+0x10/0x10 [ 441.560295][T10814] vpanic+0x237/0x6d0 [ 441.564381][T10814] ? __pfx_vpanic+0x10/0x10 [ 441.568911][T10814] panic+0xb9/0xc0 [ 441.572659][T10814] ? __pfx_panic+0x10/0x10 [ 441.577104][T10814] __warn+0x31b/0x4b0 [ 441.581099][T10814] ? xfrm_state_fini+0x26d/0x2f0 [ 441.586053][T10814] ? xfrm_state_fini+0x26d/0x2f0 [ 441.591000][T10814] report_bug+0x2be/0x4f0 [ 441.595430][T10814] ? xfrm_state_fini+0x26d/0x2f0 [ 441.600381][T10814] ? xfrm_state_fini+0x26d/0x2f0 [ 441.605333][T10814] ? xfrm_state_fini+0x26f/0x2f0 [ 441.610280][T10814] handle_bug+0x84/0x160 [ 441.614543][T10814] exc_invalid_op+0x1a/0x50 [ 441.619060][T10814] asm_exc_invalid_op+0x1a/0x20 [ 441.624025][T10814] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 441.629587][T10814] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 69 34 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 59 14 f8 e8 14 cb ce f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 cb ce f7 90 0f 0b 90 e9 60 fe ff ff [ 441.649204][T10814] RSP: 0018:ffffc90003367878 EFLAGS: 00010293 [ 441.655284][T10814] RAX: ffffffff89f0c8ec RBX: ffff8880322ea480 RCX: ffff88807df03c80 [ 441.663267][T10814] RDX: 0000000000000000 RSI: ffffffff8d9d15ab RDI: ffff88807df03c80 [ 441.671250][T10814] RBP: ffffc90003367990 R08: ffffffff8f9e0f77 R09: 1ffffffff1f3c1ee [ 441.679229][T10814] R10: dffffc0000000000 R11: fffffbfff1f3c1ef R12: ffffffff8f5da640 [ 441.687208][T10814] R13: 1ffff9200066cf3c R14: ffff8880322eb940 R15: dffffc0000000000 [ 441.695201][T10814] ? xfrm_state_fini+0x26c/0x2f0 [ 441.700165][T10814] ? xfrm_state_fini+0x26c/0x2f0 [ 441.705140][T10814] xfrm_net_exit+0x2d/0x70 [ 441.709570][T10814] ops_undo_list+0x49a/0x990 [ 441.714178][T10814] ? __pfx_ops_undo_list+0x10/0x10 [ 441.719301][T10814] ? do_raw_spin_unlock+0x122/0x240 [ 441.724517][T10814] cleanup_net+0x4d8/0x820 [ 441.729023][T10814] ? __pfx_cleanup_net+0x10/0x10 [ 441.733984][T10814] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.739193][T10814] ? process_scheduled_works+0x9ef/0x17b0 [ 441.744920][T10814] ? process_scheduled_works+0x9ef/0x17b0 [ 441.750738][T10814] process_scheduled_works+0xae1/0x17b0 [ 441.756328][T10814] ? __pfx_process_scheduled_works+0x10/0x10 [ 441.762343][T10814] worker_thread+0x8a0/0xda0 [ 441.766982][T10814] kthread+0x711/0x8a0 [ 441.771069][T10814] ? __pfx_worker_thread+0x10/0x10 [ 441.776189][T10814] ? __pfx_kthread+0x10/0x10 [ 441.780793][T10814] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.786008][T10814] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.791222][T10814] ? __pfx_kthread+0x10/0x10 [ 441.795843][T10814] ret_from_fork+0x4bc/0x870 [ 441.800449][T10814] ? __pfx_ret_from_fork+0x10/0x10 [ 441.805575][T10814] ? __switch_to_asm+0x39/0x70 [ 441.810342][T10814] ? __switch_to_asm+0x33/0x70 [ 441.815117][T10814] ? __pfx_kthread+0x10/0x10 [ 441.819735][T10814] ret_from_fork_asm+0x1a/0x30 [ 441.824525][T10814] [ 441.827957][T10814] Kernel Offset: disabled [ 441.832284][T10814] Rebooting in 86400 seconds..