last executing test programs: 6m7.521859645s ago: executing program 0 (id=4038): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) (async) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, 0x0, 0x81) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r4, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\t\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xd0}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x28, r13, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x28}, 0x1, 0x0, 0x0, 0x8054}, 0x44054) (async) splice(r9, &(0x7f0000000000), r7, &(0x7f0000000080)=0x6, 0x529, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 6m7.001210505s ago: executing program 0 (id=4044): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a1070000000000feffff7f01000000020000000100003f420f000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000020000", 0x3b}], 0x1}}], 0x2, 0x0) 6m6.757470835s ago: executing program 0 (id=4046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0x1, 0x10}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000003c0)={0x0, 0xa, 0xfffffffffffffffc}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000000c0)={{r6}, 0x1, 0x9, 0x3}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000180)) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32, @ANYBLOB="001500b3899f2c52472e8474703722c700000000220df7ca4c8a91c24c656ac32089cfa59d5bf5912d1923a80e89f6939f6afd8c168bb5ebc42adeb0f37c185e403d3cc5132b1e7edd6592acbfc3e8e3ad5083c78f3552ad67932d3215bb335808fcc84cf27721b092504d4133f6806e88d65bbcffb94968b6c7f3af828a53fbd100ad294118fa64f30fbff900ad0850efcc2c3b117db63da6851f6c09dacf7b396ae0101d52cbb6e00ec2577edf743af0e40915f728e1a197f857e4978284daacb0583238ad6462d4367bbc3997eca2a03fe735c98a08c44820d3a6f6f0ddaf7c4702cb6a97a54e4d53c49fa2da521ba9dfb88332889883e05ebb6eb331503060de0c8f7cad1c4d4c790000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00B\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r10, r11}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r10, r11}, 0xc) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0xa0028014}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="000829bd7000fdda832544000060a975554e4263c405635e1d89e2a30004000801"], 0x18}}, 0x4) 6m6.506656027s ago: executing program 0 (id=4048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000001000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 6m6.29459653s ago: executing program 0 (id=4052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000030a20000000000a05000000000000000000050000000900010073797a30006700002c000000030a05000000000000000000050000500900010073797a30000000000900030073797a31000000005c000000060a010400130000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d61418f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x5, 0xff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$cgroup_type(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103040000"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x30, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x180, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x25}, @NL80211_ATTR_SCAN_SUPP_RATES={0x148, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, "d35d63274443ef9116875319de2ca5b05b5ccb12fd25320e3034e06d"}, @NL80211_BAND_6GHZ={0x4b, 0x3, "f9473de6186c8b0a4e56a2d66bd911e1208d8756b01b5dcc75c07995b6ec211c74cace9000676055b2a9cb60aec121be286ffba1a559362cd76e24e084b6b8992a02a2162a2e12"}, @NL80211_BAND_6GHZ={0x8e, 0x3, "166e07b2c880e9755c2e21e484b6b5d864fce153a42d1bbcdd353afd2766bdb0740c09acce2f598548bb17a7f586e8ac146512dec923679fd6b7eea7e6d8a61d505a56c5cda915607820ae00fd718f44b0ee48fbc8a0c8078b3ada7b79a9c87c3b826639e568b8ac11f2e2339efb6d6b7505fd4d9c09777d95f82c228f11e70759b0bef5da2f9b10908e"}, @NL80211_BAND_5GHZ={0x48, 0x1, "5f1301971648b0da2fb8d61d275e7337620cb799fd5edfbec738f526c6fbca54805f71f885bf289a6a154303d8f7debd48d2e3c3bab4fac5544c1593f52be1573ee62176"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 6m6.077137759s ago: executing program 0 (id=4057): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 5m51.076501692s ago: executing program 32 (id=4057): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1002, &(0x7f0000000440)=""/4098, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m36.329001304s ago: executing program 5 (id=6320): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001, 0xf53a}, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="6400000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140000000000500050002000000050001000600000080c6e5f0d64ffd5f5549438516a935481a3e9be1c445003c50c5547a07913040f7619bf272faba7afd7f348a64d580be8ab0382b4d101006500183feb59a4fdb9dbd6b77c9d61edf22857891de84eede"], 0x64}}, 0x40000) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x4010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131013710ff"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="19b800001000010400"/20, @ANYRES32, @ANYRES64, @ANYBLOB="af2c41469ca81b16d80e776fe9e2bc2163dc3c9cb58bac18a6210905"], 0x3c}}, 0x800) recvmsg$can_bcm(r6, &(0x7f0000000c00)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000240)=""/82, 0x52}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/181, 0xb5}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000000980)=""/130, 0x82}, {&(0x7f0000000a40)=""/11, 0xb}], 0x9, &(0x7f0000000b40)=""/144, 0x90}, 0x20) 2m35.343023904s ago: executing program 5 (id=6330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r0, &(0x7f0000000000)=@caif=@rfm, &(0x7f0000000080)=0x80) bind(r0, &(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x80) connect(0xffffffffffffffff, &(0x7f0000000140)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x16c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6ac9bf0ce994a50b}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r3, 0x0, &(0x7f00000004c0), 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000580)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r4, &(0x7f00000005c0)={@void, @void, @mpls={[], @ipv6=@tcp={0x4, 0x6, "e6db09", 0x10b8, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[@routing={0x0, 0xc, 0x0, 0xe9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}], {{0x4e23, 0x4e23, 0x41424344, r5, 0x0, 0x0, 0x14, 0x1, 0x5, 0x0, 0x8, {[@md5sig={0x13, 0x12, "d6641f602f3328afe459b8664dd9808b"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, 0xe4e0}, @md5sig={0x13, 0x12, "728c6de9493e4bdfec7ab8e25fd8681e"}, @exp_fastopen={0xfe, 0x4}, @eol, @generic={0x1, 0x9, "c45c4856f30f27"}]}}, {"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"}}}}}}, 0x10e0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000016c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0xda, 0xd4d9, 0x400, 0xd, 0x20, r2}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740), 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x60, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, {0x2c, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3ff}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x10}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xb, 0x2}}]}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) syz_80211_inject_frame(&(0x7f00000018c0)=@device_b, &(0x7f0000001900)=@ctrl_frame=@ack={{}, {0x5}, @device_b}, 0xa) sendmsg(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001940)="8a299b778192a864e457e12a2f5f741ef6b1337d64f67ca768f70236d81fdb895643adfb6dd4fd100b16c9653633a46a314ed3c164321552fcc1629e089f52bfadda4e22496761ce1d8cbee0b73651da8e9039d13146a07eacc0e999fe3dd6f0a85b4aa03ba99bd19a7ac5f77d5f52a2a161071e623a3a2bf1bcf7187de01d9979e6599d182cb4f0", 0x88}, {&(0x7f0000001a00)="9e01f0618d7a457c020b0244d566c826f982cdb9c673a69a152e125d94c6379088499299a07c485ad3a9cdc028fd5b524dd12341f007ca2905e113f1d4ebcfc3efc49ca4a8c76042b35044aa9d5a5c2798a968a7c5d9c5f497159e49e5439fe5a1f762ba2a75588d198dda8ae960915644aba82c8a5fe5c1141b3f88a08524e8c668b02b13b7311a707101bac20e47d6202720d27d5c32772b402396500bd2839e9829849faf7a7d30f595ec6e7d1adea03ec5fc", 0xb4}, {&(0x7f0000001ac0)="4dd75d6fbc5abb7490b9856d464fa23fb0a67dd0baec4a8745b0fe9444e8ef0d30e2ad9741517254ab0f3d114bf39ca8694b1fd8a1b31bfa065e505cca9717b4c79420e6523765749651a363e60ec54bf0b81329a9bf8a465b3d8f400262d1841de8b001dec1ecb759cdc2cb299d76800ea78e7bfdba292c8f1461e7be126568529d4ba54ed7356bf4e28888cfd0311b9f58289d3eee696980a6c2c1e07ab928268f28e766710ccf05b1f44fbbab83b68d000b276fbb99f13a74482a123d8f8254ea67d16ff9b51651168fc3abcebbfdd664f3287c098dc70802bd9220463196676e7d0b85150252b9616710a52ebe04961be6e7", 0xf4}, {&(0x7f0000001bc0)="26034ef1bfb13fe9c4f861701c574e8b633409265b92", 0x16}, {&(0x7f0000001c00)="59a56fb4044fb0d260904c6ef6d0783db6323825359e432bb2740f73b33b99228b95d8293fa949748b832e189aa2364aa3d61f1de9adc9e45f3c92f4c6fbe6eb752cc735384ff9c8139ff1f62293e9146d3a2075f8c74c48271374e01a91f30b554f2e517f8a81d650570a98bbd2f9c02049502a4c9734ee240d74b48a5f736c86b5d886d040932d8472c3a52248b78bb8b785dd8e356d1d078197244e5bbf352b32926cbccc3932c9877ead152f511ecbbc1368bb35f32a798406e1cb8f85ea56fdb828f96d5507642339d0b4b299", 0xcf}, {&(0x7f0000001d00)="77e4fd68d951b7cc9e623be7a67349b8b327a9df722aea62ca0ed67ff4b29cabb92fcc0e62fcc8fab1abe9269877dd853bfa06b7e0e2a8e0b252e6f1bac8e474e4f75489749998c9407782ad0192ad2733f3e744e61a4bd995e1f00f6d114eccb86e7a4a7ccc1223adb3b84a1cb37b996c0b8c67c8a8859d018e2850f033c3d29c848ff4c48a81980d3745c5d39abaeb0ada61424e91f826a8b8c9099f24ee02e770a2f2df2de58e69568c587a630c4021f2de67923a4d", 0xb7}, {&(0x7f0000001dc0)="4ba2143b01a69b2abe36b4297f27d5a9b4e794a843cce12f9d187bc95a96c29a8720dfdd1edc34712da98392008c52a84b8baf5fc55a371022e562833fdb6c", 0x3f}, {&(0x7f0000001e00)="f7d787a2a206ff2fd94aeaecab08a0e6cd383e2a55b5d366d159f87a8e7fddf40fcd03719f1998b5af77dcdfb285ba5936", 0x31}], 0x8, &(0x7f0000001ec0)=[{0xd8, 0x1, 0x9, "e979a9ec614457abf3bbce31f837a45d21a2ef912cd89d6101e2517c9b565c60bdb34368012b33b808ea96a07bb3e93a10af13042d34b3833191717f1b04e35ef3a20e1415ebb6c45a18cbfdb2abf994642f1f49d83287a1d340c6251acd060307be0289ccf3104079a56e010507995bf4632c2ab9c62c2619ec676ab114a604f9c2a21e3a2b5e0b9fa84cf177df69303b318d8a68c9dcd379b8ffc7c9701ef83d9dfb02e26341daf6e960a3dccf77dc2c7a2c352d4d2db4fcaf80d4ea0a240e7a454c"}, {0xa0, 0xb75842a8fb66c984, 0xdb0, "f624679e7e8c5f287346925d5dbcad92cd51587186f0c408e3eb4083d9da8f9edddb9c2a3a0095de5ce6d2e878fe5b8cc7b40b77013dc7108e5edf907a2177f2f1536e6300ea196d511948c3335432075810ba87f149a4bd9bcada3308493ab9974764278d20b553dc987a14810345c1c0ba0462afafe7648092938d3a7acdb0cc858b19eb9a51e5bc7b3afa73dd65"}, {0xf0, 0x1, 0x2, "2a48d95fee5b4588b10850b0b1ffe7f8855fbfbada9ae98a6a61747af67235a77096b9798e5ec85f4e16761db8a637ea726850d28f786d92802b65505c044d6bc83e428060d6a864bd1037b6eded3da31c457a58c9848740e6cb9e1a3814bdd0a6dbdc66635361b166f5a85810ca0963eb3a9221fbfaf3db9839a39f25288ae7aafbbcdd85925646b5e500b453d1f3a5fc6709de6f9d2a25fdbb7a491634070b066a64e8045103d852636b3d5c75d73373c162cf558d3ce6224b46eba28c1f6c81f292ad20003aa83edef3c61c9e5a90019c332c82d7b9968c57322a"}, {0xc8, 0x103, 0x0, "cb7b19f0861657821050e69330fd4b9f9099462e777a30f2fcd8774a6bf3aa81c31f8275b024dc5b1d2bbe7cc474b54abc023cf57152dbe5b8efe21bff3b6dc4d5f93a7e65a2afaaf56738e215d47d71bcbb015d2a8b086e6a91033d65027d890dd1c19f743d82e4a521ab8e635c4e66daaf22bf9a04aafd2eb7488b46806063df7ca313f658e0643ad7bc0d468e7a09585b730914e2836ed6a90b382b0900652a2e0d26c30b6801fb049fa9c2864ea48a94e4b0e7"}, {0x90, 0x104, 0x5a, "56a029f0a79644e803bb863f4ff3295f7e1e9e331454e1f97f8a4748f383e584614ec1c9d34bca0066ffde504f5ab3ce8c01af65e38a248245d185750ebb20b49433b79232c0dd1cb5be7bc0f04bed7c7f8791f2c4dd67106f2f770d51753d91e408a92e61949d4316213b7ec025b2dad3da0967f9c899f6e706"}, {0x98, 0x104, 0x7, "91072ec15169f79d03802f8490fe9c2e1589132b88fac51d8fa12d3e41461b48c5dcee2ae6cbfdb142677c6993f0b9a332f9acc0d06985ed51b893ef8bb873704c0491f5b3160845201b49ee4ade188decca160bab6d7587d4ec4269a771ea27cc88bb5948115b0abb826ef7aa5972762010b66cc442e129235df60848a51c66d4d0"}, {0x38, 0x29, 0x5, "60223f4328bb54148edf97eca2a355dac673c6f644df5d45e4b91c6944ed76c01d9af160eefbd5b2"}, {0xf0, 0x4, 0x75e, "63e4abe646b150ae00a967c8e823202263c5414fc6cfe3f3cf4f39b59a8431924662dfb123b42f4e95d0eeb40ac409b3e89ec0605b19b2ced084982229f8833a1e06e568066e5b998e8151d61a54995be7feb84cab9e8084b385979a63121b2bc3682f32c78470be9679b8d9c6a23037f15cc42a9ceb09a1de7f8d17d87f4c2efaa39c74962b8029c64c31bc80d7cf1643b3e4f04328c943bb3c97c07d448e834a0546a8fe6b049c75303af24c5c86765e88458f40b94aceb0f904b6d71852a63e788937a62b083f2011d1fe0d8154758816384ab1cb741897248c"}], 0x580}, 0x8840) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000002a00)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000029c0)={&(0x7f00000026c0)={0x2f4, r7, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x138, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0xe}, @broadcast, @device_b, @initial, {0x0, 0x7}}, @measure_req={0x0, 0x0, {0x7a, [{0x26, 0x71, {0x0, 0x6, 0x3, "4b4de8269733164891acfb33208d82b203ae26ffc28345872d3b25d08b5bebc975461ec36f0fde21c0f99bc54eb8776ab7b045c6f533c9427c831990d7211119edd4971d850ca49646a746b66bd2108e0701c6787df1dfb4d464a2ce13421ffa095a041cc6192be50709504b937c"}}, {0x26, 0xa4, {0xe, 0x2, 0xc, "a4448865c4bce1239e803ace4d7a94a34e5ed39f3f9b22b7dd2f1b902841bba880a6bdae278f258269858e0bb0e737185a0cccf0b483c457750ec270f5d1d7a7aebc2a1babffb3df097e0ce9a7c377f7c0fb77bd43f50716d17bd161fead105d1837c854df0f9c88c735d4679f688be4d6c40c61a0d714909fec9f0969a94f3a2a45b744a91fc842cb74cb97f1aa1afd55278e3ebd8483e2ec3b0c6d8a0f2e5097"}}]}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x6e, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @initial, {0x5, 0x39e}, @device_b, @void, @value=@ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x37, "f92447dd151bcce4b84863a21bef17909d6df78613c05eb6a4ab41f812e39f334743333fafef0e6ded549230e315e513562de48f5e6b2f"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x100, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @from_mac, {0x9, 0x498}}, 0x2008, 0x6, @device_b, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x9, 0x1}]}, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x1, 0x30}}, [{0xdd, 0xb1, "fdeb59c227ad995efb11e74613da5a572a6e075d3c395996822c0cde6b4922206c090a8be73637924ef1c7246d2d197bf283797de7fb693426ffd51568aa0601da0dd39f5c5693a1c1c88f4477467ccd5311ffb83651cd50d8d5f69755235826a3beea17ab8bd31ec34432cfd1b5ed719c55cffff124ba392d2bfc07eb1050c4c25631881b1e675c5cda8e1e08ac334ed2a3eedf8eb4f873217164e53d61661c22aa386a5a443c1741346bd7cba8c70d2f"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x5}, @broadcast, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) splice(r0, &(0x7f0000002a40)=0x4b5f, r0, &(0x7f0000002a80)=0x100, 0x3, 0xa) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000002ac0)) syz_80211_inject_frame(&(0x7f0000002b00), &(0x7f0000002b40)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xce0}, @device_a, @device_a, @broadcast, {0x4, 0x3}, @device_b}, @a_msdu=[{@device_b, @device_a, 0x73, "f3dfb16dc2268916ed6f1d3844c3b4ed2b61b6422226d1e838221080d1d292f496ff38904bc08728cb76ac6353b2f92623d4d43e4c4e5c029da1aa314add7651c2f4a3d931547da38d587f10bd2d2aaa5f021b172af40680d9a9125e438a88a3b30447b703994f58067aff6e6f7b2bfe787f46"}, {@broadcast, @broadcast, 0xca, "4d4ccfa660b46545e4f9a1cb82447181334297cbecfba59759d55d3c7d5d65d35f1a170961696f04a213843f74e2cba0637bf34019f85b0b0ce54ee3537229ff9516328bef4c38a1ca7b9d5f26e585f8cfc9941dfceb88b092a101fd0101b27343d73a19631a30dbea8fc0a34cd43140ded7e8af55bc087ab9380a6658c44de22f7fd1f9bd766cb02aee500702624a9296245e608ac7354e01b251ca19b92ad8b5fe61af8b3f81413d616e7973f421c00d19a8d5f52bb99755ea503bd794a6ec10a87c3509a06ac279a3"}]}, 0x17a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x3c, r7, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002e80), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x44, r9, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1d}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nr0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 2m34.448441034s ago: executing program 5 (id=6339): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m34.353110942s ago: executing program 5 (id=6342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfff8, 0xeaffffff}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) 2m34.168421355s ago: executing program 5 (id=6344): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc0c4) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x4c, 0x20, 0x2d2c6d60ea1da725, 0x2070bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0xcd, 0xff, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x840) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x7fffffffffffffff) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c2000000000010"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000040)=0x80000004, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='@}\\\x00', 0x200, &(0x7f00000000c0)={@align=0x4a4, {0x2, 0x0, 0x8, 0x8000000000000001}}, 0x9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7ff}) r5 = socket$inet6(0xa, 0x3, 0x8) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=r4, @ANYBLOB="9000000000fdff0008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4000880) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000071000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x600) setsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x38, r11, 0x4, 0x70bd27, 0x25dfdbeb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x800}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x40004) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x5, 0xa}, 0x80, &(0x7f0000000040)}, 0x200480c0) 2m33.959715587s ago: executing program 5 (id=6348): socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r1, r0, 0x0, 0x10000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, 0x0, 0xc0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, 0x0, 0x0, 0x4008001, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000008000000000000000f1f1d755999ea461a235f1e27edfa7667104080a144b047239756f011dce8d7da138c674aec396bab06d6ce32eb4484c76ac457b3e0d9517269b62dbd68bade0fcf9bbc4a7820b73b701ee96c213107babb8f0bb36527cefb7de060b8459242e"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000000010018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000680)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r8) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0xd, @local, 0x1}}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0x8fea}]}, 0x48}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@routing={0x87, 0x0, 0x1, 0x1, 0xfffd}], {{0xdc05, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m18.819855946s ago: executing program 33 (id=6348): socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r1, r0, 0x0, 0x10000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, 0x0, 0xc0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, 0x0, 0x0, 0x4008001, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000008000000000000000f1f1d755999ea461a235f1e27edfa7667104080a144b047239756f011dce8d7da138c674aec396bab06d6ce32eb4484c76ac457b3e0d9517269b62dbd68bade0fcf9bbc4a7820b73b701ee96c213107babb8f0bb36527cefb7de060b8459242e"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000000010018110000", @ANYRES32=r6, @ANYBLOB="0000cc27bc3b0b0aa845000014000000b7030000000000068500000086000000bf090000000000005509010000170000950000000000650d94fb01f1c1ff0000b702000002000096850000002a000000b70000000000004a885e2bc8afbd2182db73786952d7bd0795000000000000003d5a7850684a4d01de6e33bc3c4bd230e03a83dc71f4b0e34e76c173d0f296514cf2e33204bad358ce9ab105f28f14aa4dcfa14a00b930bd3425a2f24e33a10f9f2fb4bbeae6f8eb2798b94797df6272fb4910cb7bb83fb8b3c7a12ef6d5131d03304b34d87c7575033e1ac5c3252c5d04ab6a1f40a6e3f85db3d3f62690fa90ef6f4304856586338c7e71dcd99b3054ca2952a5cbbaaab41b69abde3209742da8e8f055942eec2697039c695f04ea91e301831b7154253afb6ddb5bdb21f612227d0e3ba5d350b928a22dfa5ed8db0ebc2ed088b4f31668"], &(0x7f0000000680)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r8) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0xd, @local, 0x1}}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0x8fea}]}, 0x48}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@routing={0x87, 0x0, 0x1, 0x1, 0xfffd}], {{0xdc05, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 8.652932247s ago: executing program 1 (id=7696): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81001d0086dd60f7000000242c00fe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000870090b2696a75000000000000000000000000012200040002001800"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/943], 0x264) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xe, 0xc208, 0x6, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 7.679061561s ago: executing program 1 (id=7701): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e", 0x0, 0xfffff1dc, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030005003c00000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200"], 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="83000400000000002000128008000100736974001400028006000d000900000008000300e0000001", @ANYRES16=r0, @ANYBLOB="3ea460a74acf3302d06f6bb4d46f83fdf28868c680e7bfb2d9349cad2dfc13de56f350683ec31d316de03567a91a302386ed590017f44259f13643f62f3bfd6b5f4ac86b73e57cff7b0051ede48eaf00daa281359ef5a3e80bc2515f84bf705b66fc948f7167d62e6085a7447685f040b3f09d60f0d7242f7f17b3b2a9b0960be115a58b3a80967fa645370e6db96ab6298e4d8fbd12ce20929e370384dbc1a6f80338f380cc17f1"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$phonet_pipe(r3, 0x0, 0x0, 0x80800) sendmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000000100a9850a4b963e"], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x10000000, 0x407}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000100)={r8, 0x100, 0x12}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b51200000600020000080000060003"], 0x60}}, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 6.669262732s ago: executing program 2 (id=7705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fe0000000000000001020000850000002e000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 6.568296693s ago: executing program 2 (id=7707): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000400)='\x00\x00\x00\x00\x002x\x03\xc1\x9f\n\xcb\x85\x1bm\xb7\xa1\xd6\xf1T\x00\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002d2d73353a5f2d5d482ee5364c4323843c00040067636d286165732900e8feffff00000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6667168d89811dd3c5fc018aa2bef315c0f4028bd922ebd268ccb40285c1ca168"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRESDEC=r1], 0x5e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x8}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r8}, 0x10) sendmmsg$sock(r7, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a1070000000000feffff7f01000000020000000100003f420f000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000feffffffffffff7f00000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000005060104000500000000007c7a3000f8ff03"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) sendmsg$sock(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)}], 0x1}, 0x40080c4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b0000000600000a0000010a000002005000500000000200000002601003e80000000001000101", 0x2e}], 0x1, 0x0, 0x0) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000180)={r11, 0xda0, 0x14, 0x3, 0x5, 0x2f33, 0x1, 0x1ff, {0x0, @in6={{0xa, 0x4e23, 0xc, @private2, 0xd6f4}}, 0x99fb, 0xb, 0x7fc, 0x7, 0xfffffffd}}, &(0x7f00000003c0)=0xb0) sendto$inet6(r0, &(0x7f0000000540)="de49f3d0372a3447f35d6183fca2f2ee81ec8fe7d8d510cbd693818d68bbe1cabf9a6d8a9a478e47800df8f7f87b9c5cbadb9c6cce213022c7bdd9af7fd36116445fc03b90441f3a6147eafcbdbc6f281447c7bd4374288d9eb87ac4571af6b818b646a0ec2761d862fdf21e2d3213a10566a3b820d37a2349a74977a720cafce79c462cad14d93c2c1c42006421ad5e2395d22267b07b70b7f07b14bc92d3b97a3e53c4364c0a5eb55931a974105ffb92590c7ed0327f7d655d3da01801463d246a056d1c22e8ea", 0xc8, 0x8181, &(0x7f0000000640)={0xa, 0x4e23, 0x3, @mcast1}, 0x1c) 6.449073108s ago: executing program 4 (id=7708): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002700)={0x0, 0x1c2}, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000b340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x0, 0x1, 0x800, r3, 0x2a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f000000d440)={0x0, 0x0, &(0x7f000000d400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25020000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="1036a2f23a15eb836cd891482bfe4adf04c100c2a0912c605a035ba38facbbbb67a447bc8bda8a31987003ab67b0a9a79a5bdaaf589eb039e8fac6d333d06e00ed6da6519637d623f6f7db4b0ef224539b7621f15e1d7b5d488fe1647fc157e27fe57f"], 0x20}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'rose0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x4c}}, 0x200040cc) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000c000000140003800400040008000200fd7f010004000100180001801400"], 0x40}}, 0x0) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) unshare(0x22020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) 2.714207284s ago: executing program 4 (id=7710): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) writev(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb8bc895583d", 0x1d}], 0x1}}], 0x1, 0x22008805) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 2.663689631s ago: executing program 1 (id=7711): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x7) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r2, &(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x200, &(0x7f0000000100)={@align=0x6, {0x5, 0x5, 0x6, 0x3e}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x5}, {[0x7ff, 0xd, 0xa, 0x5]}, 0x10, 0xfe, &(0x7f00000001c0)=""/254}) ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000000340)={0x2, 0x0, 0x8, 0x8, 0xee, 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'ip_vti0\x00', 0x10}) (async) getpeername(r0, &(0x7f00000003c0)=@pppoe, &(0x7f0000000440)=0x80) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r2) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x2400c011) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000001840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000000640)={0x118c, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2bf, 0x2f}}}}, [@NL80211_ATTR_TESTDATA={0x30, 0x45, "b8717fd2fb374a7217fd8f77d4419f65b1ef22a41932f01f756aabc690866c8b90a5ca4856393f921dc59717"}, @NL80211_ATTR_TESTDATA={0x62, 0x45, "68eb2cd9548f147c77a482e009f8d19fd705a8155e4961206fd452959fab86f24c11de5b49aa78a08d4c8d492e181cd243fb0c00c37009cee6138a287944183646a3aaf3d643946cbdcadc8f72359ad5af72377c29cadcbd9a6d59bf034f"}, @NL80211_ATTR_TESTDATA={0xd3, 0x45, "945cd7b0e8e8a31e645667f86d0dbba0983086ec6d9f90ec39d429a4dd09c295c7cf0c088becb1721cfcea73374a9af4d89f01d9758276df0069a993887009facf1701383d1ca74a565e533699d8bd232e9ea383838110f33f30699c9e9433dfc57ebe3bc9133ca325dbcd86d1c426970bac54466027ad30d6f603025578916f4f7081a82edb9c3c3308d139cc5a17cd1670c37263e1a0c360e14e7bcc7c7dbf208f99b47fdcd8df2060bbb038eda040a30acbbf822d65d5030f098144aec3d87daec2fab1d9f7e9493cd050626b9a"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x118c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001880)={0x0, 0x2}, &(0x7f00000018c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001900)={0x2, 0x4119, 0x8001, 0x3, 0xa22, 0xee2e, 0x9, 0x5, r6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001a40)={'ip6tnl0\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x4, 0xdd, 0x8, 0xf, 0x31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x1, 0x4}}) sendmmsg$inet(r2, &(0x7f0000001b40)=[{{&(0x7f0000001940)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001980), 0x0, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@generic={0x89, 0x12, "5dabbe1b7e6556a2d21f6abbb51d2031"}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xb1, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x70, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @end, @cipso={0x86, 0x6, 0x1}, @ssrr={0x89, 0x13, 0xdc, [@remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xa8}}], 0x1, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001bc0)=@generic={&(0x7f0000001b80)='./file0\x00', 0x0, 0x10}, 0x18) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001c00), 0x8) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000001c40)={'batadv_slave_0', 0x32, 0x38}, 0x11) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000002fc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f80)={&(0x7f0000001cc0)={0x12b4, 0x0, 0x5, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0x1}, 0x0, 0x8, 0xf9, 0x7ff, 0x11, 'syz1\x00', "2d44fdac4f62de7be744d33ac44752dc2672b768e4d0517afce37ec6df98784d", "56a8de2de5d3192927974360f335c4a2c912e288a6177d4aafb0d4751c8a2330", [{0x7, 0x7ff, {0x0, 0x9}}, {0x2, 0x1, {0x0, 0xf}}, {0x3, 0x4, {0x0, 0xffffffa6}}, {0xc944, 0x5, {0x1, 0x200}}, {0xfffe, 0x8001, {0x3, 0x1}}, {0x8, 0x9f, {0x1, 0x3}}, {0x0, 0x5, {0x1, 0x2}}, {0x5, 0x8280, {0x0, 0x5}}, {0x5, 0x8, {0x2, 0x2}}, {0x9, 0x5, {0x3, 0xfffff800}}, {0xe6, 0x6b80, {0x2, 0x10}}, {0x40, 0x6, {0x3}}, {0x1, 0x4, {0x2, 0x17}}, {0xff, 0x4, {0x1}}, {0xff, 0xfffe, {0x3, 0x80}}, {0x1, 0x3, {0x2, 0x1}}, {0x690, 0x81, {0x0, 0x7ff}}, {0x3, 0x4, {0x3}}, {0x9e3, 0x0, {0x2, 0x4}}, {0x9, 0xa, {0x0, 0xffffffff}}, {0x5, 0x3, {0x3, 0x200}}, {0x5, 0x7, {0x1}}, {0x8001, 0x6, {0x2, 0x3}}, {0x401, 0x800, {0x3, 0x3}}, {0x7fff, 0x6, {0x2, 0x2}}, {0x1, 0x400, {0x0, 0x80000000}}, {0xbd68, 0x9, {0x1, 0x21}}, {0x100, 0x5f24, {0x1, 0x4}}, {0x3, 0x8, {0x2, 0x2}}, {0x9, 0xe, {0x2, 0x4}}, {0xb41, 0x7, {0x2, 0x9}}, {0x1, 0x7, {0x3, 0x8}}, {0x81, 0x7fff, {0x3, 0x101}}, {0x7, 0x5, {0x0, 0x5c}}, {0x4, 0x4, {0x2, 0xa8}}, {0x8001, 0xcc4, {0x2, 0xfff}}, {0x8, 0x8000, {0x1}}, {0x7, 0x8000, {0x3, 0x6}}, {0x24, 0x8, {0x1, 0xe}}, {0x8, 0x5, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0xc1, 0x1, 0xfffd, 0x91bf, 0x6, 'syz0\x00', "dd56253a9680087e0ee1772c39e9eb64538ed64e6773fd6559d3edcd344209c6", "4724c9a4ada0597c4eee3bcdb4f2ce5d53bfe756377176d14a55380b4fd297b9", [{0x0, 0xfff, {0x0, 0x7}}, {0xfff8, 0x6, {0x2, 0x7}}, {0x8001, 0x5, {0x3, 0x9}}, {0x5, 0x1, {0x1, 0x7}}, {0x2, 0x50, {0x1, 0x7}}, {0x3, 0x1, {0x1, 0x1000}}, {0x9, 0xffe, {0x2, 0x5}}, {0x2, 0xd8d4, {0x0, 0xffffff4e}}, {0x5, 0x9e5, {0x0, 0x1000}}, {0x2, 0xbf0, {0x3, 0x8}}, {0x1000, 0x9, {0x3, 0x8a6}}, {0x4, 0xe, {0x2, 0x6}}, {0x10, 0x2}, {0x0, 0x7, {0x0, 0x7fffffff}}, {0xfff7, 0xffff, {0x1, 0x1000}}, {0xc, 0x4, {0x0, 0xa4}}, {0xff, 0x2, {0x3, 0x1}}, {0x2, 0x6, {0x2, 0x6ece}}, {0x1, 0x9, {0x0, 0x7}}, {0x2, 0x8, {0x2, 0x1}}, {0x0, 0x82, {0x1, 0x2}}, {0x2, 0x4, {0x1, 0x7}}, {0x5, 0x7, {0x3, 0x2}}, {0x4, 0x0, {0x0, 0x3}}, {0xfe00, 0xfff8, {0x2, 0x8001}}, {0x81, 0x7, {0x0, 0x9}}, {0x400, 0x3, {0x0, 0xfffffffc}}, {0x3, 0x8001, {0x0, 0xa}}, {0x7, 0x7, {0x3, 0x342}}, {0xf000, 0x6, {0x2, 0x5}}, {0xf9, 0x101, {0x3, 0x4c}}, {0xd000, 0x0, {0x3, 0x21f7}}, {0x8, 0xae3, {0x3, 0x10000}}, {0xfffb, 0x8, {0x0, 0x5}}, {0xa4, 0x7, {0x2, 0x4}}, {0x6, 0x0, {0x2, 0x1}}, {0x3, 0x0, {0x2, 0x8}}, {0xfffa, 0x8, {0x2}}, {0x4800, 0x2ca2, {0x1, 0xf651}}, {0x7, 0x0, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x800}, 0x5, 0x81, 0xfff7, 0x9, 0x8, 'syz1\x00', "f88c8fff95f7dc56bac8dfa726701b30384001a19cec04261e04d9bdc9c42e5c", "98d4ddb1524ddb53b0a89e51e28c6c7faf56cfeeed8c1218c35802a4329000e2", [{0x1, 0xff17, {0x1, 0x8000}}, {0x40, 0x8000, {0x0, 0x2}}, {0x8, 0x1ed0, {0x3, 0x4}}, {0x400, 0x1, {0x0, 0x8001}}, {0x10, 0x7, {0x0, 0x3}}, {0x7ff, 0x5, {0x1, 0x8}}, {0x9e71, 0x8, {0x3, 0xb0000000}}, {0x3, 0x5, {0x1, 0x8}}, {0x2, 0xf857, {0xa399170882863f92, 0x7}}, {0x8, 0x197b, {0x3, 0xf}}, {0x1, 0x93f8, {0x1, 0x10}}, {0x9, 0x7fff, {0x1, 0xbba}}, {0x80, 0xffff, {0x2, 0x2}}, {0x2, 0x100, {0x3, 0x8}}, {0x1, 0x1066, {0x2, 0x8000}}, {0x0, 0x8, {0x0, 0x11}}, {0x4, 0x4, {0x2, 0x80}}, {0x1, 0xd, {0x0, 0x6}}, {0xa, 0x0, {0x2, 0x7b446194}}, {0x81, 0x6, {0x2}}, {0x3, 0x3, {0x2, 0x1}}, {0x9, 0xffff, {0x2, 0x9}}, {0x6, 0x5, {0x2, 0x3}}, {0xab97, 0x4, {0x3, 0x80000000}}, {0x5, 0x5, {0x1, 0x3}}, {0x8, 0x9, {0x2, 0x51ee7b29}}, {0xb, 0x7, {0x0, 0x1000}}, {0x9, 0xd, {0x1, 0x5}}, {0x1, 0xf689, {0x1, 0x4}}, {0x8, 0x0, {0x0, 0x48e}}, {0x8, 0x5, {0x0, 0x12e2}}, {0x3, 0x6, {0x0, 0x4}}, {0x0, 0x7ae}, {0x74, 0x8, {0x3, 0x5}}, {0xc71, 0x9, {0x1, 0x5}}, {0xd5b9, 0x6, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0xfffffffc}}, {0x3, 0x0, {0x0, 0x3}}, {0x6, 0x101, {0x2, 0x80}}, {0x45e, 0x2, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xfb, 0x4, 0x8, 0x2, 0xb192, 'syz0\x00', "eef9cfc1749eecea41a7edda21b98edd16ff3be9d49f3c2bba25a56126850878", "0c9ba033bd1818541888e9a9fcb066bb7527253c9cef804a84de201f63990c21", [{0x764, 0x3, {0x0, 0xa0}}, {0x3, 0x40, {0x1, 0x6}}, {0x4, 0x6, {0x0, 0x800}}, {0x1, 0x7, {0x2, 0x6}}, {0x1bd, 0x0, {0x2, 0x4}}, {0x6, 0x9, {0x3, 0x4}}, {0x8, 0x4, {0x1, 0xffff}}, {0x4, 0x3fa, {0x3, 0x8}}, {0x5, 0x4, {0x2, 0x7}}, {0x9, 0x80, {0x0, 0x5}}, {0x0, 0x2, {0x0, 0x5}}, {0x9, 0x1, {0x3, 0x2}}, {0x8, 0x5, {0x1, 0x7}}, {0x8, 0x6, {0x1}}, {0x1, 0x4, {0x3, 0xffffffff}}, {0xfffd, 0x9, {0x0, 0x2}}, {0x3, 0x7, {0x2, 0x1}}, {0x3, 0x6, {0x2, 0xfffffff2}}, {0x0, 0x3, {0x3, 0x1}}, {0x1000, 0xc, {0x0, 0x93c9}}, {0x0, 0x0, {0x1, 0xfffffff8}}, {0x2, 0x7fff, {0x0, 0x4}}, {0x79e, 0x1, {0x3, 0x6}}, {0x81, 0xd, {0x2, 0xfffffffe}}, {0x9}, {0x6, 0xd9f, {0x3, 0x11d9}}, {0x81, 0x9, {0x3, 0x2}}, {0xdc1, 0xd4d5, {0x3, 0x8}}, {0x1, 0x2, {0x0, 0x3}}, {0x8, 0x1, {0x2, 0x2}}, {0x2, 0x2, {0x3, 0x8}}, {0x8, 0xd, {0x0, 0x6}}, {0x1000, 0x0, {0x2, 0x5}}, {0x6, 0x4, {0x1}}, {0x4, 0x10, {0x3, 0xff}}, {0x0, 0x81, {0x3, 0xc}}, {0x81, 0x7, {0x0, 0x990}}, {0x45be, 0xc22, {0x0, 0x100}}, {0x99e, 0x80, {0x0, 0xfffffff9}}, {0x89, 0x7, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0xf8, 0x9, 0xfffc, 0x4, 0x23, 'syz1\x00', "97022cb0d4f68db05c911bd99ca228f15c2319f780ee63cf8a0da83877d0df2d", "772090ee279ece5f51f371a9e8aac6e2324f3a76cf247527b736df8c2e18f88f", [{0x9, 0x3, {0x2, 0xffffffff}}, {0x3, 0x4, {0x0, 0x1}}, {0x2, 0x6ef3, {0x3, 0x2}}, {0x81, 0x5, {0x1, 0xb6}}, {0x3, 0x2, {0x1}}, {0x2, 0x6, {0x2, 0x8000}}, {0x7, 0x3ff, {0x2, 0x2}}, {0x400, 0x5, {0x3, 0xab54}}, {0x40, 0x0, {0x0, 0x3ff}}, {0x8, 0x400, {0xd17ef9410dae9cf3, 0x401}}, {0x8, 0x8, {0x3, 0xb}}, {0x8, 0x4, {0x0, 0x6}}, {0x2, 0x5928, {0x0, 0xb}}, {0x1, 0x4, {0x1, 0x6}}, {0x8, 0x40, {0x1, 0x7fff}}, {0x8, 0x3, {0x2, 0x2}}, {0xa751, 0x84, {0x3, 0x9}}, {0x4, 0x6, {0x1, 0x1ff}}, {0x81, 0x31, {0x1, 0x4}}, {0x6, 0x400, {0x0, 0x1ff}}, {0x4, 0xe6, {0x0, 0x7}}, {0x6, 0x7f, {0x3, 0x502ff112}}, {0xd, 0x6, {0x2, 0x10}}, {0x4, 0x5, {0x1, 0x1}}, {0x9, 0xa, {0x1, 0x8}}, {0x1000, 0x1, {0x0, 0x4}}, {0x9, 0x5, {0x2, 0x7}}, {0x100, 0x7, {0x3, 0x4}}, {0x0, 0x3, {0x3, 0x9}}, {0xfff4, 0x1, {0x1, 0x2}}, {0xa1, 0x0, {0x1, 0x547d}}, {0x1, 0xfff9, {0x0, 0xffffffff}}, {0x2, 0xa, {0x0, 0x2}}, {0x6, 0x7, {0x1, 0x6}}, {0xf, 0xe, {0x2, 0x3}}, {0x1000, 0xdc55, {0x2, 0x40}}, {0x8001, 0x7, {0x0, 0x69}}, {0xd, 0x5, {0x2, 0x6}}, {0x66, 0xf801, {0x0, 0xf}}, {0x8, 0xe, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x7e80}, 0x0, 0x5, 0x6d, 0xef, 0x20, 'syz1\x00', "95f80186299ac6d3fc6f0056a8ebef1abbe1a5e4037dd7e9dae9366b9a8845dd", "2dd9602d6a90fccb51048d54d0d5649ce9fceec6612c11ff558ae8743595ea54", [{0x3, 0xc, {0x1, 0x859}}, {0x1000, 0xa, {0x3, 0x5}}, {0x3, 0x101, {0x3, 0x8}}, {0x8, 0x10, {0x0, 0x4}}, {0x200, 0x0, {0x2, 0xfffffffe}}, {0x69, 0x0, {0x1, 0x6}}, {0xfff, 0x1}, {0x9, 0x81, {0x2, 0xaf92}}, {0x8, 0xfffa, {0x1, 0x924}}, {0x9, 0x7f, {0x0, 0x6b}}, {0x800, 0x32f3, {0x1, 0x6}}, {0x963a, 0xfff, {0x1}}, {0x9a3, 0x1, {0x2, 0x3}}, {0x7, 0xfbf, {0x0, 0xf}}, {0x5, 0x5, {0x7b08d9f35cef9a30, 0x6}}, {0x9, 0x4, {0x0, 0x6d9}}, {0x3, 0x0, {0x1, 0x7b}}, {0x8, 0x6, {0x3, 0x7}}, {0xc962, 0x3, {0x0, 0x6}}, {0x8001, 0x80, {0x1, 0x99}}, {0x96e6, 0xf9a, {0x1, 0x1}}, {0x3, 0x200, {0x3, 0x3}}, {0x4, 0x6, {0x1, 0x9}}, {0x5, 0x75, {0x1, 0x2}}, {0xf111, 0x8, {0x0, 0x1}}, {0xf001, 0xa731, {0x1, 0x9}}, {0xf, 0x7328, {0x0, 0x8}}, {0x6, 0x4, {0x1, 0xffff}}, {0x100, 0x0, {0x0, 0x101}}, {0x29, 0xf, {0x2, 0x9}}, {0xc04, 0x6, {0x2, 0x100}}, {0x1, 0xe0, {0x2, 0x7}}, {0xd, 0x1ff, {0x1, 0xb}}, {0x3, 0x0, {0x0, 0x1000}}, {0x2, 0x2, {0x0, 0x10}}, {0x5, 0x4, {0x0, 0x1}}, {0x0, 0x1, {0x3, 0x4}}, {0xc41, 0x4, {0x2, 0x1}}, {0xe34, 0xfff7, {0x3, 0x8000}}, {0x8, 0x101, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x3}, 0xf7, 0x9, 0xf, 0x3, 0x25, 'syz0\x00', "1b228d8631a4847e4a3f0da04fd40e2e31274eb609322ac0c326c2c0eb855272", "51ccb88d34718809ec2ffc442cc7477564733beca85dc8cc971cdf9a4a5e463f", [{0x10, 0x6, {0x1, 0x3}}, {0xfff, 0x5, {0x1}}, {0x5, 0x9, {0x3, 0xf}}, {0x5, 0x95a, {0x4, 0x8}}, {0x4, 0x1, {0x1, 0x7}}, {0x904d, 0x400, {0x2}}, {0x1, 0x9ee, {0x3, 0x10001}}, {0x7ff, 0x1, {0x0, 0x9}}, {0x6, 0x8001, {0x2, 0x9}}, {0x81, 0x0, {0x0, 0x10001}}, {0x8fcc, 0x7, {0x2, 0x7}}, {0xf9fd, 0x1ff, {0x0, 0x6}}, {0x5, 0x6, {0x2, 0xf}}, {0x7, 0x1000, {0x3, 0x6}}, {0x8, 0x0, {0x0, 0x2}}, {0x86, 0x4, {0x2, 0xedf1}}, {0x4, 0x4, {0x3, 0x4}}, {0x4, 0xff, {0x3, 0xcc5}}, {0xa, 0x1, {0x1, 0x4}}, {0x40, 0x239d, {0x2, 0x400}}, {0x9c0, 0x6, {0x0, 0x6}}, {0x9, 0xfe, {0x1, 0x1}}, {0x7, 0x8, {0x3}}, {0xfff, 0x4000, {0x2, 0x9}}, {0xf68, 0x4, {0x0, 0xfffff78b}}, {0x2, 0x40, {0x1, 0x6}}, {0x3ae, 0x5, {0x1, 0x2}}, {0xb673, 0x1}, {0x3, 0x1, {0x3, 0xfffffbff}}, {0x4, 0x2, {0x1, 0x5}}, {0x9720, 0x1, {0x0, 0x3}}, {0x5, 0x1, {0x1, 0x9}}, {0x8, 0xc26d, {0x2, 0xdb00000}}, {0x9, 0x7, {0x0, 0xff}}, {0x7, 0x8, {0x2, 0x85}}, {0x20, 0x80, {0x2, 0xebc3}}, {0x1, 0x1, {0x0, 0x7}}, {0xc, 0x2, {0x3, 0x7ff}}, {0x1, 0xe58, {0x1, 0x1}}, {0x2, 0x1, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x3, 0x2, 0x0, 0x80, 0x19, 'syz1\x00', "66c4acc4b3094aa100c62ad85e7421e116842a6971509174b7f134b879746a6a", "2275d8483e491f9958068e9a15f6c400d84fd7625074ddff37039cc0e4b4327c", [{0x9, 0xa35, {0x1, 0x6}}, {0x6, 0x8, {0x1, 0x2}}, {0x7, 0x9, {0x0, 0x7}}, {0x0, 0x582c, {0x2, 0x6}}, {0x0, 0xff01, {0x0, 0x3}}, {0xfffb, 0x1ff, {0x3, 0xffffc000}}, {0x80, 0x8, {0x3, 0x80}}, {0x0, 0x3, {0x0, 0x4}}, {0x5, 0x800, {0x0, 0x6}}, {0x8, 0x9, {0x2, 0xfff}}, {0x9f, 0x0, {0x1, 0xffff}}, {0x3ff, 0x4, {0x0, 0x4}}, {0x349, 0x9, {0x0, 0x7}}, {0x0, 0xc00, {0x1, 0xb52}}, {0x1, 0x0, {0x1, 0xfffffffc}}, {0x8, 0x2, {0x2, 0x5}}, {0x4, 0x3, {0x3, 0x401}}, {0xc, 0x6, {0x3, 0x7}}, {0x4, 0x9, {0x3}}, {0x69, 0x5, {0x3, 0x5}}, {0x1ff, 0x4, {0x0, 0x3}}, {0x401, 0xb, {0x2, 0x6febabb6}}, {0x8001, 0x6, {0x0, 0xc1d}}, {0x7f, 0xff, {0x0, 0x1}}, {0x2, 0xd1a5, {0x0, 0x1}}, {0x8, 0x8, {0x2, 0xfffffff7}}, {0x8, 0x9, {0x1, 0x6}}, {0x9, 0xda, {0x1, 0x1}}, {0x0, 0xab6f, {0x2, 0x1}}, {0x90, 0x4d75, {0x1, 0x2a}}, {0x10, 0xfffd, {0x1, 0x9d5a}}, {0x6, 0xb6, {0x0, 0x4}}, {0xc, 0x3e3, {0x0, 0x9f1}}, {0x6d4, 0x7fff, {0x3, 0xb6d9}}, {0x3, 0x9, {0x2, 0x9}}, {0x7000, 0x2, {0x1, 0x117}}, {0x1, 0x8d, {0x3, 0x1}}, {0x81, 0x9, {0x0, 0xa167}}, {0x8, 0x2, {0x3, 0x8001}}, {0x4, 0x0, {0x1, 0xd14}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x28004844}, 0x48000) (async) getsockname$packet(r2, &(0x7f0000003000)={0x11, 0x0, 0x0}, &(0x7f0000003040)=0x14) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000003080)) (async) sendmsg(r1, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000030c0)="b21f73d1ba5f7febb064f34f5e539afa5300db78d0acaed300ec70555a7c19f5f1829a2146f24852b2aa717de04918d3dbe69969f848acb4c9e70fcd50d91f70b4b689523945277c216b0dc53c2d15a53fd7027119fbc3cb906d", 0x5a}, {&(0x7f0000003140)="43bcb9526c509b633ce25c62b4721f65c604ea232a39f64ef6c11d591313fa23bcc2bdfa6e1f5483cff9a9dd571e934dea1f87bc4a3fab15af7557cef90673b638b6d7bbe3d1ec2c8f90df1b2126992edd82d6b8d5663745982b4095d259771841f10dc39a2b0a", 0x67}, {&(0x7f00000031c0)="ff79d22a11036c28a93c15d6d50ee5a6388b27981363c0da5c25a6424492707418d501a17d2e31bb712e0bbf1ee32ad6b012a70666e95e0551c2e816e887674669ef610e83cd3d41afdee87f39cf746dba8de1a4c0c4f70aa1ea4bfc5922f79906bd3a77e76736c81d93d3a73c49f1e75eb4368b9146f4a9f24a9940d356e40a", 0x80}, {&(0x7f0000003240)="42bd86c57853f7d0f424b61c1f51339744a11d476169db70d137a602f8296194d050f73cb452e65c0fe7475d5695fc316ecaaec73481fc3a655e9094fbd46d4401a0", 0x42}], 0x4, &(0x7f0000003300)=[{0xf0, 0x110, 0x0, "c0efa4f2ca5a8bc8adaa1f903fabc47cdd82c0bca10e8941993aaa6ed5d12ea1d59fb8a6b20cf2710e607507d6208eddd5dbd9bb757fd78346daa3a10acba64b32e6929841716102f6757f2aeca9728e89c959fee0083ac06c16bf17a97b89c45c9dfc1e0b57a145575fda6fb27c7d9ea0b6c9ca7f195d41a4f72e1a795c7ea187c219c6594e295707d7aad372a469c1fe51f779115cc2296a0d093d273780401636e34d46e69125ec107ef9d23a483d5e5c3a1810ca9932517367b888b7bfd76cb05846a31f2a726aa2ae843607cfb527e6a3f5b741b56ab6e8a1"}, {0xe8, 0x119, 0xf2b, "817d56d990af093f6eaf4f13c79a106896a35da73c48c5bb7d1252795e705a3030859f1bd5bb41b9e8852cd107709a62ca1fc31a530a3c31e88dea04785b60f591359ee6503133e313f4047eab9d2f1dab05af6bc8f379a1f0d0ff957e337a46a29b5d729bb3a8fe6ac5347db8c82dab41a18b2e9f44776c95fd7f92b5b7c31e9158434ea78897abeaf6ccd9a1e10f76ab8ea5729af2114ff818cf0bbc8cddf86caed6019b78d551cc99c685ef038a3e2edce59079aa2f905a11b5b7536e81696bae9f7ab23f0d81e294641408b8149ce50af4a9"}], 0x1d8}, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003580), r3) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003680)={'syztnl1\x00', &(0x7f00000035c0)={'gre0\x00', r7, 0x8000, 0x0, 0x7fff, 0x6, {{0x19, 0x4, 0x3, 0x5, 0x64, 0x66, 0x0, 0xc, 0x29, 0x0, @multicast1, @remote, {[@rr={0x7, 0x1b, 0x10, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @multicast2, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x74, 0x3, 0x0, [{@multicast2, 0x2}, {@broadcast, 0x1}, {@remote, 0x9}, {@empty, 0x9}, {@broadcast, 0xad3}, {@private=0xa010102, 0x8}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000037c0)={'gretap0\x00', &(0x7f00000036c0)={'ip_vti0\x00', r9, 0x700, 0x8, 0x4, 0xe9, {{0x37, 0x4, 0x1, 0x4, 0xdc, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x12, "92fc6a9de8a499f8ca901dc53e691dc9"}, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x5, [0x0, 0x6, 0xfffffff9, 0x800, 0x8, 0x3]}, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xaac}]}, @timestamp_prespec={0x44, 0x54, 0xc3, 0x3, 0x5, [{@multicast1}, {@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010101, 0xffff}, {@broadcast, 0x1}, {@remote, 0x7}, {@multicast1, 0x4}, {@multicast2, 0x80}]}, @ssrr={0x89, 0xf, 0xeb, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x4, "e777"}, @rr={0x7, 0x1b, 0x9f, [@private=0xa010102, @rand_addr=0x64010102, @private=0xa010102, @private=0xa010102, @local, @local]}, @rr={0x7, 0x7, 0xfc, [@local]}, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000003ac0)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003800)={0x27c, r10, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x158, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x532}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28e1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e4f}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x514}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x45af}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71a}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$*\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5791fd1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x20044010}, 0x1) getsockopt$sock_buf(r8, 0x1, 0x0, &(0x7f0000003b00)=""/83, &(0x7f0000003b80)=0x53) 2.563121652s ago: executing program 2 (id=7713): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x18, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96d", 0xe}], 0x1}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xe0, r14, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}]}, 0xe0}}, 0x40000) 2.465670036s ago: executing program 6 (id=7714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000fffffffffffffffe0000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.395248296s ago: executing program 1 (id=7716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x2c020400) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0xffffffffffffffe3) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x3}}}}]}, 0x40}}, 0x4000010) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x20) close(r3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x70b0, 0xe3b3}, &(0x7f00000002c0)=0x8) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffff7f000000d84cf258e3ce43455d657ef8ce84537ba0b3ff389e48ab5394bfbe39759f7c2940bec8ca80a22a3258"], &(0x7f0000000440)={0x0, 0x2, [0x66c, 0xdc5, 0xe81, 0x8ee]}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.233176487s ago: executing program 3 (id=7717): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x110}, 0x90) 2.125181448s ago: executing program 6 (id=7718): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xfdffffff}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0, 0x0, 0x0, 0x1100}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 1.93219144s ago: executing program 3 (id=7719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100eaf7ffffffbfa400000020000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.914241628s ago: executing program 6 (id=7720): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x31, 0xffffffffffffffff, 0x8269000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.656333652s ago: executing program 3 (id=7721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x20040054) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000300)={0x10000000}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x40600) shutdown(r7, 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x80002005}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000f6fffdfffdff850000009c0000009500000100000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18}, 0x94) 1.655175726s ago: executing program 2 (id=7722): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000000000000954bc47e0e249c5e5d12fc93991fa2945e60b962944968320e7d6f76ff1f3d74048fe9726e07aa71b347f698140f36c4c49772aefb3532ef149d6674970086d2d2a0216b9529b4714ebb946a303363"], &(0x7f00000002c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0x0, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x8fe, 0x4e21, 0xb0, 0xa, 0x80, 0x40, 0x1d}, {0x6, 0x47c5, 0x1a6c, 0xff, 0x8, 0xe26d, 0x63c6, 0x401}, {0x4, 0x1, 0x8000, 0xc96d}, 0x3, 0x6e6bb7, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@local, 0x3503, 0x2, 0x1, 0x0, 0x1, 0x2000000, 0xffffffff}}, 0xe8) recvfrom$inet(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611201f90000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000100)={0x18, 0x2, {0x1, @remote}}, 0x1e) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/84, 0x54}, {0x0}], 0x2}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r2], 0x1c}}, 0x8090) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001000000000000000000009500000000000000a357ca5881346afd6c6c115999ab270963dfa0c36513f2c2b837"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, r10, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r12, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1.65435717s ago: executing program 6 (id=7723): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840), 0x8) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) r10 = socket$can_bcm(0x1d, 0x2, 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a00), 0x80, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000f40)={{0xffffffffffffffff, &(0x7f0000000a40)='}-\x00', 0x240, &(0x7f0000000a80)={@align=0x6, {0x8, 0x6, 0x4, 0x42b}}, 0xc5, &(0x7f0000000ac0), &(0x7f0000000b00)=0x3}, 0x4, &(0x7f0000000ec0)=[{0x2, 0x401, &(0x7f0000000b40)='\\\x00', &(0x7f0000000b80)="32ce86058bb141bbcc27a6cf37c2d80cfec801dd74442d098bdb9495a9bc450a8f66b57c8a3239f0c48f80b43685929cd44432fcb443d3ebe5df8e2fc92c712c776d97d644f5717141f3d333a7e6da02f3f3a4dd5799e35ed9bf1d76b5dd4ac8e4a21f357af1f1fce2ce8d0b27173604857ed35615b604167bca9f4ca586697d01f91f4046f06cad9bc47444a770ce05a0266ebffdb37007", 0x98, 0x30}, {0x2, 0x7, &(0x7f0000000c40)='}^[-[\x00', &(0x7f0000000c80)="85b88dbce4099d2d061cd6623e6b825fab3e57d48bc86a055dddde1a1cd2790d49f2360a14cd8eec89b045d075561ded0610817d79d27e1774a1865ff77e1e58bf755c811fae521afdc45345da0919d5c00b", 0x52, 0xa}, {0x3, 0xe32b, &(0x7f0000000d00)='$&@\x00', &(0x7f0000000d40)="91b833a174424402fbc8d7c67d1430bd", 0x10, 0x2}, {0x3, 0x6, &(0x7f0000000d80)='()+\x00', &(0x7f0000000dc0)="c921c03050959a85af3749be0de9431cfb30fb44824e39bb3c1936a85aaa51918b66f6af6900924e49b8579393d4537bfd4598e4d9b2b759ac9f18be978a2a726bbd98e60a17e326e493f640d95786491479a3a5eab5c57e100e292b2523e968eb5f01c34501b43c36d5f00c039cfddd09d01c79463cc21d51de0c1c7aa77b16a0c12ca4b5ebbf51c37c60e3ca029723dbc5725dacde5860e7dac3a35b92e59a076f71e43d69dcfe3c79a35256b2f05f4a8dc8db5731132f471f9e29e77f3b293e", 0xc1}]}) r15 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000fc0)='memory.pressure\x00', 0x2, 0x0) r16 = socket$inet_smc(0x2b, 0x1, 0x0) r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r18 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = accept4$x25(0xffffffffffffffff, &(0x7f0000001080)={0x9, @remote}, &(0x7f00000010c0)=0x12, 0x800) r21 = socket$inet_smc(0x2b, 0x1, 0x0) r22 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r23 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001200)={0xffffffffffffffff, &(0x7f0000001100)='*\x00', 0x58501, &(0x7f0000001140)={@align=0x13, {0x3, 0xc5b, 0x8, 0x6}}, 0x1, &(0x7f0000001180), &(0x7f00000011c0)=0xfffffffc}) r25 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r26 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz0\x00', 0x200002, 0x0) r27 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001280)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000001380)=0xe8) sendmmsg$unix(r0, &(0x7f0000004dc0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="bd1b5b381c2ba76065c31e3c756425117a77a74f9f60b4555c902d8656be9bb5ce9ab1506349cf1ee32078ee3d9c49ee71a8329352e4f999ce3db47bede22936de6e3e2ddd7fb22575f98f0b2266e02e4f5f0ea3bdcd5d14ba49afdfd146b7ff66a3e15c581d601eb0c46983b6ff3b6b9d70f580fb3bab651b1baf23ec209ae2", 0x80}, {&(0x7f00000001c0)="ffa9278e22fcadba6f974d8fc742d9eb6228c1dbdfe38d5fb1bbc3c557bbbe50be964f004af070ffe3eb04196a5bedeba517e01f1586e92947e97390bf8b61a8464ae737b187e7b2bc4240a2f3d0bcb8202d68ebd8de822ce8ff057c591e8ce344c0055ef8dd692587b53f261bcbc7d1620ff082384d10f08c203f1e971568bd675eafcd8e54a7bf26e18f57e8cf32cef0cb03358d257c1369d19bc16eff055a2dabee435d3fcc0264841adcb8dbadfceec7fa05aabdc063866ee859b48b41adca9ec6b443ff67b0d48d1f48d73886f1437af27d476257339bdc1c8596", 0xdd}, {&(0x7f00000002c0)="12040b73979c842ad2bae010efdb2b72ad916d2a2753ad9c3fa8069f21560fb551807dbcaf247621a0925d5ad3ea1aa0b0c66dd666c54e754882bccae7449382bf4e89f3f7858df98004ebd5e94add27b2916dc30223b1122c69eb4a962d7013d02580623cde8688c40b603e4a4a36e5a6b5a569c21664aab3462299a8f629a2daadd5679957289e343697557f644c7732d42c3f89ba9ebcb6eaaa907fe79a5594", 0xa1}, {&(0x7f0000000380)="67220734529dd9dbbc4a3dd1cdb4d4660223813ae0460c69218dcd9175afe13a611a462f120ec0b2e866e07178184d3c0c22ecfd557461ea2761bb2aeca76be37f6859754e4e82f8a635a2e226c619d3f6ff166ca30089a006f393be0e6f2152e20b8093a800022eff0e18234073b961d028c90b80915595de898c7cd6f7608b0e47cc9cdadbf1f410ca89a208357a178becd8f20e82bb94394229487d2f79934b5f555a98af63ea194652363f8cab", 0xaf}], 0x4, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}], 0x18, 0x24000044}}, {{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)="81e28cca9c89b54b27b7d959f7fbef103db50a0d82d5772ff9b982a8ba0414ec6cd33f6c75bb4a36514b4f1ec62d99661df2841cb4ec86eeead53e7d21e8ff3ade45edbfdd9aba19e3472f2f188a19d0744925327e774619754873b2959a7db5ef331e39dd2aa4308f59e6958e6c190d0ff20a40d593a8289dbf3c4d3258726f38c1838a11a4af775f1fea6443c1712d046846cf2fb717a09d2b2e8f9a6d0e708c867a43d0fd0b49ceab520ac235a58051785441cfeabe17f39dac7f2dcb92ccbf346cc36fadc1f5a292f136b434fa5beee8653a4a00433a336b07", 0xdb}, {&(0x7f0000000680)="aac567ffdacbedfa19df2163ccddcfcbc6aef6bc74718dc77f0af4792d3bd140792e8492d7fbfca4a98db3e51957fdcbbc2d6e03a2da5390803bd82138dd44cde53aed65689c7b45d79ae10be6eb93059a415d80a364edd8f729bcd9105a7f0477e39d029939c21daf9c539489849fba90f66480209b9545341141817b65c76d0a7e1deb7cfa5ebd0000b832ff5e5d261a645044c7ba6e8c91c638c4ab836f6928644be1bfbe143c96cca9d8a0835a9c7a003cc936336b4c05cabd8f32f824f6a9d70e75e15f1c6bc3398d9b81a2f185956f2cb67322ae", 0xd7}, {&(0x7f0000000780)="a344faa08cbbdcdb23339e1a5ba3e1bd2d5f41ad09ced1865f7e42dce4c28fcc76353bf139e23308741128d9f4acd16c043eeb987d40b53451e3d6d22c790961abbd3ea8cec3db913799c5aaeba4526ce2e687b0f76679bc57cc1007748fef09e30d7dc8bae8e50380a4432f86f23ec17045ecff", 0x74}], 0x3, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [r3, r4, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, r11, r12]}}, @rights={{0x1c, 0x1, 0x1, [r13, r14, r15]}}, @rights={{0x2c, 0x1, 0x1, [r16, 0xffffffffffffffff, r17, r18, r19, r20, r21]}}, @rights={{0x2c, 0x1, 0x1, [r22, r23, r24, r25, r26, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r27, r28}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170, 0x40}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001980)="2abb862b3bab4a20532b4a927c6131849e8c618ffdc5581986d0c9a2d2922fea2064d98f7ef4d82e617edc234868e5bd6ee32b5fcc25edab2c18b4c34c7758f9884568296213f789532147db25f846df1dbd7e681f57b63173942d006501385ddbfe33721cdbde2c0f90b2b4ca561d0b0b80050b2034f3e82924825f6a547f897f459ebde1d02d25d82e8542e72cfbc238fdffbd2288b16c9ca3f483bef08230f9017a6d94551c58be87fa40a5ce7625b769c64409dd03391b9e993bef6adb535747fe565ba3dff1da8eb299fadc28d28d18cb0344e5052937", 0xd9}], 0x1, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0xf0, 0xc814}}, {{&(0x7f0000002400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002480)="600853b3b8a232147acef05802414c533ee302490d6004647cb501e1dd5ae17367f6b393dabc90a42d0d69ca6bfdcee15c052880ce970e26ddc56fcb637caf5cca4f80971e61ddedfcc1535a28b88e8d4862ab5d4136e3cc317db69335fea5578aed69928ec6c8ec47d3044e494bd9338b70dd63c286829c88e1ac6521190c1a81e8a4698837d9f905b0e235927987392884c365aa914cadca14179a0937181400ed061a1355ea68f854780cc36c93", 0xaf}, {&(0x7f0000002540)="15f1e555d4381a6abd820667a5061f2d67da13b4249f1f2c1086505e3d4411dce33b76a7914969e0c4c15e1963358e728b7d4b135b4befcd099d20ffe0fba1f23cc846c7797c1e36433bd06ee8709bfa7fba19a3c6a04d6aae24fdfda3095496d97bd3f717b66bcc98548cad63997af87f325c56bdc9a9fb07298b1a79ce3969", 0x80}, {&(0x7f00000025c0)="8b1d4857d6db3c53d5fc606544a6ab7b77f6cf63e794fcbe1b53658e362cfed2ecfc8e20d55b754ec4c5fefb646ea6606c54bdd0dfe8f499ca388d7b6b135ccc16e7cbd40c33e1e836bfb53689df0a1d68dac7c7b68747444fbd846c93c31e1a7a71614e5f1b793b6e554c4291423b57f493d062e3dc81ea446a47f6983b2814897706028059ba08f3bee8623f07ac09a68a5d9d80357aeb41f7b31cd61ca5d7e3e6486a8abb4528845c8a8fa4febd155dba8ea10faaa41b9063e1d841551fb396c15b9a810a845adaa3bc1434cffb3ff80181ed083132ac17c69d2b9946500786c697f955033e02344c776025163d20556810d84d80", 0xf6}, {&(0x7f00000026c0)="b29f6c737cbd3302cf05af5353e7cf2a2ec51d7c495d64c0223b6eecab07dd022da71e00e00b7aed774f18e6598debc5cbb46ee1eae4a00501765c102e5db69a1704e1fead7c0765d1d173d2c1c64f7b3e9f832effed195dbb15d93dd69edfb7181bbb5f0aada22b8fb88c3681eac3f4ac87d4ed2be17ff7686d22a2b94331cafc9daeeeee83", 0x86}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="76117f909cf435602bc9efdd75beda06cfa206e126495840a2", 0x19}, {&(0x7f0000002800)="43133e4ae55694f85b799bc03fa5ddb1ddecf94dbf4dbeb0be850f5309a84f620b84a2b9a9b4dc33a563cedf5c69759effb9b0138ecef1eefd183d2926b55113301becaa8b3799511de5ca937359042c26e6c409dc549c3f785e5343618ce4b19ed1f09d0ede0b1abc4111f8f0c8d18e4ebfd2b8f073e6b025d0b759449025dd3d4171b2287b76c673c8a1", 0x8b}, {&(0x7f00000028c0)="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", 0x1000}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x8080}}, {{&(0x7f0000003a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="806bc0b14dfe40b1616c680aa0a03192f2d5f3513a5911c67544e14246d12c8e2533349c4a1a309cc81b8ded5d288d8dd0be7dafc8083cf9e546ce0e0f5a17ca34883ec2abc49bc05b8bafcdc323fcd60b0b1540fd99a601868f3eec4edf38ddf52abe790d0c18e2650e0ff214944ccd8e055b757d11044048010d728b347392a9532e1a37af19b0acc55d7bbebb6e64c58c0106bf285d18932f90161e8322e8b039a2e8c27bd5a1ec04fa4b0a1a6f91238298b48692036cb5a50856557468e760b93a1f6d206efea3a5eedc77d54c92a7006715f1fce41e5f3055a84ce8203ab34f020052ed5b347a04025563a70a01d1", 0xf1}, {&(0x7f0000003bc0)="bf585abef11b25a53d7b45e454b6a3596bfef63478df343b6226d53d39ab40082f0b9b8db430c59727eeb29da705b719bcb74c52b3e62690fce8bd351d055dfa8b0d8e9a2c89eb273de287adf186acf005b77a7247e8340afbe3f2b7ceafab9d71eb4eaced2795c7c2c13c9646189b", 0x6f}, {&(0x7f0000003c40)="e137da1ea4050044b28ec5e86c69d24dfce1f811bf3de4ac9782c556663c1004c0a0f7fec54067112f0f12c5a6069cb862a06ccd4e90b553e3de95d2a8cf7a3377422a9971fc6ec62b33f8ddf348afee1f8d334d2c3d939d734f6b3feee74f0f2dca5f3f1f43285a5e8c62a9f160240d422269bac8a042a9c114f1becb", 0x7d}, {&(0x7f0000003cc0)="135530b0ba20f5fb2b5837bc91f84072f3e3faf1be19de58197343d690d6e106068b688be7203837922d1441c2b8817680516772a163dd2bb436c9cff567e5bf28f63b1cdf09d8006a8ff254cc533605b2dac8325b834a01a53ff9a76e2eceaccf3beca681543177451936bab56da930897a20d977724203d472238e60f89cb29db01855323567f4532f6b3a69d694d144567bbb61ebd62cd3d8c1fa84b7", 0x9e}], 0x4, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x20000000}}, {{&(0x7f0000004340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004400)=[{&(0x7f00000043c0)="8cb3d34b3e3284f661a470db92929697ecf1cc73fcb7f2064d4e0add13cc7c4f2d2d7b6ec0e8c5598daa834f00768a2b40bbed", 0x33}], 0x1, 0x0, 0x0, 0x400c010}}, {{&(0x7f0000004440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004600)=[{&(0x7f00000044c0)="e01e058d130b8d005b39723a8aabdbcafebc16f64a522520b3ab715b79a369a1d5cb7e6145b2d866f6638d82a42d3716a64e9678e59627d1a4", 0x39}, {&(0x7f0000004500)="48136e5eda0c81664799980a424f54d962995a300a4658470d9c042e794e6def2c60f38f834ac6b798db41efa9921186771c12193e896e5604b1d1aaf21c3250bd2e740b7c3eadfb2ca584fb0d106100c0c2fc0bfba714475243d181dfa2df8c3a643c1ea5cffeb855d10bf8e24b7fc461aba4135e295b661ab50082c023d8988fdca548e4442d7bc72514548bbf3cc26b860c0fe922c316f01dc4a9843bc3fa30462db5540b32ecd9be94ab8978a41fb61d656d99b8b35752ec61f0c5acae79d3eb2754a49b09900c5610e0d630fbc4c57ca171943533df252b4c9b1ebfd0023fc2eb2dabdca8701a65", 0xea}], 0x2, &(0x7f0000004d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x7, 0x1eab4f86a6232b5) 1.582340816s ago: executing program 4 (id=7724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000400)='\x00\x00\x00\x00\x002x\x03\xc1\x9f\n\xcb\x85\x1bm\xb7\xa1\xd6\xf1T\x00\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700100054000680140003002d2d73353a5f2d5d482ee5364c4323843c00040067636d286165732900e8feffff00000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6667168d89811dd3c5fc018aa2bef315c0f4028bd922ebd268ccb40285c1ca168"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRESDEC=r1], 0x5e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x8}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r8}, 0x10) sendmmsg$sock(r7, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a1070000000000feffff7f01000000020000000100003f420f000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000003200)="01000000030000006400000000000000000000000000000000000000000000007ffffffffffffffe00000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x2, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000005060104000500000000007c7a3000f8ff03"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) sendmsg$sock(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)}], 0x1}, 0x40080c4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b0000000600000a0000010a000002005000500000000200000002601003e80000000001000101", 0x2e}], 0x1, 0x0, 0x0) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000180)={r11, 0xda0, 0x14, 0x3, 0x5, 0x2f33, 0x1, 0x1ff, {0x0, @in6={{0xa, 0x4e23, 0xc, @private2, 0xd6f4}}, 0x99fb, 0xb, 0x7fc, 0x7, 0xfffffffd}}, &(0x7f00000003c0)=0xb0) sendto$inet6(r0, &(0x7f0000000540)="de49f3d0372a3447f35d6183fca2f2ee81ec8fe7d8d510cbd693818d68bbe1cabf9a6d8a9a478e47800df8f7f87b9c5cbadb9c6cce213022c7bdd9af7fd36116445fc03b90441f3a6147eafcbdbc6f281447c7bd4374288d9eb87ac4571af6b818b646a0ec2761d862fdf21e2d3213a10566a3b820d37a2349a74977a720cafce79c462cad14d93c2c1c42006421ad5e2395d22267b07b70b7f07b14bc92d3b97a3e53c4364c0a5eb55931a974105ffb92590c7ed0327f7d655d3da01801463d246a056d1c22e8ea", 0xc8, 0x8181, &(0x7f0000000640)={0xa, 0x4e23, 0x3, @mcast1}, 0x1c) 1.339801456s ago: executing program 6 (id=7725): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000fdffffff000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006b00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) 1.060443893s ago: executing program 3 (id=7726): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae021d009e000ffe700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c000108000000001a8000000c0001000900000008ffffe208000500", @ANYRES8=r0], 0x158}, 0x1, 0xba01, 0x0, 0x4000004}, 0x2000a080) 1.049818106s ago: executing program 1 (id=7727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x200}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x58, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r8, 0x8) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x3c8, 0x9, 0x1, 0x95ce, 0x8}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x1d, "e960c85f529380c52fcd228f7b46e6ad5f103fb102a55a6230a3b7fdf2"}, &(0x7f00000001c0)=0x25) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500070008"], 0x4a) 1.009514866s ago: executing program 6 (id=7728): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000200000500"/20], 0x14}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6002318e00033a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$inet(r5, &(0x7f0000000c80)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000002c0)="1d53154a735f005ebef05eee117df12ce581c74253b76a14a0cff5570e14f84f0688ee9be8d963ce2fae80e429749c8c4c70", 0x32}, {&(0x7f00000004c0)="db1bd6edab795ceaca1873f9e150128eff72e9b41ad7ec2589abaf2117ffec3d03d29ea5d04c6232da5deae94f28c9cdb9c600e705b3109363a444f98a636bcde00a8d398bddf5145a405f6a4949a046a711d4183d1ae7b7071b6aa9fa13586b67bb3ae1c1945012bd2b56bead4d51652c5d79a73f92eaca93ac305e089960efed2471c2e9727c60bb2de869851a0d625c9358cb06", 0x95}, {&(0x7f00000007c0)="fa3b2221598a0afb0c550c00d82112718177d5dbbb45c0bf8c302dfe4ccfea7d664549ef9bfb678e23327c5857702b3797911bdb27631da755153e33a26380693273ae0e03db39bbe43cc0ec8f0c8a9ca5422d2b4e79820d01dfd62ae3babd658614b58764bbdf54312e356eb20d56beeafe8f9f112325158f1116ca46808ce490a87669f856108639e7fea01431a6fbdfaad64ff82d0d29c0a53935ba6b01cd811cb7f2ab01fd93ca79e688a00ce12f59bdbb73a1572ed2f520473aceee3b58efec7c3d3fe8360d666ad9efd3e1ebed9cfa1b8f73", 0xd5}, {&(0x7f0000000940)="87347883d10c38301c7769255b5256d0a0f601d7e0c9c961a57077829c4a986bbc5cf915733c6f4ac55bdaa679760a33552fb1b2941422fa6cf9a825e3da7316da5cee89b00b15f60f2104020798aa753f3542c7b33a3d6c829e7e1d21a40de754163e97babc7d66c71acd6a9844cf0fca8bfd99910a579583c61b64a5", 0x7d}, {&(0x7f00000009c0)="6fe6d612c0fbea4a36618f09a03b2ac22bc9d2fad884ef6f96347c19d253d9f2cfe40a0a45419712e015ee7cd36be031932fd4b96cfac3c6c97f42ca708698a5efff034324ed0c8f58163a80c594d546082b117916c5d0233fe047ead7f798a99408853655cbe5092bb512ec09eecb0ef2b32ad8057063e55e8e517636804f1ef3c6bf0774984c1c338e5f08e0feee7d4ed397ab5e2ff72180444037df22533dd55307943b850dc2eb09dc4562a7d7d1f79a510d70b39cd9930ffc204e8b4a2371701669bab07fcbf57f51", 0xcb}, {&(0x7f0000000ac0)="1454d76ead0147db61d3a35c736a2e651152b4d1200c5b606a9c741bff6e0a4516d0d0c7939f52e8a4e7ebe1272fc62c9d9b1534ead693cc2c79ef0ed01771fb3a50a491f9489337d0c6057b214e96d068280ffab350611dcdde0a919c0a3d04d0324a3f0f41a2d65d733a433295d2e9aa14d4f7af3decdfa9d1c9a4b8fdafac478535fb89a0e9671a37ded1984882a46a002ac2e876002a7b5887fac09b", 0x9e}, {&(0x7f0000000b80)="065ba15f4320535b851b4fdb287c1b049654733f0e69aee7cdddb49ed8b01d7ef033246dbbe71e6f9b14609c89", 0x2d}, {&(0x7f0000000bc0)="2437b9d5642d7be6e9cd8142d4015908dbdee23436eef84081644237af3a82ee119fe5d5a9fd5c30da187c450986b8643af7525b0406b4", 0x37}], 0x8}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000340)="e02753e868a100000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r7 = socket$inet(0x2, 0x1, 0x6) connect(r7, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 856.372262ms ago: executing program 4 (id=7729): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3dfd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000080000000000000008000000911125000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000)=0x7, 0x4) 545.006518ms ago: executing program 3 (id=7730): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x201}, 0x90) 478.309637ms ago: executing program 4 (id=7731): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x2, @private0, 0xc5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="0fc02bff031c4fea5fabd0b9ef34e5d7edda82cf3ff892222062bb5fde3d6a1c7eb5c3da8cfd732ce6be", 0x2a}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)}], 0x1, &(0x7f00000003c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0x1000}}], 0x80}}, {{&(0x7f0000000440)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000480)="dd30b86fb3cd13e4d2aeaadeaa98396c3602003f70e37fac2c72a5afdec4d5b75fa6baffeae0f5ea9c009437f4f9901c009287e57f28b28bf66eac26000b3f261e05e84289721f4f70251b6696e87ad324d21a17e8f7122c3bf7c80ce1fed1b85518cbaab84ef41de00ad588b71970d37a83fa0debd7187a1e57a1c4e6bd74f9fdc015bee1ebf14baa9618792f0fe0c00d15d296c2e4e3b7cf82962b2b04590dc21b5bd3b6ef60e0c70c4676e19b946406bbb85cdc78a8947f1778b8dd4b48130ba0c362b4262b77059463f2c6f2cff38d3bfa5582058dcb625e17", 0xdb}, {&(0x7f0000000580)="0f055a97a3193f30ebdc3801d8875ef01e3495cf7d057d63d760b261c68b9f7eb7c6a16bad883b0a84fbe6447c39570701dc81eb64c3", 0x36}, {&(0x7f00000005c0)="15ce03c23791c5a180c748c94a266bfdc6476c939125bbcf2ce9638ac5828f1ff08d1bf54c21e2ce94ba2a6bc3e64a0f1f0e53e18e43264311c5b142115c0db6908ea88f2df4e5de9e2eec59639cfe12d7c67fb61bc33e39259c7f10d7f626a5fec200b868a1", 0x66}, {&(0x7f0000000640)="013732c41e17c3c64b6afb00f2cfbe8ca6a393ffb87679e969a00d676552acdf5f490e7ba7c7cc2ee0b18dcde10df81320174e2c032d78d9298376993a79eee262be6bd1152805f27331ab9215db73ac6675ce1a23de36eca304987f41b1517bc4472b2f3b5af2684d329d0fa2145672c1ba75e1835bafa09f128ed6fb8ad7dd6ecbc51a88e691d0c0a1049590432ee1fb062efaefd39e840d3a9506aa78ed548d80533baadabc6416cd6a5b7c14ba25ebf077a7685516413c875e8f70758aad363e784389691f226214392626513a41c77a7edd3d65a114fb3c93fbe29d02", 0xdf}, {&(0x7f0000000740)="20f5de70f1883f39873ac62d5215a02e2bc9471cab3f496c2f94e099f598cc567efbb7ec1041ff5637ad6131891071891cb2ecd1a3b934f890fb0b31f6dc918ee61d72d8c6ea0e8506a450e025d1b17a61f772b9f30725a8be6fcbb3c54d2cecc2067af74a58e4ff0b2eb2aa4c68655ccb57a92ea2244914f5915089d4", 0x7d}, {&(0x7f00000007c0)="33af06152ae083bb7ec88f22715e9097dded131e12c1eae35ec914fb21198d1c8d2cd0e33b76ade6896f728fefdd982727a293307a10e83859e1e0d9563982be69e2211b4ba319702c5bf97a6c7b8f87d5d54038a61fc32ddd5c918c1915bc8f09b6d853314f43150fbd808faa1f7db444f5a760c9d184289fd8a5de", 0x7c}, {&(0x7f0000000840)}, {&(0x7f0000000880)="e7c26088587776eb02e479840ca641e1ce4485c08c017119ff67ae195e6a79513544e3f3abdcfe5450b0c6dffb561b018bd6dc9e5df4a2598f2fc6433bdd4d02fcfcf1b10d1586d4224f42bb8ed4a0422b296954939eb2fa892f7e53be0adefef68591ba86dcc482ae04d862cd3dc3b92d1ff60d589d68ac9bc38a4e9f9820ea6f6cf5ee8e4515e7610e157b15007cec2680fe93809123e31a3c01d1a89f1285b5df4df27378b03fd60c0f4231dc48915a48bd65f92480c4e8", 0xb9}, {&(0x7f0000000940)}, {&(0x7f0000000980)="3cca9823ee4193cb6fbc5485bdae50d98cc05808eea8b1f06e0d4af531c2bab6113033a0f451603d8070e8fedbcf32708c1287f4d162d1ec0a48576c19ea43cfccdb3931897388be301cd3bf13e2db6ff38c85466ec2ed7e2064ef3807045fe1ecbb8ba99c8df75dee2db98c9a09d511e1a64c86207b0a6c6ecada5efd1e749aa46aaaf93eb2971bc9aaca718dbdbaba8b689d10eceea011697125708439aeca7eb31cb1a88e1bd87928db441f82ead4251ba2c4db26b571a51ba49ca4b84b397aa53d61f663904ac9de24d4fcd7bc4a0dbb132629e61f41211957eba70afb1eeec4ec6a0d19873573c33f0eb24b0a97843fa8e7729b32e7", 0xf8}], 0xa}}, {{&(0x7f0000000b40)={0xa, 0x4e24, 0x4, @mcast1, 0x1000}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000b80)="6cbd6d0337251bf891c6f239e200dfa2ea388baa267a80907fa985c8a0a8ca2f42f58ad7af29517c92018cf75d5f41704dfda2b7ec405e9a3735054011e562fd564919c2cd6a9f0a730c42d14bbd910ed8295fdfef49779bd06ac78fda35212462aa6cca6b53ef7a47ce49", 0x6b}, {&(0x7f0000000c00)="e935d89bc9358ac8ecfe74f9dcb1626a4205337c7d675270c0a7c2a61e02c174a14dc9266963648c134eebaa7c2a7a8f98c238dc3ea9ff34d8e0d6f5a289fb3c0969fe9570b8240ac156e18398fbd34cc45182dcbfeb06e9daf9a56710d924be4709acc4333f6df364705c12797caa3e49182e41feabcc81bfa24293ccbd29098e0ad0636d4e5fb49580cbfe", 0x8c}, {&(0x7f0000000cc0)="ad10e27fb1f93ecdb1eef6f9836871cf51cb0e605a4cb2181f86290e0ddcf3b5ce265fa07eb91ccd0a94bc92515225da255daa7c34690288ef005d8bd5326840eeb9892db3f7c637b029bf0c89d109384eaffb21448bac8d3c27f38f30bb92aad87ee917c6d111cf5d57c290022d8245eb6555c456fccc07ecc4d778229e7c9aa09e712aaafe9b229410446a8ee31f802f457b36bdef0625828c9366d588fa72b401279337e856e285f00386f3aedb0b664b246cd46a3506ed62926d70ff789bdde356f01e107b2493d59bb4dea10d9678b66e4bc18e5606cf94a46a3325ca93af27e51a98b2d450d6658ae1e04b284629f1", 0xf2}, {&(0x7f0000000dc0)="d0198445aa9ae76115b6914f2430ceac8a23bf05cf391d70b772b16d534d4476158a89968f12cbf55b24bbdc0cde358a406bf33a38dd15b617d811a49313caad97405240ced4ca449d5cbc5f650691efcf9bea04e29cb7c704264b03775d2bcf19fc196a1f5f88e5373965dbb91cb88e47c3d1a835b8ba82699d928a7a6922a370f88b4feed66c16cacd2a101ba74a4f2eacf6596857d9051afcdbdb10ec6fcc62ebdc812f48796fcef404e22c9cc5507fbc70c48c00a0a9a6d3b704c3d951f316d7a05920c16e4e8289102d8baecfd89fd689f568a9", 0xd6}, {&(0x7f0000000ec0)="12048513bbf1ba549a4311914a9490900377d87deaebc929e1c7c776574a8936e63f35fcf00b83fc1660642451345d0bc6b7dfec2a42087fcf4e5d2681908aeb11f39bb922c63f64af2e815bb1bdb66b8abf76bfd52a04611c7463903579dbcf7fe303e6b8a369caad5f57aa95f08e32c1165abcc154c85964c211e310689701c7654a693669ff3e2f4f8085ae9bde40f7d35ce6f70f240ee6ad", 0x9a}, {&(0x7f0000000f80)="e2f056068a30ea1977044060e257d244c597751f6bb9ea1be7", 0x19}, {&(0x7f0000000fc0)="021f0c8028be3ba5f388bb98dcb352b69bf6b7f42c0c6d5aea94653e9f66939a9b05413bd24b790742b4de4de150fc0df997b81c305b3b51ac36eddaa0", 0x3d}, {&(0x7f0000001000)}], 0x8, &(0x7f00000010c0)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x3c, 0xc, 0x2, 0x4, 0x0, [@remote, @rand_addr=' \x01\x00', @mcast1, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0xe9}}, @rthdrdstopts={{0x2b0, 0x29, 0x37, {0x2e, 0x52, '\x00', [@ra={0x5, 0x2, 0xc}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0x5}, @generic={0x8, 0xd6, "f1a941d6bb8942031c0f8f5ec3010376e50a97b85b68ec0908fa689fa6632f0ae80051553d1b84c5e28b753bb679ea08c0869724e2dda96cacca717d4e93168a7a38e2f323fe341fbaa21e5251f26527aa2a6d25af977d3d1a2d0f3d1512e3970f1fa3b870349a1a35e7fbdd6f86c3feccb4c87f1b127ed0f4d6c4c51bf705598e4d87ab4e3cbb7e936ebb3132b95d62f2900eb862ad05bb64c9210984dee2fcd196dc2913ceb52f50739f9af8cedb269f0f7e101b903523ce88c68e69fcd9901dcc9f33789b002ba6a6e6e6fc0e10c38f650ac8db31"}, @generic={0x0, 0xf3, "5f59180428974014f154fb87d3a73bac5e19ae833dcb7b38bc12d5f9c76c4944b8b1d3309e84c87c265a514a8ca2060c0192e3639671fe9bd44db0a020623ad98061d0d4c09a222f626053839e85e5982cfaf3844d6c9e7fa91716e980026e58d633038f17f4303bd0ed3c545c8e412ecfad417847a2517f90d0775889dd116824fcd42ecf4124fb0d729408debdf815c950b2886d66d08c45af25752e9e86e17fbf217d21e3de2361e15c6ec68c81426e8ff84dc6db9ebd402c2e4dfb280615445901b51c9f10b566d447ba77100e0fcc15489b1c89f5268773160b15b96488c64187eb3e4e1eb041a3f64702335d849429f9"}, @generic={0x9, 0xb2, "5341e7a276012ecc9e627737399a6f1ae5adaf69d1ad3a69003591d8cc0e8456c22553719a39b9d188230072546cd671cb8fe2bfc607b69ed5454717490726517ec155a9033ff8d3b90ca053f0d12528503095f72d3409aba40ffe768a408c2707462025f5bc22e75e2c08efe6555cf922972f725c2f32b1ce9db2e02b64dfcc57e37c181f79ee1733d1e5559ba060d51b8be0874d2f938d89372d2d0408da33af41ec03fdcaa108c688eb966ed125612ca7"}, @pad1, @enc_lim={0x4, 0x1, 0xc}]}}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x2b, 0x21, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0xd, [0x5]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x8, [0x6, 0x2, 0x81]}}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @generic={0x8, 0xa5, "ce2ea5922525da04e50d9f4a94060fe72e4b68329c02bb799ec490ab3a6889647ccfeac02840ad1e4f91017a10a9b7caec18592341dc3365dac76873dd93a7e916714572bdefed0d4e8cd11838694ac1afeb05fff1c03dcc950424f45145383142e423efcb85c760ce42f37f3fa3405fb2d964c402bc4f23666bdbe7232f5fd0359619d83b7caf6b6e5def7eaa02dc8488326cbaa34c408037566561e91e035427ac67908d"}]}}}, @flowinfo={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x84, 0xe, 0x2, 0xf7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @empty, @loopback]}}}], 0x520}}, {{&(0x7f0000001600)={0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c, &(0x7f0000002900)=[{&(0x7f0000001640)="9d92017dfc2276f82ceae4742fcf01862e47e43ca7450b2e77806cebe5bf5473d62deb22e3a396bc2c873e01cf07e4bd338aadd45cc18303a6ed72f572343f4bc2d7b319c7bc9894f5190bc99ac638243598384bfd9cd71398d32a04fc9290a2414e352e471a6735e82426223e9a60da237a446df5a28cae3966d4bcf0fd4fdc8a8521b38db8f975c883b24cb831d92e1ab2492ba2efdace35167cad63e061ce2d2cc407f2bda3d6969129865c8bc87590b1cc4d9295f2c9a7632523f1d11a7e93bfdabad0d520d7ad1b7d53efea097edd3d930d5d8ff456640ced7165c117d8d893e516a7", 0xe5}, {&(0x7f0000001740)="538a7418df40eec357603f38a3e2be2027ce96b6b4", 0x15}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="c2e42996a43aaedbe98a8bb8d3d8f33ac2b67f50cd6e6a93e434f637fe261c04ddd9f30858c13cb167c8d0b2af8d01a3c8c5e7b20bff6b3804611f925ea4345f025a306c5eda3d6f9fac51e87b6812ec90a6c9bbf0b2", 0x56}, {&(0x7f0000002800)="30a5cc42eefd5eb95bd5ae2b738f200699f6f122e380598d9ee407085a2d566333f6bfa444ba8a5d6a271a4a1297594a6a98f837476e5cc9c140a33a60bdc2513d099420c55c8bde6b32e05f42b02aaa52006070cac124ba64261c5592fe4d6dae77e4b5b622914d6f617b80522ae0f1c2dfb2f77f6b0b23cce236f919e689d8c01b318d5dab8ddfb473b93f2506ef3b083207108d29104a637d1e64a2b5a725f80a49a6183cce468b4a0310c4742bc108aaa3fafc95ddbd10d599f4824c668eedc48601c9ac6270456e7b90", 0xcc}], 0x5, &(0x7f0000002980)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x0, 0xa, '\x00', [@ra={0x5, 0x2, 0x9}, @generic={0xf, 0x48, "dc79c555c086cadef1e18d1aefbf6c5c026f421287b6d21ba5bd6b01fa50e16eaab0b7560c41e90562e0cf3641b3cc221c230b03e88a6623d858a7618c7d8170c8fc7bddca73a618"}, @ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}, @rthdr={{0x58, 0x29, 0x39, {0x6, 0x8, 0x0, 0x6, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0x44}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5a, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x800}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x17}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x160}}], 0x5, 0x48004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="1c0000000506010100000000000000000200000205000100070000006add35d9e80c8497601ca0c1dac891e5687919252bde465c41d1836d617323e3d77f4f334a37e8c1d2cdc0136e7547496519ba0032984e2b8d0866d2b2320aebe91f8adea0a4b9df53f4a5eb44ec1effbe8b2daf79"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x200, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r2, 0x0) r3 = accept(r1, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xfffe, 0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0xfff, 0x4) 275.769587ms ago: executing program 2 (id=7732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1000000000000070100eaf7ffffffbfa400000041000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 221.056984ms ago: executing program 3 (id=7733): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x8) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r6, r4, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) (async) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 179.611809ms ago: executing program 1 (id=7734): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) writev(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb8bc895583d", 0x1d}], 0x1}}], 0x1, 0x22008805) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 122.333714ms ago: executing program 4 (id=7735): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, {0xa, 0x4e20, 0x6, @mcast2, 0x7}, 0x0, {[0xf, 0x9, 0xc, 0x101, 0x1, 0x0, 0xfffffe01, 0x2]}}, 0x5c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000033000111000001f500010244132403b1fd606412c3258e3d67aa5b000100000000063c000000000000c13c4d04000280040003"], 0x64}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x187}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) write$rfkill(r1, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x4040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES64=r5, @ANYRESHEX=r4, @ANYRES32=r0, @ANYBLOB="08000500060000000a00e8000802110000010000100017800400040004000100"], 0x40}, 0x1, 0x0, 0x0, 0x408d1}, 0x10) 0s ago: executing program 2 (id=7736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05001b00000000000000050000000900010073797a30006700002c000000030a05000000000000000000050000500900010073797a30000000000900030073797a31000000005c000000060a010400130000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d61418f308000240000000010c0001004e465155455545"], 0xd0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x5, 0xff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$cgroup_type(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103040000"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x30, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x180, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x25}, @NL80211_ATTR_SCAN_SUPP_RATES={0x148, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, "d35d63274443ef9116875319de2ca5b05b5ccb12fd25320e3034e06d"}, @NL80211_BAND_6GHZ={0x4b, 0x3, "f9473de6186c8b0a4e56a2d66bd911e1208d8756b01b5dcc75c07995b6ec211c74cace9000676055b2a9cb60aec121be286ffba1a559362cd76e24e084b6b8992a02a2162a2e12"}, @NL80211_BAND_6GHZ={0x8e, 0x3, "166e07b2c880e9755c2e21e484b6b5d864fce153a42d1bbcdd353afd2766bdb0740c09acce2f598548bb17a7f586e8ac146512dec923679fd6b7eea7e6d8a61d505a56c5cda915607820ae00fd718f44b0ee48fbc8a0c8078b3ada7b79a9c87c3b826639e568b8ac11f2e2339efb6d6b7505fd4d9c09777d95f82c228f11e70759b0bef5da2f9b10908e"}, @NL80211_BAND_5GHZ={0x48, 0x1, "5f1301971648b0da2fb8d61d275e7337620cb799fd5edfbec738f526c6fbca54805f71f885bf289a6a154303d8f7debd48d2e3c3bab4fac5544c1593f52be1573ee62176"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) kernel console output (not intermixed with test programs): bability 0, space 0, times 0 [ 770.766423][T29227] CPU: 0 UID: 0 PID: 29227 Comm: syz.4.6856 Not tainted syzkaller #0 PREEMPT(full) [ 770.766447][T29227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.766461][T29227] Call Trace: [ 770.766470][T29227] [ 770.766480][T29227] dump_stack_lvl+0xe8/0x150 [ 770.766516][T29227] should_fail_ex+0x410/0x560 [ 770.766548][T29227] _copy_from_iter+0x1d3/0x1660 [ 770.766592][T29227] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 770.766632][T29227] ? __pfx__copy_from_iter+0x10/0x10 [ 770.766664][T29227] ? dev_get_by_index+0x22/0x2d0 [ 770.766699][T29227] ? dev_get_by_index+0x22/0x2d0 [ 770.766730][T29227] packet_sendmsg+0x3083/0x5150 [ 770.766782][T29227] ? __lock_acquire+0x747/0x2de0 [ 770.766825][T29227] ? __lock_acquire+0x747/0x2de0 [ 770.766864][T29227] ? __pfx_packet_sendmsg+0x10/0x10 [ 770.766888][T29227] ? aa_sk_perm+0x713/0x900 [ 770.766922][T29227] ? rwsem_spin_on_owner+0x60/0x250 [ 770.766954][T29227] ? __pfx_aa_sk_perm+0x10/0x10 [ 770.766982][T29227] ? aa_sock_msg_perm+0x144/0x210 [ 770.767034][T29227] ? apparmor_socket_sendmsg+0x98/0x360 [ 770.767063][T29227] ? __pfx_packet_sendmsg+0x10/0x10 [ 770.767089][T29227] sock_sendmsg_nosec+0x14e/0x190 [ 770.767117][T29227] __sys_sendto+0x408/0x5a0 [ 770.767145][T29227] ? ksys_write+0x1e6/0x270 [ 770.767184][T29227] ? __pfx___sys_sendto+0x10/0x10 [ 770.767210][T29227] ? __mutex_unlock_slowpath+0x731/0x900 [ 770.767274][T29227] ? __pfx_ksys_write+0x10/0x10 [ 770.767315][T29227] __x64_sys_sendto+0xde/0x100 [ 770.767347][T29227] do_syscall_64+0x166/0x520 [ 770.767380][T29227] ? trace_irq_disable+0x3b/0x140 [ 770.767403][T29227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.767425][T29227] ? clear_bhb_loop+0x70/0xc0 [ 770.767453][T29227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.767476][T29227] RIP: 0033:0x7f0689f9e199 [ 770.767498][T29227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.767518][T29227] RSP: 002b:00007f068af3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 770.767543][T29227] RAX: ffffffffffffffda RBX: 00007f068a225fa0 RCX: 00007f0689f9e199 [ 770.767561][T29227] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 770.767576][T29227] RBP: 00007f068af3b090 R08: 0000200000000140 R09: 0000000000000014 [ 770.767592][T29227] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 770.767607][T29227] R13: 00007f068a226038 R14: 00007f068a225fa0 R15: 00007fff957b2a48 [ 770.767642][T29227] [ 771.222775][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6863'. [ 771.259101][T29237] ÿÿÿ: renamed from bond_slave_0 (while UP) [ 771.706148][T14508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.706173][T14508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.755867][T29268] FAULT_INJECTION: forcing a failure. [ 771.755867][T29268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.755904][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.6.6876 Not tainted syzkaller #0 PREEMPT(full) [ 771.755930][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 771.755943][T29268] Call Trace: [ 771.755952][T29268] [ 771.755962][T29268] dump_stack_lvl+0xe8/0x150 [ 771.755999][T29268] should_fail_ex+0x410/0x560 [ 771.756030][T29268] _copy_from_user+0x2d/0xb0 [ 771.756061][T29268] ___sys_sendmsg+0x1c6/0x360 [ 771.756092][T29268] ? __lock_acquire+0x747/0x2de0 [ 771.756121][T29268] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.756189][T29268] ? __fget_files+0x2a/0x420 [ 771.756220][T29268] ? __fget_files+0x3a2/0x420 [ 771.756259][T29268] __x64_sys_sendmsg+0x1b1/0x290 [ 771.756294][T29268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.756352][T29268] do_syscall_64+0x166/0x520 [ 771.756385][T29268] ? trace_irq_disable+0x3b/0x140 [ 771.756407][T29268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.756430][T29268] ? clear_bhb_loop+0x70/0xc0 [ 771.756457][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.756479][T29268] RIP: 0033:0x7f990299e199 [ 771.756499][T29268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.756519][T29268] RSP: 002b:00007f990393f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.756551][T29268] RAX: ffffffffffffffda RBX: 00007f9902c25fa0 RCX: 00007f990299e199 [ 771.756568][T29268] RDX: 0000000000044860 RSI: 0000200000000080 RDI: 0000000000000003 [ 771.756583][T29268] RBP: 00007f990393f090 R08: 0000000000000000 R09: 0000000000000000 [ 771.756598][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.756612][T29268] R13: 00007f9902c26038 R14: 00007f9902c25fa0 R15: 00007ffcd8811678 [ 771.756647][T29268] [ 772.030949][T29274] syzkaller0: entered promiscuous mode [ 772.030976][T29274] syzkaller0: entered allmulticast mode [ 772.256487][T29286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6879'. [ 772.359686][T29289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6881'. [ 772.932616][T29315] syzkaller0: entered promiscuous mode [ 772.933839][T29315] syzkaller0: entered allmulticast mode [ 773.379042][T29330] mac80211_hwsim hwsim50 ..ãc¤±: renamed from wlan1 [ 773.414881][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6896'. [ 773.584107][T29344] FAULT_INJECTION: forcing a failure. [ 773.584107][T29344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.584146][T29344] CPU: 1 UID: 0 PID: 29344 Comm: syz.2.6900 Not tainted syzkaller #0 PREEMPT(full) [ 773.584171][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 773.584186][T29344] Call Trace: [ 773.584195][T29344] [ 773.584205][T29344] dump_stack_lvl+0xe8/0x150 [ 773.584243][T29344] should_fail_ex+0x410/0x560 [ 773.584276][T29344] _copy_from_user+0x2d/0xb0 [ 773.584317][T29344] ___sys_sendmsg+0x1c6/0x360 [ 773.584352][T29344] ? __lock_acquire+0x747/0x2de0 [ 773.584381][T29344] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.584410][T29344] ? __lock_acquire+0x747/0x2de0 [ 773.584439][T29344] ? kstrtouint+0x6e/0xe0 [ 773.584505][T29344] __sys_sendmmsg+0x273/0x4d0 [ 773.584542][T29344] ? __pfx___sys_sendmmsg+0x10/0x10 [ 773.584584][T29344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 773.584641][T29344] ? ksys_write+0x242/0x270 [ 773.584677][T29344] ? __pfx_ksys_write+0x10/0x10 [ 773.584718][T29344] __x64_sys_sendmmsg+0xa0/0xc0 [ 773.584753][T29344] do_syscall_64+0x166/0x520 [ 773.584786][T29344] ? trace_irq_disable+0x3b/0x140 [ 773.584808][T29344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.584832][T29344] ? clear_bhb_loop+0x70/0xc0 [ 773.584860][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.584884][T29344] RIP: 0033:0x7f9f2f99e199 [ 773.584905][T29344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.584925][T29344] RSP: 002b:00007f9f3080c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 773.584949][T29344] RAX: ffffffffffffffda RBX: 00007f9f2fc25fa0 RCX: 00007f9f2f99e199 [ 773.584966][T29344] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 773.584982][T29344] RBP: 00007f9f3080c090 R08: 0000000000000000 R09: 0000000000000000 [ 773.584997][T29344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.585012][T29344] R13: 00007f9f2fc26038 R14: 00007f9f2fc25fa0 R15: 00007fff0ccef638 [ 773.585048][T29344] [ 773.955263][T29353] netlink: 'syz.1.6904': attribute type 3 has an invalid length. [ 774.264124][T29363] syzkaller0: entered promiscuous mode [ 774.264149][T29363] syzkaller0: entered allmulticast mode [ 774.672579][T29387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6910'. [ 774.723094][T29376] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 774.744574][T29376] bond3 (unregistering): Released all slaves [ 774.935307][T29393] netlink: 'syz.4.6912': attribute type 12 has an invalid length. [ 774.968208][T29398] FAULT_INJECTION: forcing a failure. [ 774.968208][T29398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 774.968246][T29398] CPU: 0 UID: 0 PID: 29398 Comm: syz.3.6914 Not tainted syzkaller #0 PREEMPT(full) [ 774.968272][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 774.968286][T29398] Call Trace: [ 774.968296][T29398] [ 774.968306][T29398] dump_stack_lvl+0xe8/0x150 [ 774.968347][T29398] should_fail_ex+0x410/0x560 [ 774.968380][T29398] prepare_alloc_pages+0x223/0x600 [ 774.968413][T29398] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 774.968443][T29398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 774.968469][T29398] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 774.968498][T29398] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 774.968540][T29398] ? __pfx_policy_nodemask+0x10/0x10 [ 774.968567][T29398] ? __get_vm_area_node+0x155/0x2f0 [ 774.968597][T29398] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 774.968629][T29398] ? __vmalloc_noprof+0xd2/0x120 [ 774.968664][T29398] __alloc_pages_noprof+0x10/0x100 [ 774.968698][T29398] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 774.968731][T29398] ? alloc_pages_noprof+0x140/0x2b0 [ 774.968763][T29398] __kasan_populate_vmalloc+0xb7/0x1c0 [ 774.968811][T29398] alloc_vmap_area+0xd1a/0x1420 [ 774.968858][T29398] ? __pfx_alloc_vmap_area+0x10/0x10 [ 774.968887][T29398] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 774.968914][T29398] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 774.968938][T29398] ? __get_vm_area_node+0x155/0x2f0 [ 774.968976][T29398] __get_vm_area_node+0x200/0x2f0 [ 774.969016][T29398] __vmalloc_node_range_noprof+0x343/0x1540 [ 774.969051][T29398] ? bpf_prog_calc_tag+0x51/0x370 [ 774.969080][T29398] ? __x64_sys_bpf+0xba/0xd0 [ 774.969101][T29398] ? do_syscall_64+0x166/0x520 [ 774.969142][T29398] ? __kasan_kmalloc+0x93/0xb0 [ 774.969169][T29398] ? bpf_prog_load+0x14d6/0x1c20 [ 774.969194][T29398] ? __sys_bpf+0xd0d/0xd90 [ 774.969217][T29398] ? __x64_sys_bpf+0xba/0xd0 [ 774.969253][T29398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 774.969300][T29398] ? bpf_prog_calc_tag+0x51/0x370 [ 774.969326][T29398] __vmalloc_noprof+0xd2/0x120 [ 774.969360][T29398] ? bpf_prog_calc_tag+0x51/0x370 [ 774.969391][T29398] bpf_prog_calc_tag+0x51/0x370 [ 774.969418][T29398] ? __pfx_cmp_subprogs+0x10/0x10 [ 774.969449][T29398] check_and_resolve_insns+0xbb/0x21d0 [ 774.969482][T29398] ? add_subprog+0x2e2/0x3f0 [ 774.969511][T29398] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 774.969548][T29398] bpf_check+0x18f9/0x2ef0 [ 774.969590][T29398] ? __pfx_bpf_check+0x10/0x10 [ 774.969619][T29398] ? bpf_obj_name_cpy+0x194/0x1e0 [ 774.969656][T29398] bpf_prog_load+0x14d6/0x1c20 [ 774.969704][T29398] ? __pfx_bpf_prog_load+0x10/0x10 [ 774.969757][T29398] __sys_bpf+0xd0d/0xd90 [ 774.969792][T29398] ? __pfx___sys_bpf+0x10/0x10 [ 774.969830][T29398] ? __fget_files+0x2a/0x420 [ 774.969878][T29398] ? ksys_write+0x242/0x270 [ 774.969914][T29398] ? __pfx_ksys_write+0x10/0x10 [ 774.969954][T29398] __x64_sys_bpf+0xba/0xd0 [ 774.969991][T29398] do_syscall_64+0x166/0x520 [ 774.970020][T29398] ? trace_irq_disable+0x3b/0x140 [ 774.970040][T29398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.970063][T29398] ? clear_bhb_loop+0x70/0xc0 [ 774.970090][T29398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.970113][T29398] RIP: 0033:0x7fe23e59e199 [ 774.970134][T29398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.970153][T29398] RSP: 002b:00007fe23f3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.970176][T29398] RAX: ffffffffffffffda RBX: 00007fe23e825fa0 RCX: 00007fe23e59e199 [ 774.970194][T29398] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 774.970209][T29398] RBP: 00007fe23f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 774.970223][T29398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.970237][T29398] R13: 00007fe23e826038 R14: 00007fe23e825fa0 R15: 00007ffc73ffa708 [ 774.970271][T29398] [ 774.970890][T29398] syz.3.6914: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 774.970956][T29398] CPU: 0 UID: 0 PID: 29398 Comm: syz.3.6914 Not tainted syzkaller #0 PREEMPT(full) [ 774.970981][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 774.970995][T29398] Call Trace: [ 774.971003][T29398] [ 774.971013][T29398] dump_stack_lvl+0xe8/0x150 [ 774.971046][T29398] warn_alloc+0x24d/0x270 [ 774.971070][T29398] ? lockdep_hardirqs_on+0x7b/0x110 [ 774.971105][T29398] ? __pfx_warn_alloc+0x10/0x10 [ 774.971144][T29398] ? kfree+0x1c5/0x650 [ 774.971181][T29398] ? __get_vm_area_node+0x219/0x2f0 [ 774.971223][T29398] __vmalloc_node_range_noprof+0x36b/0x1540 [ 774.971259][T29398] ? __x64_sys_bpf+0xba/0xd0 [ 774.971280][T29398] ? do_syscall_64+0x166/0x520 [ 774.971319][T29398] ? __kasan_kmalloc+0x93/0xb0 [ 774.971348][T29398] ? bpf_prog_load+0x14d6/0x1c20 [ 774.971374][T29398] ? __sys_bpf+0xd0d/0xd90 [ 774.971397][T29398] ? __x64_sys_bpf+0xba/0xd0 [ 774.971432][T29398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 774.971478][T29398] ? bpf_prog_calc_tag+0x51/0x370 [ 774.971504][T29398] __vmalloc_noprof+0xd2/0x120 [ 774.971537][T29398] ? bpf_prog_calc_tag+0x51/0x370 [ 774.971568][T29398] bpf_prog_calc_tag+0x51/0x370 [ 774.971593][T29398] ? __pfx_cmp_subprogs+0x10/0x10 [ 774.971626][T29398] check_and_resolve_insns+0xbb/0x21d0 [ 774.971657][T29398] ? add_subprog+0x2e2/0x3f0 [ 774.971696][T29398] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 774.971735][T29398] bpf_check+0x18f9/0x2ef0 [ 774.971779][T29398] ? __pfx_bpf_check+0x10/0x10 [ 774.971808][T29398] ? bpf_obj_name_cpy+0x194/0x1e0 [ 774.971845][T29398] bpf_prog_load+0x14d6/0x1c20 [ 774.971884][T29398] ? __pfx_bpf_prog_load+0x10/0x10 [ 774.971944][T29398] __sys_bpf+0xd0d/0xd90 [ 774.971979][T29398] ? __pfx___sys_bpf+0x10/0x10 [ 774.972018][T29398] ? __fget_files+0x2a/0x420 [ 774.972068][T29398] ? ksys_write+0x242/0x270 [ 774.972104][T29398] ? __pfx_ksys_write+0x10/0x10 [ 774.972144][T29398] __x64_sys_bpf+0xba/0xd0 [ 774.972171][T29398] do_syscall_64+0x166/0x520 [ 774.972203][T29398] ? trace_irq_disable+0x3b/0x140 [ 774.972226][T29398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.972250][T29398] ? clear_bhb_loop+0x70/0xc0 [ 774.972277][T29398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.972300][T29398] RIP: 0033:0x7fe23e59e199 [ 774.972321][T29398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.972354][T29398] RSP: 002b:00007fe23f3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.972377][T29398] RAX: ffffffffffffffda RBX: 00007fe23e825fa0 RCX: 00007fe23e59e199 [ 774.972394][T29398] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 774.972409][T29398] RBP: 00007fe23f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 774.972423][T29398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.972437][T29398] R13: 00007fe23e826038 R14: 00007fe23e825fa0 R15: 00007ffc73ffa708 [ 774.972490][T29398] [ 774.972882][T29398] Mem-Info: [ 774.972894][T29398] active_anon:6926 inactive_anon:0 isolated_anon:0 [ 774.972894][T29398] active_file:0 inactive_file:43788 isolated_file:0 [ 774.972894][T29398] unevictable:0 dirty:208 writeback:0 [ 774.972894][T29398] slab_reclaimable:12022 slab_unreclaimable:113527 [ 774.972894][T29398] mapped:43189 shmem:655 pagetables:3605 [ 774.972894][T29398] sec_pagetables:0 bounce:0 [ 774.972894][T29398] kernel_misc_reclaimable:0 [ 774.972894][T29398] free:1282268 free_pcp:10686 free_cma:0 [ 774.972949][T29398] Node 0 active_anon:27704kB inactive_anon:0kB active_file:0kB inactive_file:174944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:172756kB dirty:832kB writeback:0kB shmem:2620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14680kB pagetables:14296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.973007][T29398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.973059][T29398] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.973121][T29398] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 774.973160][T29398] Node 0 DMA32 free:1176416kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27704kB inactive_anon:0kB active_file:0kB inactive_file:174944kB unevictable:0kB writepending:832kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:42744kB local_pcp:19956kB free_cma:0kB [ 774.973224][T29398] lowmem_reserve[]: 0 0 0 0 0 [ 774.973263][T29398] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.973323][T29398] lowmem_reserve[]: 0 0 0 0 0 [ 774.973393][T29398] Node 1 Normal free:3937296kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.973456][T29398] lowmem_reserve[]: 0 0 0 0 0 [ 774.973494][T29398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 774.973622][T29398] Node 0 DMA32: 2100*4kB (UME) 496*8kB (UME) 283*16kB (UME) 525*32kB (UME) 183*64kB (UME) 474*128kB (UME) 423*256kB (UM) 233*512kB (UME) 145*1024kB (UM) 5*2048kB (UME) 167*4096kB (UM) = 1176416kB [ 774.973807][T29398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 774.973914][T29398] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 3*32kB (UM) 10*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937296kB [ 774.974087][T29398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.974106][T29398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 774.974124][T29398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.974142][T29398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 774.974160][T29398] 44439 total pagecache pages [ 774.974169][T29398] 0 pages in swap cache [ 774.974177][T29398] Free swap = 124996kB [ 774.974187][T29398] Total swap = 124996kB [ 774.974196][T29398] 2097051 pages RAM [ 774.974205][T29398] 0 pages HighMem/MovableOnly [ 774.974213][T29398] 428661 pages reserved [ 774.974222][T29398] 0 pages cma reserved [ 776.175811][T29411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6920'. [ 777.131101][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6930'. [ 777.401597][T29458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6933'. [ 777.475768][T29464] net_ratelimit: 10 callbacks suppressed [ 777.475795][T29464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 777.957118][T14503] tipc: Subscription rejected, illegal request [ 778.921026][T29492] xt_hashlimit: size too large, truncated to 1048576 [ 778.951424][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6947'. [ 779.146537][T29498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 779.987759][T29518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.128416][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6959'. [ 780.129004][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6959'. [ 780.454049][T29539] openvswitch: netlink: Multiple metadata blocks provided [ 780.704158][T29550] xt_hashlimit: size too large, truncated to 1048576 [ 781.050796][T29567] xt_hashlimit: size too large, truncated to 1048576 [ 781.077564][T29564] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 781.101580][T29564] bond5 (unregistering): Released all slaves [ 781.473894][T29587] xt_hashlimit: size too large, truncated to 1048576 [ 781.492154][T29585] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6975'. [ 781.719091][T29592] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 781.942104][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6981'. [ 781.992727][T29591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.997044][T29591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.359777][T29616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6987'. [ 782.798063][T14502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.798117][T14502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.798156][T14502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.798195][T14502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.981777][T29629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6991'. [ 783.041879][T29633] netlink: 'syz.3.6991': attribute type 25 has an invalid length. [ 783.041921][T29633] netlink: 'syz.3.6991': attribute type 3 has an invalid length. [ 783.041937][T29633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6991'. [ 783.186524][T29639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 783.249989][T29642] netlink: 'syz.4.6996': attribute type 39 has an invalid length. [ 783.531534][ T12] IPVS: starting estimator thread 0... [ 783.618306][T29659] IPVS: using max 29 ests per chain, 69600 per kthread [ 783.671967][T29663] xt_hashlimit: size too large, truncated to 1048576 [ 783.735564][T29666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7009'. [ 783.735568][T29669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7009'. [ 783.809679][T29673] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7009'. [ 783.810756][T29671] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7009'. [ 783.859265][T29666] bridge1: port 1(erspan0) entered blocking state [ 783.861304][T29666] bridge1: port 1(erspan0) entered disabled state [ 783.861535][T29666] erspan0: entered allmulticast mode [ 783.867242][T29666] erspan0: entered promiscuous mode [ 784.247268][T29692] xt_hashlimit: size too large, truncated to 1048576 [ 784.503560][T29701] syzkaller0: entered promiscuous mode [ 784.503586][T29701] syzkaller0: entered allmulticast mode [ 784.984291][T29715] syzkaller0: entered promiscuous mode [ 784.984332][T29715] syzkaller0: entered allmulticast mode [ 785.227975][ T5619] Bluetooth: hci6: command 0x0406 tx timeout [ 785.277139][T29718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.396464][T29725] xt_hashlimit: size too large, truncated to 1048576 [ 785.732000][T29731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7030'. [ 786.370437][T29781] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7039'. [ 786.475090][T29791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7045'. [ 786.504306][T29788] netlink: 'syz.2.7044': attribute type 30 has an invalid length. [ 786.519265][T29788] ip_tables: iptables: counters copy to user failed while replacing table [ 786.700804][T29796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.709776][T29796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.750723][T29801] xt_hashlimit: size too large, truncated to 1048576 [ 787.239606][T29812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.265534][T29812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.405384][T29820] __nla_validate_parse: 5 callbacks suppressed [ 787.405409][T29820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7055'. [ 787.544377][T29828] xt_hashlimit: size too large, truncated to 1048576 [ 787.595840][T29824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7056'. [ 787.612732][T29824] erspan0: entered promiscuous mode [ 787.612946][T29824] macvlan2: entered allmulticast mode [ 787.612961][T29824] erspan0: entered allmulticast mode [ 787.887786][T29839] netlink: 'syz.6.7061': attribute type 1 has an invalid length. [ 787.887886][T29839] nbd: error processing sock list [ 787.888218][T29839] block nbd1: shutting down sockets [ 787.942259][T29839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7061'. [ 788.150729][T29852] xt_hashlimit: size too large, truncated to 1048576 [ 789.036874][T29888] tipc: Started in network mode [ 789.036894][T29888] tipc: Node identity , cluster identity 8 [ 789.036908][T29888] tipc: Failed to obtain node identity [ 789.036935][T29888] tipc: Enabling of bearer rejected, failed to enable media [ 789.134293][T29894] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7077'. [ 789.172504][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7077'. [ 789.173397][T29894] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7077'. [ 789.173423][T29894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7077'. [ 789.874752][T29922] netlink: 3784 bytes leftover after parsing attributes in process `syz.1.7086'. [ 789.896255][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7085'. [ 789.995607][T29922] syzkaller0: entered promiscuous mode [ 789.995633][T29922] syzkaller0: entered allmulticast mode [ 790.438864][T29947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7095'. [ 790.965156][T29973] netlink: 'syz.1.7103': attribute type 1 has an invalid length. [ 791.053480][T29973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 791.219669][T29979] bond1 (unregistering): Released all slaves [ 791.716231][T30001] syzkaller0: entered promiscuous mode [ 791.716259][T30001] syzkaller0: entered allmulticast mode [ 791.966749][T30008] tun0: tun_chr_ioctl cmd 1074025675 [ 791.966774][T30008] tun0: persist enabled [ 791.967229][T30008] tun0: tun_chr_ioctl cmd 1074025675 [ 791.967249][T30008] tun0: persist disabled [ 792.048728][T30016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.051169][T30016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.367294][T30025] FAULT_INJECTION: forcing a failure. [ 792.367294][T30025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.367365][T30025] CPU: 0 UID: 0 PID: 30025 Comm: syz.4.7119 Not tainted syzkaller #0 PREEMPT(full) [ 792.367393][T30025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 792.367408][T30025] Call Trace: [ 792.367417][T30025] [ 792.367428][T30025] dump_stack_lvl+0xe8/0x150 [ 792.367466][T30025] should_fail_ex+0x410/0x560 [ 792.367499][T30025] _copy_from_user+0x2d/0xb0 [ 792.367531][T30025] do_ip_vs_set_ctl+0x35d/0xaf0 [ 792.367669][T30025] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 792.367723][T30025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 792.367772][T30025] nf_setsockopt+0x26f/0x290 [ 792.367809][T30025] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 792.367837][T30025] do_sock_setsockopt+0x17c/0x1b0 [ 792.367869][T30025] __x64_sys_setsockopt+0x13d/0x1b0 [ 792.367912][T30025] do_syscall_64+0x166/0x520 [ 792.367944][T30025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.367967][T30025] ? clear_bhb_loop+0x70/0xc0 [ 792.367994][T30025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.368017][T30025] RIP: 0033:0x7f0689f9e199 [ 792.368038][T30025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.368057][T30025] RSP: 002b:00007f068af3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 792.368081][T30025] RAX: ffffffffffffffda RBX: 00007f068a225fa0 RCX: 00007f0689f9e199 [ 792.368097][T30025] RDX: 0000000000000488 RSI: 0000000000000000 RDI: 0000000000000003 [ 792.368111][T30025] RBP: 00007f068af3b090 R08: 0000000000000044 R09: 0000000000000000 [ 792.368126][T30025] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 792.368140][T30025] R13: 00007f068a226038 R14: 00007f068a225fa0 R15: 00007fff957b2a48 [ 792.368176][T30025] [ 792.980007][T30053] FAULT_INJECTION: forcing a failure. [ 792.980007][T30053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.980044][T30053] CPU: 0 UID: 0 PID: 30053 Comm: syz.2.7130 Not tainted syzkaller #0 PREEMPT(full) [ 792.980069][T30053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 792.980084][T30053] Call Trace: [ 792.980093][T30053] [ 792.980103][T30053] dump_stack_lvl+0xe8/0x150 [ 792.980141][T30053] should_fail_ex+0x410/0x560 [ 792.980173][T30053] _copy_from_user+0x2d/0xb0 [ 792.980205][T30053] inet6_ioctl+0x1ac/0x2e0 [ 792.980230][T30053] ? __pfx_inet6_ioctl+0x10/0x10 [ 792.980251][T30053] ? tomoyo_path_number_perm+0x219/0x5f0 [ 792.980287][T30053] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 792.980325][T30053] sock_do_ioctl+0x101/0x320 [ 792.980352][T30053] ? __pfx_sock_do_ioctl+0x10/0x10 [ 792.980373][T30053] ? hook_file_ioctl+0x1f2/0x600 [ 792.980417][T30053] sock_ioctl+0x57a/0x7e0 [ 792.980442][T30053] ? __pfx_sock_ioctl+0x10/0x10 [ 792.980464][T30053] ? __fget_files+0x2a/0x420 [ 792.980493][T30053] ? __fget_files+0x3a2/0x420 [ 792.980522][T30053] ? __fget_files+0x2a/0x420 [ 792.980554][T30053] ? bpf_lsm_file_ioctl+0x9/0x20 [ 792.980587][T30053] ? __pfx_sock_ioctl+0x10/0x10 [ 792.980607][T30053] __se_sys_ioctl+0xfc/0x170 [ 792.980633][T30053] do_syscall_64+0x166/0x520 [ 792.980668][T30053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.980691][T30053] ? clear_bhb_loop+0x70/0xc0 [ 792.980719][T30053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.980742][T30053] RIP: 0033:0x7f9f2f99e199 [ 792.980763][T30053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.980784][T30053] RSP: 002b:00007f9f3080c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.980810][T30053] RAX: ffffffffffffffda RBX: 00007f9f2fc25fa0 RCX: 00007f9f2f99e199 [ 792.980827][T30053] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000003 [ 792.980843][T30053] RBP: 00007f9f3080c090 R08: 0000000000000000 R09: 0000000000000000 [ 792.980871][T30053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.980884][T30053] R13: 00007f9f2fc26038 R14: 00007f9f2fc25fa0 R15: 00007fff0ccef638 [ 792.980918][T30053] [ 793.264135][T30059] __nla_validate_parse: 5 callbacks suppressed [ 793.264158][T30059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7133'. [ 793.264176][T30059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7133'. [ 793.872900][T30087] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 794.023417][T30098] FAULT_INJECTION: forcing a failure. [ 794.023417][T30098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.023475][T30098] CPU: 1 UID: 0 PID: 30098 Comm: syz.3.7149 Not tainted syzkaller #0 PREEMPT(full) [ 794.023501][T30098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.023515][T30098] Call Trace: [ 794.023525][T30098] [ 794.023535][T30098] dump_stack_lvl+0xe8/0x150 [ 794.023571][T30098] should_fail_ex+0x410/0x560 [ 794.023603][T30098] _copy_from_user+0x2d/0xb0 [ 794.023632][T30098] ___sys_sendmsg+0x1c6/0x360 [ 794.023663][T30098] ? __lock_acquire+0x747/0x2de0 [ 794.023691][T30098] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.023720][T30098] ? __lock_acquire+0x747/0x2de0 [ 794.023775][T30098] ? kstrtouint+0x6e/0xe0 [ 794.023840][T30098] __sys_sendmmsg+0x273/0x4d0 [ 794.023876][T30098] ? __pfx___sys_sendmmsg+0x10/0x10 [ 794.023916][T30098] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.023964][T30098] ? ksys_write+0x242/0x270 [ 794.024000][T30098] ? __pfx_ksys_write+0x10/0x10 [ 794.024040][T30098] __x64_sys_sendmmsg+0xa0/0xc0 [ 794.024073][T30098] do_syscall_64+0x166/0x520 [ 794.024105][T30098] ? trace_irq_disable+0x3b/0x140 [ 794.024127][T30098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.024150][T30098] ? clear_bhb_loop+0x70/0xc0 [ 794.024178][T30098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.024200][T30098] RIP: 0033:0x7fe23e59e199 [ 794.024220][T30098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.024240][T30098] RSP: 002b:00007fe23f3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.024265][T30098] RAX: ffffffffffffffda RBX: 00007fe23e825fa0 RCX: 00007fe23e59e199 [ 794.024283][T30098] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 794.024299][T30098] RBP: 00007fe23f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 794.024314][T30098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.024333][T30098] R13: 00007fe23e826038 R14: 00007fe23e825fa0 R15: 00007ffc73ffa708 [ 794.024368][T30098] [ 794.415013][T30113] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 794.462754][T30112] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 794.694258][T30124] FAULT_INJECTION: forcing a failure. [ 794.694258][T30124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.694296][T30124] CPU: 1 UID: 0 PID: 30124 Comm: syz.1.7160 Not tainted syzkaller #0 PREEMPT(full) [ 794.694325][T30124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.694339][T30124] Call Trace: [ 794.694349][T30124] [ 794.694359][T30124] dump_stack_lvl+0xe8/0x150 [ 794.694396][T30124] should_fail_ex+0x410/0x560 [ 794.694427][T30124] _copy_from_iter+0x1d3/0x1660 [ 794.694481][T30124] ? __lock_acquire+0x747/0x2de0 [ 794.694507][T30124] ? __pfx__copy_from_iter+0x10/0x10 [ 794.694551][T30124] tun_get_user+0x52f/0x44d0 [ 794.694595][T30124] ? aa_file_perm+0x18b/0x15f0 [ 794.694633][T30124] ? aa_file_perm+0x4ed/0x15f0 [ 794.694664][T30124] ? __pfx_tun_get_user+0x10/0x10 [ 794.694693][T30124] ? __lock_acquire+0x747/0x2de0 [ 794.694720][T30124] ? kstrtoull+0x137/0x1d0 [ 794.694751][T30124] ? ref_tracker_alloc+0x172/0x530 [ 794.694778][T30124] ? lock_acquire+0x115/0x350 [ 794.694802][T30124] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 794.694834][T30124] ? lock_acquire+0x115/0x350 [ 794.694857][T30124] ? tun_get+0x1c/0x2f0 [ 794.694888][T30124] ? tun_get+0x1c/0x2f0 [ 794.694912][T30124] ? tun_get+0x1c/0x2f0 [ 794.694941][T30124] tun_chr_write_iter+0x113/0x200 [ 794.694970][T30124] vfs_write+0x612/0xba0 [ 794.695013][T30124] ? __pfx_vfs_write+0x10/0x10 [ 794.695059][T30124] ? __fget_files+0x2a/0x420 [ 794.695100][T30124] ksys_write+0x150/0x270 [ 794.695138][T30124] ? __pfx_ksys_write+0x10/0x10 [ 794.695193][T30124] do_syscall_64+0x166/0x520 [ 794.695227][T30124] ? trace_irq_disable+0x3b/0x140 [ 794.695250][T30124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.695274][T30124] ? clear_bhb_loop+0x70/0xc0 [ 794.695302][T30124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.695336][T30124] RIP: 0033:0x7f5f92f9e199 [ 794.695357][T30124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.695377][T30124] RSP: 002b:00007f5f93ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.695401][T30124] RAX: ffffffffffffffda RBX: 00007f5f93225fa0 RCX: 00007f5f92f9e199 [ 794.695418][T30124] RDX: 000000000000006e RSI: 00002000000018c0 RDI: 0000000000000004 [ 794.695433][T30124] RBP: 00007f5f93ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 794.695447][T30124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.695461][T30124] R13: 00007f5f93226038 R14: 00007f5f93225fa0 R15: 00007ffe9f364918 [ 794.695495][T30124] [ 794.990459][T30129] xt_hashlimit: size too large, truncated to 1048576 [ 795.424014][T30146] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7166'. [ 795.472925][T30146] vlan2: entered allmulticast mode [ 795.485525][ T31] audit: type=1800 audit(1791211004.200:18): pid=30142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7164" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1150 res=0 errno=0 [ 795.574472][T30153] netlink: 'syz.1.7167': attribute type 3 has an invalid length. [ 795.574496][T30153] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7167'. [ 795.726234][T30158] syzkaller0: entered promiscuous mode [ 795.726261][T30158] syzkaller0: entered allmulticast mode [ 795.756396][T30162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7167'. [ 795.756426][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7167'. [ 795.756444][T30162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7167'. [ 795.756467][T30162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7167'. [ 796.148609][T30164] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.149374][T30164] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.385702][T30181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.440722][T30164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.477189][T30182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.593630][T30186] xt_hashlimit: size too large, truncated to 1048576 [ 796.798674][T30164] erspan0: left allmulticast mode [ 796.806798][T30164] macvlan2: left allmulticast mode [ 796.828977][ T44] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.829074][ T44] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.829117][ T44] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.829158][ T44] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.067432][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7182'. [ 797.290574][T30206] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7186'. [ 797.563049][T30216] veth1_to_bond: mtu less than device minimum [ 797.847454][T30239] netlink: 'syz.2.7197': attribute type 21 has an invalid length. [ 797.847484][T30239] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.847571][T30239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.847583][T30239] IPv6: NLM_F_CREATE should be set when creating new route [ 797.847625][T30239] IPv6: NLM_F_CREATE should be set when creating new route [ 797.847651][T30239] IPv6: NLM_F_CREATE should be set when creating new route [ 798.345198][T30257] __nla_validate_parse: 8 callbacks suppressed [ 798.345225][T30257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7203'. [ 798.405393][T30263] syzkaller0: entered promiscuous mode [ 798.405427][T30263] syzkaller0: entered allmulticast mode [ 798.632854][T30270] gre1: entered promiscuous mode [ 798.933865][T30271] syzkaller0: entered promiscuous mode [ 798.933894][T30271] syzkaller0: entered allmulticast mode [ 802.250556][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7218'. [ 802.251676][T30297] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 802.958418][T29772] IPVS: starting estimator thread 0... [ 803.048777][T30359] IPVS: using max 27 ests per chain, 64800 per kthread [ 803.092396][T30364] netlink: 'syz.3.7229': attribute type 21 has an invalid length. [ 803.092428][T30364] IPv6: NLM_F_CREATE should be specified when creating new route [ 803.092523][T30364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.092536][T30364] IPv6: NLM_F_CREATE should be set when creating new route [ 803.092578][T30364] IPv6: NLM_F_CREATE should be set when creating new route [ 803.092605][T30364] IPv6: NLM_F_CREATE should be set when creating new route [ 804.871170][T30399] syzkaller0: entered promiscuous mode [ 804.871197][T30399] syzkaller0: entered allmulticast mode [ 805.012242][T30405] lo: entered allmulticast mode [ 805.012466][T30405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.188220][T30382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 805.667617][ T1384] IPVS: starting estimator thread 0... [ 805.685810][T30425] netlink: 'syz.4.7255': attribute type 1 has an invalid length. [ 805.707981][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 805.748266][T30426] IPVS: using max 26 ests per chain, 62400 per kthread [ 806.446091][T30448] netlink: 'syz.1.7264': attribute type 1 has an invalid length. [ 806.475295][T30446] bond1: Removing last arp target with arp_interval on [ 806.512105][T30452] ip_tables: iptables: counters copy to user failed while replacing table [ 806.513629][T30448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 806.619141][T30448] bond6: (slave geneve3): making interface the new active one [ 806.638896][T30448] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 807.041770][T30473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.144568][T30477] syzkaller0: entered promiscuous mode [ 807.144604][T30477] syzkaller0: entered allmulticast mode [ 807.165738][T30479] pim6reg: entered allmulticast mode [ 807.221518][ T1384] IPVS: starting estimator thread 0... [ 807.238387][T20377] Bluetooth: hci7: command 0x0405 tx timeout [ 807.306221][T30482] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 807.308282][T30480] IPVS: using max 33 ests per chain, 79200 per kthread [ 807.417375][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7277'. [ 807.522367][T30488] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7278'. [ 807.884302][T30498] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.097648][T30498] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.163624][T30478] pim6reg: left allmulticast mode [ 808.383201][T30498] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.632034][ T5619] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 808.666439][T30498] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.721044][T30513] lo: entered promiscuous mode [ 808.810259][T30525] FAULT_INJECTION: forcing a failure. [ 808.810259][T30525] name failslab, interval 1, probability 0, space 0, times 0 [ 808.810300][T30525] CPU: 1 UID: 0 PID: 30525 Comm: syz.1.7288 Not tainted syzkaller #0 PREEMPT(full) [ 808.810340][T30525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 808.810355][T30525] Call Trace: [ 808.810364][T30525] [ 808.810382][T30525] dump_stack_lvl+0xe8/0x150 [ 808.810421][T30525] should_fail_ex+0x410/0x560 [ 808.810463][T30525] should_failslab+0xa8/0x100 [ 808.810495][T30525] __kvmalloc_node_noprof+0x176/0x820 [ 808.810523][T30525] ? rcu_is_watching+0x16/0xb0 [ 808.810552][T30525] ? analyze_subprog+0x846/0x9e00 [ 808.810578][T30525] ? analyze_subprog+0x846/0x9e00 [ 808.810618][T30525] analyze_subprog+0x846/0x9e00 [ 808.810644][T30525] ? is_bpf_text_address+0x292/0x2b0 [ 808.810679][T30525] ? kernel_text_address+0xa5/0xe0 [ 808.810713][T30525] ? arch_stack_walk+0xfb/0x150 [ 808.810754][T30525] ? __pfx_stack_trace_save+0x10/0x10 [ 808.810791][T30525] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 808.810841][T30525] ? call_instance+0x263/0x560 [ 808.810865][T30525] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 808.810891][T30525] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 808.810920][T30525] ? __pfx_analyze_subprog+0x10/0x10 [ 808.810945][T30525] ? __x64_sys_bpf+0xba/0xd0 [ 808.810971][T30525] ? do_syscall_64+0x166/0x520 [ 808.811003][T30525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.811087][T30525] ? call_instance+0x263/0x560 [ 808.811112][T30525] ? rcu_is_watching+0x16/0xb0 [ 808.811139][T30525] ? call_instance+0x263/0x560 [ 808.811162][T30525] ? trace_kmalloc+0x2a/0xf0 [ 808.811186][T30525] ? call_instance+0x263/0x560 [ 808.811220][T30525] ? __kvmalloc_node_noprof+0x52f/0x820 [ 808.811254][T30525] ? __kvmalloc_node_noprof+0x345/0x820 [ 808.811279][T30525] ? call_instance+0x263/0x560 [ 808.811303][T30525] ? call_instance+0x263/0x560 [ 808.811336][T30525] ? call_instance+0x42e/0x560 [ 808.811371][T30525] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 808.811407][T30525] ? kprobe_prog_func_proto+0x121/0x2b0 [ 808.811472][T30525] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 808.811506][T30525] ? __kvmalloc_node_noprof+0x345/0x820 [ 808.811531][T30525] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 808.811558][T30525] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 808.811593][T30525] bpf_compute_live_registers+0x8d3/0x1ff0 [ 808.811642][T30525] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 808.811683][T30525] bpf_check+0x2746/0x2ef0 [ 808.811729][T30525] ? __pfx_bpf_check+0x10/0x10 [ 808.811758][T30525] ? bpf_obj_name_cpy+0x194/0x1e0 [ 808.811795][T30525] bpf_prog_load+0x14d6/0x1c20 [ 808.811837][T30525] ? __pfx_bpf_prog_load+0x10/0x10 [ 808.811896][T30525] __sys_bpf+0xd0d/0xd90 [ 808.811937][T30525] ? __pfx___sys_bpf+0x10/0x10 [ 808.811976][T30525] ? __fget_files+0x2a/0x420 [ 808.812038][T30525] ? ksys_write+0x242/0x270 [ 808.812081][T30525] ? __pfx_ksys_write+0x10/0x10 [ 808.812122][T30525] __x64_sys_bpf+0xba/0xd0 [ 808.812149][T30525] do_syscall_64+0x166/0x520 [ 808.812183][T30525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.812206][T30525] ? clear_bhb_loop+0x70/0xc0 [ 808.812235][T30525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.812259][T30525] RIP: 0033:0x7f5f92f9e199 [ 808.812281][T30525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.812302][T30525] RSP: 002b:00007f5f93ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 808.812328][T30525] RAX: ffffffffffffffda RBX: 00007f5f93225fa0 RCX: 00007f5f92f9e199 [ 808.812346][T30525] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 808.812360][T30525] RBP: 00007f5f93ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 808.812390][T30525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.812405][T30525] R13: 00007f5f93226038 R14: 00007f5f93225fa0 R15: 00007ffe9f364918 [ 808.812443][T30525] [ 809.287747][T30513] tunl0: entered promiscuous mode [ 809.301960][T30513] gre0: entered promiscuous mode [ 809.315364][T30533] FAULT_INJECTION: forcing a failure. [ 809.315364][T30533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.315405][T30533] CPU: 1 UID: 0 PID: 30533 Comm: syz.1.7289 Not tainted syzkaller #0 PREEMPT(full) [ 809.315435][T30533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 809.315450][T30533] Call Trace: [ 809.315460][T30533] [ 809.315471][T30533] dump_stack_lvl+0xe8/0x150 [ 809.315513][T30533] should_fail_ex+0x410/0x560 [ 809.315549][T30533] _copy_from_user+0x2d/0xb0 [ 809.315585][T30533] ___sys_sendmsg+0x1c6/0x360 [ 809.315619][T30533] ? __lock_acquire+0x747/0x2de0 [ 809.315652][T30533] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.315684][T30533] ? __lock_acquire+0x747/0x2de0 [ 809.315725][T30533] ? kstrtouint+0x6e/0xe0 [ 809.315801][T30533] __sys_sendmmsg+0x273/0x4d0 [ 809.315844][T30533] ? __pfx___sys_sendmmsg+0x10/0x10 [ 809.315891][T30533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 809.315948][T30533] ? ksys_write+0x242/0x270 [ 809.315991][T30533] ? __pfx_ksys_write+0x10/0x10 [ 809.316037][T30533] __x64_sys_sendmmsg+0xa0/0xc0 [ 809.316076][T30533] do_syscall_64+0x166/0x520 [ 809.316112][T30533] ? trace_irq_disable+0x3b/0x140 [ 809.316138][T30533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.316166][T30533] ? clear_bhb_loop+0x70/0xc0 [ 809.316200][T30533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.316227][T30533] RIP: 0033:0x7f5f92f9e199 [ 809.316252][T30533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.316274][T30533] RSP: 002b:00007f5f93ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.316302][T30533] RAX: ffffffffffffffda RBX: 00007f5f93225fa0 RCX: 00007f5f92f9e199 [ 809.316322][T30533] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 809.316340][T30533] RBP: 00007f5f93ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 809.316357][T30533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.316373][T30533] R13: 00007f5f93226038 R14: 00007f5f93225fa0 R15: 00007ffe9f364918 [ 809.316414][T30533] [ 809.561893][T30513] gretap0: entered promiscuous mode [ 809.573999][T30513] erspan0: entered promiscuous mode [ 809.583360][T30513] ip_vti0: entered promiscuous mode [ 809.594680][T30513] ip6_vti0: entered promiscuous mode [ 809.676068][T30513] ip6tnl0: entered promiscuous mode [ 809.689605][T30513] ip6gre0: entered promiscuous mode [ 809.727311][T30513] syz_tun: entered promiscuous mode [ 809.784179][T30513] ip6gretap0: entered promiscuous mode [ 809.787923][T30513] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.788721][T30513] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.816386][T30513] bridge0: entered promiscuous mode [ 809.828894][T30513] vcan0: entered promiscuous mode [ 809.849879][T30513] bond0: entered promiscuous mode [ 809.849905][T30513] ÿÿÿ: entered promiscuous mode [ 809.850128][T30513] bond_slave_1: entered promiscuous mode [ 809.880558][T30513] team0: entered promiscuous mode [ 809.880587][T30513] team_slave_0: entered promiscuous mode [ 809.880828][T30513] team_slave_1: entered promiscuous mode [ 809.905584][T30513] batman_adv: batadv0: Interface deactivated: dummy0 [ 809.905762][T30513] dummy0: entered promiscuous mode [ 809.921873][T30513] nlmon0: entered promiscuous mode [ 809.926454][T30513] batadv0: entered promiscuous mode [ 809.949623][T30513] vxcan0: entered promiscuous mode [ 809.951011][T30513] vxcan1: entered promiscuous mode [ 809.955660][T30513] veth0: entered promiscuous mode [ 809.982538][T30513] veth1: entered promiscuous mode [ 809.994488][T30513] wg0: entered promiscuous mode [ 810.005036][T30513] wg1: entered promiscuous mode [ 810.016814][T30513] wg2: entered promiscuous mode [ 810.025613][T30513] veth0_to_bridge: entered promiscuous mode [ 810.053810][T30513] veth1_to_bridge: entered promiscuous mode [ 810.073951][T30513] veth0_to_bond: entered promiscuous mode [ 810.085872][T30513] veth1_to_bond: entered promiscuous mode [ 810.103373][T30513] veth0_to_team: entered promiscuous mode [ 810.132019][T30513] veth1_to_team: entered promiscuous mode [ 810.152163][T30513] veth0_to_batadv: entered promiscuous mode [ 810.165891][T30513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.165952][T30513] batadv_slave_0: entered promiscuous mode [ 810.182245][T30513] veth1_to_batadv: entered promiscuous mode [ 810.193701][T30513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.193762][T30513] batadv_slave_1: entered promiscuous mode [ 810.197101][T30513] xfrm0: entered promiscuous mode [ 810.225228][T30513] veth0_to_hsr: entered promiscuous mode [ 810.270246][T30513] veth1_to_hsr: entered promiscuous mode [ 810.286525][T30513] hsr0: entered promiscuous mode [ 810.300603][T30513] veth1_virt_wifi: entered promiscuous mode [ 810.306877][T30513] veth0_virt_wifi: entered promiscuous mode [ 810.330245][T30513] virt_wifi0: entered promiscuous mode [ 810.343804][T30513] vlan0: entered promiscuous mode [ 810.346808][T30513] vlan1: entered promiscuous mode [ 810.355833][T30513] macvlan0: entered promiscuous mode [ 810.374142][T30513] macvlan1: entered promiscuous mode [ 810.384386][T30513] ipvlan0: entered promiscuous mode [ 810.386634][T30513] ipvlan1: entered promiscuous mode [ 810.411149][T30513] macvtap0: entered promiscuous mode [ 810.413792][T30513] macsec0: entered promiscuous mode [ 810.416397][T30513] geneve0: entered promiscuous mode [ 810.447020][T30513] geneve1: entered promiscuous mode [ 810.460223][T30513] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 810.466533][T30513] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 810.484485][T30513] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 810.498911][T30513] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 810.507154][T30513] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 810.526888][T30513] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 810.537390][T30513] caif0: entered promiscuous mode [ 810.544152][T30513] vlan2: entered promiscuous mode [ 810.555173][T30513] ifb2: entered promiscuous mode [ 810.564087][T30513] veth2: entered promiscuous mode [ 810.566452][T30513] veth3: entered promiscuous mode [ 810.580643][T30513] syztnl2: entered promiscuous mode [ 810.582655][T30513] bridge1: entered promiscuous mode [ 810.584873][T30513] gre1: entered promiscuous mode [ 810.621670][T30513] pimreg: entered promiscuous mode [ 810.622655][T30513] bond1: entered promiscuous mode [ 810.625012][T30513] bond2: entered promiscuous mode [ 810.652353][T30513] bridge2: entered promiscuous mode [ 810.666318][T30513] gretap1: entered promiscuous mode [ 810.675531][T30513] bridge5: entered promiscuous mode [ 810.675698][T30513] vlan4: entered promiscuous mode [ 810.682554][T29757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.689685][T29772] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.690164][T29772] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.690279][T29772] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.779936][T30530] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7287'. [ 810.808543][T30546] tipc: Enabling of bearer rejected, failed to enable media [ 810.882417][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7291'. [ 810.996053][T29757] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.044741][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.080247][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.080606][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.323294][T30572] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7297'. [ 811.323360][T30572] netlink: 'syz.6.7297': attribute type 7 has an invalid length. [ 811.323376][T30572] netlink: 'syz.6.7297': attribute type 8 has an invalid length. [ 811.323391][T30572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7297'. [ 811.395593][T30572] team0: entered promiscuous mode [ 811.395618][T30572] team_slave_0: entered promiscuous mode [ 811.395829][T30572] team_slave_1: entered promiscuous mode [ 811.415736][T30572] bond0: entered promiscuous mode [ 811.415762][T30572] ÿÿÿ: entered promiscuous mode [ 811.415983][T30572] bond_slave_1: entered promiscuous mode [ 811.437400][T30572] erspan0: entered promiscuous mode [ 811.444727][T30572] debugfs: 'hsr1' already exists in 'hsr' [ 811.444754][T30572] Cannot create hsr debugfs directory [ 811.444824][T30572] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 811.445441][T30572] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 811.497753][T30580] sctp: [Deprecated]: syz.4.7299 (pid 30580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.497753][T30580] Use struct sctp_sack_info instead [ 811.570919][T30580] netlink: 'syz.4.7299': attribute type 21 has an invalid length. [ 811.570949][T30580] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7299'. [ 811.571063][T30580] netlink: 'syz.4.7299': attribute type 4 has an invalid length. [ 811.571082][T30580] netlink: 'syz.4.7299': attribute type 5 has an invalid length. [ 811.571097][T30580] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7299'. [ 812.012937][T30613] FAULT_INJECTION: forcing a failure. [ 812.012937][T30613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 812.012964][T30613] CPU: 0 UID: 0 PID: 30613 Comm: syz.2.7311 Not tainted syzkaller #0 PREEMPT(full) [ 812.012982][T30613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 812.012992][T30613] Call Trace: [ 812.012998][T30613] [ 812.013005][T30613] dump_stack_lvl+0xe8/0x150 [ 812.013049][T30613] should_fail_ex+0x410/0x560 [ 812.013075][T30613] prepare_alloc_pages+0x223/0x600 [ 812.013098][T30613] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 812.013118][T30613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 812.013140][T30613] ? __pfx_policy_nodemask+0x10/0x10 [ 812.013167][T30613] alloc_pages_mpol+0x21e/0x390 [ 812.013192][T30613] folio_alloc_mpol_noprof+0x39/0x160 [ 812.013214][T30613] vma_alloc_folio_noprof+0xe1/0x1e0 [ 812.013236][T30613] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 812.013265][T30613] do_wp_page+0x117d/0x4b80 [ 812.013300][T30613] ? __pfx_do_wp_page+0x10/0x10 [ 812.013340][T30613] ? do_raw_spin_lock+0x12b/0x2f0 [ 812.013376][T30613] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 812.013414][T30613] handle_mm_fault+0x15d7/0x3750 [ 812.013444][T30613] ? handle_mm_fault+0xf1/0x3750 [ 812.013474][T30613] ? __pfx_handle_mm_fault+0x10/0x10 [ 812.013506][T30613] ? __lock_acquire+0x747/0x2de0 [ 812.013526][T30613] ? lock_mm_and_find_vma+0xa7/0x340 [ 812.013556][T30613] do_user_addr_fault+0x746/0x1340 [ 812.013593][T30613] exc_page_fault+0x6a/0xc0 [ 812.013618][T30613] asm_exc_page_fault+0x26/0x30 [ 812.013634][T30613] RIP: 0010:__put_user_4+0xd/0x30 [ 812.013673][T30613] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 96 03 00 90 90 90 90 90 90 90 90 90 90 [ 812.013693][T30613] RSP: 0018:ffffc90004b1fc98 EFLAGS: 00050202 [ 812.013714][T30613] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003038 [ 812.013730][T30613] RDX: 000000000859fa7d RSI: ffffffff8e688ec6 RDI: ffffffff8c6dad80 [ 812.013746][T30613] RBP: ffffc90004b1feb0 R08: ffffffff821ed4ef R09: 0000000000000000 [ 812.013762][T30613] R10: dffffc0000000000 R11: fffffbfff20f3410 R12: 1ffff92000963f9c [ 812.013780][T30613] R13: 0000000000040000 R14: 0000200000003000 R15: 0000000000000291 [ 812.013804][T30613] ? __might_fault+0xaf/0x130 [ 812.013843][T30613] __sys_sendmmsg+0x2a7/0x4d0 [ 812.013871][T30613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 812.013900][T30613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.013941][T30613] ? ksys_write+0x242/0x270 [ 812.013986][T30613] ? __pfx_ksys_write+0x10/0x10 [ 812.014017][T30613] __x64_sys_sendmmsg+0xa0/0xc0 [ 812.014048][T30613] do_syscall_64+0x166/0x520 [ 812.014071][T30613] ? trace_irq_disable+0x3b/0x140 [ 812.014088][T30613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.014104][T30613] ? clear_bhb_loop+0x70/0xc0 [ 812.014125][T30613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.014141][T30613] RIP: 0033:0x7f9f2f99e199 [ 812.014156][T30613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.014169][T30613] RSP: 002b:00007f9f3080c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 812.014186][T30613] RAX: ffffffffffffffda RBX: 00007f9f2fc25fa0 RCX: 00007f9f2f99e199 [ 812.014198][T30613] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 812.014210][T30613] RBP: 00007f9f3080c090 R08: 0000000000000000 R09: 0000000000000000 [ 812.014220][T30613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.014230][T30613] R13: 00007f9f2fc26038 R14: 00007f9f2fc25fa0 R15: 00007fff0ccef638 [ 812.014256][T30613] [ 812.409178][T30618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7312'. [ 812.481846][T30620] xt_hashlimit: size too large, truncated to 1048576 [ 812.914761][T30632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7318'. [ 812.914806][T30632] netlink: 'syz.2.7318': attribute type 7 has an invalid length. [ 812.914825][T30632] netlink: 'syz.2.7318': attribute type 8 has an invalid length. [ 812.914840][T30632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7318'. [ 812.954266][T30632] debugfs: 'hsr1' already exists in 'hsr' [ 812.954296][T30632] Cannot create hsr debugfs directory [ 812.954400][T30632] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 812.954423][T30632] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 812.954442][T30632] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 812.964783][T30632] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 813.427738][T30652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 813.437193][T30652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7324'. [ 813.437217][T30652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7324'. [ 813.552914][T30656] bond3 (unregistering): Released all slaves [ 813.586566][T30656] netlink: 'syz.2.7324': attribute type 2 has an invalid length. [ 813.586592][T30656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7324'. [ 814.686283][T30586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 814.935523][T30666] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 815.341246][T30689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7335'. [ 815.834584][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7343'. [ 815.834626][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7343'. [ 815.910403][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7344'. [ 815.912536][T30716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.245085][T30733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7346'. [ 816.245127][T30733] netlink: 'syz.4.7346': attribute type 7 has an invalid length. [ 816.245144][T30733] netlink: 'syz.4.7346': attribute type 8 has an invalid length. [ 816.286433][T30733] bond0: entered promiscuous mode [ 816.286459][T30733] bond_slave_0: entered promiscuous mode [ 816.288399][T30733] bond_slave_1: entered promiscuous mode [ 816.309912][T30733] bond0: left promiscuous mode [ 816.309971][T30733] bond_slave_0: left promiscuous mode [ 816.312309][T30733] bond_slave_1: left promiscuous mode [ 816.535428][T30742] xt_hashlimit: size too large, truncated to 1048576 [ 817.076037][T30761] netlink: 'syz.4.7353': attribute type 1 has an invalid length. [ 817.164123][T30761] bond1: entered promiscuous mode [ 817.165611][T30761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 817.207445][T30767] vlan2: entered allmulticast mode [ 817.207473][T30767] bond1: entered allmulticast mode [ 817.315582][T30761] bond1: (slave bridge2): making interface the new active one [ 817.315611][T30761] bridge2: entered promiscuous mode [ 817.315791][T30761] bridge2: entered allmulticast mode [ 817.319527][T30761] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 817.682799][T30788] xt_hashlimit: size too large, truncated to 1048576 [ 817.901244][T30794] ip_tables: iptables: counters copy to user failed while replacing table [ 818.203285][T30806] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 818.320889][T30811] __nla_validate_parse: 1 callbacks suppressed [ 818.320914][T30811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7374'. [ 818.382481][T30817] ip_tables: iptables: counters copy to user failed while replacing table [ 818.415477][T30812] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7374'. [ 818.442686][T30822] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7377'. [ 818.510260][T30824] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7377'. [ 818.511023][T30822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7377'. [ 818.555684][T30828] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7378'. [ 818.573554][T30828] vlan2: entered allmulticast mode [ 818.573578][T30828] gretap0: entered allmulticast mode [ 818.653181][T30831] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.7379'. [ 819.285454][T30833] netlink: 380 bytes leftover after parsing attributes in process `syz.2.7380'. [ 819.285482][T30833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7380'. [ 819.285498][T30833] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7380'. [ 819.840879][T30861] block nbd1: Unsupported socket: should be TCP or UNIX. [ 820.103714][T30874] FAULT_INJECTION: forcing a failure. [ 820.103714][T30874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.103753][T30874] CPU: 1 UID: 0 PID: 30874 Comm: syz.3.7392 Not tainted syzkaller #0 PREEMPT(full) [ 820.103779][T30874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.103794][T30874] Call Trace: [ 820.103803][T30874] [ 820.103819][T30874] dump_stack_lvl+0xe8/0x150 [ 820.103856][T30874] should_fail_ex+0x410/0x560 [ 820.103888][T30874] prepare_alloc_pages+0x223/0x600 [ 820.103921][T30874] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 820.103951][T30874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 820.103986][T30874] ? __pfx_policy_nodemask+0x10/0x10 [ 820.104022][T30874] ? __get_vm_area_node+0x155/0x2f0 [ 820.104053][T30874] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 820.104086][T30874] ? __vmalloc_noprof+0xd2/0x120 [ 820.104117][T30874] ? bpf_prog_calc_tag+0x51/0x370 [ 820.104149][T30874] ? check_and_resolve_insns+0xbb/0x21d0 [ 820.104188][T30874] ? bpf_prog_load+0x14d6/0x1c20 [ 820.104213][T30874] ? __sys_bpf+0xd0d/0xd90 [ 820.104246][T30874] ? __x64_sys_bpf+0xba/0xd0 [ 820.104270][T30874] ? do_syscall_64+0x166/0x520 [ 820.104303][T30874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.104330][T30874] alloc_pages_mpol+0x21e/0x390 [ 820.104367][T30874] alloc_pages_noprof+0xb1/0x2b0 [ 820.104399][T30874] get_free_pages_noprof+0xf/0x80 [ 820.104425][T30874] __kasan_populate_vmalloc+0x38/0x1c0 [ 820.104448][T30874] ? do_raw_spin_unlock+0xf5/0x200 [ 820.104484][T30874] alloc_vmap_area+0xd1a/0x1420 [ 820.104533][T30874] ? __pfx_alloc_vmap_area+0x10/0x10 [ 820.104562][T30874] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 820.104588][T30874] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 820.104612][T30874] ? __get_vm_area_node+0x155/0x2f0 [ 820.104657][T30874] __get_vm_area_node+0x200/0x2f0 [ 820.104698][T30874] __vmalloc_node_range_noprof+0x343/0x1540 [ 820.104735][T30874] ? bpf_prog_calc_tag+0x51/0x370 [ 820.104763][T30874] ? __x64_sys_bpf+0xba/0xd0 [ 820.104783][T30874] ? do_syscall_64+0x166/0x520 [ 820.104820][T30874] ? __kasan_kmalloc+0x93/0xb0 [ 820.104846][T30874] ? bpf_prog_load+0x14d6/0x1c20 [ 820.104871][T30874] ? __sys_bpf+0xd0d/0xd90 [ 820.104893][T30874] ? __x64_sys_bpf+0xba/0xd0 [ 820.104929][T30874] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 820.104975][T30874] ? bpf_prog_calc_tag+0x51/0x370 [ 820.105000][T30874] __vmalloc_noprof+0xd2/0x120 [ 820.105033][T30874] ? bpf_prog_calc_tag+0x51/0x370 [ 820.105063][T30874] bpf_prog_calc_tag+0x51/0x370 [ 820.105088][T30874] ? __pfx_cmp_subprogs+0x10/0x10 [ 820.105120][T30874] check_and_resolve_insns+0xbb/0x21d0 [ 820.105152][T30874] ? add_subprog+0x2e2/0x3f0 [ 820.105182][T30874] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 820.105220][T30874] bpf_check+0x18f9/0x2ef0 [ 820.105265][T30874] ? __pfx_bpf_check+0x10/0x10 [ 820.105294][T30874] ? bpf_obj_name_cpy+0x194/0x1e0 [ 820.105332][T30874] bpf_prog_load+0x14d6/0x1c20 [ 820.105372][T30874] ? __pfx_bpf_prog_load+0x10/0x10 [ 820.105426][T30874] __sys_bpf+0xd0d/0xd90 [ 820.105462][T30874] ? __pfx___sys_bpf+0x10/0x10 [ 820.105511][T30874] ? __fget_files+0x2a/0x420 [ 820.105560][T30874] ? ksys_write+0x242/0x270 [ 820.105594][T30874] ? __pfx_ksys_write+0x10/0x10 [ 820.105639][T30874] __x64_sys_bpf+0xba/0xd0 [ 820.105664][T30874] do_syscall_64+0x166/0x520 [ 820.105692][T30874] ? trace_irq_disable+0x3b/0x140 [ 820.105714][T30874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.105735][T30874] ? clear_bhb_loop+0x70/0xc0 [ 820.105763][T30874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.105785][T30874] RIP: 0033:0x7fe23e59e199 [ 820.105806][T30874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.105824][T30874] RSP: 002b:00007fe23f3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 820.105849][T30874] RAX: ffffffffffffffda RBX: 00007fe23e825fa0 RCX: 00007fe23e59e199 [ 820.105866][T30874] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 820.105881][T30874] RBP: 00007fe23f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 820.105896][T30874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.105910][T30874] R13: 00007fe23e826038 R14: 00007fe23e825fa0 R15: 00007ffc73ffa708 [ 820.105945][T30874] [ 820.106067][T30874] syz.3.7392: vmalloc error: size 224, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 820.106133][T30874] CPU: 1 UID: 0 PID: 30874 Comm: syz.3.7392 Not tainted syzkaller #0 PREEMPT(full) [ 820.106157][T30874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.106170][T30874] Call Trace: [ 820.106179][T30874] [ 820.106188][T30874] dump_stack_lvl+0xe8/0x150 [ 820.106220][T30874] warn_alloc+0x24d/0x270 [ 820.106244][T30874] ? lockdep_hardirqs_on+0x7b/0x110 [ 820.106279][T30874] ? __pfx_warn_alloc+0x10/0x10 [ 820.106300][T30874] ? kfree+0x1c5/0x650 [ 820.106342][T30874] ? __get_vm_area_node+0x219/0x2f0 [ 820.106381][T30874] __vmalloc_node_range_noprof+0x36b/0x1540 [ 820.106416][T30874] ? __x64_sys_bpf+0xba/0xd0 [ 820.106436][T30874] ? do_syscall_64+0x166/0x520 [ 820.106473][T30874] ? __kasan_kmalloc+0x93/0xb0 [ 820.106498][T30874] ? bpf_prog_load+0x14d6/0x1c20 [ 820.106522][T30874] ? __sys_bpf+0xd0d/0xd90 [ 820.106543][T30874] ? __x64_sys_bpf+0xba/0xd0 [ 820.106579][T30874] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 820.106637][T30874] ? bpf_prog_calc_tag+0x51/0x370 [ 820.106681][T30874] __vmalloc_noprof+0xd2/0x120 [ 820.106714][T30874] ? bpf_prog_calc_tag+0x51/0x370 [ 820.106744][T30874] bpf_prog_calc_tag+0x51/0x370 [ 820.106770][T30874] ? __pfx_cmp_subprogs+0x10/0x10 [ 820.106807][T30874] check_and_resolve_insns+0xbb/0x21d0 [ 820.106851][T30874] ? add_subprog+0x2e2/0x3f0 [ 820.106887][T30874] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 820.106926][T30874] bpf_check+0x18f9/0x2ef0 [ 820.106981][T30874] ? __pfx_bpf_check+0x10/0x10 [ 820.107010][T30874] ? bpf_obj_name_cpy+0x194/0x1e0 [ 820.107048][T30874] bpf_prog_load+0x14d6/0x1c20 [ 820.107087][T30874] ? __pfx_bpf_prog_load+0x10/0x10 [ 820.107141][T30874] __sys_bpf+0xd0d/0xd90 [ 820.107176][T30874] ? __pfx___sys_bpf+0x10/0x10 [ 820.107220][T30874] ? __fget_files+0x2a/0x420 [ 820.107270][T30874] ? ksys_write+0x242/0x270 [ 820.107307][T30874] ? __pfx_ksys_write+0x10/0x10 [ 820.107348][T30874] __x64_sys_bpf+0xba/0xd0 [ 820.107375][T30874] do_syscall_64+0x166/0x520 [ 820.107407][T30874] ? trace_irq_disable+0x3b/0x140 [ 820.107430][T30874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.107454][T30874] ? clear_bhb_loop+0x70/0xc0 [ 820.107483][T30874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.107506][T30874] RIP: 0033:0x7fe23e59e199 [ 820.107526][T30874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.107547][T30874] RSP: 002b:00007fe23f3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 820.107571][T30874] RAX: ffffffffffffffda RBX: 00007fe23e825fa0 RCX: 00007fe23e59e199 [ 820.107588][T30874] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 820.107604][T30874] RBP: 00007fe23f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 820.107627][T30874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.107641][T30874] R13: 00007fe23e826038 R14: 00007fe23e825fa0 R15: 00007ffc73ffa708 [ 820.107678][T30874] [ 820.107772][T30874] Mem-Info: [ 820.107783][T30874] active_anon:6575 inactive_anon:0 isolated_anon:0 [ 820.107783][T30874] active_file:0 inactive_file:43934 isolated_file:0 [ 820.107783][T30874] unevictable:0 dirty:254 writeback:0 [ 820.107783][T30874] slab_reclaimable:12087 slab_unreclaimable:110806 [ 820.107783][T30874] mapped:40121 shmem:656 pagetables:3578 [ 820.107783][T30874] sec_pagetables:0 bounce:0 [ 820.107783][T30874] kernel_misc_reclaimable:0 [ 820.107783][T30874] free:1285473 free_pcp:10748 free_cma:0 [ 820.218196][T30874] Node 0 active_anon:26400kB inactive_anon:0kB active_file:0kB inactive_file:175528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160484kB dirty:1016kB writeback:0kB shmem:2624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15276kB pagetables:14188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 820.218440][T30874] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 820.218608][T30874] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.218786][T30874] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 820.218913][T30874] Node 0 DMA32 free:1189136kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26400kB inactive_anon:0kB active_file:0kB inactive_file:175528kB unevictable:0kB writepending:1016kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:42836kB local_pcp:21764kB free_cma:0kB [ 820.221612][T30874] lowmem_reserve[]: 0 0 0 0 0 [ 820.223761][T30874] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.223923][T30874] lowmem_reserve[]: 0 0 0 0 0 [ 820.224038][T30874] Node 1 Normal free:3937296kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 820.224220][T30874] lowmem_reserve[]: 0 0 0 0 0 [ 820.224395][T30874] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 820.224738][T30874] Node 0 DMA32: 3621*4kB (UM) 2138*8kB (UME) 672*16kB (UME) 363*32kB (UME) 140*64kB (UME) 491*128kB (UME) 444*256kB (UM) 235*512kB (UME) 148*1024kB (UM) 7*2048kB (UME) 162*4096kB (UM) = 1189188kB [ 820.238800][T30874] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 820.239080][T30874] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 3*32kB (UM) 10*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937296kB [ 820.242229][T30874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.242283][T30874] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 820.242413][T30874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 820.242459][T30874] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 820.242510][T30874] 44586 total pagecache pages [ 820.242533][T30874] 0 pages in swap cache [ 820.242555][T30874] Free swap = 124996kB [ 820.242577][T30874] Total swap = 124996kB [ 820.242601][T30874] 2097051 pages RAM [ 820.242624][T30874] 0 pages HighMem/MovableOnly [ 820.246135][T30874] 428661 pages reserved [ 820.246218][T30874] 0 pages cma reserved [ 820.553544][T30853] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 821.306449][T30885] IPVS: Unknown mcast interface: netpci0 [ 821.348665][T30887] tipc: Started in network mode [ 821.348692][T30887] tipc: Node identity 1, cluster identity 8 [ 821.348708][T30887] tipc: Node number set to 1 [ 821.620705][T30906] FAULT_INJECTION: forcing a failure. [ 821.620705][T30906] name failslab, interval 1, probability 0, space 0, times 0 [ 821.620754][T30906] CPU: 0 UID: 0 PID: 30906 Comm: syz.4.7403 Not tainted syzkaller #0 PREEMPT(full) [ 821.620784][T30906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 821.620800][T30906] Call Trace: [ 821.620811][T30906] [ 821.620821][T30906] dump_stack_lvl+0xe8/0x150 [ 821.620862][T30906] should_fail_ex+0x410/0x560 [ 821.620899][T30906] should_failslab+0xa8/0x100 [ 821.620934][T30906] __kmalloc_node_noprof+0x100/0x720 [ 821.620965][T30906] ? __kmalloc_noprof+0x1ab/0x720 [ 821.620989][T30906] ? get_callchain_buffers+0x198/0x350 [ 821.621057][T30906] ? get_callchain_buffers+0x198/0x350 [ 821.621096][T30906] get_callchain_buffers+0x198/0x350 [ 821.621131][T30906] do_check_insn+0x14779/0x17d00 [ 821.621188][T30906] ? bpf_prog_load+0x13e0/0x1c20 [ 821.621230][T30906] ? __pfx_do_check_insn+0x10/0x10 [ 821.621301][T30906] ? rcu_is_watching+0x16/0xb0 [ 821.621340][T30906] ? __asan_memset+0x22/0x50 [ 821.621362][T30906] ? cnum32_from_urange+0xf/0x30 [ 821.621403][T30906] ? cnum32_from_urange+0xf/0x30 [ 821.621440][T30906] ? __mark_reg_known+0x125/0x1a0 [ 821.621474][T30906] do_check_common+0x35fa/0x55c0 [ 821.621566][T30906] ? __pfx_do_check_common+0x10/0x10 [ 821.621618][T30906] do_check_main+0xa2/0x1f0 [ 821.621651][T30906] bpf_check+0x2777/0x2ef0 [ 821.621704][T30906] ? __pfx_bpf_check+0x10/0x10 [ 821.621737][T30906] ? bpf_obj_name_cpy+0x194/0x1e0 [ 821.621778][T30906] bpf_prog_load+0x14d6/0x1c20 [ 821.621824][T30906] ? __pfx_bpf_prog_load+0x10/0x10 [ 821.621888][T30906] __sys_bpf+0xd0d/0xd90 [ 821.621929][T30906] ? __pfx___sys_bpf+0x10/0x10 [ 821.621973][T30906] ? __fget_files+0x2a/0x420 [ 821.622032][T30906] ? ksys_write+0x242/0x270 [ 821.622087][T30906] ? __pfx_ksys_write+0x10/0x10 [ 821.622133][T30906] __x64_sys_bpf+0xba/0xd0 [ 821.622163][T30906] do_syscall_64+0x166/0x520 [ 821.622202][T30906] ? trace_irq_disable+0x3b/0x140 [ 821.622229][T30906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.622256][T30906] ? clear_bhb_loop+0x70/0xc0 [ 821.622289][T30906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.622316][T30906] RIP: 0033:0x7f0689f9e199 [ 821.622341][T30906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.622363][T30906] RSP: 002b:00007f068af3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 821.622392][T30906] RAX: ffffffffffffffda RBX: 00007f068a225fa0 RCX: 00007f0689f9e199 [ 821.622412][T30906] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 821.622429][T30906] RBP: 00007f068af3b090 R08: 0000000000000000 R09: 0000000000000000 [ 821.622446][T30906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 821.622462][T30906] R13: 00007f068a226038 R14: 00007f068a225fa0 R15: 00007fff957b2a48 [ 821.622511][T30906] [ 822.040843][ T31] audit: type=1804 audit(1791211030.760:19): pid=30911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7405" name="/newroot/263/cgroup.controllers" dev="tmpfs" ino=1356 res=1 errno=0 [ 822.040987][ T31] audit: type=1800 audit(1791211030.760:20): pid=30911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7405" name="cgroup.controllers" dev="tmpfs" ino=1356 res=0 errno=0 [ 822.052166][ T31] audit: type=1800 audit(1791211030.760:21): pid=30911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7405" name="cgroup.controllers" dev="tmpfs" ino=1356 res=0 errno=0 [ 822.087722][T30899] tipc: Enabling of bearer rejected, failed to enable media [ 822.371826][T30918] sctp: [Deprecated]: syz.1.7406 (pid 30918) Use of int in maxseg socket option. [ 822.371826][T30918] Use struct sctp_assoc_value instead [ 823.014925][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.015274][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.039733][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.040155][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.040541][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.042357][T30951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.436932][T30966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.454071][T30966] netlink: 'syz.6.7418': attribute type 1 has an invalid length. [ 823.536057][T30966] bond2: entered promiscuous mode [ 823.536551][T30966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 823.770173][T30982] raw_sendmsg: syz.4.7423 forgot to set AF_INET. Fix it! [ 823.970811][T30999] __nla_validate_parse: 8 callbacks suppressed [ 823.970835][T30999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7427'. [ 824.041776][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7427'. [ 824.041805][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7427'. [ 825.406164][T31033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 825.437487][T31031] can: request_module (can-proto-3) failed. [ 825.468659][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.504200][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.504330][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.504426][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.517465][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.517722][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.518759][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.518992][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.523902][T31036] netlink: 'syz.2.7437': attribute type 4 has an invalid length. [ 825.657400][T31031] can: request_module (can-proto-3) failed. [ 825.743733][T31031] can: request_module (can-proto-3) failed. [ 825.836748][T31031] can: request_module (can-proto-3) failed. [ 825.923458][T31031] can: request_module (can-proto-3) failed. [ 825.965546][T31047] FAULT_INJECTION: forcing a failure. [ 825.965546][T31047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.965594][T31047] CPU: 0 UID: 0 PID: 31047 Comm: syz.4.7441 Not tainted syzkaller #0 PREEMPT(full) [ 825.965621][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 825.965635][T31047] Call Trace: [ 825.965645][T31047] [ 825.965655][T31047] dump_stack_lvl+0xe8/0x150 [ 825.965693][T31047] should_fail_ex+0x410/0x560 [ 825.965726][T31047] _copy_from_user+0x2d/0xb0 [ 825.965758][T31047] ___sys_sendmsg+0x1c6/0x360 [ 825.965797][T31047] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.965826][T31047] ? __lock_acquire+0x747/0x2de0 [ 825.965903][T31047] __sys_sendmmsg+0x273/0x4d0 [ 825.965942][T31047] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.965983][T31047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.966032][T31047] ? ksys_write+0x242/0x270 [ 825.966069][T31047] ? __pfx_ksys_write+0x10/0x10 [ 825.966109][T31047] __x64_sys_sendmmsg+0xa0/0xc0 [ 825.966144][T31047] do_syscall_64+0x166/0x520 [ 825.966176][T31047] ? trace_irq_disable+0x3b/0x140 [ 825.966200][T31047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.966224][T31047] ? clear_bhb_loop+0x70/0xc0 [ 825.966251][T31047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.966274][T31047] RIP: 0033:0x7f0689f9e199 [ 825.966296][T31047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.966321][T31047] RSP: 002b:00007f068af3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.966347][T31047] RAX: ffffffffffffffda RBX: 00007f068a225fa0 RCX: 00007f0689f9e199 [ 825.966364][T31047] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 825.966381][T31047] RBP: 00007f068af3b090 R08: 0000000000000000 R09: 0000000000000000 [ 825.966395][T31047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 825.966409][T31047] R13: 00007f068a226038 R14: 00007f068a225fa0 R15: 00007fff957b2a48 [ 825.966446][T31047] [ 826.186907][T31031] can: request_module (can-proto-3) failed. [ 826.262867][T31049] syzkaller0: entered promiscuous mode [ 826.262895][T31049] syzkaller0: entered allmulticast mode [ 827.474919][T31080] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 829.779773][T31086] bridge_slave_0: left allmulticast mode [ 829.779829][T31086] bridge_slave_0: left promiscuous mode [ 829.780092][T31086] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.821293][T31086] bridge_slave_1: left allmulticast mode [ 829.821347][T31086] bridge_slave_1: left promiscuous mode [ 829.821592][T31086] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.870789][T31086] bond0: (slave bond_slave_0): Releasing backup interface [ 829.904435][T31086] bond0: (slave bond_slave_1): Releasing backup interface [ 829.930510][T31086] team0: Port device team_slave_0 removed [ 829.947500][T31086] team0: Port device team_slave_1 removed [ 829.952974][T31086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.969531][T31086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 830.097061][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7450'. [ 830.231181][T31105] validate_nla: 24 callbacks suppressed [ 830.231205][T31105] netlink: 'syz.1.7452': attribute type 10 has an invalid length. [ 830.274831][T31105] team0 (unregistering): left promiscuous mode [ 830.274858][T31105] team_slave_0: left promiscuous mode [ 830.275102][T31105] team_slave_1: left promiscuous mode [ 830.362613][T31105] team0 (unregistering): Port device team_slave_0 removed [ 830.432276][T31105] team0 (unregistering): Port device team_slave_1 removed [ 831.029446][T31138] ip6t_srh: unknown srh match flags 4000 [ 831.080894][T31138] syzkaller0: entered promiscuous mode [ 831.080932][T31138] syzkaller0: entered allmulticast mode [ 831.401458][T31156] syzkaller1: entered promiscuous mode [ 831.401496][T31156] syzkaller1: entered allmulticast mode [ 831.689930][T31170] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7469'. [ 831.697039][T31170] ip_tables: iptables: counters copy to user failed while replacing table [ 831.913361][T31179] netlink: 'syz.4.7472': attribute type 1 has an invalid length. [ 831.999800][T31179] bond2: entered promiscuous mode [ 831.999827][T31179] bond2: entered allmulticast mode [ 832.007751][T31179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.084223][T31189] FAULT_INJECTION: forcing a failure. [ 832.084223][T31189] name failslab, interval 1, probability 0, space 0, times 0 [ 832.084280][T31189] CPU: 0 UID: 0 PID: 31189 Comm: syz.2.7474 Not tainted syzkaller #0 PREEMPT(full) [ 832.084306][T31189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.084320][T31189] Call Trace: [ 832.084344][T31189] [ 832.084354][T31189] dump_stack_lvl+0xe8/0x150 [ 832.084392][T31189] should_fail_ex+0x410/0x560 [ 832.084425][T31189] should_failslab+0xa8/0x100 [ 832.084466][T31189] __kmalloc_cache_noprof+0xa3/0x600 [ 832.084491][T31189] ? bpf_int_jit_compile+0x1c4/0x17e0 [ 832.084532][T31189] ? bpf_int_jit_compile+0x1c4/0x17e0 [ 832.084582][T31189] bpf_int_jit_compile+0x1c4/0x17e0 [ 832.084618][T31189] ? lock_acquire+0x115/0x350 [ 832.084656][T31189] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 832.084702][T31189] ? _copy_to_user+0x8a/0xb0 [ 832.084734][T31189] ? bpf_log_attr_finalize+0x150/0x1e0 [ 832.084763][T31189] __bpf_prog_select_runtime+0x53d/0xc30 [ 832.084808][T31189] bpf_check+0x2529/0x2ef0 [ 832.084843][T31189] ? __pfx_bpf_check+0x10/0x10 [ 832.084864][T31189] ? bpf_obj_name_cpy+0x194/0x1e0 [ 832.084890][T31189] bpf_prog_load+0x14d6/0x1c20 [ 832.084919][T31189] ? __pfx_bpf_prog_load+0x10/0x10 [ 832.084957][T31189] __sys_bpf+0xd0d/0xd90 [ 832.084981][T31189] ? __pfx___sys_bpf+0x10/0x10 [ 832.085008][T31189] ? __fget_files+0x2a/0x420 [ 832.085044][T31189] ? ksys_write+0x242/0x270 [ 832.085071][T31189] ? __pfx_ksys_write+0x10/0x10 [ 832.085100][T31189] __x64_sys_bpf+0xba/0xd0 [ 832.085118][T31189] do_syscall_64+0x166/0x520 [ 832.085143][T31189] ? trace_irq_disable+0x3b/0x140 [ 832.085159][T31189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.085175][T31189] ? clear_bhb_loop+0x70/0xc0 [ 832.085195][T31189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.085211][T31189] RIP: 0033:0x7f9f2f99e199 [ 832.085227][T31189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.085240][T31189] RSP: 002b:00007f9f3080c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 832.085258][T31189] RAX: ffffffffffffffda RBX: 00007f9f2fc25fa0 RCX: 00007f9f2f99e199 [ 832.085270][T31189] RDX: 0000000000000094 RSI: 0000200000000700 RDI: 0000000000000005 [ 832.085281][T31189] RBP: 00007f9f3080c090 R08: 0000000000000000 R09: 0000000000000000 [ 832.085291][T31189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.085301][T31189] R13: 00007f9f2fc26038 R14: 00007f9f2fc25fa0 R15: 00007fff0ccef638 [ 832.085368][T31189] [ 832.108653][T31182] erspan1: entered allmulticast mode [ 832.649069][T31201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7477'. [ 832.649110][T31201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7477'. [ 832.705849][T31204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7477'. [ 832.705888][T31204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7477'. [ 832.921453][T31213] openvswitch: netlink: Message has 4 unknown bytes. [ 833.219952][T31227] hsr1: left allmulticast mode [ 833.219980][T31227] dummy0: left allmulticast mode [ 833.252735][T31227] bond1: left promiscuous mode [ 833.252762][T31227] bridge2: left promiscuous mode [ 833.273997][T31227] vlan2: left allmulticast mode [ 833.274023][T31227] bond1: left allmulticast mode [ 833.274038][T31227] bridge2: left allmulticast mode [ 833.313807][T31227] bond2: left promiscuous mode [ 833.313845][T31227] bond2: left allmulticast mode [ 833.314815][T31227] erspan1: left allmulticast mode [ 833.320485][T29757] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.320771][T29757] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.321034][T29757] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.321530][T29757] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.722576][T31251] sch_tbf: peakrate 6 is lower than or equals to rate 8 ! [ 833.724208][T31251] syzkaller0: entered promiscuous mode [ 833.724224][T31251] syzkaller0: entered allmulticast mode [ 834.001402][T31260] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7501'. [ 834.298869][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7506'. [ 834.299118][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7506'. [ 834.299391][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7506'. [ 834.609130][T31291] netlink: 'syz.3.7508': attribute type 16 has an invalid length. [ 834.609156][T31291] netlink: 'syz.3.7508': attribute type 17 has an invalid length. [ 835.140707][T31306] __nla_validate_parse: 6 callbacks suppressed [ 835.140731][T31306] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7515'. [ 835.233662][T31308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7517'. [ 835.321117][T31308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7517'. [ 835.321734][T31308] netlink: 'syz.4.7517': attribute type 2 has an invalid length. [ 835.369359][T31308] : entered promiscuous mode [ 835.537036][T31326] xt_hashlimit: size too large, truncated to 1048576 [ 838.634759][T31348] netlink: 'syz.4.7530': attribute type 3 has an invalid length. [ 838.801778][T31356] xt_hashlimit: size too large, truncated to 1048576 [ 839.249572][ T5619] block nbd1: Receive control failed (result -32) [ 840.055504][T31380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.408814][T31411] tipc: Enabling of bearer rejected, failed to enable media [ 841.445670][T31422] ip6t_frag: unknown flags 4 [ 841.508869][T31418] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 841.514878][T31418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.537027][T31418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 841.896435][ T5619] Bluetooth: hci4: link tx timeout [ 841.896458][ T5619] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 842.600890][T31453] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7565'. [ 842.698579][T31457] tc_dump_action: action bad kind [ 843.021126][T31464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7569'. [ 843.046771][T31464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7569'. [ 843.046863][T31464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7569'. [ 843.582799][T31487] netlink: 'syz.6.7577': attribute type 1 has an invalid length. [ 843.640481][T31487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 843.691948][T31487] bond3: (slave geneve3): making interface the new active one [ 843.693892][T31487] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 843.776563][T31493] FAULT_INJECTION: forcing a failure. [ 843.776563][T31493] name failslab, interval 1, probability 0, space 0, times 0 [ 843.776603][T31493] CPU: 1 UID: 0 PID: 31493 Comm: syz.3.7580 Not tainted syzkaller #0 PREEMPT(full) [ 843.776628][T31493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 843.776641][T31493] Call Trace: [ 843.776650][T31493] [ 843.776661][T31493] dump_stack_lvl+0xe8/0x150 [ 843.776701][T31493] should_fail_ex+0x410/0x560 [ 843.776735][T31493] should_failslab+0xa8/0x100 [ 843.776768][T31493] __kvmalloc_node_noprof+0x176/0x820 [ 843.776798][T31493] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 843.776826][T31493] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 843.776861][T31493] bpf_compute_live_registers+0x14f/0x1ff0 [ 843.776889][T31493] ? kfree+0x1c5/0x650 [ 843.776927][T31493] ? bpf_compute_scc+0xab6/0xb10 [ 843.776958][T31493] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 843.776996][T31493] bpf_check+0x2746/0x2ef0 [ 843.777057][T31493] ? __pfx_bpf_check+0x10/0x10 [ 843.777085][T31493] ? bpf_obj_name_cpy+0x194/0x1e0 [ 843.777121][T31493] bpf_prog_load+0x14d6/0x1c20 [ 843.777160][T31493] ? __pfx_bpf_prog_load+0x10/0x10 [ 843.777214][T31493] __sys_bpf+0xd0d/0xd90 [ 843.777260][T31493] ? __pfx___sys_bpf+0x10/0x10 [ 843.777298][T31493] ? __fget_files+0x2a/0x420 [ 843.777350][T31493] ? ksys_write+0x242/0x270 [ 843.777388][T31493] ? __pfx_ksys_write+0x10/0x10 [ 843.777429][T31493] __x64_sys_bpf+0xba/0xd0 [ 843.777458][T31493] do_syscall_64+0x166/0x520 [ 843.777494][T31493] ? trace_irq_disable+0x3b/0x140 [ 843.777520][T31493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.777544][T31493] ? clear_bhb_loop+0x70/0xc0 [ 843.777572][T31493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.777595][T31493] RIP: 0033:0x7fe23e59e199 [ 843.777618][T31493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.777638][T31493] RSP: 002b:00007fe23f3a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 843.777664][T31493] RAX: ffffffffffffffda RBX: 00007fe23e825fa0 RCX: 00007fe23e59e199 [ 843.777683][T31493] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 843.777698][T31493] RBP: 00007fe23f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 843.777714][T31493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 843.777728][T31493] R13: 00007fe23e826038 R14: 00007fe23e825fa0 R15: 00007ffc73ffa708 [ 843.777766][T31493] [ 843.955073][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 844.299485][T31494] tipc: Enabling of bearer rejected, failed to enable media [ 844.300706][T31498] v: renamed from erspan0 (while UP) [ 844.330501][T31498] v: entered allmulticast mode [ 844.331079][T31498] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 844.725594][T31519] ip_tables: iptables: counters copy to user failed while replacing table [ 844.869489][T31525] netlink: 'syz.6.7586': attribute type 11 has an invalid length. [ 844.869528][T31525] netlink: 244 bytes leftover after parsing attributes in process `syz.6.7586'. [ 844.971717][T31513] syzkaller1: entered promiscuous mode [ 844.971742][T31513] syzkaller1: entered allmulticast mode [ 845.498925][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7590'. [ 845.786584][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7591'. [ 845.786619][T31550] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7591'. [ 846.183219][T31549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.200168][T31549] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.206485][T31549] batman_adv: batadv0: Interface activated: dummy0 [ 846.206512][T31549] batadv0: mtu less than device minimum [ 846.208233][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.209825][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.211350][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.212824][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.214294][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.215790][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.217294][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.218906][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.220359][T31549] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 846.387672][T31549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.517358][T31549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.561763][T31549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.605157][T31549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 846.605188][T31549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.763499][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.767220][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.784030][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.795837][T31549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.986269][T31549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 846.994833][T31549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 847.037411][T31549] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 847.052927][T31549] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 847.185816][T31575] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7600'. [ 847.186293][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.186441][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.218599][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.218715][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.399053][T31586] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 847.942823][T31588] syzkaller0: entered promiscuous mode [ 847.942853][T31588] syzkaller0: entered allmulticast mode [ 848.106125][ T31] audit: type=1800 audit(1791211056.820:22): pid=31612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7606" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1842 res=0 errno=0 [ 849.418248][T31623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7608'. [ 852.749185][T14497] net_ratelimit: 60 callbacks suppressed [ 852.749211][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 853.281493][T14490] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 853.801717][T29772] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.309334][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.345815][T31681] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7611'. [ 854.438249][T29771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.438327][T29771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.438367][T29771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.438412][T29771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.586896][T31687] FAULT_INJECTION: forcing a failure. [ 854.586896][T31687] name failslab, interval 1, probability 0, space 0, times 0 [ 854.586933][T31687] CPU: 0 UID: 0 PID: 31687 Comm: syz.1.7614 Not tainted syzkaller #0 PREEMPT(full) [ 854.586959][T31687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 854.586973][T31687] Call Trace: [ 854.586982][T31687] [ 854.587020][T31687] dump_stack_lvl+0xe8/0x150 [ 854.587071][T31687] should_fail_ex+0x410/0x560 [ 854.587124][T31687] ? __alloc_skb+0x1db/0x7a0 [ 854.587155][T31687] should_failslab+0xa8/0x100 [ 854.587185][T31687] ? __alloc_skb+0x1db/0x7a0 [ 854.587211][T31687] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 854.587245][T31687] ? __alloc_skb+0x18d/0x7a0 [ 854.587273][T31687] ? __alloc_skb+0x1db/0x7a0 [ 854.587313][T31687] __alloc_skb+0x1db/0x7a0 [ 854.587343][T31687] alloc_skb_with_frags+0xc6/0x760 [ 854.587386][T31687] sock_alloc_send_pskb+0x878/0x990 [ 854.587435][T31687] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 854.587468][T31687] ? kasan_quarantine_put+0xbb/0x1f0 [ 854.587492][T31687] ? lockdep_hardirqs_on+0x7b/0x110 [ 854.587530][T31687] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 854.587657][T31687] ? kmem_cache_free+0x182/0x650 [ 854.587682][T31687] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 854.587719][T31687] unix_dgram_sendmsg+0x4da/0x17b0 [ 854.587754][T31687] ? __pfx___css_rstat_updated+0x10/0x10 [ 854.587789][T31687] ? __lock_acquire+0x747/0x2de0 [ 854.587813][T31687] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 854.587841][T31687] ? aa_sock_msg_perm+0x129/0x210 [ 854.587878][T31687] ? apparmor_socket_sendmsg+0x98/0x360 [ 854.587906][T31687] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 854.587930][T31687] sock_sendmsg_nosec+0x14e/0x190 [ 854.587956][T31687] ____sys_sendmsg+0x54e/0x850 [ 854.587992][T31687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.588032][T31687] ? import_iovec+0x73/0xa0 [ 854.588066][T31687] ___sys_sendmsg+0x2a5/0x360 [ 854.588102][T31687] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.588139][T31687] ? __lock_acquire+0x747/0x2de0 [ 854.588214][T31687] __sys_sendmmsg+0x273/0x4d0 [ 854.588252][T31687] ? __pfx___sys_sendmmsg+0x10/0x10 [ 854.588295][T31687] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 854.588346][T31687] ? ksys_write+0x242/0x270 [ 854.588395][T31687] ? __pfx_ksys_write+0x10/0x10 [ 854.588435][T31687] __x64_sys_sendmmsg+0xa0/0xc0 [ 854.588469][T31687] do_syscall_64+0x166/0x520 [ 854.588499][T31687] ? trace_irq_disable+0x3b/0x140 [ 854.588521][T31687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.588544][T31687] ? clear_bhb_loop+0x70/0xc0 [ 854.588571][T31687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.588594][T31687] RIP: 0033:0x7f5f92f9e199 [ 854.588615][T31687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.588634][T31687] RSP: 002b:00007f5f93ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 854.588658][T31687] RAX: ffffffffffffffda RBX: 00007f5f93225fa0 RCX: 00007f5f92f9e199 [ 854.588674][T31687] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 854.588690][T31687] RBP: 00007f5f93ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 854.588705][T31687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 854.588719][T31687] R13: 00007f5f93226038 R14: 00007f5f93225fa0 R15: 00007ffe9f364918 [ 854.588754][T31687] [ 854.821008][T29772] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.328992][T29772] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.505360][T31711] netlink: 'syz.6.7615': attribute type 4 has an invalid length. [ 855.664964][T31712] syzkaller0: entered promiscuous mode [ 855.664991][T31712] syzkaller0: entered allmulticast mode [ 855.839102][T29772] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 856.533746][T31730] syzkaller0: entered promiscuous mode [ 856.533773][T31730] syzkaller0: entered allmulticast mode [ 856.629142][T29772] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.138711][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.140842][T31747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7626'. [ 857.564231][T31756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7629'. [ 857.658474][T31760] smc: net device vlan1 applied user defined pnetid SYZ2 [ 857.679243][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7630'. [ 857.707210][T31765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7631'. [ 857.731675][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 857.944404][T31765] ip6gre1: entered promiscuous mode [ 857.944608][T31765] ip6gre1: entered allmulticast mode [ 858.056025][T31774] ÿÿÿ: renamed from bond_slave_0 [ 858.240284][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 858.746610][T31798] netlink: 3784 bytes leftover after parsing attributes in process `syz.1.7641'. [ 858.786040][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 858.944064][T31807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7641'. [ 858.944099][T31807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7641'. [ 858.944122][T31807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7641'. [ 858.945376][T31807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7641'. [ 858.945407][T31807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7641'. [ 859.288407][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 859.759690][T31807] bridge0: port 2() entered disabled state [ 859.760343][T31807] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.900579][ T41] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.180289][T31807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.215970][T31807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.412960][ T1384] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.942734][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.448434][T14508] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.918060][ T41] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.918114][ T41] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.918152][ T41] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.918188][ T41] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.996772][ T41] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.037856][T20377] Bluetooth: hci3: command 0x0406 tx timeout [ 862.388620][T31868] __nla_validate_parse: 196 callbacks suppressed [ 862.388658][T31868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7656'. [ 862.388700][T31868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7656'. [ 862.481835][T31868] netlink: 'syz.3.7656': attribute type 3 has an invalid length. [ 862.481860][T31868] netlink: 'syz.3.7656': attribute type 3 has an invalid length. [ 862.511287][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 862.578940][T31868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7656'. [ 862.992742][T31888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7663'. [ 863.036914][ T41] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 863.539321][T14508] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 863.752283][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7676'. [ 864.048438][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 864.351733][T31941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7683'. [ 864.526397][T31949] xt_hashlimit: size too large, truncated to 1048576 [ 864.536343][T31952] FAULT_INJECTION: forcing a failure. [ 864.536343][T31952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.557118][T31952] CPU: 1 UID: 0 PID: 31952 Comm: syz.3.7684 Not tainted syzkaller #0 PREEMPT(full) [ 864.557156][T31952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 864.557172][T31952] Call Trace: [ 864.557181][T31952] [ 864.557193][T31952] dump_stack_lvl+0xe8/0x150 [ 864.557232][T31952] should_fail_ex+0x410/0x560 [ 864.557265][T31952] _copy_from_user+0x2d/0xb0 [ 864.557302][T31952] kstrtouint_from_user+0xd6/0x180 [ 864.557332][T31952] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 864.557369][T31952] ? lock_acquire+0x115/0x350 [ 864.557400][T31952] proc_fail_nth_write+0x8e/0x210 [ 864.557427][T31952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 864.557459][T31952] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 864.557483][T31952] vfs_write+0x296/0xba0 [ 864.557526][T31952] ? __pfx_vfs_write+0x10/0x10 [ 864.557571][T31952] ? __fget_files+0x2a/0x420 [ 864.557606][T31952] ? __fget_files+0x3a2/0x420 [ 864.557637][T31952] ? __fget_files+0x2a/0x420 [ 864.557679][T31952] ksys_write+0x150/0x270 [ 864.557717][T31952] ? __pfx_ksys_write+0x10/0x10 [ 864.557765][T31952] do_syscall_64+0x166/0x520 [ 864.557800][T31952] ? trace_irq_disable+0x3b/0x140 [ 864.557826][T31952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.557850][T31952] ? clear_bhb_loop+0x70/0xc0 [ 864.557890][T31952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.557912][T31952] RIP: 0033:0x7fe23e55e9ce [ 864.557933][T31952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 864.557951][T31952] RSP: 002b:00007fe23f386fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.557975][T31952] RAX: ffffffffffffffda RBX: 00007fe23f3876c0 RCX: 00007fe23e55e9ce [ 864.557993][T31952] RDX: 0000000000000001 RSI: 00007fe23f3870a0 RDI: 0000000000000005 [ 864.558007][T31952] RBP: 00007fe23f387090 R08: 0000000000000000 R09: 0000000000000000 [ 864.558021][T31952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.558035][T31952] R13: 00007fe23e826128 R14: 00007fe23e826090 R15: 00007ffc73ffa708 [ 864.558071][T31952] [ 864.558707][T14508] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.023287][ T5619] block nbd2: Receive control failed (result -32) [ 865.023403][T20377] block nbd2: Receive control failed (result -32) [ 865.107056][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.444712][T31965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7688'. [ 865.479422][T31967] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7686'. [ 865.548603][T31969] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7689'. [ 865.548629][T31969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7689'. [ 865.608618][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.610482][T31969] tipc: Enabling of bearer rejected, failed to enable media [ 865.712859][T31937] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 866.129752][ T41] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.539746][T31992] batman_adv: batadv0: Adding interface: macvtap1 [ 866.539769][T31992] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.539803][T31992] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 866.641903][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.712659][T32000] batman_adv: batadv0: Removing interface: macvtap1 [ 867.014112][T31988] syzkaller0: entered promiscuous mode [ 867.014329][T31988] syzkaller0: entered allmulticast mode [ 867.149835][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 867.223961][T32016] FAULT_INJECTION: forcing a failure. [ 867.223961][T32016] name failslab, interval 1, probability 0, space 0, times 0 [ 867.223997][T32016] CPU: 1 UID: 0 PID: 32016 Comm: syz.4.7702 Not tainted syzkaller #0 PREEMPT(full) [ 867.224017][T32016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 867.224028][T32016] Call Trace: [ 867.224036][T32016] [ 867.224045][T32016] dump_stack_lvl+0xe8/0x150 [ 867.224076][T32016] should_fail_ex+0x410/0x560 [ 867.224104][T32016] should_failslab+0xa8/0x100 [ 867.224128][T32016] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 867.224150][T32016] ? cnum64_intersect_with+0x22c/0x250 [ 867.224179][T32016] ? bpf_push_jmp_history+0x26c/0x6d0 [ 867.224199][T32016] ? bpf_push_jmp_history+0x26c/0x6d0 [ 867.224221][T32016] ? bpf_push_jmp_history+0x26c/0x6d0 [ 867.224243][T32016] krealloc_node_align_noprof+0x19a/0x390 [ 867.224290][T32016] bpf_push_jmp_history+0x26c/0x6d0 [ 867.224322][T32016] do_check_insn+0x8118/0x17d00 [ 867.224344][T32016] ? do_check_main+0xa2/0x1f0 [ 867.224363][T32016] ? bpf_check+0x2777/0x2ef0 [ 867.224401][T32016] ? __pfx_do_check_insn+0x10/0x10 [ 867.224426][T32016] ? bpf_live_stack_query_init+0x6d1/0x790 [ 867.224446][T32016] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 867.224475][T32016] ? __asan_memcpy+0x40/0x70 [ 867.224495][T32016] ? bpf_explored_state+0x79/0x1a0 [ 867.224526][T32016] ? bpf_is_state_visited+0x381e/0x48b0 [ 867.224551][T32016] ? kfree+0x4d/0x650 [ 867.224594][T32016] ? krealloc_node_align_noprof+0x235/0x390 [ 867.224644][T32016] ? bpf_push_jmp_history+0x27d/0x6d0 [ 867.224681][T32016] do_check_common+0x35fa/0x55c0 [ 867.224750][T32016] ? __pfx_do_check_common+0x10/0x10 [ 867.224794][T32016] do_check_main+0xa2/0x1f0 [ 867.224824][T32016] bpf_check+0x2777/0x2ef0 [ 867.224869][T32016] ? __pfx_bpf_check+0x10/0x10 [ 867.224904][T32016] ? bpf_obj_name_cpy+0x194/0x1e0 [ 867.224940][T32016] bpf_prog_load+0x14d6/0x1c20 [ 867.224979][T32016] ? __pfx_bpf_prog_load+0x10/0x10 [ 867.225033][T32016] __sys_bpf+0xd0d/0xd90 [ 867.225071][T32016] ? __pfx___sys_bpf+0x10/0x10 [ 867.225115][T32016] ? __fget_files+0x2a/0x420 [ 867.225164][T32016] ? ksys_write+0x242/0x270 [ 867.225199][T32016] ? __pfx_ksys_write+0x10/0x10 [ 867.225237][T32016] __x64_sys_bpf+0xba/0xd0 [ 867.225303][T32016] do_syscall_64+0x166/0x520 [ 867.225337][T32016] ? trace_irq_disable+0x3b/0x140 [ 867.225362][T32016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.225387][T32016] ? clear_bhb_loop+0x70/0xc0 [ 867.225416][T32016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.225440][T32016] RIP: 0033:0x7f0689f9e199 [ 867.225463][T32016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.225483][T32016] RSP: 002b:00007f068af3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.225509][T32016] RAX: ffffffffffffffda RBX: 00007f068a225fa0 RCX: 00007f0689f9e199 [ 867.225527][T32016] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 867.225541][T32016] RBP: 00007f068af3b090 R08: 0000000000000000 R09: 0000000000000000 [ 867.225555][T32016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.225569][T32016] R13: 00007f068a226038 R14: 00007f068a225fa0 R15: 00007fff957b2a48 [ 867.225604][T32016] [ 867.630697][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7701'. [ 867.659079][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 868.168514][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 868.687591][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.198209][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.698759][ T59] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.221221][T14497] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.736224][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.245069][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.759984][T14505] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.847951][T32020] netlink: 'syz.1.7701': attribute type 4 has an invalid length. [ 872.268275][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.364037][T32058] syzkaller0: entered promiscuous mode [ 872.364064][T32058] syzkaller0: entered allmulticast mode [ 872.457277][T32066] ip_tables: iptables: counters copy to user failed while replacing table [ 872.788461][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 873.761793][T32102] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7726'. [ 873.794251][T32102] vlan2: entered allmulticast mode [ 873.794292][T32102] gretap0: entered allmulticast mode [ 873.811706][T14505] net_ratelimit: 1 callbacks suppressed [ 873.811726][T14505] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 873.930047][T32111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7727'. [ 873.994511][T32116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7727'. [ 874.021601][T32117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7727'. [ 874.262055][T32108] syzkaller0: entered allmulticast mode [ 874.318689][ T41] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 874.345131][T32105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7727'. [ 874.669479][ T32] INFO: task syz.5.6348:27428 blocked for more than 143 seconds. [ 874.669507][ T32] Not tainted syzkaller #0 [ 874.669520][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 874.669532][ T32] task:syz.5.6348 state:D stack:26304 pid:27428 tgid:27427 ppid:20419 task_flags:0x400140 flags:0x00080002 [ 874.669601][ T32] Call Trace: [ 874.669611][ T32] [ 874.669627][ T32] __schedule+0x17db/0x58f0 [ 874.669699][ T32] ? __pfx___schedule+0x10/0x10 [ 874.669753][ T32] ? schedule+0x90/0x2b0 [ 874.669788][ T32] schedule+0x164/0x2b0 [ 874.669822][ T32] schedule_preempt_disabled+0x13/0x30 [ 874.669853][ T32] __mutex_lock+0x7c1/0x1550 [ 874.669891][ T32] ? __mutex_lock+0x5d4/0x1550 [ 874.669929][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 874.670138][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 874.670185][ T32] ? kernel_text_address+0xa5/0xe0 [ 874.670214][ T32] ? __kernel_text_address+0xd/0x30 [ 874.670239][ T32] ? unwind_get_return_address+0x4d/0x90 [ 874.670271][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 874.670341][ T32] ? stack_trace_save+0xa9/0x100 [ 874.670367][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 874.670396][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 874.670431][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 874.670462][ T32] ? kasan_save_track+0x4f/0x80 [ 874.670487][ T32] ? kasan_save_track+0x3e/0x80 [ 874.670511][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 874.670537][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 874.670562][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 874.670590][ T32] ? netlink_dump+0x19c/0xee0 [ 874.670612][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 874.670634][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 874.670665][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 874.670692][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 874.670714][ T32] ? genl_rcv+0x28/0x40 [ 874.670741][ T32] ? netlink_unicast+0x7bd/0x940 ** replaying previous printk message ** [ 874.670741][ T32] ? netlink_unicast+0x7bd/0x940 [ 874.670773][ T32] ? netlink_sendmsg+0x813/0xb40 [ 874.670824][ T32] ? sock_sendmsg_nosec+0x14e/0x190 [ 874.670848][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 874.670878][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 874.670907][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 874.670936][ T32] ? do_syscall_64+0x166/0x520 [ 874.670969][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.671032][ T32] ? rcu_is_watching+0x16/0xb0 [ 874.671069][ T32] ? trace_kmalloc+0x2a/0xf0 [ 874.671096][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 874.671122][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 874.671147][ T32] ? netlink_dump+0x19c/0xee0 [ 874.671168][ T32] ? netlink_dump+0x19c/0xee0 [ 874.671198][ T32] genl_dumpit+0x10b/0x1b0 [ 874.671233][ T32] netlink_dump+0x711/0xee0 [ 874.671268][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 874.671338][ T32] ? genl_start+0x497/0x6d0 [ 874.671377][ T32] __netlink_dump_start+0x589/0x7b0 [ 874.671409][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 874.671446][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 874.671476][ T32] ? genl_get_cmd+0x523/0x960 [ 874.671510][ T32] ? __pfx_genl_start+0x10/0x10 [ 874.671536][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 874.671561][ T32] ? __pfx_genl_done+0x10/0x10 [ 874.671591][ T32] ? __lock_acquire+0x747/0x2de0 [ 874.671626][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 874.671662][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.671690][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 874.671733][ T32] netlink_rcv_skb+0x226/0x4a0 [ 874.671757][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.671787][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.671825][ T32] ? down_read+0x2be/0x330 [ 874.671854][ T32] genl_rcv+0x28/0x40 [ 874.671882][ T32] netlink_unicast+0x7bd/0x940 [ 874.671929][ T32] netlink_sendmsg+0x813/0xb40 [ 874.671964][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.672005][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 874.672036][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.672092][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 874.672121][ T32] ____sys_sendmsg+0x54e/0x850 [ 874.672162][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.672206][ T32] ? import_iovec+0x73/0xa0 [ 874.672242][ T32] ___sys_sendmsg+0x2a5/0x360 [ 874.672282][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.672343][ T32] ? futex_wait+0x2a2/0x390 [ 874.672420][ T32] ? __pfx_do_futex+0x10/0x10 [ 874.672461][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 874.672499][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.672558][ T32] do_syscall_64+0x166/0x520 [ 874.672593][ T32] ? trace_irq_disable+0x3b/0x140 [ 874.672618][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.672642][ T32] ? clear_bhb_loop+0x70/0xc0 [ 874.672672][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.672697][ T32] RIP: 0033:0x7f8e08b9e199 [ 874.672719][ T32] RSP: 002b:00007f8e09b35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.672745][ T32] RAX: ffffffffffffffda RBX: 00007f8e08e25fa0 RCX: 00007f8e08b9e199 [ 874.672777][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 874.672792][ T32] RBP: 00007f8e08c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 874.672807][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.672822][ T32] R13: 00007f8e08e26038 R14: 00007f8e08e25fa0 R15: 00007ffc1e4a8088 [ 874.672859][ T32] [ 874.672915][ T32] [ 874.672915][ T32] Showing all locks held in the system: [ 874.672928][ T32] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 874.672946][ T32] #0: ffff8880b8628298 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_interrupt+0xfd/0xaa0 [ 874.673017][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 874.673034][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 874.673143][ T32] locks held by kworker/u8:2/41: 3, on CPU#1: [ 874.673161][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 874.673240][ T32] #1: ffffc90000b17c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 874.673300][ T32] #2: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 874.673411][ T32] locks held by getty/5375: 2, on CPU#0: [ 874.673428][ T32] #0: ffff888033a5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 874.673586][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 874.673658][ T32] locks held by syz.0.4057/19820: 2, on CPU#1: [ 874.673675][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.673734][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 874.673800][ T32] locks held by syz-executor/26270: 1, last CPU#0: [ 874.673817][ T32] #0: ffff8880548ec360 (sk_lock-AF_INET){+.+.}-{0:0}, at: do_ip_getsockopt+0x10f5/0x1cf0 [ 874.673883][ T32] locks held by syz-executor/26959: 4, last CPU#1: [ 874.673900][ T32] #0: ffffffff8ee36650 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 874.673962][ T32] #1: ffff888033d77180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 874.674028][ T32] #2: ffff8880347ea800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 874.674104][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 874.674170][ T32] locks held by syz.5.6348/27428: 3, on CPU#1: [ 874.674187][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 874.674244][ T32] #1: ffff8880477456e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 874.674318][ T32] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 874.674385][ T32] locks held by syz.6.7728/32125: 2, last CPU#1: [ 874.674401][ T32] #0: ffff88803a5d1bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 874.674470][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 874.674549][ T32] locks held by syz.3.7733/32137: 2, last CPU#1: [ 874.674565][ T32] #0: ffff8880347eb440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 874.836812][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 874.837066][ T32] [ 874.837079][ T32] ============================================= [ 874.837079][ T32] [ 874.837131][ T32] NMI backtrace for cpu 0 [ 874.837174][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 874.837240][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 874.837275][ T32] Call Trace: [ 874.837309][ T32] [ 874.837339][ T32] dump_stack_lvl+0xe8/0x150 [ 874.837429][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 874.837516][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 874.837633][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 874.837721][ T32] sys_info+0x135/0x170 [ 874.837786][ T32] watchdog+0xfd7/0x1030 [ 874.837872][ T32] ? watchdog+0x1c7/0x1030 [ 874.837958][ T32] kthread+0x38b/0x480 [ 874.838014][ T32] ? __pfx_watchdog+0x10/0x10 [ 874.838061][ T32] ? __pfx_kthread+0x10/0x10 [ 874.838118][ T32] ret_from_fork+0x514/0xb70 [ 874.838226][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 874.838313][ T32] ? __switch_to+0xc89/0x1420 [ 874.838444][ T32] ? __pfx_kthread+0x10/0x10 [ 874.838465][ T32] ret_from_fork_asm+0x1a/0x30 [ 874.838513][ T32] [ 874.840114][ T32] Sending NMI from CPU 0 to CPUs 1: [ 874.840245][ C1] NMI backtrace for cpu 1 [ 874.840260][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 874.840283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 874.840295][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 874.840371][ C1] Code: 82 54 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4c 85 c4 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 07 7e 75 06 cc 44 89 f9 80 e1 07 38 c1 [ 874.840391][ C1] RSP: 0018:ffffc90000157900 EFLAGS: 00000002 [ 874.840412][ C1] RAX: 000000000000006c RBX: 000000000000006c RCX: 0000000000000000 [ 874.840428][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 874.840442][ C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 874.840456][ C1] R10: dffffc0000000000 R11: ffffffff85736b90 R12: dffffc0000000000 [ 874.840472][ C1] R13: 000000000000006c R14: ffffffff9ad31300 R15: 0000000000000000 [ 874.840486][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 874.840503][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.840517][ C1] CR2: 00007f5f93227dac CR3: 00000000501ae000 CR4: 00000000003526f0 [ 874.840537][ C1] Call Trace: [ 874.840544][ C1] [ 874.840555][ C1] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 874.840590][ C1] serial8250_console_write+0xaa1/0x1200 [ 874.840618][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 874.840640][ C1] ? __schedule+0x17f1/0x58f0 [ 874.840675][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 874.840706][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 874.840732][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 874.840762][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 874.840790][ C1] nbcon_kthread_func+0x679/0x880 [ 874.840814][ C1] ? nbcon_kthread_func+0x163/0x880 [ 874.840834][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 874.840859][ C1] ? __kthread_parkme+0x71/0x1f0 [ 874.840887][ C1] ? __kthread_parkme+0x199/0x1f0 [ 874.840916][ C1] kthread+0x38b/0x480 [ 874.840934][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 874.840953][ C1] ? __pfx_kthread+0x10/0x10 [ 874.840971][ C1] ret_from_fork+0x514/0xb70 [ 874.841003][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 874.841040][ C1] ? __switch_to+0xc89/0x1420 [ 874.841074][ C1] ? __pfx_kthread+0x10/0x10 [ 874.841093][ C1] ret_from_fork_asm+0x1a/0x30 [ 874.841132][ C1] [ 874.880185][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 875.849770][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 875.858904][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 875.868978][ T32] Call Trace: [ 875.872278][ T32] [ 875.875236][ T32] vpanic+0x56d/0xa60 [ 875.879260][ T32] ? __pfx___schedule+0x10/0x10 [ 875.884143][ T32] ? __pfx_vpanic+0x10/0x10 [ 875.888697][ T32] panic+0xc5/0xd0 [ 875.892450][ T32] ? __pfx_panic+0x10/0x10 [ 875.896894][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 875.902385][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 875.907795][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 875.913991][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 875.920178][ T32] watchdog+0x1030/0x1030 [ 875.924541][ T32] ? watchdog+0x1c7/0x1030 [ 875.928985][ T32] kthread+0x38b/0x480 [ 875.933076][ T32] ? __pfx_watchdog+0x10/0x10 [ 875.937778][ T32] ? __pfx_kthread+0x10/0x10 [ 875.942395][ T32] ret_from_fork+0x514/0xb70 [ 875.947031][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 875.952181][ T32] ? __switch_to+0xc89/0x1420 [ 875.956902][ T32] ? __pfx_kthread+0x10/0x10 [ 875.961515][ T32] ret_from_fork_asm+0x1a/0x30 [ 875.966324][ T32] [ 875.969986][ T32] Kernel Offset: disabled [ 875.974333][ T32] Rebooting in 86400 seconds..