last executing test programs: 2m25.839399689s ago: executing program 1 (id=3209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1d, 0x0, &(0x7f0000000040)) 2m25.647029882s ago: executing program 1 (id=3211): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200001100010000000000000000000000000a"], 0xa8}}, 0x0) close(0x3) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r3, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18) close(0x3) 2m25.218038828s ago: executing program 1 (id=3217): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m24.902963444s ago: executing program 1 (id=3219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2m24.789503934s ago: executing program 1 (id=3220): unshare(0x2c020400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x703d2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) setsockopt(r4, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0xafa, 0x9d, &(0x7f00000006c0)=""/157, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x7f, 0x80000000}, 0x10, 0x1b2b6, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="02230000", @ANYRES32=r6, @ANYBLOB="0000000001000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000003aab0e0000000000"], &(0x7f0000000900)='GPL\x00', 0x3ff, 0xc0, &(0x7f0000000ac0)=""/192, 0x41100, 0xc, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000980)=[{0x5, 0x1, 0x3, 0x9}]}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=@ipv4_deladdr={0x4c, 0x15, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x3f, 0x90, 0xfe, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x6, 0x9, 0x4}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x180}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040d1}, 0x890) unshare(0x24060400) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r9, 0x8921, &(0x7f0000000100)="d84450a4bf57990ef9b33a") connect$bt_l2cap(r7, &(0x7f0000000680)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) r10 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000080), &(0x7f0000000380)=0x4) bind$unix(r10, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2m19.492476094s ago: executing program 0 (id=3262): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5e1a370a08afabfdccfdb3bed45070d59", 0x80}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040010}], 0x1, 0x4048020) recvmmsg$unix(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/118, 0x76}], 0x2}}], 0x1, 0x10100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="c0", 0x1}], 0x1, 0xee, 0x4000004) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000000700000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2m19.261733809s ago: executing program 0 (id=3264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x8000000000025a5, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 2m18.289141532s ago: executing program 0 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 2m18.182587218s ago: executing program 0 (id=3272): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) unshare(0x8040000) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="d6ede3deb02a"}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x168, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc01}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1000}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_LABELS_MASK={0x24, 0x17, [0x3ff, 0x7, 0x101, 0x1, 0x40, 0xcb36, 0x99f, 0x9]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x80c, 0xffff, 0x3]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2m18.075625154s ago: executing program 0 (id=3275): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x2e}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4336, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x240e, 0x7}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x16, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xd}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0xb208, 0x0, 0x0, 0x41000, 0x45, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xd, 0x500, 0xdb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r3, r4, r5, r6], &(0x7f0000000480)=[{0x1, 0x4, 0xa, 0x9}, {0x2, 0x4, 0x7, 0x4}, {0x5, 0x2, 0x10, 0x1}, {0x4, 0x1, 0x4, 0x3}], 0x10, 0x8}, 0x94) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x3, 0x6, 0x18, 0x3}]}, 0x10) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}}, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000700), 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xfffffffb}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfffffffb}]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0x4a, 0xa2, &(0x7f0000000880)="fc622f85378a5d77d17f4a023099dab327e5bf587ae10b11e6224bd0ecdf03e15a51421ffa8ac3e4ed9c53190940c155b2f5c88dead589ce41847ffcd952c431297fcc58a83914d1f989", &(0x7f0000000900)=""/162, 0x7, 0x0, 0x1d, 0xcd, &(0x7f00000009c0)="7835bcae5e0c9ade8bf719b5aab3794a41d65314c495bc9b1f4ed9355a", &(0x7f0000000a00)="94e1b69993f10e65c8c653034abc902f01fedefdc1e291b10f8e4039a35e24148c08622f518f5ea750d30a4586b074d6a81dc49848ace2f6a4be7d1bec51a1035ebf114f5c5b26fcde0d7a7c96ceed49235b1089256a86dfb06aa31efeb3cbec0d9bddd78d21fc205fe1dded844f0a2fa18b858a29fc08c8611ad5ec2ff78471fecbbaef3934a943d2dc99999f3cbd544d0004e30163c51e9cd0ee37abaef5331c5df24316f17b633ff601a48d2005e1e5c018290b524ede522cfea4069745dccdc4f58e6176a14421351e0b67", 0x1, 0x0, 0x80000001}, 0x50) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000cc0)={'bridge0\x00', {0x2, 0x4e22, @broadcast}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r11, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4001800) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r11, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x60}, 0x1, 0x0, 0x0, 0x40884}, 0x20000080) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000fc0)=0x1, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000001000), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001040)) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f00000010c0)={0xea, 0x8, [0x9, 0x8, 0x4, 0x6], &(0x7f0000001080)=[0x0]}) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) ppoll(&(0x7f0000001140)=[{r14, 0x20}, {0xffffffffffffffff, 0x10}, {r4, 0x44}, {r2, 0x8}, {r6, 0x40}, {0xffffffffffffffff, 0xc028}, {r7, 0x2220}, {r13, 0x4000}], 0x8, &(0x7f00000011c0)={r15, r16+60000000}, &(0x7f0000001200)={[0x8000000000000000]}, 0x8) 2m17.785891584s ago: executing program 1 (id=3226): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200001100010000000000000000000000000a"], 0xa8}}, 0x0) close(0x3) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040), 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18) close(0x3) 2m17.743672886s ago: executing program 0 (id=3278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='mm_vmscan_lru_shrink_active\x00', r2}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400100001000130428bd700000000000acb17b89271414aa000000000000000000af8d363325fc7320152a1a18452b34b6000000ac1e01010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000301000000002b0000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000000000000000000000000000000000000ffffffffffffffff04000000000000000000000000000000f600000004000000080000002abd7000ff340000020001fe00000000000000004f0012"], 0x140}}, 0x804) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 2m17.43855989s ago: executing program 32 (id=3226): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000002540004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a3200001100010000000000000000000000000a"], 0xa8}}, 0x0) close(0x3) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040), 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18) close(0x3) 2m17.231185324s ago: executing program 33 (id=3278): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0xc, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='mm_vmscan_lru_shrink_active\x00', r2}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400100001000130428bd700000000000acb17b89271414aa000000000000000000af8d363325fc7320152a1a18452b34b6000000ac1e01010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000301000000002b0000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000000000000000000000000000000000000ffffffffffffffff04000000000000000000000000000000f600000004000000080000002abd7000ff340000020001fe00000000000000004f0012"], 0x140}}, 0x804) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 33.643882138s ago: executing program 3 (id=4137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r2], 0x1c}}, 0x0) (async) socket(0x11, 0x4, 0x9) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bind$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0x400}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000007060101000000000000000002000002560dbe283bd3ef1c4a7d31b97c90066b359b1885a6bdcd15168fecb0440d897f4e9383020f5b916039cafec49c87e0df991937b6a073264653781d7f2e987af75215a59799c8bf41d568a97156607aecb74bb84f80d9760dd517b03a5307ebb21d045aa4160dc8e63e82fd8affe31da8006b831936e5b4be39d65a45d3302c458ca690f1835a121231f717a0ce0be76e424a8de69768d3d048b570d17e7e513cbe35ce6da6ee6813496dc64ff41ca3f7376c"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x80000}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x53cb18ea}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r8, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) (async) recvmmsg(r9, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 33.510788561s ago: executing program 3 (id=4139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8804800000240012800b00010067656e65766500001400028005000c0001000000050004000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040050) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="c1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000001c0)="a1", 0x1}], 0x1}}], 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="030202"], 0xc) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x5}, {&(0x7f0000000280)="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", 0x8}], 0x2}}], 0x1, 0x8000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x5, 0xe, 0x0, &(0x7f0000000240)="23d47e4ec0029c5502dee7f89632", 0x0, 0x100d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r10 = socket$packet(0x11, 0x3, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000008c0)=r11, 0x4) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a481e92000000060a0b040000000000000000020000001c0004801800018008000100666962000c00028008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000257dcee17666dad33a8b1ed74fffed09f2139bfead281fbf56c91471cd63f4a094c04e8f1cf8"], 0x70}}, 0x0) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) (async) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e21, 0x93, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)="3e67fd139d91b4b42a98d0eecade305a246a626fe870632b7de82a7f33a74d69e3ddeadd0fb9bdd48a2affeeb748c7", 0x2f}, {&(0x7f0000000180)="1617c8e5870b54a2a023d786cede2226540a3db6", 0x14}, {&(0x7f00000001c0)="4402e21971b4d40e6795bf540c25a9f911aa87968fa1779e6de008956e6c218d511e5c722044025e3242620cb87c1321f8501a4879d3371dc97a32b7d78c6e543db7955ef9337f334d31a09c07623e304203f806c7c0d3a51fb67594ec4c80663844a9a5d19cf7e6c19c5073f3", 0x6d}, {&(0x7f0000000280)="49b8204984b9e30a8173a972afbc68513a57fac861307907623c4bc2def5b396beed9b4ed2800b", 0x27}, {&(0x7f0000000380)="aebe7ba040bc25c7", 0x8}, {&(0x7f00000003c0)="5ae9d8cd1371db5a4e505695910f972a04278e12d7a943741d518f65a35c0dcde9a3072250be45359f4af5e4621780d21546141ddf7a0cc9ea4cc1a98beb5c9c342f826ed72182503f2e58b9d841174df9ab84a74e8b7ba89f5c44022dbd0d473c28bcd1b00ad7ddc857d3d98d", 0x6d}], 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="240000000000000029000000000000000000ffff640150040000000000000000", @ANYRES32=r4, @ANYBLOB="00000000140000000000000029000000080000000500000000000000"], 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 33.435343276s ago: executing program 3 (id=4140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="df82000000000000004000000000008600664f2fc52b514c460b733b000000000000000100000011503c624de42e047ec1c3e33aad9c16f0de0bca53e9613515e1b4726c5e7f74936ad1c86dae7772d173a910602e2b0a94714da24138d0f8fe698c6ab409589901f29a9104afcbe6eda37c5212daf346e055023722abf983cec68170ca36e93b109af42f1708434719dd9a918398d499a70e51f45ca0744172865f36e28ec38fa5bc44bc03537e029d67f5c870fc2ee2be1dc0e48067b1c78c0000"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r4}, 0x38) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) 33.378035674s ago: executing program 3 (id=4141): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 33.254716322s ago: executing program 3 (id=4143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x941300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x82823b2b84352706}) (async) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/227, 0xe3}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r3, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.73500457s ago: executing program 5 (id=4146): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000080)="99affae971ead684639367d83c6d69d7a0eb3f2517150ce32bc4955033d70da2e0bd26f42410dd3a9f3aae3dfcb1f11d1ade1a8dbd1ddaf9452ebbd35260a83d952244c26020d2f1248f25df84b99458e1b71ff4", 0x54, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000050000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 32.566035513s ago: executing program 5 (id=4149): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x30]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044000) close(r0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x30008004}, 0x20000000) 31.140537688s ago: executing program 5 (id=4150): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x40, 0x40, 0x9, 0x100, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local, {[@generic={0x88, 0xf, "a91085e4d46e8b5c13abbd36a3"}, @end, @ssrr={0x89, 0x23, 0x15, [@private=0xa010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @remote]}, @generic={0x8a, 0x5, "d35d18"}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000900000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r3}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x1, 0x9, 0x7, 0x0, 0xc, 0x4}, @tail_call, @alu={0x4, 0x1, 0xc, 0xe, 0x8, 0x6704b3971bef6548, 0xfffffffffffffffc}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x88, &(0x7f0000000380)=""/136, 0x40f00, 0x48eac3dd81b4755f, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x5, 0x2, 0x1bd851f5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{0x3, 0x2, 0xd, 0x8}, {0x5, 0x3, 0x4, 0x5}], 0x10, 0xcca}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@bridge_getlink={0x168, 0x12, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10, 0x20010}, [@IFLA_VFINFO_LIST={0xc4, 0x16, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3ff}}, @IFLA_VF_VLAN={0x10, 0x2, {0xad52, 0x18c, 0x9}}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7e, 0x100, 0x8f}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x10}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fff, @broadcast}}, @IFLA_VF_MAC={0x28, 0x1, {0x8000, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8ca9, 0x8}}]}]}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8, 0x1b, 0x6bf}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gretap0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_WEIGHT={0x8, 0xf, 0x14}]}, 0x168}}, 0x0) 31.090300677s ago: executing program 3 (id=4151): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r0, 0x0) (async) close(r1) 30.952542325s ago: executing program 5 (id=4154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000013c0)={'wpan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000040)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xffffffd4}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) 30.615065989s ago: executing program 5 (id=4161): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) unshare(0x8040000) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="d6ede3deb02a"}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x150, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc01}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1000}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_LABELS_MASK={0x24, 0x17, [0x3ff, 0x7, 0x101, 0x1, 0x40, 0xcb36, 0x99f, 0x9]}, @CTA_TUPLE_REPLY={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x80c, 0xffff, 0x3]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 30.521178627s ago: executing program 5 (id=4163): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400004000050bd25a80648c63940d032c3e9a7ab7af6d4c08db04bac032fc60040035400c00f378faeb342e0002000104000037153e37", 0x38}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a180069bd4ea95d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be6688", 0x3fd}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116e00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='g', 0x1) recvfrom$inet6(r4, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) (async) recvfrom$inet6(r4, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x1, {0x1, 0x4, 0x4, 0x3}}, 0x7) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x1, {0x1, 0x4, 0x4, 0x3}}, 0x7) 27.128713991s ago: executing program 2 (id=4184): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=@newtfilter={0x510, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4dc, 0x2, [@TCA_MATCHALL_ACT={0x4b0, 0x2, [@m_vlan={0x8c, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x445}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff001, 0x6, 0x4, 0x5, 0x7ff}, 0x1}}]}, {0x21, 0x6, "555c22a83e34e41cdaf57c97d60f85b133b9a1791ccc1661c9eb65a7de"}, {0xc}, {0xc, 0x8, {0x3, 0x5}}}}, @m_nat={0x178, 0x15, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x3, 0x4, 0x8000, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x5, 0x6}, @rand_addr=0x64010102, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xddf, 0x0, 0x200, 0xfffffffd}, @broadcast, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xe97f, 0x4, 0x2210, 0xfffff0fc}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x6, 0x5, 0x645}, @empty, @multicast2, 0xff000000}}]}, {0x88, 0x6, "7fe1a0d461c2452844c6babe5488e1bfc310d0171201c59904ff73a4b5d8693246ebaf01df27cac418d8159aafe68d5cdb87c87dd480c0b1a9ac318318cdefa106ee2e4cf989fceb84a7743c93ea5672cf26a63efda14af8cd3fc1072f054f7a6838a574ee70c1205a87ab55f94dbd9180cb2c649e5f71aed13d947c6d9ca663dfb7715c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x1cc, 0x2, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x0, 0x20000000, 0x7fffffff, 0x9}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x7, 0x6, 0xdae}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x4, 0x5, 0x4}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x3, 0x4, 0x9, 0xfffffff8}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2fdc, 0x4, 0x5, 0x2, 0xff}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x3, 0x10000000, 0xff, 0x3}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfe, 0x7fffffff, 0x20000000, 0x3, 0x9}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x6, 0x6, 0x1f92}, 0x78}}]}, {0xbd, 0x6, "8b272f41403f53e7d054a2431c725f5f41ab51db0c4d9b4d8450f733ad0275b0e29d9a7b43f857b55166508ea91d95b4bde7d002acb8f25753ada2b8a9188a8323af563250be46e35359ea1088ada254815ecef0408aeb16f2e0dfeab89bafe517cb55f8277514d9cd98333a09681824b7e0e9f8681d07247ead32ec6d3ebbf5d3b52a6c87620c89ab9e3be24a1d1100fd4b737a0a2874e50ed70603de47c008bb31089dfe4c6a260b5cf275ba61e85951d402cd4b540a03f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xdc, 0xa, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8000, 0xd40, 0x8, 0x7, 0x7}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x1}}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x2, 0x0, 0x59b, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x56, 0x6, "61fe7035c8985eda2c963c61d6dd111b12ee82ab1beaff860d4ea856d751f90b4e195ae472df01ef98f78f182b44c926e07e61532436eb6ca099ccfa88b8ccfac148fd4c17ff2ae85a8442d048e08ab39fa5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x10}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x510}}, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a18300000000000000000574000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000043000e0088000000080211000000ffffffffffff080211000001000000000000000000006400000000060202020202020301007206030303030303760600000000000000"], 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a18300000000000000000574000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000043000e0088000000080211000000ffffffffffff080211000001000000000000000000006400000000060202020202020301007206030303030303760600000000000000"], 0x6c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000009d00000000000000ff0f000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000002500fcfff0ffffffbf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000053c0001800c00028005000100000000002c00018014000300fc01000000000000000000000000000014000400000000000000000000000000000000013c0003800c00028005000100000000002c0001801400000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c000280050001"], 0xc8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) 26.995228853s ago: executing program 4 (id=4185): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getuid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000009c0)="f9c3fee5282f9b35e9fdc5e3283ab8a19b7b3a721625088bccc7113317940aacf81c927ef94bb200785133f6133b0ccf6a1fdcd988ff4be9b7742371224985c2ec70e06c133a322335340588ed57806ec613123d8035b071a7b1053ccd57c5a026aa3fbe0c1fcefbe0803d71995cbdb7b0d3a5bd5c6169f2b56798b16886da9426d17c105444ec7d2b32ea5ae0885e65e863be2bbbfcc7a5bd439f78d466358d6fdab056cae01b400f2b930d3a512c8b052b5c1d3dec49eb0bd3b01931e1a2e5ab2384c0124d9a1a06d60bc75d264e58aa4963d2b0626717d77011bbafdd91faa0358c8c4f96a7114e00cff73b91c66f", &(0x7f00000002c0)=@tcp=r5}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r8, 0x101, 0x9, &(0x7f0000000000)=0xac0f, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newrule={0x28, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6, r9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040090}, 0x20000) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xfffffffa}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xa128}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040100}, 0x40040001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r10, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x40844}}], 0x1, 0x1) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r14, 0x0) recvmmsg(r14, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x62, 0x5, 0x3d0, 0xe0, 0x290, 0xffffffff, 0x188, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x8, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x4], 0x3, 0x2}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x0, 0x0, 0x1a}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 26.885830194s ago: executing program 4 (id=4186): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.823494797s ago: executing program 4 (id=4187): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000380)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000006}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x40000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000080)={r10, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r10, 0x5}, 0x8) getsockopt$inet_mreqn(r7, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="73195ab141210b6f61358a9744a74cb4c94c4361f5f1fd9dd8487aebbd1d712b5306083f0c421ebad1d4e8c1ed40a8f49728bfecf310c4b8da84d234786451ae078115137a1aaf240f17c8def5279390bad9c3c3f08a12380ed8843826160c3dcf63a21b384d34fdf18a8326daa61729e629ceeaef653fa62562fbc4471a8c4150062c08c09ec5ccde537c98a05089752382d1e1a4d34cf7b1f7e598af96b1431132cd1e8a4db146d09cfe89f5c57fe92972498ccfb965"], &(0x7f0000000040)='GPL\x00', 0xb, 0x1001, &(0x7f0000000a00)=""/4097, 0x41100, 0x5}, 0x94) 26.531110233s ago: executing program 2 (id=4188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000400005000000851c00000100bc7bb0d97eca000095000000000000001800e01526e9bb000020640000000000000000000000000000000000b7030000ffffffff85190000ae"], &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94) 26.530626818s ago: executing program 4 (id=4189): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000240)="8ce2ad090000010000126d3f81bde756e99031aa", 0x14, 0x4004040, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 26.514359405s ago: executing program 2 (id=4190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) (async, rerun: 32) write$nbd(r6, &(0x7f0000000240)=ANY=[], 0xc7) bind$l2tp(r4, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r4, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x24004843) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r12) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 26.410582154s ago: executing program 4 (id=4192): socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000640)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x37, 0x0, @val=@perf_event={0x1}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x2f, 0x4, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x40, 0x0, 0x757c}}) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x3e, 0x2c, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x13}, {[@noop, @lsrr={0x83, 0x3, 0x7d}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='{\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x2, 0x4, 0x8e, &(0x7f0000000240)=""/142}) r5 = socket(0x10, 0x803, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000200)={'virt_wifi0\x00', @multicast}) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x178}, 0x24000000) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000002400)={{r8}, r9, 0x4, @unused=[0x90b, 0x9, 0x0, 0xb], @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000540)={"252303b1effdfd44dd89e61592d4d272", r9, 0x0, {0xe, 0x5}, {0x8, 0xfffffffc}, 0x200, [0x0, 0x5, 0x0, 0xf4, 0x9, 0x700000, 0x8000000000000001, 0x4c31, 0x8, 0x401, 0x8000000, 0x3, 0xffffffffcb9c0d41, 0xe, 0x2, 0x40]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r3], 0x18}, 0x40c0) 26.387832846s ago: executing program 2 (id=4193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01000000005be74969001000000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x880) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r2) 26.343039018s ago: executing program 2 (id=4194): r0 = socket(0x10, 0x80000, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={r1, r2/1000+10000}, 0x10) (async) write(r0, &(0x7f0000000000)='\"', 0x1) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (rerun: 64) 26.254916423s ago: executing program 2 (id=4195): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000380)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYBLOB="030000000400000000000000", @ANYRES32], 0x20) socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x1000}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(r5, &(0x7f0000001300), 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xa) 25.503105444s ago: executing program 4 (id=4197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff0}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x7f8}, 0x10, 0xffffffffffffffff}, 0x94) 19.318504275s ago: executing program 6 (id=4226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001e00431b00000000000000000700000035b875691105bf7120cccca06af77ade3b696a053f10526fceae10344f487554fc3a51cebdb01abf10ab84d71dd9191749ff222c750a953403268dbbb22b54097cc945423e70c0620e8643b0afeed93144b44acd35499157129f52f5c1e22fe503a54e657529718a146c4bbd827dad1c49362580a589167d5cea5253950e874d872a2be61990bb9971406fb605927d7e55088461a35f27122458cc14989481d4053dae5416ad44ec596ec85a02dd6bb6400bab4f668c517301e4b3bfa5ba", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x2000c058) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0xffff, 0x400000, 0x7ff, 0x6, 0xc0000000, 0x402, 0xa, 0x5, 0x5, 0x3, 0x4006, 0x4, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x4000001, 0x6, 0xfffffff9, 0x3}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) write(r10, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000240), 0x4) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r13, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 19.26958912s ago: executing program 6 (id=4227): pipe(&(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000"], 0x3}}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) 19.195614055s ago: executing program 6 (id=4228): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002a000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x42, 0x0, &(0x7f0000000180)="e02742e8e80185ff9782762f86dd347e6eb5a2952cc9e3d702d16c5232c649c2940e2973b8ffabf887263e7ec2c7f5977601aac398d55347b0c90da0284019699f88", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.110948848s ago: executing program 6 (id=4229): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x2}, 0x142) 19.094733055s ago: executing program 6 (id=4230): unshare(0x68040200) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x5, 0x5, 0x3}, 0x10) close(0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 15.518474692s ago: executing program 34 (id=4151): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r0, 0x0) (async) close(r1) 15.331356407s ago: executing program 6 (id=4232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) unshare(0x2020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x0, 0xffffffffffffe25f, 0x2, 0x4}, 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x40000010) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 15.285275725s ago: executing program 35 (id=4163): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400004000050bd25a80648c63940d032c3e9a7ab7af6d4c08db04bac032fc60040035400c00f378faeb342e0002000104000037153e37", 0x38}, {&(0x7f0000000a40)="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", 0x3fd}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116e00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='g', 0x1) recvfrom$inet6(r4, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) (async) recvfrom$inet6(r4, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x1, {0x1, 0x4, 0x4, 0x3}}, 0x7) (async) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x1, {0x1, 0x4, 0x4, 0x3}}, 0x7) 10.516028425s ago: executing program 36 (id=4195): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000380)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYBLOB="030000000400000000000000", @ANYRES32], 0x20) socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'ip_vti0\x00', 0x1000}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(r5, &(0x7f0000001300), 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xa) 10.019957603s ago: executing program 37 (id=4197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff0}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x7f8}, 0x10, 0xffffffffffffffff}, 0x94) 0s ago: executing program 38 (id=4232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) unshare(0x2020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x0, 0xffffffffffffe25f, 0x2, 0x4}, 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x40000010) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) kernel console output (not intermixed with test programs): o_syscall_64+0xfa/0xfa0 [ 506.509315][T18233] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.509346][T18233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.509367][T18233] ? clear_bhb_loop+0x60/0xb0 [ 506.509393][T18233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.509414][T18233] RIP: 0033:0x7f57ff38f6c9 [ 506.509434][T18233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.509453][T18233] RSP: 002b:00007f5800198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.509476][T18233] RAX: ffffffffffffffda RBX: 00007f57ff5e5fa0 RCX: 00007f57ff38f6c9 [ 506.509492][T18233] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 506.509507][T18233] RBP: 00007f5800198090 R08: 0000000000000000 R09: 0000000000000000 [ 506.509520][T18233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.509533][T18233] R13: 00007f57ff5e6038 R14: 00007f57ff5e5fa0 R15: 00007ffe084d09a8 [ 506.509568][T18233] [ 506.768189][T18217] wg1 speed is unknown, defaulting to 1000 [ 506.803540][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.812845][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.854732][T18208] wg1 speed is unknown, defaulting to 1000 [ 506.860761][T18228] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.092945][T18239] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.222902][T18228] wg1 speed is unknown, defaulting to 1000 [ 508.064664][T18250] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3415'. [ 508.082399][T18250] netlink: 'syz.5.3415': attribute type 1 has an invalid length. [ 508.235590][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3418'. [ 508.313428][T18261] netlink: 'syz.5.3421': attribute type 2 has an invalid length. [ 508.322379][T18261] netlink: 'syz.5.3421': attribute type 8 has an invalid length. [ 508.331575][T18261] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3421'. [ 508.344050][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'. [ 508.407674][T18261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.555964][T18266] FAULT_INJECTION: forcing a failure. [ 508.555964][T18266] name failslab, interval 1, probability 0, space 0, times 0 [ 508.580741][T18266] CPU: 1 UID: 0 PID: 18266 Comm: syz.4.3422 Not tainted syzkaller #0 PREEMPT(full) [ 508.580773][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.580786][T18266] Call Trace: [ 508.580795][T18266] [ 508.580804][T18266] dump_stack_lvl+0x189/0x250 [ 508.580895][T18266] ? __pfx____ratelimit+0x10/0x10 [ 508.580925][T18266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.580953][T18266] ? __pfx__printk+0x10/0x10 [ 508.580980][T18266] ? __pfx___might_resched+0x10/0x10 [ 508.581001][T18266] ? fs_reclaim_acquire+0x7d/0x100 [ 508.581039][T18266] should_fail_ex+0x414/0x560 [ 508.581075][T18266] should_failslab+0xa8/0x100 [ 508.581097][T18266] __kvmalloc_node_noprof+0x158/0x910 [ 508.581130][T18266] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 508.581151][T18266] ? unwind_get_return_address+0x4d/0x90 [ 508.581184][T18266] bpf_test_run_xdp_live+0x18e/0x1b10 [ 508.581215][T18266] ? stack_trace_save+0x9c/0xe0 [ 508.581244][T18266] ? __pfx_stack_trace_save+0x10/0x10 [ 508.581274][T18266] ? stack_depot_save_flags+0x40/0x860 [ 508.581316][T18266] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 508.581337][T18266] ? __kasan_kmalloc+0x93/0xb0 [ 508.581366][T18266] ? __kmalloc_noprof+0x411/0x7f0 [ 508.581394][T18266] ? bpf_test_init+0x9f/0x150 [ 508.581412][T18266] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 508.581460][T18266] ? __lock_acquire+0xab9/0xd20 [ 508.581494][T18266] ? __might_fault+0xb0/0x130 [ 508.581532][T18266] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 508.581568][T18266] ? _copy_from_user+0x94/0xb0 [ 508.581596][T18266] ? bpf_test_init+0x113/0x150 [ 508.581614][T18266] ? xdp_convert_md_to_buff+0x5b/0x330 [ 508.581640][T18266] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 508.581680][T18266] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 508.581709][T18266] ? __fget_files+0x2a/0x420 [ 508.581736][T18266] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 508.581760][T18266] bpf_prog_test_run+0x2c7/0x340 [ 508.581787][T18266] __sys_bpf+0x562/0x860 [ 508.581811][T18266] ? __pfx___sys_bpf+0x10/0x10 [ 508.581860][T18266] ? ksys_write+0x22a/0x250 [ 508.581893][T18266] ? __pfx_ksys_write+0x10/0x10 [ 508.581929][T18266] __x64_sys_bpf+0x7c/0x90 [ 508.581960][T18266] do_syscall_64+0xfa/0xfa0 [ 508.581992][T18266] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.582024][T18266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.582046][T18266] ? clear_bhb_loop+0x60/0xb0 [ 508.582071][T18266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.582092][T18266] RIP: 0033:0x7f57ff38f6c9 [ 508.582112][T18266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.582132][T18266] RSP: 002b:00007f5800198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.582155][T18266] RAX: ffffffffffffffda RBX: 00007f57ff5e5fa0 RCX: 00007f57ff38f6c9 [ 508.582172][T18266] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 508.582185][T18266] RBP: 00007f5800198090 R08: 0000000000000000 R09: 0000000000000000 [ 508.582197][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.582209][T18266] R13: 00007f57ff5e6038 R14: 00007f57ff5e5fa0 R15: 00007ffe084d09a8 [ 508.582243][T18266] [ 509.070102][T18278] xt_cgroup: invalid path, errno=-2 [ 509.142335][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 509.171165][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3428'. [ 509.273344][T18281] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.516383][T18295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3430'. [ 509.536190][T18281] wg1 speed is unknown, defaulting to 1000 [ 510.373066][T18327] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.223387][T18350] netlink: 'syz.3.3447': attribute type 1 has an invalid length. [ 511.297470][T18359] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001 [ 511.369272][T18350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.508323][T18360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.528504][T18360] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 511.577087][T18360] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 511.733762][T18362] veth3: entered promiscuous mode [ 511.744779][T18327] wg1 speed is unknown, defaulting to 1000 [ 512.008406][T18376] netlink: 'syz.4.3453': attribute type 1 has an invalid length. [ 512.174713][T18376] __nla_validate_parse: 2 callbacks suppressed [ 512.174736][T18376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3453'. [ 512.249897][T18380] bond2: (slave geneve4): making interface the new active one [ 512.270314][T18380] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 512.306308][T18376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.322531][T10091] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.348377][T10091] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.364119][T10091] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.385154][T10091] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 512.397097][T18384] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3455'. [ 512.767663][T18406] FAULT_INJECTION: forcing a failure. [ 512.767663][T18406] name failslab, interval 1, probability 0, space 0, times 0 [ 512.788205][T18406] CPU: 0 UID: 0 PID: 18406 Comm: syz.6.3462 Not tainted syzkaller #0 PREEMPT(full) [ 512.788236][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 512.788250][T18406] Call Trace: [ 512.788259][T18406] [ 512.788269][T18406] dump_stack_lvl+0x189/0x250 [ 512.788304][T18406] ? __pfx____ratelimit+0x10/0x10 [ 512.788336][T18406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.788366][T18406] ? __pfx__printk+0x10/0x10 [ 512.788392][T18406] ? __pfx___might_resched+0x10/0x10 [ 512.788416][T18406] ? fs_reclaim_acquire+0x7d/0x100 [ 512.788456][T18406] should_fail_ex+0x414/0x560 [ 512.788495][T18406] should_failslab+0xa8/0x100 [ 512.788520][T18406] __kmalloc_cache_noprof+0x6f/0x6f0 [ 512.788551][T18406] ? nfnetlink_rcv+0xf97/0x2590 [ 512.788582][T18406] ? __nla_parse+0x40/0x60 [ 512.788610][T18406] nfnetlink_rcv+0xf97/0x2590 [ 512.788683][T18406] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 512.788741][T18406] ? ref_tracker_free+0x63a/0x7d0 [ 512.788796][T18406] ? __netlink_deliver_tap+0x807/0x850 [ 512.788816][T18406] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.788858][T18406] netlink_unicast+0x82f/0x9e0 [ 512.788899][T18406] ? __pfx_netlink_unicast+0x10/0x10 [ 512.788933][T18406] ? netlink_sendmsg+0x642/0xb30 [ 512.788953][T18406] ? skb_put+0x11b/0x210 [ 512.788979][T18406] netlink_sendmsg+0x805/0xb30 [ 512.789012][T18406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.789039][T18406] ? aa_sock_msg_perm+0xf1/0x1d0 [ 512.789073][T18406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.789094][T18406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.789117][T18406] __sock_sendmsg+0x21c/0x270 [ 512.789150][T18406] ____sys_sendmsg+0x505/0x830 [ 512.789179][T18406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.789213][T18406] ? import_iovec+0x74/0xa0 [ 512.789245][T18406] ___sys_sendmsg+0x21f/0x2a0 [ 512.789271][T18406] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.789334][T18406] ? __fget_files+0x2a/0x420 [ 512.789354][T18406] ? __fget_files+0x3a0/0x420 [ 512.789385][T18406] __x64_sys_sendmsg+0x19b/0x260 [ 512.789414][T18406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.789449][T18406] ? __pfx_ksys_write+0x10/0x10 [ 512.789487][T18406] ? do_syscall_64+0xbe/0xfa0 [ 512.789524][T18406] do_syscall_64+0xfa/0xfa0 [ 512.789554][T18406] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.789587][T18406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.789609][T18406] ? clear_bhb_loop+0x60/0xb0 [ 512.789637][T18406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.789658][T18406] RIP: 0033:0x7f9ac218f6c9 [ 512.789678][T18406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.789707][T18406] RSP: 002b:00007f9ac2fcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.789731][T18406] RAX: ffffffffffffffda RBX: 00007f9ac23e5fa0 RCX: 00007f9ac218f6c9 [ 512.789746][T18406] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 512.789759][T18406] RBP: 00007f9ac2fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 512.789772][T18406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.789784][T18406] R13: 00007f9ac23e6038 R14: 00007f9ac23e5fa0 R15: 00007ffc992e6fc8 [ 512.789817][T18406] [ 513.293237][T18403] wg1: entered promiscuous mode [ 513.298191][T18403] wg1: entered allmulticast mode [ 513.318830][ T876] wg1 speed is unknown, defaulting to 1000 [ 513.788725][T18433] batadv1: entered promiscuous mode [ 513.836982][T18441] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3473'. [ 514.077677][T18441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3473'. [ 514.094684][T18449] FAULT_INJECTION: forcing a failure. [ 514.094684][T18449] name failslab, interval 1, probability 0, space 0, times 0 [ 514.162659][T18449] CPU: 1 UID: 0 PID: 18449 Comm: syz.4.3474 Not tainted syzkaller #0 PREEMPT(full) [ 514.162690][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.162703][T18449] Call Trace: [ 514.162712][T18449] [ 514.162722][T18449] dump_stack_lvl+0x189/0x250 [ 514.162756][T18449] ? __pfx____ratelimit+0x10/0x10 [ 514.162785][T18449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.162813][T18449] ? __pfx__printk+0x10/0x10 [ 514.162835][T18449] ? __pfx___might_resched+0x10/0x10 [ 514.162857][T18449] ? fs_reclaim_acquire+0x7d/0x100 [ 514.162893][T18449] should_fail_ex+0x414/0x560 [ 514.162928][T18449] should_failslab+0xa8/0x100 [ 514.162949][T18449] __kvmalloc_node_noprof+0x158/0x910 [ 514.162980][T18449] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 514.163009][T18449] ? page_pool_create_percpu+0x314/0xbc0 [ 514.163036][T18449] ? page_pool_create_percpu+0xb2/0xbc0 [ 514.163068][T18449] page_pool_create_percpu+0x314/0xbc0 [ 514.163094][T18449] ? bpf_test_run_xdp_live+0x1ba/0x1b10 [ 514.163122][T18449] bpf_test_run_xdp_live+0x1cf/0x1b10 [ 514.163151][T18449] ? stack_trace_save+0x9c/0xe0 [ 514.163178][T18449] ? __pfx_stack_trace_save+0x10/0x10 [ 514.163207][T18449] ? stack_depot_save_flags+0x40/0x860 [ 514.163247][T18449] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 514.163267][T18449] ? __kasan_kmalloc+0x93/0xb0 [ 514.163294][T18449] ? __kmalloc_noprof+0x411/0x7f0 [ 514.163320][T18449] ? bpf_test_init+0x9f/0x150 [ 514.163335][T18449] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 514.163409][T18449] ? __lock_acquire+0xab9/0xd20 [ 514.163443][T18449] ? __might_fault+0xb0/0x130 [ 514.163490][T18449] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 514.163525][T18449] ? _copy_from_user+0x94/0xb0 [ 514.163550][T18449] ? bpf_test_init+0x113/0x150 [ 514.163567][T18449] ? xdp_convert_md_to_buff+0x5b/0x330 [ 514.163591][T18449] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 514.163628][T18449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 514.163655][T18449] ? __fget_files+0x2a/0x420 [ 514.163680][T18449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 514.163702][T18449] bpf_prog_test_run+0x2c7/0x340 [ 514.163727][T18449] __sys_bpf+0x562/0x860 [ 514.163750][T18449] ? __pfx___sys_bpf+0x10/0x10 [ 514.163765][T18449] ? bpf_trace_run2+0x186/0x4b0 [ 514.163828][T18449] __x64_sys_bpf+0x7c/0x90 [ 514.163858][T18449] do_syscall_64+0xfa/0xfa0 [ 514.163887][T18449] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.163916][T18449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.163937][T18449] ? clear_bhb_loop+0x60/0xb0 [ 514.163962][T18449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.163982][T18449] RIP: 0033:0x7f57ff38f6c9 [ 514.164002][T18449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.164021][T18449] RSP: 002b:00007f5800177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.164044][T18449] RAX: ffffffffffffffda RBX: 00007f57ff5e6090 RCX: 00007f57ff38f6c9 [ 514.164059][T18449] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 514.164073][T18449] RBP: 00007f5800177090 R08: 0000000000000000 R09: 0000000000000000 [ 514.164086][T18449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.164099][T18449] R13: 00007f57ff5e6128 R14: 00007f57ff5e6090 R15: 00007ffe084d09a8 [ 514.164133][T18449] [ 514.164143][T18449] page_pool_create_percpu() gave up with errno -12 [ 514.609819][T18444] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.628685][T18456] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 515.489559][T18460] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.498932][T18444] wg1 speed is unknown, defaulting to 1000 [ 515.654257][T18482] bridge0: port 3(syz_tun) entered blocking state [ 515.670803][T18482] bridge0: port 3(syz_tun) entered disabled state [ 515.679385][T18482] syz_tun: entered allmulticast mode [ 515.686832][T18482] syz_tun: entered promiscuous mode [ 515.701404][T18482] bridge0: port 3(syz_tun) entered blocking state [ 515.708400][T18482] bridge0: port 3(syz_tun) entered forwarding state [ 516.052739][T18490] syzkaller0: entered promiscuous mode [ 516.069789][T18490] syzkaller0: entered allmulticast mode [ 516.189305][T18499] netlink: 'syz.3.3490': attribute type 10 has an invalid length. [ 516.336667][T18502] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.339099][T18460] wg1 speed is unknown, defaulting to 1000 [ 516.666874][T18517] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3492'. [ 517.103556][T18523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.157237][T18523] team0: Port device bond1 added [ 517.210254][T18502] wg1 speed is unknown, defaulting to 1000 [ 517.246684][T18519] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.275961][T18530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3495'. [ 517.471934][T18530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3495'. [ 517.907735][T18519] wg1 speed is unknown, defaulting to 1000 [ 517.925736][T18539] bridge3: entered promiscuous mode [ 517.931565][T18539] bridge3: entered allmulticast mode [ 517.944604][T18539] team0: Port device bridge3 added [ 517.978775][T18539] bridge0: port 1(team0) entered blocking state [ 517.988436][T18539] bridge0: port 1(team0) entered disabled state [ 517.995163][T18539] team0: entered allmulticast mode [ 518.015744][T18539] team0: entered promiscuous mode [ 518.104594][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 518.207909][T18548] nbd: must specify a size in bytes for the device [ 518.222183][T18546] veth5: entered promiscuous mode [ 518.238472][T18548] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3500'. [ 518.337224][T18552] bridge2: entered promiscuous mode [ 518.366267][T18552] bridge2: entered allmulticast mode [ 518.376920][T18552] team0: Port device bridge2 added [ 518.433106][T18557] netlink: 'syz.6.3503': attribute type 13 has an invalid length. [ 518.468307][T18557] netlink: 'syz.6.3503': attribute type 17 has an invalid length. [ 518.731537][T18557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.769396][T18566] syzkaller0: entered promiscuous mode [ 518.789840][T18566] syzkaller0: entered allmulticast mode [ 518.865446][T18561] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.001671][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 519.054692][T18575] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3506'. [ 519.318901][T18590] netlink: 'syz.4.3512': attribute type 1 has an invalid length. [ 519.528565][T18600] bond4: option all_slaves_active: invalid value (9) [ 519.538012][T18600] bond4 (unregistering): Released all slaves [ 519.565551][T18596] bond3: entered promiscuous mode [ 519.571031][T18596] bond3: entered allmulticast mode [ 519.576591][T18596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.594010][T18608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3516'. [ 519.610188][T18608] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3516'. [ 519.632592][T18561] wg1 speed is unknown, defaulting to 1000 [ 519.673589][T18595] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.751584][T18612] geneve2: entered promiscuous mode [ 519.760823][T18612] geneve2: entered allmulticast mode [ 520.097685][T18595] wg1 speed is unknown, defaulting to 1000 [ 520.481084][T18632] netlink: 'syz.6.3524': attribute type 13 has an invalid length. [ 520.562332][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.570172][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.708122][T18632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.724707][T18632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.834354][T18632] batman_adv: batadv0: Interface deactivated: macvtap1 [ 520.924309][T18642] bridge4: entered promiscuous mode [ 520.929805][T18642] bridge4: entered allmulticast mode [ 520.946133][T18642] team0: Port device bridge4 added [ 520.952243][ T12] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.965459][ T12] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.007986][ T1163] bridge0: port 1(team0) entered blocking state [ 521.014432][ T1163] bridge0: port 1(team0) entered forwarding state [ 521.062770][ T12] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.071662][T18635] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.071661][ T12] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.136248][T18651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3530'. [ 521.359589][T18635] wg1 speed is unknown, defaulting to 1000 [ 521.402050][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3532'. [ 521.843356][T18669] bond1: Unable to set down delay as MII monitoring is disabled [ 521.868884][T18669] bond1 (unregistering): Released all slaves [ 522.068548][T18680] bond0: (slave rose0): Releasing backup interface [ 522.224783][T18692] netlink: 'syz.5.3541': attribute type 13 has an invalid length. [ 522.233360][T18692] netlink: 'syz.5.3541': attribute type 17 has an invalid length. [ 522.432101][T18692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.988966][T18723] __nla_validate_parse: 2 callbacks suppressed [ 522.988986][T18723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3547'. [ 524.233375][T18698] ip6_vti0 speed is unknown, defaulting to 1000 [ 524.362833][T18726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3549'. [ 524.397535][T18726] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3549'. [ 524.412901][T18726] netlink: 'syz.2.3549': attribute type 5 has an invalid length. [ 524.443359][T18726] netlink: 'syz.2.3549': attribute type 6 has an invalid length. [ 524.470657][T18726] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3549'. [ 524.604871][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3552'. [ 524.639749][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3552'. [ 524.710948][T18698] wg1 speed is unknown, defaulting to 1000 [ 524.904858][T18745] netlink: 'syz.2.3555': attribute type 10 has an invalid length. [ 524.935255][T18745] bond0: (slave wlan1): Opening slave failed [ 525.065680][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3557'. [ 525.099087][T18757] bridge_slave_1: left allmulticast mode [ 525.218758][T18757] bridge_slave_1: left promiscuous mode [ 525.226351][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.239581][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 525.239588][T18757] bridge_slave_0: left allmulticast mode [ 525.239609][T18757] bridge_slave_0: left promiscuous mode [ 525.259747][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'. [ 525.260534][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.295013][T18759] netlink: 'syz.2.3558': attribute type 5 has an invalid length. [ 525.330651][T18759] netlink: 'syz.2.3558': attribute type 6 has an invalid length. [ 525.909357][T18776] ip6_vti0 speed is unknown, defaulting to 1000 [ 525.980710][T18780] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 526.356874][T18798] netlink: 'syz.4.3569': attribute type 13 has an invalid length. [ 526.378331][T18798] netlink: 'syz.4.3569': attribute type 17 has an invalid length. [ 526.497353][T18807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.543489][T18807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.573858][T18798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.614797][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3574'. [ 526.684234][T18805] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.686571][T18776] wg1 speed is unknown, defaulting to 1000 [ 526.853811][T18816] netlink: 'syz.6.3576': attribute type 9 has an invalid length. [ 526.964653][ T6732] IPVS: starting estimator thread 0... [ 527.028856][T18800] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.028928][T18805] wg1 speed is unknown, defaulting to 1000 [ 527.100993][T18817] IPVS: using max 33 ests per chain, 79200 per kthread [ 527.840214][T18800] wg1 speed is unknown, defaulting to 1000 [ 528.473025][T18864] netlink: 'syz.3.3590': attribute type 8 has an invalid length. [ 528.502327][T18867] Cannot find add_set index 0 as target [ 528.801647][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 528.803601][T18813] Bluetooth: hci0: command 0x0c1a tx timeout [ 529.217937][T18905] FAULT_INJECTION: forcing a failure. [ 529.217937][T18905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.262204][T18905] CPU: 0 UID: 0 PID: 18905 Comm: syz.3.3600 Not tainted syzkaller #0 PREEMPT(full) [ 529.262236][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.262249][T18905] Call Trace: [ 529.262257][T18905] [ 529.262266][T18905] dump_stack_lvl+0x189/0x250 [ 529.262301][T18905] ? __pfx____ratelimit+0x10/0x10 [ 529.262330][T18905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.262356][T18905] ? __pfx__printk+0x10/0x10 [ 529.262390][T18905] should_fail_ex+0x414/0x560 [ 529.262426][T18905] _copy_from_user+0x2d/0xb0 [ 529.262455][T18905] bpf_test_init+0xd8/0x150 [ 529.262480][T18905] bpf_prog_test_run_skb+0x206/0x1550 [ 529.262501][T18905] ? __fget_files+0x2a/0x420 [ 529.262528][T18905] ? __fget_files+0x2a/0x420 [ 529.262554][T18905] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 529.262583][T18905] bpf_prog_test_run+0x2c7/0x340 [ 529.262610][T18905] __sys_bpf+0x562/0x860 [ 529.262633][T18905] ? __pfx___sys_bpf+0x10/0x10 [ 529.262671][T18905] ? ksys_write+0x22a/0x250 [ 529.262703][T18905] ? __pfx_ksys_write+0x10/0x10 [ 529.262738][T18905] __x64_sys_bpf+0x7c/0x90 [ 529.262768][T18905] do_syscall_64+0xfa/0xfa0 [ 529.262798][T18905] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.262828][T18905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.262849][T18905] ? clear_bhb_loop+0x60/0xb0 [ 529.262874][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.262893][T18905] RIP: 0033:0x7f6d6898f6c9 [ 529.262913][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.262931][T18905] RSP: 002b:00007f6d697c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.262962][T18905] RAX: ffffffffffffffda RBX: 00007f6d68be5fa0 RCX: 00007f6d6898f6c9 [ 529.262978][T18905] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 529.262991][T18905] RBP: 00007f6d697c9090 R08: 0000000000000000 R09: 0000000000000000 [ 529.263004][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.263017][T18905] R13: 00007f6d68be6038 R14: 00007f6d68be5fa0 R15: 00007ffc20a6d5a8 [ 529.263051][T18905] [ 529.573050][T18901] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.968599][T18920] __nla_validate_parse: 2 callbacks suppressed [ 529.968622][T18920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3603'. [ 530.074270][T18920] tipc: Failed to remove unknown binding: 66,1,1/0:1029251020/1029251022 [ 530.314570][T18922] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 530.365682][T18901] wg1 speed is unknown, defaulting to 1000 [ 530.710729][T18935] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.754143][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'. [ 530.931474][T18935] wg1 speed is unknown, defaulting to 1000 [ 531.288063][T18958] FAULT_INJECTION: forcing a failure. [ 531.288063][T18958] name failslab, interval 1, probability 0, space 0, times 0 [ 531.300800][T18958] CPU: 1 UID: 0 PID: 18958 Comm: syz.2.3613 Not tainted syzkaller #0 PREEMPT(full) [ 531.300829][T18958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.300844][T18958] Call Trace: [ 531.300859][T18958] [ 531.300870][T18958] dump_stack_lvl+0x189/0x250 [ 531.300904][T18958] ? __pfx____ratelimit+0x10/0x10 [ 531.300934][T18958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.300964][T18958] ? __pfx__printk+0x10/0x10 [ 531.300992][T18958] ? __pfx___might_resched+0x10/0x10 [ 531.301014][T18958] ? fs_reclaim_acquire+0x7d/0x100 [ 531.301053][T18958] should_fail_ex+0x414/0x560 [ 531.301097][T18958] should_failslab+0xa8/0x100 [ 531.301120][T18958] __kmalloc_noprof+0xcb/0x7f0 [ 531.301150][T18958] ? sk_prot_alloc+0xe7/0x220 [ 531.301179][T18958] sk_prot_alloc+0xe7/0x220 [ 531.301199][T18958] ? sk_alloc+0x26/0x410 [ 531.301223][T18958] sk_alloc+0x39/0x410 [ 531.301243][T18958] ? bpf_ctx_init+0x167/0x1d0 [ 531.301266][T18958] bpf_prog_test_run_skb+0x313/0x1550 [ 531.301298][T18958] ? __fget_files+0x2a/0x420 [ 531.301325][T18958] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 531.301348][T18958] bpf_prog_test_run+0x2c7/0x340 [ 531.301375][T18958] __sys_bpf+0x562/0x860 [ 531.301398][T18958] ? __pfx___sys_bpf+0x10/0x10 [ 531.301437][T18958] ? ksys_write+0x22a/0x250 [ 531.301469][T18958] ? __pfx_ksys_write+0x10/0x10 [ 531.301506][T18958] __x64_sys_bpf+0x7c/0x90 [ 531.301538][T18958] do_syscall_64+0xfa/0xfa0 [ 531.301568][T18958] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.301600][T18958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.301621][T18958] ? clear_bhb_loop+0x60/0xb0 [ 531.301647][T18958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.301667][T18958] RIP: 0033:0x7f3b36f8f6c9 [ 531.301688][T18958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.301707][T18958] RSP: 002b:00007f3b351f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.301730][T18958] RAX: ffffffffffffffda RBX: 00007f3b371e5fa0 RCX: 00007f3b36f8f6c9 [ 531.301745][T18958] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 531.301760][T18958] RBP: 00007f3b351f6090 R08: 0000000000000000 R09: 0000000000000000 [ 531.301773][T18958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.301786][T18958] R13: 00007f3b371e6038 R14: 00007f3b371e5fa0 R15: 00007fff92f346e8 [ 531.301823][T18958] [ 531.757393][T18969] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 531.777162][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3617'. [ 531.863107][T18975] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3619'. [ 531.927782][T18978] validate_nla: 1 callbacks suppressed [ 531.927803][T18978] netlink: 'syz.4.3622': attribute type 1 has an invalid length. [ 531.957811][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 532.031841][T18975] netlink: 4460 bytes leftover after parsing attributes in process `syz.5.3619'. [ 532.123782][T18975] veth1_macvtap: left promiscuous mode [ 532.617541][T19007] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3627'. [ 532.712090][T19007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.812066][T19010] netlink: 'syz.3.3629': attribute type 5 has an invalid length. [ 532.852564][T19018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3631'. [ 532.872930][T19016] netlink: 'syz.3.3629': attribute type 2 has an invalid length. [ 532.910222][T19016] netlink: 'syz.3.3629': attribute type 2 has an invalid length. [ 533.819818][T19063] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.877340][T19067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3645'. [ 533.921119][T19068] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3647'. [ 534.351940][T19063] wg1 speed is unknown, defaulting to 1000 [ 534.569809][T19108] tunl0: entered promiscuous mode [ 534.592202][T19108] netlink: 'syz.5.3657': attribute type 4 has an invalid length. [ 534.855338][T19121] tipc: Started in network mode [ 534.868148][T19121] tipc: Node identity 8eebdbcaaa14, cluster identity 4711 [ 534.894210][T19121] tipc: Enabled bearer , priority 0 [ 534.922776][T19125] syzkaller0: entered promiscuous mode [ 534.928961][T19125] syzkaller0: entered allmulticast mode [ 535.005029][T19126] netlink: 'syz.2.3661': attribute type 3 has an invalid length. [ 535.106479][T19121] __nla_validate_parse: 1 callbacks suppressed [ 535.106500][T19121] netlink: 1044 bytes leftover after parsing attributes in process `syz.6.3660'. [ 535.126572][T19130] netlink: 'syz.3.3664': attribute type 3 has an invalid length. [ 535.180862][T19130] netlink: 'syz.3.3664': attribute type 3 has an invalid length. [ 535.244996][T19125] syzkaller0: mtu less than device minimum [ 535.285656][T19125] tipc: Resetting bearer [ 535.393267][ T876] IPVS: starting estimator thread 0... [ 535.406503][T19125] tipc: Disabling bearer [ 535.455467][T19138] tipc: Started in network mode [ 535.461331][T19138] tipc: Node identity 4246, cluster identity 4711 [ 535.467790][T19138] tipc: Node number set to 16966 [ 535.478006][T19138] tipc: Cannot configure node identity twice [ 535.491185][T19141] IPVS: using max 28 ests per chain, 67200 per kthread [ 535.540851][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 535.724367][T19160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3673'. [ 535.747116][T19160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3673'. [ 536.019722][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3676'. [ 536.041826][T19172] bridge_slave_1: left allmulticast mode [ 536.047542][T19172] bridge_slave_1: left promiscuous mode [ 536.053748][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.066116][T19172] bridge_slave_0: left allmulticast mode [ 536.076432][T19172] bridge_slave_0: left promiscuous mode [ 536.083712][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.300896][T19178] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.751418][T19178] wg1 speed is unknown, defaulting to 1000 [ 536.888069][T19209] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.133003][T19178] tipc: can't start tipc send workqueue [ 537.573888][T19209] wg1 speed is unknown, defaulting to 1000 [ 537.627260][T19219] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.720804][T19228] FAULT_INJECTION: forcing a failure. [ 537.720804][T19228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.743953][T19228] CPU: 1 UID: 0 PID: 19228 Comm: syz.4.3692 Not tainted syzkaller #0 PREEMPT(full) [ 537.743984][T19228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 537.743998][T19228] Call Trace: [ 537.744008][T19228] [ 537.744018][T19228] dump_stack_lvl+0x189/0x250 [ 537.744052][T19228] ? __pfx____ratelimit+0x10/0x10 [ 537.744082][T19228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.744112][T19228] ? __pfx__printk+0x10/0x10 [ 537.744146][T19228] should_fail_ex+0x414/0x560 [ 537.744184][T19228] _copy_to_user+0x31/0xb0 [ 537.744215][T19228] bpf_test_finish+0x56f/0x700 [ 537.744259][T19228] ? __pfx_bpf_test_finish+0x10/0x10 [ 537.744297][T19228] bpf_prog_test_run_skb+0xef8/0x1550 [ 537.744336][T19228] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 537.744358][T19228] bpf_prog_test_run+0x2c7/0x340 [ 537.744385][T19228] __sys_bpf+0x562/0x860 [ 537.744408][T19228] ? __pfx___sys_bpf+0x10/0x10 [ 537.744445][T19228] ? ksys_write+0x22a/0x250 [ 537.744476][T19228] ? __pfx_ksys_write+0x10/0x10 [ 537.744513][T19228] __x64_sys_bpf+0x7c/0x90 [ 537.744545][T19228] do_syscall_64+0xfa/0xfa0 [ 537.744573][T19228] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.744602][T19228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.744623][T19228] ? clear_bhb_loop+0x60/0xb0 [ 537.744648][T19228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.744668][T19228] RIP: 0033:0x7f57ff38f6c9 [ 537.744687][T19228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.744706][T19228] RSP: 002b:00007f5800198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.744728][T19228] RAX: ffffffffffffffda RBX: 00007f57ff5e5fa0 RCX: 00007f57ff38f6c9 [ 537.744744][T19228] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 537.744757][T19228] RBP: 00007f5800198090 R08: 0000000000000000 R09: 0000000000000000 [ 537.744769][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.744780][T19228] R13: 00007f57ff5e6038 R14: 00007f57ff5e5fa0 R15: 00007ffe084d09a8 [ 537.744815][T19228] [ 538.411699][T19219] wg1 speed is unknown, defaulting to 1000 [ 539.102777][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3696'. [ 539.487606][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3699'. [ 539.506583][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3699'. [ 539.552344][T19257] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.644582][T19259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3701'. [ 539.874569][T19264] syzkaller0: entered promiscuous mode [ 539.880172][T19264] syzkaller0: entered allmulticast mode [ 540.175079][T19277] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.241571][T19257] wg1 speed is unknown, defaulting to 1000 [ 540.655225][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 541.026489][T19298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3713'. [ 541.041175][T19277] wg1 speed is unknown, defaulting to 1000 [ 541.756943][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3714'. [ 542.763188][T19317] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.776903][T19311] Cannot find set identified by id 1 to match [ 542.847599][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3719'. [ 542.936095][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3721'. [ 543.110236][T19329] x_tables: duplicate underflow at hook 1 [ 543.144641][T19215] Set syz1 is full, maxelem 65536 reached [ 543.302818][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'. [ 543.376800][T19317] wg1 speed is unknown, defaulting to 1000 [ 543.505313][T19341] netlink: 'syz.5.3726': attribute type 18 has an invalid length. [ 543.530145][T19341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3726'. [ 543.546730][T19338] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 543.614608][T19344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.625116][T19344] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.644464][T19344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.752096][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.785693][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.802632][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.834599][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.029013][T19361] xt_hashlimit: max too large, truncated to 1048576 [ 544.344699][T19366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3732'. [ 544.546394][T19372] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.561448][T19378] ip6t_REJECT: ECHOREPLY is not supported [ 544.569954][T19378] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3735'. [ 544.685394][T19380] netlink: 'syz.4.3738': attribute type 1 has an invalid length. [ 544.693947][T19380] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3738'. [ 545.078395][T19372] wg1 speed is unknown, defaulting to 1000 [ 545.083193][T19375] ip6_vti0 speed is unknown, defaulting to 1000 [ 545.222104][T19393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.259606][T19393] bond0: (slave bond4): Enslaving as an active interface with an up link [ 545.484378][T19402] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 545.596174][T19397] bond0 (unregistering): (slave bond4): Releasing backup interface [ 545.615938][T19397] bond0 (unregistering): Released all slaves [ 545.649063][T19375] wg1 speed is unknown, defaulting to 1000 [ 545.783394][T19405] netlink: 'syz.6.3743': attribute type 13 has an invalid length. [ 545.795183][T19405] netlink: 'syz.6.3743': attribute type 17 has an invalid length. [ 545.879335][T19405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.018244][T19406] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.596689][T19423] netlink: 'syz.4.3748': attribute type 1 has an invalid length. [ 546.817285][T19423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.934245][T19425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.951186][T19425] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 547.006949][T19425] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 547.098455][T19406] wg1 speed is unknown, defaulting to 1000 [ 547.328791][T19439] __nla_validate_parse: 1 callbacks suppressed [ 547.328814][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3750'. [ 547.347895][T19448] netlink: 'syz.4.3752': attribute type 13 has an invalid length. [ 547.358899][T19448] netlink: 'syz.4.3752': attribute type 17 has an invalid length. [ 547.432486][T19448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.674352][T19448] ip6_vti0 speed is unknown, defaulting to 1000 [ 547.985821][T19466] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3757'. [ 548.008920][T19448] wg1 speed is unknown, defaulting to 1000 [ 548.078331][T19468] netlink: 'syz.6.3756': attribute type 13 has an invalid length. [ 548.358900][T19482] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 548.537209][T19477] ip6_vti0 speed is unknown, defaulting to 1000 [ 548.778402][T19477] wg1 speed is unknown, defaulting to 1000 [ 548.798254][T19476] ip6_vti0 speed is unknown, defaulting to 1000 [ 548.969049][T19481] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3760'. [ 548.981397][T19496] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3762'. [ 549.031716][ T876] IPVS: starting estimator thread 0... [ 549.088440][T19505] x_tables: duplicate underflow at hook 1 [ 549.128431][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3764'. [ 549.141765][T19504] IPVS: using max 25 ests per chain, 60000 per kthread [ 549.617361][T19516] nft_compat: unsupported protocol 0 [ 549.665546][T19512] wg1: entered promiscuous mode [ 549.673728][T19512] wg1: entered allmulticast mode [ 549.699859][T19476] wg1 speed is unknown, defaulting to 1000 [ 549.727664][T19516] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.291577][T19516] wg1 speed is unknown, defaulting to 1000 [ 550.462101][T19537] IPVS: length: 45 != 8 [ 550.479382][T19535] syz.5.3771: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 550.519373][T19535] CPU: 1 UID: 0 PID: 19535 Comm: syz.5.3771 Not tainted syzkaller #0 PREEMPT(full) [ 550.519405][T19535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 550.519419][T19535] Call Trace: [ 550.519428][T19535] [ 550.519438][T19535] dump_stack_lvl+0x189/0x250 [ 550.519476][T19535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.519507][T19535] ? __pfx__printk+0x10/0x10 [ 550.519529][T19535] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 550.519558][T19535] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 550.519589][T19535] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 550.519621][T19535] warn_alloc+0x214/0x310 [ 550.519659][T19535] ? __pfx_warn_alloc+0x10/0x10 [ 550.519700][T19535] ? __get_vm_area_node+0x28f/0x300 [ 550.519729][T19535] ? translate_table+0x19b/0x2040 [ 550.519765][T19535] __vmalloc_node_range_noprof+0x690/0x12d0 [ 550.519826][T19535] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 550.519857][T19535] ? translate_table+0x19b/0x2040 [ 550.519893][T19535] ? rcu_is_watching+0x15/0xb0 [ 550.519919][T19535] ? translate_table+0x19b/0x2040 [ 550.519951][T19535] __kvmalloc_node_noprof+0x674/0x910 [ 550.519984][T19535] ? translate_table+0x19b/0x2040 [ 550.520014][T19535] ? do_ip6t_set_ctl+0x88a/0xce0 [ 550.520032][T19535] ? nf_setsockopt+0x26f/0x290 [ 550.520060][T19535] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 550.520082][T19535] ? do_syscall_64+0xfa/0xfa0 [ 550.520119][T19535] translate_table+0x19b/0x2040 [ 550.520165][T19535] ? __lock_acquire+0xab9/0xd20 [ 550.520195][T19535] ? __pfx_translate_table+0x10/0x10 [ 550.520229][T19535] ? __might_fault+0xb0/0x130 [ 550.520278][T19535] ? _copy_from_user+0x94/0xb0 [ 550.520318][T19535] do_ip6t_set_ctl+0x970/0xce0 [ 550.520343][T19535] ? rcu_is_watching+0x15/0xb0 [ 550.520367][T19535] ? trace_contention_end+0x39/0x120 [ 550.520392][T19535] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 550.520438][T19535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.520481][T19535] ? __pfx_aa_sk_perm+0x10/0x10 [ 550.520515][T19535] nf_setsockopt+0x26f/0x290 [ 550.520544][T19535] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 550.520577][T19535] do_sock_setsockopt+0x17c/0x1b0 [ 550.520604][T19535] __x64_sys_setsockopt+0x13f/0x1b0 [ 550.520633][T19535] do_syscall_64+0xfa/0xfa0 [ 550.520663][T19535] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.520694][T19535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.520716][T19535] ? clear_bhb_loop+0x60/0xb0 [ 550.520741][T19535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.520761][T19535] RIP: 0033:0x7f0df718f6c9 [ 550.520780][T19535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.520799][T19535] RSP: 002b:00007f0df7fb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 550.520822][T19535] RAX: ffffffffffffffda RBX: 00007f0df73e6090 RCX: 00007f0df718f6c9 [ 550.520839][T19535] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 550.520852][T19535] RBP: 00007f0df7211f91 R08: 00000000000003f0 R09: 0000000000000000 [ 550.520864][T19535] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 550.520877][T19535] R13: 00007f0df73e6128 R14: 00007f0df73e6090 R15: 00007ffe35c0d268 [ 550.520914][T19535] [ 550.840609][T19535] Mem-Info: [ 550.843772][T19535] active_anon:3933 inactive_anon:0 isolated_anon:0 [ 550.843772][T19535] active_file:3568 inactive_file:40077 isolated_file:0 [ 550.843772][T19535] unevictable:3840 dirty:255 writeback:0 [ 550.843772][T19535] slab_reclaimable:12266 slab_unreclaimable:156283 [ 550.843772][T19535] mapped:32638 shmem:4428 pagetables:1007 [ 550.843772][T19535] sec_pagetables:0 bounce:0 [ 550.843772][T19535] kernel_misc_reclaimable:0 [ 550.843772][T19535] free:1259855 free_pcp:14490 free_cma:0 [ 550.920919][T19535] Node 0 active_anon:15732kB inactive_anon:0kB active_file:14272kB inactive_file:160104kB unevictable:13824kB isolated(anon):0kB isolated(file):0kB mapped:130552kB dirty:1020kB writeback:0kB shmem:16176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12576kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 550.959391][T19535] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 551.010131][T19535] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.046708][T19535] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 551.052775][T19535] Node 0 DMA32 free:1121800kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15796kB inactive_anon:0kB active_file:14272kB inactive_file:160104kB unevictable:13824kB writepending:1024kB zspages:0kB present:3129332kB managed:2565140kB mlocked:12288kB bounce:0kB free_pcp:46596kB local_pcp:21728kB free_cma:0kB [ 551.087315][T19535] lowmem_reserve[]: 0 0 0 0 0 [ 551.092257][T19535] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.124551][T19535] lowmem_reserve[]: 0 0 0 0 0 [ 551.129342][T19535] Node 1 Normal free:3904000kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9440kB local_pcp:6912kB free_cma:0kB [ 551.161800][T19535] lowmem_reserve[]: 0 0 0 0 0 [ 551.166581][T19535] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 551.179435][T19535] Node 0 DMA32: 319*4kB (UM) 162*8kB (ME) 180*16kB (UME) 12*32kB (ME) 3*64kB (UE) 7*128kB (ME) 38*256kB (UM) 15*512kB (ME) 6*1024kB (UM) 5*2048kB (UM) 264*4096kB (UM) = 1122060kB [ 551.197590][T19535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 551.228728][T19535] Node 1 Normal: 160*4kB (UME) 38*8kB (UME) 47*16kB (UME) 237*32kB (UME) 65*64kB (UME) 15*128kB (UME) 6*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3904000kB [ 551.375048][T19535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.406247][T19535] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.482937][T19535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.550701][T19535] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 551.560053][T19535] 48070 total pagecache pages [ 551.696757][T19535] 0 pages in swap cache [ 551.710509][T19535] Free swap = 124996kB [ 551.714718][T19535] Total swap = 124996kB [ 551.718908][T19535] 2097051 pages RAM [ 551.763893][T19535] 0 pages HighMem/MovableOnly [ 551.768636][T19535] 424124 pages reserved [ 551.794163][T19535] 0 pages cma reserved [ 552.547459][T19554] bond2: entered promiscuous mode [ 552.553624][T19554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.566977][T19553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3774'. [ 552.598042][T19559] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3778'. [ 552.609405][T19559] syzkaller0: entered promiscuous mode [ 552.615064][T19559] syzkaller0: entered allmulticast mode [ 552.676949][T19562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3774'. [ 552.925114][T19581] netlink: 'syz.5.3779': attribute type 1 has an invalid length. [ 553.000872][T19581] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3779'. [ 553.148315][T19588] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.267145][T19593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3783'. [ 553.633095][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3784'. [ 553.645065][T19608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3784'. [ 553.860522][T19608] hsr_slave_1 (unregistering): left promiscuous mode [ 553.901999][T19588] wg1 speed is unknown, defaulting to 1000 [ 553.902027][T19599] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.304137][T19607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3785'. [ 554.520679][T19599] wg1 speed is unknown, defaulting to 1000 [ 554.526657][T19605] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.584456][T19630] netlink: 'syz.6.3791': attribute type 1 has an invalid length. [ 554.601825][T19630] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3791'. [ 554.630701][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3791'. [ 554.903038][T19640] syzkaller0: entered promiscuous mode [ 554.908700][T19640] syzkaller0: entered allmulticast mode [ 555.066413][T19621] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.187186][T19651] bond3 (unregistering): Released all slaves [ 555.551539][T19673] batadv1: entered promiscuous mode [ 555.573336][T19621] wg1 speed is unknown, defaulting to 1000 [ 555.584919][T19605] wg1 speed is unknown, defaulting to 1000 [ 555.838239][T19675] Ïdev: option downdelay: invalid value (18446744073709547007) [ 555.849931][T19675] Ïdev: option downdelay: allowed values 0 - 2147483647 [ 555.858500][T19675] Ïdev (unregistering): Released all slaves [ 555.949394][T19676] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.134626][T19685] netlink: 'syz.6.3806': attribute type 21 has an invalid length. [ 556.439072][T19676] wg1 speed is unknown, defaulting to 1000 [ 557.674053][T19716] __nla_validate_parse: 8 callbacks suppressed [ 557.674075][T19716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3815'. [ 557.694366][T19713] vlan0: entered promiscuous mode [ 557.699551][T19713] geneve1: entered promiscuous mode [ 557.705273][T19713] vlan0: entered allmulticast mode [ 557.713264][T19713] geneve1: entered allmulticast mode [ 557.802178][T19717] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.838987][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 557.960323][T19737] wg1: entered promiscuous mode [ 557.965626][T19737] wg1: entered allmulticast mode [ 557.987828][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 558.122683][T19743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3823'. [ 558.146580][T19743] erspan0: entered promiscuous mode [ 558.168483][T19743] erspan0: entered allmulticast mode [ 558.262407][T19747] netlink: 'syz.4.3825': attribute type 13 has an invalid length. [ 558.289360][T19749] netlink: 'syz.6.3826': attribute type 10 has an invalid length. [ 558.512563][T19747] bridge0: port 1(team0) entered disabled state [ 558.734414][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3817'. [ 558.929906][T19747] batman_adv: batadv0: Interface deactivated: gretap1 [ 558.958304][T19747] ip6gretap0: left allmulticast mode [ 558.991591][T19768] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20001 [ 559.005899][T19769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 559.024519][T19768] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 559.047064][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 559.144068][T19749] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.153839][T19749] bond0: (slave team0): Enslaving as an active interface with an up link [ 559.212239][T19745] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.220040][T19717] wg1 speed is unknown, defaulting to 1000 [ 559.274712][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.308791][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.320702][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.367691][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.386917][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.396233][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.406771][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.415888][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.425236][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.500667][ T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.520707][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.540777][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 559.631732][T19745] wg1 speed is unknown, defaulting to 1000 [ 559.648866][T19776] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3830'. [ 559.659502][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 560.062284][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'. [ 560.079824][T19789] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3833'. [ 560.091962][T19738] Bluetooth: hci2: command 0x0406 tx timeout [ 560.099025][T19738] Bluetooth: hci4: command 0x0406 tx timeout [ 560.119386][T19792] syzkaller1: entered promiscuous mode [ 560.126105][T19792] syzkaller1: entered allmulticast mode [ 560.412365][T19806] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.059053][T19840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.076937][T19806] wg1 speed is unknown, defaulting to 1000 [ 561.757937][T19859] FAULT_INJECTION: forcing a failure. [ 561.757937][T19859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.784070][T19859] CPU: 1 UID: 0 PID: 19859 Comm: syz.4.3847 Not tainted syzkaller #0 PREEMPT(full) [ 561.784113][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.784134][T19859] Call Trace: [ 561.784143][T19859] [ 561.784153][T19859] dump_stack_lvl+0x189/0x250 [ 561.784188][T19859] ? __pfx____ratelimit+0x10/0x10 [ 561.784219][T19859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.784248][T19859] ? __pfx__printk+0x10/0x10 [ 561.784270][T19859] ? __might_fault+0xb0/0x130 [ 561.784314][T19859] should_fail_ex+0x414/0x560 [ 561.784351][T19859] _copy_from_user+0x2d/0xb0 [ 561.784381][T19859] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 561.784405][T19859] ? rcu_is_watching+0x15/0xb0 [ 561.784437][T19859] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 561.784464][T19859] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 561.784490][T19859] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 561.784514][T19859] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 561.784546][T19859] ? policy_nodemask+0x27c/0x720 [ 561.784566][T19859] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 561.784606][T19859] ip_generic_getfrag+0x12f/0x2b0 [ 561.784641][T19859] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 561.784670][T19859] ? skb_page_frag_refill+0x199/0x320 [ 561.784706][T19859] __ip_append_data+0x22fa/0x40c0 [ 561.784759][T19859] ? __pfx_raw_getfrag+0x10/0x10 [ 561.784816][T19859] ? __pfx___ip_append_data+0x10/0x10 [ 561.784851][T19859] ? __local_bh_enable_ip+0x12d/0x1c0 [ 561.784875][T19859] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.784910][T19859] ip_append_data+0x10e/0x190 [ 561.784945][T19859] ? __pfx_raw_getfrag+0x10/0x10 [ 561.784979][T19859] raw_sendmsg+0x13d8/0x18b0 [ 561.785043][T19859] ? __pfx_raw_sendmsg+0x10/0x10 [ 561.785098][T19859] ? aa_sk_perm+0x81e/0x950 [ 561.785133][T19859] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.785160][T19859] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 561.785197][T19859] ? sock_rps_record_flow+0x19/0x410 [ 561.785223][T19859] ? inet_sendmsg+0x2f4/0x370 [ 561.785242][T19859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.785266][T19859] __sock_sendmsg+0x19c/0x270 [ 561.785300][T19859] __sys_sendto+0x3bd/0x520 [ 561.785323][T19859] ? __pfx___sys_sendto+0x10/0x10 [ 561.785341][T19859] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 561.785388][T19859] ? __fget_files+0x3a0/0x420 [ 561.785422][T19859] ? ksys_write+0x22a/0x250 [ 561.785455][T19859] ? __pfx_ksys_write+0x10/0x10 [ 561.785489][T19859] __x64_sys_sendto+0xde/0x100 [ 561.785514][T19859] do_syscall_64+0xfa/0xfa0 [ 561.785543][T19859] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.785574][T19859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.785595][T19859] ? clear_bhb_loop+0x60/0xb0 [ 561.785621][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.785642][T19859] RIP: 0033:0x7f57ff38f6c9 [ 561.785661][T19859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.785679][T19859] RSP: 002b:00007f5800198038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 561.785702][T19859] RAX: ffffffffffffffda RBX: 00007f57ff5e5fa0 RCX: 00007f57ff38f6c9 [ 561.785719][T19859] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000003 [ 561.785733][T19859] RBP: 00007f5800198090 R08: 0000200000002400 R09: 0000000000000010 [ 561.785747][T19859] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 561.785760][T19859] R13: 00007f57ff5e6038 R14: 00007f57ff5e5fa0 R15: 00007ffe084d09a8 [ 561.785797][T19859] [ 562.455449][T19871] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.798733][T19871] wg1 speed is unknown, defaulting to 1000 [ 563.040274][T19902] bond0: (slave bond_slave_0): Releasing backup interface [ 563.087430][T19902] bond0: (slave bond_slave_1): Releasing backup interface [ 563.094501][T19908] netlink: 'syz.3.3861': attribute type 10 has an invalid length. [ 563.118168][T19902] team0: Port device team_slave_0 removed [ 563.141450][T19902] team0: Port device team_slave_1 removed [ 563.159771][T19902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.171484][T19902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.183870][T19902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.210533][T19902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.234960][T19902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 563.284562][T19908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.295424][T19919] __nla_validate_parse: 2 callbacks suppressed [ 563.295446][T19919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3865'. [ 563.312904][T19908] bond0: (slave wlan1): Opening slave failed [ 563.539149][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3868'. [ 563.642764][T19942] bond2: Invalid ad_actor_system MAC address. [ 563.659183][T19942] bond2: option ad_actor_system: invalid value (7) [ 563.722135][T19942] bond2 (unregistering): Released all slaves [ 563.729193][T19952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3869'. [ 563.816444][T19961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3872'. [ 563.857122][T19961] netlink: 'syz.5.3872': attribute type 4 has an invalid length. [ 563.895267][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3868'. [ 564.026153][T19944] batadv1: entered promiscuous mode [ 564.200274][T19942] bond2: Invalid ad_actor_system MAC address. [ 564.207243][T19942] bond2: option ad_actor_system: invalid value (7) [ 564.218904][T19942] bond2 (unregistering): Released all slaves [ 564.277858][T19951] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.662968][T19948] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.670381][T19951] wg1 speed is unknown, defaulting to 1000 [ 564.864997][T19990] FAULT_INJECTION: forcing a failure. [ 564.864997][T19990] name failslab, interval 1, probability 0, space 0, times 0 [ 564.890440][T19990] CPU: 0 UID: 0 PID: 19990 Comm: syz.5.3881 Not tainted syzkaller #0 PREEMPT(full) [ 564.890471][T19990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 564.890485][T19990] Call Trace: [ 564.890493][T19990] [ 564.890504][T19990] dump_stack_lvl+0x189/0x250 [ 564.890538][T19990] ? __pfx____ratelimit+0x10/0x10 [ 564.890569][T19990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.890597][T19990] ? __pfx__printk+0x10/0x10 [ 564.890616][T19990] ? ipt_do_table+0x2a3/0x1640 [ 564.890650][T19990] ? iptable_mangle_hook+0x189/0x4c0 [ 564.890683][T19990] should_fail_ex+0x414/0x560 [ 564.890721][T19990] should_failslab+0xa8/0x100 [ 564.890745][T19990] kmem_cache_alloc_noprof+0x74/0x6e0 [ 564.890774][T19990] ? nf_hook+0x2f2/0x380 [ 564.890801][T19990] ? dst_alloc+0x105/0x170 [ 564.890833][T19990] dst_alloc+0x105/0x170 [ 564.890864][T19990] rt_dst_clone+0x52/0x680 [ 564.890896][T19990] ip_mc_finish_output+0xe9/0x2d0 [ 564.890931][T19990] ip_mc_output+0x3a3/0x590 [ 564.890973][T19990] ip_push_pending_frames+0xbe/0x150 [ 564.891007][T19990] raw_sendmsg+0x1440/0x18b0 [ 564.891054][T19990] ? __pfx_raw_sendmsg+0x10/0x10 [ 564.891103][T19990] ? aa_sk_perm+0x81e/0x950 [ 564.891137][T19990] ? __pfx_aa_sk_perm+0x10/0x10 [ 564.891163][T19990] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 564.891199][T19990] ? sock_rps_record_flow+0x19/0x410 [ 564.891223][T19990] ? inet_sendmsg+0x2f4/0x370 [ 564.891241][T19990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.891266][T19990] __sock_sendmsg+0x19c/0x270 [ 564.891298][T19990] __sys_sendto+0x3bd/0x520 [ 564.891322][T19990] ? __pfx___sys_sendto+0x10/0x10 [ 564.891340][T19990] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 564.891387][T19990] ? __fget_files+0x3a0/0x420 [ 564.891420][T19990] ? ksys_write+0x22a/0x250 [ 564.891453][T19990] ? __pfx_ksys_write+0x10/0x10 [ 564.891487][T19990] __x64_sys_sendto+0xde/0x100 [ 564.891512][T19990] do_syscall_64+0xfa/0xfa0 [ 564.891541][T19990] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.891570][T19990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.891592][T19990] ? clear_bhb_loop+0x60/0xb0 [ 564.891617][T19990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.891637][T19990] RIP: 0033:0x7f0df718f6c9 [ 564.891657][T19990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.891697][T19990] RSP: 002b:00007f0df7fd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.891719][T19990] RAX: ffffffffffffffda RBX: 00007f0df73e5fa0 RCX: 00007f0df718f6c9 [ 564.891734][T19990] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000003 [ 564.891748][T19990] RBP: 00007f0df7fd2090 R08: 0000200000002400 R09: 0000000000000010 [ 564.891761][T19990] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 564.891774][T19990] R13: 00007f0df73e6038 R14: 00007f0df73e5fa0 R15: 00007ffe35c0d268 [ 564.891809][T19990] [ 565.345275][T19994] syzkaller1: entered promiscuous mode [ 565.351069][T19994] syzkaller1: entered allmulticast mode [ 565.433852][T19948] wg1 speed is unknown, defaulting to 1000 [ 565.528163][T20006] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3884'. [ 565.615737][T20006] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3884'. [ 565.625745][T19999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3884'. [ 565.806317][T20018] netlink: 'syz.6.3889': attribute type 4 has an invalid length. [ 565.821330][T20021] netlink: 'syz.6.3889': attribute type 4 has an invalid length. [ 565.858020][T20007] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.112725][T20007] wg1 speed is unknown, defaulting to 1000 [ 566.307447][T20038] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 566.458987][T20046] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3897'. [ 566.468476][T20046] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3897'. [ 567.145363][T20064] wg1: entered promiscuous mode [ 567.150413][T20064] wg1: entered allmulticast mode [ 567.159155][T20065] tipc: Started in network mode [ 567.166562][T20065] tipc: Node identity 92cdbb4f858b, cluster identity 4711 [ 567.174312][T20065] tipc: Enabled bearer , priority 0 [ 567.188782][T20069] syzkaller0: entered promiscuous mode [ 567.194562][T20069] syzkaller0: entered allmulticast mode [ 567.219294][T20061] syzkaller0: mtu less than device minimum [ 567.371261][T20076] IPv6: sit1: Disabled Multicast RS [ 567.410066][T20076] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.443893][T20079] netlink: 'syz.2.3906': attribute type 39 has an invalid length. [ 567.499576][T20079] hsr_slave_1 (unregistering): left promiscuous mode [ 567.644911][T20085] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 567.732875][T20076] wg1 speed is unknown, defaulting to 1000 [ 568.302075][ T5894] tipc: Node number set to 390511439 [ 568.560294][T20123] vlan1: entered promiscuous mode [ 568.573313][T20123] vlan1: entered allmulticast mode [ 568.610725][T20123] hsr_slave_1: entered allmulticast mode [ 569.028412][T20138] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.036288][T20138] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.061406][T20152] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 569.063231][T20138] bond_slave_0: left promiscuous mode [ 569.075225][T20138] bond_slave_1: left promiscuous mode [ 569.082584][T20138] batadv0: left promiscuous mode [ 569.132071][T20138] wg1: left promiscuous mode [ 569.136737][T20138] wg1: left allmulticast mode [ 569.203183][T20138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.220390][T20138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.291111][T20138] bridge1: left promiscuous mode [ 569.296250][T20138] bridge1: left allmulticast mode [ 569.305717][T20138] geneve2: left promiscuous mode [ 569.315365][T20138] bond0: left allmulticast mode [ 569.320621][T20138] bond_slave_0: left allmulticast mode [ 569.326285][T20138] bond_slave_1: left allmulticast mode [ 569.332122][T20138] batadv0: left allmulticast mode [ 569.337587][T20138] macvlan0: left allmulticast mode [ 569.346889][T20138] tipc: Resetting bearer [ 569.353652][T20138] syzkaller0: left promiscuous mode [ 569.358899][T20138] syzkaller0: left allmulticast mode [ 569.384941][T20145] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 569.402994][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.427250][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.446738][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.463980][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.526100][T20164] __nla_validate_parse: 34 callbacks suppressed [ 569.526122][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3926'. [ 569.627533][T20167] macvtap1: entered promiscuous mode [ 569.633462][T20167] syz_tun: entered promiscuous mode [ 569.645204][T20167] syz_tun: left promiscuous mode [ 569.735971][T20173] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 569.752820][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 569.776267][T20173] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3927'. [ 569.804203][T20173] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3927'. [ 569.846114][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 569.911377][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3931'. [ 570.087629][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.101318][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.115477][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.153523][T20189] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 570.192981][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.197089][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3934'. [ 570.215921][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.247363][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.255996][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.264455][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.272354][T20189] wg1 speed is unknown, defaulting to 1000 [ 570.455592][T20202] IPVS: Scheduler module ip_vs_sip not found [ 570.521797][T20206] FAULT_INJECTION: forcing a failure. [ 570.521797][T20206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.549415][T20204] IPVS: Scheduler module ip_vs_sip not found [ 570.552762][T20206] CPU: 1 UID: 0 PID: 20206 Comm: syz.3.3936 Not tainted syzkaller #0 PREEMPT(full) [ 570.552804][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 570.552821][T20206] Call Trace: [ 570.552832][T20206] [ 570.552842][T20206] dump_stack_lvl+0x189/0x250 [ 570.552884][T20206] ? __pfx____ratelimit+0x10/0x10 [ 570.552919][T20206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.552952][T20206] ? __pfx__printk+0x10/0x10 [ 570.552979][T20206] ? __might_fault+0xb0/0x130 [ 570.553027][T20206] should_fail_ex+0x414/0x560 [ 570.553071][T20206] _copy_from_user+0x2d/0xb0 [ 570.553103][T20206] do_sock_getsockopt+0x17d/0x450 [ 570.553134][T20206] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 570.553159][T20206] ? do_syscall_64+0xa0/0xfa0 [ 570.553194][T20206] ? __fget_files+0x2a/0x420 [ 570.553216][T20206] ? __fget_files+0x3a0/0x420 [ 570.553246][T20206] ? __fget_files+0x2a/0x420 [ 570.553278][T20206] __x64_sys_getsockopt+0x1a5/0x250 [ 570.553304][T20206] ? do_syscall_64+0xa0/0xfa0 [ 570.553340][T20206] ? do_syscall_64+0xa0/0xfa0 [ 570.553379][T20206] do_syscall_64+0xfa/0xfa0 [ 570.553411][T20206] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.553447][T20206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.553471][T20206] ? clear_bhb_loop+0x60/0xb0 [ 570.553499][T20206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.553523][T20206] RIP: 0033:0x7f6d6898f6c9 [ 570.553545][T20206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.553566][T20206] RSP: 002b:00007f6d697a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 570.553591][T20206] RAX: ffffffffffffffda RBX: 00007f6d68be6090 RCX: 00007f6d6898f6c9 [ 570.553609][T20206] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000004 [ 570.553625][T20206] RBP: 00007f6d697a8090 R08: 0000200000000100 R09: 0000000000000000 [ 570.553641][T20206] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 570.553655][T20206] R13: 00007f6d68be6128 R14: 00007f6d68be6090 R15: 00007ffc20a6d5a8 [ 570.553695][T20206] [ 571.029442][T20222] atomic_op ffff88804e7e4998 conn xmit_atomic 0000000000000000 [ 571.369813][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3947'. [ 571.381803][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3946'. [ 571.587617][T20244] IPVS: Scheduler module ip_vs_sip not found [ 572.139256][T20268] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.600676][T20283] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3961'. [ 572.651782][T20283] unsupported nlmsg_type 40 [ 572.739567][T20283] dvmrp8: entered allmulticast mode [ 572.929947][T20294] FAULT_INJECTION: forcing a failure. [ 572.929947][T20294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.944134][T20294] CPU: 1 UID: 0 PID: 20294 Comm: syz.6.3966 Not tainted syzkaller #0 PREEMPT(full) [ 572.944165][T20294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 572.944179][T20294] Call Trace: [ 572.944188][T20294] [ 572.944197][T20294] dump_stack_lvl+0x189/0x250 [ 572.944232][T20294] ? __pfx____ratelimit+0x10/0x10 [ 572.944264][T20294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.944293][T20294] ? __pfx__printk+0x10/0x10 [ 572.944316][T20294] ? __might_fault+0xb0/0x130 [ 572.944359][T20294] should_fail_ex+0x414/0x560 [ 572.944396][T20294] _copy_from_iter+0x1de/0x1790 [ 572.944428][T20294] ? rcu_is_watching+0x15/0xb0 [ 572.944457][T20294] ? kmalloc_reserve+0xbd/0x290 [ 572.944479][T20294] ? __pfx__copy_from_iter+0x10/0x10 [ 572.944506][T20294] ? __build_skb_around+0x262/0x3f0 [ 572.944530][T20294] ? netlink_sendmsg+0x642/0xb30 [ 572.944551][T20294] ? skb_put+0x11b/0x210 [ 572.944577][T20294] netlink_sendmsg+0x6b2/0xb30 [ 572.944610][T20294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.944636][T20294] ? aa_sock_msg_perm+0xf1/0x1d0 [ 572.944670][T20294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.944691][T20294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.944715][T20294] __sock_sendmsg+0x21c/0x270 [ 572.944748][T20294] ____sys_sendmsg+0x505/0x830 [ 572.944779][T20294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.944813][T20294] ? import_iovec+0x74/0xa0 [ 572.944844][T20294] ___sys_sendmsg+0x21f/0x2a0 [ 572.944871][T20294] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.944936][T20294] ? __fget_files+0x2a/0x420 [ 572.944956][T20294] ? __fget_files+0x3a0/0x420 [ 572.944988][T20294] __x64_sys_sendmsg+0x19b/0x260 [ 572.945015][T20294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.945051][T20294] ? __pfx_ksys_write+0x10/0x10 [ 572.945093][T20294] ? do_syscall_64+0xbe/0xfa0 [ 572.945129][T20294] do_syscall_64+0xfa/0xfa0 [ 572.945159][T20294] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.945190][T20294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.945212][T20294] ? clear_bhb_loop+0x60/0xb0 [ 572.945239][T20294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.945259][T20294] RIP: 0033:0x7f9ac218f6c9 [ 572.945279][T20294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.945297][T20294] RSP: 002b:00007f9ac2fcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.945320][T20294] RAX: ffffffffffffffda RBX: 00007f9ac23e5fa0 RCX: 00007f9ac218f6c9 [ 572.945336][T20294] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 572.945349][T20294] RBP: 00007f9ac2fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 572.945363][T20294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.945376][T20294] R13: 00007f9ac23e6038 R14: 00007f9ac23e5fa0 R15: 00007ffc992e6fc8 [ 572.945412][T20294] [ 573.360355][T20268] wg1 speed is unknown, defaulting to 1000 [ 573.368295][T20268] wg1 speed is unknown, defaulting to 1000 [ 573.488176][T20303] netlink: 'syz.3.3968': attribute type 11 has an invalid length. [ 573.580376][T10095] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.591154][T10095] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.621204][T20303] netlink: 'syz.3.3968': attribute type 11 has an invalid length. [ 573.629730][T10095] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.670939][T10095] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.238873][T20338] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.264979][T20347] FAULT_INJECTION: forcing a failure. [ 574.264979][T20347] name failslab, interval 1, probability 0, space 0, times 0 [ 574.301165][T20347] CPU: 1 UID: 0 PID: 20347 Comm: syz.3.3979 Not tainted syzkaller #0 PREEMPT(full) [ 574.301197][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.301209][T20347] Call Trace: [ 574.301218][T20347] [ 574.301227][T20347] dump_stack_lvl+0x189/0x250 [ 574.301259][T20347] ? __pfx____ratelimit+0x10/0x10 [ 574.301285][T20347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.301308][T20347] ? __pfx__printk+0x10/0x10 [ 574.301331][T20347] ? __pfx___might_resched+0x10/0x10 [ 574.301349][T20347] ? fs_reclaim_acquire+0x7d/0x100 [ 574.301380][T20347] should_fail_ex+0x414/0x560 [ 574.301411][T20347] should_failslab+0xa8/0x100 [ 574.301430][T20347] __kmalloc_noprof+0xcb/0x7f0 [ 574.301455][T20347] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 574.301479][T20347] ? rcu_is_watching+0x15/0xb0 [ 574.301504][T20347] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 574.301535][T20347] genl_family_rcv_msg_doit+0xb8/0x300 [ 574.301565][T20347] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.301596][T20347] ? apparmor_capable+0x137/0x1b0 [ 574.301617][T20347] ? bpf_lsm_capable+0x9/0x20 [ 574.301638][T20347] ? security_capable+0x7e/0x2e0 [ 574.301668][T20347] genl_rcv_msg+0x60e/0x790 [ 574.301697][T20347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.301718][T20347] ? __pfx_smc_pnet_add+0x10/0x10 [ 574.301752][T20347] netlink_rcv_skb+0x208/0x470 [ 574.301767][T20347] ? __lock_acquire+0xab9/0xd20 [ 574.301785][T20347] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.301808][T20347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.301842][T20347] ? down_read+0x1ad/0x2e0 [ 574.301863][T20347] genl_rcv+0x28/0x40 [ 574.301885][T20347] netlink_unicast+0x82f/0x9e0 [ 574.301921][T20347] ? __pfx_netlink_unicast+0x10/0x10 [ 574.301951][T20347] ? netlink_sendmsg+0x642/0xb30 [ 574.301967][T20347] ? skb_put+0x11b/0x210 [ 574.301988][T20347] netlink_sendmsg+0x805/0xb30 [ 574.302014][T20347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.302035][T20347] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.302062][T20347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.302079][T20347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.302098][T20347] __sock_sendmsg+0x21c/0x270 [ 574.302137][T20347] ____sys_sendmsg+0x505/0x830 [ 574.302161][T20347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.302189][T20347] ? import_iovec+0x74/0xa0 [ 574.302215][T20347] ___sys_sendmsg+0x21f/0x2a0 [ 574.302236][T20347] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.302288][T20347] ? __fget_files+0x2a/0x420 [ 574.302303][T20347] ? __fget_files+0x3a0/0x420 [ 574.302329][T20347] __x64_sys_sendmsg+0x19b/0x260 [ 574.302351][T20347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.302379][T20347] ? __pfx_ksys_write+0x10/0x10 [ 574.302408][T20347] ? do_syscall_64+0xbe/0xfa0 [ 574.302438][T20347] do_syscall_64+0xfa/0xfa0 [ 574.302461][T20347] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.302486][T20347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.302503][T20347] ? clear_bhb_loop+0x60/0xb0 [ 574.302524][T20347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.302540][T20347] RIP: 0033:0x7f6d6898f6c9 [ 574.302556][T20347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.302572][T20347] RSP: 002b:00007f6d697c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.302590][T20347] RAX: ffffffffffffffda RBX: 00007f6d68be5fa0 RCX: 00007f6d6898f6c9 [ 574.302603][T20347] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 574.302614][T20347] RBP: 00007f6d697c9090 R08: 0000000000000000 R09: 0000000000000000 [ 574.302625][T20347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.302634][T20347] R13: 00007f6d68be6038 R14: 00007f6d68be5fa0 R15: 00007ffc20a6d5a8 [ 574.302664][T20347] [ 574.794983][T20354] __nla_validate_parse: 7 callbacks suppressed [ 574.795004][T20354] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3980'. [ 574.843355][T20355] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3980'. [ 574.910387][T20338] wg1 speed is unknown, defaulting to 1000 [ 574.918153][T20338] wg1 speed is unknown, defaulting to 1000 [ 575.132428][T20365] SET target dimension over the limit! [ 575.465112][T20372] netlink: 'syz.4.3987': attribute type 4 has an invalid length. [ 575.486443][T20372] netlink: 'syz.4.3987': attribute type 4 has an invalid length. [ 575.546549][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'. [ 575.754531][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3991'. [ 575.940627][T20390] tipc: Enabling of bearer rejected, failed to enable media [ 576.101655][T20394] ip6_vti0 speed is unknown, defaulting to 1000 [ 576.128787][T20398] sctp: [Deprecated]: syz.6.3994 (pid 20398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.128787][T20398] Use struct sctp_sack_info instead [ 576.145578][T20399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 576.159523][T20398] sctp: [Deprecated]: syz.6.3994 (pid 20398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.159523][T20398] Use struct sctp_sack_info instead [ 576.193404][T20398] netlink: get zone limit has 4 unknown bytes [ 576.516213][T20414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4000'. [ 576.682991][T20394] wg1 speed is unknown, defaulting to 1000 [ 576.699810][T20394] wg1 speed is unknown, defaulting to 1000 [ 576.745201][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4002'. [ 577.030696][T20425] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 577.042546][T20423] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.857494][T20439] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.933450][T20423] wg1 speed is unknown, defaulting to 1000 [ 577.955106][T20423] wg1 speed is unknown, defaulting to 1000 [ 577.996972][T20429] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4003'. [ 578.738256][T20488] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 578.805547][T20439] wg1 speed is unknown, defaulting to 1000 [ 578.823969][T20439] wg1 speed is unknown, defaulting to 1000 [ 579.390213][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4024'. [ 579.451791][T20503] IPVS: Scheduler module ip_vs_sip not found [ 579.923599][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4030'. [ 580.224779][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4036'. [ 580.284203][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4036'. [ 580.376387][T20536] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 580.425431][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4036'. [ 580.434653][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4036'. [ 580.450416][T20541] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 580.469297][T20542] openvswitch: netlink: Duplicate or invalid key (type 0). [ 580.493813][T20542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.605911][T20547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4039'. [ 580.623308][T20550] netlink: 'syz.5.4040': attribute type 1 has an invalid length. [ 580.627369][T20552] netlink: 'syz.5.4040': attribute type 1 has an invalid length. [ 580.708110][T20552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.747872][T20558] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.387118][T20587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4048'. [ 581.423481][T20587] FAULT_INJECTION: forcing a failure. [ 581.423481][T20587] name failslab, interval 1, probability 0, space 0, times 0 [ 581.447704][T20587] CPU: 1 UID: 0 PID: 20587 Comm: syz.2.4048 Not tainted syzkaller #0 PREEMPT(full) [ 581.447735][T20587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 581.447753][T20587] Call Trace: [ 581.447762][T20587] [ 581.447772][T20587] dump_stack_lvl+0x189/0x250 [ 581.447807][T20587] ? __pfx____ratelimit+0x10/0x10 [ 581.447838][T20587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.447867][T20587] ? __pfx__printk+0x10/0x10 [ 581.447894][T20587] ? __pfx___might_resched+0x10/0x10 [ 581.447917][T20587] ? fs_reclaim_acquire+0x7d/0x100 [ 581.447955][T20587] should_fail_ex+0x414/0x560 [ 581.447992][T20587] should_failslab+0xa8/0x100 [ 581.448016][T20587] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 581.448048][T20587] ? __request_module+0x2d1/0x5e0 [ 581.448068][T20587] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 581.448101][T20587] kstrdup+0x42/0x100 [ 581.448125][T20587] __request_module+0x2d1/0x5e0 [ 581.448152][T20587] ? __pfx___request_module+0x10/0x10 [ 581.448177][T20587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 581.448230][T20587] nfnetlink_rcv+0x6d8/0x2590 [ 581.448291][T20587] ? kernel_text_address+0xa5/0xe0 [ 581.448343][T20587] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 581.448415][T20587] ? __lock_acquire+0xab9/0xd20 [ 581.448461][T20587] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.448501][T20587] netlink_unicast+0x82f/0x9e0 [ 581.448542][T20587] ? __pfx_netlink_unicast+0x10/0x10 [ 581.448576][T20587] ? netlink_sendmsg+0x642/0xb30 [ 581.448595][T20587] ? skb_put+0x11b/0x210 [ 581.448620][T20587] netlink_sendmsg+0x805/0xb30 [ 581.448653][T20587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.448679][T20587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 581.448712][T20587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 581.448732][T20587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.448754][T20587] __sock_sendmsg+0x21c/0x270 [ 581.448787][T20587] sock_sendmsg+0x158/0x230 [ 581.448816][T20587] ? __pfx_sock_sendmsg+0x10/0x10 [ 581.448859][T20587] ? __asan_memset+0x22/0x50 [ 581.448887][T20587] ? iov_iter_bvec+0xb8/0x180 [ 581.448916][T20587] splice_to_socket+0x8f5/0xf00 [ 581.448973][T20587] ? __pfx_splice_to_socket+0x10/0x10 [ 581.449051][T20587] ? get_pid_task+0x20/0x1f0 [ 581.449097][T20587] ? bpf_lsm_file_permission+0x9/0x20 [ 581.449121][T20587] ? security_file_permission+0x75/0x290 [ 581.449149][T20587] ? rw_verify_area+0x255/0x4d0 [ 581.449182][T20587] ? __pfx_splice_to_socket+0x10/0x10 [ 581.449214][T20587] do_splice+0xc79/0x1660 [ 581.449263][T20587] ? __pfx_do_splice+0x10/0x10 [ 581.449304][T20587] __se_sys_splice+0x2e1/0x460 [ 581.449334][T20587] ? __pfx___se_sys_splice+0x10/0x10 [ 581.449360][T20587] ? __x64_sys_splice+0x21/0xf0 [ 581.449385][T20587] do_syscall_64+0xfa/0xfa0 [ 581.449415][T20587] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.449446][T20587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.449467][T20587] ? clear_bhb_loop+0x60/0xb0 [ 581.449494][T20587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.449515][T20587] RIP: 0033:0x7f3b36f8f6c9 [ 581.449537][T20587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.449555][T20587] RSP: 002b:00007f3b351f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 581.449578][T20587] RAX: ffffffffffffffda RBX: 00007f3b371e5fa0 RCX: 00007f3b36f8f6c9 [ 581.449595][T20587] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 581.449607][T20587] RBP: 00007f3b351f6090 R08: 0000000000010d00 R09: 000000000000000f [ 581.449621][T20587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.449633][T20587] R13: 00007f3b371e6038 R14: 00007f3b371e5fa0 R15: 00007fff92f346e8 [ 581.449668][T20587] [ 581.554357][T20562] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4042'. [ 581.593558][T20558] wg1 speed is unknown, defaulting to 1000 [ 581.596621][T20571] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.602036][T20558] wg1 speed is unknown, defaulting to 1000 [ 581.710772][ T6732] IPVS: starting estimator thread 0... [ 581.932974][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4049'. [ 581.946175][T20591] IPVS: using max 24 ests per chain, 57600 per kthread [ 581.995021][T20571] wg1 speed is unknown, defaulting to 1000 [ 581.997113][T20572] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.002965][T20571] wg1 speed is unknown, defaulting to 1000 [ 582.276158][T20602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4051'. [ 582.669278][T20572] wg1 speed is unknown, defaulting to 1000 [ 582.688331][T20617] IPVS: Scheduler module ip_vs_sip not found [ 582.760652][T20572] wg1 speed is unknown, defaulting to 1000 [ 582.889271][T20630] FAULT_INJECTION: forcing a failure. [ 582.889271][T20630] name failslab, interval 1, probability 0, space 0, times 0 [ 582.902658][T20630] CPU: 0 UID: 0 PID: 20630 Comm: syz.2.4060 Not tainted syzkaller #0 PREEMPT(full) [ 582.902687][T20630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.902713][T20630] Call Trace: [ 582.902721][T20630] [ 582.902730][T20630] dump_stack_lvl+0x189/0x250 [ 582.902764][T20630] ? __pfx____ratelimit+0x10/0x10 [ 582.902794][T20630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.902823][T20630] ? __pfx__printk+0x10/0x10 [ 582.902851][T20630] ? __pfx___might_resched+0x10/0x10 [ 582.902873][T20630] ? fs_reclaim_acquire+0x7d/0x100 [ 582.902911][T20630] should_fail_ex+0x414/0x560 [ 582.902947][T20630] should_failslab+0xa8/0x100 [ 582.902971][T20630] __kmalloc_cache_noprof+0x6f/0x6f0 [ 582.903001][T20630] ? call_usermodehelper_setup+0x8e/0x270 [ 582.903021][T20630] ? trace_kmalloc+0x1f/0xd0 [ 582.903046][T20630] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 582.903083][T20630] call_usermodehelper_setup+0x8e/0x270 [ 582.903103][T20630] ? __pfx_free_modprobe_argv+0x10/0x10 [ 582.903129][T20630] __request_module+0x39f/0x5e0 [ 582.903159][T20630] ? __pfx___request_module+0x10/0x10 [ 582.903184][T20630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 582.903237][T20630] nfnetlink_rcv+0x6d8/0x2590 [ 582.903287][T20630] ? kernel_text_address+0xa5/0xe0 [ 582.903337][T20630] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 582.903415][T20630] ? __lock_acquire+0xab9/0xd20 [ 582.903448][T20630] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.903495][T20630] netlink_unicast+0x82f/0x9e0 [ 582.903536][T20630] ? __pfx_netlink_unicast+0x10/0x10 [ 582.903569][T20630] ? netlink_sendmsg+0x642/0xb30 [ 582.903589][T20630] ? skb_put+0x11b/0x210 [ 582.903614][T20630] netlink_sendmsg+0x805/0xb30 [ 582.903648][T20630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.903674][T20630] ? aa_sock_msg_perm+0xf1/0x1d0 [ 582.903708][T20630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.903728][T20630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.903750][T20630] __sock_sendmsg+0x21c/0x270 [ 582.903783][T20630] sock_sendmsg+0x158/0x230 [ 582.903815][T20630] ? __pfx_sock_sendmsg+0x10/0x10 [ 582.903877][T20630] ? __asan_memset+0x22/0x50 [ 582.903905][T20630] ? iov_iter_bvec+0xb8/0x180 [ 582.903935][T20630] splice_to_socket+0x8f5/0xf00 [ 582.903994][T20630] ? __pfx_splice_to_socket+0x10/0x10 [ 582.904058][T20630] ? get_pid_task+0x20/0x1f0 [ 582.904104][T20630] ? bpf_lsm_file_permission+0x9/0x20 [ 582.904129][T20630] ? security_file_permission+0x75/0x290 [ 582.904156][T20630] ? rw_verify_area+0x255/0x4d0 [ 582.904188][T20630] ? __pfx_splice_to_socket+0x10/0x10 [ 582.904220][T20630] do_splice+0xc79/0x1660 [ 582.904270][T20630] ? __pfx_do_splice+0x10/0x10 [ 582.904302][T20630] __se_sys_splice+0x2e1/0x460 [ 582.904331][T20630] ? __pfx___se_sys_splice+0x10/0x10 [ 582.904365][T20630] ? __x64_sys_splice+0x21/0xf0 [ 582.904390][T20630] do_syscall_64+0xfa/0xfa0 [ 582.904420][T20630] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.904450][T20630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.904472][T20630] ? clear_bhb_loop+0x60/0xb0 [ 582.904499][T20630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.904519][T20630] RIP: 0033:0x7f3b36f8f6c9 [ 582.904539][T20630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.904558][T20630] RSP: 002b:00007f3b351f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 582.904580][T20630] RAX: ffffffffffffffda RBX: 00007f3b371e5fa0 RCX: 00007f3b36f8f6c9 [ 582.904596][T20630] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 582.904609][T20630] RBP: 00007f3b351f6090 R08: 0000000000010d00 R09: 000000000000000f [ 582.904623][T20630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.904636][T20630] R13: 00007f3b371e6038 R14: 00007f3b371e5fa0 R15: 00007fff92f346e8 [ 582.904674][T20630] [ 583.573296][T20636] netlink: 'syz.2.4063': attribute type 11 has an invalid length. [ 583.763024][T20639] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.903554][T20654] wg1: entered promiscuous mode [ 583.911082][T20654] wg1: entered allmulticast mode [ 583.941856][T20653] tipc: Started in network mode [ 583.947032][T20653] tipc: Node identity 0a295805bcd6, cluster identity 4711 [ 583.954780][T20653] tipc: Enabled bearer , priority 0 [ 583.964178][T20653] syzkaller0: entered promiscuous mode [ 583.969810][T20653] syzkaller0: entered allmulticast mode [ 583.986849][T20653] tipc: Resetting bearer [ 584.010832][T20652] tipc: Resetting bearer [ 584.071999][T20652] tipc: Disabling bearer [ 584.311879][T20661] ip6_vti0 speed is unknown, defaulting to 1000 [ 584.335143][T20639] wg1 speed is unknown, defaulting to 1000 [ 584.359220][T20666] FAULT_INJECTION: forcing a failure. [ 584.359220][T20666] name failslab, interval 1, probability 0, space 0, times 0 [ 584.374838][T20666] CPU: 1 UID: 0 PID: 20666 Comm: syz.3.4071 Not tainted syzkaller #0 PREEMPT(full) [ 584.374868][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 584.374882][T20666] Call Trace: [ 584.374890][T20666] [ 584.374899][T20666] dump_stack_lvl+0x189/0x250 [ 584.374933][T20666] ? __pfx____ratelimit+0x10/0x10 [ 584.374963][T20666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.374992][T20666] ? __pfx__printk+0x10/0x10 [ 584.375019][T20666] ? __pfx___might_resched+0x10/0x10 [ 584.375041][T20666] ? fs_reclaim_acquire+0x7d/0x100 [ 584.375077][T20666] should_fail_ex+0x414/0x560 [ 584.375114][T20666] should_failslab+0xa8/0x100 [ 584.375138][T20666] __kmalloc_cache_noprof+0x6f/0x6f0 [ 584.375167][T20666] ? call_usermodehelper_setup+0x8e/0x270 [ 584.375185][T20666] ? trace_kmalloc+0x1f/0xd0 [ 584.375217][T20666] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 584.375252][T20666] call_usermodehelper_setup+0x8e/0x270 [ 584.375272][T20666] ? __pfx_free_modprobe_argv+0x10/0x10 [ 584.375297][T20666] __request_module+0x39f/0x5e0 [ 584.375326][T20666] ? __pfx___request_module+0x10/0x10 [ 584.375350][T20666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.375359][T20639] wg1 speed is unknown, defaulting to 1000 [ 584.375400][T20666] nfnetlink_rcv+0x6d8/0x2590 [ 584.375461][T20666] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 584.375505][T20666] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 584.375536][T20666] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 584.375605][T20666] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 584.375652][T20666] ? rcu_is_watching+0x15/0xb0 [ 584.375683][T20666] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 584.375721][T20666] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 584.375756][T20666] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.375802][T20666] netlink_unicast+0x82f/0x9e0 [ 584.375848][T20666] ? __pfx_netlink_unicast+0x10/0x10 [ 584.375885][T20666] ? netlink_sendmsg+0x642/0xb30 [ 584.375906][T20666] ? skb_put+0x11b/0x210 [ 584.375935][T20666] netlink_sendmsg+0x805/0xb30 [ 584.375970][T20666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.375998][T20666] ? aa_sock_msg_perm+0xf1/0x1d0 [ 584.376036][T20666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 584.376059][T20666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.376085][T20666] __sock_sendmsg+0x21c/0x270 [ 584.376122][T20666] sock_sendmsg+0x158/0x230 [ 584.376156][T20666] ? __pfx_sock_sendmsg+0x10/0x10 [ 584.376210][T20666] ? __asan_memset+0x22/0x50 [ 584.376241][T20666] ? iov_iter_bvec+0xb8/0x180 [ 584.376274][T20666] splice_to_socket+0x8f5/0xf00 [ 584.376358][T20666] ? __pfx_splice_to_socket+0x10/0x10 [ 584.376426][T20666] ? get_pid_task+0x20/0x1f0 [ 584.376477][T20666] ? bpf_lsm_file_permission+0x9/0x20 [ 584.376503][T20666] ? security_file_permission+0x75/0x290 [ 584.376534][T20666] ? rw_verify_area+0x255/0x4d0 [ 584.376569][T20666] ? __pfx_splice_to_socket+0x10/0x10 [ 584.376605][T20666] do_splice+0xc79/0x1660 [ 584.376660][T20666] ? __pfx_do_splice+0x10/0x10 [ 584.376696][T20666] __se_sys_splice+0x2e1/0x460 [ 584.376728][T20666] ? __pfx___se_sys_splice+0x10/0x10 [ 584.376758][T20666] ? __x64_sys_splice+0x21/0xf0 [ 584.376786][T20666] do_syscall_64+0xfa/0xfa0 [ 584.376819][T20666] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.376853][T20666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.376880][T20666] ? clear_bhb_loop+0x60/0xb0 [ 584.376911][T20666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.376935][T20666] RIP: 0033:0x7f6d6898f6c9 [ 584.376957][T20666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.376978][T20666] RSP: 002b:00007f6d697c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 584.377005][T20666] RAX: ffffffffffffffda RBX: 00007f6d68be5fa0 RCX: 00007f6d6898f6c9 [ 584.377023][T20666] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 584.377038][T20666] RBP: 00007f6d697c9090 R08: 0000000000010d00 R09: 000000000000000f [ 584.377054][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.377067][T20666] R13: 00007f6d68be6038 R14: 00007f6d68be5fa0 R15: 00007ffc20a6d5a8 [ 584.377109][T20666] [ 585.011649][T20661] wg1 speed is unknown, defaulting to 1000 [ 585.110765][T20661] wg1 speed is unknown, defaulting to 1000 [ 585.255227][T20679] xt_CT: No such helper "snmp_trap" [ 585.426890][T20679] bond0: entered promiscuous mode [ 585.473031][T20679] bond0: left promiscuous mode [ 585.667432][T20709] __nla_validate_parse: 6 callbacks suppressed [ 585.667452][T20709] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4082'. [ 585.778974][T20709] FAULT_INJECTION: forcing a failure. [ 585.778974][T20709] name failslab, interval 1, probability 0, space 0, times 0 [ 585.798396][T20709] CPU: 1 UID: 0 PID: 20709 Comm: syz.5.4082 Not tainted syzkaller #0 PREEMPT(full) [ 585.798425][T20709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 585.798439][T20709] Call Trace: [ 585.798447][T20709] [ 585.798456][T20709] dump_stack_lvl+0x189/0x250 [ 585.798488][T20709] ? __pfx____ratelimit+0x10/0x10 [ 585.798517][T20709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.798543][T20709] ? __pfx__printk+0x10/0x10 [ 585.798569][T20709] ? __pfx___might_resched+0x10/0x10 [ 585.798596][T20709] should_fail_ex+0x414/0x560 [ 585.798630][T20709] should_failslab+0xa8/0x100 [ 585.798652][T20709] kmem_cache_alloc_node_noprof+0x77/0x710 [ 585.798680][T20709] ? __alloc_skb+0x112/0x2d0 [ 585.798701][T20709] ? nfnetlink_rcv+0x2074/0x2590 [ 585.798736][T20709] __alloc_skb+0x112/0x2d0 [ 585.798758][T20709] netlink_ack+0x146/0xa50 [ 585.798775][T20709] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 585.798824][T20709] nfnetlink_rcv+0x1fc3/0x2590 [ 585.798880][T20709] ? __dev_queue_xmit+0x284/0x3740 [ 585.798915][T20709] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 585.798960][T20709] ? ref_tracker_free+0x63a/0x7d0 [ 585.798979][T20709] ? __asan_memcpy+0x40/0x70 [ 585.799004][T20709] ? __pfx_ref_tracker_free+0x10/0x10 [ 585.799038][T20709] ? skb_clone+0x246/0x3a0 [ 585.799064][T20709] ? __netlink_deliver_tap+0x807/0x850 [ 585.799083][T20709] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.799121][T20709] netlink_unicast+0x82f/0x9e0 [ 585.799159][T20709] ? __pfx_netlink_unicast+0x10/0x10 [ 585.799190][T20709] ? netlink_sendmsg+0x642/0xb30 [ 585.799207][T20709] ? skb_put+0x11b/0x210 [ 585.799230][T20709] netlink_sendmsg+0x805/0xb30 [ 585.799260][T20709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.799283][T20709] ? aa_sock_msg_perm+0xf1/0x1d0 [ 585.799314][T20709] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.799332][T20709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.799354][T20709] __sock_sendmsg+0x21c/0x270 [ 585.799383][T20709] sock_sendmsg+0x158/0x230 [ 585.799411][T20709] ? __pfx_sock_sendmsg+0x10/0x10 [ 585.799450][T20709] ? __asan_memset+0x22/0x50 [ 585.799475][T20709] ? iov_iter_bvec+0xb8/0x180 [ 585.799500][T20709] splice_to_socket+0x8f5/0xf00 [ 585.799553][T20709] ? __pfx_splice_to_socket+0x10/0x10 [ 585.799606][T20709] ? get_pid_task+0x20/0x1f0 [ 585.799647][T20709] ? bpf_lsm_file_permission+0x9/0x20 [ 585.799667][T20709] ? security_file_permission+0x75/0x290 [ 585.799691][T20709] ? rw_verify_area+0x255/0x4d0 [ 585.799720][T20709] ? __pfx_splice_to_socket+0x10/0x10 [ 585.799748][T20709] do_splice+0xc79/0x1660 [ 585.799790][T20709] ? __pfx_do_splice+0x10/0x10 [ 585.799818][T20709] __se_sys_splice+0x2e1/0x460 [ 585.799843][T20709] ? __pfx___se_sys_splice+0x10/0x10 [ 585.799874][T20709] ? __x64_sys_splice+0x21/0xf0 [ 585.799895][T20709] do_syscall_64+0xfa/0xfa0 [ 585.799922][T20709] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.799949][T20709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.799968][T20709] ? clear_bhb_loop+0x60/0xb0 [ 585.799991][T20709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.800010][T20709] RIP: 0033:0x7f0df718f6c9 [ 585.800028][T20709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.800044][T20709] RSP: 002b:00007f0df7fd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 585.800065][T20709] RAX: ffffffffffffffda RBX: 00007f0df73e5fa0 RCX: 00007f0df718f6c9 [ 585.800079][T20709] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 585.800090][T20709] RBP: 00007f0df7fd2090 R08: 0000000000010d00 R09: 000000000000000f [ 585.800103][T20709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.800115][T20709] R13: 00007f0df73e6038 R14: 00007f0df73e5fa0 R15: 00007ffe35c0d268 [ 585.800147][T20709] [ 586.490110][T20725] team0: No ports can be present during mode change [ 586.609237][T20727] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4089'. [ 586.696068][T20728] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 586.949386][T20748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4095'. [ 587.013515][T20753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4097'. [ 587.174503][ T43] IPVS: starting estimator thread 0... [ 587.187160][T20762] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 587.220162][T20769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4100'. [ 587.261846][T20763] IPVS: using max 25 ests per chain, 60000 per kthread [ 587.285945][T20769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4100'. [ 587.348362][T20768] ip6_vti0 speed is unknown, defaulting to 1000 [ 587.384219][T20775] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 587.397297][T20775] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4103'. [ 587.580703][T20782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.636518][T20784] IPVS: length: 8 != 50864303472 [ 587.739507][T20768] wg1 speed is unknown, defaulting to 1000 [ 587.755005][T20768] wg1 speed is unknown, defaulting to 1000 [ 587.767142][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4107'. [ 588.262331][T20810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4116'. [ 588.305020][T20813] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4114'. [ 588.370267][T20817] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 588.392579][T20818] team0: No ports can be present during mode change [ 588.619820][T20826] netlink: 'syz.3.4120': attribute type 1 has an invalid length. [ 588.703086][T20830] FAULT_INJECTION: forcing a failure. [ 588.703086][T20830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.718891][T20830] CPU: 0 UID: 0 PID: 20830 Comm: syz.4.4122 Not tainted syzkaller #0 PREEMPT(full) [ 588.718922][T20830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.718935][T20830] Call Trace: [ 588.718944][T20830] [ 588.718953][T20830] dump_stack_lvl+0x189/0x250 [ 588.718987][T20830] ? __pfx____ratelimit+0x10/0x10 [ 588.719017][T20830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.719044][T20830] ? __pfx__printk+0x10/0x10 [ 588.719065][T20830] ? __might_fault+0xb0/0x130 [ 588.719108][T20830] should_fail_ex+0x414/0x560 [ 588.719145][T20830] _copy_from_user+0x2d/0xb0 [ 588.719173][T20830] kstrtouint_from_user+0xc4/0x170 [ 588.719200][T20830] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 588.719241][T20830] proc_fail_nth_write+0x88/0x200 [ 588.719268][T20830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 588.719301][T20830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 588.719330][T20830] vfs_write+0x27e/0xb30 [ 588.719367][T20830] ? __pfx_vfs_write+0x10/0x10 [ 588.719399][T20830] ? __fget_files+0x2a/0x420 [ 588.719425][T20830] ? __fget_files+0x3a0/0x420 [ 588.719444][T20830] ? __fget_files+0x2a/0x420 [ 588.719473][T20830] ksys_write+0x145/0x250 [ 588.719504][T20830] ? __pfx_ksys_write+0x10/0x10 [ 588.719536][T20830] ? do_syscall_64+0xbe/0xfa0 [ 588.719569][T20830] do_syscall_64+0xfa/0xfa0 [ 588.719597][T20830] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.719624][T20830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.719644][T20830] ? clear_bhb_loop+0x60/0xb0 [ 588.719668][T20830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.719688][T20830] RIP: 0033:0x7f57ff38e17f [ 588.719708][T20830] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 588.719727][T20830] RSP: 002b:00007f5800198030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 588.719749][T20830] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57ff38e17f [ 588.719764][T20830] RDX: 0000000000000001 RSI: 00007f58001980a0 RDI: 0000000000000008 [ 588.719778][T20830] RBP: 00007f5800198090 R08: 0000000000000000 R09: 000000000000000f [ 588.719791][T20830] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 588.719804][T20830] R13: 00007f57ff5e6038 R14: 00007f57ff5e5fa0 R15: 00007ffe084d09a8 [ 588.719840][T20830] [ 589.115333][T20840] syzkaller1: entered allmulticast mode [ 589.174654][T20843] bond1: (slave bond_slave_1): Device is not our slave [ 589.181860][T20843] bond1: option active_slave: invalid value (bond_slave_1) [ 589.191124][T20843] bond1 (unregistering): Released all slaves [ 589.202216][T18813] Bluetooth: hci0: command tx timeout [ 589.400362][T20861] team0: No ports can be present during mode change [ 589.787084][T20890] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 589.978789][T20910] IPVS: Error connecting to the multicast addr [ 592.051715][T20917] team0: No ports can be present during mode change [ 592.060262][T20920] bond0: (slave team0): Releasing backup interface [ 592.073745][T20920] bond0: (slave bond_slave_0): Releasing backup interface [ 592.088330][T20920] bond0: (slave bond_slave_1): Releasing backup interface [ 592.101259][T20920] team0: Port device team_slave_0 removed [ 592.110686][T20920] team0: Port device team_slave_1 removed [ 592.117467][T20920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.131490][T20920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.147742][T20920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.190850][T13271] wg1 speed is unknown, defaulting to 1000 [ 592.318753][T20956] __nla_validate_parse: 7 callbacks suppressed [ 592.318774][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4153'. [ 592.336726][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4153'. [ 592.472109][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4155'. [ 592.543377][T20966] bridge0: entered promiscuous mode [ 592.563705][T20966] bridge0: entered allmulticast mode [ 592.845746][T20992] netlink: 1053 bytes leftover after parsing attributes in process `syz.5.4163'. [ 592.900141][T20998] warn_alloc: 1 callbacks suppressed [ 592.900159][T20998] syz.6.4164: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 592.972547][T20998] CPU: 1 UID: 0 PID: 20998 Comm: syz.6.4164 Not tainted syzkaller #0 PREEMPT(full) [ 592.972579][T20998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.972592][T20998] Call Trace: [ 592.972602][T20998] [ 592.972612][T20998] dump_stack_lvl+0x189/0x250 [ 592.972651][T20998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.972683][T20998] ? __pfx__printk+0x10/0x10 [ 592.972705][T20998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 592.972736][T20998] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 592.972767][T20998] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 592.972801][T20998] warn_alloc+0x214/0x310 [ 592.972834][T20998] ? stack_depot_save_flags+0x40/0x860 [ 592.972873][T20998] ? __pfx_warn_alloc+0x10/0x10 [ 592.972908][T20998] ? kasan_save_track+0x3e/0x80 [ 592.972936][T20998] ? __kasan_kmalloc+0x93/0xb0 [ 592.972969][T20998] ? xsk_setsockopt+0x4dc/0x8d0 [ 592.972995][T20998] ? do_sock_setsockopt+0x17c/0x1b0 [ 592.973016][T20998] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 592.973058][T20998] ? do_syscall_64+0xfa/0xfa0 [ 592.973088][T20998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.973122][T20998] __vmalloc_node_range_noprof+0x125/0x12d0 [ 592.973197][T20998] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 592.973233][T20998] ? __kasan_kmalloc+0x93/0xb0 [ 592.973273][T20998] vmalloc_user_noprof+0xad/0xf0 [ 592.973305][T20998] ? xskq_create+0xbf/0x170 [ 592.973336][T20998] xskq_create+0xbf/0x170 [ 592.973370][T20998] xsk_init_queue+0xb0/0x110 [ 592.973401][T20998] xsk_setsockopt+0x4dc/0x8d0 [ 592.973434][T20998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 592.973465][T20998] ? __pfx_aa_sk_perm+0x10/0x10 [ 592.973498][T20998] ? aa_sock_opt_perm+0xff/0x1b0 [ 592.973535][T20998] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 592.973556][T20998] ? __pfx_xsk_setsockopt+0x10/0x10 [ 592.973585][T20998] do_sock_setsockopt+0x17c/0x1b0 [ 592.973614][T20998] __x64_sys_setsockopt+0x13f/0x1b0 [ 592.973644][T20998] do_syscall_64+0xfa/0xfa0 [ 592.973674][T20998] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.973706][T20998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.973728][T20998] ? clear_bhb_loop+0x60/0xb0 [ 592.973755][T20998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.973776][T20998] RIP: 0033:0x7f9ac218f6c9 [ 592.973797][T20998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.973816][T20998] RSP: 002b:00007f9ac2fcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 592.973839][T20998] RAX: ffffffffffffffda RBX: 00007f9ac23e5fa0 RCX: 00007f9ac218f6c9 [ 592.973856][T20998] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 592.973870][T20998] RBP: 00007f9ac2211f91 R08: 0000000000000004 R09: 0000000000000000 [ 592.973884][T20998] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.973898][T20998] R13: 00007f9ac23e6038 R14: 00007f9ac23e5fa0 R15: 00007ffc992e6fc8 [ 592.973935][T20998] [ 592.973995][T20998] Mem-Info: [ 592.983793][T21002] ip6_vti0 speed is unknown, defaulting to 1000 [ 593.130318][T21003] gtp0: entered allmulticast mode [ 593.330643][T20998] active_anon:4972 inactive_anon:0 isolated_anon:0 [ 593.330643][T20998] active_file:3568 inactive_file:40093 isolated_file:0 [ 593.330643][T20998] unevictable:768 dirty:306 writeback:0 [ 593.330643][T20998] slab_reclaimable:12384 slab_unreclaimable:170397 [ 593.330643][T20998] mapped:33566 shmem:2381 pagetables:1013 [ 593.330643][T20998] sec_pagetables:0 bounce:0 [ 593.330643][T20998] kernel_misc_reclaimable:0 [ 593.330643][T20998] free:1250870 free_pcp:9581 free_cma:0 [ 593.449860][T21002] wg1 speed is unknown, defaulting to 1000 [ 593.467971][T21002] wg1 speed is unknown, defaulting to 1000 [ 593.501138][T20998] Node 0 active_anon:23688kB inactive_anon:0kB active_file:14272kB inactive_file:160168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138364kB dirty:1220kB writeback:0kB shmem:11888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13720kB pagetables:3704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.533606][T20998] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.570856][T20998] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.601337][T20998] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 593.607261][T20998] Node 0 DMA32 free:1078364kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25288kB inactive_anon:0kB active_file:14272kB inactive_file:160168kB unevictable:1536kB writepending:1220kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:34680kB local_pcp:19560kB free_cma:0kB [ 593.646964][T20998] lowmem_reserve[]: 0 0 0 0 0 [ 593.652187][T20998] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.686453][T20998] lowmem_reserve[]: 0 0 0 0 0 [ 593.706409][T20998] Node 1 Normal free:3904256kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9204kB local_pcp:2540kB free_cma:0kB [ 593.770678][T20998] lowmem_reserve[]: 0 0 0 0 0 [ 593.775527][T20998] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.815231][T20998] Node 0 DMA32: 128*4kB (UME) 0*8kB 1*16kB (E) 318*32kB (UME) 78*64kB (UM) 58*128kB (UME) 35*256kB (UM) 15*512kB (ME) 4*1024kB (UM) 6*2048kB (UM) 249*4096kB (UM) = 1076048kB [ 593.833429][T20998] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.848519][T20998] Node 1 Normal: 160*4kB (UME) 38*8kB (UME) 47*16kB (UME) 241*32kB (UME) 67*64kB (UME) 15*128kB (UME) 6*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3904256kB [ 593.888404][T20998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.969089][T20998] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.988861][T20998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 594.019246][T20998] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 594.041311][T20998] 45014 total pagecache pages [ 594.046071][T20998] 0 pages in swap cache [ 594.069853][T20998] Free swap = 124996kB [ 594.085399][T20998] Total swap = 124996kB [ 594.095480][T20998] 2097051 pages RAM [ 594.099348][T20998] 0 pages HighMem/MovableOnly [ 594.115827][T20998] 424124 pages reserved [ 594.120051][T20998] 0 pages cma reserved [ 594.326031][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4171'. [ 594.535946][T21040] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4169'. [ 594.632378][T21042] batman_adv: batadv0: Adding interface: vlan0 [ 594.638605][T21042] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.664162][T21042] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 595.515928][T21050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4178'. [ 595.666746][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4179'. [ 596.124903][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4184'. [ 596.153468][T21064] bond2: entered promiscuous mode [ 596.159069][T21064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.202125][T21064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.209395][T21064] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 596.224089][T21064] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 596.502012][T21065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.514127][T21064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4184'. [ 596.998025][T21101] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.253660][T21101] wg1 speed is unknown, defaulting to 1000 [ 597.263437][T21101] wg1 speed is unknown, defaulting to 1000 [ 597.413902][T21101] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.573577][T21101] wg1 speed is unknown, defaulting to 1000 [ 597.581049][T21101] wg1 speed is unknown, defaulting to 1000 [ 598.702237][T21126] netlink: 'syz.6.4199': attribute type 32 has an invalid length. [ 598.710089][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4199'. [ 598.733934][T21126] bond1: Setting coupled_control to off (0) [ 599.021769][T21140] tipc: Invalid UDP bearer configuration [ 599.021810][T21140] tipc: Enabling of bearer rejected, failed to enable media [ 599.037084][T21140] netlink: 'syz.6.4203': attribute type 32 has an invalid length. [ 599.045719][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4203'. [ 599.070601][T21140] bond2: option coupled_control: invalid value (12) [ 599.078739][T21140] bond2 (unregistering): Released all slaves [ 599.309666][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4205'. [ 600.635648][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4212'. [ 600.663057][T21171] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.805119][T21171] wg1 speed is unknown, defaulting to 1000 [ 600.812307][T21171] wg1 speed is unknown, defaulting to 1000 [ 601.416241][T21184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4216'. [ 601.428779][T21184] netlink: 'syz.6.4216': attribute type 1 has an invalid length. [ 601.436652][T21184] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4216'. [ 601.506225][T21186] netlink: 'syz.6.4217': attribute type 1 has an invalid length. [ 601.514219][T21186] netlink: 364 bytes leftover after parsing attributes in process `syz.6.4217'. [ 601.523566][T21186] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4217'. [ 601.571157][T21188] netlink: 'syz.6.4218': attribute type 1 has an invalid length. [ 601.599375][T21188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.610327][T21188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4218'. [ 601.623130][T21188] bond2: entered allmulticast mode [ 601.630688][T21188] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4218'. [ 603.545417][T21205] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 603.760607][T21210] xt_TCPMSS: Only works on TCP SYN packets [ 603.766954][T21210] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4225'. [ 603.793600][T21210] batman_adv: batadv0: Removing interface: vlan0 [ 603.891064][T21212] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4226'. [ 603.901653][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4226'. [ 603.984183][T21214] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4227'. [ 604.112862][T19435] bond5: left allmulticast mode [ 604.117787][T19435] bond5: left promiscuous mode [ 604.124378][T19435] bridge0: port 1(bond5) entered disabled state [ 604.322671][ T12] smc: removing ib device syz2 [ 604.584460][T19435] dvmrp0 (unregistering): left allmulticast mode [ 604.707826][T21225] netlink: 'syz.6.4230': attribute type 6 has an invalid length. [ 605.138243][T19435] bond2 (unregistering): (slave bridge8): Releasing active interface [ 606.938952][T19435] bond0 (unregistering): Released all slaves [ 607.047015][T19435] bond1 (unregistering): Released all slaves [ 607.061006][T19435] bond2 (unregistering): Released all slaves [ 607.165483][T19435] bond3 (unregistering): Released all slaves [ 607.266689][T19435] bond4 (unregistering): Released all slaves [ 607.367732][T19435] bond5 (unregistering): Released all slaves [ 607.382571][T19435] bond6 (unregistering): Released all slaves [ 607.417858][T21221] wg1 speed is unknown, defaulting to 1000 [ 607.428277][T21221] wg1 speed is unknown, defaulting to 1000 [ 607.511854][T19435] tipc: Left network mode [ 608.205733][T21233] netlink: 'syz.6.4232': attribute type 10 has an invalid length. [ 608.217703][T21233] team0: Port device dummy0 added [ 608.226990][T21233] netlink: 'syz.6.4232': attribute type 10 has an invalid length. [ 608.239673][T21233] team0: Port device dummy0 removed [ 608.251112][T21233] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 611.290629][T18813] Bluetooth: hci1: command 0x0406 tx timeout [ 708.562546][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 741.040743][ T31] INFO: task kworker/0:11:6732 blocked for more than 143 seconds. [ 741.048621][ T31] Not tainted syzkaller #0 [ 741.054013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.062864][ T31] task:kworker/0:11 state:D stack:24008 pid:6732 tgid:6732 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 741.074926][ T31] Workqueue: events rfkill_sync_work [ 741.080238][ T31] Call Trace: [ 741.083563][ T31] [ 741.086506][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 741.091074][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 741.096908][ T31] ? __pfx___schedule+0x10/0x10 [ 741.102321][ T31] ? schedule+0x91/0x360 [ 741.106626][ T31] schedule+0x165/0x360 [ 741.111152][ T31] schedule_preempt_disabled+0x13/0x30 [ 741.116700][ T31] __mutex_lock+0x7e6/0x1350 [ 741.121414][ T31] ? __mutex_lock+0x5bb/0x1350 [ 741.126225][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 741.131613][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 741.136680][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.142033][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 741.180545][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 741.186968][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 741.197680][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 741.203567][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 741.209344][ T31] rfkill_set_block+0x1d2/0x440 [ 741.214506][ T31] rfkill_sync_work+0x114/0x200 [ 741.219415][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 741.225428][ T31] process_scheduled_works+0xae1/0x17b0 [ 741.232153][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 741.238202][ T31] worker_thread+0x8a0/0xda0 [ 741.243420][ T31] ? __kthread_parkme+0x7b/0x200 [ 741.248418][ T31] kthread+0x711/0x8a0 [ 741.252716][ T31] ? __pfx_worker_thread+0x10/0x10 [ 741.257904][ T31] ? __pfx_kthread+0x10/0x10 [ 741.262760][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.268014][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.273427][ T31] ? __pfx_kthread+0x10/0x10 [ 741.278074][ T31] ret_from_fork+0x4bc/0x870 [ 741.282969][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 741.288133][ T31] ? __switch_to_asm+0x39/0x70 [ 741.293043][ T31] ? __switch_to_asm+0x33/0x70 [ 741.297825][ T31] ? __pfx_kthread+0x10/0x10 [ 741.302569][ T31] ret_from_fork_asm+0x1a/0x30 [ 741.307388][ T31] [ 741.310546][ T31] INFO: task kworker/0:24:19934 blocked for more than 143 seconds. [ 741.318453][ T31] Not tainted syzkaller #0 [ 741.325054][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.333793][ T31] task:kworker/0:24 state:D stack:26152 pid:19934 tgid:19934 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 741.345898][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 741.353067][ T31] Call Trace: [ 741.356373][ T31] [ 741.359312][ T31] __schedule+0x1798/0x4cc0 [ 741.364384][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 741.369806][ T31] ? __pfx___schedule+0x10/0x10 [ 741.374742][ T31] ? schedule+0x91/0x360 [ 741.379001][ T31] schedule+0x165/0x360 [ 741.383227][ T31] schedule_preempt_disabled+0x13/0x30 [ 741.388696][ T31] __mutex_lock+0x7e6/0x1350 [ 741.393352][ T31] ? __mutex_lock+0x5bb/0x1350 [ 741.398126][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 741.404451][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 741.409509][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 741.415298][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 741.421271][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 741.427375][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 741.433147][ T31] process_scheduled_works+0xae1/0x17b0 [ 741.438899][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 741.445066][ T31] worker_thread+0x8a0/0xda0 [ 741.449708][ T31] kthread+0x711/0x8a0 [ 741.453851][ T31] ? __pfx_worker_thread+0x10/0x10 [ 741.458974][ T31] ? __pfx_kthread+0x10/0x10 [ 741.463762][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.468978][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.474300][ T31] ? __pfx_kthread+0x10/0x10 [ 741.478906][ T31] ret_from_fork+0x4bc/0x870 [ 741.483581][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 741.488705][ T31] ? __switch_to_asm+0x39/0x70 [ 741.493531][ T31] ? __switch_to_asm+0x33/0x70 [ 741.498300][ T31] ? __pfx_kthread+0x10/0x10 [ 741.502963][ T31] ret_from_fork_asm+0x1a/0x30 [ 741.507768][ T31] [ 741.510854][ T31] INFO: task syz.3.4151:20949 blocked for more than 143 seconds. [ 741.518585][ T31] Not tainted syzkaller #0 [ 741.523570][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.532328][ T31] task:syz.3.4151 state:D stack:26696 pid:20949 tgid:20947 ppid:17220 task_flags:0x400040 flags:0x00080002 [ 741.544338][ T31] Call Trace: [ 741.547665][ T31] [ 741.550701][ T31] __schedule+0x1798/0x4cc0 [ 741.555236][ T31] ? __kernel_text_address+0xd/0x40 [ 741.560511][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 741.566709][ T31] ? arch_stack_walk+0xfc/0x150 [ 741.571880][ T31] ? __lock_acquire+0xab9/0xd20 [ 741.576772][ T31] ? __pfx___schedule+0x10/0x10 [ 741.581756][ T31] ? schedule+0x91/0x360 [ 741.586012][ T31] schedule+0x165/0x360 [ 741.590199][ T31] schedule_timeout+0x9a/0x270 [ 741.595022][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 741.600522][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 741.605752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.611021][ T31] ? wait_for_completion+0x267/0x5d0 [ 741.616324][ T31] wait_for_completion+0x2bf/0x5d0 [ 741.621494][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 741.627144][ T31] ? __flush_work+0xd2/0xbc0 [ 741.631792][ T31] ? __flush_work+0xd2/0xbc0 [ 741.636388][ T31] __flush_work+0x9b9/0xbc0 [ 741.640919][ T31] ? __flush_work+0xd2/0xbc0 [ 741.645520][ T31] ? __pfx___flush_work+0x10/0x10 [ 741.650618][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 741.655921][ T31] ? __pfx___cancel_work+0x10/0x10 [ 741.661077][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 741.666739][ T31] __cancel_work_sync+0xbe/0x110 [ 741.671728][ T31] rfkill_unregister+0x92/0x220 [ 741.676596][ T31] nfc_unregister_device+0x96/0x2a0 [ 741.682054][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 741.687793][ T31] virtual_ncidev_close+0x56/0x90 [ 741.692982][ T31] __fput+0x44c/0xa70 [ 741.697022][ T31] fput_close_sync+0x119/0x200 [ 741.701885][ T31] ? dnotify_flush+0x1db/0x5e0 [ 741.706670][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 741.712166][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 741.717407][ T31] __x64_sys_close+0x7f/0x110 [ 741.722168][ T31] do_syscall_64+0xfa/0xfa0 [ 741.726708][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.731972][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.738049][ T31] ? clear_bhb_loop+0x60/0xb0 [ 741.742766][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.748663][ T31] RIP: 0033:0x7f6d6898f6c9 [ 741.753135][ T31] RSP: 002b:00007f6d697a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 741.761579][ T31] RAX: ffffffffffffffda RBX: 00007f6d68be6090 RCX: 00007f6d6898f6c9 [ 741.769554][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 741.777593][ T31] RBP: 00007f6d68a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 741.785599][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.793797][ T31] R13: 00007f6d68be6128 R14: 00007f6d68be6090 R15: 00007ffc20a6d5a8 [ 741.801888][ T31] [ 741.804928][ T31] INFO: task syz.5.4163:20987 blocked for more than 144 seconds. [ 741.815355][ T31] Not tainted syzkaller #0 [ 741.820299][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.829049][ T31] task:syz.5.4163 state:D stack:26504 pid:20987 tgid:20985 ppid:17747 task_flags:0x400040 flags:0x00080002 [ 741.843456][ T31] Call Trace: [ 741.846751][ T31] [ 741.849686][ T31] __schedule+0x1798/0x4cc0 [ 741.854253][ T31] ? __lock_acquire+0xab9/0xd20 [ 741.859217][ T31] ? __lock_acquire+0xab9/0xd20 [ 741.864120][ T31] ? __pfx___schedule+0x10/0x10 [ 741.868992][ T31] ? schedule+0x91/0x360 [ 741.873322][ T31] schedule+0x165/0x360 [ 741.877506][ T31] schedule_preempt_disabled+0x13/0x30 [ 741.883056][ T31] __mutex_lock+0x7e6/0x1350 [ 741.887667][ T31] ? __mutex_lock+0x5bb/0x1350 [ 741.892476][ T31] ? rfkill_register+0x37/0x8e0 [ 741.897350][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 741.902618][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 741.908012][ T31] ? device_initialize+0x24b/0x440 [ 741.913240][ T31] rfkill_register+0x37/0x8e0 [ 741.917939][ T31] nfc_register_device+0x14a/0x320 [ 741.923135][ T31] nci_register_device+0x87f/0x9d0 [ 741.928262][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 741.933967][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 741.939271][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 741.944800][ T31] virtual_ncidev_open+0x129/0x1a0 [ 741.949931][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 741.955664][ T31] misc_open+0x2d5/0x350 [ 741.959929][ T31] chrdev_open+0x4cc/0x5e0 [ 741.964429][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 741.969393][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 741.975758][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 741.980742][ T31] do_dentry_open+0x953/0x13f0 [ 741.985524][ T31] vfs_open+0x3b/0x340 [ 741.989593][ T31] ? path_openat+0x2ecd/0x3830 [ 741.994413][ T31] path_openat+0x2ee5/0x3830 [ 741.999037][ T31] ? __pfx_path_openat+0x10/0x10 [ 742.004118][ T31] do_filp_open+0x1fa/0x410 [ 742.008657][ T31] ? __lock_acquire+0xab9/0xd20 [ 742.013804][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 742.018903][ T31] ? _raw_spin_unlock+0x28/0x50 [ 742.023909][ T31] ? alloc_fd+0x64c/0x6c0 [ 742.028278][ T31] do_sys_openat2+0x121/0x1c0 [ 742.032998][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.038213][ T31] ? exc_page_fault+0x82/0x100 [ 742.043046][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 742.048339][ T31] __x64_sys_openat+0x138/0x170 [ 742.053256][ T31] do_syscall_64+0xfa/0xfa0 [ 742.057775][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.063046][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.069120][ T31] ? clear_bhb_loop+0x60/0xb0 [ 742.073847][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.079771][ T31] RIP: 0033:0x7f0df718f6c9 [ 742.084330][ T31] RSP: 002b:00007f0df7fd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.092989][ T31] RAX: ffffffffffffffda RBX: 00007f0df73e5fa0 RCX: 00007f0df718f6c9 [ 742.101026][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 742.109176][ T31] RBP: 00007f0df7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.117206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.125456][ T31] R13: 00007f0df73e6038 R14: 00007f0df73e5fa0 R15: 00007ffe35c0d268 [ 742.133741][ T31] [ 742.136892][ T31] INFO: task syz.2.4195:21103 blocked for more than 144 seconds. [ 742.144933][ T31] Not tainted syzkaller #0 [ 742.149891][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 742.158873][ T31] task:syz.2.4195 state:D stack:25304 pid:21103 tgid:21098 ppid:16455 task_flags:0x400040 flags:0x00080002 [ 742.171014][ T31] Call Trace: [ 742.174500][ T31] [ 742.177477][ T31] __schedule+0x1798/0x4cc0 [ 742.182036][ T31] ? security_file_open+0xb1/0x270 [ 742.187157][ T31] ? __lock_acquire+0xab9/0xd20 [ 742.192045][ T31] ? __lock_acquire+0xab9/0xd20 [ 742.196909][ T31] ? __pfx___schedule+0x10/0x10 [ 742.201812][ T31] ? schedule+0x91/0x360 [ 742.206068][ T31] schedule+0x165/0x360 [ 742.210231][ T31] schedule_preempt_disabled+0x13/0x30 [ 742.215727][ T31] __mutex_lock+0x7e6/0x1350 [ 742.220324][ T31] ? __mutex_lock+0x5bb/0x1350 [ 742.225321][ T31] ? misc_open+0x51/0x350 [ 742.229688][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 742.234824][ T31] misc_open+0x51/0x350 [ 742.239015][ T31] chrdev_open+0x4cc/0x5e0 [ 742.243499][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 742.248480][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 742.254903][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 742.259883][ T31] do_dentry_open+0x953/0x13f0 [ 742.264722][ T31] vfs_open+0x3b/0x340 [ 742.268806][ T31] ? path_openat+0x2ecd/0x3830 [ 742.273606][ T31] path_openat+0x2ee5/0x3830 [ 742.278235][ T31] ? __pfx_path_openat+0x10/0x10 [ 742.283245][ T31] do_filp_open+0x1fa/0x410 [ 742.287761][ T31] ? __lock_acquire+0xab9/0xd20 [ 742.292689][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 742.297746][ T31] ? _raw_spin_unlock+0x28/0x50 [ 742.302732][ T31] ? alloc_fd+0x64c/0x6c0 [ 742.307088][ T31] do_sys_openat2+0x121/0x1c0 [ 742.311799][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.317018][ T31] ? rcu_is_watching+0x15/0xb0 [ 742.323374][ T31] __x64_sys_openat+0x138/0x170 [ 742.328350][ T31] do_syscall_64+0xfa/0xfa0 [ 742.332914][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.338133][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.344230][ T31] ? clear_bhb_loop+0x60/0xb0 [ 742.348916][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.354839][ T31] RIP: 0033:0x7f3b36f8f6c9 [ 742.359259][ T31] RSP: 002b:00007f3b351d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.369421][ T31] RAX: ffffffffffffffda RBX: 00007f3b371e6090 RCX: 00007f3b36f8f6c9 [ 742.377473][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 742.385596][ T31] RBP: 00007f3b37011f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.393708][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.402001][ T31] R13: 00007f3b371e6128 R14: 00007f3b371e6090 R15: 00007fff92f346e8 [ 742.410016][ T31] [ 742.413209][ T31] [ 742.413209][ T31] Showing all locks held in the system: [ 742.421171][ T31] 1 lock held by khungtaskd/31: [ 742.426036][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 742.435961][ T31] 2 locks held by getty/5587: [ 742.440686][ T31] #0: ffff88802ff5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 742.450540][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 742.460837][ T31] 4 locks held by kworker/0:11/6732: [ 742.466137][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 742.477338][ T31] #1: ffffc9000ac17ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 742.489920][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 742.500045][ T31] #3: ffff888032605100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 742.509798][ T31] 4 locks held by kworker/u8:16/19435: [ 742.515320][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 742.526294][ T31] #1: ffffc9001562fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 742.537100][ T31] #2: ffffffff8f2becb0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 742.546480][ T31] #3: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 742.556682][ T31] 3 locks held by kworker/0:24/19934: [ 742.565802][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 742.576831][ T31] #1: ffffc900043cfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 742.590433][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 742.602013][ T31] 1 lock held by syz.3.4151/20949: [ 742.607126][ T31] #0: ffff888032605100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 742.616934][ T31] 3 locks held by syz.5.4163/20987: [ 742.622151][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.630649][ T31] #1: ffff88806043f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 742.640235][ T31] #2: ffffffff8f5ab568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 742.650211][ T31] 1 lock held by syz.2.4195/21103: [ 742.655359][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.663884][ T31] 1 lock held by syz.4.4197/21114: [ 742.669013][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.677519][ T31] 1 lock held by syz-executor/21229: [ 742.682848][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.691414][ T31] 1 lock held by syz.6.4232/21231: [ 742.696537][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.705050][ T31] 1 lock held by syz.6.4232/21232: [ 742.710169][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.718795][ T31] 1 lock held by syz-executor/21234: [ 742.724153][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.732660][ T31] 1 lock held by syz-executor/21236: [ 742.738039][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.746525][ T31] 1 lock held by syz-executor/21238: [ 742.751857][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.760334][ T31] 1 lock held by syz-executor/21240: [ 742.765693][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.774193][ T31] 1 lock held by syz-executor/21242: [ 742.779494][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.788009][ T31] 1 lock held by syz-executor/21244: [ 742.793334][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.801895][ T31] 1 lock held by syz-executor/21246: [ 742.807204][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.815744][ T31] 1 lock held by syz-executor/21248: [ 742.821082][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.829580][ T31] 1 lock held by syz-executor/21250: [ 742.834901][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.843417][ T31] 1 lock held by syz-executor/21252: [ 742.848702][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.857290][ T31] 1 lock held by syz-executor/21254: [ 742.862595][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.871092][ T31] 1 lock held by syz-executor/21256: [ 742.876374][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.884945][ T31] 1 lock held by syz-executor/21258: [ 742.890250][ T31] #0: ffffffff8e775428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 742.898785][ T31] [ 742.901510][ T31] ============================================= [ 742.901510][ T31] [ 742.909988][ T31] NMI backtrace for cpu 1 [ 742.910004][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.910020][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.910030][ T31] Call Trace: [ 742.910038][ T31] [ 742.910046][ T31] dump_stack_lvl+0x189/0x250 [ 742.910075][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.910097][ T31] ? __pfx__printk+0x10/0x10 [ 742.910123][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 742.910144][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 742.910164][ T31] ? __pfx__printk+0x10/0x10 [ 742.910183][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 742.910209][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 742.910229][ T31] watchdog+0xf60/0xfa0 [ 742.910248][ T31] ? watchdog+0x1e2/0xfa0 [ 742.910268][ T31] kthread+0x711/0x8a0 [ 742.910291][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.910305][ T31] ? __pfx_kthread+0x10/0x10 [ 742.910327][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 742.910347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.910378][ T31] ? __pfx_kthread+0x10/0x10 [ 742.910406][ T31] ret_from_fork+0x4bc/0x870 [ 742.910429][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 742.910457][ T31] ? __switch_to_asm+0x39/0x70 [ 742.910472][ T31] ? __switch_to_asm+0x33/0x70 [ 742.910489][ T31] ? __pfx_kthread+0x10/0x10 [ 742.910516][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.910552][ T31] [ 743.050430][ T31] Sending NMI from CPU 1 to CPUs 0: [ 743.055695][ C0] NMI backtrace for cpu 0 [ 743.055715][ C0] CPU: 0 UID: 0 PID: 10091 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 743.055737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 743.055749][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 743.055775][ C0] RIP: 0010:lock_release+0xc3/0x3e0 [ 743.055795][ C0] Code: 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 fa 48 c7 c7 b8 2c 72 8d e8 74 48 a9 09 65 ff 05 7d 2c d1 10 44 24 20 01 00 00 00 83 3d 8e b1 df 0d 00 0f 84 96 01 00 00 41 [ 743.055811][ C0] RSP: 0018:ffffc9000214f820 EFLAGS: 00000002 [ 743.055826][ C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 7d48fa826913b100 [ 743.055838][ C0] RDX: 0000000000000000 RSI: ffffffff8d722cb8 RDI: ffffffff8bbf0760 [ 743.055851][ C0] RBP: 0000000000000000 R08: ffffffff8f7ce577 R09: 1ffffffff1ef9cae [ 743.055864][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9caf R12: ffff88804b0eb2a8 [ 743.055877][ C0] R13: ffffffff8635b5ab R14: ffff88804b0eb300 R15: ffff8880333b3c80 [ 743.055891][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 743.055906][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.055919][ C0] CR2: 000055ead216a468 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 743.055935][ C0] Call Trace: [ 743.055943][ C0] [ 743.055953][ C0] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 743.055976][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 743.055996][ C0] _raw_read_unlock_bh+0x1b/0x40 [ 743.056022][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 743.056043][ C0] wg_packet_handshake_send_worker+0x1db/0x320 [ 743.056064][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 743.056094][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.056117][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 743.056137][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 743.056156][ C0] process_scheduled_works+0xae1/0x17b0 [ 743.056188][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 743.056215][ C0] worker_thread+0x8a0/0xda0 [ 743.056246][ C0] kthread+0x711/0x8a0 [ 743.056270][ C0] ? __pfx_worker_thread+0x10/0x10 [ 743.056289][ C0] ? __pfx_kthread+0x10/0x10 [ 743.056312][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.056335][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.056360][ C0] ? __pfx_kthread+0x10/0x10 [ 743.056383][ C0] ret_from_fork+0x4bc/0x870 [ 743.056402][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 743.056423][ C0] ? __switch_to_asm+0x39/0x70 [ 743.056438][ C0] ? __switch_to_asm+0x33/0x70 [ 743.056452][ C0] ? __pfx_kthread+0x10/0x10 [ 743.056476][ C0] ret_from_fork_asm+0x1a/0x30 [ 743.056499][ C0]