last executing test programs: 1m21.846811996s ago: executing program 3 (id=3455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '{\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff03, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) 1m21.307006138s ago: executing program 3 (id=3458): r0 = socket(0x28, 0x5, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000001a00)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x4, 0x3, 0x3}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)="9c7291f36454e8768b8febd3f150502fedde2693c46585dbd0196fcb7cd9f05d5ab59f6b6e42ae9e6603e43610c03ccdab2624b2", 0x34}, {&(0x7f0000000480)="67037b9d260382f68e688052dafd47b9f46ded2a4842143096024b8a766c2e2cfeb3a4c154a9e35cd00165f37c", 0x2d}, {&(0x7f00000004c0)="ce6dae7300e43535bb352d19437866c8fbf7e46253786724465513a76a32caa1be119e091813eeae0901f5cd26ce681ff8f91769691dddae6dcb8e8de07c8c6c7c39bc8a7557fb9ef0dd7f6940b862a3ac043e0e20974c1850887eb6391dc19c086e005796de75703c6d0b41590b4eb2717fb69c38ff3c8c000dbf77417a99fe8da8275d4a0ac8bb", 0x88}, {&(0x7f0000000580)="ba0d9850c0cb0d66ee08c566d51c4f29043b8282f6cefc37313aa67b24baf77c47f77f5a04664596fc5513f125f3bb56159d87e5c4df49f949856940ddb592affb8a32864c85001c2a8cdb00dfc3d3d9d40ee15b5eb9ec3ded66f0133310a14319d2838aa964e54f33f1164010b01629e1cd0b006f2103497d5ce821d96d8a2d2b45a0caed757de859ced6bf", 0x8c}, {&(0x7f0000000640)="78f17406505cda7e9d2d524a6e0487a3644b1834cd48a17fbc38db0b8cb1f44ea4d8d46acf2a2e16b72878fb19860c42fd9efcc7db68b87eec49187230945209affde85dbbb61bdb6f19aa91589d63035827499b02ee86c1c2b75b9d255361080448f3d98e219790699e5a79079e8d614eceba6fa295904165f29dc4edd9f926c614701817b0110526ccf45be11dafb8426048008974ef9a56db76bf643e3ba44f16965b2a922e2f67b597ff9cb4b1a2160facde28e0f69d5893a49610f6d84564493deef4fb525d8e7034df533c7706c607c183c006da10f6fd4a80fa47cf823236", 0xe2}, {&(0x7f0000000740)="0034f3d0222442676ffe8f3dbda63390dc403a7314fa35d87e3323299999874f695478621f6a8f138c49a4072a45b634b860561bc430d440fc6d08f63e4860edc1b58ea9047aef3b22b43fd91b450297ceded2d80bd15c58ea887235792fd74faad567f1ed2d4da7ebca7f", 0x6b}, {&(0x7f00000007c0)="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", 0x1000}], 0x8, &(0x7f0000001840)=[{0x38, 0x18, 0x5, "5464ed3fe8c7072aec8bab6c4417cc7d2d4407df1a2ef929105d268b29b51d4ed5"}, {0xc8, 0x110, 0x4, "1af2f01e5429adc46d91f6b58ad39b943b433215b5eaaeb9ece8524c6876f55cca71969e7633a4161a36c531a29dcf63513966cd9834c0c615467ca26f8573836638491143107802ecae4aa2c8e0e3c34c0f23940e3a78c8a5b6567ca068c35398cfbee48e104c649827a95f05809a68465adce56801068bb54fb8ce7cf2a14948ab8a9186d698999c5aec2f2c96cad55a1743e77d3edb465d18974c7e80a2d2a5d4872b0586d98917ba3fe4df8f0c3e49507859"}, {0x58, 0x115, 0x4, "6c0d51b0df7fec36b6ca5ee319d475a634f2d10f3ef0a0cfe5adc9bb5cf6ae5076f68b0c1976349e14d66f17342bac7ebc426a9f15d206f41b57cbfe0128ec2ac7c6d176cf"}, {0x38, 0x1, 0x5, "fa4b508c1766f2232937c1eabc973b2b764118aa9a2e8e5e33b85981a926a2cff778e5312d"}], 0x190}, 0x4000080) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000001a40)={0x7, 0x6, 0xf601, 0x7, 0x4c9a}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x22, 0x72, 0x9, 0x3a, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x10, 0x7800, 0xb, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000001b00)=ANY=[@ANYBLOB="540000001c00000228bd7000ffdbdf250a000000", @ANYRES32=r2, @ANYBLOB="4000000314000100202ca85170bbc44d0100008000000000000000000000020400000004000000030000000100000068000000060006004e20000008000d0000de00005117f73fa693f6a17381abeac792cf8054874721ed23e6ed692d97f277244d122e14ee2910342a1f03bf5e9deb9e18fe925b4dc109defee1f85a66b1ea846ec404713db66f618832fa563d9d944fbde826ea57eb2ebc2ad7360d06229d2ef44d3f6abf27f1963b539b3f3ea97ff3c762d417a982d37b1267cf75c70db746b2fe59bc944616871510e44700620c2685a4edd9cb416c799997e72f058b20dee5cbef927b9e1b8060ab95b24d3c3b90b2ae5affd90b317b238619d80ec8fe2aceb7cd5ba8d7e873dee425cfb0868da00385c8610d2283df116b51fa96ed13f105b55696251d7d8ab1cb17053334c58a65b5b1195412426df27c940d8ff98bd788da27541cb9c45dda5fe8070d625a07b8a87fa5eb16498ccd8adedfa3e8968199"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x8011) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001a80)=ANY=[@ANYBLOB="020300000c00000000000000fdffffff030006000000000002004e210a010102000100008000000002000100000000000000000c00000000030005000000000002004e2164010101000000000000000002001300f700000028bd70003e020000"], 0x60}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r3, 0x5c2a7000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffeff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3507, 0x1, 0x2, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r7, 0x11, 0x67, 0x0, &(0x7f0000000580)) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/73, 0x7ed}) syz_emit_ethernet(0x8a, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x54, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xb, '\x00', {0x9, 0x6, "155569", 0x7, 0x6c, 0xff, @private0={0xfc, 0x0, '\x00', 0x8}, @private0, [], "796ee019f45e19874ccf7b5ee9ad6140e983fd165aad242a06dd108d37e5988b7258076c"}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115300000000008510000002000000840300000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 1m18.288488704s ago: executing program 3 (id=3469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25fe800000000000000000000000001a2aff020000000000000000000000000001000400004e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="06"], 0x15c}, 0x1, 0x0, 0x0, 0xc880}, 0x2014) 1m18.192999358s ago: executing program 2 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x24, 0x8890}, 0x24000000) 1m17.958624151s ago: executing program 0 (id=3471): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) (fail_nth: 43) 1m17.750675428s ago: executing program 3 (id=3472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318, 0x1a2a1}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0xa1ff, 0x4000884}, 0x0) 1m17.029973603s ago: executing program 0 (id=3474): syz_emit_ethernet(0x8e, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) writev(r3, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) (async, rerun: 64) socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000480), 0x4) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000b00000000000000", @ANYRES32=0x1, @ANYBLOB="0300002000000000000000000000000000100000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="01000000010000000400"/28], 0x50) (rerun: 32) r7 = accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000140)={0x5, 0x3, 0x2, 0x2}, 0x8) 1m17.026213903s ago: executing program 2 (id=3476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xb, 0xb}}}, 0x24}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="380100001000010001000000fddbdf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000df2f6abaff0001000080001c250800000000000200000000000000f8ffffffffffffff020000000000e0fffeffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002900000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffa}, {0x6}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x1, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c8009003b159f5a730909994038a70d99b1302a5de7aedb4fb36049b2ccdc5babd0997d872cfb6e96d80f1bf30674f70c9c6323b3883e5796ecb9035e509162637ce47189c5219ccb00bf7decd9462701c35784992bacdbbafde4", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf251e0000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000eeffb704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x4001, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, r6, 0x215eb000) socket$inet(0x2, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffe0}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0x10}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x7, 0x4, 0xd, 0x8b, 0x5, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x8, 0x8, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xfffa, 0x2, 0xb, 0x3, 0x5, 0x6, 0x100e, 0x100], [0xfff1, 0x5, 0xffff, 0x0, 0x4, 0x8, 0x40, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m17.025732612s ago: executing program 3 (id=3477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000003000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="2156d01b5e9040f2d678926e708b09ddd2d3171e52cb4ad4fbb9f09285e34f32f948f6814534a1562ae8f50f39d5c51ab81cfb644a1e6d8e8ce30dc26e97ffaf357f02a5bc92562cc4700733de24f938c9e574c67ecbc70b9a59cca340b1888bec3ac05f5c10e81c1156dc226e21adcb5497ae91cd9e", &(0x7f0000000080)=""/102, &(0x7f0000000100)="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", &(0x7f0000000200)="dd5507a946ba5906b4580d105d4a5c6fdf95e58d5898bd364760262d65b1352329dfc4e1ca1dc9091cd619f445c88a0c77a97c1945b3a29e9fcec044756ab5414e29e4b47d2e29d7681b0acb2011ea152d2f175f03f4719abea47ae52cd60f17c463836d54160007fc4da66fa82d00ba2997d9b7640c6693ca9f206e1d1e9da124fe", 0x1, r0}, 0x38) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) write(r4, &(0x7f00000002c0)="04", 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.sectors\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000600)={0x58, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe53}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 1m16.810246891s ago: executing program 3 (id=3478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x2, 0x1000}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000b00)={r1, 0x1, 0x0, 0x100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={r1, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xfffffbff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x8, @remote, 0x9}, @in6={0xa, 0x4e24, 0x384, @loopback, 0x5}]}, &(0x7f0000000800)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff0100000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f00000000c0)=0xfd, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r10, 0x1, 0x0, 0x6, @remote}, 0x14) 1m5.978785619s ago: executing program 0 (id=3482): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf1134ad8135eddb75535613f0c13e995f458d7117b7b4484be02dda974d1f894074f5258bc3416e61b41949c2bca7746dd9edc6fc1d0b9305c7ee799be795a7df68f76872046beb4e1ff6d5a62a7177902fdb74cb5d1e104b8852fd4db5ced74b73b68eb138695110452ddf5def0a6961d7010d1b170391e5897f32102ebade663ec2804708f63becf2b7595461d10062df096794e1cb4232cda841f3a86a6d5e50fe8db194bfb3721c9bc3e29b176f3554f1010776afe8fe89b5869bb25e5ffe24ad26f382b7176fd85e3d19a2d8e58031e1939ed39c96c4f2f967f75049ee7e36469b8c010992623f8248cff1c362bbb12e8ed5fd05b72fb1f391b4c13d06a453f2169bea0cc67768e06311494a3dc736c80ef644fc0d09dae7dfc09de2b7f6d0b21734486503b74bd3387ffa9a5da1b39a2ec9c410a4b2d4ec1f8ef1d3a7ced2637878b038da8d69b32a3e402580e5b746f8e7f930ff478e6b15f475b6b96a25cd8f55bdd73bc483ee5625b56b81f8d9183bc36a5c4c0974db6ad499bf1fcccb994c3defccf1324543260fb1a790ef60d50da4f955783af41066d51abdf7a566c2b2c876e0199e7b920068f226c7a5f14b65b3dbd7fb244c3fb1660740b5f849942e468af39e5a9bc80a6075878dfac23d0ae839a0e509448130e7dabadd7c494b64e67be6400ea34b097bfc578deb3c5ebefa9c1019ef65bf641c9388d9b29f6c9c2e5b8b81fcfdd94059d9a21c80f318d9675721a31ca77a4920b06cb744e96ae74ef66b4dfbe5d1085c9485abf9356d966cb63a75a250dc4432b89ec09dff3531613e12694abdd61d270ab34fba12ae1db3ed45fbc87eb1725f962de4922a64c82ed5d4b652ad926be7330f15fee7a6d53719f6231be26e7593454eabf6fdfe940f04c8cdf022ce9e278c0e2ce9aa9285594972d2b910cedf1d956976f9e6d9571210e4939821c9b68146925e2780db8e1fe6872ba1e178dfb627d9623b5c700cae1d3ce830422b9d906060b28d0956af355a2ce927c9cde8391b43fdbccd428403ee758de7c09de5a2c8eb2dac85a0e056b1ce291da6e54ea1e669b5eee9ca1043aa4f92368b39920f23f2ce3ea3906412de447a0ba28474f2b839a0413e1a0c5c1e7e818b6ae483fbf9a5fcf9367cf9badb8d2040e54dd868a672f3d24fc0e9a77648acb524999c46061b5a71cc8e0b3e66e5421b4e4f8ade64015793ac3949f7c0a3bd64b8e1d2bb99d3e51b5a295b1d2ae2de914a8d6309d9faf5f6b10edb2d9c1dad7eef2ade703d92f06f811cc8682fb98ba2ec324d9ffb23ccff4d231b459214004c7c3afd1f43265f3e40dfc15053103c220347ce2c480ffc73e500314bf7125baf8047ae9521a9c23b53983366fa69466d0bbd00374f703d8e1645849f024b5f2e6affcd99d0ac335e91daf78d5966b081f82762f050b090847f48696736db6ca4afa74e40c8be0fa72a4f8dfc1ba573ee763c9f995fe9fb17c2d1e6ef167c9f15d3bce4ea8a4634628e38f2460d0387c60cabdc6eb6c7223644ab5375a12b8bc39beec9d4c0346e3030fecb85b78038026498a62fdeefcde9de58bc66b9f8e23ff49ea9648080924aac75a0a11973c064def", 0x624}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0x2000000}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m5.517576652s ago: executing program 1 (id=3485): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaacfaaaaaaaaaaaaaabb0800480000340000000000069078ac1414bbac1414aa440c08c1e0000002000000004e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe90780000"], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) mmap(&(0x7f00001a9000/0x3000)=nil, 0x3000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xd64ee000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"9102fb09b95cd846f38d86bd744d83eb", r8, r9, {0x2755, 0x7}, {0x1, 0x2}, 0x0, [0x2, 0x4, 0x52, 0xffffffffffff35cf, 0x738, 0xffff, 0x8000000000000000, 0x1, 0x3, 0x3, 0xdb4, 0x9, 0x7, 0x8, 0x7, 0x80000001]}) mmap(&(0x7f0000816000/0x4000)=nil, 0x4000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@float={0x20000001, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x61, 0x30, 0x0, 0x3e, 0x61]}}, 0x0, 0x2f, 0x0, 0x1, 0x2}, 0x28) r10 = socket(0x8, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x40106183, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 1m5.100263091s ago: executing program 2 (id=3487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffaba3f723ed42968b000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000001000000003c00000002000000ffffffff0000100000000000000000000600000004"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0, 0x700}}], 0x1, 0xc040) 1m4.807220012s ago: executing program 2 (id=3489): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r3}, 0x8) socketpair(0x26, 0x5, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_IE={0xb2, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @challenge={0x10, 0x1, 0x87}, @mic={0x8c, 0x18, {0x8c2, "cad4ef23b569", @long="178176864474b141099cb0012a466da7"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x8e}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x28}}, @preq={0x82, 0x62, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x1, @broadcast, 0x4, @value, 0x0, 0x101, 0x6, [{{0x1}, @device_b, 0xffffff5f}, {{}, @broadcast, 0xfffffff8}, {{}, @broadcast, 0x9}, {{}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1}, @broadcast, 0x7fffffff}]}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000340)={r3, 0x374}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r8, 0xf}, &(0x7f0000000400)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) connect$l2tp(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2, 0x3}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r10, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000600)={@empty, @private, 0x0}, &(0x7f0000000640)=0xc) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x14, 0xc2, 0x0, 0x3, 0x1, r11, 0x7, '\x00', r12, r13, 0x1, 0x5, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f0000000780)={r2, 0x6f, "5b6f4d9f0f1f6d412b3c5d276f4402d2601beb89591b9d4ad9902351eff5cbaba3b3590d38d7e272689cba093616ad399c7adf26ca82d1d926904db5b5b8fe38110101d414e534d2a382e5a7764e5889adb676ade751bf8e3bd462b0faabc7123c788c3b9f62c0ca5bee8bd02d1443"}, &(0x7f0000000800)=0x77) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r13) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x59a518960faf1ef9}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, r14, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000009c0)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r10, 0xc0205865, &(0x7f0000001180)={&(0x7f0000000a40)=0xffffffffc933c4c0, 0xffffffbc, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001140)}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000011c0)={r1, 0xff, 0xff63}, &(0x7f0000001200)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000001240)={r0, 0x1, 0x8, 0x8}) sendmsg$NL80211_CMD_START_NAN(r15, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, r6, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3c}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendto$inet6(r15, &(0x7f00000013c0)="6eb28be47944c81ea85563bc0641849745c90637f36257a8241333d7906797e897b854cddded9f7ca21f47ac57ce203832d88165b8c6640289872120401a3334b905c283661340f406d4c2f2ab43c19e9011eac11d38f40c340cb67b088ce40cb9c51b916b3f57cec740ffe85579b88a964c5b92e1c559e8cf0c5a368272c64782e0128381b2a5729846f57e76194b201f8aa1c3288a5ffedaaeece1bb53580ad2f067217d6ef78ca088490a6e9f7b484ea38b1224bd3c55222948a36c93031c78f9709271ea33c0aa9556d9100a2fc33c4230226b0b18dcd351376cce7aa605f35a00", 0xe3, 0x10, &(0x7f00000014c0)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000001500), &(0x7f0000001540)=0x4) 1m4.499540506s ago: executing program 4 (id=3490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x0, 0x600}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m4.26247154s ago: executing program 4 (id=3491): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) write$ppp(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d042cbd700000fdffffff000000", @ANYRES32=0x0, @ANYBLOB="1fa5960d000000001400128009000100626f6e64"], 0x34}}, 0x0) 1m4.114635645s ago: executing program 1 (id=3492): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="290288ac4d770dd953f7fa7534f3c73cc21e1beedba555dee2095863cb6ddd2179d7a0c65bcb1b99a8041996038bec5a13ecb4ef64431583554ec5162f030e1b4855c0d162da72db7b01878b849fc5e2dff7ac3d012ea6b5c805d3e6411a46096005b07235e5c504f9e485e05ddda0c62263d5003962ef720e1d9f8810457154a1d378207d118456da7bbc965ea2fd7f24be", 0x92}, {&(0x7f0000000100)="647bbd91424f1e8a897a38c6926dbc3a", 0x10}, {&(0x7f0000000200)="f84cc67aad65bb2a26656f47b4177f20cf556169729cc68c0f4f7cd14bb97a291f0e83d1dc6a57b0bc996c2b80fb0231fcf11bc9d5e9caf6cd59860e2c567e95b1532e9b2d32b2a9944caa289fac2c732722b797373ee57824ee4672c8bb1d9546a45621e262ef00a4", 0x69}, {&(0x7f0000000280)="6ca827ab5ff587c25583970974d4cab0b1cfc9b49c94f5b43333c0040a52a28089d003075763745f6b36b4a0bdb9", 0x2e}], 0x4, &(0x7f00000008c0)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x2e, 0x12, 0x0, 0x1f, 0x0, [@empty, @private1, @local, @remote, @empty, @loopback, @local, @mcast2, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @hopopts={{0xc8, 0x29, 0x36, {0x6, 0x15, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xd7, 0x3, [0x1]}}, @ra={0x5, 0x2, 0x8}, @generic={0x0, 0x91, "085b0b318354e5082a9355bf591e72614f4fa53a44dc2a4f0e296eabb5ffd758531ab6025ce0f0b7abe1bb9e26f1cdd2411c3d040a879dd5bcf7b9972cf38482e9ff0d66e99b73f1b67580b3f1184c92f2a267be4ffeaab53cde10078b9443a8be1cad217e68377845671713491a746fff07000082dc354d7cc1bdac59baa30fa77d25b07715d79351a591fcd3ace081b9"}, @ra={0x5, 0x2, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)=[@hopopts={{0xd0, 0x29, 0x36, {0x67, 0x17, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @calipso={0x7, 0x50, {0x1, 0x12, 0xe0, 0x4, [0x9, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0x2f9, 0x5, 0xfffffffffffffffc, 0x9]}}, @pad1, @generic={0xe, 0x4b, "83a37127c961a6d9476c8c3440d20040c64285636bee7a81467e8395e6931c8e4115147c3d778fd9bbdbd539d6542431ebd1fa1784d2e8a118d5995787dc8e7c52917da932f124d1d7a485"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x0, 0xe8, 0x0, [@remote, @private2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x88, 0x12, 0x0, 0xe, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}]}}}], 0x230}}], 0x2, 0x20e8086) sendto$inet6(r0, &(0x7f0000000180)="e4eba9c15d1ee9eb1913bcf106c6b1bb86172d891122171bc44f929c668058cce40ea87402e90200518ed4516e2d4fbc906d645a81939dfb0000959ce7e19237140c51c44c2bdb", 0x47, 0x800, 0x0, 0x0) 1m3.93507047s ago: executing program 1 (id=3493): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x1) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x29, 0x1, 0x2, 0xfffffffe, 0x40, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x10, 0x6, 0x7}}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) socket$pppoe(0x18, 0x1, 0x0) (rerun: 64) 1m1.611717918s ago: executing program 32 (id=3478): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x2, 0x1000}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000b00)={r1, 0x1, 0x0, 0x100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={r1, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xfffffbff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x8, @remote, 0x9}, @in6={0xa, 0x4e24, 0x384, @loopback, 0x5}]}, &(0x7f0000000800)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff0100000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f00000000c0)=0xfd, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r10, 0x1, 0x0, 0x6, @remote}, 0x14) 58.272894527s ago: executing program 2 (id=3495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a880000040000000000000000020000005c000480580001800a000100696e6e65729c00004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a00000000"], 0xb0}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r1, 0x5, 0x2, 0x9}) bind$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) socket$kcm(0x2b, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="008221a8538c0000e90000000000ffe700"/33], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a156512f96c11f86b829e385fff0b05527e990ff18fc27dfa88354759837d87e1ecad7621fe1559b5804d8f6eddd624ff0536d363e4e0922ef4e4be816d154ecf7adfe1c570157e0c3ec54fb94dd066f72e17175ef1a9d69f1127750d210e411962f93585cdc16595ae7333ed918b1791174f8b249add17de7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r4, 0xffffffffffffffff}, &(0x7f00000023c0), &(0x7f0000002400)=r5}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000b3b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x4, 0x83, &(0x7f0000001300)=""/131, 0x41100, 0xa}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000840)={{r6, &(0x7f0000000280)='9:&]{-}:\']*\x11]\x00', 0x80, &(0x7f00000004c0)={@_ha_fsid={[0x9, 0x2]}, {0x8, 0x5, 0x5, 0xe2}}, 0x7, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x5}, {[0xa28, 0x5, 0x5, 0x800]}, 0x80, 0x37, &(0x7f0000000580)=""/55}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000a00)={{&(0x7f00000006c0)=""/245, 0xf5}, &(0x7f00000005c0), 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 58.087020937s ago: executing program 0 (id=3496): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x65}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value=0x2010000}, 0x94) 58.08507557s ago: executing program 4 (id=3497): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$netlink(0x10, 0x3, 0x8000000004) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xfff5, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) 57.877559072s ago: executing program 1 (id=3498): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x600002, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x80fd}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x43}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x67, &(0x7f00000001c0)=""/103, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x554, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x4, 0x1, 0x3}, {0x5, 0x1, 0xb, 0x8}, {0x1, 0x4, 0xe, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r2, 0xffffffffffffffff, 0x0, r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000440)=0x821, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000004c0)={0x7fff, {{0xa, 0x4e21, 0xffffff80, @private1, 0x4}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x9, @private0, 0x2c1d}}]}, 0x110) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000600)=0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x100, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000640), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, [0x0, 0x0, 0xff, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'bridge0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x5, 0x7, 0x24}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x5679, 0xe356], 0x4, 0x71}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0xff000000, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffffff], 'netpci0\x00', 'gretap0\x00', {0xff}, {0xff}, 0xc, 0x8, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"1c7e", 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x5c4, 0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, [0xff, 0x7f7fff00, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'veth0_to_hsr\x00', 'macvtap0\x00', {0xff}, {}, 0x87, 0x7, 0x5, 0x1}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"08f9"}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa631, 0xffff, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000bc0)={r2, &(0x7f0000000ac0)='+-\\)\x00', 0x0, &(0x7f0000000b00)={@_ha_fsid={[0x3, 0x9]}, {0x7, 0x5, 0x9, 0x3}}, 0x119af629, &(0x7f0000000b40), &(0x7f0000000b80)=0x9}) accept4$alg(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000c00)=@int=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0xf0, 0xf0, 0x278, 0xf0, 0x490, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, &(0x7f0000000c40), {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2f, 0x32, 0x27d}}}, {{@ipv6={@empty, @local, [0x0, 0xffffff00, 0xff, 0xffffff], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'nicvf0\x00', {0xff}, {}, 0x32, 0xab, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0xc4, 0x2, 0x8, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff], 0x220, 0x144}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@ipv6={@empty, @empty, [0xff, 0xff, 0xff, 0x269f7bfbf402d39e], [0x0, 0x0, 0xffffffff], 'veth0_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x88, 0x93, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x48}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000014c0)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={r8, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f00000015c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0x49, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001a80)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f0000002240)={'ip6tnl0\x00', 0x0, 0x29, 0x6b, 0x10, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private0, 0xffa6, 0x700, 0xb, 0x100}}) sendmmsg$inet(r6, &(0x7f0000004c00)=[{{&(0x7f0000001380)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f00000013c0)="d615ea82a64a3bd04f1f5f274fcaaf43a2625ed5a9e546666cbb853fb0c906f8acfd6a20e360fb9937ac28cd99657713b9fba7e2a1a5c7d5c181787b8e600359ed7915eb21366cf49a9d660df9e693b6432431ae56f1eff8d4d95f2db9564ddcd1d93bc4e0adccaa65f9b52a4a0515bb50667036e4e7bef80806433aa775001fb2bfeaa1458af08a2c490e42b0ea1d330007d74bb8915807857fd6fe241fd07113a2f8c982777f88f13be6", 0xab}], 0x1, &(0x7f0000001800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf, [@empty, @remote, @multicast2]}, @end]}}}], 0x60}}, {{&(0x7f0000001880)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000018c0)="5ab075cdb34851a18e372f5e974ff96787c207fc5a151706daaef511b190e32686690804517edf9f189df7808b68f3ce3b9046e46830fa82a06f8d0cd9841a0c805e2a487477e4a941bf6c20ce53f874ecdf6a9da4aea9b4eb4228a01c9ae038398c8e44dbafdc85652d56a8d9e0407b0decd97742a7b93c", 0x78}, {&(0x7f0000001940)="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", 0xfc}], 0x2, &(0x7f0000001ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x96, 0x0, 0xe, [0x0]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x10, 0x4d, 0x0, 0x5, [0xe0fc, 0x9, 0xebd]}, @noop]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xc6, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0xe0}}, {{&(0x7f0000001bc0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001c00)="88291be0762fdbafd3485c", 0xb}, {&(0x7f0000001c40)="5de5479ed84720d1cb4b41033d3931432371b546f55ee6ab2e1bd25dc291af23d165201b75ef676218df873401399c6bbeb09a21184f03b2d9080098e1a79d2787b0c8b47e2e1f55b5e5df9803b98556be1b7782712cdd7722bd2110adb52b25c2ef09139f8e9cf657db7f3fa638b1943d082ee7efa7d8d3410f5e", 0x7b}, {&(0x7f0000001cc0)="e0ae70c84f0adcaa543502f8b480291202745e3b51fdbbf33fe8e3d1a4ee77aa2d33729111c7371ed87f261b34f5862c856dce0953a8b9cd26ccc8925c71fb47146ae5ada2139e6e1417cdcf4d10845410022866a4c0f1500e9c393eea40d30099c5c6fcac78dc711a1d9b399ec0d63bbf41d92b2a5775b3da7bed01345d383049ba3475f3e44841080efe10cf3d674cd227d3544ee68c8a21f1479443c0895d8270ca2e1a", 0xa5}, {&(0x7f0000001d80)="f698dd6be7bcd99ff7ce276ffa2034d268f15b5c84fdc7bf053e312b52ffeeaca38703390c81a621ee1b4448185012cf8ec31c547261c5ba4bed2e3a693e80cfe69afd23d0687a8788a0637e628b8d556e85001b508daab446ef9d48e8932a7f279d0525214e27add3e000579434d891d202e53c631e0b18495be4e45268c32c3b4f13e2cdc836", 0x87}], 0x4, &(0x7f0000001e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x110, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x1, [{0x6, 0xc, "78b67e379c377e8fa714"}]}, @timestamp_prespec={0x44, 0x3c, 0xc7, 0x3, 0xa, [{@empty}, {@multicast1, 0x4}, {@multicast1, 0x1}, {@rand_addr=0x64010101, 0x5906}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x638}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x200}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x6}]}, @generic={0x83, 0x10, "f635aa45f1a7e991d2d81c1e9790"}, @end, @timestamp_prespec={0x44, 0x34, 0x60, 0x3, 0x3, [{@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x81}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010101, 0x4}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x3c, 0xcb, 0x1, 0x7, [{@remote, 0x6}, {@local, 0x2}, {@remote, 0x9}, {@broadcast, 0x7}, {@remote, 0x7f}, {@multicast1, 0x5}, {@local}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x82, 0x3, 0x3, [{@multicast2, 0x5}]}, @rr={0x7, 0x1f, 0xe, [@multicast2, @local, @rand_addr=0x64010102, @empty, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}], 0x140}}, {{&(0x7f0000001fc0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002000)="491e383c04290dd8310fa54b54c82c7c591ec250dee6af53e7ec24742e427b5f6a941cec77efd54f5f28600128e36c9c926f4805c7e3a9d2ac0447760c440de80264b352e481084c2c353d9e9dafe873da8f0614eab5e81b70a04f73727bb924e8ee521ee10d1e67c89e7994bfe793ff57809d8b5a32f1f8d1c900a3ceaae3e613e3e9851710cc855131f33758ad86b6353ab2886424e5df19a2a9191de2f2bb03dc5b279a21247e9d41e09ae7937b3ca181de9d6d020603fe2606c822d31ea785d04214ce9184557db4ed17e3ff98fde3d4", 0xd2}, {&(0x7f0000002100)="62f6f84cffdb138a8253da466da933b96c6779dd09f9a24a6419e5210e3c84ac868a6f362c0e7c951f97615d3d5a3591b845878c9c75da3a658cb26fc2d5b774a1618c68d8247bce7ff779dc8648ce6b62ad1b3d70690eca538b1877f1", 0x5d}, {&(0x7f0000002180)="46287398a8817c75ff1574987a56330b8fdf858fb7a6973c12c69ac4cd6d954b52cd6b4e64eb97b5033c37e81be998b43b736f9b24dc41df36ac0f569392425b6ca64a1b52e9ebe63dddc9a99c724575eb05c914f06091d73bc04565078f3a45a9098cd00b866118bd8905ed0cbc1b9e58c131e0a6889ab150", 0x79}], 0x3, &(0x7f0000002300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @end, @cipso={0x86, 0xd, 0x0, [{0x7, 0x7, "82c0df4316"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x67, [@loopback, @loopback]}, @timestamp={0x44, 0xc, 0x54, 0x0, 0x9, [0x1f3f8, 0x4]}, @cipso={0x86, 0xe, 0x1, [{0x7, 0x8, "bc4df535c10d"}]}, @rr={0x7, 0x7, 0x34, [@multicast1]}, @timestamp={0x44, 0x8, 0x7c, 0x0, 0xa, [0x6]}, @end]}}}, @ip_retopts={{0x10}}], 0xc8}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002400)="1190fd5ca488907e2909268e8926fc9e88f49337a4a89b01bbe8ee769b81c867d45571f51d260151f4332e28d0693f6db71e32dc3130c879b0d0d45751b228aaf8d0f36ebb081121591a3ce3604b5e2a1c95f930c8f74c1665792738f4e597260f7eb455ed", 0x65}, {&(0x7f0000002480)="08af5b1499508126966923ed08540139dbbb1a4106064581c5c4b712c446a57fffb26f4f314f23b2abf2feeb7c911d5247e07aa56841da55d2", 0x39}], 0x2}}, {{&(0x7f0000002500)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000004ac0)=[{&(0x7f0000002540)="d62a2d7fcccbc6cd625e10730e07d18af94f5aa554aef5f9ca12e4c671ea8f26aec907a54d6975f3a3809c7fe79017aea5c68ab8449aada55f274e38197f7e8cd5e244f70f56ae71f932c17acbfecd5fdc82c02b143b1c42fbc00495f70283d57248a952a46f8a9afdc94a6c62a6182fd9e1ad346b0c414a0634", 0x7a}, {&(0x7f00000025c0)="749170104ede57e2f77dcde07953b50acfeb29f46e51c4a6fa73100ca55f421a1bfb428a0668681aa419f980faebf16a383d29d546788042cc8467234a267f3b10a177f57725230f4e139ed297032b4431d8792f37e4c3f1734b79512d0f7d37d8c77db821e779b9f3c13f9c06d59b76970d2971e21442a9629cd5c640ab7d62bfca198f0b002ab8db62b66d259f801b4d513a675f86ff4144c268bac2bec7fb416d0f462f982d48476807b08b67525e3a43537144", 0xb5}, {&(0x7f0000002680)="ecd478a9cb65ab37e59a896dfef18934", 0x10}, {&(0x7f00000026c0)="0541a8e48ec4ea450b39729f53ceeeb9f654c8d71d3e7ed6910d3dc69e91902e114e9a73cfe9a4bcfd92065c2100d6f770e2ed0d167b008bec26d6e3f679b6655c0664891ca895384098c31029121178e24aeebef1274f0242d5663af6fd0ff537d8f3c454aa1857e61396e69223caa883a7f6897a5ecb75cd7de27a3c2abbfa03a4128d53918297951b797717427d3b6e3bd670e36264b5ab5f005d73c248a2cb0355ba7508cb3638c13208d2d430a49fe864ffb80c913ef1682f2aa8228ad5caacd7d28ce0742007609139326836774fbda7c61684703e42bb60c0dafd5f036fc007408dc0f880d38dd4172d", 0xed}, {&(0x7f00000027c0)="38ffae1afe50392ecf0261e1f9f0677ae0eaa6ba7ec699189d8ee38561d4a8caad5d9d04012c3ec16f38b83e6a1a9c511706c7d6deeec87726ebb29274938a5a40f6150c5e5e0f5286053753c696f379780c62d59d2d29a65276df1a7da31e168daa3f7d099a346b1b8490d366d7840aaba3c4b9bdbe872b8402007b7612400bb53c6eeac6d77f8ba090653b561cbec872ce13582f928ea4567ab14e867d75c12f282cc801e40192e573735b6f940f5db5c2f1e13fce8c", 0xb7}, {&(0x7f0000002880)="24a658e6d255482a4670d5714a563ca0294dadecceb09e8ad9ce37f53566846ae971f72c89ad20f02b12e22e576a982d83a0884606090f52e9ebf7effea076267e52342577b1307f3e3f18543db1a1bb068e0bee3a54bd0d9a25b20c7aab11e3450a4496c52eba8c67087a48e028249eb99c61c38a15ef4dddb8525267a620f638fa832d825714d6cdc2184cfd0fa7be19fbd9dc9a3be5a8487347a1b1809716b847409b0e9c45ddb899ba37b797a543ff1352c8912457358ecd42f3df40a48d24e4a255907a5e747ae2f73b951838c2c89f0d0641525a4faf3dd46b947d1da6ec863b2c142eab5fdb29d3301d7acb2c5da8c73de3d1c893b24870971d", 0xfd}, {&(0x7f0000002980)="849c6e800df2a8a381e2088fd0ce2e8a381aa368dc0a2d3bef9a1aedc93069d387bb71789551579514532d036a03e466e4259cb2278c52337e7ea364c5ec8611a49be305827544e5c3cc4e5ca4a9007684f2157cc842b48639b447e48a7572d4c4d9623c93d93c220d5331434a6b14410dee2dce6b8fda925ff4e9ef69e789b5d7eb05983adad39713f43cc390aa6181b612f7e230f1171b165a8210ccd19c7bd646f69194d33a93c3", 0xa9}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="1feb9589496aa3390084b4a617a0e6d5e81d8fe75e8d19e59d5d2d44eb6c008b255459cf12af7a63104fbf809f48cadbd50bc9ce4294a74c8357f5c655bfb23bbb71dd91a1438326056b44217cb3986b5e5c80ad86dfa130f99aaa35", 0x5c}], 0xa, &(0x7f0000004b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x48}}], 0x6, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r13, 0x6, 0x21, &(0x7f0000004d80)="3f169dbb45392f2351e3888afb4e4d64", 0x10) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000004dc0)={'pimreg0\x00', 0x4}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000004e00)=0x1, 0x4) openat$cgroup(r8, &(0x7f0000004e40)='syz1\x00', 0x200002, 0x0) 57.575615464s ago: executing program 0 (id=3499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000006000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c00000000000000ac14142400000000000000000000000000000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d233"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 57.314372154s ago: executing program 4 (id=3500): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002180)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xff, 0xffffffff], 'batadv_slave_0\x00', 'gretap0\x00', {}, {0xff}, 0x32, 0x40, 0x6, 0xe3ccac1c4eeb58d1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'vlan1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 57.093975317s ago: executing program 0 (id=3501): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xaa4d, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7a3441, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0x2a060400) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x400000, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000ffffffff00000000"]}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="62c690f054bd5197067e459355375a68e98b5676fa39a9180482e1d5558ec371f7cf285d22319f92f1fc08"], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5bbf01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000020601010000000000000000000000000900020073797a3100000000050004000100000005000100070000000c000780060004404e23000005090000000000000000040003000000"], 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03b51398baa90b32991135036d1d04000000040000000a000300"/35, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$TUNGETVNETLE(r1, 0x40047452, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a800000ff"], 0x1c}}, 0x0) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 56.907649322s ago: executing program 1 (id=3502): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c0001"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000d61a3c2017fcac24e4b377e45b2d00000000000000000020"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x8, 0xffffffff, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0xce20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0xce20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68) tee(r1, r2, 0x8001, 0xa) (async) tee(r1, r2, 0x8001, 0xa) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r6, 0x1, 0x0, 0x0, 0x11, 0x8, 0x5, 0x5508, 0x6, 0x2, 0x1, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r6, 0x1, 0x0, 0x0, 0x11, 0x8, 0x5, 0x5508, 0x6, 0x2, 0x1, 'syz1\x00'}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.700928823s ago: executing program 4 (id=3503): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="290288ac4d770dd953f7fa7534f3c73cc21e1beedba555dee2095863cb6ddd2179d7a0c65bcb1b99a8041996038bec5a13ecb4ef64431583554ec5162f030e1b4855c0d162da72db7b01878b849fc5e2dff7ac3d012ea6b5c805d3e6411a46096005b07235e5c504f9e485e05ddda0c62263d5003962ef720e1d9f8810457154a1d378207d118456da7bbc965ea2fd7f24be", 0x92}, {&(0x7f0000000100)="647bbd91424f1e8a897a38c6926dbc3a", 0x10}, {&(0x7f0000000200)="f84cc67aad65bb2a26656f47b4177f20cf556169729cc68c0f4f7cd14bb97a291f0e83d1dc6a57b0bc996c2b80fb0231fcf11bc9d5e9caf6cd59860e2c567e95b1532e9b2d32b2a9944caa289fac2c732722b797373ee57824ee4672c8bb1d9546a45621e262ef00a4", 0x69}, {&(0x7f0000000280)="6ca827ab5ff587c25583970974d4cab0b1cfc9b49c94f5b43333c0040a52a28089d003075763745f6b36b4a0bdb9", 0x2e}], 0x4, &(0x7f00000008c0)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x2e, 0x12, 0x0, 0x1f, 0x0, [@empty, @private1, @local, @remote, @empty, @loopback, @local, @mcast2, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @hopopts={{0xc8, 0x29, 0x36, {0x6, 0x15, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xd7, 0x3, [0x1]}}, @ra={0x5, 0x2, 0x8}, @generic={0x0, 0x91, "085b0b318354e5082a9355bf591e72614f4fa53a44dc2a4f0e296eabb5ffd758531ab6025ce0f0b7abe1bb9e26f1cdd2411c3d040a879dd5bcf7b9972cf38482e9ff0d66e99b73f1b67580b3f1184c92f2a267be4ffeaab53cde10078b9443a8be1cad217e68377845671713491a746fff07000082dc354d7cc1bdac59baa30fa77d25b07715d79351a591fcd3ace081b9"}, @ra={0x5, 0x2, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000600)=[@hopopts={{0xd0, 0x29, 0x36, {0x67, 0x17, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @calipso={0x7, 0x50, {0x1, 0x12, 0xe0, 0x4, [0x9, 0x7, 0x5, 0x3, 0xffffffffffffffff, 0x2f9, 0x5, 0xfffffffffffffffc, 0x9]}}, @pad1, @generic={0xe, 0x4b, "83a37127c961a6d9476c8c3440d20040c64285636bee7a81467e8395e6931c8e4115147c3d778fd9bbdbd539d6542431ebd1fa1784d2e8a118d5995787dc8e7c52917da932f124d1d7a485"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2b, 0x8, 0x0, 0xe8, 0x0, [@remote, @private2, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x88, 0x12, 0x0, 0xe, 0x0, [@rand_addr=' \x01\x00', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}]}}}], 0x230}}], 0x2, 0x20e8086) sendto$inet6(r0, &(0x7f0000000180)="e4eba9c15d1ee9eb1913bcf106c6b1bb86172d891122171bc44f929c668058cce40ea87402e90200518ed4516e2d4fbc906d645a81939dfb0000959ce7e19237140c51c44c2bdb", 0x47, 0x800, 0x0, 0x0) 56.313712096s ago: executing program 2 (id=3504): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x11f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21", 0x25}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888", 0x8c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cbc6357061cceaa8224b2def6160bf20ea349fd07ac7d613c9b84dccf7becdf044c73f6a6da8e322631ef660cbef7208a5093c389e0482bb5c21b9f319b2b85d9977266ce2ab9407550f8e80e6c8904cd83530c89bd61301df823fe63181cdb3d444", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)}, {&(0x7f0000000a40)="7e0e66c4f5631a86ee3b50772194f02a8ee2bbf24d0353083e5bdcc98c62513ce8805db77997489bb4ea828d50c606eacaf30d91f319dd73132828f372488cc8", 0x40}, {0x0}], 0x3}}], 0x4, 0x14042082) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xd}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x18, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendto$inet(r1, &(0x7f0000001300)="916cd5a41a9b775cd9ee1dd1b7c4a353cf495a6c8bc6de9b257fa52d0273dcf9482c51764ddc5043796482bdebf71e5b0f4e322a46ac6b81501315dccdd7567ac3460592effdff77825f0bc1b5eb5ad33363a8dc81b875c192ccf784bdff1f8b9008e2ee4e165699c3aa1776ee2f757d", 0x70, 0x4004054, &(0x7f0000001380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) 56.144911249s ago: executing program 1 (id=3505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x1f, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x87}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.933881245s ago: executing program 4 (id=3506): syz_emit_ethernet(0x11fe, &(0x7f00000012c0)={@empty, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "95ec1f", 0x11c8, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, {[@srh={0x5c, 0x2, 0x4, 0x1, 0x47, 0x28, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x9, 0x27, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x5, [0x2, 0x1, 0x7, 0x80000000]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x5, 0x9f, "1643909b445e85aaa9e38ce2bb51e59d39709d9066a486bafcb6664813c68f2416de1d1e11b0c8aabe9870c7da060b20c42a4e42380f7873f4d427864876aee7622b09c04e2c39c0f7cf1be721e338a436395172f016d4d026023676fe5e091ad0df8ba68bbdd3b18abcd6ff5a17129ebe7df92dc112bf927b8d59bc9bbd29512224161d07adbbb9583999abfbe120f1b7e94402e1811b671b6385bda9d4f8"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0xfffe, [0x4, 0x4, 0x7]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x6, [0x90d]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @empty}]}, @srh={0x33, 0xa, 0x4, 0x5, 0x51, 0x18, 0x1c3, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @local]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x12, 0x7, "7173b0", 0xfd, "32488a"}, "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"}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, 0x0, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}], 0x2, 0x2101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 33 (id=3501): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xaa4d, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7a3441, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) unshare(0x2a060400) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x400000, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000ffffffff00000000"]}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x64000001}, 0x24008000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="62c690f054bd5197067e459355375a68e98b5676fa39a9180482e1d5558ec371f7cf285d22319f92f1fc08"], 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5bbf01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000020601010000000000000000000000000900020073797a3100000000050004000100000005000100070000000c000780060004404e23000005090000000000000000040003000000"], 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03b51398baa90b32991135036d1d04000000040000000a000300"/35, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$TUNGETVNETLE(r1, 0x40047452, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a800000ff"], 0x1c}}, 0x0) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) kernel console output (not intermixed with test programs): 8206][T14811] __x64_sys_sendmsg+0x1b1/0x290 [ 386.428233][T14811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.428278][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.428300][T14811] do_syscall_64+0x174/0x580 [ 386.428326][T14811] ? trace_irq_disable+0x3b/0x140 [ 386.428351][T14811] ? clear_bhb_loop+0x40/0x90 [ 386.428376][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.428394][T14811] RIP: 0033:0x7f6299d9e019 [ 386.428420][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.428438][T14811] RSP: 002b:00007f629ac13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.428459][T14811] RAX: ffffffffffffffda RBX: 00007f629a025fa0 RCX: 00007f6299d9e019 [ 386.428473][T14811] RDX: 00000000000080d1 RSI: 0000200000000080 RDI: 0000000000000003 [ 386.428486][T14811] RBP: 00007f629ac13090 R08: 0000000000000000 R09: 0000000000000000 [ 386.428499][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.428511][T14811] R13: 00007f629a026038 R14: 00007f629a025fa0 R15: 00007ffcd9a33888 [ 386.428545][T14811] [ 387.358432][T14845] sit0: entered promiscuous mode [ 387.446281][T14845] netlink: 'syz.2.2784': attribute type 1 has an invalid length. [ 387.463625][T14845] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2784'. [ 387.689867][T14856] FAULT_INJECTION: forcing a failure. [ 387.689867][T14856] name failslab, interval 1, probability 0, space 0, times 0 [ 387.723441][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'. [ 387.792522][T14856] CPU: 0 UID: 0 PID: 14856 Comm: syz.3.2787 Not tainted syzkaller #0 PREEMPT(full) [ 387.792549][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.792560][T14856] Call Trace: [ 387.792569][T14856] [ 387.792577][T14856] dump_stack_lvl+0xe8/0x150 [ 387.792611][T14856] should_fail_ex+0x40c/0x560 [ 387.792642][T14856] should_failslab+0xa8/0x100 [ 387.792674][T14856] __kmalloc_cache_node_noprof+0xaa/0x630 [ 387.792700][T14856] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 387.792728][T14856] ? page_pool_create_percpu+0x73/0xc70 [ 387.792745][T14856] ? page_pool_create_percpu+0x73/0xc70 [ 387.792772][T14856] page_pool_create_percpu+0x73/0xc70 [ 387.792790][T14856] ? page_pool_create+0xd/0x20 [ 387.792811][T14856] bpf_test_run_xdp_live+0x23a/0x1c20 [ 387.792841][T14856] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 387.792874][T14856] ? __mutex_unlock_slowpath+0x731/0x900 [ 387.792916][T14856] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.792948][T14856] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 387.792974][T14856] ? 0xffffffffa02051c0 [ 387.793042][T14856] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 387.793076][T14856] ? _copy_from_user+0x94/0xb0 [ 387.793095][T14856] ? bpf_test_init+0x113/0x150 [ 387.793118][T14856] ? xdp_convert_md_to_buff+0x5b/0x330 [ 387.793146][T14856] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 387.793192][T14856] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 387.793223][T14856] ? __fget_files+0x2a/0x420 [ 387.793253][T14856] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 387.793279][T14856] bpf_prog_test_run+0x2c5/0x340 [ 387.793310][T14856] __sys_bpf+0xa22/0xd90 [ 387.793343][T14856] ? __pfx___sys_bpf+0x10/0x10 [ 387.793379][T14856] ? __fget_files+0x2a/0x420 [ 387.793420][T14856] ? ksys_write+0x242/0x270 [ 387.793442][T14856] ? __pfx_ksys_write+0x10/0x10 [ 387.793466][T14856] __x64_sys_bpf+0xba/0xd0 [ 387.793489][T14856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.793509][T14856] do_syscall_64+0x174/0x580 [ 387.793534][T14856] ? trace_irq_disable+0x3b/0x140 [ 387.793558][T14856] ? clear_bhb_loop+0x40/0x90 [ 387.793582][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.793600][T14856] RIP: 0033:0x7f7fd459e019 [ 387.793618][T14856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.793634][T14856] RSP: 002b:00007f7fd54bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 387.793655][T14856] RAX: ffffffffffffffda RBX: 00007f7fd4825fa0 RCX: 00007f7fd459e019 [ 387.793669][T14856] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 387.793681][T14856] RBP: 00007f7fd54bf090 R08: 0000000000000000 R09: 0000000000000000 [ 387.793692][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.793703][T14856] R13: 00007f7fd4826038 R14: 00007f7fd4825fa0 R15: 00007ffeb7aa2648 [ 387.793731][T14856] [ 387.796494][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2788'. [ 387.952343][T14870] netlink: del zone limit has 8 unknown bytes [ 388.186314][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2789'. [ 388.268485][ T29] audit: type=1800 audit(1785576421.743:7): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2788" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2754 res=0 errno=0 [ 388.637192][T14890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2793'. [ 389.208730][T14905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2798'. [ 389.307188][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2799'. [ 389.632933][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'. [ 389.711182][T14919] bond15: (slave veth0_to_bond): Releasing active interface [ 389.802987][T14919] macvlan0: entered promiscuous mode [ 389.828741][T14919] macvlan0: entered allmulticast mode [ 391.215328][T14986] __nla_validate_parse: 1 callbacks suppressed [ 391.215346][T14986] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2819'. [ 391.407389][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.471396][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.481398][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.502501][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.510499][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.565921][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 392.285464][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 392.338078][ T5619] syz_tun (unregistering): left allmulticast mode [ 392.405740][T15011] team0: entered promiscuous mode [ 392.415131][T15011] team0: entered allmulticast mode [ 392.421472][T15011] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.563647][T15018] syz_tun: entered allmulticast mode [ 392.645582][ T9101] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.705305][ T9101] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.789742][T14987] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.843807][ T9101] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.856530][ T9101] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.194885][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 393.205897][T15039] C: renamed from veth1_to_team [ 393.281011][T15039] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2834'. [ 393.304866][T15035] bond_slave_0: left promiscuous mode [ 393.310645][T15035] bond_slave_1: left promiscuous mode [ 393.324829][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2836'. [ 393.379072][T15035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 393.553608][ T50] Bluetooth: hci5: command tx timeout [ 393.578944][ T9101] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.602104][ T9101] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.799132][T14987] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.806287][T14987] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.813441][T14987] bridge_slave_0: entered allmulticast mode [ 393.822255][T14987] bridge_slave_0: entered promiscuous mode [ 393.952564][T14987] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.959726][T14987] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.966899][T14987] bridge_slave_1: entered allmulticast mode [ 393.974598][T14987] bridge_slave_1: entered promiscuous mode [ 394.074208][T14987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.086673][T14987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.180727][T15078] FAULT_INJECTION: forcing a failure. [ 394.180727][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 394.193365][T15078] CPU: 1 UID: 0 PID: 15078 Comm: syz.2.2846 Not tainted syzkaller #0 PREEMPT(full) [ 394.193389][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.193401][T15078] Call Trace: [ 394.193409][T15078] [ 394.193418][T15078] dump_stack_lvl+0xe8/0x150 [ 394.193453][T15078] should_fail_ex+0x40c/0x560 [ 394.193484][T15078] should_failslab+0xa8/0x100 [ 394.193514][T15078] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 394.193539][T15078] ? skb_clone+0x212/0x3a0 [ 394.193562][T15078] ? skb_clone+0x212/0x3a0 [ 394.193593][T15078] skb_clone+0x212/0x3a0 [ 394.193622][T15078] __netlink_deliver_tap+0x413/0x860 [ 394.193739][T15078] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.193769][T15078] netlink_deliver_tap+0x19c/0x1b0 [ 394.193797][T15078] netlink_unicast+0x77f/0x940 [ 394.193833][T15078] netlink_sendmsg+0x813/0xb40 [ 394.193869][T15078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.193899][T15078] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.193928][T15078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.193953][T15078] sock_sendmsg_nosec+0x13a/0x180 [ 394.193986][T15078] ____sys_sendmsg+0x54e/0x850 [ 394.194017][T15078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.194052][T15078] ? import_iovec+0x73/0xa0 [ 394.194076][T15078] ___sys_sendmsg+0x2a5/0x360 [ 394.194099][T15078] ? __lock_acquire+0x683/0x2cf0 [ 394.194131][T15078] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.194191][T15078] ? __fget_files+0x2a/0x420 [ 394.194217][T15078] ? __fget_files+0x3a2/0x420 [ 394.194254][T15078] __x64_sys_sendmsg+0x1b1/0x290 [ 394.194282][T15078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.194327][T15078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.194349][T15078] do_syscall_64+0x174/0x580 [ 394.194375][T15078] ? trace_irq_disable+0x3b/0x140 [ 394.194401][T15078] ? clear_bhb_loop+0x40/0x90 [ 394.194426][T15078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.194445][T15078] RIP: 0033:0x7f5298d9e019 [ 394.194465][T15078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.194481][T15078] RSP: 002b:00007f5299bfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.194502][T15078] RAX: ffffffffffffffda RBX: 00007f5299025fa0 RCX: 00007f5298d9e019 [ 394.194517][T15078] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 394.194529][T15078] RBP: 00007f5299bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 394.194542][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.194554][T15078] R13: 00007f5299026038 R14: 00007f5299025fa0 R15: 00007ffe8a53cbe8 [ 394.194587][T15078] [ 394.576213][ T9101] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.585978][ T9101] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.665344][T14987] team0: Port device team_slave_0 added [ 394.691436][T14987] team0: Port device team_slave_1 added [ 394.752081][T14987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.759105][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.784992][T14987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.799913][T14987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.806865][T14987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.847068][T14987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.032338][ T9100] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.053294][T14987] hsr_slave_0: entered promiscuous mode [ 395.092549][T14987] hsr_slave_1: entered promiscuous mode [ 395.277016][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2853'. [ 395.629329][ T50] Bluetooth: hci5: command tx timeout [ 395.671845][ T9101] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 395.686691][T15112] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 395.759024][ T9101] bond0 (unregistering): Released all slaves [ 395.773894][ T9101] bond1 (unregistering): Released all slaves [ 395.838587][ T9101] bond2 (unregistering): Released all slaves [ 395.885185][ T9101] bond3 (unregistering): Released all slaves [ 395.955707][ T9101] bond4 (unregistering): Released all slaves [ 395.979419][ T9101] bond5 (unregistering): Released all slaves [ 396.016879][ T9101] bond6 (unregistering): Released all slaves [ 396.045321][ T9101] bond7 (unregistering): Released all slaves [ 396.363285][ T9101] tipc: Disabling bearer [ 396.453167][ T9101] tipc: Left network mode [ 396.590421][T15131] netlink: 'syz.0.2860': attribute type 24 has an invalid length. [ 396.618314][ T9111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.628746][ T9100] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.958123][ T9111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.081560][T14987] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.252554][T15146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2863'. [ 397.499335][T15158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'. [ 397.571316][T14987] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.639868][T15151] can: request_module (can-proto-0) failed. [ 397.718653][ T50] Bluetooth: hci5: command tx timeout [ 397.752126][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 397.849968][T15174] FAULT_INJECTION: forcing a failure. [ 397.849968][T15174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.880967][T15174] CPU: 1 UID: 0 PID: 15174 Comm: syz.2.2869 Not tainted syzkaller #0 PREEMPT(full) [ 397.880993][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.881004][T15174] Call Trace: [ 397.881012][T15174] [ 397.881020][T15174] dump_stack_lvl+0xe8/0x150 [ 397.881054][T15174] should_fail_ex+0x40c/0x560 [ 397.881083][T15174] _copy_from_user+0x2d/0xb0 [ 397.881103][T15174] ___sys_sendmsg+0x1c6/0x360 [ 397.881127][T15174] ? __lock_acquire+0x683/0x2cf0 [ 397.881159][T15174] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.881181][T15174] ? __lock_acquire+0x683/0x2cf0 [ 397.881211][T15174] ? kstrtouint+0x6e/0xe0 [ 397.881276][T15174] __sys_sendmmsg+0x273/0x4d0 [ 397.881305][T15174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 397.881338][T15174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 397.881379][T15174] ? ksys_write+0x242/0x270 [ 397.881400][T15174] ? __pfx_ksys_write+0x10/0x10 [ 397.881427][T15174] __x64_sys_sendmmsg+0xa0/0xc0 [ 397.881451][T15174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.881471][T15174] do_syscall_64+0x174/0x580 [ 397.881496][T15174] ? trace_irq_disable+0x3b/0x140 [ 397.881521][T15174] ? clear_bhb_loop+0x40/0x90 [ 397.881545][T15174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.881564][T15174] RIP: 0033:0x7f5298d9e019 [ 397.881581][T15174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.881598][T15174] RSP: 002b:00007f5299bfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 397.881618][T15174] RAX: ffffffffffffffda RBX: 00007f5299025fa0 RCX: 00007f5298d9e019 [ 397.881632][T15174] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 397.881646][T15174] RBP: 00007f5299bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 397.881658][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.881670][T15174] R13: 00007f5299026038 R14: 00007f5299025fa0 R15: 00007ffe8a53cbe8 [ 397.881702][T15174] [ 398.261930][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2868'. [ 398.372466][T14987] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.549589][T15196] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2870'. [ 398.569854][T15196] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2870'. [ 398.588766][T15196] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2870'. [ 398.621824][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 398.635407][ T9101] hsr_slave_0: left promiscuous mode [ 398.753029][ T9101] hsr_slave_1: left promiscuous mode [ 398.937086][T15209] netlink: 'syz.2.2876': attribute type 4 has an invalid length. [ 398.944842][T15209] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2876'. [ 399.503144][T15191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2873'. [ 399.537804][T15214] netlink: 'syz.2.2876': attribute type 1 has an invalid length. [ 399.604274][T14987] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.732344][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 399.798731][ T50] Bluetooth: hci5: command tx timeout [ 400.654638][T15262] netlink: 'syz.0.2885': attribute type 6 has an invalid length. [ 400.765181][T14987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 400.872632][T15271] xt_hashlimit: overflow, try lower: 6/0 [ 400.885620][T14987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.921100][T14987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 400.989534][T14987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.006097][ T9101] IPVS: stop unused estimator thread 0... [ 401.019647][T14987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.044858][T14987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.061178][T15276] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 401.078062][T15274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.085006][T14987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.093896][T15276] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 401.116212][T14987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.302190][T15282] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 401.358657][T15276] syzkaller0: entered promiscuous mode [ 401.364167][T15276] syzkaller0: entered allmulticast mode [ 401.456781][T15282] IPVS: Scheduler module ip_vs_sip not found [ 401.896151][T14987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.950677][T14987] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.974744][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.981980][ T9102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.064255][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.071433][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.315452][T15317] __nla_validate_parse: 6 callbacks suppressed [ 402.315471][T15317] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2898'. [ 402.383945][T15317] 0ªî{X¹¦: renamed from gretap0 [ 402.465418][T15327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.489416][T15317] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 402.895528][T15332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2905'. [ 403.185392][T15353] bond13: entered promiscuous mode [ 403.190595][T15353] bond13: entered allmulticast mode [ 403.196225][T15353] 8021q: adding VLAN 0 to HW filter on device bond13 [ 403.487433][T15368] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 403.497135][T14987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.632583][T15374] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2915'. [ 403.731104][T14987] veth0_vlan: entered promiscuous mode [ 403.742488][T14987] veth1_vlan: entered promiscuous mode [ 403.858079][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 403.892209][T14987] veth0_macvtap: entered promiscuous mode [ 403.901689][T15383] xt_hashlimit: size too large, truncated to 1048576 [ 403.949256][T14987] veth1_macvtap: entered promiscuous mode [ 403.949950][T15383] xt_hashlimit: invalid interval [ 404.006837][T14987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.030217][T15391] FAULT_INJECTION: forcing a failure. [ 404.030217][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 404.042829][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.0.2921 Not tainted syzkaller #0 PREEMPT(full) [ 404.042853][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.042865][T15391] Call Trace: [ 404.042873][T15391] [ 404.042881][T15391] dump_stack_lvl+0xe8/0x150 [ 404.042916][T15391] should_fail_ex+0x40c/0x560 [ 404.042947][T15391] should_failslab+0xa8/0x100 [ 404.042979][T15391] __kmalloc_cache_noprof+0xa8/0x660 [ 404.043003][T15391] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 404.043027][T15391] ? __kmalloc_cache_noprof+0x150/0x660 [ 404.043052][T15391] ? sctp_add_bind_addr+0x8c/0x370 [ 404.043073][T15391] ? sctp_add_bind_addr+0x8c/0x370 [ 404.043104][T15391] sctp_add_bind_addr+0x8c/0x370 [ 404.043132][T15391] sctp_copy_local_addr_list+0x31a/0x4e0 [ 404.043158][T15391] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 404.043183][T15391] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 404.043211][T15391] ? sctp_v4_is_any+0x35/0x60 [ 404.043233][T15391] ? sctp_copy_one_addr+0x93/0x360 [ 404.043261][T15391] sctp_bind_addr_copy+0xb3/0x3c0 [ 404.043285][T15391] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 404.043309][T15391] sctp_connect_new_asoc+0x2ff/0x6b0 [ 404.043341][T15391] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 404.043370][T15391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 404.043399][T15391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 404.043425][T15391] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 404.043453][T15391] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 404.043477][T15391] ? security_sctp_bind_connect+0x7e/0x2c0 [ 404.043509][T15391] sctp_sendmsg+0x159b/0x2d00 [ 404.043552][T15391] ? __pfx_sctp_sendmsg+0x10/0x10 [ 404.043587][T15391] ? aa_sk_perm+0x6d5/0x900 [ 404.043621][T15391] ? sock_rps_record_flow+0x19/0x350 [ 404.043647][T15391] ? inet_sendmsg+0x298/0x320 [ 404.043672][T15391] ? __pfx_inet_sendmsg+0x10/0x10 [ 404.043693][T15391] sock_sendmsg_nosec+0x10e/0x180 [ 404.043733][T15391] ____sys_sendmsg+0x54e/0x850 [ 404.043764][T15391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.043800][T15391] ? import_iovec+0x73/0xa0 [ 404.043822][T15391] ___sys_sendmsg+0x2a5/0x360 [ 404.043846][T15391] ? __lock_acquire+0x683/0x2cf0 [ 404.043878][T15391] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.043941][T15391] ? __fget_files+0x2a/0x420 [ 404.043966][T15391] ? __fget_files+0x3a2/0x420 [ 404.044002][T15391] __x64_sys_sendmsg+0x1b1/0x290 [ 404.044030][T15391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.044074][T15391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.044095][T15391] do_syscall_64+0x174/0x580 [ 404.044119][T15391] ? trace_irq_disable+0x3b/0x140 [ 404.044143][T15391] ? clear_bhb_loop+0x40/0x90 [ 404.044166][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.044184][T15391] RIP: 0033:0x7f6299d9e019 [ 404.044202][T15391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.044218][T15391] RSP: 002b:00007f629ac13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.044238][T15391] RAX: ffffffffffffffda RBX: 00007f629a025fa0 RCX: 00007f6299d9e019 [ 404.044253][T15391] RDX: 00000000000080d1 RSI: 0000200000000080 RDI: 0000000000000003 [ 404.044265][T15391] RBP: 00007f629ac13090 R08: 0000000000000000 R09: 0000000000000000 [ 404.044277][T15391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.044288][T15391] R13: 00007f629a026038 R14: 00007f629a025fa0 R15: 00007ffcd9a33888 [ 404.044318][T15391] [ 404.067025][T14987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.387962][T15400] xt_hashlimit: size too large, truncated to 1048576 [ 404.456782][T15400] xt_hashlimit: invalid interval [ 404.531794][ T9102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.798878][ T9101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.821288][ T9101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.897705][T15418] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2933'. [ 405.126598][ T9084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.197748][ T9084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.314301][ T9113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.328438][T15437] ip6tnl0: Master is either lo or non-ether device [ 405.376645][ T9113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.418614][ T9102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.617490][T15446] 8021q: VLANs not supported on wg1 [ 407.405809][T15501] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2956'. [ 408.001172][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.012503][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.013558][T15518] netlink: 'syz.2.2963': attribute type 32 has an invalid length. [ 408.089155][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2963'. [ 408.100894][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.111204][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.118871][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.281918][T15518] bond18: option coupled_control: invalid value (12) [ 408.393531][T15518] bond18 (unregistering): Released all slaves [ 408.419232][T15514] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2960'. [ 408.968959][T15550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2969'. [ 409.006536][T15554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.178522][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 409.192585][ T5620] syz_tun (unregistering): left allmulticast mode [ 409.424749][T15561] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.435659][T15569] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 409.453165][T15569] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2974'. [ 409.461140][T15572] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 409.502301][T15572] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 409.517351][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 409.580262][T15575] gretap0: entered promiscuous mode [ 409.773268][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2978'. [ 409.831142][T15519] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.189153][ T50] Bluetooth: hci0: command tx timeout [ 410.365026][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.372419][T15519] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.379797][T15519] bridge_slave_0: entered allmulticast mode [ 410.388149][T15519] bridge_slave_0: entered promiscuous mode [ 410.397407][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.404761][T15519] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.412843][T15519] bridge_slave_1: entered allmulticast mode [ 410.421471][T15519] bridge_slave_1: entered promiscuous mode [ 410.464835][T15519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.547320][T15519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.666089][T15519] team0: Port device team_slave_0 added [ 410.677988][T15519] team0: Port device team_slave_1 added [ 410.737652][T15519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.759124][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.787945][T15519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.818582][T15519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.830809][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.857726][T15519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.958853][T15519] hsr_slave_0: entered promiscuous mode [ 410.965410][T15519] hsr_slave_1: entered promiscuous mode [ 410.971680][T15519] debugfs: 'hsr0' already exists in 'hsr' [ 410.977424][T15519] Cannot create hsr debugfs directory [ 411.208095][T15612] xt_hashlimit: size too large, truncated to 1048576 [ 411.214810][T15612] xt_hashlimit: invalid interval [ 411.617062][T15519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.996814][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2996'. [ 412.019209][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2996'. [ 412.062136][T15637] openvswitch: netlink: Message has 512 unknown bytes. [ 412.089522][T15519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.111623][T15640] FAULT_INJECTION: forcing a failure. [ 412.111623][T15640] name failslab, interval 1, probability 0, space 0, times 0 [ 412.127333][T15640] CPU: 0 UID: 0 PID: 15640 Comm: syz.4.2998 Not tainted syzkaller #0 PREEMPT(full) [ 412.127358][T15640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.127370][T15640] Call Trace: [ 412.127378][T15640] [ 412.127387][T15640] dump_stack_lvl+0xe8/0x150 [ 412.127420][T15640] should_fail_ex+0x40c/0x560 [ 412.127451][T15640] should_failslab+0xa8/0x100 [ 412.127483][T15640] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 412.127508][T15640] ? __kernfs_new_node+0xe6/0x980 [ 412.127536][T15640] ? __kernfs_new_node+0xe6/0x980 [ 412.127565][T15640] ? kernfs_add_one+0x480/0x5e0 [ 412.127596][T15640] __kernfs_new_node+0xe6/0x980 [ 412.127623][T15640] ? up_write+0x19f/0x4a0 [ 412.127653][T15640] ? __pfx___kernfs_new_node+0x10/0x10 [ 412.127683][T15640] ? kernfs_root+0x1c/0x230 [ 412.127716][T15640] ? kernfs_root+0x1c/0x230 [ 412.127742][T15640] ? kernfs_root+0x1c/0x230 [ 412.127769][T15640] ? kernfs_root+0x1c/0x230 [ 412.127801][T15640] kernfs_new_node+0xea/0x140 [ 412.127835][T15640] __kernfs_create_file+0x4b/0x2e0 [ 412.127861][T15640] sysfs_add_file_mode_ns+0x237/0x300 [ 412.127894][T15640] sysfs_create_file_ns+0x12b/0x1b0 [ 412.127927][T15640] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 412.127956][T15640] ? device_create_file+0xf4/0x1b0 [ 412.127981][T15640] device_add+0x432/0xb80 [ 412.128005][T15640] netdev_register_kobject+0x178/0x310 [ 412.128041][T15640] register_netdevice+0x1433/0x1eb0 [ 412.128085][T15640] ? __pfx_register_netdevice+0x10/0x10 [ 412.128111][T15640] ? __pfx_macvlan_compute_filter+0x10/0x10 [ 412.128148][T15640] ? update_port_bc_cutoff+0xf0/0x1a0 [ 412.128177][T15640] macvlan_common_newlink+0x126b/0x19f0 [ 412.128202][T15640] ? alloc_netdev_mqs+0xd45/0x12b0 [ 412.128241][T15640] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 412.128270][T15640] ? rtnl_create_link+0xa04/0xd70 [ 412.128299][T15640] ? __pfx_macvlan_newlink+0x10/0x10 [ 412.128330][T15640] rtnl_newlink_create+0x305/0x7b0 [ 412.128361][T15640] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 412.128390][T15640] ? __pfx___mutex_lock+0x10/0x10 [ 412.128428][T15640] ? ns_capable+0x89/0xe0 [ 412.128457][T15640] rtnl_newlink+0x166d/0x1c30 [ 412.128496][T15640] ? __pfx_rtnl_newlink+0x10/0x10 [ 412.128520][T15640] ? __lock_acquire+0x683/0x2cf0 [ 412.128555][T15640] ? __lock_acquire+0x683/0x2cf0 [ 412.128598][T15640] ? unwind_next_frame+0x8f/0x2550 [ 412.128628][T15640] ? is_bpf_text_address+0x26/0x2b0 [ 412.128668][T15640] ? is_bpf_text_address+0x26/0x2b0 [ 412.128702][T15640] ? __lock_acquire+0x683/0x2cf0 [ 412.128732][T15640] ? kernel_text_address+0xa5/0xe0 [ 412.128753][T15640] ? __kernel_text_address+0xd/0x30 [ 412.128771][T15640] ? unwind_get_return_address+0x4d/0x90 [ 412.128792][T15640] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.128817][T15640] ? arch_stack_walk+0xfb/0x150 [ 412.128850][T15640] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 412.128889][T15640] ? __pfx_rtnl_newlink+0x10/0x10 [ 412.128911][T15640] rtnetlink_rcv_msg+0x802/0xc00 [ 412.128936][T15640] ? netlink_sendmsg+0x5d4/0xb40 [ 412.128965][T15640] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 412.128987][T15640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.129011][T15640] ? __lock_acquire+0x683/0x2cf0 [ 412.129052][T15640] netlink_rcv_skb+0x226/0x4a0 [ 412.129078][T15640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.129103][T15640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.129142][T15640] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.129166][T15640] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.129198][T15640] netlink_unicast+0x7bb/0x940 [ 412.129233][T15640] netlink_sendmsg+0x813/0xb40 [ 412.129269][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.129299][T15640] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.129328][T15640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.129352][T15640] sock_sendmsg_nosec+0x13a/0x180 [ 412.129385][T15640] ____sys_sendmsg+0x54e/0x850 [ 412.129415][T15640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.129451][T15640] ? import_iovec+0x73/0xa0 [ 412.129474][T15640] ___sys_sendmsg+0x2a5/0x360 [ 412.129497][T15640] ? __lock_acquire+0x683/0x2cf0 [ 412.129528][T15640] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.129592][T15640] ? __fget_files+0x2a/0x420 [ 412.129617][T15640] ? __fget_files+0x3a2/0x420 [ 412.129655][T15640] __x64_sys_sendmsg+0x1b1/0x290 [ 412.129683][T15640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.129728][T15640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.129750][T15640] do_syscall_64+0x174/0x580 [ 412.129776][T15640] ? trace_irq_disable+0x3b/0x140 [ 412.129800][T15640] ? clear_bhb_loop+0x40/0x90 [ 412.129825][T15640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.129844][T15640] RIP: 0033:0x7fc0d259e019 [ 412.129863][T15640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.129880][T15640] RSP: 002b:00007fc0d3547028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.129901][T15640] RAX: ffffffffffffffda RBX: 00007fc0d2825fa0 RCX: 00007fc0d259e019 [ 412.129921][T15640] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000006 [ 412.129935][T15640] RBP: 00007fc0d3547090 R08: 0000000000000000 R09: 0000000000000000 [ 412.129947][T15640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.129960][T15640] R13: 00007fc0d2826038 R14: 00007fc0d2825fa0 R15: 00007fff34111ed8 [ 412.129993][T15640] [ 412.645842][ T50] Bluetooth: hci0: command tx timeout [ 412.772322][T15519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.939120][T15519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.949448][T15650] TCP: TCP_TX_DELAY enabled [ 413.089306][ T29] audit: type=1804 audit(1785576446.543:8): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3003" name="/newroot/11/cgroup.controllers" dev="tmpfs" ino=73 res=1 errno=0 [ 413.168636][ T29] audit: type=1800 audit(1785576446.603:9): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3003" name="cgroup.controllers" dev="tmpfs" ino=73 res=0 errno=0 [ 413.182795][T15649] netlink: 'syz.1.3001': attribute type 4 has an invalid length. [ 413.200791][T15658] __nla_validate_parse: 4 callbacks suppressed [ 413.200806][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3004'. [ 413.292881][T15653] virt_wifi0 speed is unknown, defaulting to 1000 [ 413.484599][T15665] ip6tnl3: entered allmulticast mode [ 414.280237][T15682] netlink: 'syz.1.3012': attribute type 1 has an invalid length. [ 414.568004][T15519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.621959][T15519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.629550][ T50] Bluetooth: hci0: command tx timeout [ 414.635979][T15519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.649579][T15519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.667816][T15519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.701925][T15519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.711276][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.719677][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.734928][T15519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.749521][T15519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.769441][T15693] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.777645][T15693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.785200][T15693] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.792392][T15693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.806151][T15693] bridge0: entered promiscuous mode [ 414.813250][T15693] bridge0: entered allmulticast mode [ 415.008917][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.126792][T15519] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.140555][T15705] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3019'. [ 415.196694][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.203964][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.276910][T15709] syzkaller0: entered promiscuous mode [ 415.326845][T15709] syzkaller0: entered allmulticast mode [ 415.391892][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.399077][ T9108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.485937][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3018'. [ 415.846519][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 415.912758][T15734] dummy0: entered promiscuous mode [ 415.924354][T15734] dummy0: left promiscuous mode [ 416.213523][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 416.222435][T15748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3032'. [ 416.570972][T15758] bridge_slave_0: left allmulticast mode [ 416.576661][T15758] bridge_slave_0: left promiscuous mode [ 416.582431][T15758] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.596115][T15758] bridge_slave_1: left allmulticast mode [ 416.601783][T15758] bridge_slave_1: left promiscuous mode [ 416.607545][T15758] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.679126][ T29] audit: type=1804 audit(1785576450.103:10): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3038" name="/newroot/18/cgroup.controllers" dev="tmpfs" ino=113 res=1 errno=0 [ 416.705117][ T50] Bluetooth: hci0: command tx timeout [ 416.719182][T15758] bond0: (slave bond_slave_0): Releasing backup interface [ 416.769588][ T29] audit: type=1800 audit(1785576450.103:11): pid=15765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3038" name="cgroup.controllers" dev="tmpfs" ino=113 res=0 errno=0 [ 416.877595][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3040'. [ 416.893738][T15758] bond0: (slave bond_slave_1): Releasing backup interface [ 416.933316][T15758] team0: Port device team_slave_0 removed [ 417.000357][T15758] team0: Port device team_slave_1 removed [ 417.017654][T15758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.057868][T15758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.080105][T15758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.087503][T15758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.100116][T15758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.153251][T15519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.335130][T15519] veth0_vlan: entered promiscuous mode [ 417.403759][T15519] veth1_vlan: entered promiscuous mode [ 417.497887][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 417.550556][T15519] veth0_macvtap: entered promiscuous mode [ 417.564546][T15519] veth1_macvtap: entered promiscuous mode [ 417.590032][T15784] netlink: 'syz.2.3046': attribute type 7 has an invalid length. [ 417.603505][T15785] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 417.614554][T15519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.666470][T15519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.733037][ T9108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.771372][ T9102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.821061][ T9102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.981741][ T9106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.002868][ T9106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.107228][ T9106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.194863][ T9100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.244979][ T9100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.326948][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3052'. [ 418.354684][T15799] nbd: must specify at least one socket [ 418.549997][T15806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3054'. [ 418.604796][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'. [ 419.457394][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.482746][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.495632][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.510318][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.522591][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.584311][T15825] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 419.730818][T15825] 8021q: adding VLAN 0 to HW filter on device bond18 [ 419.896994][T15832] bond18: (slave geneve4): making interface the new active one [ 419.914607][T15832] bond18: (slave geneve4): Enslaving as an active interface with an up link [ 419.977641][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 419.992633][T15835] ip6tnl1: entered allmulticast mode [ 420.101501][ T5634] syz_tun (unregistering): left allmulticast mode [ 420.139151][ T9100] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 420.152846][T15845] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 420.179845][T15845] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 420.285102][T15836] syzkaller0: entered promiscuous mode [ 420.290762][T15836] syzkaller0: entered allmulticast mode [ 420.307432][T15851] netlink: 'syz.0.3067': attribute type 12 has an invalid length. [ 420.328467][T15851] netlink: 'syz.0.3067': attribute type 29 has an invalid length. [ 420.342324][T15851] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3067'. [ 420.352361][T15845] tipc: Resetting bearer [ 421.658002][ T5633] Bluetooth: hci1: command tx timeout [ 423.729160][ T5633] Bluetooth: hci1: command tx timeout [ 424.058559][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.156583][T15826] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.402999][ T9108] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.412216][ T9108] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.424682][ T9108] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.433555][ T9108] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.442518][ T9108] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.492490][ T9108] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.504544][ T9108] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.514761][ T9108] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.983699][T15905] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3083'. [ 425.002090][T15905] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3083'. [ 425.105447][T15826] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.112693][T15826] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.119902][T15826] bridge_slave_0: entered allmulticast mode [ 425.127541][T15826] bridge_slave_0: entered promiscuous mode [ 425.140843][T15826] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.148046][T15826] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.149217][T15911] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 425.155194][T15826] bridge_slave_1: entered allmulticast mode [ 425.224657][T15826] bridge_slave_1: entered promiscuous mode [ 425.412077][T15826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.453172][T15826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.540450][T15826] team0: Port device team_slave_0 added [ 425.549003][T15826] team0: Port device team_slave_1 added [ 425.572189][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3089'. [ 425.620772][T15923] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 425.706505][T15826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.740701][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.766594][T15826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.786470][T15826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.793424][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.821059][T15826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.830241][ T5633] Bluetooth: hci1: command tx timeout [ 425.851715][T15932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3093'. [ 425.884854][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3092'. [ 425.905322][T15935] netlink: 'syz.1.3092': attribute type 7 has an invalid length. [ 425.913427][T15935] netlink: 'syz.1.3092': attribute type 8 has an invalid length. [ 425.921643][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'. [ 425.922175][T15932] tipc: Started in network mode [ 425.936169][T15932] tipc: Node identity 4246, cluster identity 4711 [ 425.944379][T15932] tipc: Node number set to 16966 [ 425.957840][T15826] hsr_slave_0: entered promiscuous mode [ 425.964999][T15938] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3092'. [ 425.977623][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3092'. [ 425.989342][T15826] hsr_slave_1: entered promiscuous mode [ 425.999035][T15826] debugfs: 'hsr0' already exists in 'hsr' [ 426.007838][T15826] Cannot create hsr debugfs directory [ 426.979471][T15826] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.008060][T15826] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.119124][T15985] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003 [ 427.127221][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 427.222959][T15982] dummy0: entered promiscuous mode [ 427.229569][T15982] gretap0: entered promiscuous mode [ 427.235483][T15982] debugfs: 'hsr1' already exists in 'hsr' [ 427.241208][T15982] Cannot create hsr debugfs directory [ 427.246758][T15982] hsr1: entered allmulticast mode [ 427.251789][T15982] dummy0: entered allmulticast mode [ 427.257029][T15982] gretap0: entered allmulticast mode [ 427.291012][T15986] vlan2: entered allmulticast mode [ 427.307940][T15986] bond0: entered allmulticast mode [ 427.328367][T15986] bridge0: entered allmulticast mode [ 427.328867][T15987] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3099'. [ 427.415601][T15978] vlan3: entered promiscuous mode [ 427.426906][T15978] veth1_macvtap: entered promiscuous mode [ 427.556092][T15826] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.565866][T15826] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.647549][ T9102] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc9 [ 427.772607][T15826] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.782390][T15826] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.908309][ T5633] Bluetooth: hci1: command tx timeout [ 428.018343][T16006] FAULT_INJECTION: forcing a failure. [ 428.018343][T16006] name failslab, interval 1, probability 0, space 0, times 0 [ 428.045161][T16006] CPU: 1 UID: 0 PID: 16006 Comm: syz.1.3108 Not tainted syzkaller #0 PREEMPT(full) [ 428.045186][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.045199][T16006] Call Trace: [ 428.045206][T16006] [ 428.045213][T16006] dump_stack_lvl+0xe8/0x150 [ 428.045246][T16006] should_fail_ex+0x40c/0x560 [ 428.045271][T16006] ? page_pool_create_percpu+0x2ef/0xc70 [ 428.045291][T16006] should_failslab+0xa8/0x100 [ 428.045321][T16006] __kvmalloc_node_noprof+0x176/0x860 [ 428.045351][T16006] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 428.045377][T16006] ? page_pool_create_percpu+0x2ef/0xc70 [ 428.045402][T16006] page_pool_create_percpu+0x2ef/0xc70 [ 428.045426][T16006] bpf_test_run_xdp_live+0x23a/0x1c20 [ 428.045457][T16006] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 428.045489][T16006] ? __mutex_unlock_slowpath+0x731/0x900 [ 428.045522][T16006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 428.045554][T16006] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 428.045580][T16006] ? 0xffffffffa02051c0 [ 428.045647][T16006] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 428.045682][T16006] ? _copy_from_user+0x94/0xb0 [ 428.045702][T16006] ? bpf_test_init+0x113/0x150 [ 428.045724][T16006] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.045752][T16006] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 428.045777][T16006] ? kstrtoull+0x12f/0x1d0 [ 428.045814][T16006] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.045838][T16006] ? __might_fault+0xaf/0x130 [ 428.045872][T16006] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.045906][T16006] bpf_prog_test_run+0x2c5/0x340 [ 428.045937][T16006] __sys_bpf+0xa22/0xd90 [ 428.045969][T16006] ? vfs_write+0x920/0xba0 [ 428.045988][T16006] ? __pfx___sys_bpf+0x10/0x10 [ 428.046045][T16006] ? ksys_write+0x1fc/0x270 [ 428.046067][T16006] ? __pfx_ksys_write+0x10/0x10 [ 428.046092][T16006] __x64_sys_bpf+0xba/0xd0 [ 428.046116][T16006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.046137][T16006] do_syscall_64+0x174/0x580 [ 428.046163][T16006] ? trace_irq_disable+0x3b/0x140 [ 428.046188][T16006] ? clear_bhb_loop+0x40/0x90 [ 428.046212][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.046232][T16006] RIP: 0033:0x7f07a7f9e019 [ 428.046249][T16006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.046266][T16006] RSP: 002b:00007f07a8dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.046287][T16006] RAX: ffffffffffffffda RBX: 00007f07a8225fa0 RCX: 00007f07a7f9e019 [ 428.046302][T16006] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 428.046315][T16006] RBP: 00007f07a8dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 428.046327][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.046339][T16006] R13: 00007f07a8226038 R14: 00007f07a8225fa0 R15: 00007ffef6358568 [ 428.046372][T16006] [ 428.046380][T16006] page_pool_create_percpu() gave up with errno -12 [ 428.118677][T16009] macvtap0: entered promiscuous mode [ 428.372416][T15995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.465408][T15826] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.475227][T15826] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.039290][T15826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.109897][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.149138][T15826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.212055][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.239904][T16036] FAULT_INJECTION: forcing a failure. [ 429.239904][T16036] name failslab, interval 1, probability 0, space 0, times 0 [ 429.252537][T16036] CPU: 1 UID: 0 PID: 16036 Comm: syz.3.3118 Not tainted syzkaller #0 PREEMPT(full) [ 429.252562][T16036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.252574][T16036] Call Trace: [ 429.252582][T16036] [ 429.252590][T16036] dump_stack_lvl+0xe8/0x150 [ 429.252624][T16036] should_fail_ex+0x40c/0x560 [ 429.252655][T16036] should_failslab+0xa8/0x100 [ 429.252685][T16036] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 429.252711][T16036] ? __kernfs_new_node+0xe6/0x980 [ 429.252737][T16036] ? __kernfs_new_node+0xe6/0x980 [ 429.252778][T16036] __kernfs_new_node+0xe6/0x980 [ 429.252815][T16036] ? __pfx___kernfs_new_node+0x10/0x10 [ 429.252851][T16036] ? kernfs_root+0x1c/0x230 [ 429.252884][T16036] ? kernfs_root+0x1c/0x230 [ 429.252909][T16036] ? kernfs_root+0x1c/0x230 [ 429.252933][T16036] ? kernfs_root+0x1c/0x230 [ 429.252964][T16036] kernfs_new_node+0xea/0x140 [ 429.252997][T16036] kernfs_create_link+0xa7/0x200 [ 429.253023][T16036] sysfs_do_create_link_sd+0x83/0x110 [ 429.253056][T16036] device_add_class_symlinks+0xb6/0x240 [ 429.253083][T16036] device_add+0x467/0xb80 [ 429.253108][T16036] netdev_register_kobject+0x178/0x310 [ 429.253142][T16036] register_netdevice+0x1433/0x1eb0 [ 429.253186][T16036] ? __pfx_register_netdevice+0x10/0x10 [ 429.253212][T16036] ? __pfx_macvlan_compute_filter+0x10/0x10 [ 429.253249][T16036] ? update_port_bc_cutoff+0xf0/0x1a0 [ 429.253277][T16036] macvlan_common_newlink+0x126b/0x19f0 [ 429.253302][T16036] ? alloc_netdev_mqs+0xd45/0x12b0 [ 429.253340][T16036] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 429.253368][T16036] ? rtnl_create_link+0xa04/0xd70 [ 429.253397][T16036] ? __pfx_macvlan_newlink+0x10/0x10 [ 429.253428][T16036] rtnl_newlink_create+0x305/0x7b0 [ 429.253459][T16036] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 429.253488][T16036] ? __pfx___mutex_lock+0x10/0x10 [ 429.253527][T16036] ? ns_capable+0x89/0xe0 [ 429.253555][T16036] rtnl_newlink+0x166d/0x1c30 [ 429.253594][T16036] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.253614][T16036] ? do_syscall_64+0x174/0x580 [ 429.253638][T16036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.253698][T16036] ? kasan_quarantine_put+0xbb/0x1f0 [ 429.253734][T16036] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.253771][T16036] ? nlmon_xmit+0xb0/0x100 [ 429.253789][T16036] ? kmem_cache_free+0x182/0x650 [ 429.253832][T16036] ? __lock_acquire+0x683/0x2cf0 [ 429.253864][T16036] ? __dev_queue_xmit+0x29b/0x3820 [ 429.253893][T16036] ? __local_bh_enable_ip+0xd0/0x130 [ 429.253920][T16036] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.253945][T16036] ? __dev_queue_xmit+0x29b/0x3820 [ 429.253968][T16036] ? __local_bh_enable_ip+0xd0/0x130 [ 429.253989][T16036] ? __dev_queue_xmit+0x29b/0x3820 [ 429.254022][T16036] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 429.254061][T16036] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.254082][T16036] rtnetlink_rcv_msg+0x802/0xc00 [ 429.254108][T16036] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 429.254129][T16036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.254149][T16036] ? ref_tracker_free+0x689/0x830 [ 429.254178][T16036] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.254214][T16036] netlink_rcv_skb+0x226/0x4a0 [ 429.254241][T16036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.254265][T16036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.254304][T16036] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.254329][T16036] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.254359][T16036] netlink_unicast+0x7bb/0x940 [ 429.254394][T16036] netlink_sendmsg+0x813/0xb40 [ 429.254430][T16036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.254460][T16036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.254489][T16036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.254513][T16036] sock_sendmsg_nosec+0x13a/0x180 [ 429.254546][T16036] ____sys_sendmsg+0x54e/0x850 [ 429.254577][T16036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.254612][T16036] ? import_iovec+0x73/0xa0 [ 429.254635][T16036] ___sys_sendmsg+0x2a5/0x360 [ 429.254658][T16036] ? __lock_acquire+0x683/0x2cf0 [ 429.254689][T16036] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.254750][T16036] ? __fget_files+0x2a/0x420 [ 429.254782][T16036] ? __fget_files+0x3a2/0x420 [ 429.254819][T16036] __x64_sys_sendmsg+0x1b1/0x290 [ 429.254847][T16036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.254892][T16036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.254913][T16036] do_syscall_64+0x174/0x580 [ 429.254938][T16036] ? trace_irq_disable+0x3b/0x140 [ 429.254964][T16036] ? clear_bhb_loop+0x40/0x90 [ 429.254989][T16036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.255008][T16036] RIP: 0033:0x7f0dc5b9e019 [ 429.255027][T16036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.255044][T16036] RSP: 002b:00007f0dc6a03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.255065][T16036] RAX: ffffffffffffffda RBX: 00007f0dc5e25fa0 RCX: 00007f0dc5b9e019 [ 429.255079][T16036] RDX: 0000000020008040 RSI: 0000200000000280 RDI: 0000000000000006 [ 429.255092][T16036] RBP: 00007f0dc6a03090 R08: 0000000000000000 R09: 0000000000000000 [ 429.255105][T16036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.255116][T16036] R13: 00007f0dc5e26038 R14: 00007f0dc5e25fa0 R15: 00007ffce00ec628 [ 429.255149][T16036] [ 429.837546][T15826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.971201][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.041992][T15826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 430.140074][T15826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.439168][T16053] netlink: 'syz.2.3122': attribute type 4 has an invalid length. [ 430.483895][T15826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.572228][T15826] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.622951][ T9084] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.630094][ T9084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.662790][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.670001][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.815943][T15826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.842770][T15826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.969645][T16065] __nla_validate_parse: 5 callbacks suppressed [ 430.969662][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 431.048504][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 431.131429][T16065] veth0_vlan: left promiscuous mode [ 431.186395][T16065] veth0_vlan: entered promiscuous mode [ 431.225695][T16065] veth0_vlan: entered allmulticast mode [ 431.400870][T16083] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3129'. [ 432.208797][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 432.554720][T15826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.569039][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 432.674010][T16118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3137'. [ 432.717322][T16119] netlink: 'syz.0.3136': attribute type 1 has an invalid length. [ 432.877508][T16118] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 432.913122][T16118] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 433.133805][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 433.422064][T16141] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3143'. [ 433.581673][T16144] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 433.667048][T15826] veth0_vlan: entered promiscuous mode [ 433.693128][T15826] veth1_vlan: entered promiscuous mode [ 433.821226][T15826] veth0_macvtap: entered promiscuous mode [ 433.862037][T15826] veth1_macvtap: entered promiscuous mode [ 433.933657][T15826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.967770][T15826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.267815][ T9084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.290754][ T9084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.299596][ T9084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.317538][ T9084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.355106][ T9113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.362938][ T9113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.416129][T16161] FAULT_INJECTION: forcing a failure. [ 434.416129][T16161] name failslab, interval 1, probability 0, space 0, times 0 [ 434.477145][T16161] CPU: 0 UID: 0 PID: 16161 Comm: syz.2.3150 Not tainted syzkaller #0 PREEMPT(full) [ 434.477177][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.477189][T16161] Call Trace: [ 434.477197][T16161] [ 434.477206][T16161] dump_stack_lvl+0xe8/0x150 [ 434.477240][T16161] should_fail_ex+0x40c/0x560 [ 434.477271][T16161] should_failslab+0xa8/0x100 [ 434.477301][T16161] __kmalloc_cache_noprof+0xa8/0x660 [ 434.477330][T16161] ? sctp_stream_init_ext+0x57/0x180 [ 434.477350][T16161] ? sctp_stream_init_ext+0x57/0x180 [ 434.477378][T16161] sctp_stream_init_ext+0x57/0x180 [ 434.477403][T16161] sctp_sendmsg_to_asoc+0x88d/0x1880 [ 434.477431][T16161] ? sctp_assoc_set_primary+0x240/0x340 [ 434.477464][T16161] ? sctp_assoc_add_peer+0xd57/0x1430 [ 434.477505][T16161] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 434.477532][T16161] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 434.477559][T16161] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 434.477588][T16161] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 434.477616][T16161] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 434.477641][T16161] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 434.477669][T16161] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 434.477692][T16161] ? security_sctp_bind_connect+0x7e/0x2c0 [ 434.477723][T16161] sctp_sendmsg+0x1bb5/0x2d00 [ 434.477766][T16161] ? __pfx_sctp_sendmsg+0x10/0x10 [ 434.477799][T16161] ? aa_sk_perm+0x6d5/0x900 [ 434.477833][T16161] ? sock_rps_record_flow+0x19/0x350 [ 434.477865][T16161] ? inet_sendmsg+0x298/0x320 [ 434.477890][T16161] ? __pfx_inet_sendmsg+0x10/0x10 [ 434.477911][T16161] sock_sendmsg_nosec+0x10e/0x180 [ 434.477944][T16161] ____sys_sendmsg+0x54e/0x850 [ 434.477974][T16161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.478008][T16161] ? import_iovec+0x73/0xa0 [ 434.478032][T16161] ___sys_sendmsg+0x2a5/0x360 [ 434.478054][T16161] ? __lock_acquire+0x683/0x2cf0 [ 434.478086][T16161] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.478148][T16161] ? __fget_files+0x2a/0x420 [ 434.478173][T16161] ? __fget_files+0x3a2/0x420 [ 434.478210][T16161] __x64_sys_sendmsg+0x1b1/0x290 [ 434.478238][T16161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.478283][T16161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.478304][T16161] do_syscall_64+0x174/0x580 [ 434.478330][T16161] ? trace_irq_disable+0x3b/0x140 [ 434.478354][T16161] ? clear_bhb_loop+0x40/0x90 [ 434.478378][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.478397][T16161] RIP: 0033:0x7f5298d9e019 [ 434.478415][T16161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.478432][T16161] RSP: 002b:00007f5299bfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.478453][T16161] RAX: ffffffffffffffda RBX: 00007f5299025fa0 RCX: 00007f5298d9e019 [ 434.478467][T16161] RDX: 00000000000080d1 RSI: 0000200000000080 RDI: 0000000000000003 [ 434.478479][T16161] RBP: 00007f5299bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 434.478492][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.478503][T16161] R13: 00007f5299026038 R14: 00007f5299025fa0 R15: 00007ffe8a53cbe8 [ 434.478536][T16161] [ 434.789599][T16157] vlan2: entered promiscuous mode [ 434.794649][T16157] bond0: entered promiscuous mode [ 434.800204][T16157] bond_slave_0: entered promiscuous mode [ 434.806037][T16157] bond_slave_1: entered promiscuous mode [ 435.004712][ T9092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.068552][ T9092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.235044][T16163] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 435.250126][T16163] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 435.464620][T16165] tipc: Started in network mode [ 435.469525][T16165] tipc: Node identity ffffffff, cluster identity 4711 [ 435.476333][T16165] tipc: Enabling of bearer rejected, failed to enable media [ 435.566384][T16169] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 435.608731][T16169] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3153'. [ 436.380549][T16190] pimreg: tun_chr_ioctl cmd 1074025677 [ 436.409089][T16190] pimreg: linktype set to 270 [ 436.556530][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.625815][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.651418][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.663929][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.696391][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.897162][T16041] Set syz1 is full, maxelem 65536 reached [ 436.924118][ T5627] syz_tun (unregistering): left allmulticast mode [ 437.245315][T16208] syzkaller0: entered promiscuous mode [ 437.250825][T16208] syzkaller0: entered allmulticast mode [ 437.442413][T16208] tipc: Enabling of bearer rejected, failed to enable media [ 437.896585][T16233] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.909191][T16235] FAULT_INJECTION: forcing a failure. [ 437.909191][T16235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.959966][T16235] CPU: 1 UID: 0 PID: 16235 Comm: syz.1.3173 Not tainted syzkaller #0 PREEMPT(full) [ 437.959990][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.960000][T16235] Call Trace: [ 437.960007][T16235] [ 437.960014][T16235] dump_stack_lvl+0xe8/0x150 [ 437.960042][T16235] should_fail_ex+0x40c/0x560 [ 437.960066][T16235] _copy_from_user+0x2d/0xb0 [ 437.960083][T16235] ___sys_recvmsg+0x173/0x5a0 [ 437.960108][T16235] ? __pfx____sys_recvmsg+0x10/0x10 [ 437.960131][T16235] ? __fget_files+0x2a/0x420 [ 437.960165][T16235] ? __fget_files+0x3a2/0x420 [ 437.960193][T16235] do_recvmmsg+0x31a/0x7f0 [ 437.960219][T16235] ? __pfx_do_recvmmsg+0x10/0x10 [ 437.960248][T16235] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.960271][T16235] ? __fget_files+0x3a2/0x420 [ 437.960298][T16235] __x64_sys_recvmmsg+0x198/0x250 [ 437.960320][T16235] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 437.960347][T16235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.960366][T16235] do_syscall_64+0x174/0x580 [ 437.960386][T16235] ? trace_irq_disable+0x3b/0x140 [ 437.960407][T16235] ? clear_bhb_loop+0x40/0x90 [ 437.960432][T16235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.960448][T16235] RIP: 0033:0x7f07a7f9e019 [ 437.960463][T16235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.960476][T16235] RSP: 002b:00007f07a8dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 437.960493][T16235] RAX: ffffffffffffffda RBX: 00007f07a8225fa0 RCX: 00007f07a7f9e019 [ 437.960505][T16235] RDX: 0000000000000001 RSI: 00002000000058c0 RDI: 0000000000000003 [ 437.960515][T16235] RBP: 00007f07a8dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 437.960525][T16235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.960534][T16235] R13: 00007f07a8226038 R14: 00007f07a8225fa0 R15: 00007ffef6358568 [ 437.960560][T16235] [ 438.215148][T16191] virt_wifi0 speed is unknown, defaulting to 1000 [ 438.256054][T16234] syzkaller0: entered promiscuous mode [ 438.261983][T16234] syzkaller0: entered allmulticast mode [ 438.427836][T16234] tipc: Enabled bearer , priority 0 [ 438.484804][T16234] tipc: Resetting bearer [ 438.843700][ T5633] Bluetooth: hci4: command tx timeout [ 438.924929][T16232] tipc: Resetting bearer [ 438.955810][T16232] tipc: Disabling bearer [ 439.129098][T16191] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.136509][T16191] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.181656][T16191] bridge_slave_0: entered allmulticast mode [ 439.197214][T16191] bridge_slave_0: entered promiscuous mode [ 439.231170][ T42] page_pool_release_retry() stalled pool shutdown: id 93, 1 inflight 60 sec [ 439.248926][T16191] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.290126][T16191] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.317798][T16191] bridge_slave_1: entered allmulticast mode [ 439.341034][T16191] bridge_slave_1: entered promiscuous mode [ 439.527815][T16191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.605980][T16191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.659856][T16191] team0: Port device team_slave_0 added [ 439.668199][T16191] team0: Port device team_slave_1 added [ 439.913240][T16191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.920212][T16191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.959941][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.970966][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 440.076648][T16191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.096427][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 440.235501][T16191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.250046][T16191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.277148][T16191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.449731][T16274] syzkaller0: entered promiscuous mode [ 440.455244][T16274] syzkaller0: entered allmulticast mode [ 440.614923][T16296] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 440.930768][ T5633] Bluetooth: hci4: command tx timeout [ 441.092421][T16306] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 441.293938][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'. [ 442.997725][ T5633] Bluetooth: hci4: command tx timeout [ 443.728544][T16316] vlan2: entered allmulticast mode [ 443.733698][T16316] bond0: entered allmulticast mode [ 443.738809][T16316] bond_slave_0: entered allmulticast mode [ 443.744513][T16316] bond_slave_1: entered allmulticast mode [ 443.838435][T16191] hsr_slave_0: entered promiscuous mode [ 443.844594][T16191] hsr_slave_1: entered promiscuous mode [ 443.850814][T16191] debugfs: 'hsr0' already exists in 'hsr' [ 443.856562][T16191] Cannot create hsr debugfs directory [ 444.093848][T16331] xt_hashlimit: size too large, truncated to 1048576 [ 444.501426][T16191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.872590][T16357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3202'. [ 444.946267][T16191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.958743][T16359] FAULT_INJECTION: forcing a failure. [ 444.958743][T16359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.976587][T16359] CPU: 0 UID: 0 PID: 16359 Comm: syz.4.3203 Not tainted syzkaller #0 PREEMPT(full) [ 444.976612][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.976623][T16359] Call Trace: [ 444.976628][T16359] [ 444.976633][T16359] dump_stack_lvl+0xe8/0x150 [ 444.976655][T16359] should_fail_ex+0x40c/0x560 [ 444.976672][T16359] _copy_to_user+0x31/0xb0 [ 444.976684][T16359] simple_read_from_buffer+0xe1/0x170 [ 444.976703][T16359] proc_fail_nth_read+0x1bb/0x230 [ 444.976720][T16359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.976737][T16359] ? rw_verify_area+0x24a/0x4c0 [ 444.976748][T16359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.976763][T16359] vfs_read+0x213/0xa80 [ 444.976776][T16359] ? __pfx___mutex_lock+0x10/0x10 [ 444.976792][T16359] ? __pfx_vfs_read+0x10/0x10 [ 444.976803][T16359] ? __fget_files+0x2a/0x420 [ 444.976820][T16359] ? __fget_files+0x3a2/0x420 [ 444.976833][T16359] ? __fget_files+0x2a/0x420 [ 444.976852][T16359] ksys_read+0x150/0x270 [ 444.976863][T16359] ? __pfx_ksys_read+0x10/0x10 [ 444.976877][T16359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.976889][T16359] do_syscall_64+0x174/0x580 [ 444.976903][T16359] ? trace_irq_disable+0x3b/0x140 [ 444.976917][T16359] ? clear_bhb_loop+0x40/0x90 [ 444.976936][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.976946][T16359] RIP: 0033:0x7f02f135e84e [ 444.976957][T16359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.976966][T16359] RSP: 002b:00007f02f229bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.976978][T16359] RAX: ffffffffffffffda RBX: 00007f02f229c6c0 RCX: 00007f02f135e84e [ 444.976986][T16359] RDX: 000000000000000f RSI: 00007f02f229c0a0 RDI: 0000000000000005 [ 444.976992][T16359] RBP: 00007f02f229c090 R08: 0000000000000000 R09: 0000000000000000 [ 444.976999][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.977005][T16359] R13: 00007f02f1626038 R14: 00007f02f1625fa0 R15: 00007ffd2a2e4578 [ 444.977023][T16359] [ 445.298024][ T5633] Bluetooth: hci4: command tx timeout [ 445.435813][T16191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.866412][T16369] netlink: 'syz.4.3205': attribute type 4 has an invalid length. [ 445.968791][T16191] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.180708][T16381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3211'. [ 446.193823][T16380] syzkaller0: entered promiscuous mode [ 446.204528][T16380] syzkaller0: entered allmulticast mode [ 446.219866][T16380] tipc: Enabled bearer , priority 0 [ 446.232548][T16380] tipc: Resetting bearer [ 446.296390][T16378] tipc: Resetting bearer [ 446.350947][T16378] tipc: Disabling bearer [ 446.499988][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 446.544804][T16388] bond1: entered promiscuous mode [ 446.550305][T16388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.719648][T16393] syz_tun: entered allmulticast mode [ 446.751562][T16191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.793101][T16191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.800940][T16191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.818807][T16191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.837556][T16191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.853768][T16191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.868991][T16191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.900344][T16191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.055184][T16415] FAULT_INJECTION: forcing a failure. [ 447.055184][T16415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.068243][T16415] CPU: 1 UID: 0 PID: 16415 Comm: syz.0.3221 Not tainted syzkaller #0 PREEMPT(full) [ 447.068266][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.068277][T16415] Call Trace: [ 447.068286][T16415] [ 447.068293][T16415] dump_stack_lvl+0xe8/0x150 [ 447.068327][T16415] should_fail_ex+0x40c/0x560 [ 447.068357][T16415] _copy_from_user+0x2d/0xb0 [ 447.068378][T16415] generic_map_update_batch+0x6a3/0x9a0 [ 447.068410][T16415] ? __pfx_generic_map_update_batch+0x10/0x10 [ 447.068433][T16415] ? __fget_files+0x2a/0x420 [ 447.068466][T16415] ? __pfx_generic_map_update_batch+0x10/0x10 [ 447.068488][T16415] bpf_map_do_batch+0x391/0x630 [ 447.068522][T16415] __sys_bpf+0xbe5/0xd90 [ 447.068563][T16415] ? __pfx___sys_bpf+0x10/0x10 [ 447.068599][T16415] ? __fget_files+0x2a/0x420 [ 447.068639][T16415] ? ksys_write+0x242/0x270 [ 447.068661][T16415] ? __pfx_ksys_write+0x10/0x10 [ 447.068685][T16415] __x64_sys_bpf+0xba/0xd0 [ 447.068708][T16415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.068730][T16415] do_syscall_64+0x174/0x580 [ 447.068756][T16415] ? trace_irq_disable+0x3b/0x140 [ 447.068780][T16415] ? clear_bhb_loop+0x40/0x90 [ 447.068805][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.068824][T16415] RIP: 0033:0x7f8c4379e019 [ 447.068843][T16415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.068860][T16415] RSP: 002b:00007f8c44690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.068880][T16415] RAX: ffffffffffffffda RBX: 00007f8c43a25fa0 RCX: 00007f8c4379e019 [ 447.068895][T16415] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 447.068908][T16415] RBP: 00007f8c44690090 R08: 0000000000000000 R09: 0000000000000000 [ 447.068921][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.068933][T16415] R13: 00007f8c43a26038 R14: 00007f8c43a25fa0 R15: 00007ffe627ccce8 [ 447.068965][T16415] [ 447.469556][T16191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.527069][T16191] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.548832][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.612150][ T9089] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.619329][ T9089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.650404][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 447.680100][T16422] tipc: Invalid UDP bearer configuration [ 447.680157][T16422] tipc: Enabling of bearer rejected, failed to enable media [ 447.701113][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.708223][ T9102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.802468][T16429] xt_hashlimit: Unknown mode mask 308, kernel too old? [ 447.839143][T16191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.001213][T16441] tipc: Enabling of bearer rejected, failed to enable media [ 448.211146][T16435] bond1: Removing last arp target with arp_interval on [ 448.323896][T16452] netlink: 'syz.4.3228': attribute type 29 has an invalid length. [ 448.354822][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'. [ 448.363896][T16457] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 448.623549][T16452] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 448.695964][T16452] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 449.031296][T16191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.232581][T16191] veth0_vlan: entered promiscuous mode [ 449.258259][T16191] veth1_vlan: entered promiscuous mode [ 449.400787][T16191] veth0_macvtap: entered promiscuous mode [ 449.407046][T16487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3235'. [ 449.450588][T16191] veth1_macvtap: entered promiscuous mode [ 449.510327][T16191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.578415][T16491] syzkaller0: entered promiscuous mode [ 449.599700][T16491] syzkaller0: entered allmulticast mode [ 449.628352][T16191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.654926][T16497] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3240'. [ 449.798443][T16499] syzkaller0: entered promiscuous mode [ 449.803942][T16499] syzkaller0: entered allmulticast mode [ 449.826774][T16499] tipc: Enabled bearer , priority 0 [ 449.893739][T16499] tipc: Resetting bearer [ 449.999846][T16498] tipc: Resetting bearer [ 450.006489][T16504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3243'. [ 450.032398][T16498] tipc: Disabling bearer [ 450.054824][T16506] bridge0: left allmulticast mode [ 450.070038][ T9085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.077865][ T9085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.138408][ T9098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.170841][ T9084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.185678][ T9098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.408266][T16510] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 450.477409][T16510] bond11 (unregistering): Released all slaves [ 450.683621][T16528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3251'. [ 450.710974][ T9084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.830062][ T9092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.898742][T16532] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 450.901539][T16536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3154'. [ 450.924973][T16537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3252'. [ 451.116361][T16541] netlink: 'syz.3.3252': attribute type 9 has an invalid length. [ 451.335808][ T9103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.364804][T16547] syzkaller0: entered promiscuous mode [ 451.386769][T16547] syzkaller0: entered allmulticast mode [ 451.614589][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.626350][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.636971][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.655049][T16553] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 451.655069][T16553] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3257'. [ 451.686860][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.696204][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.819104][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 451.905888][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3259'. [ 451.914877][T16562] netlink: 'syz.4.3259': attribute type 7 has an invalid length. [ 451.975343][T16562] netlink: 'syz.4.3259': attribute type 8 has an invalid length. [ 451.983338][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'. [ 452.363439][ T5630] syz_tun (unregistering): left allmulticast mode [ 452.723268][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'. [ 452.736326][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3264'. [ 452.743947][T16551] virt_wifi0 speed is unknown, defaulting to 1000 [ 452.827695][T16582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3263'. [ 452.926883][T16591] openvswitch: netlink: IP tunnel dst address not specified [ 452.935124][T16592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.047569][T16593] sctp: [Deprecated]: syz.0.3263 (pid 16593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.047569][T16593] Use struct sctp_sack_info instead [ 453.280203][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 453.791662][ T5633] Bluetooth: hci2: command tx timeout [ 453.838070][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3276'. [ 453.874050][T16620] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 453.920439][T16617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3276'. [ 453.962457][T16620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.063946][T16631] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 454.140823][T16627] bond3: (slave geneve2): making interface the new active one [ 454.149685][T16627] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 454.159234][T16551] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.171169][T16551] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.182963][T16634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.193655][T16551] bridge_slave_0: entered allmulticast mode [ 454.207994][T16551] bridge_slave_0: entered promiscuous mode [ 454.292023][T16551] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.333291][T16551] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.341256][T16551] bridge_slave_1: entered allmulticast mode [ 454.362320][T16551] bridge_slave_1: entered promiscuous mode [ 454.397188][T16641] FAULT_INJECTION: forcing a failure. [ 454.397188][T16641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.493860][T16641] CPU: 1 UID: 0 PID: 16641 Comm: syz.0.3282 Not tainted syzkaller #0 PREEMPT(full) [ 454.493886][T16641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.493898][T16641] Call Trace: [ 454.493907][T16641] [ 454.493916][T16641] dump_stack_lvl+0xe8/0x150 [ 454.493951][T16641] should_fail_ex+0x40c/0x560 [ 454.493982][T16641] _copy_from_user+0x2d/0xb0 [ 454.494003][T16641] generic_map_update_batch+0x651/0x9a0 [ 454.494036][T16641] ? __pfx_generic_map_update_batch+0x10/0x10 [ 454.494058][T16641] ? __fget_files+0x2a/0x420 [ 454.494092][T16641] ? __pfx_generic_map_update_batch+0x10/0x10 [ 454.494114][T16641] bpf_map_do_batch+0x391/0x630 [ 454.494149][T16641] __sys_bpf+0xbe5/0xd90 [ 454.494183][T16641] ? __pfx___sys_bpf+0x10/0x10 [ 454.494219][T16641] ? __fget_files+0x2a/0x420 [ 454.494261][T16641] ? ksys_write+0x242/0x270 [ 454.494282][T16641] ? __pfx_ksys_write+0x10/0x10 [ 454.494305][T16641] __x64_sys_bpf+0xba/0xd0 [ 454.494326][T16641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.494347][T16641] do_syscall_64+0x174/0x580 [ 454.494373][T16641] ? trace_irq_disable+0x3b/0x140 [ 454.494397][T16641] ? clear_bhb_loop+0x40/0x90 [ 454.494420][T16641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.494438][T16641] RIP: 0033:0x7f8c4379e019 [ 454.494453][T16641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.494468][T16641] RSP: 002b:00007f8c44690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.494488][T16641] RAX: ffffffffffffffda RBX: 00007f8c43a25fa0 RCX: 00007f8c4379e019 [ 454.494503][T16641] RDX: 0000000000000038 RSI: 0000200000001880 RDI: 000000000000001a [ 454.494514][T16641] RBP: 00007f8c44690090 R08: 0000000000000000 R09: 0000000000000000 [ 454.494525][T16641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.494536][T16641] R13: 00007f8c43a26038 R14: 00007f8c43a25fa0 R15: 00007ffe627ccce8 [ 454.494568][T16641] [ 454.808979][T16551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.823546][T16551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.079564][T16551] team0: Port device team_slave_0 added [ 455.103741][T16551] team0: Port device team_slave_1 added [ 455.121109][T16654] syzkaller0: entered promiscuous mode [ 455.126598][T16654] syzkaller0: entered allmulticast mode [ 455.164299][T16654] tipc: Started in network mode [ 455.169191][T16654] tipc: Node identity a28cb4e9999b, cluster identity 4711 [ 455.177959][T16654] tipc: Enabled bearer , priority 0 [ 455.215287][T16551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.231746][T16663] nbd: must specify at least one socket [ 455.237437][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.267075][T16551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.314495][T16551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.336753][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.390508][T16551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.535515][T16654] tipc: Resetting bearer [ 455.654001][T16665] syzkaller0: entered promiscuous mode [ 455.666087][T16665] syzkaller0: entered allmulticast mode [ 455.874378][ T5633] Bluetooth: hci2: command tx timeout [ 456.024188][ T9110] bond9 (unregistering): (slave geneve4): Releasing active interface [ 456.223178][ T9110] bond0 (unregistering): Released all slaves [ 456.254959][ T9110] bond1 (unregistering): Released all slaves [ 456.285298][ T9110] bond2 (unregistering): Released all slaves [ 456.307603][ T9110] bond3 (unregistering): (slave veth5): Releasing active interface [ 456.336608][ T9110] bond3 (unregistering): (slave veth7): Releasing active interface [ 456.347809][ T9110] bond3 (unregistering): (slave veth9): Releasing active interface [ 456.383698][ T9110] bond3 (unregistering): (slave veth11): Releasing active interface [ 456.406198][ T9110] bond3 (unregistering): (slave veth13): Releasing active interface [ 456.416196][ T9110] bond3 (unregistering): (slave veth15): Releasing active interface [ 456.427100][ T9110] bond3 (unregistering): (slave veth17): Releasing active interface [ 456.438190][ T9110] bond3 (unregistering): (slave veth19): Releasing active interface [ 456.447801][ T9110] bond3 (unregistering): (slave veth21): Releasing active interface [ 456.456955][ T9110] bond3 (unregistering): Released all slaves [ 456.473079][ T9110] bond4 (unregistering): Released all slaves [ 456.492164][ T9110] bond5 (unregistering): Released all slaves [ 456.522876][T16702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.523667][ T9110] bond6 (unregistering): Released all slaves [ 456.551636][ T9110] bond7 (unregistering): Released all slaves [ 456.614748][ T9110] bond8 (unregistering): Released all slaves [ 456.665318][ T9110] bond9 (unregistering): Released all slaves [ 456.679703][ T9110] bond10 (unregistering): (slave batadv1): Releasing backup interface [ 456.722814][ T9110] bond10 (unregistering): Released all slaves [ 456.740246][T16551] hsr_slave_0: entered promiscuous mode [ 456.746704][T16551] hsr_slave_1: entered promiscuous mode [ 456.752693][T16551] debugfs: 'hsr0' already exists in 'hsr' [ 456.758416][T16551] Cannot create hsr debugfs directory [ 456.764225][T16653] tipc: Resetting bearer [ 456.784027][T16653] tipc: Disabling bearer [ 456.792443][ T5740] tipc: Node number set to 991409385 [ 456.800873][T16701] netlink: 'syz.0.3295': attribute type 3 has an invalid length. [ 456.808694][T16701] __nla_validate_parse: 4 callbacks suppressed [ 456.808710][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3295'. [ 456.830592][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 457.107661][ T9110] tipc: Left network mode [ 457.118393][ T9106] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.184409][ T9106] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.223843][ T9106] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.313067][T16551] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.453455][T16722] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 457.524305][T16725] netlink: 'syz.3.3299': attribute type 210 has an invalid length. [ 457.548410][ T9085] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.608599][T16734] bridge_slave_1: entered allmulticast mode [ 457.661873][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 457.771598][T16551] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.971396][ T5633] Bluetooth: hci2: command tx timeout [ 458.056028][T16752] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 458.137865][T16551] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.281473][T16763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3307'. [ 458.328414][T16763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3307'. [ 458.655157][T16551] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.847246][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 458.898677][T16781] tipc: Cannot configure node identity twice [ 458.962615][T16786] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3313'. [ 458.970082][T16788] FAULT_INJECTION: forcing a failure. [ 458.970082][T16788] name failslab, interval 1, probability 0, space 0, times 0 [ 458.984341][T16788] CPU: 1 UID: 0 PID: 16788 Comm: syz.2.3314 Not tainted syzkaller #0 PREEMPT(full) [ 458.984366][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.984379][T16788] Call Trace: [ 458.984386][T16788] [ 458.984395][T16788] dump_stack_lvl+0xe8/0x150 [ 458.984428][T16788] should_fail_ex+0x40c/0x560 [ 458.984458][T16788] should_failslab+0xa8/0x100 [ 458.984488][T16788] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 458.984513][T16788] ? skb_clone+0x212/0x3a0 [ 458.984534][T16788] ? skb_clone+0x212/0x3a0 [ 458.984564][T16788] skb_clone+0x212/0x3a0 [ 458.984592][T16788] bpf_clone_redirect+0x170/0x4b0 [ 458.984620][T16788] ? bpf_test_run+0x1d1/0x830 [ 458.984645][T16788] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 458.984669][T16788] ? __kernel_text_address+0xd/0x30 [ 458.984687][T16788] ? unwind_get_return_address+0x4d/0x90 [ 458.984707][T16788] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.984730][T16788] ? arch_stack_walk+0xfb/0x150 [ 458.984757][T16788] ? ktime_get+0x45/0x220 [ 458.984788][T16788] ? ktime_get+0x45/0x220 [ 458.984811][T16788] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 458.984834][T16788] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.984858][T16788] ? ktime_get+0x45/0x220 [ 458.984877][T16788] ? seqcount_lockdep_reader_access+0xea/0x100 [ 458.984908][T16788] ? bpf_test_run+0x1d1/0x830 [ 458.984933][T16788] ? bpf_test_run+0x1d1/0x830 [ 458.984955][T16788] ? kvm_sched_clock_read+0x11/0x20 [ 458.984979][T16788] bpf_test_run+0x5c9/0x830 [ 458.985021][T16788] ? __pfx_bpf_test_run+0x10/0x10 [ 458.985059][T16788] ? __kasan_krealloc+0xec/0x110 [ 458.985092][T16788] ? skb_dst_set+0x72/0x140 [ 458.985119][T16788] bpf_prog_test_run_skb+0xe35/0x2230 [ 458.985163][T16788] ? __fget_files+0x3a2/0x420 [ 458.985186][T16788] ? __fget_files+0x2a/0x420 [ 458.985215][T16788] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 458.985240][T16788] bpf_prog_test_run+0x2c5/0x340 [ 458.985271][T16788] __sys_bpf+0xa22/0xd90 [ 458.985304][T16788] ? __pfx___sys_bpf+0x10/0x10 [ 458.985340][T16788] ? __fget_files+0x2a/0x420 [ 458.985383][T16788] ? ksys_write+0x242/0x270 [ 458.985404][T16788] ? __pfx_ksys_write+0x10/0x10 [ 458.985428][T16788] __x64_sys_bpf+0xba/0xd0 [ 458.985451][T16788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.985472][T16788] do_syscall_64+0x174/0x580 [ 458.985497][T16788] ? trace_irq_disable+0x3b/0x140 [ 458.985521][T16788] ? clear_bhb_loop+0x40/0x90 [ 458.985544][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.985561][T16788] RIP: 0033:0x7f7a6839e019 [ 458.985578][T16788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.985594][T16788] RSP: 002b:00007f7a692fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.985613][T16788] RAX: ffffffffffffffda RBX: 00007f7a68625fa0 RCX: 00007f7a6839e019 [ 458.985628][T16788] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 458.985639][T16788] RBP: 00007f7a692fb090 R08: 0000000000000000 R09: 0000000000000000 [ 458.985649][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.985659][T16788] R13: 00007f7a68626038 R14: 00007f7a68625fa0 R15: 00007ffe24e1acc8 [ 458.985688][T16788] [ 459.355502][T16786] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3313'. [ 459.403763][T16792] tipc: Cannot configure node identity twice [ 459.468145][T16551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 459.518658][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.528908][T16551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 459.576064][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.659313][T16551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 459.718734][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.727069][T16803] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 459.783548][T16551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 459.865389][T16551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.091731][T16822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3324'. [ 460.127340][ T5633] Bluetooth: hci2: command tx timeout [ 460.304312][T16551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.389670][T16551] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.426655][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.434826][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.536729][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.543958][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.876828][T16851] netlink: 'syz.3.3330': attribute type 5 has an invalid length. [ 460.880436][T16845] syzkaller0: entered promiscuous mode [ 460.911373][T16845] syzkaller0: entered allmulticast mode [ 461.722650][T16884] dummy0: entered promiscuous mode [ 461.737283][T16884] gretap0: entered promiscuous mode [ 461.743599][T16884] debugfs: 'hsr1' already exists in 'hsr' [ 461.750469][T16884] Cannot create hsr debugfs directory [ 461.756280][T16884] hsr1: entered allmulticast mode [ 461.761323][T16884] dummy0: entered allmulticast mode [ 461.766591][T16884] gretap0: entered allmulticast mode [ 462.217816][ T9110] hsr_slave_0: left promiscuous mode [ 462.232862][ T9110] hsr_slave_1: left promiscuous mode [ 462.351681][T16915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.368441][T16914] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3344'. [ 462.474486][T16920] netlink: 'syz.4.3343': attribute type 3 has an invalid length. [ 462.525644][T16920] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3343'. [ 462.736918][T16929] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.205975][T16933] veth0_macvtap: left promiscuous mode [ 463.302886][T16940] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3350'. [ 463.483490][T16551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.744072][T16551] veth0_vlan: entered promiscuous mode [ 463.809434][T16954] Bluetooth: MGMT ver 1.23 [ 463.830172][T16551] veth1_vlan: entered promiscuous mode [ 463.876118][T16551] veth0_macvtap: entered promiscuous mode [ 463.967729][T16551] veth1_macvtap: entered promiscuous mode [ 464.056443][T16551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.067838][T16937] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3350'. [ 464.132685][T16551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.288475][ T9084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.378310][ T9089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.407399][ T9110] IPVS: stop unused estimator thread 0... [ 464.582519][ T9092] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.852791][ T5282] veth0_macvtap: entered promiscuous mode [ 464.894873][ T9092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.902717][ T9092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.088927][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3363'. [ 465.126647][ T9084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.157969][T16983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.249218][T16983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.284062][ T9106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.291435][T16993] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 465.292120][ T9106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.383132][T16992] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.968505][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 466.398096][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3373'. [ 467.630861][T17078] FAULT_INJECTION: forcing a failure. [ 467.630861][T17078] name failslab, interval 1, probability 0, space 0, times 0 [ 467.643703][T17078] CPU: 0 UID: 0 PID: 17078 Comm: syz.2.3385 Not tainted syzkaller #0 PREEMPT(full) [ 467.643727][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.643738][T17078] Call Trace: [ 467.643746][T17078] [ 467.643754][T17078] dump_stack_lvl+0xe8/0x150 [ 467.643788][T17078] should_fail_ex+0x40c/0x560 [ 467.643817][T17078] should_failslab+0xa8/0x100 [ 467.643846][T17078] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 467.643870][T17078] ? local_lock_release+0x9c/0x160 [ 467.643893][T17078] ? __alloc_skb+0x1d7/0x7a0 [ 467.643911][T17078] ? __alloc_skb+0x1d7/0x7a0 [ 467.643938][T17078] __alloc_skb+0x1d7/0x7a0 [ 467.643963][T17078] alloc_skb_with_frags+0xc6/0x760 [ 467.643997][T17078] sock_alloc_send_pskb+0x878/0x990 [ 467.644041][T17078] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 467.644066][T17078] ? kasan_quarantine_put+0xbb/0x1f0 [ 467.644090][T17078] ? lockdep_hardirqs_on+0x7a/0x110 [ 467.644120][T17078] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 467.644145][T17078] ? kmem_cache_free+0x182/0x650 [ 467.644171][T17078] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 467.644198][T17078] unix_dgram_sendmsg+0x4da/0x17b0 [ 467.644235][T17078] ? __lock_acquire+0x683/0x2cf0 [ 467.644270][T17078] ? __lock_acquire+0x683/0x2cf0 [ 467.644301][T17078] ? __lock_acquire+0x683/0x2cf0 [ 467.644326][T17078] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 467.644360][T17078] ? aa_sock_msg_perm+0xda/0x1b0 [ 467.644384][T17078] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 467.644413][T17078] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 467.644440][T17078] sock_sendmsg_nosec+0x13a/0x180 [ 467.644472][T17078] ____sys_sendmsg+0x54e/0x850 [ 467.644502][T17078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.644536][T17078] ? import_iovec+0x73/0xa0 [ 467.644558][T17078] ___sys_sendmsg+0x2a5/0x360 [ 467.644582][T17078] ? __lock_acquire+0x683/0x2cf0 [ 467.644611][T17078] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.644633][T17078] ? __lock_acquire+0x683/0x2cf0 [ 467.644664][T17078] ? kstrtouint+0x6e/0xe0 [ 467.644728][T17078] __sys_sendmmsg+0x273/0x4d0 [ 467.644757][T17078] ? __pfx___sys_sendmmsg+0x10/0x10 [ 467.644790][T17078] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.644831][T17078] ? ksys_write+0x242/0x270 [ 467.644852][T17078] ? __pfx_ksys_write+0x10/0x10 [ 467.644878][T17078] __x64_sys_sendmmsg+0xa0/0xc0 [ 467.644903][T17078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.644923][T17078] do_syscall_64+0x174/0x580 [ 467.644948][T17078] ? trace_irq_disable+0x3b/0x140 [ 467.644973][T17078] ? clear_bhb_loop+0x40/0x90 [ 467.644996][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.645015][T17078] RIP: 0033:0x7f7a6839e019 [ 467.645034][T17078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.645050][T17078] RSP: 002b:00007f7a692fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 467.645070][T17078] RAX: ffffffffffffffda RBX: 00007f7a68625fa0 RCX: 00007f7a6839e019 [ 467.645084][T17078] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 467.645098][T17078] RBP: 00007f7a692fb090 R08: 0000000000000000 R09: 0000000000000000 [ 467.645110][T17078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.645121][T17078] R13: 00007f7a68626038 R14: 00007f7a68625fa0 R15: 00007ffe24e1acc8 [ 467.645153][T17078] [ 469.242049][T17089] xt_hashlimit: Unknown mode mask 1E01, kernel too old? [ 469.302743][T17023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.909515][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.932623][T17096] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3391'. [ 470.096579][T17103] FAULT_INJECTION: forcing a failure. [ 470.096579][T17103] name failslab, interval 1, probability 0, space 0, times 0 [ 470.109211][T17103] CPU: 1 UID: 0 PID: 17103 Comm: syz.3.3395 Not tainted syzkaller #0 PREEMPT(full) [ 470.109257][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.109281][T17103] Call Trace: [ 470.109289][T17103] [ 470.109297][T17103] dump_stack_lvl+0xe8/0x150 [ 470.109331][T17103] should_fail_ex+0x40c/0x560 [ 470.109360][T17103] should_failslab+0xa8/0x100 [ 470.109392][T17103] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 470.109416][T17103] ? local_lock_release+0x9c/0x160 [ 470.109439][T17103] ? __alloc_skb+0x1d7/0x7a0 [ 470.109458][T17103] ? __alloc_skb+0x1d7/0x7a0 [ 470.109486][T17103] __alloc_skb+0x1d7/0x7a0 [ 470.109518][T17103] alloc_skb_with_frags+0xc6/0x760 [ 470.109552][T17103] sock_alloc_send_pskb+0x878/0x990 [ 470.109597][T17103] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 470.109621][T17103] ? kasan_quarantine_put+0xbb/0x1f0 [ 470.109656][T17103] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.109686][T17103] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 470.109711][T17103] ? kmem_cache_free+0x182/0x650 [ 470.109739][T17103] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 470.109766][T17103] unix_dgram_sendmsg+0x4da/0x17b0 [ 470.109795][T17103] ? __lock_acquire+0x683/0x2cf0 [ 470.109838][T17103] ? __lock_acquire+0x683/0x2cf0 [ 470.109864][T17103] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 470.109899][T17103] ? aa_sock_msg_perm+0xda/0x1b0 [ 470.109920][T17103] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 470.109950][T17103] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 470.109978][T17103] sock_sendmsg_nosec+0x13a/0x180 [ 470.110009][T17103] ____sys_sendmsg+0x54e/0x850 [ 470.110040][T17103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.110073][T17103] ? import_iovec+0x73/0xa0 [ 470.110097][T17103] ___sys_sendmsg+0x2a5/0x360 [ 470.110120][T17103] ? __lock_acquire+0x683/0x2cf0 [ 470.110150][T17103] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.110173][T17103] ? __lock_acquire+0x683/0x2cf0 [ 470.110204][T17103] ? kstrtouint+0x6e/0xe0 [ 470.110269][T17103] __sys_sendmmsg+0x273/0x4d0 [ 470.110299][T17103] ? __pfx___sys_sendmmsg+0x10/0x10 [ 470.110333][T17103] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.110375][T17103] ? ksys_write+0x242/0x270 [ 470.110396][T17103] ? __pfx_ksys_write+0x10/0x10 [ 470.110423][T17103] __x64_sys_sendmmsg+0xa0/0xc0 [ 470.110447][T17103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.110468][T17103] do_syscall_64+0x174/0x580 [ 470.110493][T17103] ? trace_irq_disable+0x3b/0x140 [ 470.110524][T17103] ? clear_bhb_loop+0x40/0x90 [ 470.110548][T17103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.110568][T17103] RIP: 0033:0x7f0dc5b9e019 [ 470.110587][T17103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.110603][T17103] RSP: 002b:00007f0dc6a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 470.110624][T17103] RAX: ffffffffffffffda RBX: 00007f0dc5e25fa0 RCX: 00007f0dc5b9e019 [ 470.110639][T17103] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 470.110658][T17103] RBP: 00007f0dc6a03090 R08: 0000000000000000 R09: 0000000000000000 [ 470.110671][T17103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.110683][T17103] R13: 00007f0dc5e26038 R14: 00007f0dc5e25fa0 R15: 00007ffce00ec628 [ 470.110711][T17103] [ 470.680559][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 471.237108][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 471.582591][T17118] debugfs: '1ùà^!‚l' already exists in 'ieee80211' [ 472.166325][T17130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3402'. [ 472.268958][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 473.402492][T17138] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.422342][T17138] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.466093][T17164] netlink: 'syz.3.3412': attribute type 1 has an invalid length. [ 473.708597][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.722562][T17138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.124875][T17155] tipc: Enabled bearer , priority 10 [ 474.264844][T17164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.441809][ T9106] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.463567][ T9106] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.472620][ T9106] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.481500][ T9106] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.782995][T17176] syzkaller0: entered promiscuous mode [ 474.788504][T17176] syzkaller0: entered allmulticast mode [ 474.957963][T17184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3419'. [ 475.613892][T17182] netlink: 'syz.1.3418': attribute type 4 has an invalid length. [ 476.044196][ T6859] tipc: Node number set to 4294967295 [ 476.069516][T17198] syz_tun: entered allmulticast mode [ 476.602271][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'. [ 476.703367][T17213] gretap0: entered promiscuous mode [ 476.769368][T17216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.111414][T17226] netlink: 'syz.0.3430': attribute type 1 has an invalid length. [ 477.119170][T17226] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3430'. [ 477.219781][T17228] debugfs: '1ùà^!‚l' already exists in 'ieee80211' [ 477.244051][T17220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.251469][T17220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.278437][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.481393][T17260] netlink: 'syz.1.3444': attribute type 2 has an invalid length. [ 478.489156][T17260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3444'. [ 478.502153][T17262] FAULT_INJECTION: forcing a failure. [ 478.502153][T17262] name failslab, interval 1, probability 0, space 0, times 0 [ 478.514763][T17262] CPU: 1 UID: 0 PID: 17262 Comm: syz.2.3445 Not tainted syzkaller #0 PREEMPT(full) [ 478.514789][T17262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.514800][T17262] Call Trace: [ 478.514809][T17262] [ 478.514817][T17262] dump_stack_lvl+0xe8/0x150 [ 478.514851][T17262] should_fail_ex+0x40c/0x560 [ 478.514881][T17262] should_failslab+0xa8/0x100 [ 478.514917][T17262] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 478.514941][T17262] ? local_lock_release+0x9c/0x160 [ 478.514965][T17262] ? __alloc_skb+0x1d7/0x7a0 [ 478.514984][T17262] ? __alloc_skb+0x1d7/0x7a0 [ 478.515010][T17262] __alloc_skb+0x1d7/0x7a0 [ 478.515036][T17262] alloc_skb_with_frags+0xc6/0x760 [ 478.515072][T17262] sock_alloc_send_pskb+0x878/0x990 [ 478.515118][T17262] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 478.515142][T17262] ? kasan_quarantine_put+0xbb/0x1f0 [ 478.515166][T17262] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.515195][T17262] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 478.515219][T17262] ? kmem_cache_free+0x182/0x650 [ 478.515245][T17262] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 478.515272][T17262] unix_dgram_sendmsg+0x4da/0x17b0 [ 478.515301][T17262] ? __lock_acquire+0x683/0x2cf0 [ 478.515334][T17262] ? __lock_acquire+0x683/0x2cf0 [ 478.515365][T17262] ? __lock_acquire+0x683/0x2cf0 [ 478.515388][T17262] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 478.515418][T17262] ? aa_sock_msg_perm+0xda/0x1b0 [ 478.515439][T17262] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 478.515466][T17262] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 478.515491][T17262] sock_sendmsg_nosec+0x13a/0x180 [ 478.515530][T17262] ____sys_sendmsg+0x54e/0x850 [ 478.515559][T17262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.515593][T17262] ? import_iovec+0x73/0xa0 [ 478.515615][T17262] ___sys_sendmsg+0x2a5/0x360 [ 478.515638][T17262] ? __lock_acquire+0x683/0x2cf0 [ 478.515669][T17262] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.515692][T17262] ? __lock_acquire+0x683/0x2cf0 [ 478.515722][T17262] ? kstrtouint+0x6e/0xe0 [ 478.515788][T17262] __sys_sendmmsg+0x273/0x4d0 [ 478.515820][T17262] ? __pfx___sys_sendmmsg+0x10/0x10 [ 478.515854][T17262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 478.515896][T17262] ? ksys_write+0x242/0x270 [ 478.515918][T17262] ? __pfx_ksys_write+0x10/0x10 [ 478.515944][T17262] __x64_sys_sendmmsg+0xa0/0xc0 [ 478.515968][T17262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.515989][T17262] do_syscall_64+0x174/0x580 [ 478.516014][T17262] ? trace_irq_disable+0x3b/0x140 [ 478.516038][T17262] ? clear_bhb_loop+0x40/0x90 [ 478.516062][T17262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.516082][T17262] RIP: 0033:0x7f7a6839e019 [ 478.516101][T17262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.516117][T17262] RSP: 002b:00007f7a692fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 478.516138][T17262] RAX: ffffffffffffffda RBX: 00007f7a68625fa0 RCX: 00007f7a6839e019 [ 478.516152][T17262] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 478.516165][T17262] RBP: 00007f7a692fb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.516178][T17262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.516189][T17262] R13: 00007f7a68626038 R14: 00007f7a68625fa0 R15: 00007ffe24e1acc8 [ 478.516221][T17262] [ 480.082150][T17278] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3450'. [ 480.216364][T17280] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3450'. [ 483.359230][T17341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.589063][T17353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.806262][T17355] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3466'. [ 484.303258][T17365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3468'. [ 484.654710][T17371] FAULT_INJECTION: forcing a failure. [ 484.654710][T17371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.667782][T17371] CPU: 1 UID: 0 PID: 17371 Comm: syz.0.3471 Not tainted syzkaller #0 PREEMPT(full) [ 484.667806][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.667818][T17371] Call Trace: [ 484.667826][T17371] [ 484.667835][T17371] dump_stack_lvl+0xe8/0x150 [ 484.667868][T17371] should_fail_ex+0x40c/0x560 [ 484.667898][T17371] _copy_from_iter+0x3b0/0x1660 [ 484.667944][T17371] ? __pfx__copy_from_iter+0x10/0x10 [ 484.667970][T17371] ? lockdep_hardirqs_on+0x7a/0x110 [ 484.667997][T17371] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 484.668022][T17371] ? bt_sock_wait_ready+0x4f8/0x600 [ 484.668045][T17371] ? skb_put+0x112/0x210 [ 484.668071][T17371] bt_skb_sendmsg+0x34a/0x5d0 [ 484.668095][T17371] ? release_sock+0x2f/0x260 [ 484.668120][T17371] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 484.668145][T17371] ? rfcomm_sock_sendmsg+0x162/0x450 [ 484.668171][T17371] ? rfcomm_sock_sendmsg+0x162/0x450 [ 484.668195][T17371] ? __local_bh_enable_ip+0xd0/0x130 [ 484.668223][T17371] rfcomm_sock_sendmsg+0x28c/0x450 [ 484.668251][T17371] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 484.668276][T17371] sock_sendmsg_nosec+0x13a/0x180 [ 484.668307][T17371] sock_write_iter+0x2de/0x3e0 [ 484.668337][T17371] ? __pfx_sock_write_iter+0x10/0x10 [ 484.668372][T17371] ? iovec_from_user+0x16f/0x250 [ 484.668398][T17371] do_iter_readv_writev+0x612/0x8c0 [ 484.668423][T17371] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 484.668449][T17371] ? bpf_lsm_file_permission+0x9/0x20 [ 484.668471][T17371] ? security_file_permission+0x75/0x260 [ 484.668501][T17371] ? rw_verify_area+0x203/0x4c0 [ 484.668523][T17371] vfs_writev+0x343/0x990 [ 484.668556][T17371] ? __pfx_vfs_writev+0x10/0x10 [ 484.668594][T17371] ? __fget_files+0x2a/0x420 [ 484.668625][T17371] ? __fget_files+0x3a2/0x420 [ 484.668650][T17371] ? __fget_files+0x2a/0x420 [ 484.668684][T17371] do_writev+0x154/0x2e0 [ 484.668711][T17371] ? __pfx_do_writev+0x10/0x10 [ 484.668743][T17371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.668765][T17371] do_syscall_64+0x174/0x580 [ 484.668791][T17371] ? trace_irq_disable+0x3b/0x140 [ 484.668816][T17371] ? clear_bhb_loop+0x40/0x90 [ 484.668840][T17371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.668859][T17371] RIP: 0033:0x7f8c4379e019 [ 484.668878][T17371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.668895][T17371] RSP: 002b:00007f8c44690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 484.668922][T17371] RAX: ffffffffffffffda RBX: 00007f8c43a25fa0 RCX: 00007f8c4379e019 [ 484.668937][T17371] RDX: 1000000000000105 RSI: 0000200000019880 RDI: 0000000000000004 [ 484.668951][T17371] RBP: 00007f8c44690090 R08: 0000000000000000 R09: 0000000000000000 [ 484.668963][T17371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.668975][T17371] R13: 00007f8c43a26038 R14: 00007f8c43a25fa0 R15: 00007ffe627ccce8 [ 484.669006][T17371] [ 485.520327][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 486.008386][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.439251][T17407] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 496.020662][T17381] syz_tun (unregistering): left allmulticast mode [ 496.046818][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3481'. [ 496.059420][T17399] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.267381][T17408] syzkaller0: entered promiscuous mode [ 496.272886][T17408] syzkaller0: entered allmulticast mode [ 497.809941][T17444] sctp: [Deprecated]: syz.2.3489 (pid 17444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.809941][T17444] Use struct sctp_sack_info instead [ 498.098456][T17448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'. [ 501.101066][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 501.123210][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 501.131252][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 501.163960][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 501.174290][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 503.361007][ T50] Bluetooth: hci3: command tx timeout [ 503.986562][T17448] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 505.590224][ T50] Bluetooth: hci3: command tx timeout [ 505.604808][T17457] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.381860][ T50] Bluetooth: hci3: command tx timeout [ 516.676131][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 520.451520][ T6859] page_pool_release_retry() stalled pool shutdown: id 130, 1 inflight 61 sec [ 526.125000][ T5633] Bluetooth: hci3: command tx timeout [ 526.170071][ C1] sched: DL replenish lagged too much [ 542.276307][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 562.476551][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 562.517983][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 568.357720][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 670.272526][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 699.465652][T17500] Bluetooth: hci2: command 0x0406 tx timeout [ 704.691108][T17500] Bluetooth: hci3: command tx timeout [ 721.547693][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.208260][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 743.215237][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16551/1:b..l P17485/1:b..l [ 743.224980][ C0] rcu: (detected by 0, t=10502 jiffies, g=68557, q=651695 ncpus=2) [ 743.232975][ C0] task:syz.0.3501 state:R running task stack:26040 pid:17485 tgid:17482 ppid:15519 task_flags:0x40054c flags:0x00080002 [ 743.247585][ C0] Call Trace: [ 743.250878][ C0] [ 743.253814][ C0] __schedule+0x17d9/0x56c0 [ 743.258336][ C0] ? __lock_acquire+0x683/0x2cf0 [ 743.263295][ C0] ? irqentry_exit+0x218/0x8f0 [ 743.268069][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 743.273273][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.278317][ C0] ? __pfx___schedule+0x10/0x10 [ 743.283180][ C0] ? page_table_check_clear+0x124/0x500 [ 743.288737][ C0] ? lock_acquire+0x106/0x350 [ 743.293431][ C0] ? folio_mark_accessed+0x439/0x8b0 [ 743.298733][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 743.304116][ C0] preempt_schedule_common+0x82/0xd0 [ 743.309413][ C0] preempt_schedule_thunk+0x16/0x40 [ 743.314629][ C0] _raw_spin_unlock+0x3f/0x50 [ 743.319319][ C0] __zap_vma_range+0x4084/0x4f10 [ 743.324321][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 743.329627][ C0] ? mas_find+0xab1/0xcf0 [ 743.333970][ C0] ? unmap_vmas+0x1b9/0x550 [ 743.338496][ C0] unmap_vmas+0x390/0x550 [ 743.342844][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 743.347731][ C0] exit_mmap+0x293/0x9f0 [ 743.351986][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 743.356782][ C0] ? __pfx_exit_aio+0x10/0x10 [ 743.361482][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 743.367131][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 743.372339][ C0] __mmput+0x118/0x420 [ 743.376414][ C0] exit_mm+0x221/0x2d0 [ 743.380518][ C0] do_exit+0x6cd/0x2360 [ 743.384691][ C0] ? __pfx_do_exit+0x10/0x10 [ 743.389298][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 743.394341][ C0] do_group_exit+0x22d/0x2f0 [ 743.398931][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.404139][ C0] get_signal+0x121b/0x12c0 [ 743.408673][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 743.414228][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 743.419086][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 743.425275][ C0] exit_to_user_mode_loop+0x104/0x730 [ 743.430658][ C0] ? rcu_is_watching+0x15/0xb0 [ 743.435426][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.441502][ C0] do_syscall_64+0x353/0x580 [ 743.446102][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.451138][ C0] ? clear_bhb_loop+0x40/0x90 [ 743.455823][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.461719][ C0] RIP: 0033:0x7f8c4379e019 [ 743.466138][ C0] RSP: 002b:00007f8c44690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 743.474555][ C0] RAX: ffffffffffffffea RBX: 00007f8c43a25fa0 RCX: 00007f8c4379e019 [ 743.482534][ C0] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 743.490507][ C0] RBP: 00007f8c4383500c R08: 0000000000000108 R09: 0000000000000000 [ 743.498486][ C0] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 743.506462][ C0] R13: 00007f8c43a26038 R14: 00007f8c43a25fa0 R15: 00007ffe627ccce8 [ 743.514464][ C0] [ 743.517484][ C0] task:syz-executor state:R running task stack:22288 pid:16551 tgid:16551 ppid:16540 task_flags:0x400140 flags:0x00080000 [ 743.530976][ C0] Call Trace: [ 743.534259][ C0] [ 743.537192][ C0] __schedule+0x17d9/0x56c0 [ 743.541722][ C0] ? __lock_acquire+0x683/0x2cf0 [ 743.546680][ C0] ? __lock_acquire+0x683/0x2cf0 [ 743.551631][ C0] ? __pfx___schedule+0x10/0x10 [ 743.556506][ C0] preempt_schedule_irq+0x4d/0xa0 [ 743.561541][ C0] irqentry_exit+0x14f/0x8f0 [ 743.566140][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.571177][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 743.577161][ C0] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 743.582982][ C0] Code: 04 eb 92 4d 01 f3 49 83 c3 05 eb 89 bb 06 00 00 00 e9 79 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 [ 743.602590][ C0] RSP: 0018:ffffc90004fe73e0 EFLAGS: 00000202 [ 743.608661][ C0] RAX: 0000000000000001 RBX: ffffffff8177929c RCX: 0000000080000001 [ 743.616630][ C0] RDX: 0000000000000000 RSI: ffffffff8177929c RDI: ffffffff8eb59c60 [ 743.624602][ C0] RBP: ffffffff8177927f R08: 0000000000000000 R09: 0000000000000000 [ 743.632574][ C0] R10: ffffc90004fe7598 R11: ffffffff81b20a10 R12: 0000000000000002 [ 743.640548][ C0] R13: ffffffff8eb59c60 R14: ffffffff8eb59c60 R15: 0000000000000000 [ 743.648524][ C0] ? unwind_next_frame+0x8f/0x2550 [ 743.653643][ C0] ? unwind_next_frame+0xac/0x2550 [ 743.658758][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.664946][ C0] ? unwind_next_frame+0xac/0x2550 [ 743.670067][ C0] __kasan_check_byte+0x12/0x40 [ 743.674932][ C0] lock_acquire+0x84/0x350 [ 743.679365][ C0] ? unwind_next_frame+0x8f/0x2550 [ 743.684506][ C0] ? __x64_sys_openat+0x138/0x170 [ 743.689544][ C0] ? unwind_next_frame+0x8f/0x2550 [ 743.694661][ C0] unwind_next_frame+0xac/0x2550 [ 743.699605][ C0] ? unwind_next_frame+0x8f/0x2550 [ 743.704725][ C0] ? do_sys_openat2+0x115/0x200 [ 743.709585][ C0] ? unwind_next_frame+0x8f/0x2550 [ 743.714702][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 743.720866][ C0] arch_stack_walk+0x11b/0x150 [ 743.725639][ C0] ? __x64_sys_openat+0x138/0x170 [ 743.730680][ C0] stack_trace_save+0xa9/0x100 [ 743.735463][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 743.740843][ C0] ? __lock_acquire+0x683/0x2cf0 [ 743.745802][ C0] save_stack+0x122/0x230 [ 743.750146][ C0] ? __pfx_save_stack+0x10/0x10 [ 743.755050][ C0] ? page_ext_get+0x22/0x2e0 [ 743.759650][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 743.764942][ C0] ? __slab_free+0x274/0x2c0 [ 743.769539][ C0] ? qlist_free_all+0x99/0x100 [ 743.774311][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 743.779951][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 743.784986][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 743.790624][ C0] ? alloc_empty_file+0x5b/0x1d0 [ 743.795570][ C0] ? path_openat+0x8f/0x3830 [ 743.800163][ C0] ? do_file_open+0x23e/0x4a0 [ 743.804838][ C0] ? do_sys_openat2+0x115/0x200 [ 743.809694][ C0] ? __x64_sys_openat+0x138/0x170 [ 743.814738][ C0] ? page_ext_put+0x97/0xc0 [ 743.819267][ C0] __reset_page_owner+0x71/0x1f0 [ 743.824215][ C0] __free_frozen_pages+0xc1e/0xd10 [ 743.829343][ C0] __slab_free+0x274/0x2c0 [ 743.833776][ C0] qlist_free_all+0x99/0x100 [ 743.838377][ C0] kasan_quarantine_reduce+0x148/0x160 [ 743.843852][ C0] __kasan_slab_alloc+0x22/0x80 [ 743.848712][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 743.854176][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 743.859812][ C0] ? alloc_empty_file+0x5b/0x1d0 [ 743.864754][ C0] ? alloc_empty_file+0x5b/0x1d0 [ 743.869710][ C0] alloc_empty_file+0x5b/0x1d0 [ 743.874486][ C0] path_openat+0x8f/0x3830 [ 743.878915][ C0] ? kasan_save_track+0x4f/0x80 [ 743.883771][ C0] ? kasan_save_track+0x3e/0x80 [ 743.888627][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 743.893654][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 743.899290][ C0] ? do_getname+0x2e/0x250 [ 743.903710][ C0] ? do_sys_openat2+0xcc/0x200 [ 743.908481][ C0] ? __x64_sys_openat+0x138/0x170 [ 743.913510][ C0] ? do_syscall_64+0x174/0x580 [ 743.918280][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.924357][ C0] ? __lock_acquire+0x683/0x2cf0 [ 743.929318][ C0] do_file_open+0x23e/0x4a0 [ 743.933827][ C0] ? __pfx_do_file_open+0x10/0x10 [ 743.938875][ C0] ? _raw_spin_unlock+0x28/0x50 [ 743.943729][ C0] ? alloc_fd+0x651/0x6c0 [ 743.948081][ C0] do_sys_openat2+0x115/0x200 [ 743.952771][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 743.957978][ C0] ? exc_page_fault+0x6a/0xc0 [ 743.962670][ C0] ? do_user_addr_fault+0xc4a/0x1340 [ 743.967971][ C0] __x64_sys_openat+0x138/0x170 [ 743.972835][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.978909][ C0] do_syscall_64+0x174/0x580 [ 743.983516][ C0] ? trace_irq_disable+0x3b/0x140 [ 743.988560][ C0] ? clear_bhb_loop+0x40/0x90 [ 743.993348][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.999250][ C0] RIP: 0033:0x7f1d13b9d33c [ 744.003671][ C0] RSP: 002b:00007ffdcc5e6d90 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 744.012099][ C0] RAX: ffffffffffffffda RBX: 00007f1d13c3445c RCX: 00007f1d13b9d33c [ 744.020082][ C0] RDX: 0000000000090800 RSI: 00007ffdcc5e7f40 RDI: 00000000ffffff9c [ 744.028058][ C0] RBP: 00007ffdcc5e7f2c R08: 0000000000000000 R09: 0000000000000000 [ 744.036034][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffdcc5e7f40 [ 744.044009][ C0] R13: 00007f1d13c3445c R14: 0000000000083d23 R15: 00007ffdcc5e7f80 [ 744.052001][ C0] [ 744.055021][ C0] rcu: rcu_preempt kthread starved for 3935 jiffies! g68557 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 744.066129][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 744.076101][ C0] rcu: RCU grace-period kthread stack dump: [ 744.081992][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 744.095508][ C0] Call Trace: [ 744.098791][ C0] [ 744.101731][ C0] __schedule+0x17d9/0x56c0 [ 744.106246][ C0] ? __lock_acquire+0x683/0x2cf0 [ 744.111221][ C0] ? __pfx___schedule+0x10/0x10 [ 744.116093][ C0] ? schedule+0x90/0x2b0 [ 744.120351][ C0] schedule+0x164/0x2b0 [ 744.124519][ C0] schedule_timeout+0x152/0x2c0 [ 744.129375][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 744.134754][ C0] ? __pfx_process_timeout+0x10/0x10 [ 744.140053][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 744.145895][ C0] ? prepare_to_swait_event+0x322/0x350 [ 744.151479][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 744.156367][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 744.162605][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 744.167899][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 744.173122][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 744.177737][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 744.182958][ C0] ? __kthread_parkme+0x71/0x1f0 [ 744.187910][ C0] ? __kthread_parkme+0x196/0x1f0 [ 744.192953][ C0] kthread+0x388/0x470 [ 744.197037][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 744.202246][ C0] ? __pfx_kthread+0x10/0x10 [ 744.206852][ C0] ret_from_fork+0x514/0xb70 [ 744.211459][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 744.216583][ C0] ? __switch_to+0xc89/0x1420 [ 744.221275][ C0] ? __pfx_kthread+0x10/0x10 [ 744.225881][ C0] ret_from_fork_asm+0x1a/0x30 [ 744.230668][ C0] [ 744.233686][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 744.240017][ C0] Sending NMI from CPU 0 to CPUs 1: [ 744.245230][ C1] NMI backtrace for cpu 1 [ 744.245252][ C1] CPU: 1 UID: 0 PID: 9113 Comm: kworker/u8:58 Not tainted syzkaller #0 PREEMPT(full) [ 744.245271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.245284][ C1] Workqueue: krds_cp_wq#5/6 rds_connect_worker [ 744.245313][ C1] RIP: 0010:stack_trace_consume_entry+0xa2/0x280 [ 744.245339][ C1] Code: cc 41 0f b6 04 17 84 c0 0f 85 78 01 00 00 44 89 23 b0 01 e9 99 00 00 00 31 c0 e9 92 00 00 00 48 89 f8 48 c1 e8 03 80 3c 10 00 <74> 29 49 89 ff 48 89 74 24 08 49 89 d4 4c 89 04 24 4c 89 cb e8 95 [ 744.245353][ C1] RSP: 0018:ffffc90000a07e58 EFLAGS: 00000246 [ 744.245368][ C1] RAX: 1ffff92000140fec RBX: ffffc90000a07f6c RCX: 0000000080000100 [ 744.245382][ C1] RDX: dffffc0000000000 RSI: ffffffff81888fd8 RDI: ffffc90000a07f60 [ 744.245395][ C1] RBP: 1ffff92000140fee R08: ffffc90000a07f70 R09: 0000000000000011 [ 744.245408][ C1] R10: ffffc90000a07ef8 R11: ffffffff81b20a10 R12: 0000000000000000 [ 744.245421][ C1] R13: 1ffff92000140fed R14: ffffc90000a07f68 R15: 1ffff92000140fed [ 744.245435][ C1] FS: 0000000000000000(0000) GS:ffff88812504f000(0000) knlGS:0000000000000000 [ 744.245450][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.245463][ C1] CR2: 00007f02f15ed158 CR3: 00000000307da000 CR4: 00000000003526f0 [ 744.245478][ C1] Call Trace: [ 744.245485][ C1] [ 744.245491][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 744.245515][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 744.245537][ C1] arch_stack_walk+0x10f/0x150 [ 744.245559][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 744.245582][ C1] stack_trace_save+0xa9/0x100 [ 744.245603][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 744.245626][ C1] ? stack_depot_save_flags+0x33/0x800 [ 744.245652][ C1] kasan_save_track+0x3e/0x80 [ 744.245675][ C1] ? kasan_save_track+0x3e/0x80 [ 744.245696][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 744.245718][ C1] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 744.245741][ C1] ? __alloc_skb+0x276/0x7a0 [ 744.245758][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 744.245784][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 744.245802][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 744.245818][ C1] ? nft_do_chain+0x48d/0x1b10 [ 744.245836][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 744.245860][ C1] ? nf_hook_slow+0xc5/0x220 [ 744.245884][ C1] ? NF_HOOK+0x21f/0x3c0 [ 744.245907][ C1] ? NF_HOOK+0x336/0x3c0 [ 744.245929][ C1] ? process_backlog+0xa34/0x1860 [ 744.245947][ C1] ? __napi_poll+0xaa/0x330 [ 744.245962][ C1] ? net_rx_action+0x61d/0xf50 [ 744.245978][ C1] ? handle_softirqs+0x225/0x840 [ 744.245997][ C1] ? do_softirq+0x76/0xd0 [ 744.246039][ C1] __kasan_slab_alloc+0x6c/0x80 [ 744.246063][ C1] ? kmem_cache_alloc_node_noprof+0x121/0x610 [ 744.246085][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 744.246107][ C1] ? local_lock_release+0x9c/0x160 [ 744.246125][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 744.246147][ C1] ? __alloc_skb+0x276/0x7a0 [ 744.246165][ C1] ? __alloc_skb+0x276/0x7a0 [ 744.246187][ C1] __alloc_skb+0x276/0x7a0 [ 744.246208][ C1] synproxy_send_client_synack+0x175/0xde0 [ 744.246237][ C1] ? lock_acquire+0x106/0x350 [ 744.246261][ C1] ? synproxy_pernet+0x45/0x270 [ 744.246281][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 744.246308][ C1] ? nft_socket_init+0x50/0x3c0 [ 744.246334][ C1] ? synproxy_pernet+0x45/0x270 [ 744.246355][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 744.246376][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 744.246396][ C1] ? nf_ip_checksum+0x13c/0x510 [ 744.246418][ C1] nft_synproxy_do_eval+0x335/0x550 [ 744.246437][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 744.246454][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 744.246482][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 744.246516][ C1] nft_do_chain+0x48d/0x1b10 [ 744.246542][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 744.246569][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 744.246592][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 744.246631][ C1] nft_do_chain_inet+0x360/0x4b0 [ 744.246651][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 744.246669][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 744.246695][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 744.246720][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 744.246740][ C1] nf_hook_slow+0xc5/0x220 [ 744.246768][ C1] NF_HOOK+0x21f/0x3c0 [ 744.246792][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 744.246817][ C1] ? NF_HOOK+0x9e/0x3c0 [ 744.246847][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 744.246873][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 744.246902][ C1] ? ip_local_deliver+0x113/0x190 [ 744.246928][ C1] NF_HOOK+0x336/0x3c0 [ 744.246953][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 744.246977][ C1] ? NF_HOOK+0x9e/0x3c0 [ 744.247000][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 744.247025][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 744.247049][ C1] ? ip_rcv_core+0x88d/0xd50 [ 744.247075][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 744.247099][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 744.247123][ C1] process_backlog+0xa34/0x1860 [ 744.247144][ C1] ? process_backlog+0x3c3/0x1860 [ 744.247170][ C1] __napi_poll+0xaa/0x330 [ 744.247188][ C1] net_rx_action+0x61d/0xf50 [ 744.247213][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 744.247229][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 744.247258][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 744.247291][ C1] handle_softirqs+0x225/0x840 [ 744.247313][ C1] ? do_softirq+0x76/0xd0 [ 744.247336][ C1] ? __inet6_bind+0x386/0xf30 [ 744.247358][ C1] do_softirq+0x76/0xd0 [ 744.247377][ C1] [ 744.247382][ C1] [ 744.247389][ C1] __local_bh_enable_ip+0xf8/0x130 [ 744.247410][ C1] __inet6_bind+0x386/0xf30 [ 744.247437][ C1] kernel_bind+0x13e/0x1c0 [ 744.247461][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 744.247481][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 744.247513][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 744.247535][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 744.247560][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 744.247577][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 744.247600][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 744.247621][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 744.247646][ C1] rds_connect_worker+0x1d8/0x290 [ 744.247670][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 744.247690][ C1] process_scheduled_works+0xa8e/0x14e0 [ 744.247726][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 744.247750][ C1] ? assign_work+0x3cf/0x5d0 [ 744.247773][ C1] worker_thread+0xa47/0xfb0 [ 744.247808][ C1] kthread+0x388/0x470 [ 744.247833][ C1] ? __pfx_worker_thread+0x10/0x10 [ 744.247858][ C1] ? __pfx_kthread+0x10/0x10 [ 744.247882][ C1] ret_from_fork+0x514/0xb70 [ 744.247909][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 744.247934][ C1] ? __switch_to+0xc89/0x1420 [ 744.247957][ C1] ? __pfx_kthread+0x10/0x10 [ 744.247982][ C1] ret_from_fork_asm+0x1a/0x30 [ 744.248008][ C1]