last executing test programs: 6m45.702109343s ago: executing program 3 (id=2932): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) getsockname$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000380)=0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "e68265", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0xff}, 0x1, {0x401}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0x8, 0x0, 0x1, 0x2, 0x7, 0x6}, 0x2, {0x7, 0x70, 0x3, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) close(r0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000240)={r2, &(0x7f0000000000)='vcan0\x00', 0x200000, &(0x7f0000000040)={@align=0xc, {0x2e9d, 0x2, 0xb, 0x6}}, 0x10, &(0x7f00000000c0), &(0x7f00000001c0)=0x1b6}) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000203010100000000000000000104ba0000060800010001000015bc8e21881a3a0d2bbfa018476f2901093e4309000ec394c5e82907a7c0eb8355b7ad232d3d415df04180ccb81cdbec8397f13adbfb9030375fcad7337027d36f0b8114b9ac27d8ecb0628af9b88d76e86b9e3af3c87a19ec36499812e06747d29d822dfc5e70219d0d34674a2cf4ef9aaa7f6b571dd6d70dd1edcbdbb5f12da2502e207a1960beb9303234642d94656c3c904831f5f0666567221bb800"/198], 0x1c}}, 0x40) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) close(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x288, 0xa, 0x148, 0x288, 0x10, 0x380, 0x2a8, 0x2a8, 0x380, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x7, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xafc, 0xf8, 0x10001, '\x00', 'syz0\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@time={{0x38}, {0x4, 0xdf, 0x7b72, 0x30e7, 0x393, 0x4, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478) 6m44.930150558s ago: executing program 3 (id=2936): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@deltaction={0x114, 0x31, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x445c}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x5a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcf0}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4008081}, 0x4040) 6m44.575476422s ago: executing program 3 (id=2937): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20060400) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f0000000900), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000500)}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6m43.290640645s ago: executing program 3 (id=2942): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0x3, 0x2b12, 0x80120, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xb, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x8002, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x6, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x2, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) bind(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x270f, @rand_addr=0x64010101}, 0x10) listen(0xffffffffffffffff, 0x5) write$tun(r0, 0x0, 0x6a) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004044) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) r2 = socket$inet_sctp(0x2, 0x5, 0x84) accept4$unix(0xffffffffffffffff, &(0x7f0000000540)=@abs, 0x0, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0xae2e, 0x100, 0x7, 0x0, 0x400, 0x7fff, 0xffff7fff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c, 0x80800) syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000180)="8084ea4702fb47a4e459d18aaf8ba024d9a73ab9fbaabc0a09e1e860129267ee20cadce206f0367e8f37ab79082ddeef9f69e0bd6ffb922c64ded508ddc240f96ba3864458982ca4208473447ec4e4626907784572d7c219e235bcfb238982e211c0711cbfc456fcf0da805acee0d25ab79693ca223c623650dfa90f497d7c831aeaf709315fa190055a9ccac6b566717801752dedb512d97190cad93e4d08d37394", 0xa2, 0x4084, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffff000}, 0x1c) 6m42.787071536s ago: executing program 3 (id=2944): socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1412, 0x304, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c085}, 0x10) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000580)={r3, 0x1, 0x6, @remote}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x800, 0x1, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@remote, @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000b80)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000c40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000d80)=0xe8) r14 = getgid() ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000dc0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e00)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@dev}}, &(0x7f0000000f00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0, 0x0}, &(0x7f0000000f80)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, &(0x7f0000001000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001040)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000001140)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)={0x1b0, 0x1c, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x19e, 0x8d, 0x0, 0x1, [@typed={0x5, 0xff, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf5}, @nested={0x4, 0xc9}, @typed={0x8, 0x162, 0x0, 0x0, @fd=r4}, @generic="400123928b72c2774f5d9f2a5be9447db8899fa3bd67b54c2af82225a9597dc98d5fe5539b7f0f5534c782841d4ef9122cbf077b9868c3815ff7152f51dfc1c926ab147139f8a8b4be391bb623d772c9d45004ed8c37494381cad45c78f3d60f5449cc2d3ed5a69b7c5b1463ff84f2", @generic="6c05735adac665d3981b7a9b7e8ac783843e6f4fdfc99b8f6540a7e28021650270b3a636", @typed={0x8, 0xf9, 0x0, 0x0, @uid=r7}, @generic="48fd599835b68b26d0ad011c58b92fa431bc397c8608d8183edaa893f0101080038ed315c18c8a9f8bb7bc592074cc2f9243faf3867ff57fc5ba9a829d7db76d8b21557570d28fd3076ed07a022935d7ce8f87f2d444c629bcb9a2c3fa04218b4e54d1d5d2ee6c67b734ec1424d57cd1b66a85195490ed4acd1c447ae4051ef25a66e5082a8ace860c3469165d6c2e1d0e4be10ce7da6f0e8ea356d7eac6be07ee39f38f8e4b6104ec2facccb553faafa6d170879fd5114d9f1cb02098776bc43d88804601b49b689bf04f2240d8423950002718d00dbb1f97539464a7a5297763d8a0ef6c9ac5"]}]}, 0x1b0}], 0x1, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r22, 0xee00}}}], 0x80, 0x8005}, 0x4014010) r23 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r23, &(0x7f00000028c0)=[{{&(0x7f0000001240)={0xa, 0x4e20, 0x7ff, @private0, 0x9}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001280)="50d6601429b6ffd599031112ab1452af5259034b504ced97410a198647617f7fab29de31ad3d94858bed2a1ae18d0d77eb041906e299d4951ffedb3a8838171ae078c4dec51ef814ae2ef2f1902d017d58aac91ebff7b20c029f4a81bc5515e139f14119612b623dd1e6318a5574cb234fe6a81dc9965e9afb42aa1ec3e3b55952217c", 0x83}, {&(0x7f0000001340)="5331a15be25cf5498af67cc5c0f548069a4c54789e2560516533c6732be75af8d7e535c7c365444696495e79f9e78b52bb75d318921e43b2b5d130d8a837c9b3b5680933bbfa2b68ee6f88185389", 0x4e}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="365b1c02889d7555aa4e19341faed58d9e8953fdedf5279c11f6e363e6dc620196b5bd6e246fd7a3d5b230e0a35cfd8b540d86cc7c05c4657213ed7d1d247c1964e1f68995a2b30b920b0adad6c79e11746289947ddb9c66d400c3a0c7a8f4d08aa7f709f090e1f4c06f596a86c515a81b1e3f767f71528eb693959d5e62f00b4fdf73937e3e28eacb71d99aff419f800f93c16158abce5b8efeab57e339a65f3e1f0c15a3771ce2fd12601bba6aefb7d56370242aac81b32f2dbb9ba80db3c15d3c5604d2bbbd714fe0d9c68048c2916eca7d88e99279dbb2cbfb43f7e844d1b0d07934a9", 0xe5}, {&(0x7f0000001500)="c5be90bbc9e3cb61ee2b0780bf5c697961043094700820db5a7d78ec7c9dd111323c15a828372b54d57a32ac7224de96f19b37c57656e3ef70e1336cb09938bb2db50b87c577cfab33fbca72eedc7f9700c42a0f698f16431b55600505731975c9ef8f6160ea8acb7a47d3406986a45cfb4ec6e00f75fa8d9e097168655ef01a21306a11b91acb4c309e805b958f51e2abeabe189c1d98597732286ff9d048b2a3e0499572f8", 0xa6}], 0x5, &(0x7f0000001640)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x87, 0x0, '\x00', [@generic={0xb, 0x3, "d5ad8d"}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x267b}, @calipso={0x7, 0x10, {0x2, 0x2, 0xb, 0x8, [0x3]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfc01, [0x4, 0x7, 0x101]}}, @enc_lim={0x4, 0x1, 0x9}]}}}, @dstopts={{0xe8, 0x29, 0x37, {0xff, 0x19, '\x00', [@generic={0x7, 0x7e, "e5c8095384c5116403384fc703e3f96392067b43b0f47dafc97a35cc97df39970a7d4b930eaaab1ea754b528cab60e1232a3b808c6fc989061c976ae7f431eb428cfca77e07773c3d13e47be4f758d8b6dfe70a45ad66ad0c12696495bdddfdb4fab1582e58fe4039916f1075e5d8cfb0110049350ee1b1c6201ee0ca5cb"}, @calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0x1, [0x5, 0x2, 0x85cd, 0x8000000000000001, 0x1ff, 0x3, 0x4, 0xffff]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3ff}}], 0x198}}, {{&(0x7f0000001800)={0xa, 0x4e22, 0x8000, @loopback, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001840)="8b852581e896ab1432f869a8d7cd7303f6a0d48c783e387e12b9a06bdb9627290d95671be8bd75db4d8825aa0f59447cfbd9f0d739695bc5ad1283a5fb9179d3c13f8e5499bea06bb372e042c4f8b60e1d94f8beb52a59144ad6788e8bf7ef7dcf78", 0x62}, {&(0x7f00000018c0)="3384b5d8f03374d1aac7fa7f8cd1f76ddcac98162dff5ee7e8984f1d4fb6343bec479fbeaa1418cd9101bfa63b5943bb80bc75cceae2daf93c73d3747b4a5eb7f8964728b71c8c58c7bdc64f5dcc60fb814b0534eabfea34f18bdec442c60403188e33ffaa55f2bd5144ba8c12b655ed0f0d53d879fe1f0509895df0ca8df850d10b978bd91761951db31d704ff8cdbe2cfb502e27635ae750931ef9b711a0cdec42443dba22bc05a37ca2818679ecc5b82fd8494eb530da181a2c094d96146d7b13e50b4ef4e0484abdf8a32d4281a876", 0xd1}, {&(0x7f00000019c0)="2e345a5be8c20f6d58757816448da156a35e375552ce1e85afa9e6d6c42527fbc14b6c1547e0c32149b48b27d8ae14095ecdd60f54c665d8d5bc1441cb84fa7a674422c997d03d7a329b8ed17f5a916020818323f94d9b876d17ba173550d9a63aedc50d4a41cb39db07f123f417c7f3177ef085a55a1a2829a31515c60bc8eae1bfe388f1581f90c60b4ca31a3574d4fe619f62a7b45d1c0c01157991a3fb32704fafc8282105e1225c1233cceb5cfeedfce4afea0c2374e2d2eb55dccd0da8906d674f", 0xc4}], 0x3, &(0x7f0000001b00)=[@hoplimit={{0x14, 0x29, 0x34, 0x100020}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2b3b}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x800000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4a}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dstopts={{0x150, 0x29, 0x37, {0xc, 0x26, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0x4, 0xfa, "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"}, @calipso={0x7, 0x30, {0x0, 0xa, 0x30, 0x40, [0x7, 0x2, 0x1, 0x3, 0x6]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x0, 0xf4, 0x0, [@private2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x288}}, {{&(0x7f0000001dc0)={0xa, 0x4e22, 0x1, @loopback, 0x101}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="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", 0xfd}, {&(0x7f0000001f00)="55c7f7ed4719e10c6911853d5efdef177a1a4ef6ff012eba2e1a4375eb", 0x1d}, {&(0x7f0000001f40)="8520eb8b5fbc8b14afebdc82d53bf1f5db0be79f15975e51bd2c3c2aa5d1131de7bb3e8a86f731a06d1d0fe47194007506101257e55d1844ca59c0e1f5533d05", 0x40}, {&(0x7f0000001f80)="0c55a176cfb9c3bda5d0dcbdb61cefccd26e2e2c16", 0x15}], 0x4, &(0x7f0000002000)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x32, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @padn, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xff}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xbae}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts={{0x38, 0x29, 0x36, {0x62, 0x3, '\x00', [@ra={0x5, 0x2, 0x6a4a}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xf8}}, {{&(0x7f0000002100)={0xa, 0x4e24, 0xaad, @loopback, 0xa}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000002140)="6e271619401c68d2d9d539cf0b851f604c9a09b3110fe4541cb933", 0x1b}], 0x1, &(0x7f00000021c0)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@jumbo]}}}], 0x20}}, {{&(0x7f0000002200)={0xa, 0x4e24, 0x7, @remote, 0x3ff}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002240)="9fcc91cc8efc4abe4f31b533366c89da3689124c7051d861a2f69298eaa5efae1c7c50aa3d68e03a8a080ffe9a139729cdc1e32b2d679db8a520e712f6e982c31e6c6e4a3e94850a6a21589df2e295360d1d31", 0x53}, {&(0x7f00000022c0)="e8437b2bdd6273b7d05271d947b17cd4e807684bf653d98bc73c86cbc071608eb9da8c4b0ed35094899a749398c581c948f029847a7be37db97991c5387e849c45bf38f172cfb9039b39525365310efd2d6e0820a8d8a62f0cd2a7aa6cae6cd40a723f4b94674a87c1db0232928a6c1f60bcd3721098b093616673abe302bb85a295683adfb6d239bbaafa4a0a064c1c45c88a079b809a412de01d87f4ec619db2cd86", 0xa3}, {&(0x7f0000002380)="ed77fa3c0cd5dd98cb8673b936dc2fec3d286521c519eae25b358360dea14f0afb2d59d1f417957c5ef68e375e920e0cb3389beeaf4a377fc581decbaa0749951f869ff7e558d592170ae973f49716c21dde89985a7cbd2c777bbf2adc7e3f3f59316c1b2e3fbe9f8c0a8859d87ca0e472850eb6af8a1d120a3cb6dd5aa6503f59ef981dddfc9a79351e348ab649012bc21d67f7c8a0a9cebb25292159377dda2e071eb452807c06d04ad9ac0f43f2d60635d8e2", 0xb4}, {&(0x7f0000002440)="b784f4c22f38d2ed8ae8ade612c1ca707f2960b614adbd4c3a3bd525d0cb21fcd3a555f865ffece437fa2492b75a9a61148efef3cfa6c2a86fb219f91600a35b0a722bc0b02243e8cdcd5e8e075972be688b579f87a005dbc82c9d7729bd88cfad6631ffcbc252", 0x67}, {&(0x7f00000024c0)="566882", 0x3}], 0x5, &(0x7f0000002580)=[@hoplimit_2292={{0x14}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x0, 0x2, '\x00', [@pad1, @calipso={0x7, 0x8, {0x0, 0x0, 0x2, 0x24}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xa}, r21}}}], 0x68}}, {{&(0x7f0000002600)={0xa, 0x4e24, 0x2, @local, 0x7}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002640)="0ba2a5408c2ff0646c2a506a158a8962332a3300355b7beb7740e66aa5eb52f11866dec128c8e1d2d6daaa9d5bf81545e0856337ebe86341309443b2d470bcc33e2cd284ee77aab88d55d7eca6658ed7874abbbb1ee48b6cfb2a7a2e26c715b0e96cde823cd10ee33a4260bc909dcfc46f9a6463e67e9ced4621ea7967c8b4b49d247c9218e5b0d4bd2bc0199261724e534c6a65d56908a099c8d0cb1c8ffdda3135b2c6202a3c95c9ded2356d2650ed787a5c4f133cccc6edd33dd2ebfbea64bddb2d6d9bae44bec1a9425ff6c022d0593ab4bf4e816bf5d03db24e7314b15f09c7", 0xe2}, {&(0x7f0000002740)="1ecbb461a06e99d9b5a9f2c1df0ff6c4c264dfeb3f49b5de61500eadf74150cea480ab2218b1ab9cada205b4ffba3bbdea257e", 0x33}], 0x2, &(0x7f00000027c0)=[@dstopts={{0x58, 0x29, 0x37, {0x84, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xc0, 0x1, [0x1, 0x200, 0x5, 0x2, 0x5d8, 0x3]}}, @ra={0x5, 0x2, 0x1ff}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x5e, 0xc, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x18, 0xa, [0x1, 0x10, 0x5, 0x0, 0x43e, 0x9, 0x9]}}, @generic={0x96, 0x1c, "595ecacfd19bbe55053ce3ecf20022454a8bf2aa779b1f6fa8fb76be"}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x5c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @local}]}}}], 0x100}}], 0x6, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000002a40)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000002a40)={0x2, 0x4e22, @empty}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0}, &(0x7f0000002ac0)=0xc) r25 = accept$unix(0xffffffffffffffff, &(0x7f0000002b00), &(0x7f0000002b80)=0x6e) sendmmsg$unix(r25, &(0x7f0000004f40)=[{{&(0x7f0000002bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002c40)="b05ce26f6a48ee8b6df3d92a4fbe37cfa9f26d5c14293398828ff6d267461061f849452b012ab592bf72db38ccbc95e8080509c742264a6d8c259d33c89fc4f79e10accc85adf7bf14dfee5d63d1e7025a7b1ec7c0380a34481498822fc076b6c071d014ac889240de44c51c178ee75afd989abc206f27f796e3d45a53512cd910590eff3a74937144a1bddf57b815187e6f1e96ec", 0x95}, {&(0x7f0000002d00)="a8c55af54a00c1866bb5254fca753cf3532dc5350a332cbc3e6d6b1023a782d6bfa6d8e5176626ebbe9abca199aa8e7432fe69644e81fd4c42f62d6951bfb279d36145f477be9e2a191ba47519295aa95d543f490e371371b2f2cc9b79ce7b1b70f1e137e8807e90f6467594bea52be254a8916af6014e5fb881b51c232a9770f662c417dd9e324c8109fc341ccc5c516437f196400120c50aea0b253af8ef78f79e5e1b82819bf63817b2010993f4efee3747b6e474", 0xb6}, {&(0x7f0000002dc0)="a3c4ac86c06ae2e5937bb91bc248b0c57ecc013d2ab80511a1cabaca5fc13b28b159ced361dbd213a98a908dd8ef60329c75d4be42d28a5bba4fe16dd5435a7a3a387b6bcb980ef476b324b1cf892f031afd566bc54f00d7ea0fb0c6156e423d1982ecb94372ade3959ab6c06c1b7f77752aa34c31da257a86b6773e7fbabcbb9202ac45934477a4bd7e35d3007196e38d26f32223dc0cd79e31", 0x9a}, {&(0x7f0000002e80)="13a367fd0797753c6fa53450feb7e52ea7bb6d28b11037d1f134ad341ecef60b8964b073628d0a4d27558f8d36f9d5e2d1f739d4680ef932f5591c2209b79879ba73bfc1705f6e9aec1ac7ce73f33d8b6325192c078a8d199c1a6b5b490cae178d7caef1a7ea913ea2debfafebe90e8309ecce7c132ef5754bd7d5bfbdcb785291f2a233dbe02a70c33a9407733201dac0b9856ddd5bf988f39b45eee1564c23c1f8663b63b8fa08af5eb0f8ed188032cde26a2706be28628bacede3d417f698d1e3aa21e2bd8f76fa97146f6c3f713dcc2eb30d2e2f754b8450f1a9b2b245a8c7191711314a12732870084fe009c96a58cb15c9923d21d8048818629cd6eee919ef0602241376fad984d232937b1750bb7f588c4dd20cb230c2d3fa8509ea11eae529d839d4b8b9a8b1db851a35341df648fe6c14fb3898c25953f8f1847bd32e13ed663db9ceacacc8ba6216807536a4d38e63378a89c843496f0718822a50fc1618e6c7805809340c0c4d93318c2ca784c32485668fbd20f7865019e2eb5ce3c16e839936588ce5423a99d69b69aa9e12fb9e67f7ad87c12771869eb43321a0cba490921754e901eb3aa30a64d8e819fa0f183d6d4beff79d96f8aed28dbca468862ed48d7e9245703f699df0d93f48976277231fe8477b0b39df29369e3278f4df0ddc0190511d97f97b39408b3508f9b58de6ef8ce5fe842a58304edf0dc4d3064e44fd08b9e6f9ffcc874ea578181c0a03598fd8c5fbb06ee1e25a908592f999db7906157e5f13586db046760691615b537c850593de233791fd58b4efdab1da0119598e7c106716d22ec585ec6912a1145a60ddaab88466ec79a6b589da0bd096faadc6f86e77996ebefdb0d20c6a3ec9f7fe52493ee1412a1b893c169157f725b28fb3b612b085bc4aefc4bc531c96d69292694de5026543516f14231d5ed36cfdd59199a289f6e579db409646baf7ac1a2030f0036d4683b0b87b6665c7ebb703cfabeecdb74c82e2bd5696a972e5995dc902ca6a1a30fd3415436a31eaca3d584e8fab821013ad112a115febfd61bd69d58a84ec6286dbd286634d2d6e351945e1f83c44ae7c1871b180adef2ffa0d0d6d609366d4dcd4e37de7775bc33eecc1e805d25c0f20db2153975db34606c70aee5199cf50bc0b20f6ee3d1fa8738c9d8ff92e03e772179bc6c30dbbf07b6d3f3a32930429c9b3a91dae9edc7015c527d05ab72e8ab6fa6791f6710932981d68075ff6bb41711f78a90f9ab73542789eb0b8fafb19665b5f4fa7325f90c40c20ea28761066a87641c5c2f3d04183d490613f1516a0647cc3c7a6b9f7acc10af7879ed5e311910e67a42c3dad5fa0bf2c732a65fd10bad9b43ce522ea28ec711d938ccce654076665cd1a395817f67ecfb555e80da5b406999ec0e27c2d89323505d551d3f396b261444bb12a908df4d4bdbe8b6f2706903fab6e7c473c87728691d0f0d9dba62beafe6e2516755dcf9a8b00a504a63d79c4bcbd2f0ebd3b610ba92f81de96ef4912c0860f519354e2c89b3f6f31c8ccf64bac2bf737d435597c2a74f7b22e40a3667bd488e1c13fc06a47f4188c04f551024e95c7bae6736e55009655679d6c9855f817896ba20e11247e86be0a13af2265eeafa0fc1388bffea443971e32ab63b4143f81e43a91de66ae6738dd2739d73cc6b12c067156de346d0bf8997d8cde22795180c4c842bcb7bd7f0c4d7d7f4f0c177638a7ec2897be7fbc68463e3bd563f152767ae24d9e00d1499f7c6b1152562a8a6e56efee891138033beb72e90676aec1dd404f9a8707c69f77dac9d9108da2db926b223ca81505aec2f9b5abb648ba11d34433f48b4132809ea7265d88e940951897fb0ebb989d566ac034a4728e0727ef1ad9fb93af9b55b192f1430174231f720db351bdb8531f2cd2b7a49f7daff959666cee7b3b7467b9a62f46b255e629c4b7dcce4c2dcadb5aed68d8d9cfe9c5f18bf8d335565ad3f26588798eeced55cbd0726919007517550fc61ed019532cce496f9f264ef7d2477f904a472a7722fb715fa7d01898416c61a7dbe2f5ea648e9d1b377eae8f243a835078f47019eb5ab35ce6abc316b43a4ebe9cf8f81bb22e6eea64c6477679b882ad9a9b250b24b2063fee6d8929475a0525e25217191d5bafd9c37eea514d19db4feeadcd1d67b88a025a910ea69c83896bd840b5badf89f10ce1691b3f6bacd3b38f60f32dddfcfc31a4111ecdfe66f2af8dc356037aee2f8e7ade71ee856310753b3d104feaa31da40b309985ec28a529a3a546c0d54a029aa7257b77df8e54d847e34aec2c4095edde740d0b6541954c5b31b1c30c3f3a15ab69d72d70df012ae19c968c19d4afc65adfde86dcb18955d18b4e72fda75f245532b440e5481edbbd6a7c454a63a37ec91b51c3ef8575bf33b0c2ffff03bdb02011180db1ce7057f8dd318bb21f74118a8c7e45e58cd8efe8cded87a256fcc26e0a2949d5be4efde102e6a8bcae41f7a9626b8b0d98ea2e114eb0658c08ec981d551cf16125823ffc1e18c94623cc06b8f8ecf549e797682e11271e9d2b81cdbe124f8db3e90109bbe4572bf286751aa49fe8d8a8b1eb0e89f25146a458de49cfa5e2686c7ad20301e3ede171d0dd1d188b16742970d5f97bb2ebd22d2af3b72b13f739fcc7f27e3931472153416c3f42bc2b2a39d843ff8f909e5bc07073897820a78daa0c67f3d5447246dba43b49d043062e983014a59d70a4be7b34adaa5a0a7a34386ea3cc5646af6de40a5ab0e20d85d36cb700c27a3b19759eb0cf91fa0490b97c95b5bc718897ebc3b6df8bfd4ddcf3689e364831c8c7f67c3d174846e1e751374b14517ed5bb435273c966db6e80419ee4856ccdfb551377051ee11ef75a3dd28d2834753cc6d260fe68936936ee5e5dc3cc5d21f2097c57e33f048467871030cc370f5d9f2a127851886778812803c801a89d01b400095a6170d9e1ec1662902b5f85a9aefd75f8aa97cdb759ce2ac2729fb55518fc0a3c20aaa19b02dd648e05c0c4a648cf528ab72c4d4939b993bc8633cbbfeeeb27ab444e4da85dfc96d70c8bd25f82be7c58bca2189b97eea5f49cbbf5b62c47ec350b32b52741318c91a8a550e2adbf8e6198d8b9dbf38f675dde9747719c0784b7e7a401d55e846461c09047a6c42745b6349eae060710f5fa12e210ee224ca32bfecb8bf5d47b4cd369c918e5c854e1cb2b0372272468c303c1a0e6dccc47b8eab1971e988fae6589bdbf43d74a40a0761a84e8fd6fba49c3474c5ce5383bc5d61daf88a581439f2cce1ac53b537dbb9bccf4ca9002ac6d9d08bc20dc4b26cd697514f671a1cbfec216ff89a0e75cbdb89c58193c4c7724fa7a5971d459138a7ee443b423d34a304f44b29cd36ee1422e0927629988f8264c266eefd6cd676d7e0c84eb5f99c76d7cbd8feeb0161adeae205ff2ed9035a448c21b14c5b1c862d5370571bd7eff5b20c79fbdd8a30db9bd12284a413eb65bfd67a22102ce7fedb9555004ccd32c8c2f505cd179b9be5ac62326e7be0189be3da5c01fd84520e8b62abe17cead95ba026105b8556069284766479ccefc02137de70e66898986d01578d65d7ca259a032a68df62d8b392cc244617a2b1e631b1c8a7f3a7ef0c0de5146ac7eed8d2937df7804bee57c24ff7cb6a9acd68275ab3e63174c8d024af9f8b3143aab7754e4b8b2593af5988e784032dbef64f1e269e24783cd84f6fbd3c2d77d7611978a49b122aecfad9a2c7489e678acea1131a8f31ca1d48fddeb39266e0dabca219928f38435cb8e00e0e0be0673fc6c889d8f6f255b90a3b120753f1efa40df03f2c5cfa848c4c3c326c00d6c04bccb8ca8c1cdc07cf5d5d5ae4ad968b4c44d1ea34560be2c4869d1200aa4e6a29a3e8666e912621b1bc065e0699f1471ce45ba9760cbc8781fa296c278a4584359aebc528957be56bbe49d4d9f337a1c6fde008894bb2337f1144918e869ee31b2510c09b67ec9eeff933410f114674637d9b082c4dbacd226ffa6367712f0f5b286fd832349c189f2e1311f4ffd48419e8151cf4914077bfc14e1e31525fc263c5f133b57a5589835073d50792ad851737f13566c27a28a5a18c59671ee46bf7ae6cbe14d91fd7e9308e9600291396f1d2e2eb15e770ee1dd270c9887051a389eae768e3631afa41216b5cd4a55d3fce59e37865fa66eaffb78ff6ed9119838368c5627ec4029191c1dd74da4a55021289016bcf806805d5063b718dd5301cb4d4c4645f06bceae0216d03e9e1628d1023305f3e3a6a151cb32db438f89fe075f5e7b5fdf22e6dd3dd06af897b0aaca01d7ad177351f67b2f5ff2560bb25cc55dad945b86fb5d4439bf9436d13dbaf2fe857d993806db9b67b9518fd7153a4f0438626fbf6a9cccaa6b208eeda1d008c4601bb885844e79df534b5967b645e4109a84644c30236e05859bb2f98efc5aa3deb8b36dfe334fc6c1416a12bd8c527d91e22e73f6a6dc094bd8a3e8b89ac4ac080f02c0c695bc64102ce8dcb83ae6459fa4daefc18e5a6edf7106913b1a54e416025a47e98aea9aaaa52e0d7d30c261d681a169a7293c33f173d330b08e0f49ce17a0d80feff8c6b7494bd78b1dfd0b39c2beb014a854ec2d4ef13e4b61ac956fe66f3874a19a3d03f7b0fda58a253d8bd09562090232f47c535083ad833fe66351412e876aaba100f72b0603b467958d806fe533cdec51050d3c30736621127c51dabb4528a6ae0bdf9fdab7df543084ec66ab9b21f75bcc9aba2feb870994bfd0c33b88e2bb6e412d993245e52ab680b3a50f44db0a5e7ca1ea8de1d2b4c310231820706814834e9e831ce7c0aeabafe76e3237ec32e2fbd1327e7a04c32b2e14a70a20c9cddcaf814fb6d9ad4c4baa8c324c8250889d95307ce625fad967966eedeef73d8a6f50c3862b8e6156b3f7515affa082c0f1d8fa1e58e6cea442742dedc80b328454f988e5c1767009f615af6531d68e8300b0174cdc10fa3b2c3aea2036bef5857bf8c6d6f65884ff5a0bfd1ca0e819b3b0f2d04106d0a26fc475112f3bd1b8fdaaf4ea2c611ce6bacc3d8a3d8158a187c9784e9cd05624ddf7ab4a797565901e50091dea90313eb36d58c141468af32abd7f497eb50388e2873677d00d4deced2a371029442ef3e6680f1eb0e52266208cd83ac549dc10e602649826f606bf0b6950d2ac9ce9a62f62586baa147eb4a2d317856fc0d6dabe33294820740ed254ec338ba848b9c908fc8e9dd411a6ec7339fc3d6ff187e171ac666212b79bfb2fdce8ef97322c090a74ecfbbb1e126543100a03bc1528e804346babbf5832ef488133420ddce4384b3624a2a1e46fe83bcf2c9c719d5b3b1c120518702bc792f2932d98f40517f63fdad014dae2c4196464edfe581110ad68165d6645052bd3b45d5620debe3793034545167bd7650decef1ec71bddf02b3089e3dd634d7051683e12c42527ed543016ba6afa8d1eba7c4c9ffa5c36f1ded42253c8f9b5e724312db42f47233f29c66d58cbdad90f7fe16a7d8794d7c86dda4ab9504d3850cd0820830440c8fe44a67383d37e59c4f31010768d0220020ab9acb43227ef3c2462aeb3b66027a02a0a422090f4bb96052e2086eeba94cfc25ec7cc51d95df4625ab466956fb4d6b197f2600b725693a55aab7dd37c7904e0cc1b97041b2b8726e892ae8d1fa3d5d694b41cdadef64565d1435365c188e0a864794bccadc1ad3cc5ea517c534a4ba887c69e3865f27b503087c3a97f19fff0", 0x1000}], 0x4, &(0x7f00000043c0)=[@rights={{0x24, 0x1, 0x1, [r4, r23, r4, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r17, r9, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r24, r11}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, r18}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r4, r1, r23, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r23, 0xffffffffffffffff, r23, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r23, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r10, r24, r18}}}], 0x140, 0x40}}, {{&(0x7f0000004500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004c00)=[{&(0x7f0000004580)="6fcd06f2342129f4f5d5e7f050abe2bc0c0b401bab55697da51b84e601f656cc79af5faae2425a5b50c48b9b52", 0x2d}, {&(0x7f00000045c0)="04dc866e0ed40853ec98e34114f0541420f0236f048f8e96604420ceeb73dfb7f21b9e1b5b7b5c7d7d80f2ac11abe45fee0bd03fdf2594eedad93eedbcc70ab66c9ff7caefbc08ce8ec245f413f74eaede06a07709e25960b3d7fffdf3d87c7043b502e550ad066af182fad7b734fdb2e0af523489ae6e0d21d4cecf76099239daceb000a9c27aa7bc818c30d89254667f66c8dd02b5c7b59830372b5238370f34d0696e60de", 0xa6}, {&(0x7f0000004680)="97f42b55cf4cb10f21c87b354cdecaa204b50d1c1774f4fd1275a6327790451bc28243d03a2b5620cecacff5c76c5b71be445467e4d784745eed8fc95f6e1bedd9c7e0ab289f6b4d8a49f0cd1c9a5afa78d18dbcde4eee42be3b235a973cf662d36ad4f2fd02c17be56876930a23f58451d4033623122b9c7e19879bbc3578b4b642c6e2acd170a52522016eb9422454420c27db1cb6b993db9825708985588acaff3b4307ef3a19d04881013dcc8b7a6c77a291438eec02d66f63fa793105acb2567a0d44793a1186ff8326b91338ec59da163a2c8124b5b5824f69ce14717f410a1628", 0xe4}, {&(0x7f0000004780)="0543b91c899c93d719c98c600c1bea59a5d26813f1fdf20aff122be364e5c57f67502be322d070ec683f52e08b98272227549f59f50b296fa23064155ac0aa80badfca426320aaa933e66c3284ac21810bcaf7b3bc43b43cbc877ce57937c3fb606bcfc1595b7a594e8f42ea3f97b0c6de66bfb10f640a17", 0x78}, {&(0x7f0000004800)="75ca81e783d37dc07be295d3380c7ff41ec7c7d25e1b70fa388a3f4a8c7b95e00b24435182f8a2714ea9c4b02a4e9ca79372c468de7be641cd56d736e73fd9290e1e32e93068f3857a68cbe5d51c1666515110adf416a03e56560990b923", 0x5e}, {&(0x7f0000004880)="92e558aedc254674f289109149cc8042edecfc6c56b0a15afe823790b8de06ebc11e8c6f2f86f56175fdbcef4abe2fc7dd32997e17fc0da9d8926a229a5ebea0575bc9c860454a71f54a5ea6e1ff101fbbe155093569357c91283a626f62170915894b08d27988280763194a4471ffdb1eecfa844f6ae07405ddc7672bbf1644c4d813a0e8d3a8fa6983f9", 0x8b}, {&(0x7f0000004940)="b3ce1db047f8cbc9da2f9f31825ff043bb97b98b48bfe8a6e1f5feed2ead1cfb497b8d3e75e4964923f2f272daeffa8ec3c558f31df22ce540ef00f79abb4ac0ea48effcc7c5e0e6313aad17e09e04157c52bb1130b569c4d60eeaf132315f1066e5ec6c212befa316df12a4c147a886ea584f54d128d97f16d16179fe140af862e3aea411f42df6ade2302701c4488c9262eebe5ca29178b10f1340a68cd3c506e10878d7204ac7ab65ebfa5547ba49fa72cecd6db34e5f7e0ee6a41ee58e11004fe4e647cb9fd0a844eb264f0a5838791d64351b668f34ed5c35a46027bc4979513696ad00bd54c9f1f61cd4998b4e8728be", 0xf3}, {&(0x7f0000004a40)="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", 0xff}, {&(0x7f0000004b40)="b63eefb20b1e57ba16655b58ad7cfcd4b25ffc7bbb4f3ff059777e297893febdc2dce456026ff870b793f808ec65187e733e243a728d4db64c39d07be980e99caf073a1a71a241dd5c2f9136bb0e9aa4d59065db0448cdecab8520841a5dfc651f027f2c02a14af795c314c7abc3f10bdf47bc17876173e9deb947322ac0b5fd1e74d3a1a22474b739136fddb8873dcba2116c50d6d75c8b62fda43c13dfd2d9c3b998ab66503a9433f482eec507f0c8d8f1", 0xb2}], 0x9, &(0x7f0000004e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r20}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r18}}}, @rights={{0x18, 0x1, 0x1, [r1, r23]}}], 0x88, 0x810}}], 0x2, 0x8000) 6m42.266208023s ago: executing program 3 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4101, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x2, 0x0}, 0x5}], 0x3, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0xffffffffffffff72, r2, 0x1, 0x70bd2d, 0x25dfdb7e}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 6m27.151910767s ago: executing program 32 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4101, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x2, 0x0}, 0x5}], 0x3, 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0xffffffffffffff72, r2, 0x1, 0x70bd2d, 0x25dfdb7e}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 25.665877233s ago: executing program 4 (id=6206): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000100)={0x1, 0x6}) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000004000000d185c72fc7d4d3e96ba3242a5ade0000000008000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x87, &(0x7f0000000540)=""/135, 0x41100, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xb, 0x0, 0x7}, 0x10, 0x205a3, 0xffffffffffffffff, 0x3, &(0x7f0000000080)=[0xffffffffffffffff], &(0x7f0000000740)=[{0x1, 0x4, 0x1, 0x8}, {0x0, 0x1, 0x6, 0x6}, {0x2, 0x4, 0xf, 0x2}], 0x10, 0xe}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000180), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000104000000000000000002180000fe03000100000000080001000a01010008000400010000000600150005000000240016002000010001000000000204"], 0x58}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x2}, [@IFA_LOCAL={0x5, 0x2, @empty}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x805, 0x2) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000600)=0x1, 0x4) connect$phonet_pipe(r4, &(0x7f0000000700), 0x10) 24.977887257s ago: executing program 4 (id=6209): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, 0x0, 0x8000002) socket(0x80000000000000a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304001200"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 24.822722542s ago: executing program 4 (id=6211): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5201", @ANYRES8=r1, @ANYRES16=r1], 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x64, r5, 0x449, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8c0) 24.461005949s ago: executing program 4 (id=6214): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[], 0x6b4}}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x1, 0x30, 0x69, 0x0, 0x8, 0x1, 0x0, @private=0xa010106, @dev={0xac, 0x14, 0x14, 0x3b}}, @dest_unreach={0x3, 0xc7c0567298e11ff4, 0x0, 0x0, 0xab, 0x6, {0x5, 0x4, 0x2, 0x3e, 0xd5, 0x68, 0x803, 0x7, 0x16, 0x6b, @local, @multicast1}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, 0x0, 0x0, 0xfc) 24.299511112s ago: executing program 4 (id=6216): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @any, 0x40}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080001", @ANYRES32], 0x1c}}, 0x4000) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)={r1, 0x1, 0x7}) (fail_nth: 4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) unshare(0x400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b30, 0x0) 23.568716599s ago: executing program 4 (id=6219): r0 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0xfffffffd, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) socket$netlink(0x10, 0x3, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x2000000000000002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r7}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRES64=r8], &(0x7f0000000140)='GPL\x00', 0x154225f4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r9, r9, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r9, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback, r8, 0x10, 0x0, 0x0, @void, @value=r10, @void, @void, r11}, 0x20) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001840)={r2, &(0x7f0000000400)=',\x00', 0x2a42, &(0x7f0000000440)={@_ha_fsid={[0x80000000, 0x200]}, {0x1, 0x5, 0x10000, 0x80000001}}, 0xfffffbb2, &(0x7f0000000480), &(0x7f00000004c0)=0x6}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r12, r3, 0x25, 0x2002, 0x0, @value=r13, @void, @void, @void, r11}, 0x20) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) 4.576380929s ago: executing program 5 (id=6287): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000400)="f6", 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40010120, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541c", 0x60) 4.446476268s ago: executing program 1 (id=6289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000020203000000000000000000020000092400028014000180080001000a010100080002007f0000010c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="280000008305f02206e5a5f77c93b6000000000000baa0a77b111a49a56b5318b5a42c4d0180a0c5855308b691ba4e3964ea130631cba266fcd70cc0", @ANYRES16=r14, @ANYBLOB="01002cbd700003dcdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0a0004007770"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r7, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24000044) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @val={0x0, 0x1, 0x0, 0x101, 0x2, 0xa83}, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x4000, 0x0, 0x2, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8864, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "5fb6e085bb465b5c9fb166c61d4936f0d2531bce480c7609", "668eaf83be4c163f2faa46d4ef956e962fe4ef02d890789f96d22add81edc9bf"}}}}}}}, 0x7c) 4.126501097s ago: executing program 5 (id=6290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@generic={0x63, 0x1, 0x0, 0x8e}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0xffffffff, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20004010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}}, 0x800) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac05, 0xfac0c, 0xfac04]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.798920712s ago: executing program 2 (id=6293): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x30}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r10, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0xd}}, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r17, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.647055172s ago: executing program 0 (id=6294): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000080)='-\x00', 0x400000, &(0x7f0000000180)={@align=0x9, {0x4, 0x2, 0xa41d, 0x80000000}}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x7}, {[0x4, 0x2, 0xde39, 0x7]}, 0x6, 0x36, &(0x7f0000000240)=""/54}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x128, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @local, 0xff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000040)="5ee2873a2f94e1263fcf49b699f59f93f9634642de4103a2ff155c0dd5f62e8bd878572757bbecb1fdcf1cb5926dfb910fd57e07f7bbe607", 0x38}], 0x2}, 0x24040849) 3.643470676s ago: executing program 5 (id=6295): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/16, 0xffffffffffffff1c}, 0x806b}], 0x1, 0x40010103, 0x0) 3.527388682s ago: executing program 0 (id=6296): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000c0000ffbffffffffffe01"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x142, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x208c1}, 0x4840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x48, 0xc}], 0x1, 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000009ac0)=0x9, 0x4) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x8, 0x8, 0xe, @remote, @remote, 0x86b00442f61b14c7, 0x40, 0x8, 0x3}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000006100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x1, 0x12300, 0x0) 3.525210782s ago: executing program 1 (id=6297): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 3.318169816s ago: executing program 2 (id=6298): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d0000080003000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0)={0x5, 0x3, 0x0, 0x8, 0x9, 0x5, 0x80d}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000003c0)=""/179, &(0x7f0000000480)=0xb3) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000340)=0x8000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x200000, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) 3.214174771s ago: executing program 1 (id=6299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x8001, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r2 = epoll_create1(0x80000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x1, 0x80, 0x8}, 0x10) write$tun(r6, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x3f, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2b, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d1"}}}}}}}, 0x51) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, &(0x7f0000000840)=""/43, 0x2b}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)) write$tun(r0, &(0x7f0000000980)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="d1800007907800091e59063bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4fe04f98900000013d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c153"], 0xe4) 3.154458748s ago: executing program 0 (id=6300): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x5}], 0x1, 0x0, 0x0) 2.962043295s ago: executing program 2 (id=6301): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 2.647362786s ago: executing program 0 (id=6302): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000012003c0002030000ff3f0000000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) recvmmsg(r1, &(0x7f000000a340)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xce}], 0x2, 0x30140, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x6, 0x9, 0xd, 0x9, 0x8001}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x9}, 0x94) sendmmsg$alg(r8, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f35", 0x77}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) 2.618027709s ago: executing program 2 (id=6303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}, {0x14, 0x1, {0x1, 0x57b, 0x9, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x800, 0x4, 0x7fffffff, 0x8a}, 0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nicvf0\x00', 0xc201}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xae5f}, &(0x7f0000000100)=0x8) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettaction={0x14, 0x32, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0x40}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000080007000000ff031400000049260086006700001001940400000186300000000200057c4be705048247000343020f6f8e172f29f2f36cc4bfd01323020f11245de69e56fa1d69d90d4e3594040000830f10ac1414bbffffffff0a010101009404000000000000000000000000000000000000000400004e2000004e2300000000000000020000"], 0x94) 2.218120846s ago: executing program 5 (id=6304): r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'team0\x00'}) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x86f, @mcast2, 0x20000006}}, {0x20, 0x2, @in6={0xa, 0x2, 0x0, @local}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40815}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x102}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100626f6e6400000000220002800a0001009b"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) 1.99073747s ago: executing program 5 (id=6305): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r2], 0x48}}, 0x2404c054) readv(r2, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 1.920439771s ago: executing program 1 (id=6306): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000004", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xf6fe}}}}}}}, 0x0) 1.698379913s ago: executing program 1 (id=6307): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32001800000100112233445500112233445500ff0000", 0xfdef) 1.543685773s ago: executing program 0 (id=6308): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x8c, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xffff7024}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 298.241519ms ago: executing program 2 (id=6309): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000c0000ffbffffffffffe01"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x142, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x208c1}, 0x4840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x48, 0xc}], 0x1, 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000009ac0)=0x9, 0x4) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x8, 0x8, 0xe, @remote, @remote, 0x86b00442f61b14c7, 0x40, 0x8, 0x3}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000006100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x1, 0x12300, 0x0) 227.260523ms ago: executing program 0 (id=6310): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="95000000000085a3bad1f6ff5db00000000079897de7a3530f39e9127c93a952088e420708000092da728c6302dae446a9c505504f2a9a018fe3d388cc0c726b8aef92a92e6b99bdffe66e675b1c2d16753ca96cb70e143c6af66468b0580fa92971c31543240fc3ea02acf73e1445e28fc3ee20e604e68508"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010629bd7000fddbdf257cbe000005002b000200000008000200", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000040041"], 0x20, 0x4048800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001500)=ANY=[@ANYBLOB="986b7c93faccfc830000000000001858460e5cdb814faf4fc1c80131535ef86a9e0f26cf7ff4f3904ae023f606c01157f274db61710402749cae4b08c10a5767ac294ba295f2eba3dd868711008f4556ad2d51db6320d79005e12bc248689d4f8206d2ae3af391a1898568dd1813917f0c", @ANYRES16=r8, @ANYBLOB="000125bd7000fddbdf2502000000080002000200000018000c8014000b8008000a0066f200000800090046ef5733500008802400078008000500290f082108000500a10b4e3708000500e2d9af7d08000500007f3d1f1c000780080005009beb7e29080005008ddd410708000600d40000000c00078008000600b00000000800088004000780080001000200000070000c803c000b8008000900da3e222b08000900992e885908000a008451000008000900df46b71908000900c744f173080009001c12e3300800090002248b4924000b8008000a005369000008000a00d3b1000008000900fe39c57b08000900015f21170c000b8008000a00e10d0000c4000880140007800800050083ca363308000600ce00000014000780080005005757d53708000500a5350a1d14000780080006001700000008000600cc00000024000780080005008dd4847e080005004335ec480800060042000000080006000d000000140007800800050049d9d34b08000600060000000c00078008000500ad2f9d7a3400078008000600b4000000080006009e00000008000600a70000000800050081409d4608000500c1712f3508000500ce7c41080c000780080006007b0000009c0108802c000780080006001600000008000600eb00000008000600fe000000080006004100000008000600db0000002400078008000500920c3573080005006a521e48080006001b000000080005009d84ed102c000780080006009f0000000800050098f2d0460800060025000000080005004d27a54808000600860000001400078008000600fa00000008000500155210290c00078008000600730000005400078008000500a0b1d41208000500bf04207a080006001700000008000600fb00000008000600650000000800060077000000080005001b89e16808000600ab00000008000500009bc420080006002d0000002c00078008000600b9000000080006007000000008000500b13b5030080006002d00000008000500efd5eb1c2400078008000500089cc41c08000600d5000000080006002c00000008000500975879453400078008000600ac00000008000600e500000008000500a7ab1b3e080005007526837408000500653b8b3208000600cbaf00002400078008000600290000000800050099673f74080005003ab71239080006000e0000002c000480050003000500000005000300070000000500030005000000050003000700000005000300070000000800020002000000"], 0x398}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000b40)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0xa2, &(0x7f0000000100)=""/162, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8ede", 0x4}], 0x2}, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x2, 0x100100, 0xcb98, 0xc, "33e4a8", 0x6}}) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c00000039000100faff0700ffdbdf250a000000ed7aca3d0f000000ae6ddff77a349773ca3a29b2733a46d385a31e1fdfc56ee3e0f7c597c6ab18eb2956594d11c74bbc4680a95abe"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000080)=0x802, 0x4) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x5f, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73353cc9f1ba1f84843e8ffff5d1406156ed123bf9062f8000f000000028000001294", 0x2e}], 0x1}, 0x0) accept(r6, &(0x7f00000003c0)=@isdn, &(0x7f0000000600)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 124.13363ms ago: executing program 5 (id=6311): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x5}], 0x1, 0x0, 0x0) 49.108649ms ago: executing program 2 (id=6312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000800)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x8c, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x9, 0x1, 0x7]}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 1 (id=6313): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000009f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="38000000240001040100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002800500010010000000", 0x38) write(r4, &(0x7f0000000100)="40000000240001040200000000000000000000000100000000000200010001000000000008000100657473001400028005000100100000000500020001000000", 0x40) write(r4, &(0x7f0000000200)="40000000240001040300000000000000000000000100000000000300020001000000000008000100657473001400028005000100100000000500020002000000", 0x40) write(r4, &(0x7f0000000300)="40000000240001040400000000000000000000000100000000000400030001000000000008000100657473001400028005000100100000000500020003000000", 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) write(r4, &(0x7f0000000400)="4000000024000104050000000000000000000000010000000000050004000100000000000800010065747300140002800500010010000000050002000400", 0x3e) write(r4, &(0x7f0000000500), 0x0) write(r4, &(0x7f0000000600)='@\x00\x00\x00$\x00', 0x6) write(r4, &(0x7f0000000700)="400000002400010408000000000000000000000001000000000008000700010000000000080001006574730014000280", 0x30) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000900)="240000002a0001030a00000000000000000000000100"/36, 0x24) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmmsg$inet(r3, &(0x7f0000001ec0), 0x0, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000091f3fa6cd2ab43f0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000060000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x46}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000016940)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x48, 0x80}], 0x1, 0x20004010) kernel console output (not intermixed with test programs): ] [ 918.531486][T24439] dump_stack_lvl+0xe8/0x150 [ 918.531518][T24439] should_fail_ex+0x410/0x560 [ 918.531546][T24439] _copy_from_user+0x2d/0xb0 [ 918.531570][T24439] ___sys_recvmsg+0x173/0x5a0 [ 918.531602][T24439] ? __pfx____sys_recvmsg+0x10/0x10 [ 918.531632][T24439] ? lock_acquire+0x115/0x350 [ 918.531668][T24439] ? __fget_files+0x3a2/0x420 [ 918.531704][T24439] do_recvmmsg+0x31a/0x7f0 [ 918.531738][T24439] ? __pfx_do_recvmmsg+0x10/0x10 [ 918.531760][T24439] ? taprio_dequeue+0x250/0x540 [ 918.531800][T24439] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 918.531828][T24439] ? __pfx_sched_clock_cpu+0x10/0x10 [ 918.531857][T24439] __x64_sys_recvmmsg+0x198/0x250 [ 918.531882][T24439] ? __irq_exit_rcu+0xcb/0x220 [ 918.531908][T24439] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 918.531946][T24439] do_syscall_64+0x166/0x520 [ 918.531969][T24439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.531989][T24439] ? clear_bhb_loop+0x70/0xc0 [ 918.532013][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.532032][T24439] RIP: 0033:0x7f9d33d9e159 [ 918.532056][T24439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.532073][T24439] RSP: 002b:00007f9d34bd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 918.532094][T24439] RAX: ffffffffffffffda RBX: 00007f9d34025fa0 RCX: 00007f9d33d9e159 [ 918.532108][T24439] RDX: 0000000000000001 RSI: 0000200000001980 RDI: 0000000000000003 [ 918.532121][T24439] RBP: 00007f9d34bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 918.532134][T24439] R10: 0000000040010040 R11: 0000000000000246 R12: 0000000000000001 [ 918.532146][T24439] R13: 00007f9d34026038 R14: 00007f9d34025fa0 R15: 00007ffc4c48df28 [ 918.532176][T24439] [ 918.602563][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'. [ 918.636457][T24442] netlink: 'syz.0.5689': attribute type 11 has an invalid length. [ 918.789669][T24448] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5693'. [ 919.053766][T24457] netlink: 'syz.1.5695': attribute type 2 has an invalid length. [ 919.129360][T24458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5695'. [ 919.200637][T24463] netlink: 'syz.0.5696': attribute type 1 has an invalid length. [ 919.300538][T24468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5696'. [ 919.462371][T24463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 919.552680][T24474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5700'. [ 919.552703][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5700'. [ 919.647520][T24477] FAULT_INJECTION: forcing a failure. [ 919.647520][T24477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.647566][T24477] CPU: 1 UID: 0 PID: 24477 Comm: syz.0.5701 Not tainted syzkaller #0 PREEMPT(full) [ 919.647582][T24477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 919.647592][T24477] Call Trace: [ 919.647599][T24477] [ 919.647605][T24477] dump_stack_lvl+0xe8/0x150 [ 919.647631][T24477] should_fail_ex+0x410/0x560 [ 919.647652][T24477] _copy_from_user+0x2d/0xb0 [ 919.647670][T24477] ___sys_sendmsg+0x1c6/0x360 [ 919.647689][T24477] ? __lock_acquire+0x747/0x2de0 [ 919.647707][T24477] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.647750][T24477] ? __fget_files+0x2a/0x420 [ 919.647769][T24477] ? __fget_files+0x3a2/0x420 [ 919.647794][T24477] __x64_sys_sendmsg+0x1b1/0x290 [ 919.647815][T24477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 919.647849][T24477] do_syscall_64+0x166/0x520 [ 919.647866][T24477] ? trace_irq_disable+0x3b/0x140 [ 919.647880][T24477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.647896][T24477] ? clear_bhb_loop+0x70/0xc0 [ 919.647913][T24477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.647928][T24477] RIP: 0033:0x7f837579e159 [ 919.647941][T24477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.647954][T24477] RSP: 002b:00007f8376650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.647971][T24477] RAX: ffffffffffffffda RBX: 00007f8375a25fa0 RCX: 00007f837579e159 [ 919.647982][T24477] RDX: 0000000000004050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 919.647991][T24477] RBP: 00007f8376650090 R08: 0000000000000000 R09: 0000000000000000 [ 919.648001][T24477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.648010][T24477] R13: 00007f8375a26038 R14: 00007f8375a25fa0 R15: 00007ffcc30a4b78 [ 919.648064][T24477] [ 920.170525][T24493] ip_tables: iptables: counters copy to user failed while replacing table [ 920.171666][T24494] netlink: 'syz.5.5707': attribute type 11 has an invalid length. [ 920.594773][T24506] netlink: 'syz.2.5711': attribute type 1 has an invalid length. [ 920.736029][T24506] 8021q: adding VLAN 0 to HW filter on device bond6 [ 921.044408][T24518] netlink: 'syz.5.5713': attribute type 10 has an invalid length. [ 921.079828][T24522] netlink: 'syz.4.5715': attribute type 2 has an invalid length. [ 921.391327][T24529] netlink: 'syz.1.5718': attribute type 2 has an invalid length. [ 921.523859][T24533] ip_tables: iptables: counters copy to user failed while replacing table [ 921.689238][T24540] netlink: 'syz.1.5724': attribute type 1 has an invalid length. [ 921.757575][T24540] 8021q: adding VLAN 0 to HW filter on device bond11 [ 922.050329][T24557] FAULT_INJECTION: forcing a failure. [ 922.050329][T24557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.050363][T24557] CPU: 0 UID: 0 PID: 24557 Comm: syz.5.5728 Not tainted syzkaller #0 PREEMPT(full) [ 922.050384][T24557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 922.050396][T24557] Call Trace: [ 922.050404][T24557] [ 922.050412][T24557] dump_stack_lvl+0xe8/0x150 [ 922.050443][T24557] should_fail_ex+0x410/0x560 [ 922.050470][T24557] _copy_from_user+0x2d/0xb0 [ 922.050495][T24557] ___sys_sendmsg+0x1c6/0x360 [ 922.050520][T24557] ? __lock_acquire+0x747/0x2de0 [ 922.050544][T24557] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.050601][T24557] ? __fget_files+0x2a/0x420 [ 922.050626][T24557] ? __fget_files+0x3a2/0x420 [ 922.050660][T24557] __x64_sys_sendmsg+0x1b1/0x290 [ 922.050688][T24557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 922.050731][T24557] do_syscall_64+0x166/0x520 [ 922.050754][T24557] ? trace_irq_disable+0x3b/0x140 [ 922.050773][T24557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.050793][T24557] ? clear_bhb_loop+0x70/0xc0 [ 922.050816][T24557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.050835][T24557] RIP: 0033:0x7f29b1b9e159 [ 922.050853][T24557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.050869][T24557] RSP: 002b:00007f29b2af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.050890][T24557] RAX: ffffffffffffffda RBX: 00007f29b1e25fa0 RCX: 00007f29b1b9e159 [ 922.050904][T24557] RDX: 0000000000000040 RSI: 0000200000000f80 RDI: 0000000000000003 [ 922.050917][T24557] RBP: 00007f29b2af1090 R08: 0000000000000000 R09: 0000000000000000 [ 922.050929][T24557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.050940][T24557] R13: 00007f29b1e26038 R14: 00007f29b1e25fa0 R15: 00007ffdd4f66c48 [ 922.050971][T24557] [ 922.524137][T24568] ip_tables: iptables: counters copy to user failed while replacing table [ 922.852914][T24580] FAULT_INJECTION: forcing a failure. [ 922.852914][T24580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.852946][T24580] CPU: 0 UID: 0 PID: 24580 Comm: syz.1.5738 Not tainted syzkaller #0 PREEMPT(full) [ 922.852968][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 922.852980][T24580] Call Trace: [ 922.852987][T24580] [ 922.852996][T24580] dump_stack_lvl+0xe8/0x150 [ 922.853032][T24580] should_fail_ex+0x410/0x560 [ 922.853059][T24580] _copy_from_user+0x2d/0xb0 [ 922.853093][T24580] ___sys_sendmsg+0x1c6/0x360 [ 922.853117][T24580] ? __lock_acquire+0x747/0x2de0 [ 922.853142][T24580] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.853199][T24580] ? __fget_files+0x2a/0x420 [ 922.853224][T24580] ? __fget_files+0x3a2/0x420 [ 922.853257][T24580] __x64_sys_sendmsg+0x1b1/0x290 [ 922.853285][T24580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 922.853330][T24580] do_syscall_64+0x166/0x520 [ 922.853352][T24580] ? trace_irq_disable+0x3b/0x140 [ 922.853371][T24580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.853391][T24580] ? clear_bhb_loop+0x70/0xc0 [ 922.853415][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.853434][T24580] RIP: 0033:0x7fe9e879e159 [ 922.853452][T24580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.853468][T24580] RSP: 002b:00007fe9e69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.853488][T24580] RAX: ffffffffffffffda RBX: 00007fe9e8a25fa0 RCX: 00007fe9e879e159 [ 922.853502][T24580] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 922.853514][T24580] RBP: 00007fe9e69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 922.853526][T24580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.853537][T24580] R13: 00007fe9e8a26038 R14: 00007fe9e8a25fa0 R15: 00007ffd7b778448 [ 922.853567][T24580] [ 923.056112][T24586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 923.366211][T24591] __nla_validate_parse: 17 callbacks suppressed [ 923.366233][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5742'. [ 923.526283][T24600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5743'. [ 923.640118][T24594] validate_nla: 3 callbacks suppressed [ 923.640140][T24594] netlink: 'syz.2.5743': attribute type 11 has an invalid length. [ 923.936335][T24608] ip_tables: iptables: counters copy to user failed while replacing table [ 924.029401][T24615] netlink: 'syz.5.5744': attribute type 10 has an invalid length. [ 924.045384][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5744'. [ 924.051264][T24615] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5744'. [ 924.205317][T24621] batman_adv: batadv0: Adding interface: syzkaller0 [ 924.205349][T24621] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.205390][T24621] batman_adv: batadv0: Interface activated: syzkaller0 [ 924.457883][T24633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5754'. [ 924.479963][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5754'. [ 925.275461][T24624] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 925.407396][T24624] batman_adv: batadv0: Removing interface: syzkaller0 [ 925.440988][T24648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5756'. [ 925.461858][T24650] batman_adv: batadv0: Adding interface: syzkaller0 [ 925.461877][T24650] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.461906][T24650] batman_adv: batadv0: Interface activated: syzkaller0 [ 926.073075][T24657] ip_tables: iptables: counters copy to user failed while replacing table [ 926.192510][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5760'. [ 926.388624][T24667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5761'. [ 926.391316][T24667] netlink: 'syz.1.5761': attribute type 11 has an invalid length. [ 926.503753][T24650] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 926.578872][T24650] batman_adv: batadv0: Removing interface: syzkaller0 [ 926.940582][T24681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5765'. [ 927.229355][T24694] netlink: 'syz.5.5766': attribute type 10 has an invalid length. [ 927.341007][T24699] ip_tables: iptables: counters copy to user failed while replacing table [ 927.663893][T24711] batman_adv: batadv0: Adding interface: syzkaller0 [ 927.663911][T24711] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.663938][T24711] batman_adv: batadv0: Interface activated: syzkaller0 [ 928.725702][T24711] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 928.810741][T24711] batman_adv: batadv0: Removing interface: syzkaller0 [ 928.843903][T24726] __nla_validate_parse: 4 callbacks suppressed [ 928.843923][T24726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5780'. [ 928.855552][T24728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5778'. [ 928.893733][T24727] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5779'. [ 928.912866][T24730] netlink: 'syz.4.5778': attribute type 11 has an invalid length. [ 928.979202][T24732] syzkaller0: entered promiscuous mode [ 928.979227][T24732] syzkaller0: entered allmulticast mode [ 929.217570][T24738] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5784'. [ 929.359567][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5784'. [ 929.409329][T24744] netlink: 'syz.0.5785': attribute type 2 has an invalid length. [ 929.470051][T24746] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 929.470354][T24746] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 929.649934][T24749] netlink: 'syz.4.5786': attribute type 1 has an invalid length. [ 929.775334][T24754] FAULT_INJECTION: forcing a failure. [ 929.775334][T24754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.775398][T24754] CPU: 1 UID: 0 PID: 24754 Comm: syz.0.5787 Not tainted syzkaller #0 PREEMPT(full) [ 929.775421][T24754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.775433][T24754] Call Trace: [ 929.775440][T24754] [ 929.775449][T24754] dump_stack_lvl+0xe8/0x150 [ 929.775482][T24754] should_fail_ex+0x410/0x560 [ 929.775508][T24754] _copy_from_user+0x2d/0xb0 [ 929.775533][T24754] ___sys_sendmsg+0x1c6/0x360 [ 929.775557][T24754] ? __lock_acquire+0x747/0x2de0 [ 929.775580][T24754] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.775635][T24754] ? __fget_files+0x2a/0x420 [ 929.775660][T24754] ? __fget_files+0x3a2/0x420 [ 929.775693][T24754] __x64_sys_sendmsg+0x1b1/0x290 [ 929.775716][T24754] ? net_tx_action+0x5bb/0xc30 [ 929.775739][T24754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.775772][T24754] ? handle_softirqs+0x720/0x860 [ 929.775805][T24754] do_syscall_64+0x166/0x520 [ 929.775828][T24754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.775846][T24754] ? clear_bhb_loop+0x70/0xc0 [ 929.775868][T24754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.775886][T24754] RIP: 0033:0x7f837579e159 [ 929.775902][T24754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.775917][T24754] RSP: 002b:00007f8376650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.775947][T24754] RAX: ffffffffffffffda RBX: 00007f8375a25fa0 RCX: 00007f837579e159 [ 929.775961][T24754] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 929.775973][T24754] RBP: 00007f8376650090 R08: 0000000000000000 R09: 0000000000000000 [ 929.775984][T24754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.775995][T24754] R13: 00007f8375a26038 R14: 00007f8375a25fa0 R15: 00007ffcc30a4b78 [ 929.776023][T24754] [ 930.016162][T24761] ip_tables: iptables: counters copy to user failed while replacing table [ 930.052912][T24762] netlink: 'syz.0.5790': attribute type 2 has an invalid length. [ 930.319365][T24768] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 930.570175][T24771] syzkaller0: entered promiscuous mode [ 930.570212][T24771] syzkaller0: entered allmulticast mode [ 930.770470][T24779] netlink: 'syz.1.5797': attribute type 2 has an invalid length. [ 930.792468][T24781] : left promiscuous mode [ 930.855522][T24784] openvswitch: netlink: Flow actions attr not present in new flow. [ 931.064629][T24793] ip_tables: iptables: counters copy to user failed while replacing table [ 931.140672][T24799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5805'. [ 931.225831][T24802] : left promiscuous mode [ 931.278526][T24805] openvswitch: netlink: Flow actions attr not present in new flow. [ 931.443803][T24810] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 931.443875][T24810] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 931.535099][T24812] netlink: 'syz.5.5811': attribute type 2 has an invalid length. [ 932.093618][T24831] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 932.093644][T24831] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 932.692425][T24840] netlink: 'syz.5.5821': attribute type 10 has an invalid length. [ 932.713732][T24840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5821'. [ 932.714458][T24840] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5821'. [ 932.762155][T24842] netlink: 'syz.4.5823': attribute type 3 has an invalid length. [ 932.762178][T24842] netlink: 'syz.4.5823': attribute type 1 has an invalid length. [ 932.762191][T24842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5823'. [ 932.852708][T24844] netlink: 'syz.0.5824': attribute type 2 has an invalid length. [ 932.943153][T24846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5825'. [ 933.595872][T24866] syzkaller0: entered promiscuous mode [ 933.595896][T24866] syzkaller0: entered allmulticast mode [ 933.724351][T24868] batman_adv: batadv0: Adding interface: syzkaller0 [ 933.724385][T24868] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.724432][T24868] batman_adv: batadv0: Interface activated: syzkaller0 [ 934.025941][T24874] netlink: 'syz.4.5836': attribute type 2 has an invalid length. [ 934.934482][T24882] netlink: 'syz.2.5837': attribute type 2 has an invalid length. [ 934.972756][T24872] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 935.008862][T24872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 935.015333][T24883] __nla_validate_parse: 3 callbacks suppressed [ 935.015386][T24883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5837'. [ 935.094987][T24882] : entered promiscuous mode [ 935.102006][T24868] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 935.182822][T24868] batman_adv: batadv0: Removing interface: syzkaller0 [ 935.309156][T24892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5839'. [ 935.315301][T24890] bond7: Removing last ns target with arp_interval on [ 935.325188][T24889] openvswitch: netlink: Flow actions attr not present in new flow. [ 935.345779][T24896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5841'. [ 935.364726][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5841'. [ 935.482157][T24897] openvswitch: netlink: Flow actions attr not present in new flow. [ 935.573891][T24903] syzkaller0: entered promiscuous mode [ 935.573914][T24903] syzkaller0: entered allmulticast mode [ 935.665130][T24906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5845'. [ 935.665602][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5845'. [ 935.740014][T24908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5846'. [ 935.967361][T24919] netlink: 'syz.2.5850': attribute type 2 has an invalid length. [ 935.973037][T24922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5851'. [ 936.238024][T24926] netlink: NAT attribute has 8 unknown bytes [ 936.238058][T24926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.351265][T24931] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 936.353977][T24927] batman_adv: batadv0: Adding interface: syzkaller0 [ 936.354028][T24927] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.356202][T24927] batman_adv: batadv0: Interface activated: syzkaller0 [ 936.455706][T24933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5855'. [ 936.456031][T24933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5855'. [ 937.358215][T24927] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 937.524569][T24927] batman_adv: batadv0: Removing interface: syzkaller0 [ 937.645472][T24944] netlink: 'syz.0.5860': attribute type 2 has an invalid length. [ 937.765264][T24952] netlink: 'syz.1.5863': attribute type 2 has an invalid length. [ 937.812022][T24947] syzkaller0: entered promiscuous mode [ 937.812045][T24947] syzkaller0: entered allmulticast mode [ 937.883036][T24955] FAULT_INJECTION: forcing a failure. [ 937.883036][T24955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.883066][T24955] CPU: 0 UID: 0 PID: 24955 Comm: syz.5.5864 Not tainted syzkaller #0 PREEMPT(full) [ 937.883084][T24955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.883095][T24955] Call Trace: [ 937.883102][T24955] [ 937.883110][T24955] dump_stack_lvl+0xe8/0x150 [ 937.883140][T24955] should_fail_ex+0x410/0x560 [ 937.883164][T24955] _copy_from_user+0x2d/0xb0 [ 937.883186][T24955] ___sys_sendmsg+0x1c6/0x360 [ 937.883208][T24955] ? __lock_acquire+0x747/0x2de0 [ 937.883237][T24955] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.883289][T24955] ? __fget_files+0x2a/0x420 [ 937.883311][T24955] ? __fget_files+0x3a2/0x420 [ 937.883341][T24955] __x64_sys_sendmsg+0x1b1/0x290 [ 937.883365][T24955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.883404][T24955] do_syscall_64+0x166/0x520 [ 937.883423][T24955] ? trace_irq_disable+0x3b/0x140 [ 937.883440][T24955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.883456][T24955] ? clear_bhb_loop+0x70/0xc0 [ 937.883475][T24955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.883492][T24955] RIP: 0033:0x7f29b1b9e159 [ 937.883517][T24955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.883531][T24955] RSP: 002b:00007f29b2af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.883549][T24955] RAX: ffffffffffffffda RBX: 00007f29b1e25fa0 RCX: 00007f29b1b9e159 [ 937.883561][T24955] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 937.883571][T24955] RBP: 00007f29b2af1090 R08: 0000000000000000 R09: 0000000000000000 [ 937.883581][T24955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.883591][T24955] R13: 00007f29b1e26038 R14: 00007f29b1e25fa0 R15: 00007ffdd4f66c48 [ 937.883619][T24955] [ 938.405119][T24970] FAULT_INJECTION: forcing a failure. [ 938.405119][T24970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.405181][T24970] CPU: 1 UID: 0 PID: 24970 Comm: syz.4.5867 Not tainted syzkaller #0 PREEMPT(full) [ 938.405204][T24970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.405216][T24970] Call Trace: [ 938.405223][T24970] [ 938.405232][T24970] dump_stack_lvl+0xe8/0x150 [ 938.405264][T24970] should_fail_ex+0x410/0x560 [ 938.405290][T24970] _copy_from_user+0x2d/0xb0 [ 938.405314][T24970] ___sys_sendmsg+0x1c6/0x360 [ 938.405337][T24970] ? __lock_acquire+0x747/0x2de0 [ 938.405361][T24970] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.405419][T24970] ? __fget_files+0x2a/0x420 [ 938.405445][T24970] ? __fget_files+0x3a2/0x420 [ 938.405487][T24970] __x64_sys_sendmsg+0x1b1/0x290 [ 938.405515][T24970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.405559][T24970] do_syscall_64+0x166/0x520 [ 938.405583][T24970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.405602][T24970] ? clear_bhb_loop+0x70/0xc0 [ 938.405626][T24970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.405645][T24970] RIP: 0033:0x7fbf1d99e159 [ 938.405662][T24970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.405677][T24970] RSP: 002b:00007fbf1e92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.405697][T24970] RAX: ffffffffffffffda RBX: 00007fbf1dc25fa0 RCX: 00007fbf1d99e159 [ 938.405710][T24970] RDX: 0000000024040849 RSI: 00002000000000c0 RDI: 0000000000000003 [ 938.405722][T24970] RBP: 00007fbf1e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 938.405733][T24970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.405745][T24970] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 938.405771][T24970] [ 938.730056][T24978] FAULT_INJECTION: forcing a failure. [ 938.730056][T24978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.730121][T24978] CPU: 1 UID: 0 PID: 24978 Comm: syz.4.5870 Not tainted syzkaller #0 PREEMPT(full) [ 938.730145][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.730156][T24978] Call Trace: [ 938.730164][T24978] [ 938.730172][T24978] dump_stack_lvl+0xe8/0x150 [ 938.730206][T24978] should_fail_ex+0x410/0x560 [ 938.730232][T24978] _copy_from_user+0x2d/0xb0 [ 938.730257][T24978] ___sys_sendmsg+0x1c6/0x360 [ 938.730281][T24978] ? __lock_acquire+0x747/0x2de0 [ 938.730305][T24978] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.730359][T24978] ? __fget_files+0x2a/0x420 [ 938.730382][T24978] ? __fget_files+0x3a2/0x420 [ 938.730426][T24978] __x64_sys_sendmsg+0x1b1/0x290 [ 938.730471][T24978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.730513][T24978] do_syscall_64+0x166/0x520 [ 938.730535][T24978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.730554][T24978] ? clear_bhb_loop+0x70/0xc0 [ 938.730586][T24978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.730604][T24978] RIP: 0033:0x7fbf1d99e159 [ 938.730622][T24978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.730636][T24978] RSP: 002b:00007fbf1e90c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.730657][T24978] RAX: ffffffffffffffda RBX: 00007fbf1dc26090 RCX: 00007fbf1d99e159 [ 938.730670][T24978] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 938.730681][T24978] RBP: 00007fbf1e90c090 R08: 0000000000000000 R09: 0000000000000000 [ 938.730691][T24978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.730701][T24978] R13: 00007fbf1dc26128 R14: 00007fbf1dc26090 R15: 00007fff9e0d9e38 [ 938.730730][T24978] [ 938.730945][T24977] : left promiscuous mode [ 938.792449][T24981] openvswitch: netlink: Flow actions attr not present in new flow. [ 938.912550][T24980] batman_adv: batadv0: Adding interface: syzkaller0 [ 938.912601][T24980] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.912646][T24980] batman_adv: batadv0: Interface activated: syzkaller0 [ 939.138948][T24987] FAULT_INJECTION: forcing a failure. [ 939.138948][T24987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.138982][T24987] CPU: 0 UID: 0 PID: 24987 Comm: syz.1.5875 Not tainted syzkaller #0 PREEMPT(full) [ 939.139003][T24987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.139015][T24987] Call Trace: [ 939.139023][T24987] [ 939.139032][T24987] dump_stack_lvl+0xe8/0x150 [ 939.139064][T24987] should_fail_ex+0x410/0x560 [ 939.139090][T24987] _copy_from_user+0x2d/0xb0 [ 939.139114][T24987] ___sys_sendmsg+0x1c6/0x360 [ 939.139141][T24987] ? __lock_acquire+0x747/0x2de0 [ 939.139165][T24987] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.139222][T24987] ? __fget_files+0x2a/0x420 [ 939.139247][T24987] ? __fget_files+0x3a2/0x420 [ 939.139287][T24987] __x64_sys_sendmsg+0x1b1/0x290 [ 939.139314][T24987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.139356][T24987] do_syscall_64+0x166/0x520 [ 939.139379][T24987] ? trace_irq_disable+0x3b/0x140 [ 939.139398][T24987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.139419][T24987] ? clear_bhb_loop+0x70/0xc0 [ 939.139441][T24987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.139460][T24987] RIP: 0033:0x7fe9e879e159 [ 939.139477][T24987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.139493][T24987] RSP: 002b:00007fe9e69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.139514][T24987] RAX: ffffffffffffffda RBX: 00007fe9e8a25fa0 RCX: 00007fe9e879e159 [ 939.139528][T24987] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 939.139540][T24987] RBP: 00007fe9e69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 939.139552][T24987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.139563][T24987] R13: 00007fe9e8a26038 R14: 00007fe9e8a25fa0 R15: 00007ffd7b778448 [ 939.139594][T24987] [ 939.409675][T24990] syzkaller0: entered promiscuous mode [ 939.409698][T24990] syzkaller0: entered allmulticast mode [ 939.700539][T24994] netlink: 'syz.4.5877': attribute type 10 has an invalid length. [ 940.148105][T16572] page_pool_release_retry() stalled pool shutdown: id 273, 1 inflight 60 sec [ 940.194856][T24980] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 940.223391][T24998] netlink: 'syz.5.5878': attribute type 2 has an invalid length. [ 940.268565][T24980] batman_adv: batadv0: Removing interface: syzkaller0 [ 940.319600][T25002] __nla_validate_parse: 8 callbacks suppressed [ 940.319621][T25002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5880'. [ 940.480087][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5880'. [ 940.741989][T25016] FAULT_INJECTION: forcing a failure. [ 940.741989][T25016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.742020][T25016] CPU: 0 UID: 0 PID: 25016 Comm: syz.0.5884 Not tainted syzkaller #0 PREEMPT(full) [ 940.742041][T25016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 940.742052][T25016] Call Trace: [ 940.742060][T25016] [ 940.742069][T25016] dump_stack_lvl+0xe8/0x150 [ 940.742099][T25016] should_fail_ex+0x410/0x560 [ 940.742126][T25016] _copy_from_user+0x2d/0xb0 [ 940.742151][T25016] ___sys_recvmsg+0x173/0x5a0 [ 940.742185][T25016] ? __pfx____sys_recvmsg+0x10/0x10 [ 940.742216][T25016] ? lock_acquire+0x115/0x350 [ 940.742248][T25016] ? __fget_files+0x3a2/0x420 [ 940.742350][T25016] __x64_sys_recvmsg+0x1ae/0x290 [ 940.742385][T25016] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 940.742429][T25016] do_syscall_64+0x166/0x520 [ 940.742452][T25016] ? trace_irq_disable+0x3b/0x140 [ 940.742471][T25016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.742491][T25016] ? clear_bhb_loop+0x70/0xc0 [ 940.742513][T25016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.742531][T25016] RIP: 0033:0x7f837579e159 [ 940.742550][T25016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.742565][T25016] RSP: 002b:00007f837662f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 940.742585][T25016] RAX: ffffffffffffffda RBX: 00007f8375a26090 RCX: 00007f837579e159 [ 940.742599][T25016] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 940.742611][T25016] RBP: 00007f837662f090 R08: 0000000000000000 R09: 0000000000000000 [ 940.742623][T25016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.742634][T25016] R13: 00007f8375a26128 R14: 00007f8375a26090 R15: 00007ffcc30a4b78 [ 940.742665][T25016] [ 940.914056][T25021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5881'. [ 941.002155][T25015] vlan5: entered promiscuous mode [ 941.006074][T25010] netlink: 'syz.5.5881': attribute type 11 has an invalid length. [ 941.239697][T25027] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5886'. [ 941.488151][T25034] syzkaller0: entered promiscuous mode [ 941.488174][T25034] syzkaller0: entered allmulticast mode [ 941.563335][T25036] netlink: 'syz.2.5891': attribute type 2 has an invalid length. [ 941.802742][T25044] : left promiscuous mode [ 941.845736][T25042] openvswitch: netlink: Flow actions attr not present in new flow. [ 942.147333][T14249] page_pool_release_retry() stalled pool shutdown: id 275, 1 inflight 60 sec [ 942.275855][T25057] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5896'. [ 942.429877][T25059] pimreg: entered allmulticast mode [ 942.458865][T25065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5898'. [ 942.479929][T25068] FAULT_INJECTION: forcing a failure. [ 942.479929][T25068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.479961][T25068] CPU: 0 UID: 0 PID: 25068 Comm: syz.5.5900 Not tainted syzkaller #0 PREEMPT(full) [ 942.479982][T25068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.479994][T25068] Call Trace: [ 942.480002][T25068] [ 942.480011][T25068] dump_stack_lvl+0xe8/0x150 [ 942.480044][T25068] should_fail_ex+0x410/0x560 [ 942.480071][T25068] _copy_from_user+0x2d/0xb0 [ 942.480096][T25068] ___sys_sendmsg+0x1c6/0x360 [ 942.480122][T25068] ? __lock_acquire+0x747/0x2de0 [ 942.480147][T25068] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.480204][T25068] ? __fget_files+0x2a/0x420 [ 942.480230][T25068] ? __fget_files+0x3a2/0x420 [ 942.480267][T25068] __x64_sys_sendmsg+0x1b1/0x290 [ 942.480295][T25068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.480340][T25068] do_syscall_64+0x166/0x520 [ 942.480363][T25068] ? trace_irq_disable+0x3b/0x140 [ 942.480382][T25068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.480401][T25068] ? clear_bhb_loop+0x70/0xc0 [ 942.480424][T25068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.480443][T25068] RIP: 0033:0x7f29b1b9e159 [ 942.480461][T25068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.480476][T25068] RSP: 002b:00007f29b2af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.480497][T25068] RAX: ffffffffffffffda RBX: 00007f29b1e25fa0 RCX: 00007f29b1b9e159 [ 942.480510][T25068] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 942.480522][T25068] RBP: 00007f29b2af1090 R08: 0000000000000000 R09: 0000000000000000 [ 942.480534][T25068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.480545][T25068] R13: 00007f29b1e26038 R14: 00007f29b1e25fa0 R15: 00007ffdd4f66c48 [ 942.480569][T25068] [ 942.689438][T25070] FAULT_INJECTION: forcing a failure. [ 942.689438][T25070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.689468][T25070] CPU: 0 UID: 0 PID: 25070 Comm: syz.4.5902 Not tainted syzkaller #0 PREEMPT(full) [ 942.689489][T25070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.689500][T25070] Call Trace: [ 942.689508][T25070] [ 942.689516][T25070] dump_stack_lvl+0xe8/0x150 [ 942.689549][T25070] should_fail_ex+0x410/0x560 [ 942.689583][T25070] _copy_from_user+0x2d/0xb0 [ 942.689608][T25070] ___sys_sendmsg+0x1c6/0x360 [ 942.689634][T25070] ? __lock_acquire+0x747/0x2de0 [ 942.689657][T25070] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.689713][T25070] ? __fget_files+0x2a/0x420 [ 942.689738][T25070] ? __fget_files+0x3a2/0x420 [ 942.689773][T25070] __x64_sys_sendmsg+0x1b1/0x290 [ 942.689800][T25070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.689845][T25070] do_syscall_64+0x166/0x520 [ 942.689869][T25070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.689888][T25070] ? clear_bhb_loop+0x70/0xc0 [ 942.689909][T25070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.689928][T25070] RIP: 0033:0x7fbf1d99e159 [ 942.689946][T25070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.689961][T25070] RSP: 002b:00007fbf1e92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.689982][T25070] RAX: ffffffffffffffda RBX: 00007fbf1dc25fa0 RCX: 00007fbf1d99e159 [ 942.689996][T25070] RDX: 0000000000000c00 RSI: 0000200000000140 RDI: 0000000000000003 [ 942.690008][T25070] RBP: 00007fbf1e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 942.690021][T25070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.690032][T25070] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 942.690063][T25070] [ 942.892647][T25072] netlink: 'syz.2.5903': attribute type 2 has an invalid length. [ 942.949574][T25077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5907'. [ 943.090191][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5909'. [ 943.090339][T25084] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5909'. [ 943.148923][T25082] ip_tables: iptables: counters copy to user failed while replacing table [ 943.207705][T25086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5911'. [ 943.361487][T25092] FAULT_INJECTION: forcing a failure. [ 943.361487][T25092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.361521][T25092] CPU: 0 UID: 0 PID: 25092 Comm: syz.5.5910 Not tainted syzkaller #0 PREEMPT(full) [ 943.361542][T25092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.361554][T25092] Call Trace: [ 943.361562][T25092] [ 943.361570][T25092] dump_stack_lvl+0xe8/0x150 [ 943.361604][T25092] should_fail_ex+0x410/0x560 [ 943.361631][T25092] _copy_from_user+0x2d/0xb0 [ 943.361657][T25092] ___sys_sendmsg+0x1c6/0x360 [ 943.361683][T25092] ? __lock_acquire+0x747/0x2de0 [ 943.361707][T25092] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.361762][T25092] ? __fget_files+0x2a/0x420 [ 943.361787][T25092] ? __fget_files+0x3a2/0x420 [ 943.361821][T25092] __x64_sys_sendmsg+0x1b1/0x290 [ 943.361849][T25092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.361893][T25092] do_syscall_64+0x166/0x520 [ 943.361916][T25092] ? trace_irq_disable+0x3b/0x140 [ 943.361935][T25092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.361962][T25092] ? clear_bhb_loop+0x70/0xc0 [ 943.361986][T25092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.362005][T25092] RIP: 0033:0x7f29b1b9e159 [ 943.362023][T25092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.362039][T25092] RSP: 002b:00007f29b2af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.362061][T25092] RAX: ffffffffffffffda RBX: 00007f29b1e25fa0 RCX: 00007f29b1b9e159 [ 943.362075][T25092] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 943.362086][T25092] RBP: 00007f29b2af1090 R08: 0000000000000000 R09: 0000000000000000 [ 943.362098][T25092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.362109][T25092] R13: 00007f29b1e26038 R14: 00007f29b1e25fa0 R15: 00007ffdd4f66c48 [ 943.362139][T25092] [ 943.365092][T25091] netlink: 'syz.4.5914': attribute type 116 has an invalid length. [ 943.821104][T25103] netlink: 'syz.2.5915': attribute type 11 has an invalid length. [ 943.998948][T25112] netlink: 'syz.4.5919': attribute type 2 has an invalid length. [ 944.359934][T25120] FAULT_INJECTION: forcing a failure. [ 944.359934][T25120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.359967][T25120] CPU: 0 UID: 0 PID: 25120 Comm: syz.4.5924 Not tainted syzkaller #0 PREEMPT(full) [ 944.359989][T25120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.360000][T25120] Call Trace: [ 944.360007][T25120] [ 944.360016][T25120] dump_stack_lvl+0xe8/0x150 [ 944.360046][T25120] should_fail_ex+0x410/0x560 [ 944.360072][T25120] _copy_from_user+0x2d/0xb0 [ 944.360096][T25120] __sys_sendto+0x2a9/0x5a0 [ 944.360119][T25120] ? ksys_write+0x1e6/0x270 [ 944.360149][T25120] ? __pfx___sys_sendto+0x10/0x10 [ 944.360168][T25120] ? __mutex_unlock_slowpath+0x731/0x900 [ 944.360218][T25120] ? __pfx_ksys_write+0x10/0x10 [ 944.360249][T25120] __x64_sys_sendto+0xde/0x100 [ 944.360276][T25120] do_syscall_64+0x166/0x520 [ 944.360297][T25120] ? trace_irq_disable+0x3b/0x140 [ 944.360316][T25120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.360336][T25120] ? clear_bhb_loop+0x70/0xc0 [ 944.360358][T25120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.360377][T25120] RIP: 0033:0x7fbf1d99e159 [ 944.360395][T25120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.360420][T25120] RSP: 002b:00007fbf1e92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 944.360441][T25120] RAX: ffffffffffffffda RBX: 00007fbf1dc25fa0 RCX: 00007fbf1d99e159 [ 944.360455][T25120] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 944.360467][T25120] RBP: 00007fbf1e92d090 R08: 0000200000000140 R09: 0000000000000014 [ 944.360480][T25120] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 944.360491][T25120] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 944.360520][T25120] [ 944.824382][T25130] openvswitch: netlink: Flow actions attr not present in new flow. [ 945.264560][T25144] netlink: 'syz.4.5934': attribute type 2 has an invalid length. [ 945.363105][T15552] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.381293][T15552] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.382162][T15552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.386169][T15552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.408972][T15552] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.457810][T17459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.460327][T17459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.465182][T17459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.484234][T17459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.485679][T17459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.630505][T25149] ip_tables: iptables: counters copy to user failed while replacing table [ 945.847593][T25161] FAULT_INJECTION: forcing a failure. [ 945.847593][T25161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.847622][T25161] CPU: 0 UID: 0 PID: 25161 Comm: syz.5.5938 Not tainted syzkaller #0 PREEMPT(full) [ 945.847641][T25161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.847651][T25161] Call Trace: [ 945.847659][T25161] [ 945.847666][T25161] dump_stack_lvl+0xe8/0x150 [ 945.847696][T25161] should_fail_ex+0x410/0x560 [ 945.847720][T25161] _copy_from_user+0x2d/0xb0 [ 945.847742][T25161] ___sys_recvmsg+0x173/0x5a0 [ 945.847771][T25161] ? __pfx____sys_recvmsg+0x10/0x10 [ 945.847799][T25161] ? lock_acquire+0x115/0x350 [ 945.847831][T25161] ? __fget_files+0x3a2/0x420 [ 945.847864][T25161] do_recvmmsg+0x31a/0x7f0 [ 945.847893][T25161] ? __pfx_do_recvmmsg+0x10/0x10 [ 945.847926][T25161] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 945.847949][T25161] ? __fget_files+0x3a2/0x420 [ 945.847980][T25161] __x64_sys_recvmmsg+0x198/0x250 [ 945.848006][T25161] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 945.848039][T25161] do_syscall_64+0x166/0x520 [ 945.848058][T25161] ? trace_irq_disable+0x3b/0x140 [ 945.848074][T25161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.848091][T25161] ? clear_bhb_loop+0x70/0xc0 [ 945.848112][T25161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.848129][T25161] RIP: 0033:0x7f29b1b9e159 [ 945.848145][T25161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.848159][T25161] RSP: 002b:00007f29b2af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 945.848177][T25161] RAX: ffffffffffffffda RBX: 00007f29b1e25fa0 RCX: 00007f29b1b9e159 [ 945.848200][T25161] RDX: 0000000000000001 RSI: 0000200000001980 RDI: 0000000000000003 [ 945.848211][T25161] RBP: 00007f29b2af1090 R08: 0000000000000000 R09: 0000000000000000 [ 945.848221][T25161] R10: 0000000040010040 R11: 0000000000000246 R12: 0000000000000001 [ 945.848232][T25161] R13: 00007f29b1e26038 R14: 00007f29b1e25fa0 R15: 00007ffdd4f66c48 [ 945.848259][T25161] [ 946.313717][T25177] __nla_validate_parse: 8 callbacks suppressed [ 946.313737][T25177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5945'. [ 946.341213][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5945'. [ 946.392716][T25179] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5941'. [ 946.454920][T25181] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5943'. [ 946.704833][T25193] netlink: 'syz.5.5948': attribute type 2 has an invalid length. [ 946.805461][T25191] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 946.805847][T25191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.821987][T25191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 946.878129][T25195] ip_tables: iptables: counters copy to user failed while replacing table [ 947.347226][T25213] syzkaller0: entered promiscuous mode [ 947.347249][T25213] syzkaller0: entered allmulticast mode [ 947.355729][T25211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5956'. [ 947.381361][T25211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5956'. [ 947.474619][T25217] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5957'. [ 947.590032][T17459] Bluetooth: hci4: command tx timeout [ 947.734081][T25223] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5960'. [ 947.799889][T25230] netlink: 'syz.4.5959': attribute type 2 has an invalid length. [ 948.049822][T25242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5964'. [ 948.590406][T25146] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.590704][T25146] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.591002][T25146] bridge_slave_0: entered allmulticast mode [ 948.601653][T25146] bridge_slave_0: entered promiscuous mode [ 948.611350][T25146] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.611617][T25146] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.611846][T25146] bridge_slave_1: entered allmulticast mode [ 948.615832][T25146] bridge_slave_1: entered promiscuous mode [ 948.667616][T25146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.670609][T25146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.693170][T25259] netlink: 'syz.1.5970': attribute type 3 has an invalid length. [ 948.693205][T25259] netlink: 'syz.1.5970': attribute type 1 has an invalid length. [ 948.693234][T25259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5970'. [ 948.787631][T25270] netlink: 'syz.0.5974': attribute type 2 has an invalid length. [ 948.874152][T25146] team0: Port device team_slave_0 added [ 948.886093][T25146] team0: Port device team_slave_1 added [ 948.935611][T25146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.935629][T25146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.935652][T25146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.982235][T25146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.982252][T25146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.982274][T25146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.118386][T13507] wlan1: Trigger new scan to find an IBSS to join [ 949.135071][T25146] hsr_slave_0: entered promiscuous mode [ 949.136027][T25146] hsr_slave_1: entered promiscuous mode [ 949.149875][T25146] debugfs: 'hsr0' already exists in 'hsr' [ 949.149898][T25146] Cannot create hsr debugfs directory [ 949.220953][T25280] FAULT_INJECTION: forcing a failure. [ 949.220953][T25280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.220986][T25280] CPU: 1 UID: 0 PID: 25280 Comm: syz.4.5979 Not tainted syzkaller #0 PREEMPT(full) [ 949.221007][T25280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.221020][T25280] Call Trace: [ 949.221028][T25280] [ 949.221036][T25280] dump_stack_lvl+0xe8/0x150 [ 949.221067][T25280] should_fail_ex+0x410/0x560 [ 949.221095][T25280] _copy_from_user+0x2d/0xb0 [ 949.221120][T25280] ___sys_sendmsg+0x1c6/0x360 [ 949.221145][T25280] ? __lock_acquire+0x747/0x2de0 [ 949.221169][T25280] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.221227][T25280] ? __fget_files+0x2a/0x420 [ 949.221252][T25280] ? __fget_files+0x3a2/0x420 [ 949.221286][T25280] __x64_sys_sendmsg+0x1b1/0x290 [ 949.221314][T25280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.221359][T25280] do_syscall_64+0x166/0x520 [ 949.221381][T25280] ? trace_irq_disable+0x3b/0x140 [ 949.221400][T25280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.221419][T25280] ? clear_bhb_loop+0x70/0xc0 [ 949.221442][T25280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.221461][T25280] RIP: 0033:0x7fbf1d99e159 [ 949.221478][T25280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.221502][T25280] RSP: 002b:00007fbf1e92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.221522][T25280] RAX: ffffffffffffffda RBX: 00007fbf1dc25fa0 RCX: 00007fbf1d99e159 [ 949.221536][T25280] RDX: 0000000000000004 RSI: 0000200000000580 RDI: 0000000000000003 [ 949.221548][T25280] RBP: 00007fbf1e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 949.221560][T25280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.221571][T25280] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 949.221602][T25280] [ 949.545943][T25287] FAULT_INJECTION: forcing a failure. [ 949.545943][T25287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.545975][T25287] CPU: 0 UID: 0 PID: 25287 Comm: syz.4.5982 Not tainted syzkaller #0 PREEMPT(full) [ 949.545996][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.546007][T25287] Call Trace: [ 949.546015][T25287] [ 949.546024][T25287] dump_stack_lvl+0xe8/0x150 [ 949.546055][T25287] should_fail_ex+0x410/0x560 [ 949.546081][T25287] _copy_from_user+0x2d/0xb0 [ 949.546106][T25287] ___sys_sendmsg+0x1c6/0x360 [ 949.546130][T25287] ? __lock_acquire+0x747/0x2de0 [ 949.546154][T25287] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.546210][T25287] ? __fget_files+0x2a/0x420 [ 949.546234][T25287] ? __fget_files+0x3a2/0x420 [ 949.546268][T25287] __x64_sys_sendmsg+0x1b1/0x290 [ 949.546295][T25287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.546339][T25287] do_syscall_64+0x166/0x520 [ 949.546363][T25287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.546392][T25287] ? clear_bhb_loop+0x70/0xc0 [ 949.546416][T25287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.546435][T25287] RIP: 0033:0x7fbf1d99e159 [ 949.546453][T25287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.546468][T25287] RSP: 002b:00007fbf1e92d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.546490][T25287] RAX: ffffffffffffffda RBX: 00007fbf1dc25fa0 RCX: 00007fbf1d99e159 [ 949.546502][T25287] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 949.546513][T25287] RBP: 00007fbf1e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 949.546525][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.546536][T25287] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 949.546564][T25287] [ 949.648282][T25288] netlink: 'syz.5.5980': attribute type 10 has an invalid length. [ 949.670110][T17459] Bluetooth: hci4: command tx timeout [ 949.791815][T25291] FAULT_INJECTION: forcing a failure. [ 949.791815][T25291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.791845][T25291] CPU: 0 UID: 0 PID: 25291 Comm: syz.4.5983 Not tainted syzkaller #0 PREEMPT(full) [ 949.791867][T25291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.791878][T25291] Call Trace: [ 949.791886][T25291] [ 949.791894][T25291] dump_stack_lvl+0xe8/0x150 [ 949.791925][T25291] should_fail_ex+0x410/0x560 [ 949.791952][T25291] _copy_to_user+0x31/0xb0 [ 949.791978][T25291] simple_read_from_buffer+0xe1/0x170 [ 949.792008][T25291] proc_fail_nth_read+0x1bb/0x230 [ 949.792035][T25291] ? common_file_perm+0x20e/0x2b0 [ 949.792059][T25291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 949.792089][T25291] ? rw_verify_area+0x24a/0x4c0 [ 949.792115][T25291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 949.792140][T25291] vfs_read+0x213/0xa80 [ 949.792174][T25291] ? __pfx_vfs_read+0x10/0x10 [ 949.792202][T25291] ? kmem_cache_free+0x182/0x650 [ 949.792236][T25291] ksys_read+0x150/0x270 [ 949.792270][T25291] ? __pfx_ksys_read+0x10/0x10 [ 949.792307][T25291] do_syscall_64+0x166/0x520 [ 949.792328][T25291] ? trace_irq_disable+0x3b/0x140 [ 949.792353][T25291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.792372][T25291] ? clear_bhb_loop+0x70/0xc0 [ 949.792394][T25291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.792413][T25291] RIP: 0033:0x7fbf1d95e98e [ 949.792430][T25291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 949.792445][T25291] RSP: 002b:00007fbf1e92cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 949.792465][T25291] RAX: ffffffffffffffda RBX: 00007fbf1e92d6c0 RCX: 00007fbf1d95e98e [ 949.792478][T25291] RDX: 000000000000000f RSI: 00007fbf1e92d0a0 RDI: 0000000000000004 [ 949.792489][T25291] RBP: 00007fbf1e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 949.792500][T25291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.792510][T25291] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 949.792539][T25291] [ 950.037719][T25294] netlink: 'syz.0.5985': attribute type 2 has an invalid length. [ 950.444382][T25309] netlink: 'syz.0.5988': attribute type 11 has an invalid length. [ 950.635126][T25146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.983889][T25146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.062151][T25331] netlink: 'syz.4.5996': attribute type 83 has an invalid length. [ 951.225804][T25332] IPv6: Can't replace route, no match found [ 951.248315][T25146] team0: Port device netdevsim1 removed [ 951.250161][T25146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.404518][T25338] netlink: 'syz.1.5997': attribute type 2 has an invalid length. [ 951.414124][T25146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.433006][T25342] __nla_validate_parse: 8 callbacks suppressed [ 951.433025][T25342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5998'. [ 951.492662][T25344] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6000'. [ 951.567476][T25346] netlink: 'syz.5.5999': attribute type 10 has an invalid length. [ 951.573167][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5999'. [ 951.575346][T25346] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5999'. [ 951.692197][T25351] netlink: 'syz.1.6002': attribute type 21 has an invalid length. [ 951.758022][T17459] Bluetooth: hci4: command tx timeout [ 952.063952][T25146] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 952.070516][T25146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.075694][T25146] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 952.078324][ T60] wlan1: Trigger new scan to find an IBSS to join [ 952.114557][T25146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.128902][T25146] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 952.149058][T25146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.150420][T25146] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 952.189961][T25146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.330142][T25146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.370106][T25146] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.381707][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.383848][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.439724][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.439981][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.451934][T25375] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6007'. [ 952.567347][T25377] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6008'. [ 952.669345][T25385] netlink: 'syz.4.6010': attribute type 2 has an invalid length. [ 952.918799][T25390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6011'. [ 953.161725][T25399] FAULT_INJECTION: forcing a failure. [ 953.161725][T25399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.161758][T25399] CPU: 0 UID: 0 PID: 25399 Comm: syz.5.6014 Not tainted syzkaller #0 PREEMPT(full) [ 953.161779][T25399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.161790][T25399] Call Trace: [ 953.161798][T25399] [ 953.161807][T25399] dump_stack_lvl+0xe8/0x150 [ 953.161839][T25399] should_fail_ex+0x410/0x560 [ 953.161866][T25399] _copy_from_user+0x2d/0xb0 [ 953.161891][T25399] ___sys_sendmsg+0x1c6/0x360 [ 953.161915][T25399] ? __lock_acquire+0x747/0x2de0 [ 953.161940][T25399] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.161996][T25399] ? __fget_files+0x2a/0x420 [ 953.162020][T25399] ? __fget_files+0x3a2/0x420 [ 953.162055][T25399] __x64_sys_sendmsg+0x1b1/0x290 [ 953.162082][T25399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.162126][T25399] do_syscall_64+0x166/0x520 [ 953.162150][T25399] ? trace_irq_disable+0x3b/0x140 [ 953.162168][T25399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.162187][T25399] ? clear_bhb_loop+0x70/0xc0 [ 953.162210][T25399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.162228][T25399] RIP: 0033:0x7f29b1b9e159 [ 953.162246][T25399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.162262][T25399] RSP: 002b:00007f29b2af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.162287][T25399] RAX: ffffffffffffffda RBX: 00007f29b1e25fa0 RCX: 00007f29b1b9e159 [ 953.162301][T25399] RDX: 0000000000000097 RSI: 0000200000000400 RDI: 0000000000000005 [ 953.162313][T25399] RBP: 00007f29b2af1090 R08: 0000000000000000 R09: 0000000000000000 [ 953.162325][T25399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.162337][T25399] R13: 00007f29b1e26038 R14: 00007f29b1e25fa0 R15: 00007ffdd4f66c48 [ 953.162367][T25399] [ 953.445091][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6015'. [ 953.445856][T25404] bond0: Unable to set up delay as MII monitoring is disabled [ 953.807765][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.807819][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.832619][T17459] Bluetooth: hci4: command tx timeout [ 953.893571][T25419] netlink: 'syz.0.6017': attribute type 10 has an invalid length. [ 953.896001][T25146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.918068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.918089][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.959381][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6017'. [ 953.959933][T25419] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6017'. [ 954.032067][T25418] openvswitch: netlink: Flow actions attr not present in new flow. [ 954.156211][T25427] netlink: 'syz.4.6021': attribute type 2 has an invalid length. [ 954.266196][T25146] veth0_vlan: entered promiscuous mode [ 954.344866][T25146] veth1_vlan: entered promiscuous mode [ 954.456355][T25146] veth0_macvtap: entered promiscuous mode [ 954.837586][T25146] veth1_macvtap: entered promiscuous mode [ 954.919036][T25146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.940631][T25146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.988135][T13517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.034234][ T12] wlan1: Trigger new scan to find an IBSS to join [ 955.089770][T13517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.090445][T13517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.220244][T13517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.220264][T13517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.239966][ T1118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.291472][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.291498][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.388344][T25456] FAULT_INJECTION: forcing a failure. [ 955.388344][T25456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.388375][T25456] CPU: 0 UID: 0 PID: 25456 Comm: syz.2.5931 Not tainted syzkaller #0 PREEMPT(full) [ 955.388397][T25456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.388409][T25456] Call Trace: [ 955.388417][T25456] [ 955.388425][T25456] dump_stack_lvl+0xe8/0x150 [ 955.388459][T25456] should_fail_ex+0x410/0x560 [ 955.388485][T25456] _copy_to_user+0x31/0xb0 [ 955.388511][T25456] simple_read_from_buffer+0xe1/0x170 [ 955.388542][T25456] proc_fail_nth_read+0x1bb/0x230 [ 955.388569][T25456] ? common_file_perm+0x20e/0x2b0 [ 955.388594][T25456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 955.388625][T25456] ? rw_verify_area+0x24a/0x4c0 [ 955.388651][T25456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 955.388678][T25456] vfs_read+0x213/0xa80 [ 955.388709][T25456] ? __pfx___mutex_lock+0x10/0x10 [ 955.388733][T25456] ? __pfx_vfs_read+0x10/0x10 [ 955.388761][T25456] ? __fget_files+0x2a/0x420 [ 955.388790][T25456] ? __fget_files+0x3a2/0x420 [ 955.388813][T25456] ? __fget_files+0x2a/0x420 [ 955.388846][T25456] ksys_read+0x150/0x270 [ 955.388875][T25456] ? __pfx_ksys_read+0x10/0x10 [ 955.388913][T25456] do_syscall_64+0x166/0x520 [ 955.388935][T25456] ? trace_irq_disable+0x3b/0x140 [ 955.388955][T25456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.388974][T25456] ? clear_bhb_loop+0x70/0xc0 [ 955.388998][T25456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.389017][T25456] RIP: 0033:0x7f0ac335e98e [ 955.389035][T25456] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 955.389051][T25456] RSP: 002b:00007f0ac424ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 955.389071][T25456] RAX: ffffffffffffffda RBX: 00007f0ac42506c0 RCX: 00007f0ac335e98e [ 955.389085][T25456] RDX: 000000000000000f RSI: 00007f0ac42500a0 RDI: 0000000000000005 [ 955.389097][T25456] RBP: 00007f0ac4250090 R08: 0000000000000000 R09: 0000000000000000 [ 955.389109][T25456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.389120][T25456] R13: 00007f0ac3626038 R14: 00007f0ac3625fa0 R15: 00007fff17124168 [ 955.389151][T25456] [ 955.673867][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.870445][T25465] netlink: 'syz.2.6032': attribute type 2 has an invalid length. [ 955.970290][T15552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 955.988319][T15552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 955.994294][T15552] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 955.996391][T15552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.022745][T15552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.412523][T25482] IPv6: Can't replace route, no match found [ 956.655620][T25486] __nla_validate_parse: 5 callbacks suppressed [ 956.655672][T25486] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6037'. [ 956.945992][T25494] ip_tables: iptables: counters copy to user failed while replacing table [ 956.989986][T25502] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 957.288618][T13507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.288641][T13507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.470390][T25515] openvswitch: netlink: Flow actions attr not present in new flow. [ 957.819027][T25525] netlink: 'syz.2.6045': attribute type 1 has an invalid length. [ 957.819076][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6045'. [ 957.826715][ T2196] page_pool_release_retry() stalled pool shutdown: id 288, 1 inflight 60 sec [ 957.851453][T25525] netlink: 'syz.2.6045': attribute type 7 has an invalid length. [ 957.854828][T25525] netlink: 'syz.2.6045': attribute type 1 has an invalid length. [ 957.854861][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6045'. [ 958.073759][T15552] Bluetooth: hci2: command tx timeout [ 958.188191][T25537] IPv6: Can't replace route, no match found [ 958.442602][T25542] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6050'. [ 958.487919][T25545] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6049'. [ 958.933787][T25468] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.956514][T25468] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.956691][T25468] bridge_slave_0: entered allmulticast mode [ 958.958816][T25468] bridge_slave_0: entered promiscuous mode [ 958.991131][T25468] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.991395][T25468] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.992233][T25468] bridge_slave_1: entered allmulticast mode [ 959.013798][T25468] bridge_slave_1: entered promiscuous mode [ 959.048965][T10934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.049020][T10934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.159827][T10934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.159881][T10934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.171721][T25563] openvswitch: netlink: Flow actions attr not present in new flow. [ 959.174508][T25468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.235882][T25468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.332626][T25568] openvswitch: netlink: Flow actions attr not present in new flow. [ 959.388356][T25468] team0: Port device team_slave_0 added [ 959.391148][T25468] team0: Port device team_slave_1 added [ 959.530463][T25468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.530480][T25468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.530504][T25468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.535557][T25468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.535573][T25468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.535596][T25468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.749548][T25468] hsr_slave_0: entered promiscuous mode [ 959.750656][T25468] hsr_slave_1: entered promiscuous mode [ 959.751841][T25468] debugfs: 'hsr0' already exists in 'hsr' [ 959.751860][T25468] Cannot create hsr debugfs directory [ 959.752774][ T31] audit: type=1804 audit(1789806305.384:12): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6058" name="/newroot/527/cgroup.controllers" dev="tmpfs" ino=2718 res=1 errno=0 [ 959.764872][ T31] audit: type=1800 audit(1789806305.384:13): pid=25581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6058" name="cgroup.controllers" dev="tmpfs" ino=2718 res=0 errno=0 [ 959.787609][T25581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6058'. [ 960.015679][T25590] Cannot find del_set index 0 as target [ 960.132455][T25468] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.148234][T15552] Bluetooth: hci2: command tx timeout [ 960.306216][T25468] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.434536][T25468] team0: Port device netdevsim1 removed [ 960.451010][T25468] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.545664][T25598] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6064'. [ 960.569536][T25468] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 960.619865][T25468] batman_adv: batadv0: Removing interface: netdevsim0 [ 960.645972][T25468] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.020727][T25616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6069'. [ 961.117534][T25612] openvswitch: netlink: Flow actions attr not present in new flow. [ 961.501365][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6071'. [ 961.534014][T25629] netlink: 'syz.2.6072': attribute type 10 has an invalid length. [ 961.545012][T25625] netlink: 'syz.0.6071': attribute type 11 has an invalid length. [ 961.601909][T25629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 961.619486][T25629] team0: Port device netdevsim1 added [ 961.664629][T25468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 961.678789][T25468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 961.679668][T25468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 961.701546][T25629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'. [ 961.717459][T25468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 961.719963][T25468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 961.729925][T25629] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6072'. [ 961.763453][T25468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 961.765953][T25468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 961.791262][T25468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 962.005849][T25468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.083145][T25651] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6077'. [ 962.098811][T25468] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.131281][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.131468][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.188924][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.189118][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.226934][T15552] Bluetooth: hci2: command tx timeout [ 962.359188][T25657] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6079'. [ 962.419809][T25655] openvswitch: netlink: Flow actions attr not present in new flow. [ 962.463299][T25668] raw_sendmsg: syz.0.6080 forgot to set AF_INET. Fix it! [ 962.889457][T25659] netlink: 'syz.2.6081': attribute type 2 has an invalid length. [ 962.930870][T25672] ip_tables: iptables: counters copy to user failed while replacing table [ 963.395742][T25684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6085'. [ 963.395779][T25684] netlink: 'syz.4.6085': attribute type 2 has an invalid length. [ 963.395796][T25684] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6085'. [ 963.485815][T25685] FAULT_INJECTION: forcing a failure. [ 963.485815][T25685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.485915][T25685] CPU: 1 UID: 0 PID: 25685 Comm: syz.1.6087 Not tainted syzkaller #0 PREEMPT(full) [ 963.485938][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.485950][T25685] Call Trace: [ 963.485958][T25685] [ 963.485967][T25685] dump_stack_lvl+0xe8/0x150 [ 963.485999][T25685] should_fail_ex+0x410/0x560 [ 963.486026][T25685] _copy_from_user+0x2d/0xb0 [ 963.486050][T25685] generic_map_update_batch+0x6ba/0xae0 [ 963.486078][T25685] ? kstrtouint+0x6e/0xe0 [ 963.486114][T25685] ? __pfx_generic_map_update_batch+0x10/0x10 [ 963.486150][T25685] ? __pfx_generic_map_update_batch+0x10/0x10 [ 963.486176][T25685] bpf_map_do_batch+0x391/0x630 [ 963.486204][T25685] __sys_bpf+0xbe5/0xd90 [ 963.486231][T25685] ? vfs_write+0x8f0/0xba0 [ 963.486257][T25685] ? __pfx___sys_bpf+0x10/0x10 [ 963.486307][T25685] ? ksys_write+0x1fc/0x270 [ 963.486336][T25685] ? __pfx_ksys_write+0x10/0x10 [ 963.486368][T25685] __x64_sys_bpf+0xba/0xd0 [ 963.486398][T25685] do_syscall_64+0x166/0x520 [ 963.486421][T25685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.486438][T25685] ? clear_bhb_loop+0x70/0xc0 [ 963.486461][T25685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.486479][T25685] RIP: 0033:0x7fe9e879e159 [ 963.486495][T25685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.486510][T25685] RSP: 002b:00007fe9e69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.486529][T25685] RAX: ffffffffffffffda RBX: 00007fe9e8a25fa0 RCX: 00007fe9e879e159 [ 963.486542][T25685] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 963.486554][T25685] RBP: 00007fe9e69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 963.486566][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.486577][T25685] R13: 00007fe9e8a26038 R14: 00007fe9e8a25fa0 R15: 00007ffd7b778448 [ 963.486606][T25685] [ 963.554274][T25687] pimreg: entered allmulticast mode [ 964.061061][T25701] netlink: 'syz.2.6090': attribute type 10 has an invalid length. [ 964.095560][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6090'. [ 964.096202][T25701] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6090'. [ 964.307108][T15552] Bluetooth: hci2: command tx timeout [ 964.400997][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.401035][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.433494][T25709] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6093'. [ 964.453560][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.453596][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.589839][T25713] openvswitch: netlink: Flow actions attr not present in new flow. [ 964.726889][T25707] : left promiscuous mode [ 964.751934][T25468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.139844][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6099'. [ 965.139972][T25730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.214161][T25730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.468774][T25468] veth0_vlan: entered promiscuous mode [ 965.489593][T25468] veth1_vlan: entered promiscuous mode [ 965.569403][T25468] veth0_macvtap: entered promiscuous mode [ 965.591879][T25468] veth1_macvtap: entered promiscuous mode [ 965.620449][T25468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.654036][T25468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.708772][ T1118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.798360][T21850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.799711][T21850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.799776][T21850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.086035][T25749] netlink: 'syz.1.6107': attribute type 10 has an invalid length. [ 966.418883][T21850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.418906][T21850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.539301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.539340][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.056902][T25779] ip_tables: iptables: counters copy to user failed while replacing table [ 967.105221][T25779] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 967.706715][T17459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 967.708492][T17459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 967.710477][T17459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 967.748432][T17459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 967.763667][T17459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.000972][T25801] __nla_validate_parse: 9 callbacks suppressed [ 968.000995][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6115'. [ 968.739804][T25813] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6116'. [ 968.856001][T25826] FAULT_INJECTION: forcing a failure. [ 968.856001][T25826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.856029][T25826] CPU: 0 UID: 0 PID: 25826 Comm: syz.5.6120 Not tainted syzkaller #0 PREEMPT(full) [ 968.856046][T25826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.856056][T25826] Call Trace: [ 968.856062][T25826] [ 968.856069][T25826] dump_stack_lvl+0xe8/0x150 [ 968.856095][T25826] should_fail_ex+0x410/0x560 [ 968.856117][T25826] _copy_from_user+0x2d/0xb0 [ 968.856136][T25826] generic_map_update_batch+0x668/0xae0 [ 968.856168][T25826] ? __pfx_generic_map_update_batch+0x10/0x10 [ 968.856189][T25826] ? __fget_files+0x2a/0x420 [ 968.856219][T25826] ? __pfx_generic_map_update_batch+0x10/0x10 [ 968.856240][T25826] bpf_map_do_batch+0x391/0x630 [ 968.856263][T25826] __sys_bpf+0xbe5/0xd90 [ 968.856285][T25826] ? __pfx___sys_bpf+0x10/0x10 [ 968.856311][T25826] ? __fget_files+0x2a/0x420 [ 968.856342][T25826] ? ksys_write+0x242/0x270 [ 968.856365][T25826] ? __pfx_ksys_write+0x10/0x10 [ 968.856388][T25826] __x64_sys_bpf+0xba/0xd0 [ 968.856404][T25826] do_syscall_64+0x166/0x520 [ 968.856422][T25826] ? trace_irq_disable+0x3b/0x140 [ 968.856436][T25826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.856452][T25826] ? clear_bhb_loop+0x70/0xc0 [ 968.856472][T25826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.856486][T25826] RIP: 0033:0x7f9c2919e159 [ 968.856501][T25826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.856514][T25826] RSP: 002b:00007f9c2a126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 968.856530][T25826] RAX: ffffffffffffffda RBX: 00007f9c29426090 RCX: 00007f9c2919e159 [ 968.856542][T25826] RDX: 0000000000000038 RSI: 00002000000002c0 RDI: 000000000000001a [ 968.856553][T25826] RBP: 00007f9c2a126090 R08: 0000000000000000 R09: 0000000000000000 [ 968.856563][T25826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.856572][T25826] R13: 00007f9c29426128 R14: 00007f9c29426090 R15: 00007ffeab7864f8 [ 968.856597][T25826] [ 969.173743][T25825] x_tables: duplicate underflow at hook 1 [ 969.251099][T25833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6123'. [ 969.414305][T10934] team0: Port device netdevsim1 removed [ 969.460822][T25833] tipc: Enabling of bearer rejected, failed to enable media [ 969.569722][T25841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6126'. [ 969.802397][T25852] FAULT_INJECTION: forcing a failure. [ 969.802397][T25852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.802439][T25852] CPU: 1 UID: 0 PID: 25852 Comm: syz.0.6128 Not tainted syzkaller #0 PREEMPT(full) [ 969.802458][T25852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 969.802467][T25852] Call Trace: [ 969.802473][T25852] [ 969.802481][T25852] dump_stack_lvl+0xe8/0x150 [ 969.802507][T25852] should_fail_ex+0x410/0x560 [ 969.802528][T25852] _copy_from_user+0x2d/0xb0 [ 969.802547][T25852] map_delete_elem+0x2b8/0x670 [ 969.802568][T25852] __sys_bpf+0x95d/0xd90 [ 969.802590][T25852] ? __pfx___sys_bpf+0x10/0x10 [ 969.802606][T25852] ? taprio_dequeue+0x250/0x540 [ 969.802632][T25852] ? sched_clock_cpu+0x74/0x440 [ 969.802661][T25852] ? __irq_exit_rcu+0xcb/0x220 [ 969.802681][T25852] ? handle_softirqs+0x720/0x860 [ 969.802702][T25852] __x64_sys_bpf+0xba/0xd0 [ 969.802719][T25852] do_syscall_64+0x166/0x520 [ 969.802736][T25852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.802750][T25852] ? clear_bhb_loop+0x70/0xc0 [ 969.802768][T25852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.802782][T25852] RIP: 0033:0x7f837579e159 [ 969.802805][T25852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.802818][T25852] RSP: 002b:00007f8376650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 969.802833][T25852] RAX: ffffffffffffffda RBX: 00007f8375a25fa0 RCX: 00007f837579e159 [ 969.802843][T25852] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 969.802852][T25852] RBP: 00007f8376650090 R08: 0000000000000000 R09: 0000000000000000 [ 969.802861][T25852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.802869][T25852] R13: 00007f8375a26038 R14: 00007f8375a25fa0 R15: 00007ffcc30a4b78 [ 969.802892][T25852] [ 969.906878][T15552] Bluetooth: hci0: command tx timeout [ 970.032540][T25850] batman_adv: batadv0: Adding interface: syzkaller0 [ 970.032575][T25850] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.032635][T25850] batman_adv: batadv0: Interface activated: syzkaller0 [ 970.157912][T25847] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 970.197123][T25847] batman_adv: batadv0: Removing interface: syzkaller0 [ 970.594498][T25863] FAULT_INJECTION: forcing a failure. [ 970.594498][T25863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.594531][T25863] CPU: 0 UID: 0 PID: 25863 Comm: syz.2.6133 Not tainted syzkaller #0 PREEMPT(full) [ 970.594553][T25863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.594564][T25863] Call Trace: [ 970.594571][T25863] [ 970.594580][T25863] dump_stack_lvl+0xe8/0x150 [ 970.594611][T25863] should_fail_ex+0x410/0x560 [ 970.594637][T25863] _copy_to_user+0x31/0xb0 [ 970.594662][T25863] bpf_verifier_vlog+0x3a2/0x900 [ 970.594690][T25863] bpf_verifier_log_write+0x11d/0x1a0 [ 970.594710][T25863] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 970.594731][T25863] ? bpf_verifier_log_write+0x11d/0x1a0 [ 970.594752][T25863] print_verifier_state+0x1e6/0x1a40 [ 970.594773][T25863] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 970.594798][T25863] ? __pfx_print_verifier_state+0x10/0x10 [ 970.594822][T25863] ? print_insn_state+0x135/0x170 [ 970.594843][T25863] do_check_common+0x2d55/0x5d30 [ 970.594897][T25863] ? __pfx_do_check_common+0x10/0x10 [ 970.594927][T25863] bpf_check+0x2639/0x2e10 [ 970.594958][T25863] ? bpf_obj_name_cpy+0x1f/0x1e0 [ 970.594985][T25863] ? __pfx_bpf_check+0x10/0x10 [ 970.595006][T25863] ? bpf_obj_name_cpy+0x194/0x1e0 [ 970.595035][T25863] bpf_prog_load+0x14d6/0x1c20 [ 970.595076][T25863] ? __pfx_bpf_prog_load+0x10/0x10 [ 970.595114][T25863] __sys_bpf+0xd0d/0xd90 [ 970.595141][T25863] ? __pfx___sys_bpf+0x10/0x10 [ 970.595170][T25863] ? __fget_files+0x2a/0x420 [ 970.595206][T25863] ? ksys_write+0x242/0x270 [ 970.595228][T25863] ? __pfx_ksys_write+0x10/0x10 [ 970.595251][T25863] __x64_sys_bpf+0xba/0xd0 [ 970.595267][T25863] do_syscall_64+0x166/0x520 [ 970.595285][T25863] ? trace_irq_disable+0x3b/0x140 [ 970.595299][T25863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.595314][T25863] ? clear_bhb_loop+0x70/0xc0 [ 970.595354][T25863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.595369][T25863] RIP: 0033:0x7f0ac339e159 [ 970.595385][T25863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.595397][T25863] RSP: 002b:00007f0ac4250028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 970.595415][T25863] RAX: ffffffffffffffda RBX: 00007f0ac3625fa0 RCX: 00007f0ac339e159 [ 970.595426][T25863] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 970.595436][T25863] RBP: 00007f0ac4250090 R08: 0000000000000000 R09: 0000000000000000 [ 970.595444][T25863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.595453][T25863] R13: 00007f0ac3626038 R14: 00007f0ac3625fa0 R15: 00007fff17124168 [ 970.595477][T25863] [ 970.945194][T25868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6136'. [ 971.024563][T25869] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6134'. [ 971.085804][T25871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6136'. [ 971.126441][T25869] hsr_slave_0 (unregistering): left promiscuous mode [ 971.672076][T10934] bridge_slave_1: left allmulticast mode [ 971.672134][T10934] bridge_slave_1: left promiscuous mode [ 971.672522][T10934] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.710569][T10934] bridge_slave_0: left allmulticast mode [ 971.710613][T10934] bridge_slave_0: left promiscuous mode [ 971.712245][T10934] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.813071][T10934] pimreg: left allmulticast mode [ 971.987346][T15552] Bluetooth: hci0: command tx timeout [ 972.135823][T25891] FAULT_INJECTION: forcing a failure. [ 972.135823][T25891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.135888][T25891] CPU: 1 UID: 0 PID: 25891 Comm: syz.0.6141 Not tainted syzkaller #0 PREEMPT(full) [ 972.135914][T25891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 972.135926][T25891] Call Trace: [ 972.135933][T25891] [ 972.135942][T25891] dump_stack_lvl+0xe8/0x150 [ 972.135975][T25891] should_fail_ex+0x410/0x560 [ 972.136002][T25891] _copy_from_user+0x2d/0xb0 [ 972.136026][T25891] ___sys_sendmsg+0x1c6/0x360 [ 972.136051][T25891] ? __lock_acquire+0x747/0x2de0 [ 972.136075][T25891] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.136133][T25891] ? __fget_files+0x2a/0x420 [ 972.136158][T25891] ? __fget_files+0x3a2/0x420 [ 972.136193][T25891] __x64_sys_sendmsg+0x1b1/0x290 [ 972.136220][T25891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 972.136265][T25891] do_syscall_64+0x166/0x520 [ 972.136288][T25891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.136308][T25891] ? clear_bhb_loop+0x70/0xc0 [ 972.136331][T25891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.136350][T25891] RIP: 0033:0x7f837579e159 [ 972.136368][T25891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.136384][T25891] RSP: 002b:00007f8376650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.136405][T25891] RAX: ffffffffffffffda RBX: 00007f8375a25fa0 RCX: 00007f837579e159 [ 972.136419][T25891] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 972.136432][T25891] RBP: 00007f8376650090 R08: 0000000000000000 R09: 0000000000000000 [ 972.136444][T25891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.136455][T25891] R13: 00007f8375a26038 R14: 00007f8375a25fa0 R15: 00007ffcc30a4b78 [ 972.136484][T25891] [ 973.121777][T10934] bond2 (unregistering): (slave geneve2): Releasing active interface [ 973.329403][T10934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.333315][T13517] smbdirect: ib_dev[syz1] removed [ 973.333368][T10934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.334960][T10934] bond0 (unregistering): Released all slaves [ 973.354015][T10934] bond1 (unregistering): Released all slaves [ 973.414747][T10934] bond2 (unregistering): Released all slaves [ 973.438907][T10934] bond3 (unregistering): Released all slaves [ 973.465769][T10934] bond4 (unregistering): Released all slaves [ 973.483455][T10934] bond5 (unregistering): Released all slaves [ 973.500177][T10934] bond6 (unregistering): Released all slaves [ 973.521683][T10934] bond7 (unregistering): Released all slaves [ 973.548950][T10934] bond8 (unregistering): Released all slaves [ 973.565093][T10934] bond9 (unregistering): Released all slaves [ 973.582919][T10934] bond10 (unregistering): Released all slaves [ 973.606060][T10934] bond11 (unregistering): Released all slaves [ 973.862661][T10934] ´: left promiscuous mode [ 974.079083][T17459] Bluetooth: hci0: command tx timeout [ 974.373832][T25917] FAULT_INJECTION: forcing a failure. [ 974.373832][T25917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.373862][T25917] CPU: 0 UID: 0 PID: 25917 Comm: syz.5.6147 Not tainted syzkaller #0 PREEMPT(full) [ 974.373882][T25917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.373894][T25917] Call Trace: [ 974.373902][T25917] [ 974.373910][T25917] dump_stack_lvl+0xe8/0x150 [ 974.373943][T25917] should_fail_ex+0x410/0x560 [ 974.373970][T25917] _copy_from_user+0x2d/0xb0 [ 974.373995][T25917] ___sys_sendmsg+0x1c6/0x360 [ 974.374019][T25917] ? __lock_acquire+0x747/0x2de0 [ 974.374042][T25917] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.374101][T25917] ? __fget_files+0x2a/0x420 [ 974.374125][T25917] ? __fget_files+0x3a2/0x420 [ 974.374157][T25917] __x64_sys_sendmsg+0x1b1/0x290 [ 974.374183][T25917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.374227][T25917] do_syscall_64+0x166/0x520 [ 974.374250][T25917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.374281][T25917] ? clear_bhb_loop+0x70/0xc0 [ 974.374303][T25917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.374319][T25917] RIP: 0033:0x7f9c2919e159 [ 974.374336][T25917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.374350][T25917] RSP: 002b:00007f9c2a147028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.374371][T25917] RAX: ffffffffffffffda RBX: 00007f9c29425fa0 RCX: 00007f9c2919e159 [ 974.374385][T25917] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 974.374397][T25917] RBP: 00007f9c2a147090 R08: 0000000000000000 R09: 0000000000000000 [ 974.374408][T25917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.374419][T25917] R13: 00007f9c29426038 R14: 00007f9c29425fa0 R15: 00007ffeab7864f8 [ 974.374449][T25917] [ 974.787183][T25913] Cannot find set identified by id 0 to match [ 974.936304][T25932] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 975.046339][T25932] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6149'. [ 975.274600][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6149'. [ 975.276085][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 975.881093][T25796] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.881264][T25796] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.882360][T25796] bridge_slave_0: entered allmulticast mode [ 975.905176][T25796] bridge_slave_0: entered promiscuous mode [ 975.965698][T10934] hsr_slave_1: left promiscuous mode [ 975.966534][T10934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.967484][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.146581][T17459] Bluetooth: hci0: command tx timeout [ 976.349047][T25979] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6158'. [ 976.352829][T25979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6158'. [ 976.354705][T25979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 976.476449][T10934] team0 (unregistering): Port device team_slave_1 removed [ 976.505666][T10934] team0 (unregistering): Port device team_slave_0 removed [ 976.870492][T25796] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.870599][T25796] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.870761][T25796] bridge_slave_1: entered allmulticast mode [ 976.878420][T25796] bridge_slave_1: entered promiscuous mode [ 976.944733][T25971] wlan0 speed is unknown, defaulting to 1000 [ 976.990478][T25971] wlan0 speed is unknown, defaulting to 1000 [ 976.992281][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.011887][T25796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.015545][T25796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.045670][T25971] smbdirect: ib_dev[xyz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 977.045730][T25971] smbdirect: ib_dev[xyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 977.045791][T25971] smbdirect: ib_dev[xyz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 977.107692][T25971] infiniband xyz0: RDMA CMA: cma_listen_on_dev, error -98 [ 977.256275][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.274276][T25796] team0: Port device team_slave_0 added [ 977.274874][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.306571][T25796] team0: Port device team_slave_1 added [ 977.334366][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.350473][T25995] Cannot find set identified by id 0 to match [ 977.490857][T25796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.490889][T25796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.490925][T25796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.491851][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.529472][T25796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.529508][T25796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.529556][T25796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.650157][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.680504][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.695496][T26004] ip_tables: iptables: counters copy to user failed while replacing table [ 977.906399][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 977.914598][T25971] wlan0 speed is unknown, defaulting to 1000 [ 977.996625][T25796] hsr_slave_0: entered promiscuous mode [ 977.997511][T25796] hsr_slave_1: entered promiscuous mode [ 977.998039][T25796] debugfs: 'hsr0' already exists in 'hsr' [ 977.998054][T25796] Cannot create hsr debugfs directory [ 978.002483][T25971] wlan0 speed is unknown, defaulting to 1000 [ 978.116188][T25971] wlan0 speed is unknown, defaulting to 1000 [ 978.680708][T26030] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 978.770720][T26035] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 979.099846][T13510] nci: nci_rx_work: unknown MT 0x6 [ 979.217164][ T60] nci: nci_rx_work: unknown MT 0x6 [ 980.110289][T26085] bond0: option min_links: invalid value (18446744073709551615) [ 980.110345][T26085] bond0: option min_links: allowed values 0 - 2147483647 [ 980.954526][T26110] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 980.954607][T26110] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 981.965811][T26042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.001388][T26112] netlink: 'syz.4.6184': attribute type 3 has an invalid length. [ 982.001411][T26112] netlink: 'syz.4.6184': attribute type 1 has an invalid length. [ 982.001423][T26112] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6184'. [ 982.042600][T25796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 982.094756][T25796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.109224][T25796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 982.155860][T25796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.163942][T25796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 982.181070][T25796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.181929][T25796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 982.214233][T25796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 982.321569][T26155] openvswitch: netlink: Flow actions attr not present in new flow. [ 982.407752][T26159] netlink: 'syz.0.6188': attribute type 2 has an invalid length. [ 982.502687][T26159] : entered promiscuous mode [ 982.571021][T25796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.609564][T25796] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.646187][T13510] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.646365][T13510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.759161][T21850] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.759260][T21850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.374214][T26194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 983.383554][T26194] netlink: 'syz.0.6195': attribute type 11 has an invalid length. [ 984.211004][T26225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6201'. [ 984.334879][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6201'. [ 984.435525][T26233] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6203'. [ 985.233079][T26248] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6205'. [ 985.442464][T25796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.606276][T26254] Bluetooth: MGMT ver 1.23 [ 985.641460][T26254] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6208'. [ 985.682427][T26254] Failure starting scanning (-16) [ 985.774165][T26256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6207'. [ 985.774223][T26256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6207'. [ 985.871297][T26260] vlan3: entered promiscuous mode [ 985.914134][T25796] veth0_vlan: entered promiscuous mode [ 985.941409][T26256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6207'. [ 985.983762][T26256] netlink: 'syz.0.6207': attribute type 4 has an invalid length. [ 986.040535][T26256] .`: renamed from bond0 [ 986.106024][T25796] veth1_vlan: entered promiscuous mode [ 986.249945][T25796] veth0_macvtap: entered promiscuous mode [ 986.275351][T25796] veth1_macvtap: entered promiscuous mode [ 986.416949][T25796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.473123][T25796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.581636][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.619232][T13517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.619316][T13517] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.630034][T10934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.771238][T26286] FAULT_INJECTION: forcing a failure. [ 986.771238][T26286] name failslab, interval 1, probability 0, space 0, times 0 [ 986.771287][T26286] CPU: 1 UID: 0 PID: 26286 Comm: syz.4.6216 Not tainted syzkaller #0 PREEMPT(full) [ 986.771309][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.771320][T26286] Call Trace: [ 986.771329][T26286] [ 986.771337][T26286] dump_stack_lvl+0xe8/0x150 [ 986.771369][T26286] should_fail_ex+0x410/0x560 [ 986.771395][T26286] should_failslab+0xa8/0x100 [ 986.771421][T26286] __kvmalloc_node_noprof+0x176/0x820 [ 986.771441][T26286] ? trace_irq_disable+0x3b/0x140 [ 986.771464][T26286] ? alloc_netdev_mqs+0xa9/0x12a0 [ 986.771491][T26286] ? alloc_netdev_mqs+0xa9/0x12a0 [ 986.771525][T26286] alloc_netdev_mqs+0xa9/0x12a0 [ 986.771552][T26286] ? __pfx_bnep_net_setup+0x10/0x10 [ 986.771705][T26286] bnep_add_connection+0x210/0xc80 [ 986.771735][T26286] ? __pfx_bnep_add_connection+0x10/0x10 [ 986.771757][T26286] ? __fget_files+0x3a2/0x420 [ 986.771792][T26286] do_bnep_sock_ioctl+0x40b/0x650 [ 986.771818][T26286] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 986.771847][T26286] ? tomoyo_path_number_perm+0x219/0x5f0 [ 986.771887][T26286] sock_do_ioctl+0x101/0x320 [ 986.771918][T26286] ? __pfx_sock_do_ioctl+0x10/0x10 [ 986.771943][T26286] ? hook_file_ioctl+0x1f2/0x600 [ 986.771980][T26286] sock_ioctl+0x57a/0x7e0 [ 986.772009][T26286] ? __pfx_sock_ioctl+0x10/0x10 [ 986.772037][T26286] ? __fget_files+0x2a/0x420 [ 986.772061][T26286] ? __fget_files+0x3a2/0x420 [ 986.772092][T26286] ? __fget_files+0x2a/0x420 [ 986.772118][T26286] ? bpf_lsm_file_ioctl+0x9/0x20 [ 986.772144][T26286] ? __pfx_sock_ioctl+0x10/0x10 [ 986.772170][T26286] __se_sys_ioctl+0xfc/0x170 [ 986.772193][T26286] do_syscall_64+0x166/0x520 [ 986.772216][T26286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.772236][T26286] ? clear_bhb_loop+0x70/0xc0 [ 986.772259][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.772283][T26286] RIP: 0033:0x7fbf1d99e159 [ 986.772301][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.772317][T26286] RSP: 002b:00007fbf1e92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.772337][T26286] RAX: ffffffffffffffda RBX: 00007fbf1dc25fa0 RCX: 00007fbf1d99e159 [ 986.772352][T26286] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000004 [ 986.772364][T26286] RBP: 00007fbf1e92d090 R08: 0000000000000000 R09: 0000000000000000 [ 986.772376][T26286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.772387][T26286] R13: 00007fbf1dc26038 R14: 00007fbf1dc25fa0 R15: 00007fff9e0d9e38 [ 986.772417][T26286] [ 987.395679][T13510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.395717][T13510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.499669][T10934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.499722][T10934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.058905][T26285] __nla_validate_parse: 4 callbacks suppressed [ 988.058928][T26285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6217'. [ 988.503936][T15552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 988.509379][T15552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 988.515536][T15552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 988.534509][T15552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 988.546275][T15552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 988.942705][T26320] Cannot find add_set index 0 as target [ 988.965295][T26317] xt_CT: No such helper "syz1" [ 989.184397][T13517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.265153][T25451] hid (null): report_id 30203 is invalid [ 989.265261][T25451] hid (null): unknown global tag 0xe [ 989.265387][T25451] hid (null): report_id 0 is invalid [ 989.274096][T25451] hid-generic 0005:0003:0081.000A: unknown main item tag 0x0 [ 989.274163][T25451] hid-generic 0005:0003:0081.000A: report_id 30203 is invalid [ 989.274195][T25451] hid-generic 0005:0003:0081.000A: item 0 2 1 8 parsing failed [ 989.281514][T25451] hid-generic 0005:0003:0081.000A: probe with driver hid-generic failed with error -22 [ 989.517467][T13517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.635519][T26303] wlan0 speed is unknown, defaulting to 1000 [ 989.712978][T13517] team0: Port device netdevsim1 removed [ 989.714682][T13517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.755739][T26355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6230'. [ 989.867378][T13517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.920355][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6230'. [ 990.011622][T26335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.429677][T26365] FAULT_INJECTION: forcing a failure. [ 990.429677][T26365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.429708][T26365] CPU: 0 UID: 0 PID: 26365 Comm: syz.5.6232 Not tainted syzkaller #0 PREEMPT(full) [ 990.429729][T26365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 990.429741][T26365] Call Trace: [ 990.429749][T26365] [ 990.429758][T26365] dump_stack_lvl+0xe8/0x150 [ 990.429793][T26365] should_fail_ex+0x410/0x560 [ 990.429828][T26365] _copy_to_user+0x31/0xb0 [ 990.429854][T26365] bpf_verifier_vlog+0x496/0x900 [ 990.429884][T26365] verbose+0x11d/0x1a0 [ 990.429903][T26365] ? verbose+0x11d/0x1a0 [ 990.429924][T26365] ? __pfx_verbose+0x10/0x10 [ 990.429948][T26365] ? ktime_get+0x45/0x220 [ 990.429971][T26365] print_verification_stats+0x20f/0x800 [ 990.429995][T26365] ? ktime_get+0x45/0x220 [ 990.430010][T26365] ? seqcount_lockdep_reader_access+0xea/0x100 [ 990.430031][T26365] ? ktime_get+0x1f5/0x220 [ 990.430059][T26365] bpf_check+0x1bcc/0x2e10 [ 990.430090][T26365] ? ktime_get_with_offset+0x93/0x2d0 [ 990.430114][T26365] ? __pfx_bpf_check+0x10/0x10 [ 990.430142][T26365] ? bpf_obj_name_cpy+0x194/0x1e0 [ 990.430172][T26365] bpf_prog_load+0x14d6/0x1c20 [ 990.430206][T26365] ? __pfx_bpf_prog_load+0x10/0x10 [ 990.430252][T26365] __sys_bpf+0xd0d/0xd90 [ 990.430281][T26365] ? __pfx___sys_bpf+0x10/0x10 [ 990.430313][T26365] ? __fget_files+0x2a/0x420 [ 990.430355][T26365] ? ksys_write+0x242/0x270 [ 990.430384][T26365] ? __pfx_ksys_write+0x10/0x10 [ 990.430415][T26365] __x64_sys_bpf+0xba/0xd0 [ 990.430438][T26365] do_syscall_64+0x166/0x520 [ 990.430461][T26365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.430481][T26365] ? clear_bhb_loop+0x70/0xc0 [ 990.430504][T26365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.430523][T26365] RIP: 0033:0x7f9c2919e159 [ 990.430541][T26365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.430556][T26365] RSP: 002b:00007f9c2a147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.430576][T26365] RAX: ffffffffffffffda RBX: 00007f9c29425fa0 RCX: 00007f9c2919e159 [ 990.430591][T26365] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 990.430602][T26365] RBP: 00007f9c2a147090 R08: 0000000000000000 R09: 0000000000000000 [ 990.430614][T26365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.430625][T26365] R13: 00007f9c29426038 R14: 00007f9c29425fa0 R15: 00007ffeab7864f8 [ 990.430655][T26365] [ 990.629932][T15552] Bluetooth: hci5: command tx timeout [ 990.839450][T26368] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 991.338342][T26380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6236'. [ 992.718006][T15552] Bluetooth: hci5: command tx timeout [ 994.786937][T15552] Bluetooth: hci5: command tx timeout [ 996.052733][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 996.084457][T13517] bridge_slave_1: left allmulticast mode [ 996.084485][T13517] bridge_slave_1: left promiscuous mode [ 996.084694][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.115217][T13517] bridge_slave_0: left allmulticast mode [ 996.115245][T13517] bridge_slave_0: left promiscuous mode [ 996.115487][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.866852][T15552] Bluetooth: hci5: command tx timeout [ 997.854774][T13517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.871876][T13517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.872942][T13517] bond0 (unregistering): Released all slaves [ 997.882590][T13517] bond1 (unregistering): Released all slaves [ 997.914980][T13517] bond2 (unregistering): Released all slaves [ 997.934754][T13517] bond3 (unregistering): Released all slaves [ 997.958562][T13517] bond4 (unregistering): Released all slaves [ 997.975792][T13517] bond5 (unregistering): Released all slaves [ 998.004223][T13517] bond6 (unregistering): Released all slaves [ 998.025330][T13517] bond7 (unregistering): Released all slaves [ 998.053543][T13517] bond8 (unregistering): Released all slaves [ 998.073746][T13517] bond9 (unregistering): Released all slaves [ 998.168294][T26411] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 998.471488][T13517] tipc: Left network mode [ 998.639895][T26442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6246'. [ 998.770723][T26445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6246'. [ 999.193299][T26303] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.195701][T26303] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.195872][T26303] bridge_slave_0: entered allmulticast mode [ 999.234875][T26303] bridge_slave_0: entered promiscuous mode [ 999.313376][T26303] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.313549][T26303] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.313898][T26303] bridge_slave_1: entered allmulticast mode [ 999.328450][T26303] bridge_slave_1: entered promiscuous mode [ 999.528507][ T1118] smbdirect: ib_dev[xyz0] removed [ 999.723672][T26303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.752914][T26303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.796959][T16572] infiniband xyz0: ib_query_port failed (-19) [ 1000.004053][T26303] team0: Port device team_slave_0 added [ 1000.015906][T26303] team0: Port device team_slave_1 added [ 1000.177930][T13517] hsr_slave_1: left promiscuous mode [ 1000.178880][T13517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.201508][T13517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.762520][T13517] team0 (unregistering): Port device team_slave_1 removed [ 1000.832745][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1000.888647][T13517] team0 (unregistering): Port device team_slave_0 removed [ 1001.434241][T26303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.436315][T26303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.436345][T26303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.438369][T26303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.438384][T26303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.438407][T26303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.475911][T26477] tipc: Started in network mode [ 1001.475941][T26477] tipc: Node identity 2a9c12b1ee7b, cluster identity 4711 [ 1001.565097][T26477] tipc: Enabled bearer , priority 20 [ 1001.654529][T26501] ip6gre1: entered promiscuous mode [ 1001.654588][T26501] ip6gre1: entered allmulticast mode [ 1001.670546][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1001.702142][T26505] batman_adv: batadv0: Adding interface: syzkaller0 [ 1001.702162][T26505] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.702189][T26505] batman_adv: batadv0: Interface activated: syzkaller0 [ 1001.810959][T26502] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1001.928315][T26502] batman_adv: batadv0: Removing interface: syzkaller0 [ 1001.943809][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6259'. [ 1002.021479][T26303] hsr_slave_0: entered promiscuous mode [ 1002.033501][T26303] hsr_slave_1: entered promiscuous mode [ 1002.041106][T26303] debugfs: 'hsr0' already exists in 'hsr' [ 1002.041130][T26303] Cannot create hsr debugfs directory [ 1002.210458][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6260'. [ 1002.334258][T13517] IPVS: stop unused estimator thread 0... [ 1002.534654][T26531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6265'. [ 1002.672035][T26534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'. [ 1002.830013][ T2196] tipc: Node number set to 3303477937 [ 1003.249862][T26553] openvswitch: netlink: Flow actions attr not present in new flow. [ 1003.429301][T26550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6267'. [ 1003.434726][T26556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1004.241610][T26576] FAULT_INJECTION: forcing a failure. [ 1004.241610][T26576] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.241642][T26576] CPU: 0 UID: 0 PID: 26576 Comm: syz.2.6272 Not tainted syzkaller #0 PREEMPT(full) [ 1004.241662][T26576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1004.241674][T26576] Call Trace: [ 1004.241682][T26576] [ 1004.241691][T26576] dump_stack_lvl+0xe8/0x150 [ 1004.241724][T26576] should_fail_ex+0x410/0x560 [ 1004.241748][T26576] ? __alloc_skb+0x1db/0x7a0 [ 1004.241771][T26576] should_failslab+0xa8/0x100 [ 1004.241795][T26576] ? __alloc_skb+0x1db/0x7a0 [ 1004.241814][T26576] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1004.241842][T26576] ? __alloc_skb+0x18d/0x7a0 [ 1004.241864][T26576] ? __alloc_skb+0x1db/0x7a0 [ 1004.241891][T26576] __alloc_skb+0x1db/0x7a0 [ 1004.241917][T26576] netlink_sendmsg+0x5d4/0xb40 [ 1004.241954][T26576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.241989][T26576] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1004.242012][T26576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.242039][T26576] sock_sendmsg_nosec+0x13a/0x180 [ 1004.242061][T26576] ____sys_sendmsg+0x54e/0x850 [ 1004.242099][T26576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.242133][T26576] ? import_iovec+0x73/0xa0 [ 1004.242160][T26576] ___sys_sendmsg+0x2a5/0x360 [ 1004.242186][T26576] ? __lock_acquire+0x747/0x2de0 [ 1004.242211][T26576] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.242268][T26576] ? __fget_files+0x2a/0x420 [ 1004.242290][T26576] ? __fget_files+0x3a2/0x420 [ 1004.242319][T26576] __x64_sys_sendmsg+0x1b1/0x290 [ 1004.242342][T26576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1004.242378][T26576] do_syscall_64+0x166/0x520 [ 1004.242396][T26576] ? trace_irq_disable+0x3b/0x140 [ 1004.242412][T26576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.242429][T26576] ? clear_bhb_loop+0x70/0xc0 [ 1004.242448][T26576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.242462][T26576] RIP: 0033:0x7f0ac339e159 [ 1004.242477][T26576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.242492][T26576] RSP: 002b:00007f0ac4250028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.242512][T26576] RAX: ffffffffffffffda RBX: 00007f0ac3625fa0 RCX: 00007f0ac339e159 [ 1004.242525][T26576] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1004.242536][T26576] RBP: 00007f0ac4250090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.242546][T26576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.242557][T26576] R13: 00007f0ac3626038 R14: 00007f0ac3625fa0 R15: 00007fff17124168 [ 1004.242585][T26576] [ 1004.522117][T26574] batman_adv: batadv0: Adding interface: syzkaller0 [ 1004.522134][T26574] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.522163][T26574] batman_adv: batadv0: Interface activated: syzkaller0 [ 1004.566374][T26569] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1004.654494][T26569] batman_adv: batadv0: Removing interface: syzkaller0 [ 1004.727021][T26586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1004.829438][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1004.833938][T26591] netlink: 564 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1005.241283][T26605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6280'. [ 1005.259879][T26608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6281'. [ 1005.412792][T26610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6281'. [ 1005.588283][T26303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1005.629606][T26303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.641760][T26303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1005.677388][T26303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.678181][T26303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1005.801516][T26303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.807772][T26303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1005.836018][T26303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1006.392085][T26303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.438825][T26303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.466023][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.466318][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.531628][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.531806][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.771166][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6289'. [ 1006.939970][T26658] sctp: [Deprecated]: syz.2.6292 (pid 26658) Use of int in max_burst socket option. [ 1006.939970][T26658] Use struct sctp_assoc_value instead [ 1006.982174][T26660] sctp: [Deprecated]: syz.0.6291 (pid 26660) Use of int in max_burst socket option. [ 1006.982174][T26660] Use struct sctp_assoc_value instead [ 1007.067288][T26655] netlink: 'syz.5.6290': attribute type 12 has an invalid length. [ 1007.067312][T26655] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6290'. [ 1007.400991][T26673] netlink: 'syz.0.6296': attribute type 2 has an invalid length. [ 1007.420293][T26673] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6296'. [ 1007.756654][T26686] netlink: 'syz.2.6298': attribute type 12 has an invalid length. [ 1007.756677][T26686] netlink: 'syz.2.6298': attribute type 29 has an invalid length. [ 1007.756690][T26686] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6298'. [ 1007.756722][T26686] netlink: 'syz.2.6298': attribute type 3 has an invalid length. [ 1008.353366][T26303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.441030][T26707] syzkaller1: entered promiscuous mode [ 1008.441083][T26707] syzkaller1: entered allmulticast mode [ 1008.691089][T26719] tipc: Started in network mode [ 1008.691131][T26719] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1008.691183][T26719] tipc: Enabling of bearer rejected, failed to enable media [ 1008.983700][T26303] veth0_vlan: entered promiscuous mode [ 1009.022062][T26303] veth1_vlan: entered promiscuous mode [ 1009.071011][T26726] netlink: 'syz.5.6305': attribute type 1 has an invalid length. [ 1009.354641][T26737] batman_adv: batadv0: Adding interface: syzkaller0 [ 1009.354660][T26737] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.354689][T26737] batman_adv: batadv0: Interface activated: syzkaller0 [ 1009.459253][T26303] veth0_macvtap: entered promiscuous mode [ 1009.463970][T26303] veth1_macvtap: entered promiscuous mode [ 1010.519919][T26755] netlink: 'syz.2.6309': attribute type 2 has an invalid length. [ 1010.528701][T26755] : entered promiscuous mode [ 1010.532827][T26755] __nla_validate_parse: 2 callbacks suppressed [ 1010.532844][T26755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6309'. [ 1010.611091][T26737] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1010.726593][T26737] batman_adv: batadv0: Removing interface: syzkaller0 [ 1010.783536][T26303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.830237][T26303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.908132][T13510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.909806][T21850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.910306][T21850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.910744][T21850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.054711][T26770] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1011.095240][T26766] Cannot find set identified by id 0 to match [ 1011.124314][T10934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.124373][T10934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.143944][ C0] ================================================================== [ 1011.143960][ C0] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 1011.143990][ C0] Free of addr ffff88801e3db500 by task ksoftirqd/0/15 [ 1011.144008][ C0] [ 1011.144020][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1011.144046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1011.144061][ C0] Call Trace: [ 1011.144070][ C0] [ 1011.144079][ C0] dump_stack_lvl+0xe8/0x150 [ 1011.144113][ C0] print_address_description+0x55/0x1e0 [ 1011.144173][ C0] print_report+0x58/0x70 [ 1011.144198][ C0] ? rcu_free_sheaf+0x31/0x200 [ 1011.144218][ C0] kasan_report_invalid_free+0xea/0x110 [ 1011.144245][ C0] ? rcu_free_sheaf+0x31/0x200 [ 1011.144268][ C0] ? rcu_free_sheaf+0x31/0x200 [ 1011.144288][ C0] __kasan_slab_pre_free+0x104/0x120 [ 1011.144314][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 1011.144343][ C0] ? rcu_core+0x8a8/0x1260 [ 1011.144367][ C0] rcu_free_sheaf+0x31/0x200 [ 1011.144388][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1011.144415][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 1011.144437][ C0] ? rcu_core+0x8a8/0x1260 [ 1011.144460][ C0] rcu_core+0x926/0x1260 [ 1011.144490][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1011.144520][ C0] handle_softirqs+0x226/0x860 [ 1011.144550][ C0] ? schedule+0x90/0x2b0 [ 1011.144571][ C0] ? run_ksoftirqd+0x36/0x60 [ 1011.144605][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1011.144645][ C0] run_ksoftirqd+0x36/0x60 [ 1011.144676][ C0] smpboot_thread_fn+0x565/0xa70 [ 1011.144712][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1011.144747][ C0] kthread+0x38b/0x480 [ 1011.144769][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1011.144800][ C0] ? __pfx_kthread+0x10/0x10 [ 1011.144822][ C0] ret_from_fork+0x514/0xb70 [ 1011.144845][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.144866][ C0] ? __switch_to+0xc89/0x1420 [ 1011.144905][ C0] ? __pfx_kthread+0x10/0x10 [ 1011.144927][ C0] ret_from_fork_asm+0x1a/0x30 [ 1011.144968][ C0] [ 1011.144977][ C0] [ 1011.144983][ C0] Allocated by task 35: [ 1011.144998][ C0] kasan_save_track+0x3e/0x80 [ 1011.145020][ C0] __kasan_kmalloc+0x93/0xb0 [ 1011.145042][ C0] __kmalloc_cache_noprof+0x321/0x600 [ 1011.145062][ C0] hwsim_update_pib+0x7e/0x400 [ 1011.145188][ C0] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 1011.145216][ C0] drv_set_promiscuous_mode+0x159/0x2e0 [ 1011.145306][ C0] drv_start+0x4ea/0x1010 [ 1011.145324][ C0] mac802154_scan_worker+0x8e6/0xe60 [ 1011.145344][ C0] process_scheduled_works+0xc3d/0x1630 [ 1011.145371][ C0] worker_thread+0xa47/0xfb0 [ 1011.145395][ C0] kthread+0x38b/0x480 [ 1011.145412][ C0] ret_from_fork+0x514/0xb70 [ 1011.145428][ C0] ret_from_fork_asm+0x1a/0x30 [ 1011.145457][ C0] [ 1011.145463][ C0] Freed by task 15: [ 1011.145472][ C0] kasan_save_track+0x3e/0x80 [ 1011.145491][ C0] kasan_save_free_info+0x40/0x50 [ 1011.145519][ C0] __kasan_slab_free+0x5c/0x80 [ 1011.145539][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 1011.145565][ C0] rcu_free_sheaf+0x31/0x200 [ 1011.145582][ C0] rcu_core+0x926/0x1260 [ 1011.145603][ C0] handle_softirqs+0x226/0x860 [ 1011.145627][ C0] run_ksoftirqd+0x36/0x60 [ 1011.145654][ C0] smpboot_thread_fn+0x565/0xa70 [ 1011.145681][ C0] kthread+0x38b/0x480 [ 1011.145697][ C0] ret_from_fork+0x514/0xb70 [ 1011.145713][ C0] ret_from_fork_asm+0x1a/0x30 [ 1011.145740][ C0] [ 1011.145744][ C0] The buggy address belongs to the object at ffff88801e3db500 [ 1011.145744][ C0] which belongs to the cache kmalloc-64 of size 64 [ 1011.145761][ C0] The buggy address is located 0 bytes inside of [ 1011.145761][ C0] 64-byte region [ffff88801e3db500, ffff88801e3db540) [ 1011.145782][ C0] [ 1011.145788][ C0] The buggy address belongs to the physical page: [ 1011.145806][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e3db [ 1011.145825][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1011.145842][ C0] page_type: f5(slab) [ 1011.145861][ C0] raw: 00fff00000000000 ffff88801b0418c0 dead000000000100 dead000000000122 [ 1011.145878][ C0] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 1011.145897][ C0] page dumped because: kasan: bad access detected [ 1011.145911][ C0] page_owner tracks the page as allocated [ 1011.145919][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7834828052 [ 1011.145949][ C0] post_alloc_hook+0x1f9/0x250 [ 1011.145977][ C0] get_page_from_freelist+0x2209/0x2280 [ 1011.145998][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1011.146018][ C0] allocate_slab+0x7d/0x620 [ 1011.146041][ C0] refill_objects+0x2d5/0x350 [ 1011.146065][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1011.146088][ C0] __kmalloc_cache_noprof+0x39b/0x600 [ 1011.146104][ C0] __kthread_create_on_node+0x115/0x3d0 [ 1011.146133][ C0] kthread_create_on_node+0xeb/0x140 [ 1011.146159][ C0] kswapd_run+0x9a/0x160 [ 1011.146181][ C0] kswapd_init+0x62/0xd0 [ 1011.146290][ C0] do_one_initcall+0x250/0x870 [ 1011.146316][ C0] do_initcall_level+0x10a/0x1a0 [ 1011.146360][ C0] do_initcalls+0x59/0xa0 [ 1011.146381][ C0] kernel_init_freeable+0x29d/0x3e0 [ 1011.146403][ C0] kernel_init+0x22/0x1d0 [ 1011.146432][ C0] page_owner free stack trace missing [ 1011.146440][ C0] [ 1011.146445][ C0] Memory state around the buggy address: [ 1011.146457][ C0] ffff88801e3db400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1011.146472][ C0] ffff88801e3db480: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1011.146485][ C0] >ffff88801e3db500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1011.146494][ C0] ^ [ 1011.146504][ C0] ffff88801e3db580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1011.146518][ C0] ffff88801e3db600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1011.146528][ C0] ================================================================== [ 1011.146589][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1011.736319][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1011.745514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1011.755567][ C0] Call Trace: [ 1011.758843][ C0] [ 1011.761764][ C0] vpanic+0x56d/0xa60 [ 1011.765756][ C0] ? rcu_is_watching+0x16/0xb0 [ 1011.770519][ C0] ? __pfx_vpanic+0x10/0x10 [ 1011.775030][ C0] panic+0xc5/0xd0 [ 1011.778753][ C0] ? __pfx_panic+0x10/0x10 [ 1011.783178][ C0] check_panic_on_warn+0x89/0xb0 [ 1011.788111][ C0] end_report+0x73/0x170 [ 1011.792354][ C0] ? rcu_free_sheaf+0x31/0x200 [ 1011.797113][ C0] kasan_report_invalid_free+0xfa/0x110 [ 1011.802658][ C0] ? rcu_free_sheaf+0x31/0x200 [ 1011.807418][ C0] ? rcu_free_sheaf+0x31/0x200 [ 1011.812177][ C0] __kasan_slab_pre_free+0x104/0x120 [ 1011.817460][ C0] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 1011.823037][ C0] ? rcu_core+0x8a8/0x1260 [ 1011.827457][ C0] rcu_free_sheaf+0x31/0x200 [ 1011.832055][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1011.837865][ C0] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 1011.843062][ C0] ? rcu_core+0x8a8/0x1260 [ 1011.847478][ C0] rcu_core+0x926/0x1260 [ 1011.851725][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1011.856407][ C0] handle_softirqs+0x226/0x860 [ 1011.861173][ C0] ? schedule+0x90/0x2b0 [ 1011.865409][ C0] ? run_ksoftirqd+0x36/0x60 [ 1011.870003][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1011.875031][ C0] run_ksoftirqd+0x36/0x60 [ 1011.879448][ C0] smpboot_thread_fn+0x565/0xa70 [ 1011.884395][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1011.889426][ C0] kthread+0x38b/0x480 [ 1011.893493][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1011.898959][ C0] ? __pfx_kthread+0x10/0x10 [ 1011.903546][ C0] ret_from_fork+0x514/0xb70 [ 1011.908134][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1011.913243][ C0] ? __switch_to+0xc89/0x1420 [ 1011.917961][ C0] ? __pfx_kthread+0x10/0x10 [ 1011.922566][ C0] ret_from_fork_asm+0x1a/0x30 [ 1011.927360][ C0] [ 1011.930656][ C0] Kernel Offset: disabled [ 1011.934982][ C0] Rebooting in 86400 seconds..