last executing test programs: 3m25.105391838s ago: executing program 4 (id=8349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000001000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) 3m24.994676209s ago: executing program 4 (id=8350): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)={0x4}) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x300, 0x0, 0x10000047}, 0x4000050) 3m24.912919775s ago: executing program 4 (id=8351): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7fff, 0x9, 0x4, 0x6, 0x8001}, &(0x7f0000000000)=0x98) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000fae20200703aba"]) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="f40000000001050500000000000000000a000005a80002806300018014000300fe8000000000010000000000000000bb1400040000000000000000000000000000000000060003400004000006000340000000001400018008000100e0000001080002000a01010114000180080001006401010208000200ac1e000114000180080001000a01010208000200640101012c00018014000300000000000000000000000000000000001400040000000000000000000000000000000001300004802c0001800600050005050000050002000200000006000400f7020000060005000806000005000300b800000008001a4000000c890000170000000b09000000050000000ac4cd4896786560c2e91edafcc101dc2530688ce37447b1504e7ee196c81d7e5b2cf71248be79ed800d37424d0e6b35307c4fe9"], 0xf4}}, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000280)=""/8, 0x8, 0x700, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xcf, 0x2}, 0x8) 3m22.858289099s ago: executing program 4 (id=8370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendto$inet(r2, &(0x7f0000000000)='\x00', 0xffffff4a, 0x4004015, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000000100)={0x1360, 0x14, 0x1, 0x70bd25, 0x25dfdbfb, {0x28, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x49, 0x1, "b8da8b70ee6c9c4bdbdd18c9c891b3982cefe9781a67b3d1c6e38d6b4c3be4fb535063cba88194df7c97735bf96c963de46d3ce3864fce4de6f0bf5af722ee8c7b01018698"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "a082808bcfcf09ce6d869a7f3359e9d9961ecd630fb550fd0ddf195dd77d55f330f5ef71c4fa417065f5dcdfe4c3429ee6d272acd749e1f6f6c56ec5664ee247090ac495561f5c8ffdcf0bcdede2dd4c17816bd88da2a29fe439c0916ac9b4ee4319c8bb68733b17e4a4d4311d8863e4be33d0a2431b4b5dbb5f12ac264a59b7aac15a40fe253ec733e9d2fdef8c5cf2c7fcc65080957297442bcbf88fb71dc6200df75d73a8557b1da2ea5411e7f82e248f57d3999c90095c1fd6fcf027121337388fb7d121eaba1575"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "2d25a1ddc4ae77107aebbe74e78089102d1d74451e7652e1c0e8cf2b218a1158eed15b3259d70c69031eb645cd900d4dccf22cbfb1076ca0a4c48989cefc0ea588d9e5b11b419a4b"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "aea2df3fc76e9a28993fd7a54bffc2ac80f0024e9d71d1812d1a52cf78a78a19a2cb04c37e4da909508b27ae0608f4456beb9b953716b58f964229da754ff45c5ae4f8e3a8c2fad9030c700986ecc5e7b9e8d3206ec8be47e2f9f42b9bcbf2ab9aa2a369711c0d5bd5c21f3bd638fdc8a5998438"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "22c77abc264aeb124f05c27857cd183b6ae80b415dc453e40bb3258c76a851fab3bb36f37f2926d7592f16c0aca7dd28cdff4fe3835d1940ce44a2b13f83264c508575d0b55e2e3333a53a12347d798c46ec70bb0917628e60a335b5fb769be897e54f27483d822686a5cfa6cb251c55e2c9dc403202578fc40b37d3df250bcb6e99fa0681101bbd9cf1d961b8127fa869d4788a1ce6c69a8cfe68c21d88636dae68e92ee8d3606817cdc49194ef80ee22580378e9bd13b5f2"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "dc1ed054999f591d41bd9b7482e8818816518378e2a3f051cd4bff8139a29cb3959145eba117fc0afda22c8f33c3201056b250cc2ab40a36c73c61b06d0281efa01feca597ebc8b2a527f0768cc6dd9ca135b10ca4da90ae1c39639614bfe33c4b4c48c9d82217c6771cfec074d48db54dc7a39fc7c7d68ad04eed834c6031ae57979b3aaf4161e6297af272c45b1bc81dfd5618947db066ede41bfab8721665a927357e"}]}, 0x1360}, 0x1, 0x0, 0x0, 0x80}, 0xc00b) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 3m21.813737s ago: executing program 4 (id=8377): socket$kcm(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)='%pB \x00'}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000f40)="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", 0x57c}], 0x3}}], 0x1, 0x4048894) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000009000000000000000000000000000000a126efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000ac00000000c61d730f4480da8c08000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x400c4) 3m12.112265902s ago: executing program 4 (id=8410): socket$kcm(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)='%pB \x00'}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000f40)="82f5252be7dc93dfe06dd6116412c42be1ca316c088207d2a48756b23f3a13074aa35c301d591f03061d8fe0f70f307034cd539cfff48644efbc6bb665cb8cf85f3786475cbd3b395d03992f14c6c63d0d575ada14c0fb897d08f5b0f108ca36f7855d777c9e0c382d2d68017acfa27eb1048a98e4e4c58f86b2c12057a80cf46fbebc3cd50f86245e0e8a2126c75132fda11d67a669de1a5538e8f0817e470099989748f5b8371a76e6072b1146af5355df1f3086c08daf9f53746fdb79dc591f879ee1732d9b447e4657f9c92018cb23037022eaaef04c25d112818a63212938a14759721aeda1315be2605c5a7bfad6ac073e7964ea1097a11013b7448f361d9b3477a191c2fb74662d9fc88e872e858287fe3649fc6f9fca64215febaf018dea93dc186ded9ceffdb34e0bf61bf4f55489eda095f288974e55d8d51bb5d504a09e26cf3faf6a5dc50c52b2fb5e4c6b20b31f29dd823edb6a6603d5762d2a003dd0d234f026f62d3f3aa88692b706c89595a28aeb5c2c8d05eacdac85d7502b9ad30acaf1466aaef3c7d5e4e3e8421abe23905de3d2cd728a4c86ce2f8339246d63b75ebdd8c851f272a1e8ac1fc226dbb344f4ab0757be261a6ea692d181091784b9e3e79050cf5491fbb0da2a691071cb3a54485eae5bd90965fe9fa7342ffcbc7830e4d927ec6bf492448041e0aaa4593e13f837c2cc4d8e08e91460affa09e1d0fdb3f6436167a2495dab0720550534052f0bdebbf89518dc6d8b1039cf24b5a156df791f520c6f734d54c5152b6784cc50ad9923fcee4c2a19e2f1a5bcd42cc25173f1ff94ec3610f2706d3697a459aebf4ea0a82c7874720027d1e042904b9bfbbcbc63acb27cca1599a20ff531aad8543cc2ca7d84f179e2999a01aa24c6b3fca9ef634a1de6e2dcdcf50c1d7f37d3fe5136352619aa2da170db477aa006804d991d30d10cba614d956c91907f4778775a4655d046a264a9b3e2164783532fe300e335842627953e4911828694af689da87617029175e8a3bdcf9928cdaea149db6dbdbde6fb302d4fd1a4d54c6462e20ffe2f5fd45b76118c81db7842ec4ff74a13ada9d479a04f9968b68e193968908a639596d6d67dc33a0427a7f4e6a733cb505d01508ee2fd8657343c4047a04f462b9ff1648ef9d76e7dfeb673c1f7e73d4ecb7edf4fa98495ddc752c312a5273b8488a0a500ee5582a68bd2cc1bfb3f8149150e59173d0088565762ca8f82e5f72b5c2e11d4dbb5c59a30f9890dc24542d8b1c731d2fd70fe8e8f5633116648ef3286b19ff6bbfd92b2f9acbca50612adbb93fb326c5d28ffbd47682dc0305dd0d7f99a370f8fd77ac06cce61517c699d5074940aef29f661baabacdd26dd1a3f2d713a6ff4d41a15993d1c599e7a59e313250aca6659cc8cffe9584c5d0b841ba8e047096cca5fb088f6123904c31fbad75021d2754422304fa8b72b86e0faffa2d1d4c3421f32201a72cd13d21c4f21da33ea28d18757eda31498732e3af09179ab370ab58c81a4ba8630f9b87784296e180ae5f7d37a194f28a210b2d4ef1e001a180de739bee544d7d033940f581d7fe5f042ef5d995da2fc9006d24b061e3c42aa263684c911c1257c186be5625f177d699d8421307bdac6977e565e6fdf66d5a0145bebe061a34a6382f663da3aeec772e8b0e82c6bc8499e066a6455b255e80c70a56c85fae0ffd7b3c9bbec1a3484ac160225287a8ab59d793aa6b82b67cef98684d2c3906364d07290238709a3778e2151d0b10f21b6bc542c9dcb8f19393eb4f707caa8d4798a5eccaba5a24c79ec016aba5fcb4118755ab27b1d6610a897c3371ff70547962b0a5a69e1de3426f8fc59806844a2a0077d7b6fc5c638ddc45f1074452787cce2471477165d4e3692333ae2db53498fd3945b9b878358ceed665c085ffcf4c76a8e5fa91f02cca9ef91ae37d2269bd3f00a9b249abcb316bcc6c0b3", 0x57c}], 0x3}}], 0x1, 0x4048894) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000001020000000000000000000000000a126efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000ac00000000c61d730f4480da8c08000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x400c4) 2m56.929088942s ago: executing program 32 (id=8410): socket$kcm(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)='%pB \x00'}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000f40)="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", 0x57c}], 0x3}}], 0x1, 0x4048894) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000001020000000000000000000000000a126efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000ac00000000c61d730f4480da8c08000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x400c4) 2m54.707362862s ago: executing program 0 (id=8481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x60, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa80a}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x92}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @generic={0xf, 0xa, 0x6, 0x21, 0x5}, @generic={0x8, 0x7, 0xd, 0xffff, 0x27}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xf6, &(0x7f0000000740)=""/246, 0x41100, 0x3d, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000600)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xa, 0x9, 0xfffffff9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000880)=[{0x4, 0x3, 0xd, 0xa}, {0x0, 0x1, 0x7, 0x5}, {0x5, 0x3, 0x2, 0x7}], 0x10, 0x67f}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4048000) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r12, 0x80044942, &(0x7f0000000200)) sendto$packet(r9, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xffffffffffffff77) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 2m51.27956089s ago: executing program 0 (id=8482): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) connect$ax25(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r8 = socket(0x2b, 0x3, 0x1) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6363, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x7, 0x8, 0xf}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r12 = socket$inet6(0xa, 0x3, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0xc8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) sendmmsg$inet(r12, &(0x7f0000004a40), 0x1, 0xd5) socket$kcm(0x2, 0x200000000000001, 0x106) 2m50.744547537s ago: executing program 0 (id=8488): r0 = socket(0x1d, 0x2, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x1, 0x0, 0x0, 0x5, 0x0, 0x4}]}, {0x0, [0x61, 0x3e]}}, 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000a80)=0x9, 0x4) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000a8fc6eb93cf4bdf3da6a223d4d9a3944e6af5e82b633852ebbfcf6ffa7091eabeb64a74faa1f92b5dc7534300a4610a52bb853f10a383d1de635967408f2cfec1ba5af9b5757e5e1e5acba90c10b5085077197ae0a37907965a3bbee940e9c6cd17ac7ad017e08aef74d52283d14f51c1d926f4a244657cd1784911d1d4700", @ANYRES32=r5, @ANYBLOB="0160000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r5, @ANYBLOB="08000300ac1e0001"], 0x44}}, 0x40848c0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="1b2e360807010001a001001c0012800900010069706970000000000c000280080003057f000001"], 0x3c}}, 0xc004) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000000000f5ff000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000808000300000000cb08000140000000030900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=ANY=[@ANYBLOB="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"/8310], 0x2070}, 0x1, 0x0, 0x0, 0x80}, 0x20845) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000008c0)={'gre0\x00', r1, 0x8000, 0x8000, 0x2, 0x77, {{0x4c, 0x4, 0x2, 0x0, 0x130, 0x67, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0x29, 0x1, 0x5, [{@rand_addr=0x64010101, 0x74}, {@multicast2, 0x2}, {@multicast1, 0x1}, {@local, 0x200}]}, @ssrr={0x89, 0x23, 0x66, [@broadcast, @remote, @local, @multicast1, @broadcast, @local, @local, @multicast2]}, @timestamp_addr={0x44, 0x44, 0xfe, 0x1, 0x2, [{@broadcast, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1244}, {@multicast1, 0x1}, {@remote}, {@broadcast, 0x29ebf824}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x4, 0x2e, 0x3, 0x6}, @timestamp_addr={0x44, 0xc, 0x4b, 0x1, 0x3, [{@multicast2, 0x8}]}, @rr={0x7, 0x2b, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @local, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0xec, 0x3, 0x8, [{@multicast2, 0x400}, {@loopback}, {@broadcast, 0xd9}]}, @ssrr={0x89, 0x1b, 0x2f, [@multicast1, @remote, @private=0xa010101, @empty, @multicast1, @multicast2]}, @rr={0x7, 0x1b, 0x18, [@remote, @multicast1, @loopback, @multicast1, @local, @private=0xa010101]}, @ra={0x94, 0x4}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"}) accept4$inet(r0, &(0x7f0000000780)={0x2, 0x0, @dev}, &(0x7f00000007c0)=0x10, 0x80800) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000280)=""/93, 0x5d}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000000540)=""/209, 0xd1}, {&(0x7f0000000640)=""/183, 0xb7}], 0x5, 0x0, 0x0, 0x814}, 0x4000) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_80211_inject_frame(&(0x7f0000000880)=@broadcast, &(0x7f0000000b80)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x6}, {0x10}, @device_b, @initial, @initial, {0xa, 0x4}}, @random="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"}, 0x5ad) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$int_in(r7, 0x5421, &(0x7f0000000840)=0x1) 2m49.916322611s ago: executing program 0 (id=8495): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 2m49.679661161s ago: executing program 0 (id=8497): ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'veth0_to_bridge\x00', {0x9}, 0x5}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x3, 0x8, 0x0, 0xf8c, 0x800, 0x2}}, {0x8, 0x2, [0x2, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xffff}}, @TCA_MATCHALL_ACT={0xfffffffffffffeff}]}}]}, 0x48}}, 0x20040054) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r12, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7f, 0x60000000, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x158, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x335}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x200}}, 0x0) 2m49.182191628s ago: executing program 5 (id=8467): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (fail_nth: 3) 2m48.597313227s ago: executing program 33 (id=8467): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (fail_nth: 3) 2m48.586009603s ago: executing program 0 (id=8503): socket$kcm(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000014002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)='%pB \x00'}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000f40)="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", 0x57c}], 0x3}}], 0x1, 0x4048894) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000000a126efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000ac00000000c61d730f4480da8c08000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x400c4) 2m48.453847436s ago: executing program 34 (id=8503): socket$kcm(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000014002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)='%pB \x00'}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000f40)="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", 0x57c}], 0x3}}], 0x1, 0x4048894) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000000a126efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000ac00000000c61d730f4480da8c08000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x400c4) 16.075973856s ago: executing program 3 (id=9255): unshare(0x22020400) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) unshare(0x40020400) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa7, @any, 0x7f, 0x2}, 0xe) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x3c, @dev={0xac, 0x14, 0x14, 0xa}, 0x4e20, 0x2, 'sed\x00', 0x22, 0x9, 0x28}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 0x2, 0xffffffff, 0x7}}, 0x44) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14.179445698s ago: executing program 3 (id=9272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='\n'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r4, 0x4, 0x2, 0x2}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000000)) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x3a, 0x1000, 0x6, 0x770, 0x2, 0xbabd}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) 14.007853123s ago: executing program 3 (id=9273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x8864}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xf4, 0x0, 0x41, 0x21, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x26) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd6, &(0x7f0000000380)=""/214}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x6c0, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000800)={0xa0000006}) close(0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12.390112606s ago: executing program 3 (id=9285): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff0304"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090328"], 0xfdef) 12.06584065s ago: executing program 3 (id=9287): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x10, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="8eaf8723c6dd70c0b41f0a7b227f128615433a884deb2cb36419c33690aa44289f8262a4e89febcbda821ab628b0773d142805f0ce93a51cd277c5f89bff8da74097b66e08cf6484e6f9fb8395556f326451900fb88c702f77394bf3db4b86bed2a020df81593a5ab7c5cb605dabcb61", 0x70}, {0x0}], 0x2}, 0x8c90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14141700000000001a000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 11.681199871s ago: executing program 3 (id=9290): setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 9.70003236s ago: executing program 2 (id=9306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc0200000000000000000000000000000000000032"], 0x23c}}, 0x0) 9.611986848s ago: executing program 2 (id=9307): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@local, 0xc, 0x1, 0xff, 0x0, 0xfffa, 0x80}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) 8.616240159s ago: executing program 2 (id=9309): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x8000) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff51ae00"}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x4, 0x1, 0x3, {0xa, 0x4e22, 0x8001, @empty, 0x9}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="707e62d6de2f69e61f5296dab67acc4d6159591c090b7634a4337120282aab49a9d138dd9f80680bded9ddff5d6a87e60425b2bffb63f1dc2e739052d13a1166ccaace5af283b849068bce78940400a2d819b1d25e348651de4f5952746c4d2f126d7adc88c57dbaa602928da5b60d43bf446225e0023e10c886518a1a0fe09feab82e131fb3b9fcf29dbc26fd9caf1b2650077c4999ba6aebdbab45d4f02657d4056cec123ce8f307e8b001a7bf16438531276d1c6b413ebb4235b1744b71a1c05acf0971f11d0e79988d362b8a471387e013bfbabdd7f486b4a18c73b5c22b8ab03c359bb7b849eb6ecdcdba7b8dfab30eb4314b7f7e8df5bc08b5d3235733c17853c4a581c96357f70c0adeee387fd117aa805becb862ca9a0e8f8be10ed55d44dceb3a1decfd64c14738f5e082296be5bbdca995ec9c085bc656f649b5ed2215f0f6c16d0def10a6f3d91dfcbcd9afff6c1b1ab1472e15431909cdfc6e3e2ee4c07ec30d692b35aa975cc9a6602447a9a73391831fb533299c6ae9a08f6b74ce847fa18c16331efcc875411c6f8290b428dc59b969c1dbb1b55c9c39e5927a9a3f75289521074642cc877e8ea061378537069ed07f1a67f77c6983f0faae90d2beb3dfeaa837e1d8dd3e176f589047f00562df0da0edc7b35be96e9c524583c480ca441f6734b35c02ad04362f5898fd0738ad38a1f5bc7250005e28e7ecacd77129a085795a8dbc6088e414eab1f2883b0f6862405c158792e0b57a18f3386d23ebc1d40e24d427eccb833e6b28c09384bdd63527f085862ee69910bbb1661fb7348005fdcbbe66954dc2172fbc2788706b41461a0cbb4c774bd0f29a2c5811d54a4a84986680ac1dd0839949cf988700ca8a39420d5fa6cabf8775ef0af67f8647b4f98efe8f1029f9d570869390268d7fe2926945a7ae4e9aaf52823b2d5e0f1a5f11036f4da9294a609ddcbdac2c6d9eaaaee6ff579f9440f4cbbdb2cfb161c0cc1c8b261dfa8421209034b9f2f2f89eb51dfb71be3262f84ef70f4349750425159909938a84d959851db878958a41c963fe8a52105fa2d79d2a8e045e05ea1a74952ba9dd6c73f7c0746c6c1dd3458d95e2c4349cc26ed4d355b6ab0cc191ad008570b9f4a2bdbd6bfd8ea0d44b2cdea899c894d976b45f804669f6d9fdc91f758e7e135e5253e961260a6fc01b5102b3ff93f287c61c69701a4af0347b4c16ec0aaa7203c856553908726c440291303603e662018f3ca9b2926ea71374723be77736a6cfa6dec09f099e5aefb25b30dca096975955661f438a5ea9a9811c4fedef827aeb9a886c966c2c313b997929cca73f18b367b2f646cfdb0aa16dab30ab14d91baaeefb5ee654f0055b77e5f343ebd2bf4fb9656ec1affba8887671992bcc51196d87a8a414bd7a9ff871525ddf7f5be54440e176936ab03313d500695e8405d094dce720653d8cc589960b88ebf3b093a05ad5f6e8bb22fc3fdc8725783d1aa60d7a0185442ce6fd9c122471baa173386c508c2b5abd421164541670fe10ce7cf1db24b896b09e02f4e135765717843b85ae53b1114912b6473145f2882c5920afe74e017d5acc3d78708bb5782d67bff995a90cd052fcaad968ed53054527bb89ed5abfe71dba2f3b973148710e67bb2cfd8c77d05bbb057aa6e6dc35da6b55feeea22936724686311aec5d9607fc3ec663e6585f3199844210e4c4ad640ec0c5d1383590909e7392a2373669ed2239c274ae83d4d55ee785e2be99ecd2ea61cf79b23adf48428ccf15f6542c9411f8c8bc2158f796f9a7fd078cb26fe2efa88e6d8b421370285c5f8073ab1844845d6f291cdceb23ef5b77eb56d8a5771acd8d257bf5871c7415ef377b3d4373aed8d970734f7d536f2f72a0383a0bc434fdbd46aa11481235d89ca61d7a6f8862dedb93b2c1e324b5fd07defca90c83c062a7f8a613267eb5308a8dbfdad54d61f6e21dbc22563406d9ff0a1d8c3ae9e75b62b65314095ef2d0f6054695edcdda01313e4dda065113942c04b7a7d7ef22c60d80e6ee9edbcb7b20cca999dbc8cdf31b1b57124481627b027e30d968407a00071db82061d19dde86d4411bc793c70f4f017aeac7ff37b2e704de1fada094f1dfa1344d8d73304e99e0129b3a836943b73698f5c53df2ec0deb65e344ae0efd935029b8c423c7344177315859affba30f4164d211ef7ac9c90ab11fbff1602f4b6b870230dc294bd25cde99c477366a86f3933da483c5fc8b61d1a609948d1c5f8114870df7f268a0c4fe17ba66a9793e9fbd3d7cf84549ad9c0f7cff7558f7bac3b318ff6fea3e931367e89dbc1661bc7def8ece487bf50d12b23718eff36e71e4a3004e3c31a2eb237cd72dad2254aceee1add24c6f56250c7644a6bb4acbdc55f7e38ba4530875617b0fbe5c2ba7756032f837b09212ad65be31c635e97cdb6a1cd56d10bedbec8d33a906cf007396b02988725d7c764774284760ef4e50fda9c16107822e724a194d4f2e145cc1ef6b1905a94878abf57fbd4775a6d868315960cf680cc32406f949fbeb41edd5607aa988e95ea80a45253bdebd676fc0744777f462b0630c6c01401b0de22b22a4f9ee5bd88fc3ae2d90f6cb6baed906e3392e7286e70f941282b5fd3a1b8d55d981d90c1e069ff06f2c766df9a90e38e6cae1d0aea455a4ca214827c084d2c821d79f9f3cefca612aeaeb0c5fb78aa386387377ab435e6a2c884ff5abc7c8cddee4332054be6ca443245d879c62abe09a56002abf08250bfd4286e5cc0999265e8f17da0840a25ae6720b88927ebed2a01b745877ece11d9f6c40937f272bcb9a978d730974e9bde609196e93ee2a6229e9c533e7652e727c8d0a15153bf0808f4a84c7b21b165a7601c0253f50db6a41d65ab7e174c399779e1998104299f484896ca450ca87c5a237d3b13c6541f4f2199a0a5a863d2fdf874102728476bec1ee313ff399624b114b20edbba1d30ac4d9477bce09de5c8f3f2b304ed5f1903d7b2ef3af78d41d807866faac491821a602399e2fe53ae068a085d01cf54c1e7a4b9cf2c0286e1eaf7b40071921b31d33a8d9d07b653a9dbe0984af8496211097197518fa7040e9cbfd2f598a39e3284ff36b411847260c69413b17ed45dbe97f57947c230451d2a80cbe865a250054e912a8164af27f366e4d5aa845a9e07b508faa43a1f2e2ef2f52a4588372969cb03d98dbb03b17d5e162e1471bb542d6510b96978057bc537ef2d2b0d05f06ccd6862e0f6c05238cbcf2117f816bf850cb74cf9168748770ff35d0e0cdf9bf745fa15fdab50fa67453d6e1da803cd9d8a51ba20d68d6fd84a307cea2f1c1d57368834f39c1220cac645f9b4f021862c376dddef1c447b4d3dc4c87a1d6273e23ea9d4b96ff739ddb16ca74523b991e799b508a22fdd8f07f06a47f42378cb5c166f13ffea32335db1fef964dea444357172204b2603f13682db4d4f05d5d9d0449c58cfb000a05536c81fb6a74188fbca928ff8a47b7379639e0af35c1fb7ec2b46028422078a91bf4f0347f0a2ced222b88b1e4061454a920595aba5fcf4c66b3c4065587ff5c0e777f48501f4b407481e35eec991cdf5af93ee97da9c795dc2d5136569fa563b99605d89eb96a85655ced6037500e600afec77aa4fe403d986c40cd467e499226dd3fc94f07f9c5590cec14684f9fcd8c7d6c4474c8ab9f03c16a4f897297487912ad1ce3dde24164beec4a0254d87c83ae2584dba0dd82a499d094c06587e12b71f6e498e4701bc3ac56429b6187394012ea7bb0b87c8d1192365be4a93a07cf0648a6f1c6ad4a77af97303398056e472640dc52efbe4f08305e9ed3bb3e9ba2a859e423c54fedda8078b83c74d42786cbd27ba7b38d3936bfe3c72f708297a037bfb0cc2a0e1af80d5053e96b8e97589635f84ea0bd4a21ca05592d4941b212b2a409de5081dfe48029dd01c6c7e9280ca7d8d38a03748f67ed257633c029489c3556d6c384b11434c1cd595bf1780bc5558b32c4babe6f770504aa2acf45cf57596fbf4ddebb8e2717836f386039c27982984dc29d967597a5c8c5a46674aeee5fb3602a0a82f00f5802cfe02eebc76ce45dec42e3af17eaedfcb60878653975bfa50646982e4d196862fc34ecf8e06142d6b291a4e57a640c31f7ab07fb8c16f4c4fced9155322d3443c3baa7bfabd6d5ea98b29b21b2faffd1f255a5b2d3a6c190df6a5281c5e50f4f621b701178ee2ffbbb4a0472d778cb0fb8b011af3e503f24b740d206d4864a06c50760029e44b701e758e0cf80ea4d4ff60ca16ab7482d82e293e4146144cfb7b96c5da9dfc68795673bed8529a90d24de0bcb1a55aa08114deb19c01db867776c2d6b5663294c6a18d2414665755d03eed2050d6cfcfad4955fb1dce9f829e90abf7e786529b213cf8f9a446f532e6c0b6e956fb041c1d3b89802121759f59262e183c06eedd7dd5d27c0e7af4145afa17543e781cd44831757c8480b054a244cc468826400ef64a34684309b8de6aee046c613d6202b91deab57fef26779748096789479f95b698ca88c94169d7cbdb65b0321d158f3b8c77af400e09f450126cbd22860f92b9c30bdedf71b9679cfb5eafc9b836ed3c7df2b66c81f2eba667040e952c228ccf0dc34cee3980be12fb0000f3008e6eba8c895a3587e181b80e8fc7ae890f7257f72a0e2ec44c0e3a273f708ff5139abab5bb628c805a1624999b33351e62826afc5da244f80017f96e7efc50c8e22d9189526ec3a54b5c9466f7d695da3a1f5487553aad2a6ee5157334c71902b0a329064506f7ec598313033d258bd7c581a945dbb0d917a047f6cc5220bcc5da444aea0e2d8d51c710f9f0a93ed4fadd7597747d11538c01109f54e1c0937dabe6fafb181021358b21155e7417f898c58b978547b41cd95972f3e18e70b2782d9adbb93962b7da46f9f4c9ee446ca8db5b6e0faab2a0beacd9cfb099e310b9d209e31e3c9eb3a1083f87604a1e3ddfdc54486598411e12c2b5fb112783c7668b7ecc9dd6e890110cd4ea5ea57bfba07ddd0845b64b756537de90dd68dae4e8f528804eac422a8d1530f46bde30981ee813466f65f28ff40d1b11af9ab6271a2254cddf097e0f9d6ca07459e48f164504524c07176f56d24a104bf5210e720a5d124d7dc59670b1776a60ac491f55156b39f9acb52d59827d2bd0f3cffedae678469677f767c2a49e17beb9a31796ef5", 0xe80}, {&(0x7f0000000140)="9e737f179b78e4b9c753b18f8f1e7fb4109ce8a70f3dd929e947b80646c9da9144295c4f65929388ae0bb4532fe5ecd282ac12cbc136c1276614977c533447a298a33e54738eac4a9a985a66dc8637f3979ac08b46525de30e05677fd81bc04a520d6c21f26f4df97a6a1b88c9a0cf3b5b9a661700db40d6fd0b4e7fc7c068555a79f45badeba4160225e0f3f9236b24c6229d9dc7330e16abccc48e4db68f341a78da411ff8d313f561fa", 0xab}, {}, {&(0x7f0000000200)="4931ead99291212e9a5eae2db5893916f97413c2cbf93974097c214bdf20784c4b2b9f412fe00e9a3a0a8725ba7c818aece1d958f71096ca6c1f903d28b2022ccda6a2c40a05556fcdc6ea462963088e78a7902e7e9b0bb50f50d87f971254395f6d84577b54fbcfa1c0e0b42764397c33dbc2f30f7ef31bcd95a5aa5779541aa787fa136ef4d4a74eca2afd00a85e9b3a5f18d1575dd187957a7a6eb4c09ab7a462ba717f27a22f79", 0xa9}, {&(0x7f00000002c0)="5a901317d8a463239f70907c993e4010d5fab282c12255e50d00f9004b7a610f4d7ce4419ba155c0eb54c423c60fcb3ba4e649e9ed608141e58fe0eed912de66b8918bc05659dce3ad8ed3519c04b5d3157edda341817b7a1e6a62a2b1a130e5208e07c6a675fb623d6df15f362c2d71d237f65693ec88d4a746d3a7b806bd126c22a244a039ade17090086c5ab49ea45b49294c16f67991abe72cd0f7f50474c655d0ea352b4d9ab4be30be75ec1ff29d161f3228c4751958", 0xb9}], 0x5, &(0x7f00000014c0)=[{0xb8, 0x117, 0x4, "88af99801ea5cbf53c1deaeadfb4cf6cb50e0d29ba475ee04c4656f6edd33242ffdfcc36488637dee9aab110454642499cf2fb40a4898ddc4454fff9e9f6060af54efa2e325682a9482f8bdc3d25e399db244b068527f9ec7388b36d9ef0d735b0022fa898546628019802e517a4cce2f4b2a4fa592ba39e2b8b86f6f3b50bdfd0cf3b5ffafc76a3b3ada2142cf2d856351cb9ab9a21d064c41d2870f7d1feee6c2090208f43"}, {0xf8, 0x9e, 0x4, "bda5ecb0d198b2e45ce79ca7cebace27d6dfe6cc30266acd3ae731e68120cfcfcb8de4af703e74bd2184fcc5f772a9e750d7c6ff191b1f04df2cd5edcb1d241ad47cd72c18a73c87411292c754b950fa21437782aa7c8ee8b790a81b59b0531bf6996c74cb95a8c5ad1ea4f42666ef1d74f95823ba7ad5060ae422a6164c2124120dba9fbeedd3781b8d07f6b4d9655bdb66543248638a6270a2f6fed416635e7094c5597101a58deba33e2252bd9f97cb0207884578d1481ff70450e61e9025014161805103e5b44b107581efa61d0ddf4c20ad9818c55150f6dd8f745fba5c0d3d"}], 0x1b0}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 7.795294629s ago: executing program 6 (id=9312): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (fail_nth: 2) 7.683901311s ago: executing program 2 (id=9313): r0 = socket$inet6(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x500}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0x24}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) close(r1) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 7.282894822s ago: executing program 6 (id=9314): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1}, 0x18) 6.911716863s ago: executing program 6 (id=9315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x2, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7fc260d6, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000502ebef100100003052abd700004000000200ff81e57c65893ace374afa4f6ed39771f1aa04290dcc56b211a8698a9c7e7cd02d54f7cd3223ef39fc4c09f06074f6eb6fc9ade42bdad24532cadcddb271c952b4c7f72627f475446914b450906b089e2ce5663b20d22ef1d944888a74424eab7408375782dc7e30e28706f16cfe85fb0d92a9737ad3622235a08e468296d208d8a1e54ccad2cb8c686db639799628fb292ca8cab541b266ae3129724e7174d320ff48d4214ab71c22d2d78475e39e5433b823a1650012bcd635de9fe82", @ANYRES32=0x0, @ANYBLOB="3a000000a00102001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r3, @ANYBLOB="0a000200aaaaaaaaaabb0000"], 0x50}}, 0x800) 6.675019551s ago: executing program 6 (id=9317): socket$kcm(0xa, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)='%pB \x00'}, 0x20) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}, {&(0x7f0000000f40)="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", 0x57c}], 0x3}}], 0x1, 0x4048894) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000020000000000000000000000000000000a126efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000ac00000000c61d730f4480da8c08000300", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x400c4) 6.487177218s ago: executing program 1 (id=9318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x28028081) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000004000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000002000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) 6.266986728s ago: executing program 1 (id=9319): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5a430}]}, 0x28}}, 0x28000000) 5.799364073s ago: executing program 1 (id=9320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x4, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x400}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x38}, 0x4000) 5.710824824s ago: executing program 7 (id=9321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}]}}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="110000000400000004000000a704000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000000000000002000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}]}]}, 0x44}, 0x1, 0x300, 0x0, 0x10000043}, 0x4000054) 5.571993017s ago: executing program 1 (id=9322): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000000020000008900020073797a30000000000900010073797a30000000001c000380180003891400010067656e65766530000000000000000000140000001100010000000000000000000000000a00"/112], 0x70}}, 0x24040884) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r9, 0x200, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005, 0x0, 0x80}, 0x4004890) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r9, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 5.319158729s ago: executing program 7 (id=9323): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x80, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x16c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "91f49b8fa9"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aae5447709"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c9e06bf934"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0a47d28f93"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x62}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7000000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13d}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1595}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x259}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_SSID={0x4}]}, 0x16c}}, 0x4000014) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000007000080000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000001801000020756c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000ffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b473e20e9000e8d84c45b8cee37faef5a633c0", 0x1a}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20}, 0x0) 5.19220704s ago: executing program 7 (id=9324): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1}, 0x18) 5.01700918s ago: executing program 7 (id=9325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="20002fbd7000fbdbdf2502000000080069000600000005003d0004000000080040000002000008006200080000000400d10014000200"/70], 0x4c}, 0x1, 0x0, 0x0, 0x894}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x87) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200)=0x10001, 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r9}, 0x20) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendfile(r7, r5, 0x0, 0xf03a0005) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f00000000c0), 0x9) sendfile(r11, r10, 0x0, 0x10000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x238, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x280}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 4.960499368s ago: executing program 1 (id=9326): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000010c0)=[{{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x40047452, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) 3.938126372s ago: executing program 7 (id=9327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000009c0)={&(0x7f0000000400), 0x0, 0x0, 0x0, 0x101, r0}, 0x38) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000063c0)={'vlan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x8000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x44084) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 3.645143234s ago: executing program 2 (id=9328): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x5, 0x1, 0x5}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={0xffffffffffffffff, 0x0, 0xf, 0x6f, &(0x7f0000000980)="2ab1d51f1e07a274a874a29cfc59d7", &(0x7f00000009c0)=""/111, 0x8000, 0x0, 0xa6, 0xd4, &(0x7f0000001b80)="4d4413c027461539b0134f2b882a23de063f1b34c1ca56a349cacc70eb8cb016a7b9dc6cf0870d3767daeacc765c220cdd579b61a44d232a95557e682bf92a538e02f16b2595babd28d1b0e730485209457c8cee536bc0ad7b125c26cd582e8a72839d427e38367a6d04d9b016ef01aad755e0dd452263770c0cb9047161c9db877af1561537cf0739927ee147407d62a109e421dd624c81cbb892f0c41ef9e042a8548bedd7", &(0x7f0000001c40)="c323261c60fb026fcb683c940160e5e3be815845b2d53350dd724610b8e9faefcad1e4fc78832dbfd02fb55bc6b9487e382ff181b1d6db620a8a63ccd47fc3521d83fc1b5461672bc6317d68c3f0adbe9fcc09a6db3fdf2d95794dc0eef972b6dcf2fe7ee53db5c4020716493c859c553dd144bdee14ec57c16e800be90d10ebdb433f0490c492d28e448eda23bab8c1368c8c6d0334338adb2387168b82bff40a611cd0f405a8aa42877a1d4a86963c4fa013291d24a7d6b86d6f61c15e065103af1c032d9e3e526ba26f21690489e9f05eb2ce", 0x4, 0x0, 0xe}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a \x00\x00', @ANYRES16=r4, @ANYRES16=r8], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, r11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback={0x100000000000000}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf2530000000050033000000000005003400680800000500330004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000500)=[@mss={0x2, 0x8}, @mss={0x2, 0x2}, @window={0x3, 0xb5c, 0x5}, @timestamp, @window={0x3, 0x0, 0x100}], 0x5) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.687263839s ago: executing program 1 (id=9329): r0 = socket$inet6(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x500}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3, 0x1200}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) close(r1) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 645.410592ms ago: executing program 6 (id=9330): r0 = socket$inet6(0xa, 0x6, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @remote, 0x4}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f00000017c0)={&(0x7f00000002c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f0000001580)=""/102, 0x66}, {&(0x7f0000001600)=""/29, 0x1d}, {&(0x7f0000001640)=""/173, 0xad}], 0x7, &(0x7f0000001780)=""/24, 0x18}, 0x2002) r4 = accept4(r2, 0x0, &(0x7f0000001800), 0x80800) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000001840), &(0x7f0000001880)=0x40) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000018c0)={0x14}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter={0x1e, 0x3, 0x6, 0x80000000, 0x200, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xf}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000001900)="b291e6525cd3a8037a005feb66e53384f0f9f9b468357161be2b4169ad988f2cb2faddde4e3e6148c7d4dcee004f0d4f8a53c7f4ced9baadab1cea0512a2de388a5a51615b586f1d97e94d7bda80103dc961376ff2d18ea42fa3e542356f618d54c588c78eedad8e60e74c2f98bf78ff62d8c8135ce9", &(0x7f0000001980)=""/92, &(0x7f0000001a00)="b0b599926885f3446dad445746260e9d2cd3adb780486535353768e716fee133fe64356c57a6c228045438633965c61c7e43140b0f0098d6c8487fcb2b83ca3974f7ceb7", &(0x7f0000001a80)="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", 0xffff, r5}, 0x38) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000001c40)={0x5, 0x8001}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001c80)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x6, 0xfbc}, &(0x7f0000001d40)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001d80)={r7, 0x95, "f0eed8c25cca1ffeeab6eadbec0e6ebdf58bfda9be4e03876b538e8719ceba3d5bf56659f9e4021ca3d20397b9b623b5f08a8304b9e22246229f5ef57077f7256aa4ebc4e3b184a111c4cf520c1ac299bda437bd81cb9bb132629882407355618d41402609bd0514e1701384d6d8d8c7fc6de978bf9cceb9f46e59ee3e62ec6260e6bdb72afadaf6b69fc5fa2e9b3fe302d546fbe4"}, &(0x7f0000001e40)=0x9d) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000001e80)=0x7ff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x4c, r1, 0x314, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20004000) readv(r6, &(0x7f0000002300)=[{&(0x7f0000002040)=""/28, 0x1c}, {&(0x7f0000002080)=""/97, 0x61}, {&(0x7f0000002100)=""/5, 0x5}, {&(0x7f0000002140)=""/196, 0xc4}, {&(0x7f0000002240)=""/184, 0xb8}], 0x5) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000002380), &(0x7f00000023c0)=0x4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002400), 0x4) pwritev(r9, &(0x7f0000002540)=[{&(0x7f0000002440)="5b7eea9a3333d0d525679673b7afb5f2604f40ab83a82e822eee8ca35151aaab6c5156b8e44911f42e587973c0abce9736a152628e26aec16b90eb00e15de10cbe116d3890534c77a7633451f462574b13a9f7a727380257b659652097fedf5f8e46f98a2e2b9f09ee5b", 0x6a}, {&(0x7f00000024c0)="fe3ad01d0d20b058ff92518b71ae1c19ad7174306f19cde8bdd036d8ae11d347366cccdc279f03930945c594050e6a6d73eb7332760b18382603982ed7863d0aaa487e51a66f0329a6507f5fe37c2490f48e535993ed561abdd0be0157cf0bb885cbe9df924209dfad5785c89fd22b3beb", 0x71}], 0x2, 0x4, 0x6) sendmsg$nl_route(r2, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000845}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002780)={'sit0\x00', &(0x7f0000002740)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x0, 0xa, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x67, 0x0, 0x73, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000027c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003940)={0xffffffffffffffff, 0x20, &(0x7f0000003900)={&(0x7f0000002840)=""/4096, 0x1000, 0x0, &(0x7f0000003840)=""/136, 0x88}}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004b80)={0x9, 0x12, &(0x7f0000003980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x2, 0x3, 0x0, 0xb, 0x6, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @ldst={0x2, 0x0, 0x1, 0xa, 0x4, 0x10, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000003a40)='GPL\x00', 0x0, 0x1000, &(0x7f0000003a80)=""/4096, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004a80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000004ac0)={0x4, 0xb, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004b00)=[r6], &(0x7f0000004b40)=[{0x2, 0x3, 0x7, 0x1}, {0x1, 0x2, 0x9, 0xa}, {0x3, 0x1, 0x2, 0x8}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004c80)={0xb, 0x8, &(0x7f0000002680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffff000}, [@jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x4, 0xa, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000026c0)='syzkaller\x00', 0x1d, 0x0, &(0x7f0000002700), 0x41100, 0x34, '\x00', r10, @fallback=0x28, r11, 0x8, &(0x7f0000002800)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x0, &(0x7f0000004c40), 0x0, 0x10, 0xffff}, 0x94) 640.359021ms ago: executing program 2 (id=9331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000deffffffffffffff0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="00000003000000b300000056e3c3e5074cc10000002400"/44], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x35) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 218.466091ms ago: executing program 6 (id=9332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, &(0x7f0000000600)=@l2={0x1f, 0x0, @none}, &(0x7f0000000680)=0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0x5, 0x2, 0x32, 0x6, 0x5}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000006c0)={0x41, 0x0, 0x3}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000780)=0x7, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b000000009060102000000000000000007000000050001000700000078000780060004404e210000180001801400024000000000000000000000ffffe00000020c0019400000000000000001180002801400024000000000000000000000ffff640101000a001100aaaaaaaaaabb00000500030007000000060004404e23000013001100000000000000000008000a40000000041c0007800c00018008000140fffffffe0c00184000000000000000079381d85e0491deb60a895bf0779e542a2c7da70a264015c058e0f653db12f307608ef45bf4397aebaf714c7d2595"], 0xb0}, 0x1, 0x300, 0x0, 0x10000043}, 0x4000054) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x158}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffe}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x400) accept4(r3, &(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000100)=0x80, 0x80800) 0s ago: executing program 7 (id=9333): socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x26020480) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010100000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x38}}, 0x0) unshare(0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1}, &(0x7f00000002c0)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_mpls={0xa0, 0x1c, 0x0, 0x0, {{0x1}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6006}, @TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_LABEL={0x8, 0x5, 0x17f49}, @TCA_MPLS_BOS={0x5}]}, {0x51, 0x6, "fb881fe54082e05388531c9382bec14e143ebb132d720544eb0364819fad7bed13c3f55830957dc4f9e504d74b23a2d3b682f30a4873f2b49d296d0f69d7ecce3336416fdf3ff99fb04e89f7fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004040}, 0x10000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040880) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x10041) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) kernel console output (not intermixed with test programs): 8298" name="memory.events" dev="tmpfs" ino=2528 res=0 errno=0 [ 1284.982465][ T5109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8299'. [ 1285.001278][ T5109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8299'. [ 1285.043975][ T5102] bond4: entered promiscuous mode [ 1285.050939][ T5102] bond4: entered allmulticast mode [ 1285.060330][ T5102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1285.209254][ T5047] wg1 speed is unknown, defaulting to 1000 [ 1285.450641][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1285.492552][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1285.534734][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8304'. [ 1285.583517][ T5127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8305'. [ 1285.831813][ T5131] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.993551][ T5140] Bluetooth: hci1: too big key_count value 29096 [ 1286.088415][ T5131] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.178261][ T5148] netlink: 'syz.4.8309': attribute type 15 has an invalid length. [ 1286.283458][ T5131] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.528600][ T5131] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.567136][ T5153] netlink: 'syz.3.8311': attribute type 1 has an invalid length. [ 1286.760684][ T5161] __nla_validate_parse: 2 callbacks suppressed [ 1286.760706][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1286.847486][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8313'. [ 1286.989541][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.114823][T20165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.247639][T20165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.328471][T20165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.474825][ T5174] netlink: 'syz.4.8317': attribute type 12 has an invalid length. [ 1287.654896][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8319'. [ 1288.060948][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8322'. [ 1288.105900][ T5153] wg1 speed is unknown, defaulting to 1000 [ 1288.421541][ T5200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8326'. [ 1288.441208][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8326'. [ 1288.587932][ T5168] wg1 speed is unknown, defaulting to 1000 [ 1289.952043][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8336'. [ 1290.083797][ T5236] bond0: (slave rose0): Releasing backup interface [ 1290.712808][ T5212] wg1 speed is unknown, defaulting to 1000 [ 1292.570225][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8338'. [ 1292.623834][ T5281] netlink: 'syz.1.8338': attribute type 1 has an invalid length. [ 1292.782277][ T5208] wg1 speed is unknown, defaulting to 1000 [ 1293.855493][ T5211] wg1 speed is unknown, defaulting to 1000 [ 1293.907640][ T5242] wg1 speed is unknown, defaulting to 1000 [ 1294.061672][ T5226] wg1 speed is unknown, defaulting to 1000 [ 1294.314461][ T5228] wg1 speed is unknown, defaulting to 1000 [ 1294.533307][ T5277] wg1 speed is unknown, defaulting to 1000 [ 1296.176315][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1296.317267][ T5306] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8344'. [ 1296.616600][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8345'. [ 1297.265507][ T5320] netlink: 'syz.3.8348': attribute type 13 has an invalid length. [ 1297.279758][ T5320] netlink: 'syz.3.8348': attribute type 17 has an invalid length. [ 1297.540667][ T1523] wg1 speed is unknown, defaulting to 1000 [ 1298.068256][ T5308] wg1 speed is unknown, defaulting to 1000 [ 1298.384705][ T5358] Bluetooth: hci1: too big key_count value 29096 [ 1298.623789][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8359'. [ 1298.659138][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8359'. [ 1298.747395][ T5369] netlink: 'syz.3.8359': attribute type 4 has an invalid length. [ 1298.824944][ T5363] : renamed from bond_slave_0 (while UP) [ 1298.962303][ T5374] tipc: Enabled bearer , priority 0 [ 1299.008935][ T5383] FAULT_INJECTION: forcing a failure. [ 1299.008935][ T5383] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.081314][ T5383] CPU: 1 UID: 0 PID: 5383 Comm: syz.0.8366 Not tainted syzkaller #0 PREEMPT(full) [ 1299.081346][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1299.081361][ T5383] Call Trace: [ 1299.081371][ T5383] [ 1299.081381][ T5383] dump_stack_lvl+0x189/0x250 [ 1299.081419][ T5383] ? __pfx____ratelimit+0x10/0x10 [ 1299.081445][ T5383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1299.081475][ T5383] ? __pfx__printk+0x10/0x10 [ 1299.081515][ T5383] should_fail_ex+0x414/0x560 [ 1299.081556][ T5383] should_failslab+0xa8/0x100 [ 1299.081582][ T5383] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1299.081614][ T5383] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1299.081636][ T5383] ? sctp_add_bind_addr+0x8c/0x370 [ 1299.081662][ T5383] ? sctp_add_bind_addr+0xb0/0x370 [ 1299.081691][ T5383] sctp_add_bind_addr+0x8c/0x370 [ 1299.081720][ T5383] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1299.081749][ T5383] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1299.081772][ T5383] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1299.081798][ T5383] ? sctp_v6_is_any+0x64/0x80 [ 1299.081827][ T5383] ? sctp_copy_one_addr+0x93/0x360 [ 1299.081872][ T5383] sctp_bind_addr_copy+0xb3/0x3c0 [ 1299.081896][ T5383] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1299.081935][ T5383] sctp_connect_new_asoc+0x2e0/0x690 [ 1299.081969][ T5383] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1299.082001][ T5383] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1299.082030][ T5383] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1299.082058][ T5383] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1299.082089][ T5383] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1299.082124][ T5383] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1299.082156][ T5383] sctp_sendmsg+0x155c/0x2810 [ 1299.082199][ T5383] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1299.082232][ T5383] ? aa_sk_perm+0x81e/0x950 [ 1299.082269][ T5383] ? __pfx_aa_sk_perm+0x10/0x10 [ 1299.082304][ T5383] ? sock_rps_record_flow+0x19/0x410 [ 1299.082337][ T5383] ? inet_sendmsg+0x2f4/0x370 [ 1299.082363][ T5383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1299.082390][ T5383] __sock_sendmsg+0x19c/0x270 [ 1299.082429][ T5383] __sys_sendto+0x3bd/0x520 [ 1299.082457][ T5383] ? __pfx___sys_sendto+0x10/0x10 [ 1299.082480][ T5383] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1299.082525][ T5383] ? __fget_files+0x3a0/0x420 [ 1299.082560][ T5383] ? ksys_write+0x22a/0x250 [ 1299.082595][ T5383] ? __pfx_ksys_write+0x10/0x10 [ 1299.082631][ T5383] __x64_sys_sendto+0xde/0x100 [ 1299.082661][ T5383] do_syscall_64+0xfa/0xfa0 [ 1299.082688][ T5383] ? lockdep_hardirqs_on+0x9c/0x150 [ 1299.082715][ T5383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.082738][ T5383] ? clear_bhb_loop+0x60/0xb0 [ 1299.082765][ T5383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.082803][ T5383] RIP: 0033:0x7fb54a58f749 [ 1299.082824][ T5383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.082845][ T5383] RSP: 002b:00007fb54b3a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1299.082870][ T5383] RAX: ffffffffffffffda RBX: 00007fb54a7e5fa0 RCX: 00007fb54a58f749 [ 1299.082888][ T5383] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1299.082903][ T5383] RBP: 00007fb54b3a6090 R08: 00002000000001c0 R09: 000000000000001c [ 1299.082918][ T5383] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000002 [ 1299.082932][ T5383] R13: 00007fb54a7e6038 R14: 00007fb54a7e5fa0 R15: 00007ffdd2e1de98 [ 1299.082971][ T5383] [ 1299.156878][ T5376] syzkaller0: entered promiscuous mode [ 1299.549748][ T5376] syzkaller0: entered allmulticast mode [ 1299.676662][ T5374] tipc: Resetting bearer [ 1299.862996][ T5374] tipc: Disabling bearer [ 1300.667927][ T5425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1301.017199][ T5434] netlink: 'syz.2.8379': attribute type 1 has an invalid length. [ 1301.254850][ T5441] syzkaller0: entered promiscuous mode [ 1301.267368][ T5441] syzkaller0: entered allmulticast mode [ 1301.320817][ T5441] tipc: Enabled bearer , priority 0 [ 1301.356075][ T5441] tipc: Resetting bearer [ 1301.424420][ T5441] tipc: Disabling bearer [ 1301.481312][ T5399] wg1 speed is unknown, defaulting to 1000 [ 1301.938927][ T5460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8386'. [ 1301.973214][ T5460] netlink: 'syz.1.8386': attribute type 1 has an invalid length. [ 1302.523318][ T5470] bond4: option arp_validate: invalid value (18446744073491447809) [ 1302.538578][ T5470] bond4 (unregistering): Released all slaves [ 1302.556423][ T5473] netlink: 'syz.2.8390': attribute type 13 has an invalid length. [ 1303.187320][ T5473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.517855][ T5473] vlan0: left promiscuous mode [ 1303.580020][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.588635][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.629274][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.650436][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.710914][ T5480] netlink: 'syz.2.8391': attribute type 1 has an invalid length. [ 1303.830350][ T5482] tipc: Enabled bearer , priority 0 [ 1303.887175][ T5482] syzkaller0: entered promiscuous mode [ 1303.894713][ T5482] syzkaller0: entered allmulticast mode [ 1303.902403][ T5482] tipc: Resetting bearer [ 1303.955391][ T5483] bond4: option arp_interval: invalid value (18446744073709551615) [ 1303.964452][ T5483] bond4: option arp_interval: allowed values 0 - 2147483647 [ 1303.982227][ T5483] bond4 (unregistering): Released all slaves [ 1304.036807][ T5397] wg1 speed is unknown, defaulting to 1000 [ 1304.135011][ T5481] tipc: Resetting bearer [ 1305.547239][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.719376][ T5481] tipc: Disabling bearer [ 1306.754624][ T5431] wg1 speed is unknown, defaulting to 1000 [ 1306.934559][ T5487] netlink: 'syz.2.8393': attribute type 4 has an invalid length. [ 1307.137087][ T5497] syzkaller0: entered promiscuous mode [ 1307.146674][ T5497] syzkaller0: entered allmulticast mode [ 1307.174417][ T5497] tipc: Enabled bearer , priority 0 [ 1307.205041][ T5497] tipc: Resetting bearer [ 1307.244706][ T5497] tipc: Disabling bearer [ 1307.573105][ T5427] wg1 speed is unknown, defaulting to 1000 [ 1307.674485][ T5417] wg1 speed is unknown, defaulting to 1000 [ 1307.835304][ T5459] wg1 speed is unknown, defaulting to 1000 [ 1308.130038][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8398'. [ 1309.286377][ T5524] FAULT_INJECTION: forcing a failure. [ 1309.286377][ T5524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.301898][ T5524] CPU: 0 UID: 0 PID: 5524 Comm: syz.2.8402 Not tainted syzkaller #0 PREEMPT(full) [ 1309.301931][ T5524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1309.301946][ T5524] Call Trace: [ 1309.301956][ T5524] [ 1309.301966][ T5524] dump_stack_lvl+0x189/0x250 [ 1309.302002][ T5524] ? __pfx____ratelimit+0x10/0x10 [ 1309.302028][ T5524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1309.302056][ T5524] ? __pfx__printk+0x10/0x10 [ 1309.302079][ T5524] ? __might_fault+0xb0/0x130 [ 1309.302124][ T5524] should_fail_ex+0x414/0x560 [ 1309.302163][ T5524] _copy_from_user+0x2d/0xb0 [ 1309.302192][ T5524] kstrtouint_from_user+0xc4/0x170 [ 1309.302218][ T5524] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1309.302262][ T5524] proc_fail_nth_write+0x88/0x200 [ 1309.302292][ T5524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1309.302337][ T5524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1309.302367][ T5524] vfs_write+0x27e/0xb30 [ 1309.302407][ T5524] ? __pfx_vfs_write+0x10/0x10 [ 1309.302440][ T5524] ? __fget_files+0x2a/0x420 [ 1309.302465][ T5524] ? __fget_files+0x3a0/0x420 [ 1309.302485][ T5524] ? __fget_files+0x2a/0x420 [ 1309.302516][ T5524] ksys_write+0x145/0x250 [ 1309.302550][ T5524] ? __pfx_ksys_write+0x10/0x10 [ 1309.302585][ T5524] ? do_syscall_64+0xbe/0xfa0 [ 1309.302614][ T5524] do_syscall_64+0xfa/0xfa0 [ 1309.302637][ T5524] ? lockdep_hardirqs_on+0x9c/0x150 [ 1309.302663][ T5524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.302684][ T5524] ? clear_bhb_loop+0x60/0xb0 [ 1309.302709][ T5524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.302729][ T5524] RIP: 0033:0x7fb9d7f8e1ff [ 1309.302748][ T5524] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1309.302766][ T5524] RSP: 002b:00007fb9d8d9c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1309.302789][ T5524] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9d7f8e1ff [ 1309.302803][ T5524] RDX: 0000000000000001 RSI: 00007fb9d8d9c0a0 RDI: 0000000000000004 [ 1309.302816][ T5524] RBP: 00007fb9d8d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.302830][ T5524] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1309.302842][ T5524] R13: 00007fb9d81e6038 R14: 00007fb9d81e5fa0 R15: 00007fff61a380a8 [ 1309.302878][ T5524] [ 1309.605008][ T5527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8403'. [ 1309.614487][ T5527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8403'. [ 1310.297094][ T5537] ip6erspan0: entered allmulticast mode [ 1310.316880][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8407'. [ 1310.352994][ T5539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1310.495788][ T5542] macvlan4: entered promiscuous mode [ 1310.537995][ T5542] vlan0: entered promiscuous mode [ 1310.623575][ T5552] tipc: Enabled bearer , priority 0 [ 1310.724027][ T5552] syzkaller0: entered promiscuous mode [ 1310.730934][ T5552] syzkaller0: entered allmulticast mode [ 1310.737474][ T5552] tipc: Resetting bearer [ 1310.770834][ T5561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8414'. [ 1310.797958][ T5561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8414'. [ 1313.715705][ T5572] tipc: Resetting bearer [ 1313.794200][ T5551] tipc: Resetting bearer [ 1313.901346][ T5551] tipc: Disabling bearer [ 1314.373865][ T5553] wg1 speed is unknown, defaulting to 1000 [ 1314.380260][ T5596] syzkaller0: entered promiscuous mode [ 1314.380286][ T5596] syzkaller0: entered allmulticast mode [ 1314.524130][ T5606] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x91 [ 1315.062728][ T5562] wg1 speed is unknown, defaulting to 1000 [ 1315.065787][ T5614] tipc: Enabled bearer , priority 0 [ 1315.188061][ T5632] netlink: 'syz.0.8433': attribute type 32 has an invalid length. [ 1315.209107][ T5614] syzkaller0: entered promiscuous mode [ 1315.260904][ T5614] syzkaller0: entered allmulticast mode [ 1315.267985][ T5614] tipc: Resetting bearer [ 1315.310387][ T5638] netlink: 'syz.0.8435': attribute type 1 has an invalid length. [ 1318.392923][ T5638] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1318.397121][ T5614] tipc: Resetting bearer [ 1318.442395][ T5639] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1318.486187][ T5649] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x91 [ 1318.508380][ T5611] tipc: Resetting bearer [ 1318.598635][ T5611] tipc: Disabling bearer [ 1318.627000][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8438'. [ 1318.924275][ T5651] bridge_slave_1: left allmulticast mode [ 1318.933678][ T5651] bridge_slave_1: left promiscuous mode [ 1318.941860][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.955531][ T5651] bridge_slave_0: left allmulticast mode [ 1318.964096][ T5651] bridge_slave_0: left promiscuous mode [ 1318.974885][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.135725][ T5543] wg1 speed is unknown, defaulting to 1000 [ 1319.135848][ T5665] netlink: 'syz.1.8441': attribute type 6 has an invalid length. [ 1319.411632][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1319.483085][ T5679] netlink: 'syz.1.8445': attribute type 1 has an invalid length. [ 1319.646168][ T5688] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x91 [ 1320.514185][ T5700] wg1: entered promiscuous mode [ 1320.521862][ T5700] wg1: entered allmulticast mode [ 1320.556440][ T5704] tipc: Enabling of bearer rejected, failed to enable media [ 1321.594054][ T5729] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8464'. [ 1321.663782][ T5731] tipc: Enabled bearer , priority 0 [ 1321.787910][ T5731] syzkaller0: entered promiscuous mode [ 1321.801682][ T5736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8465'. [ 1321.816253][ T5731] syzkaller0: entered allmulticast mode [ 1321.829161][ T5731] tipc: Resetting bearer [ 1321.837257][ T5736] netlink: 'syz.3.8465': attribute type 1 has an invalid length. [ 1321.860662][ T5675] wg1 speed is unknown, defaulting to 1000 [ 1325.494664][ T5734] tipc: Resetting bearer [ 1325.517438][ T5730] tipc: Resetting bearer [ 1325.562810][ T5730] tipc: Disabling bearer [ 1326.625318][ T5761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1326.714012][ T5767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1326.728996][ T5767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1326.750301][ T5767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1326.771859][ T5767] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1326.783275][ T5767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1326.895303][ T5770] syzkaller0: entered promiscuous mode [ 1326.902724][ T5770] syzkaller0: entered allmulticast mode [ 1327.959957][ T5787] netlink: 'syz.0.8481': attribute type 1 has an invalid length. [ 1328.930580][T29477] Bluetooth: hci5: command tx timeout [ 1330.990521][T29477] Bluetooth: hci5: command tx timeout [ 1331.328433][ T5791] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1331.434343][ T5797] tipc: Enabled bearer , priority 0 [ 1331.462671][ T5797] syzkaller0: entered promiscuous mode [ 1331.475533][ T5797] syzkaller0: entered allmulticast mode [ 1331.518800][ T5791] tipc: Resetting bearer [ 1331.554547][ T5790] tipc: Resetting bearer [ 1331.623506][ T5790] tipc: Disabling bearer [ 1331.653462][ T5764] wg1 speed is unknown, defaulting to 1000 [ 1331.849731][ T5816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8488'. [ 1331.932455][ T5821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8488'. [ 1331.967688][ T5816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.118965][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 1332.421410][ T5837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.428123][ T5836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.581399][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8493'. [ 1332.599072][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.619927][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.637170][ T5764] bridge_slave_0: entered allmulticast mode [ 1332.656358][ T5841] netlink: 'syz.2.8493': attribute type 1 has an invalid length. [ 1332.669426][ T5764] bridge_slave_0: entered promiscuous mode [ 1332.691692][ T5843] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1332.702874][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.712117][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.802019][ T5764] bridge_slave_1: entered allmulticast mode [ 1332.812168][ T5764] bridge_slave_1: entered promiscuous mode [ 1333.060148][T29477] Bluetooth: hci5: command tx timeout [ 1333.518324][ T36] bridge_slave_1: left allmulticast mode [ 1333.532774][ T36] bridge_slave_1: left promiscuous mode [ 1333.570030][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.603703][ T36] bridge_slave_0: left allmulticast mode [ 1333.620302][ T36] bridge_slave_0: left promiscuous mode [ 1333.626296][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.813928][ T36] bond0 (unregistering): Released all slaves [ 1334.129929][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8505'. [ 1334.168410][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8505'. [ 1334.442039][ T5840] wg1 speed is unknown, defaulting to 1000 [ 1334.910336][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1334.927877][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1334.944252][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1334.968670][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1334.988344][ T5767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1335.071291][T29477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1335.084971][T29477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1335.097524][T29477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1335.115405][T29477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1335.148660][T29477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.073470][ T5941] batadv0: entered promiscuous mode [ 1336.099949][ T5941] macvtap1: entered promiscuous mode [ 1336.123528][ T5941] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1336.193725][ T5941] batadv0: left promiscuous mode [ 1336.400586][ T5952] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8518'. [ 1336.669961][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8519'. [ 1336.712361][ T5960] veth1_to_bond: entered allmulticast mode [ 1336.730494][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1336.937725][ T5960] bond0: (slave bond_slave_1): Releasing backup interface [ 1337.060292][ T5767] Bluetooth: hci2: command tx timeout [ 1337.096511][ T5960] veth1_to_bond (unregistering): left allmulticast mode [ 1337.123445][ T5918] wg1 speed is unknown, defaulting to 1000 [ 1337.307071][ T5767] Bluetooth: hci4: command tx timeout [ 1338.619447][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.631737][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.645063][ T36] bond0 (unregistering): Released all slaves [ 1338.663159][ T36] bond1 (unregistering): Released all slaves [ 1338.680484][ T36] bond2 (unregistering): Released all slaves [ 1338.702330][ T36] bond3 (unregistering): Released all slaves [ 1338.891146][ T36] bond4 (unregistering): (slave veth3): Releasing active interface [ 1338.903072][ T36] bond4 (unregistering): Released all slaves [ 1338.931299][ T5912] wg1 speed is unknown, defaulting to 1000 [ 1339.089028][ T36] tipc: Left network mode [ 1339.140346][ T5767] Bluetooth: hci2: command tx timeout [ 1339.354886][ T5970] wg1 speed is unknown, defaulting to 1000 [ 1339.388952][ T5767] Bluetooth: hci4: command tx timeout [ 1339.842881][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 1339.993610][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 1340.414544][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.428397][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.438888][ T5918] bridge_slave_0: entered allmulticast mode [ 1340.461739][ T5918] bridge_slave_0: entered promiscuous mode [ 1340.506103][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.522143][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.530722][ T5918] bridge_slave_1: entered allmulticast mode [ 1340.557380][ T5918] bridge_slave_1: entered promiscuous mode [ 1340.755937][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.801357][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.809279][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.818927][ T5912] bridge_slave_0: entered allmulticast mode [ 1340.830451][ T5912] bridge_slave_0: entered promiscuous mode [ 1340.875414][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.962204][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.990390][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.009520][ T5912] bridge_slave_1: entered allmulticast mode [ 1341.032269][ T5912] bridge_slave_1: entered promiscuous mode [ 1341.129386][ T5918] team0: Port device team_slave_0 added [ 1341.235170][ T5767] Bluetooth: hci2: command tx timeout [ 1341.422726][ T5918] team0: Port device team_slave_1 added [ 1341.448444][ T5988] wg1 speed is unknown, defaulting to 1000 [ 1341.523515][ T5767] Bluetooth: hci4: command tx timeout [ 1341.699467][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.747586][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.907738][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.930141][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.010153][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1342.160892][ T36] hsr_slave_0: left promiscuous mode [ 1342.167569][ T36] hsr_slave_1: left promiscuous mode [ 1342.188539][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.210970][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.234972][ T36] vlan0: left promiscuous mode [ 1342.973564][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8532'. [ 1343.305970][ T5767] Bluetooth: hci2: command tx timeout [ 1343.557201][ T5767] Bluetooth: hci4: command tx timeout [ 1343.966596][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.975020][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.006512][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.022660][ T5986] wg1 speed is unknown, defaulting to 1000 [ 1344.036815][ T5912] team0: Port device team_slave_0 added [ 1344.106966][ T5912] team0: Port device team_slave_1 added [ 1344.242721][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8533'. [ 1344.258167][ T6032] netlink: 'syz.3.8533': attribute type 1 has an invalid length. [ 1344.318430][ T5918] hsr_slave_0: entered promiscuous mode [ 1344.327595][ T5918] hsr_slave_1: entered promiscuous mode [ 1344.336957][ T5918] debugfs: 'hsr0' already exists in 'hsr' [ 1344.345072][ T5918] Cannot create hsr debugfs directory [ 1344.361216][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.368681][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.410389][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.424892][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.434738][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.466415][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.920376][ T6035] Set syz1 is full, maxelem 6117 reached [ 1344.963715][ T5912] hsr_slave_0: entered promiscuous mode [ 1344.972278][ T5912] hsr_slave_1: entered promiscuous mode [ 1344.980942][ T5912] debugfs: 'hsr0' already exists in 'hsr' [ 1344.987706][ T5912] Cannot create hsr debugfs directory [ 1345.168567][ T36] IPVS: stop unused estimator thread 0... [ 1346.145779][ T6031] wg1 speed is unknown, defaulting to 1000 [ 1346.225504][ T5918] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1346.391856][ T5918] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1346.438094][ T5918] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1346.600762][ T5918] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1346.935181][ T6057] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1346.947432][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1347.005801][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.047821][ T5912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1347.068112][ T5912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1347.115660][ T5912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1347.172461][ T5912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1347.382244][ T5767] Bluetooth: hci4: command tx timeout [ 1347.430039][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.518928][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1347.595702][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.604798][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1347.619442][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.628784][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.721735][ T6076] FAULT_INJECTION: forcing a failure. [ 1347.721735][ T6076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1347.757214][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1347.781428][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz.2.8542 Not tainted syzkaller #0 PREEMPT(full) [ 1347.781460][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1347.781484][ T6076] Call Trace: [ 1347.781494][ T6076] [ 1347.781504][ T6076] dump_stack_lvl+0x189/0x250 [ 1347.781547][ T6076] ? __pfx____ratelimit+0x10/0x10 [ 1347.781574][ T6076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1347.781603][ T6076] ? __pfx__printk+0x10/0x10 [ 1347.781626][ T6076] ? __might_fault+0xb0/0x130 [ 1347.781670][ T6076] should_fail_ex+0x414/0x560 [ 1347.781709][ T6076] _copy_from_user+0x2d/0xb0 [ 1347.781740][ T6076] ___sys_sendmsg+0x158/0x2a0 [ 1347.781771][ T6076] ? __pfx____sys_sendmsg+0x10/0x10 [ 1347.781839][ T6076] ? __fget_files+0x2a/0x420 [ 1347.781859][ T6076] ? __fget_files+0x3a0/0x420 [ 1347.781892][ T6076] __x64_sys_sendmsg+0x19b/0x260 [ 1347.781924][ T6076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1347.781963][ T6076] ? __pfx_ksys_write+0x10/0x10 [ 1347.781999][ T6076] ? do_syscall_64+0xbe/0xfa0 [ 1347.782030][ T6076] do_syscall_64+0xfa/0xfa0 [ 1347.782055][ T6076] ? lockdep_hardirqs_on+0x9c/0x150 [ 1347.782081][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.782102][ T6076] ? clear_bhb_loop+0x60/0xb0 [ 1347.782129][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.782150][ T6076] RIP: 0033:0x7fb9d7f8f749 [ 1347.782171][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1347.782189][ T6076] RSP: 002b:00007fb9d8d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1347.782213][ T6076] RAX: ffffffffffffffda RBX: 00007fb9d81e5fa0 RCX: 00007fb9d7f8f749 [ 1347.782230][ T6076] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1347.782244][ T6076] RBP: 00007fb9d8d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1347.782257][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1347.782271][ T6076] R13: 00007fb9d81e6038 R14: 00007fb9d81e5fa0 R15: 00007fff61a380a8 [ 1347.782306][ T6076] [ 1347.842464][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.156382][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.165292][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.191305][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.200376][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.925087][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.121693][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.338943][ T6120] Set syz1 is full, maxelem 6117 reached [ 1349.523259][ T6126] FAULT_INJECTION: forcing a failure. [ 1349.523259][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.571115][ T6126] CPU: 1 UID: 0 PID: 6126 Comm: syz.3.8553 Not tainted syzkaller #0 PREEMPT(full) [ 1349.571148][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1349.571163][ T6126] Call Trace: [ 1349.571172][ T6126] [ 1349.571183][ T6126] dump_stack_lvl+0x189/0x250 [ 1349.571219][ T6126] ? __pfx____ratelimit+0x10/0x10 [ 1349.571245][ T6126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1349.571274][ T6126] ? __pfx__printk+0x10/0x10 [ 1349.571300][ T6126] ? __pfx___might_resched+0x10/0x10 [ 1349.571325][ T6126] ? fs_reclaim_acquire+0x7d/0x100 [ 1349.571349][ T6126] should_fail_ex+0x414/0x560 [ 1349.571382][ T6126] should_failslab+0xa8/0x100 [ 1349.571402][ T6126] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1349.571434][ T6126] ? __alloc_skb+0x255/0x430 [ 1349.571456][ T6126] ? napi_skb_cache_get+0x4a5/0x790 [ 1349.571478][ T6126] ? napi_skb_cache_get+0x151/0x790 [ 1349.571507][ T6126] __alloc_skb+0x255/0x430 [ 1349.571534][ T6126] ? __pfx___alloc_skb+0x10/0x10 [ 1349.571561][ T6126] ? netlink_autobind+0xdb/0x300 [ 1349.571617][ T6126] ? netlink_autobind+0x2c2/0x300 [ 1349.571651][ T6126] netlink_sendmsg+0x5c6/0xb30 [ 1349.571690][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.571722][ T6126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1349.571758][ T6126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1349.571780][ T6126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.571809][ T6126] __sock_sendmsg+0x21c/0x270 [ 1349.571847][ T6126] ____sys_sendmsg+0x505/0x830 [ 1349.571881][ T6126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1349.571919][ T6126] ? import_iovec+0x74/0xa0 [ 1349.571951][ T6126] ___sys_sendmsg+0x21f/0x2a0 [ 1349.571982][ T6126] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.572050][ T6126] ? __fget_files+0x2a/0x420 [ 1349.572070][ T6126] ? __fget_files+0x3a0/0x420 [ 1349.572102][ T6126] __x64_sys_sendmsg+0x19b/0x260 [ 1349.572133][ T6126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1349.572171][ T6126] ? __pfx_ksys_write+0x10/0x10 [ 1349.572207][ T6126] ? do_syscall_64+0xbe/0xfa0 [ 1349.572237][ T6126] do_syscall_64+0xfa/0xfa0 [ 1349.572262][ T6126] ? lockdep_hardirqs_on+0x9c/0x150 [ 1349.572290][ T6126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.572312][ T6126] ? clear_bhb_loop+0x60/0xb0 [ 1349.572338][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.572361][ T6126] RIP: 0033:0x7f8b4878f749 [ 1349.572382][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1349.572402][ T6126] RSP: 002b:00007f8b4968d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.572426][ T6126] RAX: ffffffffffffffda RBX: 00007f8b489e5fa0 RCX: 00007f8b4878f749 [ 1349.572442][ T6126] RDX: 0000000020000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1349.572456][ T6126] RBP: 00007f8b4968d090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.572469][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.572482][ T6126] R13: 00007f8b489e6038 R14: 00007f8b489e5fa0 R15: 00007ffd98fc4a98 [ 1349.572516][ T6126] [ 1350.113265][ T5912] veth0_vlan: entered promiscuous mode [ 1350.122879][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8554'. [ 1350.155521][ T5912] veth1_vlan: entered promiscuous mode [ 1350.335838][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.349001][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.375454][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.395007][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.410611][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.423375][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.437504][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.473764][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.487672][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1350.528944][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.540452][ T6142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.554087][ T6142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1350.697690][ T5912] veth0_macvtap: entered promiscuous mode [ 1350.754663][ T5912] veth1_macvtap: entered promiscuous mode [ 1350.772322][ T5918] veth0_vlan: entered promiscuous mode [ 1350.811574][ T5918] veth1_vlan: entered promiscuous mode [ 1350.889477][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1350.967961][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.034703][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.058813][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.090113][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.117660][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.149109][ T5918] veth0_macvtap: entered promiscuous mode [ 1351.252529][ T5918] veth1_macvtap: entered promiscuous mode [ 1351.451439][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.515333][ T8024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.549156][ T8024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.588613][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.675232][ T8024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.692051][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.710193][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.722579][ T8024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.739389][ T8024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.762808][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.954072][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.980625][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.004737][ T6170] sit0: entered promiscuous mode [ 1352.118649][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.153403][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.189151][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.202903][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.243821][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.271243][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.290143][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.331546][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.396125][ T6137] wg1 speed is unknown, defaulting to 1000 [ 1352.580578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.913332][ T6173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.166472][ T6191] netlink: 'syz.6.8567': attribute type 1 has an invalid length. [ 1353.737394][ T6140] wg1 speed is unknown, defaulting to 1000 [ 1354.579816][T29477] Bluetooth: hci4: command 0x0405 tx timeout [ 1354.903030][ T6185] wg1 speed is unknown, defaulting to 1000 [ 1354.979824][ T6160] wg1 speed is unknown, defaulting to 1000 [ 1355.079733][ T6175] wg1 speed is unknown, defaulting to 1000 [ 1355.965249][ T6218] __nla_validate_parse: 11 callbacks suppressed [ 1355.965271][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8573'. [ 1357.979326][ T6274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1358.086319][ T6276] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1358.109717][ T6276] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1358.593825][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8594'. [ 1358.648601][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8594'. [ 1358.668927][ T6284] netlink: 91 bytes leftover after parsing attributes in process `syz.7.8594'. [ 1358.730495][ T6285] tipc: Enabled bearer , priority 0 [ 1358.884402][ T6285] syzkaller0: entered promiscuous mode [ 1358.919680][ T6285] syzkaller0: entered allmulticast mode [ 1358.950741][ T6285] tipc: Resetting bearer [ 1359.295630][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8597'. [ 1359.444542][ T6300] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8598'. [ 1363.092463][ T6285] tipc: Resetting bearer [ 1363.101885][ T6253] wg1 speed is unknown, defaulting to 1000 [ 1363.111355][ T6283] tipc: Resetting bearer [ 1363.155204][ T6283] tipc: Disabling bearer [ 1363.410748][ T6335] netlink: 'syz.3.8606': attribute type 1 has an invalid length. [ 1364.822705][ T6334] wg1 speed is unknown, defaulting to 1000 [ 1364.902579][ T6257] wg1 speed is unknown, defaulting to 1000 [ 1365.236589][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8616'. [ 1366.078848][ T6367] wg1 speed is unknown, defaulting to 1000 [ 1366.967620][ T1512] IPVS: starting estimator thread 0... [ 1366.985328][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.099709][ T6401] IPVS: using max 27 ests per chain, 64800 per kthread [ 1367.203717][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8624'. [ 1367.549309][ T6413] syzkaller0: entered promiscuous mode [ 1367.562256][ T6413] syzkaller0: entered allmulticast mode [ 1367.856136][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8628'. [ 1367.966057][ T6428] netlink: 'syz.7.8629': attribute type 2 has an invalid length. [ 1368.058562][ T6434] netlink: 'syz.6.8630': attribute type 33 has an invalid length. [ 1368.085873][ T6428] : entered promiscuous mode [ 1368.091199][ T6434] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8630'. [ 1368.147379][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8630'. [ 1368.996057][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8635'. [ 1369.208439][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8640'. [ 1369.285180][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8639'. [ 1369.324846][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8639'. [ 1369.345752][ T6468] syzkaller0: entered promiscuous mode [ 1369.366735][ T6468] syzkaller0: entered allmulticast mode [ 1369.832942][ T6489] syzkaller0: entered promiscuous mode [ 1369.878217][ T6489] syzkaller0: entered allmulticast mode [ 1370.011445][ T6484] Set syz1 is full, maxelem 6117 reached [ 1371.040998][ T6482] wg1 speed is unknown, defaulting to 1000 [ 1371.072959][ T6520] veth1_macvtap: left promiscuous mode [ 1371.079046][ T6520] macsec0: entered promiscuous mode [ 1372.190827][ T6485] wg1 speed is unknown, defaulting to 1000 [ 1372.462996][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8661'. [ 1372.652764][ T6561] bridge_slave_0: left promiscuous mode [ 1372.663708][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.775938][ T6561] bridge_slave_1: left allmulticast mode [ 1372.789307][ T6561] bridge_slave_1: left promiscuous mode [ 1372.802478][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.932706][ T6561] bond0: (slave bond_slave_0): Releasing backup interface [ 1372.975887][ T6561] bond0: (slave bond_slave_1): Releasing backup interface [ 1373.004987][ T6561] team0: Port device team_slave_0 removed [ 1373.023002][ T6561] team0: Port device team_slave_1 removed [ 1373.032547][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.044711][ T6561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1373.065032][ T6554] tipc: Started in network mode [ 1373.070628][ T6554] tipc: Node identity caade542e5ff, cluster identity 4711 [ 1373.082798][ T6554] tipc: Enabled bearer , priority 0 [ 1373.177427][ T6557] syzkaller0: entered promiscuous mode [ 1373.185122][ T6557] syzkaller0: entered allmulticast mode [ 1373.193117][ T6557] tipc: Resetting bearer [ 1376.781428][ T6565] tipc: Resetting bearer [ 1376.789463][ T60] tipc: Resetting bearer [ 1376.796467][ T6504] wg1 speed is unknown, defaulting to 1000 [ 1376.804026][ T6553] tipc: Resetting bearer [ 1376.836667][ T6553] tipc: Disabling bearer [ 1376.954871][ T1512] tipc: Node number set to 793961794 [ 1377.445101][ T6541] wg1 speed is unknown, defaulting to 1000 [ 1378.463616][ T6600] Cannot find add_set index 4 as target [ 1378.486311][ T6600] netlink: 'syz.6.8672': attribute type 15 has an invalid length. [ 1378.692564][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8674'. [ 1378.758283][ T6607] tipc: Enabled bearer , priority 0 [ 1378.805646][ T6602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1378.847699][ T6602] netlink: 18 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1378.964369][ T6607] syzkaller0: entered promiscuous mode [ 1378.971243][ T6607] syzkaller0: entered allmulticast mode [ 1378.978632][ T6607] tipc: Resetting bearer [ 1379.149291][ T6620] netlink: 'syz.1.8678': attribute type 2 has an invalid length. [ 1379.177042][ T36] tipc: Resetting bearer [ 1379.360870][ T6630] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1379.446416][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8680'. [ 1379.505622][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8680'. [ 1382.244753][ T6613] tipc: Resetting bearer [ 1382.261639][ T6630] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1382.276127][ T6605] tipc: Resetting bearer [ 1382.337573][ T6605] tipc: Disabling bearer [ 1382.543409][ T6638] veth3: entered promiscuous mode [ 1382.562515][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8683'. [ 1382.736962][ T6648] batadv1: entered promiscuous mode [ 1383.014618][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8688'. [ 1383.131034][ T6665] netlink: 'syz.1.8690': attribute type 9 has an invalid length. [ 1383.140116][ T6665] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8690'. [ 1384.264336][ T6645] wg1 speed is unknown, defaulting to 1000 [ 1384.378702][ T6691] Set syz1 is full, maxelem 6117 reached [ 1384.797349][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8703'. [ 1385.051694][ T6646] wg1 speed is unknown, defaulting to 1000 [ 1385.494771][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8710'. [ 1385.555996][ T6729] netlink: 'syz.7.8710': attribute type 1 has an invalid length. [ 1385.565364][ T6729] netlink: 244 bytes leftover after parsing attributes in process `syz.7.8710'. [ 1385.577420][ T6729] NCSI netlink: No device for ifindex 0 [ 1385.772986][ T1512] IPVS: starting estimator thread 0... [ 1385.872513][ T6679] wg1 speed is unknown, defaulting to 1000 [ 1385.899848][ T6735] IPVS: using max 27 ests per chain, 64800 per kthread [ 1385.921109][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1385.961956][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.016568][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.105668][ T6727] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1386.294484][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.375922][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.563429][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.621361][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.705692][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.735498][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.761702][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.773978][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.847898][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1386.871236][ T6727] wg1 speed is unknown, defaulting to 1000 [ 1387.383839][ T6760] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8720'. [ 1388.283190][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8723'. [ 1388.436392][ T6771] team1: entered promiscuous mode [ 1388.475138][ T6771] team1: entered allmulticast mode [ 1388.498081][ T6771] 8021q: adding VLAN 0 to HW filter on device team1 [ 1388.641237][ T5767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1388.653228][ T5767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1388.665533][ T5767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1388.676418][ T5767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1388.686458][ T5767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1388.996535][ T6783] xt_TCPMSS: Only works on TCP SYN packets [ 1389.099803][ T6783] netlink: 'syz.3.8726': attribute type 13 has an invalid length. [ 1389.598581][ T6769] syz.6.8722: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1389.650729][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.6.8722 Not tainted syzkaller #0 PREEMPT(full) [ 1389.650763][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1389.650778][ T6769] Call Trace: [ 1389.650787][ T6769] [ 1389.650798][ T6769] dump_stack_lvl+0x189/0x250 [ 1389.650852][ T6769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1389.650891][ T6769] ? __pfx__printk+0x10/0x10 [ 1389.650916][ T6769] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1389.650948][ T6769] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1389.650984][ T6769] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1389.651020][ T6769] warn_alloc+0x214/0x310 [ 1389.651064][ T6769] ? __pfx_warn_alloc+0x10/0x10 [ 1389.651111][ T6769] ? __get_vm_area_node+0x28f/0x300 [ 1389.651144][ T6769] ? hash_net4_resize+0x235/0x1b60 [ 1389.651183][ T6769] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1389.651216][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.651268][ T6769] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1389.651294][ T6769] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1389.651334][ T6769] ? rcu_is_watching+0x15/0xb0 [ 1389.651361][ T6769] ? hash_net4_resize+0x235/0x1b60 [ 1389.651399][ T6769] __kvmalloc_node_noprof+0x674/0x910 [ 1389.651435][ T6769] ? hash_net4_resize+0x235/0x1b60 [ 1389.651480][ T6769] hash_net4_resize+0x235/0x1b60 [ 1389.651515][ T6769] ? hash_net4_uadt+0x7fd/0x980 [ 1389.651550][ T6769] ? __pfx_hash_net4_add+0x10/0x10 [ 1389.651582][ T6769] ? __pfx_hash_net4_uadt+0x10/0x10 [ 1389.651625][ T6769] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1389.651666][ T6769] call_ad+0x44e/0xb00 [ 1389.651705][ T6769] ? __pfx_call_ad+0x10/0x10 [ 1389.651751][ T6769] ? __nla_parse+0x40/0x60 [ 1389.651782][ T6769] ip_set_ad+0x791/0x930 [ 1389.651822][ T6769] ? __pfx_ip_set_ad+0x10/0x10 [ 1389.651855][ T6769] ? __lock_acquire+0xab9/0xd20 [ 1389.651926][ T6769] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1389.651952][ T6769] ? unwind_get_return_address+0x4d/0x90 [ 1389.651979][ T6769] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1389.652010][ T6769] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1389.652060][ T6769] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1389.652147][ T6769] netlink_rcv_skb+0x208/0x470 [ 1389.652179][ T6769] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1389.652208][ T6769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1389.652253][ T6769] ? bpf_lsm_capable+0x9/0x20 [ 1389.652281][ T6769] ? security_capable+0x7e/0x2e0 [ 1389.652324][ T6769] nfnetlink_rcv+0x282/0x2590 [ 1389.652351][ T6769] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1389.652376][ T6769] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1389.652409][ T6769] ? __dev_queue_xmit+0x2ab/0x3180 [ 1389.652439][ T6769] ? __dev_queue_xmit+0x2ab/0x3180 [ 1389.652473][ T6769] ? __dev_queue_xmit+0x1987/0x3180 [ 1389.652504][ T6769] ? do_syscall_64+0xfa/0xfa0 [ 1389.652541][ T6769] ? __dev_queue_xmit+0x2ab/0x3180 [ 1389.652579][ T6769] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1389.652613][ T6769] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1389.652654][ T6769] ? ref_tracker_free+0x63a/0x7d0 [ 1389.652678][ T6769] ? __asan_memcpy+0x40/0x70 [ 1389.652709][ T6769] ? __pfx_ref_tracker_free+0x10/0x10 [ 1389.652762][ T6769] ? skb_clone+0x246/0x3a0 [ 1389.652879][ T6769] ? __netlink_deliver_tap+0x807/0x850 [ 1389.652917][ T6769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1389.652954][ T6769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1389.652994][ T6769] netlink_unicast+0x82f/0x9e0 [ 1389.653032][ T6769] ? __pfx_netlink_unicast+0x10/0x10 [ 1389.653058][ T6769] ? netlink_sendmsg+0x642/0xb30 [ 1389.653081][ T6769] ? skb_put+0x11b/0x210 [ 1389.653111][ T6769] netlink_sendmsg+0x805/0xb30 [ 1389.653151][ T6769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.653185][ T6769] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1389.653226][ T6769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1389.653247][ T6769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.653279][ T6769] __sock_sendmsg+0x21c/0x270 [ 1389.653319][ T6769] ____sys_sendmsg+0x505/0x830 [ 1389.653354][ T6769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1389.653393][ T6769] ? import_iovec+0x74/0xa0 [ 1389.653429][ T6769] ___sys_sendmsg+0x21f/0x2a0 [ 1389.653464][ T6769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1389.653540][ T6769] ? __fget_files+0x2a/0x420 [ 1389.653563][ T6769] ? __fget_files+0x3a0/0x420 [ 1389.653601][ T6769] __x64_sys_sendmsg+0x19b/0x260 [ 1389.653635][ T6769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1389.653688][ T6769] ? do_syscall_64+0xbe/0xfa0 [ 1389.653722][ T6769] do_syscall_64+0xfa/0xfa0 [ 1389.653750][ T6769] ? lockdep_hardirqs_on+0x9c/0x150 [ 1389.653779][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.653813][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 1389.653842][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.653867][ T6769] RIP: 0033:0x7fd04918f749 [ 1389.653887][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.653909][ T6769] RSP: 002b:00007fd04a032038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.653935][ T6769] RAX: ffffffffffffffda RBX: 00007fd0493e5fa0 RCX: 00007fd04918f749 [ 1389.653953][ T6769] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 000000000000000b [ 1389.653969][ T6769] RBP: 00007fd049213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1389.653984][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.653998][ T6769] R13: 00007fd0493e6038 R14: 00007fd0493e5fa0 R15: 00007ffd6a4788d8 [ 1389.654039][ T6769] [ 1389.654157][ T6769] Mem-Info: [ 1390.233423][ T6790] FAULT_INJECTION: forcing a failure. [ 1390.233423][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.266374][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.1.8728 Not tainted syzkaller #0 PREEMPT(full) [ 1390.266402][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.266413][ T6790] Call Trace: [ 1390.266420][ T6790] [ 1390.266428][ T6790] dump_stack_lvl+0x189/0x250 [ 1390.266460][ T6790] ? __pfx____ratelimit+0x10/0x10 [ 1390.266482][ T6790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.266507][ T6790] ? __pfx__printk+0x10/0x10 [ 1390.266539][ T6790] should_fail_ex+0x414/0x560 [ 1390.266575][ T6790] _copy_to_user+0x31/0xb0 [ 1390.266601][ T6790] simple_read_from_buffer+0xe1/0x170 [ 1390.266632][ T6790] proc_fail_nth_read+0x1b3/0x220 [ 1390.266658][ T6790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1390.266683][ T6790] ? rw_verify_area+0x2a6/0x4d0 [ 1390.266707][ T6790] ? __lock_acquire+0xab9/0xd20 [ 1390.266723][ T6790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1390.266756][ T6790] vfs_read+0x200/0xa30 [ 1390.266779][ T6790] ? fdget_pos+0x247/0x320 [ 1390.266801][ T6790] ? __pfx___mutex_lock+0x10/0x10 [ 1390.266825][ T6790] ? __pfx_vfs_read+0x10/0x10 [ 1390.266851][ T6790] ? __fget_files+0x2a/0x420 [ 1390.266872][ T6790] ? __fget_files+0x3a0/0x420 [ 1390.266887][ T6790] ? __fget_files+0x2a/0x420 [ 1390.266913][ T6790] ksys_read+0x145/0x250 [ 1390.266941][ T6790] ? __pfx_ksys_read+0x10/0x10 [ 1390.266970][ T6790] ? do_syscall_64+0xbe/0xfa0 [ 1390.266997][ T6790] do_syscall_64+0xfa/0xfa0 [ 1390.267018][ T6790] ? lockdep_hardirqs_on+0x9c/0x150 [ 1390.267039][ T6790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.267057][ T6790] ? clear_bhb_loop+0x60/0xb0 [ 1390.267079][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.267096][ T6790] RIP: 0033:0x7f886498e15c [ 1390.267114][ T6790] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1390.267130][ T6790] RSP: 002b:00007f8865896030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1390.267151][ T6790] RAX: ffffffffffffffda RBX: 00007f8864be5fa0 RCX: 00007f886498e15c [ 1390.267164][ T6790] RDX: 000000000000000f RSI: 00007f88658960a0 RDI: 0000000000000004 [ 1390.267175][ T6790] RBP: 00007f8865896090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.267186][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.267196][ T6790] R13: 00007f8864be6038 R14: 00007f8864be5fa0 R15: 00007fff6b209508 [ 1390.267228][ T6790] [ 1390.538050][ T6769] active_anon:7184 inactive_anon:0 isolated_anon:0 [ 1390.538050][ T6769] active_file:4115 inactive_file:40423 isolated_file:0 [ 1390.538050][ T6769] unevictable:768 dirty:474 writeback:0 [ 1390.538050][ T6769] slab_reclaimable:13007 slab_unreclaimable:174847 [ 1390.538050][ T6769] mapped:30096 shmem:1414 pagetables:1735 [ 1390.538050][ T6769] sec_pagetables:0 bounce:0 [ 1390.538050][ T6769] kernel_misc_reclaimable:0 [ 1390.538050][ T6769] free:1245750 free_pcp:10104 free_cma:0 [ 1390.709788][ T6769] Node 0 active_anon:29736kB inactive_anon:0kB active_file:16460kB inactive_file:161492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120384kB dirty:1892kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14228kB pagetables:6612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1390.793331][ T5767] Bluetooth: hci3: command tx timeout [ 1390.844797][ T6769] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1390.887198][ T6769] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.975596][ T6769] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 1390.992389][ T6769] Node 0 DMA32 free:1072248kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31436kB inactive_anon:0kB active_file:16460kB inactive_file:161492kB unevictable:1536kB writepending:1892kB zspages:0kB present:3129332kB managed:2565012kB mlocked:0kB bounce:0kB free_pcp:38008kB local_pcp:19432kB free_cma:0kB [ 1391.061464][ T6769] lowmem_reserve[]: 0 0 0 0 0 [ 1391.096172][ T6769] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.159021][ T6769] lowmem_reserve[]: 0 0 0 0 0 [ 1391.186233][ T6769] Node 1 Normal free:3905352kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2720kB local_pcp:0kB free_cma:0kB [ 1391.222736][ T6769] lowmem_reserve[]: 0 0 0 0 0 [ 1391.227847][ T6769] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1391.282519][ T6769] Node 0 DMA32: 2*4kB (ME) 1199*8kB (U) 1243*16kB (UME) 483*32kB (UME) 224*64kB (UME) 673*128kB (UME) 864*256kB (UM) 450*512kB (UME) 224*1024kB (UME) 8*2048kB (UME) 59*4096kB (UM) = 1084432kB [ 1391.325708][ T6769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1391.356270][ T6769] Node 1 Normal: 166*4kB (UME) 48*8kB (UME) 45*16kB (UME) 209*32kB (UME) 109*64kB (UME) 26*128kB (UME) 8*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3905352kB [ 1391.398126][ T6769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1391.409727][ T6769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1391.421734][ T6769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1391.432725][ T6769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1391.442525][ T6769] 45898 total pagecache pages [ 1391.447718][ T6769] 0 pages in swap cache [ 1391.452197][ T6769] Free swap = 124996kB [ 1391.457027][ T6769] Total swap = 124996kB [ 1391.462000][ T6769] 2097051 pages RAM [ 1391.466210][ T6769] 0 pages HighMem/MovableOnly [ 1391.471511][ T6769] 424156 pages reserved [ 1391.476209][ T6769] 0 pages cma reserved [ 1391.852708][T20165] bond0 (unregistering): Released all slaves [ 1392.220654][T20165] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1392.228920][T20165] bond2 (unregistering): left promiscuous mode [ 1392.236964][T20165] bond1 (unregistering): Released all slaves [ 1392.338622][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8734'. [ 1392.447968][T20165] bond2 (unregistering): Released all slaves [ 1392.463136][T20165] bond3 (unregistering): Released all slaves [ 1392.480098][T20165] bond4 (unregistering): Released all slaves [ 1392.494195][ T6778] wg1 speed is unknown, defaulting to 1000 [ 1392.565618][ T6778] wg1 speed is unknown, defaulting to 1000 [ 1392.656227][T20165] tipc: Left network mode [ 1392.829777][ T5767] Bluetooth: hci3: command tx timeout [ 1393.369156][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 1393.914446][ T6855] Bluetooth: MGMT ver 1.23 [ 1393.920419][ T6859] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8743'. [ 1393.954950][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.971435][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.979361][ T6778] bridge_slave_0: entered allmulticast mode [ 1394.001150][ T6778] bridge_slave_0: entered promiscuous mode [ 1394.018170][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.029266][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.037775][ T6778] bridge_slave_1: entered allmulticast mode [ 1394.047645][ T6778] bridge_slave_1: entered promiscuous mode [ 1394.166206][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.201674][ T6869] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8744'. [ 1394.204513][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.243584][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8744'. [ 1394.297845][ T6778] team0: Port device team_slave_0 added [ 1394.324111][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.340646][ T6778] team0: Port device team_slave_1 added [ 1394.400704][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.409672][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.452863][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.484337][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.504684][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.549990][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.685083][ T6802] wg1 speed is unknown, defaulting to 1000 [ 1394.731714][ T6778] hsr_slave_0: entered promiscuous mode [ 1394.904137][T29477] Bluetooth: hci3: command tx timeout [ 1395.172731][ T6778] hsr_slave_1: entered promiscuous mode [ 1395.192245][ T6778] debugfs: 'hsr0' already exists in 'hsr' [ 1395.198845][ T6778] Cannot create hsr debugfs directory [ 1395.230643][ T6843] wg1 speed is unknown, defaulting to 1000 [ 1395.230672][ T6802] wg1 speed is unknown, defaulting to 1000 [ 1395.303455][ T6843] wg1 speed is unknown, defaulting to 1000 [ 1395.514149][T20165] hsr_slave_0: left promiscuous mode [ 1395.608638][T20165] hsr_slave_1: left promiscuous mode [ 1395.618494][T20165] vlan0: left promiscuous mode [ 1395.941987][ T5767] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1395.950266][T29477] Bluetooth: hci2: command 0x0401 tx timeout [ 1396.979924][ T5767] Bluetooth: hci3: command tx timeout [ 1397.779310][T20165] IPVS: stop unused estimator thread 0... [ 1398.868942][ T6778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1398.904941][ T6778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1398.931517][ T6778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1398.964942][ T6778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1399.060798][ T5767] Bluetooth: hci3: command tx timeout [ 1399.237195][ T6924] netlink: 'syz.3.8755': attribute type 2 has an invalid length. [ 1399.292896][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.337027][ T6926] Bluetooth: MGMT ver 1.23 [ 1399.346999][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.365278][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.370275][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8755'. [ 1399.373547][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.447830][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.455938][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.566271][ T6931] sctp: [Deprecated]: syz.1.8757 (pid 6931) Use of int in maxseg socket option. [ 1399.566271][ T6931] Use struct sctp_assoc_value instead [ 1399.978481][ T6945] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8762'. [ 1400.047920][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1400.177618][ T6900] wg1 speed is unknown, defaulting to 1000 [ 1400.312226][ T6778] veth0_vlan: entered promiscuous mode [ 1400.446450][ T6778] veth1_vlan: entered promiscuous mode [ 1400.725213][ T6778] veth0_macvtap: entered promiscuous mode [ 1400.776733][ T6778] veth1_macvtap: entered promiscuous mode [ 1400.812177][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.837086][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.858468][ T1140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.883453][ T1140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.911062][ T1140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.921771][ T1140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.047059][ T8024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.063771][ T8024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.154950][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.203481][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.297756][ T6971] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8768'. [ 1401.467912][ T6902] wg1 speed is unknown, defaulting to 1000 [ 1401.527914][ T6977] syzkaller0: entered promiscuous mode [ 1401.536491][ T6977] syzkaller0: entered allmulticast mode [ 1401.631840][ T6977] tipc: Started in network mode [ 1401.640067][ T6977] tipc: Node identity 6ab0b20341b, cluster identity 4711 [ 1401.649378][ T6977] tipc: Enabled bearer , priority 0 [ 1401.750015][ T6976] tipc: Resetting bearer [ 1401.803426][ T6976] tipc: Disabling bearer [ 1402.055138][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8770'. [ 1403.021054][ T6952] wg1 speed is unknown, defaulting to 1000 [ 1403.074912][ T6953] wg1 speed is unknown, defaulting to 1000 [ 1403.571103][ T1523] IPVS: starting estimator thread 0... [ 1403.671658][ T6991] IPVS: using max 27 ests per chain, 64800 per kthread [ 1403.970682][ T6971] wg1 speed is unknown, defaulting to 1000 [ 1404.072621][ T6958] wg1 speed is unknown, defaulting to 1000 [ 1404.367106][ T6956] wg1 speed is unknown, defaulting to 1000 [ 1404.928176][ T6995] Set syz1 is full, maxelem 6117 reached [ 1405.661721][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8777'. [ 1406.262186][ T7013] syzkaller0: entered promiscuous mode [ 1406.276297][ T7013] syzkaller0: entered allmulticast mode [ 1406.394874][ T7013] tipc: Enabling of bearer rejected, failed to enable media [ 1406.570967][ T7026] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1406.656393][ T7029] netlink: 'syz.3.8783': attribute type 13 has an invalid length. [ 1406.672872][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1406.695304][ T7029] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8783'. [ 1406.810860][ T7026] bond1: option ad_select: invalid value (34) [ 1406.825719][ T7026] bond1 (unregistering): Released all slaves [ 1406.865108][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8786'. [ 1407.367892][ T7043] macvlan2: entered promiscuous mode [ 1407.400040][ T7048] netlink: 'syz.7.8789': attribute type 3 has an invalid length. [ 1407.426642][ T7043] vlan0: entered promiscuous mode [ 1407.776039][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8790'. [ 1407.804989][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8790'. [ 1408.058467][ T7021] wg1 speed is unknown, defaulting to 1000 [ 1408.317203][ T7080] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1408.454639][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8797'. [ 1408.561791][ T7080] bond1: option ad_select: invalid value (34) [ 1408.623464][ T7080] bond1 (unregistering): Released all slaves [ 1410.613602][ T7120] IPVS: set_ctl: invalid protocol: 0 255.255.255.252:0 [ 1410.729734][ T7072] wg1 speed is unknown, defaulting to 1000 [ 1410.784257][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1411.339024][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8808'. [ 1411.369148][ T7142] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1411.509094][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1411.527828][ T7142] bond2: option ad_select: invalid value (34) [ 1411.555358][ T7142] bond2 (unregistering): Released all slaves [ 1411.680631][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1411.692957][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1411.708822][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1411.747477][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1411.792906][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1411.806005][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1411.902948][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8813'. [ 1412.000351][ T7159] bridge0: entered allmulticast mode [ 1412.181203][ T7120] wg1 speed is unknown, defaulting to 1000 [ 1412.184375][ T7165] syzkaller0: entered promiscuous mode [ 1412.213424][ T7165] syzkaller0: entered allmulticast mode [ 1413.671105][ T7204] syzkaller0: entered promiscuous mode [ 1413.678524][ T7204] syzkaller0: entered allmulticast mode [ 1413.811676][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 1414.354619][ T7179] wg1 speed is unknown, defaulting to 1000 [ 1415.407567][ T7242] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1416.212108][ T7211] wg1 speed is unknown, defaulting to 1000 [ 1417.046499][ T7274] syzkaller0: entered promiscuous mode [ 1417.164254][ T7274] syzkaller0: entered allmulticast mode [ 1417.421720][ T7209] wg1 speed is unknown, defaulting to 1000 [ 1417.674133][ T7283] __nla_validate_parse: 71 callbacks suppressed [ 1417.674155][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 1417.884149][ T7286] tipc: Enabling of bearer rejected, failed to enable media [ 1417.902394][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 1417.913396][ T7282] veth1_to_team: entered allmulticast mode [ 1417.936678][T20165] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.301172][T20165] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.345370][T20165] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.405987][T20165] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.992971][T29477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1419.014043][T29477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1419.023638][T29477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1419.033453][T29477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1419.043220][T29477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1419.812950][ T7336] geneve2: entered promiscuous mode [ 1420.631514][ T7322] wg1 speed is unknown, defaulting to 1000 [ 1420.907778][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 1420.931075][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8855'. [ 1421.142519][ T5767] Bluetooth: hci0: command tx timeout [ 1421.442506][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8860'. [ 1421.564814][ T7381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8862'. [ 1421.578756][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.596564][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.604646][ T7322] bridge_slave_0: entered allmulticast mode [ 1421.627958][ T7322] bridge_slave_0: entered promiscuous mode [ 1421.697172][ T7383] veth3: entered promiscuous mode [ 1421.718678][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.728429][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.748780][ T7322] bridge_slave_1: entered allmulticast mode [ 1421.763017][ T7322] bridge_slave_1: entered promiscuous mode [ 1421.774208][ T7386] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 1421.824919][ T7386] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 1421.844948][ T7392] netlink: 'syz.2.8865': attribute type 3 has an invalid length. [ 1421.853526][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.905410][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.920578][ T7392] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8865'. [ 1421.977287][ T7393] netlink: 'syz.2.8865': attribute type 3 has an invalid length. [ 1422.029405][ T7322] team0: Port device team_slave_0 added [ 1422.054044][ T7322] team0: Port device team_slave_1 added [ 1422.161626][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.169163][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.231879][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.302625][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.315509][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.368163][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.566368][ T7322] hsr_slave_0: entered promiscuous mode [ 1422.593975][ T7322] hsr_slave_1: entered promiscuous mode [ 1422.622690][ T7322] debugfs: 'hsr0' already exists in 'hsr' [ 1422.643590][ T7322] Cannot create hsr debugfs directory [ 1423.003874][ T7431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8877'. [ 1423.219927][ T5767] Bluetooth: hci0: command tx timeout [ 1423.398340][ T7322] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.520093][ T7396] wg1 speed is unknown, defaulting to 1000 [ 1423.535342][ T7322] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.657267][ T7322] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.737100][ T7322] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.777100][ T7448] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1423.797095][ T7453] netlink: 'syz.7.8885': attribute type 1 has an invalid length. [ 1423.844699][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8886'. [ 1423.911429][ T7453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1423.992317][ T7458] veth3: entered promiscuous mode [ 1424.011170][ T7458] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1424.163591][ T7464] tipc: Enabled bearer , priority 0 [ 1424.318447][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8887'. [ 1424.354866][ T7464] bridge_slave_1: left allmulticast mode [ 1424.363817][ T7464] bridge_slave_1: left promiscuous mode [ 1424.371617][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.443323][ T7464] bridge_slave_0: left allmulticast mode [ 1424.450617][ T7464] bridge_slave_0: left promiscuous mode [ 1424.457527][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.901622][ T7463] tipc: Disabling bearer [ 1425.020805][ T7322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1425.047318][ T7322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1425.088796][ T7322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1425.147161][ T7480] netlink: 'syz.7.8892': attribute type 12 has an invalid length. [ 1425.207072][ T7322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1425.299943][ T5767] Bluetooth: hci0: command tx timeout [ 1425.473779][ T7322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.514615][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8898'. [ 1425.572366][ T7322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.659390][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.667957][ T8024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.738582][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.746690][ T8024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.571267][ T7322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.738508][ T7322] veth0_vlan: entered promiscuous mode [ 1426.805650][ T7322] veth1_vlan: entered promiscuous mode [ 1426.989191][ T7322] veth0_macvtap: entered promiscuous mode [ 1427.036051][ T7322] veth1_macvtap: entered promiscuous mode [ 1427.085101][ T7508] wg1 speed is unknown, defaulting to 1000 [ 1427.115811][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1427.122141][ T7555] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8909'. [ 1427.130917][ T7556] IPVS: length: 132 != 8 [ 1427.201225][ T7322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1427.375098][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.391309][ T5767] Bluetooth: hci0: command tx timeout [ 1427.397006][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.397862][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.473975][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.802481][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.818815][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.916423][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.953003][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1428.246653][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8919'. [ 1428.452885][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.737882][ T7602] xt_TCPMSS: Only works on TCP SYN packets [ 1429.043410][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8927'. [ 1429.147521][ T7620] netlink: 'syz.1.8928': attribute type 10 has an invalid length. [ 1429.156805][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8928'. [ 1429.172064][ T7620] dummy0: entered promiscuous mode [ 1429.179095][ T7620] bridge0: port 3(dummy0) entered blocking state [ 1429.193359][ T7620] bridge0: port 3(dummy0) entered disabled state [ 1429.202157][ T7620] dummy0: entered allmulticast mode [ 1429.214767][ T7620] bridge0: port 3(dummy0) entered blocking state [ 1429.222681][ T7620] bridge0: port 3(dummy0) entered forwarding state [ 1429.441885][ T7578] wg1 speed is unknown, defaulting to 1000 [ 1429.694785][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8932'. [ 1429.782780][ T7632] team1: entered promiscuous mode [ 1429.788430][ T7632] team1: entered allmulticast mode [ 1429.794815][ T7632] 8021q: adding VLAN 0 to HW filter on device team1 [ 1429.891330][ T7574] wg1 speed is unknown, defaulting to 1000 [ 1429.899385][ T7601] siw: device registration error -23 [ 1430.100828][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8935'. [ 1430.164419][ T7643] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1430.258710][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1430.458320][ T7643] bond1: option ad_select: invalid value (34) [ 1430.471353][ T7643] bond1 (unregistering): Released all slaves [ 1430.821676][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8943'. [ 1431.056439][ T7667] team2: entered promiscuous mode [ 1431.074130][ T7667] team2: entered allmulticast mode [ 1431.085766][ T7667] 8021q: adding VLAN 0 to HW filter on device team2 [ 1431.356180][ T7691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8947'. [ 1431.513328][ T7694] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1431.766156][ T7704] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1431.859201][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8952'. [ 1431.919365][ T7704] bond1: option ad_select: invalid value (34) [ 1431.960423][ T7704] bond1 (unregistering): Released all slaves [ 1432.145372][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8953'. [ 1432.304682][ T7717] netlink: 'syz.2.8953': attribute type 1 has an invalid length. [ 1432.325269][ T7719] team1: entered promiscuous mode [ 1432.358668][ T7719] team1: entered allmulticast mode [ 1432.385505][ T7719] 8021q: adding VLAN 0 to HW filter on device team1 [ 1432.654033][ T7731] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1432.853082][ T7739] netlink: 'syz.7.8964': attribute type 11 has an invalid length. [ 1432.996388][ T7742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1433.113303][ T7751] lo: entered promiscuous mode [ 1433.118693][ T7751] lo: entered allmulticast mode [ 1433.125257][ T7751] tunl0: entered promiscuous mode [ 1433.141301][ T7751] tunl0: entered allmulticast mode [ 1433.148683][ T7751] gre0: entered promiscuous mode [ 1433.167084][ T7751] gre0: entered allmulticast mode [ 1433.176329][ T7751] gretap0: entered promiscuous mode [ 1433.184238][ T7751] gretap0: entered allmulticast mode [ 1433.214605][ T7751] erspan0: entered promiscuous mode [ 1433.223484][ T7751] erspan0: entered allmulticast mode [ 1433.236634][ T7751] ip_vti0: entered promiscuous mode [ 1433.244524][ T7751] ip_vti0: entered allmulticast mode [ 1433.253747][ T7751] ip6_vti0: entered promiscuous mode [ 1433.261190][ T7751] ip6_vti0: entered allmulticast mode [ 1433.268774][ T7751] sit0: entered allmulticast mode [ 1433.353871][ T7751] ip6tnl0: entered promiscuous mode [ 1433.363237][ T7751] ip6tnl0: entered allmulticast mode [ 1433.378536][ T7751] ip6gre0: entered promiscuous mode [ 1433.389495][ T7751] ip6gre0: entered allmulticast mode [ 1433.403433][ T7751] syz_tun: entered promiscuous mode [ 1433.426907][ T7751] syz_tun: entered allmulticast mode [ 1433.435230][ T7751] ip6gretap0: entered promiscuous mode [ 1433.449770][ T7751] ip6gretap0: entered allmulticast mode [ 1433.458120][ T7751] vcan0: entered promiscuous mode [ 1433.477546][ T7751] vcan0: entered allmulticast mode [ 1433.485739][ T7751] bond0: entered promiscuous mode [ 1433.499874][ T7751] bond_slave_0: entered promiscuous mode [ 1433.516733][ T7751] bond_slave_1: entered promiscuous mode [ 1433.530472][ T7751] bond0: entered allmulticast mode [ 1433.547308][ T7751] bond_slave_0: entered allmulticast mode [ 1433.590145][ T7751] bond_slave_1: entered allmulticast mode [ 1433.597656][ T7751] team0: entered promiscuous mode [ 1433.631560][ T7751] team_slave_0: entered promiscuous mode [ 1433.638591][ T7751] team_slave_1: entered promiscuous mode [ 1433.681408][ T7751] team0: entered allmulticast mode [ 1433.707989][ T7751] team_slave_0: entered allmulticast mode [ 1433.714901][ T7751] team_slave_1: entered allmulticast mode [ 1433.731409][ T7751] nlmon0: entered promiscuous mode [ 1433.752149][ T7751] nlmon0: entered allmulticast mode [ 1433.778248][ T7751] caif0: entered promiscuous mode [ 1433.784055][ T7751] caif0: entered allmulticast mode [ 1433.790579][ T7751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1433.821897][ T7759] __nla_validate_parse: 2 callbacks suppressed [ 1433.821921][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8968'. [ 1433.884329][ T7708] wg1 speed is unknown, defaulting to 1000 [ 1434.789584][ T1140] geneve0 (unregistering): left promiscuous mode [ 1435.107008][ T1140] bond0 (unregistering): left promiscuous mode [ 1435.113922][ T1140] bond_slave_0: left promiscuous mode [ 1435.120221][ T1140] bond_slave_1: left promiscuous mode [ 1435.137871][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.152712][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.163296][ T1140] bond0 (unregistering): Released all slaves [ 1435.365579][ T1140] bond1 (unregistering): Released all slaves [ 1435.567202][ T1140] bond2 (unregistering): Released all slaves [ 1435.746050][ T1140] bond3 (unregistering): (slave veth7): Releasing active interface [ 1435.759880][ T1140] bond3 (unregistering): Released all slaves [ 1435.961837][ T1140] bond4 (unregistering): Released all slaves [ 1436.241119][ T1140] [†’Ì: left promiscuous mode [ 1436.389247][ T1140] tipc: Disabling bearer [ 1436.421900][ T1140] tipc: Left network mode [ 1436.744961][ T7792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8974'. [ 1437.187566][ T7799] erspan0: entered promiscuous mode [ 1437.211432][ T7747] wg1 speed is unknown, defaulting to 1000 [ 1437.317101][ T7806] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1437.803623][ T7815] veth0: entered promiscuous mode [ 1437.809379][ T7815] vlan2: entered promiscuous mode [ 1437.927070][ T7770] wg1 speed is unknown, defaulting to 1000 [ 1438.439041][ T7823] xt_TCPMSS: Only works on TCP SYN packets [ 1438.619348][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8984'. [ 1438.706709][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8984'. [ 1438.969808][ T7846] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1439.141375][T29477] Bluetooth: hci0: command 0x0405 tx timeout [ 1439.519121][ T7855] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1439.551722][ T7855] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1439.577854][ T7858] Bluetooth: MGMT ver 1.23 [ 1439.802888][ T1140] hsr_slave_0: left promiscuous mode [ 1439.822170][ T1140] hsr_slave_1: left promiscuous mode [ 1439.851187][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.105941][ T7874] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8994'. [ 1440.510843][ T7886] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1440.588093][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8996'. [ 1440.623719][ T1140] pimreg3 (unregistering): left allmulticast mode [ 1441.001117][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 1441.067071][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 1441.075952][ T12] smc: removing ib device !yz! [ 1441.760514][ T7886] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1442.142091][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8997'. [ 1442.267784][ T7893] syzkaller0: entered promiscuous mode [ 1442.300674][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9001'. [ 1442.334814][ T7893] syzkaller0: entered allmulticast mode [ 1442.346912][ T1487] IPVS: starting estimator thread 0... [ 1442.383300][ T7905] netlink: 'syz.3.9001': attribute type 1 has an invalid length. [ 1442.469798][ T7910] IPVS: using max 27 ests per chain, 64800 per kthread [ 1443.086604][ T7926] netlink: 'syz.1.9005': attribute type 36 has an invalid length. [ 1446.538242][ T7891] lo: left promiscuous mode [ 1446.543372][ T7891] lo: left allmulticast mode [ 1446.564147][ T7921] batadv_slave_0: entered promiscuous mode [ 1446.584744][ T7921] batman_adv: batadv0: Adding interface: macsec1 [ 1446.608328][ T7921] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.669680][ T7921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1446.682229][ T7921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1446.695348][ T7921] batman_adv: batadv0: Interface activated: macsec1 [ 1446.717694][ T7925] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1446.756555][ T7928] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9007'. [ 1446.827807][ T1140] IPVS: stop unused estimator thread 0... [ 1447.473427][ T7904] wg1 speed is unknown, defaulting to 1000 [ 1447.483358][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9015'. [ 1447.595839][ T7937] wg1 speed is unknown, defaulting to 1000 [ 1447.975471][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9016'. [ 1448.115454][ T7966] tipc: Started in network mode [ 1448.120751][ T7966] tipc: Node identity e666858dd9d, cluster identity 4711 [ 1448.128891][ T7966] tipc: Enabled bearer , priority 0 [ 1448.165278][ T7966] syzkaller0: entered promiscuous mode [ 1448.180218][ T7966] syzkaller0: entered allmulticast mode [ 1448.261651][ T7966] tipc: Resetting bearer [ 1448.282883][ T7940] wg1 speed is unknown, defaulting to 1000 [ 1448.515005][ T7965] tipc: Resetting bearer [ 1448.648905][ T7965] tipc: Disabling bearer [ 1449.424406][ T7989] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9025'. [ 1449.446979][ T7989] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9025'. [ 1449.504775][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9026'. [ 1449.599973][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9026'. [ 1449.601618][ T7999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1449.711359][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1449.770352][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.070009][ T8017] netlink: 'syz.6.9033': attribute type 1 has an invalid length. [ 1450.358788][ T8020] syzkaller0: entered promiscuous mode [ 1450.366047][ T8020] syzkaller0: entered allmulticast mode [ 1450.375025][ T8014] wg1 speed is unknown, defaulting to 1000 [ 1450.406019][ T8025] bond0: (slave 32): Releasing backup interface [ 1450.432234][ T8025] team_slave_0: left promiscuous mode [ 1450.461597][ T8025] team0: Port device team_slave_0 removed [ 1450.488518][ T8025] team_slave_1: left promiscuous mode [ 1450.521489][ T8025] team0: Port device team_slave_1 removed [ 1450.556554][ T8025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.564361][ T8025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.574124][ T8025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.659687][ T8025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.755775][ T8025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1450.876243][ T8015] wg1 speed is unknown, defaulting to 1000 [ 1454.973755][ T8047] ip_vti0: Master is either lo or non-ether device [ 1455.426121][ T8064] __nla_validate_parse: 5 callbacks suppressed [ 1455.426143][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9046'. [ 1455.585017][ T8070] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.9048'. [ 1456.358237][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9053'. [ 1456.386663][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9053'. [ 1456.484208][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9055'. [ 1456.672023][ T8098] netlink: 'syz.1.9057': attribute type 13 has an invalid length. [ 1456.687150][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9056'. [ 1456.712481][ T8098] netlink: 'syz.1.9057': attribute type 17 has an invalid length. [ 1456.852584][ T8099] netlink: 'syz.7.9056': attribute type 1 has an invalid length. [ 1457.153090][ T8098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1457.441237][ T8104] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9058'. [ 1457.493488][ T8095] wg1 speed is unknown, defaulting to 1000 [ 1457.825240][ T8129] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.038906][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9065'. [ 1458.055333][ T8129] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.368000][ T8129] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.464691][ T8120] wg1 speed is unknown, defaulting to 1000 [ 1458.541930][ T8129] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.313836][ T8147] FAULT_INJECTION: forcing a failure. [ 1459.313836][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.340764][ T8147] CPU: 0 UID: 0 PID: 8147 Comm: syz.1.9068 Not tainted syzkaller #0 PREEMPT(full) [ 1459.340795][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1459.340808][ T8147] Call Trace: [ 1459.340817][ T8147] [ 1459.340828][ T8147] dump_stack_lvl+0x189/0x250 [ 1459.340864][ T8147] ? __pfx____ratelimit+0x10/0x10 [ 1459.340888][ T8147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1459.340915][ T8147] ? __pfx__printk+0x10/0x10 [ 1459.340936][ T8147] ? __might_fault+0xb0/0x130 [ 1459.340976][ T8147] should_fail_ex+0x414/0x560 [ 1459.341013][ T8147] _copy_from_user+0x2d/0xb0 [ 1459.341040][ T8147] ___sys_sendmsg+0x158/0x2a0 [ 1459.341070][ T8147] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.341132][ T8147] ? __fget_files+0x2a/0x420 [ 1459.341151][ T8147] ? __fget_files+0x3a0/0x420 [ 1459.341181][ T8147] __x64_sys_sendmsg+0x19b/0x260 [ 1459.341209][ T8147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1459.341244][ T8147] ? __pfx_ksys_write+0x10/0x10 [ 1459.341276][ T8147] ? do_syscall_64+0xbe/0xfa0 [ 1459.341305][ T8147] do_syscall_64+0xfa/0xfa0 [ 1459.341327][ T8147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1459.341352][ T8147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.341371][ T8147] ? clear_bhb_loop+0x60/0xb0 [ 1459.341395][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.341416][ T8147] RIP: 0033:0x7f926998f749 [ 1459.341435][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1459.341453][ T8147] RSP: 002b:00007f9267bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.341475][ T8147] RAX: ffffffffffffffda RBX: 00007f9269be6090 RCX: 00007f926998f749 [ 1459.341490][ T8147] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1459.341503][ T8147] RBP: 00007f9267bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.341514][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.341527][ T8147] R13: 00007f9269be6128 R14: 00007f9269be6090 R15: 00007ffe45bf0758 [ 1459.341560][ T8147] [ 1461.240612][ T5767] Bluetooth: hci2: command 0x0401 tx timeout [ 1461.922075][ T8121] wg1 speed is unknown, defaulting to 1000 [ 1461.970012][ T8148] syzkaller0: entered promiscuous mode [ 1461.977129][ T8148] syzkaller0: entered allmulticast mode [ 1462.250915][T20165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.359941][T20165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.414776][T20165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.486763][ T1140] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.154204][ T8179] xt_cgroup: invalid path, errno=-2 [ 1463.176522][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9079'. [ 1463.200031][ T8179] netlink: 'syz.7.9079': attribute type 30 has an invalid length. [ 1463.227807][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9079'. [ 1463.238632][T20165] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.250247][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.261966][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.271468][ T8179] netlink: 'syz.7.9079': attribute type 30 has an invalid length. [ 1463.286681][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.344375][ T8188] syzkaller0: entered promiscuous mode [ 1463.350696][ T8188] syzkaller0: entered allmulticast mode [ 1463.404220][ T8188] tipc: Enabled bearer , priority 0 [ 1463.484567][ T8188] tipc: Resetting bearer [ 1463.528728][ T8188] tipc: Disabling bearer [ 1463.654058][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9085'. [ 1463.686170][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9083'. [ 1463.732331][ T8206] netlink: 'syz.6.9083': attribute type 1 has an invalid length. [ 1463.931963][ T8190] wg1 speed is unknown, defaulting to 1000 [ 1464.033361][ T8211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1464.054993][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9086'. [ 1464.250626][ T8197] wg1 speed is unknown, defaulting to 1000 [ 1464.787609][ T8192] wg1 speed is unknown, defaulting to 1000 [ 1465.176593][ T8232] geneve2: entered promiscuous mode [ 1465.586853][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9095'. [ 1465.909845][ T8253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1465.955281][ T8244] team0 (unregistering): Port device team_slave_0 removed [ 1465.973373][ T8244] team0 (unregistering): Port device team_slave_1 removed [ 1466.471095][ T8265] netlink: 'syz.7.9104': attribute type 10 has an invalid length. [ 1466.505596][ T8265] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1466.688840][ T8253] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1467.132580][ T8269] wg1 speed is unknown, defaulting to 1000 [ 1467.521030][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9110'. [ 1467.719165][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9112'. [ 1467.750673][ T8265] wg1 speed is unknown, defaulting to 1000 [ 1467.758456][ T8296] netlink: 'syz.2.9112': attribute type 10 has an invalid length. [ 1467.797217][ T8296] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9112'. [ 1469.252531][ T8329] lo: Caught tx_queue_len zero misconfig [ 1469.683707][ T8343] ip6gre1: entered promiscuous mode [ 1469.703617][ T8343] ip6gre1: entered allmulticast mode [ 1469.728845][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.753289][ T1510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.774455][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.859860][ T1510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.867836][T29477] Bluetooth: hci0: command 0x0405 tx timeout [ 1469.890685][ T8353] bond2: Unable to set down delay as MII monitoring is disabled [ 1469.910042][ T8353] bond2 (unregistering): Released all slaves [ 1470.096743][ T8340] wg1 speed is unknown, defaulting to 1000 [ 1470.193191][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9130'. [ 1470.547274][ T8373] FAULT_INJECTION: forcing a failure. [ 1470.547274][ T8373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.569177][ T8373] CPU: 0 UID: 0 PID: 8373 Comm: syz.3.9136 Not tainted syzkaller #0 PREEMPT(full) [ 1470.569210][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1470.569224][ T8373] Call Trace: [ 1470.569233][ T8373] [ 1470.569243][ T8373] dump_stack_lvl+0x189/0x250 [ 1470.569281][ T8373] ? __pfx____ratelimit+0x10/0x10 [ 1470.569307][ T8373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1470.569338][ T8373] ? __pfx__printk+0x10/0x10 [ 1470.569361][ T8373] ? __might_fault+0xb0/0x130 [ 1470.569402][ T8373] should_fail_ex+0x414/0x560 [ 1470.569440][ T8373] _copy_from_iter+0x1de/0x1790 [ 1470.569463][ T8373] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 1470.569498][ T8373] ? kmalloc_reserve+0xbd/0x290 [ 1470.569535][ T8373] ? __pfx__copy_from_iter+0x10/0x10 [ 1470.569557][ T8373] ? __alloc_skb+0x2f1/0x430 [ 1470.569583][ T8373] ? __pfx___alloc_skb+0x10/0x10 [ 1470.569624][ T8373] ? netlink_sendmsg+0x642/0xb30 [ 1470.569651][ T8373] ? skb_put+0x11b/0x210 [ 1470.569680][ T8373] netlink_sendmsg+0x6b2/0xb30 [ 1470.569720][ T8373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.569752][ T8373] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1470.569789][ T8373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1470.569811][ T8373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.569841][ T8373] __sock_sendmsg+0x21c/0x270 [ 1470.569880][ T8373] ____sys_sendmsg+0x505/0x830 [ 1470.569913][ T8373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1470.569950][ T8373] ? import_iovec+0x74/0xa0 [ 1470.569983][ T8373] ___sys_sendmsg+0x21f/0x2a0 [ 1470.570013][ T8373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1470.570081][ T8373] ? __fget_files+0x2a/0x420 [ 1470.570102][ T8373] ? __fget_files+0x3a0/0x420 [ 1470.570134][ T8373] __x64_sys_sendmsg+0x19b/0x260 [ 1470.570165][ T8373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1470.570204][ T8373] ? __pfx_ksys_write+0x10/0x10 [ 1470.570241][ T8373] ? do_syscall_64+0xbe/0xfa0 [ 1470.570272][ T8373] do_syscall_64+0xfa/0xfa0 [ 1470.570298][ T8373] ? lockdep_hardirqs_on+0x9c/0x150 [ 1470.570325][ T8373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.570347][ T8373] ? clear_bhb_loop+0x60/0xb0 [ 1470.570374][ T8373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.570396][ T8373] RIP: 0033:0x7f8b4878f749 [ 1470.570416][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.570435][ T8373] RSP: 002b:00007f8b4968d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.570459][ T8373] RAX: ffffffffffffffda RBX: 00007f8b489e5fa0 RCX: 00007f8b4878f749 [ 1470.570476][ T8373] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1470.570490][ T8373] RBP: 00007f8b4968d090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.570505][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.570518][ T8373] R13: 00007f8b489e6038 R14: 00007f8b489e5fa0 R15: 00007ffd98fc4a98 [ 1470.570555][ T8373] [ 1470.630928][ T1510] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1470.746080][ T8373] syzkaller0: entered promiscuous mode [ 1470.891294][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9137'. [ 1470.917993][ T8373] syzkaller0: entered allmulticast mode [ 1470.936513][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9137'. [ 1470.986591][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9137'. [ 1471.131464][ T8373] tipc: Enabled bearer , priority 0 [ 1471.204643][ T8373] tipc: Resetting bearer [ 1471.345067][ T8373] tipc: Disabling bearer [ 1471.518065][ T8410] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9142'. [ 1471.697148][ T8415] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1471.782188][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9144'. [ 1471.818169][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9144'. [ 1472.200771][ T1510] IPVS: starting estimator thread 0... [ 1472.292954][ T8436] IPVS: using max 25 ests per chain, 60000 per kthread [ 1472.496509][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9152'. [ 1472.728536][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1472.777864][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1472.877173][ T8454] wireguard0: entered promiscuous mode [ 1472.919769][ T8454] wireguard0: entered allmulticast mode [ 1473.045486][ T8454] team0: Refused to change device type [ 1473.537566][ T8443] wg1 speed is unknown, defaulting to 1000 [ 1473.910413][ T8479] xt_l2tp: unknown flags: 51 [ 1474.180731][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1475.236715][ T8527] __nla_validate_parse: 2 callbacks suppressed [ 1475.236742][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9180'. [ 1475.304481][ T8516] wg1 speed is unknown, defaulting to 1000 [ 1475.611251][ T8539] netlink: 'syz.1.9183': attribute type 2 has an invalid length. [ 1475.640234][ T8539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1475.740293][ T8537] pimreg: entered allmulticast mode [ 1475.785837][ T8537] pimreg: left allmulticast mode [ 1475.886320][ T8549] syzkaller0: entered promiscuous mode [ 1475.896496][ T8549] syzkaller0: entered allmulticast mode [ 1476.023668][ T8524] wg1 speed is unknown, defaulting to 1000 [ 1476.032643][ T8553] sctp: [Deprecated]: syz.1.9187 (pid 8553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1476.032643][ T8553] Use struct sctp_sack_info instead [ 1476.068984][ T8549] tipc: Enabled bearer , priority 0 [ 1476.139924][ T8549] tipc: Resetting bearer [ 1476.170440][ T8557] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1476.215102][ T8549] tipc: Disabling bearer [ 1476.446531][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9191'. [ 1476.456851][ T8568] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1476.485451][ T8578] netlink: 'syz.6.9190': attribute type 13 has an invalid length. [ 1476.506941][ T8578] netlink: 'syz.6.9190': attribute type 17 has an invalid length. [ 1477.231607][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9197'. [ 1477.301062][ T8588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.485214][ T8588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.526554][ T8583] wg1 speed is unknown, defaulting to 1000 [ 1477.657558][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9200'. [ 1477.672368][ T8588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.012249][ T8588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.057431][ T8615] syzkaller0: entered promiscuous mode [ 1478.075248][ T8615] syzkaller0: entered allmulticast mode [ 1478.167507][ T8615] tipc: Enabled bearer , priority 0 [ 1478.222996][ T8615] tipc: Resetting bearer [ 1478.258966][ T8615] tipc: Disabling bearer [ 1478.288964][ T8591] wg1 speed is unknown, defaulting to 1000 [ 1478.346690][ T8024] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.455374][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9205'. [ 1478.562722][T20165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.581695][T20165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.592780][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9204'. [ 1478.603720][ T8610] wg1 speed is unknown, defaulting to 1000 [ 1478.633575][ T8626] netlink: 'syz.7.9204': attribute type 1 has an invalid length. [ 1478.866487][T20165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.160795][ T8619] wg1 speed is unknown, defaulting to 1000 [ 1479.942641][ T8636] wg1 speed is unknown, defaulting to 1000 [ 1480.105223][ T8645] Cannot find add_set index 1 as target [ 1480.866991][ T8661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.097815][ T8665] netlink: 'syz.6.9215': attribute type 13 has an invalid length. [ 1481.216190][ T8673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9217'. [ 1481.491249][ T8665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.513150][ T8665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.695195][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.885664][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.905963][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.931638][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.975408][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.582105][ T8676] wg1 speed is unknown, defaulting to 1000 [ 1482.830243][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1483.027482][ T8690] wg1 speed is unknown, defaulting to 1000 [ 1483.374528][ T8715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9224'. [ 1483.397614][ T8715] netlink: 'syz.3.9224': attribute type 1 has an invalid length. [ 1483.982193][ T8713] wg1 speed is unknown, defaulting to 1000 [ 1484.240467][ T8736] veth0_to_bridge: entered promiscuous mode [ 1484.281515][ T8734] veth1_to_hsr: entered promiscuous mode [ 1484.297340][ T8734] macvtap1: entered promiscuous mode [ 1484.306328][ T8734] macvtap1: entered allmulticast mode [ 1484.313569][ T8734] veth1_to_hsr: entered allmulticast mode [ 1484.325107][ T8735] veth0_to_bridge: left promiscuous mode [ 1484.754213][ T8750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9234'. [ 1484.783455][ T8750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9234'. [ 1484.799206][ T8754] IPv6: Can't replace route, no match found [ 1485.393888][ T8772] SET target dimension over the limit! [ 1485.719974][ T8786] macvlan2: entered promiscuous mode [ 1485.809895][ T8786] vlan0: entered promiscuous mode [ 1485.943864][ T8772] wg1 speed is unknown, defaulting to 1000 [ 1486.429903][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9251'. [ 1486.565755][ T8786] wg1 speed is unknown, defaulting to 1000 [ 1486.602004][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9254'. [ 1486.618603][ T8816] netlink: 'syz.7.9254': attribute type 1 has an invalid length. [ 1487.083966][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9259'. [ 1487.096679][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9259'. [ 1487.128045][ T8827] : entered promiscuous mode [ 1487.145338][ T8827] netlink: 'syz.2.9259': attribute type 1 has an invalid length. [ 1487.183617][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9259'. [ 1487.197786][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9259'. [ 1487.259920][ T8810] wg1 speed is unknown, defaulting to 1000 [ 1487.882467][ T8813] wg1 speed is unknown, defaulting to 1000 [ 1488.369924][ T8864] macvlan3: entered promiscuous mode [ 1488.970212][ T8890] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1488.984728][ T8890] SET target dimension over the limit! [ 1489.307356][ T8864] wg1 speed is unknown, defaulting to 1000 [ 1489.750485][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9282'. [ 1489.872133][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.281776][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1490.328272][ T8923] netlink: 'syz.2.9284': attribute type 1 has an invalid length. [ 1490.636015][ T8927] vet: renamed from veth0_vlan [ 1490.778367][ T8919] wg1 speed is unknown, defaulting to 1000 [ 1490.916663][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9289'. [ 1491.520573][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9298'. [ 1491.647976][ T8961] batadv2: entered promiscuous mode [ 1492.220013][T29477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1492.274646][T29477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1492.288461][T29477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1492.297563][T29477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1492.321975][T29477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1492.586025][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.673211][ T8995] macvlan2: entered promiscuous mode [ 1492.678585][ T8995] vlan0: entered promiscuous mode [ 1492.728589][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.832871][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.869728][ T8972] wg1 speed is unknown, defaulting to 1000 [ 1492.905246][ T9002] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9305'. [ 1492.926860][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.260071][T26907] wg1 speed is unknown, defaulting to 1000 [ 1493.267276][T26907] syz: Port: 1 Link DOWN [ 1493.772905][ T9008] sctp: [Deprecated]: syz.6.9308 (pid 9008) Use of int in max_burst socket option deprecated. [ 1493.772905][ T9008] Use struct sctp_assoc_value instead [ 1493.908561][ T9012] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9310'. [ 1493.965953][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9310'. [ 1494.188785][ T36] bond0 (unregistering): Released all slaves [ 1494.381343][ T36] bond1 (unregistering): Released all slaves [ 1494.397392][ T8996] wg1 speed is unknown, defaulting to 1000 [ 1494.423092][ T5767] Bluetooth: hci1: command tx timeout [ 1494.507768][ T8983] wg1 speed is unknown, defaulting to 1000 [ 1494.508366][ T36] tipc: Disabling bearer [ 1494.529437][ T36] tipc: Left network mode [ 1494.811773][ T9024] FAULT_INJECTION: forcing a failure. [ 1494.811773][ T9024] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.836588][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.6.9312 Not tainted syzkaller #0 PREEMPT(full) [ 1494.836638][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1494.836658][ T9024] Call Trace: [ 1494.836668][ T9024] [ 1494.836678][ T9024] dump_stack_lvl+0x189/0x250 [ 1494.836714][ T9024] ? __pfx____ratelimit+0x10/0x10 [ 1494.836740][ T9024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1494.836770][ T9024] ? __pfx__printk+0x10/0x10 [ 1494.836800][ T9024] ? __pfx___might_resched+0x10/0x10 [ 1494.836831][ T9024] should_fail_ex+0x414/0x560 [ 1494.836871][ T9024] should_failslab+0xa8/0x100 [ 1494.836896][ T9024] __kvmalloc_node_noprof+0x158/0x910 [ 1494.836932][ T9024] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1494.836972][ T9024] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1494.837016][ T9024] __nf_unregister_net_hook+0x4f6/0x700 [ 1494.837059][ T9024] nf_unregister_net_hooks+0xcb/0x140 [ 1494.837095][ T9024] ip_vs_unregister_hooks+0xbc/0x120 [ 1494.837129][ T9024] ip_vs_unlink_service+0x40d/0xa30 [ 1494.837165][ T9024] ip_vs_flush+0x169/0x1c0 [ 1494.837202][ T9024] do_ip_vs_set_ctl+0x470/0xa60 [ 1494.837230][ T9024] ? rcu_is_watching+0x15/0xb0 [ 1494.837256][ T9024] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1494.837277][ T9024] ? trace_contention_end+0x39/0x120 [ 1494.837323][ T9024] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1494.837361][ T9024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1494.837413][ T9024] ? __pfx_aa_sk_perm+0x10/0x10 [ 1494.837457][ T9024] nf_setsockopt+0x26f/0x290 [ 1494.837480][ T9024] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1494.837506][ T9024] do_sock_setsockopt+0x17c/0x1b0 [ 1494.837540][ T9024] __x64_sys_setsockopt+0x13f/0x1b0 [ 1494.837574][ T9024] do_syscall_64+0xfa/0xfa0 [ 1494.837600][ T9024] ? lockdep_hardirqs_on+0x9c/0x150 [ 1494.837627][ T9024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.837649][ T9024] ? clear_bhb_loop+0x60/0xb0 [ 1494.837676][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.837697][ T9024] RIP: 0033:0x7fd04918f749 [ 1494.837717][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.837737][ T9024] RSP: 002b:00007fd04a032038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1494.837761][ T9024] RAX: ffffffffffffffda RBX: 00007fd0493e5fa0 RCX: 00007fd04918f749 [ 1494.837778][ T9024] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 1494.837791][ T9024] RBP: 00007fd04a032090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.837805][ T9024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.837818][ T9024] R13: 00007fd0493e6038 R14: 00007fd0493e5fa0 R15: 00007ffd6a4788d8 [ 1494.837857][ T9024] [ 1496.361569][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 1496.461851][ T9041] wg1 speed is unknown, defaulting to 1000 [ 1496.501758][ T5767] Bluetooth: hci1: command tx timeout [ 1496.804870][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.820171][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.828240][ T8983] bridge_slave_0: entered allmulticast mode [ 1496.842390][ T8983] bridge_slave_0: entered promiscuous mode [ 1496.874971][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.899779][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.910061][ T8983] bridge_slave_1: entered allmulticast mode [ 1496.918146][ T8983] bridge_slave_1: entered promiscuous mode [ 1497.065131][ T9060] sctp: [Deprecated]: syz.1.9322 (pid 9060) Use of int in maxseg socket option. [ 1497.065131][ T9060] Use struct sctp_assoc_value instead [ 1497.192498][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.228014][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.291618][ T9038] wg1 speed is unknown, defaulting to 1000 [ 1497.434449][ T8983] team0: Port device team_slave_0 added [ 1497.521040][ T8983] team0: Port device team_slave_1 added [ 1497.830906][ T36] hsr_slave_0: left promiscuous mode [ 1497.840353][ T36] hsr_slave_1: left promiscuous mode [ 1497.868021][ T36] veth1_macvtap: left promiscuous mode [ 1497.879645][ T36] veth0_macvtap: left promiscuous mode [ 1498.589982][ T5767] Bluetooth: hci1: command tx timeout [ 1498.923488][ T9087] netlink: 'syz.2.9328': attribute type 1 has an invalid length. [ 1499.517241][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.526970][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.562734][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.611459][ T9087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1499.726158][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.734799][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.777572][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.971367][ T8983] hsr_slave_0: entered promiscuous mode [ 1499.982972][ T8983] hsr_slave_1: entered promiscuous mode [ 1500.100159][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1500.335598][ T36] IPVS: stop unused estimator thread 0... [ 1500.659828][ T5767] Bluetooth: hci1: command tx timeout [ 1502.293269][ T8983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1502.328563][ T8983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1502.366465][ T8983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1502.386627][ T8983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1502.442402][ T9106] x_tables: duplicate entry at hook 2 [ 1502.628102][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9333'. [ 1502.716303][ T8309] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1502.729130][ T8309] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1502.738853][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 1502.750429][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1502.762792][ T8309] RIP: 0010:klist_del+0x49/0x110 [ 1502.768805][ T8309] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 bc e6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b bc e6 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 1502.792169][ T8309] RSP: 0018:ffffc90003edf748 EFLAGS: 00010202 [ 1502.799561][ T8309] RAX: 000000000000000b RBX: ffff888029661460 RCX: ffff88807bc00000 [ 1502.807740][ T8309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 1502.815774][ T8309] RBP: ffffc90003edf870 R08: ffff88803acd45a3 R09: 1ffff1100759a8b4 [ 1502.823876][ T8309] R10: dffffc0000000000 R11: ffffed100759a8b5 R12: dffffc0000000000 [ 1502.832391][ T8309] R13: 1ffff110052cc28c R14: 0000000000000000 R15: ffff888038630758 [ 1502.840590][ T8309] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 1502.850238][ T8309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1502.857048][ T8309] CR2: 0000200000d19030 CR3: 0000000087a6a000 CR4: 00000000003526f0 [ 1502.865128][ T8309] Call Trace: [ 1502.868512][ T8309] [ 1502.871464][ T8309] device_del+0x280/0x8e0 [ 1502.875843][ T8309] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1502.881362][ T8309] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 1502.887538][ T8309] ? __pfx_device_del+0x10/0x10 [ 1502.892412][ T8309] ? netdev_unregister_kobject+0x344/0x450 [ 1502.898251][ T8309] unregister_netdevice_many_notify+0x1df2/0x2390 [ 1502.904998][ T8309] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1502.912226][ T8309] ? rtnl_net_dev_lock+0x257/0x2f0 [ 1502.917485][ T8309] unregister_netdevice_queue+0x33c/0x380 [ 1502.923473][ T8309] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1502.929922][ T8309] ? rtnl_net_dev_lock+0x36/0x2f0 [ 1502.934971][ T8309] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 1502.940498][ T8309] unregister_netdev+0x1f/0x60 [ 1502.945568][ T8309] bnep_session+0x294d/0x2b40 [ 1502.950462][ T8309] ? rcu_is_watching+0x15/0xb0 [ 1502.955349][ T8309] ? trace_sched_exit_tp+0x36/0x110 [ 1502.960844][ T8309] ? __lock_acquire+0xab9/0xd20 [ 1502.965819][ T8309] ? __pfx_bnep_session+0x10/0x10 [ 1502.970971][ T8309] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1502.976987][ T8309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1502.983580][ T8309] ? __pfx_woken_wake_function+0x10/0x10 [ 1502.989604][ T8309] ? __kthread_parkme+0x7b/0x200 [ 1502.994858][ T8309] ? __kthread_parkme+0x1a1/0x200 [ 1502.999967][ T8309] kthread+0x711/0x8a0 [ 1503.004059][ T8309] ? __pfx_bnep_session+0x10/0x10 [ 1503.009306][ T8309] ? __pfx_kthread+0x10/0x10 [ 1503.013935][ T8309] ? _raw_spin_unlock_irq+0x23/0x50 [ 1503.019243][ T8309] ? lockdep_hardirqs_on+0x9c/0x150 [ 1503.024559][ T8309] ? __pfx_kthread+0x10/0x10 [ 1503.029346][ T8309] ret_from_fork+0x4bc/0x870 [ 1503.034057][ T8309] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.039217][ T8309] ? __switch_to_asm+0x39/0x70 [ 1503.044344][ T8309] ? __switch_to_asm+0x33/0x70 [ 1503.049294][ T8309] ? __pfx_kthread+0x10/0x10 [ 1503.053923][ T8309] ret_from_fork_asm+0x1a/0x30 [ 1503.059058][ T8309] [ 1503.062131][ T8309] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1503.068131][ T8309] ---[ end trace 0000000000000000 ]--- [ 1503.084543][ T8309] RIP: 0010:klist_del+0x49/0x110 [ 1503.089874][ T8309] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 bc e6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b bc e6 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 1503.116196][ T8309] RSP: 0018:ffffc90003edf748 EFLAGS: 00010202 [ 1503.122462][ T8309] RAX: 000000000000000b RBX: ffff888029661460 RCX: ffff88807bc00000 [ 1503.131010][ T8309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 1503.139181][ T8309] RBP: ffffc90003edf870 R08: ffff88803acd45a3 R09: 1ffff1100759a8b4 [ 1503.148578][ T8309] R10: dffffc0000000000 R11: ffffed100759a8b5 R12: dffffc0000000000 [ 1503.157817][ T8309] R13: 1ffff110052cc28c R14: 0000000000000000 R15: ffff888038630758 [ 1503.167562][ T8309] FS: 0000000000000000(0000) GS:ffff888126131000(0000) knlGS:0000000000000000 [ 1503.178403][ T8309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1503.185982][ T8309] CR2: 00007f1687917d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1503.195415][ T8309] Kernel panic - not syncing: Fatal exception [ 1503.202374][ T8309] Kernel Offset: disabled [ 1503.207530][ T8309] Rebooting in 86400 seconds..