last executing test programs: 4m31.822715079s ago: executing program 0 (id=964): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x13, 0xffffffffffffffff, 0x55746000) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000fddbdf2508000000080001005e0000000c0099"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5000000}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x6c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xe, 0x8, 0x6, 0x9}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4007965}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x5}]}, 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048055}, 0x800) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r9, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r9, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@delpolicy={0x1c0, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in6=@local, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x10, 0x2, 0xa0, 0x0, 0x8d, 0x0, 0xee00}, 0x6e6bbd}, [@sec_ctx={0x26, 0x8, {0x22, 0x8, 0x0, 0x4, 0x1a, "95c1aa21a69b0b6acb3e657edfd0abd839880f4961b7ae1bf3c6"}}, @coaddr={0x14, 0xe, @in=@remote}, @lastused={0xc, 0xf, 0x6}, @lifetime_val={0x24, 0x9, {0x132, 0x4, 0x8001, 0x200}}, @coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @algo_aead={0x84, 0x12, {{'morus640-sse2\x00'}, 0x1c0, 0x40, "4c56a16085192972b89f4ec4d18291429d9883da2383e43001e3977573811e1c3733bdae7901dc5be49419fb6975f8546333171482f7d43a"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe131}, @algo_comp={0x63, 0x3, {{'lzs\x00'}, 0xd8, "635f2509de102035d8e7397677c86e272a229a1dea87199b81f27e"}}]}, 0x1c0}}, 0x0) (rerun: 64) socket$packet(0x11, 0x2, 0x300) 4m31.772888604s ago: executing program 0 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), 0xfffffffffffffffd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36c}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x90}}, 0x80) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept$alg(r5, 0x0, 0x0) 4m31.59631964s ago: executing program 0 (id=973): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110ba00000000000700000000e0ff009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f63aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x18, 0x3c, 0x107, 0x400, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) 4m31.324700528s ago: executing program 0 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73790000000000004400028008000100008000"], 0xa4}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0, 0x41}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bind$bt_hci(r2, &(0x7f0000000580)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000005c0)="4df3d8f664372a9b6b2f55f16dcc48f6e0c6b225f3ef35bae7fcded54d43ef3921f4ce227bc49ba4aa6bc4da791c8a974b8be0bdcf100391150b5fb9bc6a12e11ef9d9b9fcca0ed795fc88aa322a1c647743713ccc96981d3102aaa2033c3b5d9e324f387ae76714405ca78ab3d1c5e4926c898ec9a457cf397af16bd283323b8770a47990", 0x85) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r5, 0x1, 0xc, &(0x7f0000000180)="00050002", 0xfffffffffffffe7a) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400400c}, 0x8080) sendmsg$AUDIT_USER(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000ed0300022abd7000fedbdf252129a766e60b4ecdd7e9d01d78a4ea01640ebb5c37a470bdcd2be1c43ef232f5de47402633996b27abc3876c3eb40000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117400000000008510000002000000850c00003f00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r9, 0x20, 0x70bd25, 0x6, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 4m31.258889336s ago: executing program 0 (id=979): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f00000002c0), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) shutdown(r1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="480000001000ffff27087139226bed01e0076ebd7000e4edef16e4c2888dae9001b1eb5ff78072bc51d8eb82c9b8d0cfb371a923007435600b706c332ab084a28c0fe00c6e29ed42fdf727e21a9027a6e1e2c11c01c7f8cef253a112735a6e1cd07da181fb754da4410cfe22d7bf30e2afd398f2d8fdb9d9f7f753cd9e915550503c6c5f0975e095474ece6fe1d2d8518bc0a4f9292cf1785f78e66e03000000000000", @ANYRES32=0x0, @ANYBLOB="320a0500390c0000280012800b00010069703667726500001800028014000700ff000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000ac0)=""/89, 0x59}) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 4m31.136265072s ago: executing program 0 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000140)}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/36, 0x24}, {&(0x7f00000003c0)=""/121, 0x79}], 0x2, &(0x7f0000000440)=""/39, 0x27}, 0x140) 4m16.047765282s ago: executing program 32 (id=981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000140)}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/36, 0x24}, {&(0x7f00000003c0)=""/121, 0x79}], 0x2, &(0x7f0000000440)=""/39, 0x27}, 0x140) 2m30.568658251s ago: executing program 5 (id=1244): unshare(0x26020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000150008000400010000000000000000000000000000b6c7fa"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x115, 0x70bd2b, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) socket$inet(0x2, 0x7, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000040), 0x4) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x178}, 0x24000000) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0xf4e54000) sendmsg$nl_generic(r5, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x398, 0x30, 0x800, 0x70bd29, 0x25dfdbfd, {0x16}, [@nested={0xf2, 0x13a, 0x0, 0x1, [@generic="3312f6a68ed93419bcc06dea32a88d2bdae4617d3f0b9fb31e633d5e1ea9e63b7f3118c55ecde41be3b8ba1b6ff19131fe10869df46cb8ecdb7bb869c1b97b1d1d50a4606188cf4a4ff985b9edbc775ea4331c3be4b3667dfd6065417d4fb9156fcf26f6536a7c1e43934bf43ac0618380ad0413012cc3cad78e86da6cfcd625934ee9b54b6a16a8d6bdc8796ac9ea420bb3e64212a212dca7509d7b975f5b7837fb4a24cbd49f279cc9a7bf6b83aa5ffeb5363bee7b9d287ae696821f1374eb9d51119e3636ea835cbad9cce792bdfdb69ae2528ce0", @typed={0xc, 0x22, 0x0, 0x0, @u64=0xfffffffffffffffc}, @nested={0x4, 0x96}, @typed={0x5, 0x33, 0x0, 0x0, @str='\x00'}]}, @generic="de43706a10d2bdf54d7fab5783f5ef31b478bd375373915b5f72f4a9e01b8ef0fbedaee7719a74583bd9a366198a909ac02435e90ac75500f129a7a94cd19cf3902c8ee4311e5b31b077f91b01df81b031fe43c87627c6df2ccce3f03e5367ecfb76c63badc9035e479311012c2a30752628183f43fb2076220ad5e4acf9215e36bfca510dcad1d164229db6bffd23ab979c4b69086c51de4341ebebcc463516b9c090c2143589d40996b3294505f05b462aedada9179959d6be3f7e418f5627", @nested={0xf8, 0xcb, 0x0, 0x1, [@generic="28496af737ed8478684c6745506488bd119101fb47840273893f8aa08ff49f982ad8ec2493dc8888cebe763919796871c90bf634a82cdf878c1c3afa7593fde7dd0246d01bb344bd7e2309b9cb45404ab07df23a44bc24cf0187145ab8d1b793c0d6fe993465f5dabe4b84d99706839655b45735b99016fb9b0a3404c5fe506c69ce364b75cebee73e3e162b87ab0c12a76d5be54aba0435605a6e6c57a7c851bc92738baf942a780ce8ac448312421af288fe59420cd1fa5e6b12085309e66a49ee8d17239a4609768c8a4d823fed5b205eac7be1eb44eec15a0e56a2e51e08072ae87c37bdf12856b2d88d1f0683503b595ad7"]}, @generic="59ba593eed83559182eb76ec137234c2132741d2981daa74b4809f0dab4df1d31552885b186f00233313d7eed5a0ef219ee519c6efeabdf6ac8b4c30a52f473a422199172e9facb886935d23137509ac2f", @typed={0x4, 0xd2}, @generic="df239c3d5ee1425129820968570ed5d2bf2008cd58295a1bffd1e5f4a11f30ec58e331fcf158f06b1b7aff41d58d422c97255d2aad79bbe0df91a5338c95d6de2f0101d921d3a2820d77c7bcb9e0610087e3e0ac8e603a9605c4ed652486e7e92ccdab8d49228e2b17984f5f5c3caffc55b8063d7ebaa508cc6465a73d02479d40"]}, 0x398}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880) 2m30.238807578s ago: executing program 5 (id=1249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0xfffffffffffffe89, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) accept4$x25(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80000) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 2m30.095635218s ago: executing program 5 (id=1251): bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x4, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@private=0xa010102, 0x8}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b900000000000000000700000006000480ffef00"], 0x24}}, 0x0) 2m29.857029123s ago: executing program 5 (id=1257): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') unshare(0x22020600) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0xd}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m29.729308869s ago: executing program 5 (id=1259): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0xffffff, [{0x7}, {0x1000002, 0x3}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x6c, 0x3}]}, {0x0, [0x2e, 0x0, 0x2e]}}, 0x0, 0x49, 0x0, 0x1}, 0x28) (async, rerun: 32) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (rerun: 32) 2m28.809640543s ago: executing program 5 (id=1273): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000000)="a5355273e6536758624416bacb30b262f05dd6bc3dd890052d532f1aa1d6acfff80c058f38597f2b42c9f3e81de0fc8775eb32271cb48a83de", &(0x7f00000000c0)=""/223, &(0x7f0000000200)="8575b64d437360dcd40553647a937845c0e49c28e46b5fe6de4a672289dc60edc884d61f6325a4b501dd48a3bea8563480714cb950d04bd1ca3ab5f520816684954b8282bb6d643b025178aa586b84253432e21e1c50d5ad2dcea480095e612b98cd78fc7a7f76b44c20c2bfd59b619c1cbd080bd79fc73239bdf5fd7086a16c415ea735172a88ce76a1c5f406ba4744a973de1cd22206de814bde17581ad5f23a89f51642d1f8713639c8617e34d973e2fcad05acf3a5a33939bc100a8fd71ae62c52", &(0x7f00000009c0)="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", 0xa, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x4800) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000380)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x9cb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xcc}, 0x94) 2m13.694567736s ago: executing program 33 (id=1273): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000000)="a5355273e6536758624416bacb30b262f05dd6bc3dd890052d532f1aa1d6acfff80c058f38597f2b42c9f3e81de0fc8775eb32271cb48a83de", &(0x7f00000000c0)=""/223, &(0x7f0000000200)="8575b64d437360dcd40553647a937845c0e49c28e46b5fe6de4a672289dc60edc884d61f6325a4b501dd48a3bea8563480714cb950d04bd1ca3ab5f520816684954b8282bb6d643b025178aa586b84253432e21e1c50d5ad2dcea480095e612b98cd78fc7a7f76b44c20c2bfd59b619c1cbd080bd79fc73239bdf5fd7086a16c415ea735172a88ce76a1c5f406ba4744a973de1cd22206de814bde17581ad5f23a89f51642d1f8713639c8617e34d973e2fcad05acf3a5a33939bc100a8fd71ae62c52", &(0x7f00000009c0)="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", 0xa, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x4800) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000380)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x9cb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1005, &(0x7f0000001a00)=""/4101, 0x41000, 0xcc}, 0x94) 1m24.463866595s ago: executing program 3 (id=1950): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x37}, 0x4}}}, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x85, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffc0}}, [0x9d7, 0x7, 0x6, 0xe7, 0x7fff, 0x3, 0x6, 0x3, 0x7fffffff, 0x1, 0xb, 0x11c8, 0x51, 0x5, 0x1]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2}, 0x8) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000380)="4044c877fdd8a446a45a0a49d141573ab961bde46bf216dec3") r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000400)='syz0\x00', 0x1ff) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) ppoll(&(0x7f0000000440)=[{r5}, {r0, 0x8}, {r0, 0x3048}], 0x3, &(0x7f00000004c0)={r6, r7+60000000}, &(0x7f0000000500)={[0x9]}, 0x8) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000640)={0x7, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000700)) (async) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000740), &(0x7f0000000780)=0x40) (async) r8 = openat$cgroup_type(r5, &(0x7f00000007c0), 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000800)={r4, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}}, 0x8001, 0x0, 0xe34, 0x2, 0x10, 0x0, 0x3}, &(0x7f00000008c0)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000900)={r9, 0x0, 0x80, "a04653850ef0afa35272e7a9ce15dd8876783c315d48aee2bc0c84cc213b0dd62a0140db1b580b38d627dcbdfa061bbd9bee68237edcc2147c4c2cae568a4b693d3c2f3cd1d7af58fa57b2ddd85dfd94ef981bdc7a4e9d25be69c3dec5849a71812ee7427014f8c3c70318647671e04519e41a94d803673d944af9185b1ac197"}, 0x88) write$cgroup_type(r8, &(0x7f00000009c0), 0x9) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a00)={0x0, @private, @empty}, &(0x7f0000000a40)=0xc) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x9, 0x6f6e, 0x2, 0x4102, r0, 0x9d0f, '\x00', r10, r11, 0x0, 0x1, 0x2, 0x8}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x5, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4f7d}, [@func, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000b80)='GPL\x00', 0x6, 0x15, &(0x7f0000000bc0)=""/21, 0x41000, 0x2, '\x00', r10, @sock_ops, r11, 0x8, &(0x7f0000000c00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x6, 0x9, 0xffffff7b}, 0x10, r12, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000cc0)=[{0x0, 0x2, 0xc, 0x8}], 0x10, 0x8}, 0x94) (async) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000dc0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x1, 0x4, 0x4}}, 0x26) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000e00)=0x97f, 0x4) (rerun: 32) 1m24.183142536s ago: executing program 3 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5aab71971bf7440, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x0, 0x0, &(0x7f0000000080)=0xfffffffffffffe34) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x8, @loopback, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x100, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x8, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1m24.044479909s ago: executing program 3 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@var={0xc, 0x0, 0x0, 0xe, 0x3, 0x2}, @union={0xe, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x0, 0x5, 0x6}]}]}, {0x0, [0x61, 0x5f, 0x61, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000340)=""/12, 0x48, 0xc, 0x1, 0x10001, 0x10000, @value=r1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x29, 0x14, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', r3, @fallback=0x11, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4, 0x0, 0x7}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) 1m23.955707431s ago: executing program 3 (id=1956): r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd0000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c854) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000004c0)=0x1, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000340)=0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2004}) (async) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create(0x4) (async) r4 = socket(0x28, 0x801, 0x0) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5}, 0xc) (async, rerun: 64) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x6e}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) (async, rerun: 32) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x63) (async, rerun: 64) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) unshare(0x28000600) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) 1m23.828814131s ago: executing program 3 (id=1960): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496e", 0x12}], 0x1}}], 0x1, 0x8810) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x53, 0x5, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x8, 0x7d, 0x6}}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}]}, 0x40}}, 0x40) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) 34.138312361s ago: executing program 3 (id=1967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x621, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500ff00000800000098f855", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x30, &(0x7f0000005800)={&(0x7f0000000540)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 34.137230489s ago: executing program 34 (id=1967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x621, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500ff00000800000098f855", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x30, &(0x7f0000005800)={&(0x7f0000000540)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x86df5cc3eb3e0791}, 0x804) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.548697208s ago: executing program 2 (id=2207): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x54, 0x8aa, 0x7}, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32) socket(0x2, 0x80805, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) unshare(0x28040680) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (rerun: 32) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0x8, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xfffffffffffffffe, 0x101, 0x8001}, &(0x7f0000000200)) write(r3, &(0x7f0000000040)="09000000010000", 0x7) 5.379376797s ago: executing program 2 (id=2211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004049}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 5.322125424s ago: executing program 2 (id=2214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = socket(0x5, 0x1, 0x2) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000074d4c068de24977f7a3dd900ece43800"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000061107400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5.050581459s ago: executing program 2 (id=2219): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.918296952s ago: executing program 2 (id=2222): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000040)=[{0x8, 0x1, 0x5, 0x6}, {0x6, 0x5, 0x3, 0x365}]}) write$ppp(r0, &(0x7f0000000400)="6b27e58a4a", 0x5) 4.69807122s ago: executing program 2 (id=2225): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x16, r1, 0x1, 0xbd, 0x6, @multicast}, 0x14) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r5) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, r7, 0x0) r9 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x61e0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getchain={0x34, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r10, {0x7, 0x8}, {0xd, 0xa}, {0x8}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xe9c2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.964298928s ago: executing program 1 (id=2254): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg(r3, &(0x7f0000000400)={&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x798, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="04c10a34f798b692ef30110bf76a7f881985ef5eab6fda2bd6a01a2cb13b0ac09a082c8f6cd4e96bd92860c419bae77926132094318950573fe7ebd4b03d5c89f13c52a648b77258768c8d30d8beb7ff904b518762273bb9988882225bd0e31c98a79d0ffa38d389866bba21416dfc36c767a3ecc51b8907d977015942be8dfe4e73fc510a14e5cf02ab0975f8e329377d4a72e274f0dbe53a9e6fb2459a324076a2f6a4a761be963ea6d41fc7059fc61107cec3649d1dbfe5725e5822aa4eca46e33de0b9a0327123f18c7ef4dd0c123fc8f9d9a487acfdf3da010c89434b4f045af5ca656dede47e2c1765bdebd9", 0xef}], 0x1, &(0x7f0000000480)=[{0xd0, 0xce, 0x9, "c3bb6432830939c0dd1425328676bdd9f48c8a076c709e7f159d7b85075297d2fccd695fb00ab4e26c2bb7e4b949392572c7bc81d28825a5b1bf4982f9b2e48d2a624837f2950fa71d1063c6afd98f3b0fcb0a9ea1ea177cf7b4ce6e7b9372f7d3b4c2b7d92ac4a061902e93373c44d5fd442b6e11296e3b0bd634dc62add770e4edde09933f0908c1462b2ecf62b42e5f7b60492e7c446886d84667843de49419b3121dc824667db1d0ef545a29f494e077c2ea9010e27ded"}, {0x40, 0x10b, 0x2, "e4517a8bbdbb41c43710af78c96e0934756a8d2579cf07709be059033e60f8c162335ad951e3f7c48afe026b3d7cec"}], 0x110}, 0x40840) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=r1, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES8=r2, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.823687079s ago: executing program 1 (id=2258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109801, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) close(0x4) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1, &(0x7f0000000340)=""/4096, 0x1000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="f1"], 0x7) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008000100000003003d0000004500003f00000000008490783fffffffac141baa4e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8400000790780013050a460000c10000400000002244070000bc0be4bdf9da"], 0x4d) 1.664497554s ago: executing program 1 (id=2260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a000000380001802c00018014000300fe8000000000000000000000000000bb1400040000000000000000000000ffffe000000106000340000200003c0002800c00028005000100000000002c00018014000300add452f6ef29cd8fd7e24baf210000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000001c0006800c00038006000200000000000c000380060001004e230000"], 0xac}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000440)={0x0, {{0xa, 0x4e28, 0x1, @mcast2, 0x800}}, {{0xa, 0x4620, 0xfffffff8, @local, 0x8000}}}, 0x108) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) syz_emit_ethernet(0xae, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800451e0001ac1414aa05009078e00000e0410000000000000000110000e0000001ac14140086310000000006108e62d0f1d74669cfdea1e69be988062dba4204f7ca3d1d1c8dd9372f7f0007c1d167f5880205365ca6060300443c00030a01012f00000000e0000001000000007f00000100000200ac1414aa000000000000000000000000ac14140000000000000000000000000400"/174], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xdaf3a7d7de77bdaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffffffdffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f0000000580)={0x3ff, 0x0, 0x8, 0x9, 0x35f2, 0x0, 0x7fffffff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000280)={0x20012, 0x2, 0x1, 0xfe, 0x3}, 0x8) 1.044955219s ago: executing program 7 (id=2269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f00000001c0)="3fd5267a", 0x4) 996.184571ms ago: executing program 4 (id=2272): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/172, &(0x7f0000000140)=0xac) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000180)={@null, @bcast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000200)={'veth1_to_bond\x00', {0x2, 0x0, @remote}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xffffff80, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7}}, 0x1, 0x101}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x7, 0x0, 0x5, 0xdb3c, r3}, 0x10) getpeername$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000580)={'HL\x00'}, &(0x7f00000005c0)=0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x2b, 0x1}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x0, 0x7}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f00000008c0)=""/4096, 0x47, 0x1000, 0x1, 0x4, 0x10000}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001980)={r0, 0x3, 0x0, 0x100}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x21, 0x4, 0x54, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x12, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0xb, 0x5, 0x4, 0x6, 0x7}, @call={0x85, 0x0, 0x0, 0x92}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0x7a, &(0x7f00000007c0)=""/122, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2f, r7, 0x8, &(0x7f0000001900)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x2, 0x5, 0x1, 0xfffff801}, 0x10, 0x0, r8, 0x2, &(0x7f0000001ac0)=[r5, r9, r10], &(0x7f0000001b00)=[{0x1, 0x4, 0xc, 0xa}, {0x0, 0x5, 0xe, 0x5}], 0x10, 0x7}, 0x94) r11 = accept$phonet_pipe(r8, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$sock_SIOCGIFBR(r11, 0x8940, &(0x7f0000001d40)=@get={0x1, &(0x7f0000001c80)=""/183, 0x5}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001ec0)={&(0x7f0000001d80)="fd55e2ab87132eb74102e07c", &(0x7f0000001dc0)=""/23, &(0x7f0000001e00)="69e0fc3dd786c1ebe5e11f45e9909bd1b0a332360969d38caf", &(0x7f0000001e40)="1ad778634a2a061256f383fd73de1f9267647c376ff0946297a30fa61b8361916dc5118e1bd6a58342df249aa834a9cb3aed3e03419d872d8e7e6f4f85e9b8ff2c756db4fff33b4cade76ab9dc88", 0x4, r9, 0x4}, 0x38) ioctl$int_in(r11, 0x5421, &(0x7f0000001f00)=0x7) r12 = syz_genetlink_get_family_id$team(&(0x7f0000001f80), r2) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001fc0)={0x0, @multicast1}, &(0x7f0000002000)=0xc) getpeername$packet(r8, &(0x7f0000002040)={0x11, 0x0, 0x0}, &(0x7f0000002080)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000020c0)={@local, 0x0}, &(0x7f0000002100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f0000002140)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x5, 0x2f6a7c73, 0x60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8029, 0x7, 0x3, 0x56}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000025c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002580)={&(0x7f0000002200)={0x34c, r12, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb86e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf36}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x34c}}, 0x20008000) 983.580504ms ago: executing program 7 (id=2273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x51, &(0x7f0000001e00)=""/4086, 0x41000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r3, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r5, &(0x7f0000000200)="da905290f8d4a6d43819dd7605297dd3695c1a2a00dbd0f1663958b8b4b82515347e76c6c869a2b73e97e4751c7c46c638cb918fe204a4e8005be52f5c6e81aa843ce41852f501433401d13cd107ae6916c2ea244ba02f51", 0x58, 0x8040, &(0x7f00000004c0)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x0, 0x2, 0x20, @mcast2, @mcast2, 0x80, 0x1, 0x0, 0x6}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 892.216112ms ago: executing program 4 (id=2275): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="45dd402bac7108b8cb8fa3eec709c6df58fd72fa5f541dceafae8059d20aedbe59a216ba48dc1c9656f24e48928687a88e01ec6f45623e92c49f680b9dd95923222901f9dbeda528276b55d6e37388372c045e12dd41629245240cd52b7e05967030ee05e6a0e381d7a2aa412f5d167f8522dd2f59a2e0e30e0a1094ceb27b510f16e9ef52fa1177cbe6ac9aacb4341563d3431e07225c4e52", @ANYRES64=r3, @ANYBLOB="b24d750031ea55f2d25df816d6235c0500000000000000e3a4685e0db99c31bb0ec38b524f6fe567ff64fb83e618b9910a70dbeb0cc87132a79353c3f9f6b0d0f3e9ae572f4ef518ca52eac12cbdd4ecd94e3b8c1697e6d1bc7c2f15e64a456e64597806e749ef25bf4aecd02ba99bfb8b509343ffe2592f823b71b8462fd63841fc1496fa4b", @ANYRESDEC=0x0, @ANYBLOB], 0x50}}, 0x48000) (async, rerun: 32) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={0x58, 0x12, 0x301, 0x70bd30, 0x25dfdbfd, {0x22, 0x2, 0x0, 0x54, {0x4e2b, 0x4e20, [0x44, 0x2, 0x0, 0xfff], [0x0, 0x7ffffffe], 0x0, [0x0, 0x2]}, 0xf1000000, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "4de33a344c"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r8, &(0x7f0000000040)={0x80000000}) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r12 = socket(0x8000000010, 0x2, 0xc) (rerun: 32) write(r12, &(0x7f00000002c0)="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", 0xfc) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r13, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x41040, 0x0) 883.784037ms ago: executing program 6 (id=2276): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 831.457175ms ago: executing program 7 (id=2277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x84}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0xfffffffffffffef8}}, 0x28}}, 0x4000040) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, {0x0, 0x4, 0x0, 0x800a78a}, 0xfffffffe, 0x6e6bc0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0xb}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 768.791507ms ago: executing program 6 (id=2278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40200000000000061114800000000008500000088000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, 0x0, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x4, 0x0, 0x1, 0x0, 0x8, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x28) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r9, 0x1d, 0x0, 0x75781e34, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) 765.533642ms ago: executing program 1 (id=2279): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="cd000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r4, r5}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x4, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x22, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r6, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000400018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffff}}]}, 0x38}}, 0x0) 714.426448ms ago: executing program 6 (id=2280): socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="8000", 0x2}, {&(0x7f0000000400)="860f4fb0b945", 0x6}], 0x2, &(0x7f0000000040)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x5e, 0x4, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3f}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x38}}], 0x1, 0x40000) (async) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="8000", 0x2}, {&(0x7f0000000400)="860f4fb0b945", 0x6}], 0x2, &(0x7f0000000040)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x5e, 0x4, 0x2, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3f}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x38}}], 0x1, 0x40000) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004503005c00000000002f907800000000e0000001248088a8000000400080000d10000800000086dd080088be00000000100000000100000000000000080022eb000000e25fd758cde3f6cbf4440c9083ca00200800000200000000004f52156ba08b6f14474d86fefb4a70899225821a6d5507ba7ce977c2d524f19cfa7b9ae3d38dad"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x6}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0xfffff800, @private2, 0x2}}, 0x0, 0xf2d, 0x5, 0x6, 0x36d5}, &(0x7f00000000c0)=0x98) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0xc0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x9, 0x200, 0x6]}, @CTA_NAT_SRC={0x98, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 683.405143ms ago: executing program 4 (id=2281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xce21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x60}, 0xffffffff}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) 605.037741ms ago: executing program 7 (id=2282): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) 599.450201ms ago: executing program 6 (id=2283): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) (fail_nth: 1) 583.4075ms ago: executing program 4 (id=2284): unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r1}, 0x18) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@remote, @default, @remote, @rose, @rose, @remote, @bcast, @bcast]}, &(0x7f0000000000)=0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r3, &(0x7f0000000140)=0x8, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000e4ffffffffffff01020200090001"], 0x34}, 0x1, 0x40030000000000}, 0x14004054) 546.185517ms ago: executing program 7 (id=2285): r0 = socket$inet6(0xa, 0x4, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x20000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000000)) 464.975559ms ago: executing program 4 (id=2286): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 448.780743ms ago: executing program 1 (id=2287): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x4008800) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x45, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r8) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r9, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x40000) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x60, r11, 0x1, 0x14, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010105}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x24}}, 0x20008840) syz_emit_ethernet(0x32, &(0x7f0000000600)={@multicast, @broadcast, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @link_local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x8, 0xe}, 0x2c) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) 324.166418ms ago: executing program 4 (id=2288): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) close(r0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="07db2716b09b314030d976dc3808284ff464832583f72bf3bea7408f4662", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x6}]}}}], 0x18}}], 0x2, 0x8c4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000006c0)={0x8, 'veth1_to_bridge\x00', {'syz_tun\x00'}, 0x2}) sendmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000080)=@nfc_llcp={0x27, r4, 0x1, 0x2, 0x1, 0x2, "ab33fe5a99cd367796f2fbff44f2baab863e7f7222636809c2a75c9b467da125123870fe6ee4fc6afbcee0ac36a7b342856f4b4020801d97eee8796bdc1aa5", 0x37}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000000)="19c9a1d220ee2ab31c08b32382e52ba396450b94b3bada2dc6aa8495628217bcd3cbf6c13eb392d9", 0x28}, {&(0x7f0000000200)="984767f3b537440b83b8cda572a7de44764b44bc915da120236845b58b62263b92ad9f893c1a7ea929f2644d56e0516ddd42c3058d9561b4e70c4ed2dd5ba81d655ec188ac4776bfcd58", 0x4a}, {&(0x7f0000000280)="4bea5856e98a9a91b1fc", 0xa}, {&(0x7f00000002c0)="f403a047a10faa0363603cb8e655c4ecc3f17852fa04f16d7e56acccdb74690771387edffdc6c91e323ebe8586a7f78e57dc94e40c93fcb4946a00d1e9322789148ce28095f2426f86f01957b5f6b3a86c6f0013b7c595a72919731d0b13eec58f38119855583ce6466b06aee0900c256421cfeab6b3ad82e1439fb03c173c2980c2c4d0dcd764e505084133afa5eb7e54ed854de93f2bba74e02ae88900b61af2394c502a138d", 0xa7}, {&(0x7f0000000380)="b203516d1bd37624914819dfb5931548a0ecdef74e082818e69328fcdb6434bd286e77477660bd77a5859d37a36df8cce138f5d508a4f0c30f79f0591b6ddaec90e3d6d0dd5651322f9d48bd958610c52ce9820f30dccb6e28dae49c11e3f7ad6edc98dfe8f376b885baecb8ed2a114d03fb5d7059360ea49b4ad392b57928fc103f235ffa20bed3bdafb5a91d26400b5e31db5918319aaf6e768ac1971c864dc3c2cff11bdca168ab0081e2e6e2d5d3385cf2157beb572e7bf7d1b2070eaf810b6a675958b56291146dbc6858259a30a0177a438ffc43efe2653d5a596d", 0xde}], 0x6, &(0x7f0000000500)=[{0x38, 0x112, 0x4, "4b55e3314772e7ad08c88c087a1b337b3f5cfbc65055142d1ddd7920e71a0c88473af73f74"}, {0x108, 0x29, 0xfffffffd, "f5380f1c723267cb4f5f75a2bed214d0e48f970b5dd6f10f4a68658b7094ae39c1ba89999c6327438988c37f1e8abafd86bc9d8497c05bd9980f90e82b6712e7e004fd7ac5fc71f505c8fe823e16071e5ae855a0880a0ffcbc472ea8011aabf57e668db44e6782a58663be846584ecb8b1d5787eb59272f30a6c49f39b2e65cc1a08dfafed53d4f1a8b2be9ba4fb59cee0aa21b718ffc04eaf990fe042af4c102ce64a42128c1fb1b7013fddd08076fbc31f85645c4de7ded061caeee170123386868b6459b627bf71d2e7d8d8d3eef93a0eedd753cf5693405471c887f118a168bbdcd34b9f27de61b134fc088dd3f810e7"}, {0x18, 0xc, 0xff, "79e038668faeeb"}], 0x158}, 0x10000014) socket$phonet_pipe(0x23, 0x5, 0x2) (async) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) (async) close(r0) (async) socket(0x2, 0x3, 0xff) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="07db2716b09b314030d976dc3808284ff464832583f72bf3bea7408f4662", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x6}]}}}], 0x18}}], 0x2, 0x8c4) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) (async) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000006c0)={0x8, 'veth1_to_bridge\x00', {'syz_tun\x00'}, 0x2}) (async) sendmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000080)=@nfc_llcp={0x27, r4, 0x1, 0x2, 0x1, 0x2, "ab33fe5a99cd367796f2fbff44f2baab863e7f7222636809c2a75c9b467da125123870fe6ee4fc6afbcee0ac36a7b342856f4b4020801d97eee8796bdc1aa5", 0x37}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)="db575e7afd5ec1221007ae8f97298b55406f286f45e35dc0ec157821b204a33c3b98710f72c8becf98b1b98d0d23d34ae7e25c13cfc48119a417dd7f0eeaa3bfa48a047222e1a9d18198b088ba7dba92578486b7b6618431d6ac575c22d9207355d2703a0b5792e1a5b5031fd2b859c1fd08e8b418531f1d004df39f664d48439a608537aec10cf6befa42790757f2f7494e45c79d01dc5c231200e9b4ea3511cc62feef1e8ac19652a4a5c0d01c2ac1698e45ff7aefbfea546f7e7f4b4269a6795923a18a252ead2d551dd00cdb75ea4493ddc305f5e0bf371d2669e66ad8252770bbd1cbc3db6caadb5959885deac7df7067279996b92e3cbc92", 0xfb}, {&(0x7f0000000000)="19c9a1d220ee2ab31c08b32382e52ba396450b94b3bada2dc6aa8495628217bcd3cbf6c13eb392d9", 0x28}, {&(0x7f0000000200)="984767f3b537440b83b8cda572a7de44764b44bc915da120236845b58b62263b92ad9f893c1a7ea929f2644d56e0516ddd42c3058d9561b4e70c4ed2dd5ba81d655ec188ac4776bfcd58", 0x4a}, {&(0x7f0000000280)="4bea5856e98a9a91b1fc", 0xa}, {&(0x7f00000002c0)="f403a047a10faa0363603cb8e655c4ecc3f17852fa04f16d7e56acccdb74690771387edffdc6c91e323ebe8586a7f78e57dc94e40c93fcb4946a00d1e9322789148ce28095f2426f86f01957b5f6b3a86c6f0013b7c595a72919731d0b13eec58f38119855583ce6466b06aee0900c256421cfeab6b3ad82e1439fb03c173c2980c2c4d0dcd764e505084133afa5eb7e54ed854de93f2bba74e02ae88900b61af2394c502a138d", 0xa7}, {&(0x7f0000000380)="b203516d1bd37624914819dfb5931548a0ecdef74e082818e69328fcdb6434bd286e77477660bd77a5859d37a36df8cce138f5d508a4f0c30f79f0591b6ddaec90e3d6d0dd5651322f9d48bd958610c52ce9820f30dccb6e28dae49c11e3f7ad6edc98dfe8f376b885baecb8ed2a114d03fb5d7059360ea49b4ad392b57928fc103f235ffa20bed3bdafb5a91d26400b5e31db5918319aaf6e768ac1971c864dc3c2cff11bdca168ab0081e2e6e2d5d3385cf2157beb572e7bf7d1b2070eaf810b6a675958b56291146dbc6858259a30a0177a438ffc43efe2653d5a596d", 0xde}], 0x6, &(0x7f0000000500)=[{0x38, 0x112, 0x4, "4b55e3314772e7ad08c88c087a1b337b3f5cfbc65055142d1ddd7920e71a0c88473af73f74"}, {0x108, 0x29, 0xfffffffd, "f5380f1c723267cb4f5f75a2bed214d0e48f970b5dd6f10f4a68658b7094ae39c1ba89999c6327438988c37f1e8abafd86bc9d8497c05bd9980f90e82b6712e7e004fd7ac5fc71f505c8fe823e16071e5ae855a0880a0ffcbc472ea8011aabf57e668db44e6782a58663be846584ecb8b1d5787eb59272f30a6c49f39b2e65cc1a08dfafed53d4f1a8b2be9ba4fb59cee0aa21b718ffc04eaf990fe042af4c102ce64a42128c1fb1b7013fddd08076fbc31f85645c4de7ded061caeee170123386868b6459b627bf71d2e7d8d8d3eef93a0eedd753cf5693405471c887f118a168bbdcd34b9f27de61b134fc088dd3f810e7"}, {0x18, 0xc, 0xff, "79e038668faeeb"}], 0x158}, 0x10000014) (async) 121.108278ms ago: executing program 6 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000080)=""/19, &(0x7f00000001c0)=0x13) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0xffffff86, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/9, 0x9}], 0x1}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03022abd7000f9dbdf254400000008000300", @ANYBLOB="1c002380080009000200000005000f"], 0x44}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x14, 0x1, 0x5, 0x701, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 120.42908ms ago: executing program 1 (id=2290): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x160) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r4) syz_init_net_socket$x25(0x9, 0x5, 0x0) 49.883865ms ago: executing program 6 (id=2291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002780)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0x2, 0x1, 0x3, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="070000003400100000000000", @ANYRES32=r4, @ANYRES64=r3], 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002b80)={0xffffffffffffffff}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) listen(r5, 0x3) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x100000000) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001000)=0x14) sendmmsg$inet(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="34000000000000000000000007000000010503898307deac1414aa4402070f5b640101020a01010100000000000000c83d235a00000000001c000000000000000000000008000000d5b521a8f21d9cbdc234c3db502e5bc6b53b0757435a685a89e7904a4a84e62efec8bd29284c676541497fc3f9527ac858a1c8adcf0c2e486f51afeeb12cebce8c913d2d1a68800a6139482c949667a84b24e2f8e6f45190b5b8072543140c44a0c1a892fb11093d69abbd51d85e6560a21127859e253a26cfdd609aa710a0f182172656413ad9d021cdc186be8141e0b00706360520645634601ff574fadd6f21c8c3a2a9cb6f452474a237896037", @ANYBLOB="3e9375c280961ff7a2c2d485321d776c87cf46d9ccf28dfca476905eb4e477c678571b8529ccac6ee0c9bb32d14f68258e6aea73a47f6b12d553f1b48008b3ae23953159760136e34ef89b15ab36f30a19d9f59470a3176991cced77f4c2012b1fbbb89e6159ce4a676ec69f24feae09836eba1999abb3638f37fd9f92987b", @ANYRESHEX=r1], 0x1a8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000e40)="5fd1f8c5972bcfc2d70f5e4c5b8a37c1b1639cc1870c1d09f4215161a6170904018215d77be26c2dd93abadf32d36d53272a1767c5a2f7319b3d1ebb76d23eb6d691729f8834598210", 0x49}, {&(0x7f00000002c0)="009008689a9c6f5695864c1d697e8d13", 0x10}, {&(0x7f0000000300)="4905185df303635df32756f0e3d87dd662", 0x11}, {&(0x7f0000000340)="8e5ea758ad9efb9b2c6880b1a4dde91f36f8ba8ccc444751d7b938f2c2f3089d8374992c339dc436febd67fe0c7c", 0x2e}, {&(0x7f00000004c0)="6a4d17b40212fad6b51bc7a3a59c6bdcf0e4c60a460e6593ef8536e1eb836bf301d26d902e52c4682d4dab7680e306a6bffc9d804e570a7785285c3d38612137a311db763c1242cd8fd0c235253438f68c5b01395c620e5777474747cf644d9b1aafabb5199635064e8f223bcf123087e670f3a6b99c29b3c1f8ad2f6e4933f0b16c82d6c3d4ffcbf479471e5692cdd5ba3534c68a", 0x95}], 0x5}}, {{&(0x7f0000001080)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)}}], 0x5, 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x4, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80000000}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) 0s ago: executing program 7 (id=2292): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r5], 0x58}, 0x1, 0x0, 0x0, 0x88d5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r10, 0x1, 0x1a, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000100044000004fcffffff00000000017c00000c000180060006008e0a0000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet_sctp_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) kernel console output (not intermixed with test programs): ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 316.333086][T11023] ? __pfx_ksys_write+0x10/0x10 [ 316.333103][T11023] ? rcu_is_watching+0x15/0xb0 [ 316.333134][T11023] ? do_syscall_64+0xbe/0x3b0 [ 316.333155][T11023] do_syscall_64+0xfa/0x3b0 [ 316.333169][T11023] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.333184][T11023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.333199][T11023] ? clear_bhb_loop+0x60/0xb0 [ 316.333217][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.333231][T11023] RIP: 0033:0x7f518658ec29 [ 316.333245][T11023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.333257][T11023] RSP: 002b:00007f5187477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 316.333273][T11023] RAX: ffffffffffffffda RBX: 00007f51867d5fa0 RCX: 00007f518658ec29 [ 316.333284][T11023] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 316.333294][T11023] RBP: 00007f5187477090 R08: 0000000000000000 R09: 0000000000000000 [ 316.333303][T11023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.333312][T11023] R13: 00007f51867d6038 R14: 00007f51867d5fa0 R15: 00007ffc37e762e8 [ 316.333340][T11023] [ 317.482142][T11055] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.1203'. [ 317.516858][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1203'. [ 317.715995][T11073] openvswitch: netlink: Message has 8 unknown bytes. [ 317.822042][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 317.831478][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 317.977213][T11093] C speed is unknown, defaulting to 1000 [ 318.056429][T11100] tipc: Enabled bearer , priority 0 [ 318.060321][T11105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 318.064831][T11100] syzkaller0: entered promiscuous mode [ 318.083119][T11100] syzkaller0: entered allmulticast mode [ 318.118768][T11100] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 318.175311][T11100] tipc: Resetting bearer [ 318.197162][T11097] tipc: Resetting bearer [ 318.242546][T11097] tipc: Disabling bearer [ 318.459717][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1228'. [ 318.642110][T11093] lo speed is unknown, defaulting to 1000 [ 318.791052][T11131] C speed is unknown, defaulting to 1000 [ 319.093420][T11134] C speed is unknown, defaulting to 1000 [ 319.099434][T11131] lo speed is unknown, defaulting to 1000 [ 319.408493][T11152] : entered promiscuous mode [ 319.575365][T11157] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (2) [ 319.674142][T11134] lo speed is unknown, defaulting to 1000 [ 319.966925][T11169] macsec1: entered promiscuous mode [ 319.986023][T11169] macsec0: entered promiscuous mode [ 319.991554][T11169] macsec1: entered allmulticast mode [ 319.998435][T11169] macsec0: entered allmulticast mode [ 320.113749][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'. [ 320.176428][T11182] tipc: Cannot configure node identity twice [ 320.767182][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 320.901966][T11221] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1249'. [ 321.063647][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 321.279019][T11249] netlink: 'syz.5.1257': attribute type 16 has an invalid length. [ 321.305254][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1257'. [ 321.392418][T11252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1258'. [ 321.426371][T11255] netlink: 'syz.2.1260': attribute type 1 has an invalid length. [ 321.442463][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1260'. [ 321.538971][T11261] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 321.552624][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 321.572131][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 321.637674][T11265] tipc: Enabled bearer , priority 0 [ 321.663438][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1260'. [ 321.741252][T11265] tipc: Disabling bearer [ 321.890176][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'. [ 322.466239][T11323] tipc: Enabled bearer , priority 0 [ 322.479372][T11315] tipc: Disabling bearer [ 322.597646][T11332] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 322.642367][T11338] tipc: Failed to remove unknown binding: 66,1,1/0:937746580/937746582 [ 322.653974][T11332] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 322.876704][T11351] bridge: RTM_NEWNEIGH with invalid ether address [ 322.940525][T11358] ksmbd: Unknown IPC event: 3, ignore. [ 322.950205][T11358] netlink: 'syz.4.1287': attribute type 10 has an invalid length. [ 323.257395][T11381] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 323.355188][T11385] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 323.369402][T11385] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 323.384756][T11385] bond5: (slave vcan1): making interface the new active one [ 323.393361][T11385] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 323.432803][T11378] netlink: 'syz.1.1290': attribute type 3 has an invalid length. [ 323.441868][T11378] netlink: 'syz.1.1290': attribute type 3 has an invalid length. [ 323.686167][T11403] netlink: 'syz.4.1295': attribute type 1 has an invalid length. [ 323.710837][T11404] kthread_run failed with err -4 [ 323.954897][T11421] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 324.581335][T11445] netlink: 'syz.1.1306': attribute type 5 has an invalid length. [ 324.938585][T11459] netlink: 'syz.1.1311': attribute type 6 has an invalid length. [ 325.037596][T11464] ksmbd: Unknown IPC event: 3, ignore. [ 325.126132][T11466] macsec0: left allmulticast mode [ 325.131276][T11466] macsec0: left promiscuous mode [ 325.172737][T11470] FAULT_INJECTION: forcing a failure. [ 325.172737][T11470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.186750][T11470] CPU: 1 UID: 0 PID: 11470 Comm: syz.1.1316 Not tainted syzkaller #0 PREEMPT(full) [ 325.186775][T11470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.186787][T11470] Call Trace: [ 325.186794][T11470] [ 325.186802][T11470] dump_stack_lvl+0x189/0x250 [ 325.186827][T11470] ? __pfx____ratelimit+0x10/0x10 [ 325.186846][T11470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.186865][T11470] ? __pfx__printk+0x10/0x10 [ 325.186889][T11470] ? fs_reclaim_acquire+0x7d/0x100 [ 325.186917][T11470] should_fail_ex+0x414/0x560 [ 325.186946][T11470] prepare_alloc_pages+0x213/0x610 [ 325.186972][T11470] __alloc_frozen_pages_noprof+0x123/0x370 [ 325.187001][T11470] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.187027][T11470] ? policy_nodemask+0x27c/0x720 [ 325.187054][T11470] alloc_pages_mpol+0x232/0x4a0 [ 325.187083][T11470] vma_alloc_folio_noprof+0xe4/0x200 [ 325.187108][T11470] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 325.187145][T11470] folio_prealloc+0x30/0x180 [ 325.187170][T11470] do_wp_page+0x1231/0x5800 [ 325.187214][T11470] ? __pfx_do_wp_page+0x10/0x10 [ 325.187232][T11470] ? do_raw_spin_lock+0x121/0x290 [ 325.187259][T11470] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.187289][T11470] __handle_mm_fault+0x1033/0x5440 [ 325.187328][T11470] ? __pfx___handle_mm_fault+0x10/0x10 [ 325.187372][T11470] ? find_vma+0xe7/0x160 [ 325.187392][T11470] ? __pfx_find_vma+0x10/0x10 [ 325.187416][T11470] handle_mm_fault+0x40a/0x8e0 [ 325.187449][T11470] do_user_addr_fault+0x764/0x1390 [ 325.187491][T11470] exc_page_fault+0x76/0xf0 [ 325.187512][T11470] asm_exc_page_fault+0x26/0x30 [ 325.187529][T11470] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 325.187552][T11470] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 325.187566][T11470] RSP: 0018:ffffc90003007678 EFLAGS: 00050206 [ 325.187583][T11470] RAX: ffffffff84c61401 RBX: ffff8880479400e8 RCX: 00000000000085d0 [ 325.187596][T11470] RDX: 0000000000000000 RSI: ffff888047947ce8 RDI: 0000200000008000 [ 325.187608][T11470] RBP: ffffc90003007800 R08: ffff8880479502b7 R09: 1ffff11008f2a056 [ 325.187621][T11470] R10: dffffc0000000000 R11: ffffed1008f2a057 R12: 1ffff92000600fbf [ 325.187644][T11470] R13: 0000200000000400 R14: ffffc90003007e08 R15: 00000000000101d0 [ 325.187666][T11470] ? _copy_to_iter+0x1f1/0x1790 [ 325.187693][T11470] _copy_to_iter+0x24f/0x1790 [ 325.187712][T11470] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 325.187730][T11470] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.187753][T11470] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 325.187777][T11470] ? __pfx__copy_to_iter+0x10/0x10 [ 325.187793][T11470] ? remove_wait_queue+0x33/0x120 [ 325.187818][T11470] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 325.187851][T11470] __skb_datagram_iter+0xf8/0x990 [ 325.187873][T11470] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 325.187893][T11470] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 325.187916][T11470] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 325.187934][T11470] ? __local_bh_enable_ip+0x12d/0x1c0 [ 325.187958][T11470] skb_copy_datagram_iter+0xc5/0x230 [ 325.187986][T11470] tipc_recvstream+0x72d/0xe70 [ 325.188027][T11470] ? __pfx_tipc_recvstream+0x10/0x10 [ 325.188046][T11470] sock_recvmsg+0x22c/0x270 [ 325.188067][T11470] ____sys_recvmsg+0x1c9/0x460 [ 325.188098][T11470] ? __pfx_____sys_recvmsg+0x10/0x10 [ 325.188138][T11470] ? import_iovec+0x74/0xa0 [ 325.188164][T11470] ___sys_recvmsg+0x1b5/0x510 [ 325.188192][T11470] ? __pfx____sys_recvmsg+0x10/0x10 [ 325.188243][T11470] ? __fget_files+0x3a0/0x420 [ 325.188272][T11470] __x64_sys_recvmsg+0x198/0x260 [ 325.188297][T11470] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 325.188330][T11470] ? __pfx_ksys_write+0x10/0x10 [ 325.188349][T11470] ? rcu_is_watching+0x15/0xb0 [ 325.188372][T11470] ? do_syscall_64+0xbe/0x3b0 [ 325.188396][T11470] do_syscall_64+0xfa/0x3b0 [ 325.188413][T11470] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.188430][T11470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.188448][T11470] ? clear_bhb_loop+0x60/0xb0 [ 325.188468][T11470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.188485][T11470] RIP: 0033:0x7f06d7d8ec29 [ 325.188501][T11470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.188515][T11470] RSP: 002b:00007f06d8c0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 325.188532][T11470] RAX: ffffffffffffffda RBX: 00007f06d7fd5fa0 RCX: 00007f06d7d8ec29 [ 325.188545][T11470] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 325.188557][T11470] RBP: 00007f06d8c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 325.188568][T11470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.188578][T11470] R13: 00007f06d7fd6038 R14: 00007f06d7fd5fa0 R15: 00007ffec564e828 [ 325.188610][T11470] [ 325.505652][T11479] tipc: Enabled bearer , priority 0 [ 325.749992][T11485] syzkaller0: entered promiscuous mode [ 325.756037][T11485] syzkaller0: entered allmulticast mode [ 325.762255][T11485] tipc: Resetting bearer [ 325.821782][T11478] tipc: Resetting bearer [ 326.525660][ T8467] tipc: Node number set to 3117995039 [ 327.482346][T11478] tipc: Disabling bearer [ 327.641096][T11500] __nla_validate_parse: 19 callbacks suppressed [ 327.641117][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 327.741965][T11505] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 327.788727][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1326'. [ 327.816295][T11512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1328'. [ 327.823830][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 327.984667][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 328.119223][T11528] FAULT_INJECTION: forcing a failure. [ 328.119223][T11528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.156515][T11535] C speed is unknown, defaulting to 1000 [ 328.172034][T11528] CPU: 0 UID: 0 PID: 11528 Comm: syz.3.1333 Not tainted syzkaller #0 PREEMPT(full) [ 328.172061][T11528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.172071][T11528] Call Trace: [ 328.172078][T11528] [ 328.172085][T11528] dump_stack_lvl+0x189/0x250 [ 328.172110][T11528] ? __pfx____ratelimit+0x10/0x10 [ 328.172129][T11528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.172148][T11528] ? __pfx__printk+0x10/0x10 [ 328.172172][T11528] ? fs_reclaim_acquire+0x7d/0x100 [ 328.172199][T11528] should_fail_ex+0x414/0x560 [ 328.172229][T11528] prepare_alloc_pages+0x213/0x610 [ 328.172255][T11528] __alloc_frozen_pages_noprof+0x123/0x370 [ 328.172278][T11528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 328.172305][T11528] ? policy_nodemask+0x27c/0x720 [ 328.172344][T11528] alloc_pages_mpol+0x232/0x4a0 [ 328.172372][T11528] vma_alloc_folio_noprof+0xe4/0x200 [ 328.172397][T11528] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 328.172436][T11528] folio_prealloc+0x30/0x180 [ 328.172460][T11528] do_wp_page+0x1231/0x5800 [ 328.172502][T11528] ? __pfx_do_wp_page+0x10/0x10 [ 328.172519][T11528] ? do_raw_spin_lock+0x121/0x290 [ 328.172543][T11528] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.172571][T11528] __handle_mm_fault+0x1033/0x5440 [ 328.172608][T11528] ? __pfx___handle_mm_fault+0x10/0x10 [ 328.172653][T11528] ? find_vma+0xe7/0x160 [ 328.172673][T11528] ? __pfx_find_vma+0x10/0x10 [ 328.172694][T11528] handle_mm_fault+0x40a/0x8e0 [ 328.172740][T11528] do_user_addr_fault+0x764/0x1390 [ 328.172781][T11528] exc_page_fault+0x76/0xf0 [ 328.172801][T11528] asm_exc_page_fault+0x26/0x30 [ 328.172816][T11528] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 328.172837][T11528] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 328.172850][T11528] RSP: 0018:ffffc9001bc37678 EFLAGS: 00050206 [ 328.172866][T11528] RAX: ffffffff84c61401 RBX: ffff88804bb400e8 RCX: 00000000000075d0 [ 328.172878][T11528] RDX: 0000000000000000 RSI: ffff88804bb48ce8 RDI: 0000200000009000 [ 328.172889][T11528] RBP: ffffc9001bc37800 R08: ffff88804bb502b7 R09: 1ffff1100976a056 [ 328.172899][T11528] R10: dffffc0000000000 R11: ffffed100976a057 R12: 1ffff92003786fbf [ 328.172912][T11528] R13: 0000200000000400 R14: ffffc9001bc37e08 R15: 00000000000101d0 [ 328.172933][T11528] ? _copy_to_iter+0x1f1/0x1790 [ 328.172957][T11528] _copy_to_iter+0x24f/0x1790 [ 328.172973][T11528] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 328.172989][T11528] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.173005][T11528] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 328.173027][T11528] ? __pfx__copy_to_iter+0x10/0x10 [ 328.173041][T11528] ? remove_wait_queue+0x33/0x120 [ 328.173062][T11528] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 328.173095][T11528] __skb_datagram_iter+0xf8/0x990 [ 328.173117][T11528] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 328.173136][T11528] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 328.173159][T11528] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 328.173176][T11528] ? __local_bh_enable_ip+0x12d/0x1c0 [ 328.173199][T11528] skb_copy_datagram_iter+0xc5/0x230 [ 328.173225][T11528] tipc_recvstream+0x72d/0xe70 [ 328.173263][T11528] ? __pfx_tipc_recvstream+0x10/0x10 [ 328.173287][T11528] sock_recvmsg+0x22c/0x270 [ 328.173310][T11528] ____sys_recvmsg+0x1c9/0x460 [ 328.173348][T11528] ? __pfx_____sys_recvmsg+0x10/0x10 [ 328.173388][T11528] ? import_iovec+0x74/0xa0 [ 328.173413][T11528] ___sys_recvmsg+0x1b5/0x510 [ 328.173441][T11528] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.173491][T11528] ? __fget_files+0x3a0/0x420 [ 328.173520][T11528] __x64_sys_recvmsg+0x198/0x260 [ 328.173545][T11528] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 328.173577][T11528] ? __pfx_ksys_write+0x10/0x10 [ 328.173596][T11528] ? rcu_is_watching+0x15/0xb0 [ 328.173619][T11528] ? do_syscall_64+0xbe/0x3b0 [ 328.173642][T11528] do_syscall_64+0xfa/0x3b0 [ 328.173659][T11528] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.173676][T11528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.173692][T11528] ? clear_bhb_loop+0x60/0xb0 [ 328.173714][T11528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.173729][T11528] RIP: 0033:0x7f02a338ec29 [ 328.173744][T11528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.173758][T11528] RSP: 002b:00007f02a416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 328.173776][T11528] RAX: ffffffffffffffda RBX: 00007f02a35d5fa0 RCX: 00007f02a338ec29 [ 328.173788][T11528] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 328.173800][T11528] RBP: 00007f02a416e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.173817][T11528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.173827][T11528] R13: 00007f02a35d6038 R14: 00007f02a35d5fa0 R15: 00007ffec1c1c868 [ 328.173858][T11528] [ 328.194970][T11537] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 328.377899][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'. [ 328.609000][T11541] C speed is unknown, defaulting to 1000 [ 328.947533][T11557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1340'. [ 329.048541][T11560] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 329.070977][T11557] nbd: socks must be embedded in a SOCK_ITEM attr [ 329.098532][T11564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'. [ 329.784690][T11597] delete_channel: no stack [ 329.830954][T11598] FAULT_INJECTION: forcing a failure. [ 329.830954][T11598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.851797][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.4.1350 Not tainted syzkaller #0 PREEMPT(full) [ 329.851822][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.851831][T11598] Call Trace: [ 329.851837][T11598] [ 329.851845][T11598] dump_stack_lvl+0x189/0x250 [ 329.851868][T11598] ? __pfx____ratelimit+0x10/0x10 [ 329.851885][T11598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.851902][T11598] ? __pfx__printk+0x10/0x10 [ 329.851924][T11598] ? fs_reclaim_acquire+0x7d/0x100 [ 329.851947][T11598] should_fail_ex+0x414/0x560 [ 329.851973][T11598] prepare_alloc_pages+0x213/0x610 [ 329.851995][T11598] __alloc_frozen_pages_noprof+0x123/0x370 [ 329.852014][T11598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.852038][T11598] ? policy_nodemask+0x27c/0x720 [ 329.852063][T11598] alloc_pages_mpol+0x232/0x4a0 [ 329.852088][T11598] vma_alloc_folio_noprof+0xe4/0x200 [ 329.852111][T11598] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 329.852142][T11598] folio_prealloc+0x30/0x180 [ 329.852163][T11598] do_wp_page+0x1231/0x5800 [ 329.852203][T11598] ? __pfx_do_wp_page+0x10/0x10 [ 329.852217][T11598] ? do_raw_spin_lock+0x121/0x290 [ 329.852239][T11598] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.852266][T11598] __handle_mm_fault+0x1033/0x5440 [ 329.852301][T11598] ? __pfx___handle_mm_fault+0x10/0x10 [ 329.852340][T11598] ? find_vma+0xe7/0x160 [ 329.852357][T11598] ? __pfx_find_vma+0x10/0x10 [ 329.852377][T11598] handle_mm_fault+0x40a/0x8e0 [ 329.852406][T11598] do_user_addr_fault+0x764/0x1390 [ 329.852466][T11598] exc_page_fault+0x76/0xf0 [ 329.852485][T11598] asm_exc_page_fault+0x26/0x30 [ 329.852499][T11598] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 329.852519][T11598] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 329.852532][T11598] RSP: 0018:ffffc9001b7df678 EFLAGS: 00050206 [ 329.852547][T11598] RAX: ffffffff84c61401 RBX: ffff88804bb200e8 RCX: 00000000000065d0 [ 329.852559][T11598] RDX: 0000000000000000 RSI: ffff88804bb29ce8 RDI: 000020000000a000 [ 329.852569][T11598] RBP: ffffc9001b7df800 R08: ffff88804bb302b7 R09: 1ffff11009766056 [ 329.852580][T11598] R10: dffffc0000000000 R11: ffffed1009766057 R12: 1ffff920036fbfbf [ 329.852591][T11598] R13: 0000200000000400 R14: ffffc9001b7dfe08 R15: 00000000000101d0 [ 329.852610][T11598] ? _copy_to_iter+0x1f1/0x1790 [ 329.852635][T11598] _copy_to_iter+0x24f/0x1790 [ 329.852652][T11598] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 329.852667][T11598] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.852683][T11598] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 329.852704][T11598] ? __pfx__copy_to_iter+0x10/0x10 [ 329.852718][T11598] ? remove_wait_queue+0x33/0x120 [ 329.852739][T11598] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 329.852769][T11598] __skb_datagram_iter+0xf8/0x990 [ 329.852787][T11598] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 329.852805][T11598] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 329.852824][T11598] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 329.852839][T11598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 329.852860][T11598] skb_copy_datagram_iter+0xc5/0x230 [ 329.852884][T11598] tipc_recvstream+0x72d/0xe70 [ 329.852922][T11598] ? __pfx_tipc_recvstream+0x10/0x10 [ 329.852938][T11598] sock_recvmsg+0x22c/0x270 [ 329.852957][T11598] ____sys_recvmsg+0x1c9/0x460 [ 329.852986][T11598] ? __pfx_____sys_recvmsg+0x10/0x10 [ 329.853021][T11598] ? import_iovec+0x74/0xa0 [ 329.853043][T11598] ___sys_recvmsg+0x1b5/0x510 [ 329.853068][T11598] ? __pfx____sys_recvmsg+0x10/0x10 [ 329.853112][T11598] ? __fget_files+0x3a0/0x420 [ 329.853137][T11598] __x64_sys_recvmsg+0x198/0x260 [ 329.853159][T11598] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 329.853188][T11598] ? __pfx_ksys_write+0x10/0x10 [ 329.853205][T11598] ? rcu_is_watching+0x15/0xb0 [ 329.853227][T11598] ? do_syscall_64+0xbe/0x3b0 [ 329.853248][T11598] do_syscall_64+0xfa/0x3b0 [ 329.853262][T11598] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.853277][T11598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.853292][T11598] ? clear_bhb_loop+0x60/0xb0 [ 329.853312][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.853326][T11598] RIP: 0033:0x7f71f3b8ec29 [ 329.853340][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.853353][T11598] RSP: 002b:00007f71f1df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 329.853369][T11598] RAX: ffffffffffffffda RBX: 00007f71f3dd5fa0 RCX: 00007f71f3b8ec29 [ 329.853380][T11598] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 329.853391][T11598] RBP: 00007f71f1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.853400][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.853409][T11598] R13: 00007f71f3dd6038 R14: 00007f71f3dd5fa0 R15: 00007ffd8d0a7dd8 [ 329.853444][T11598] [ 330.463617][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.471418][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.540874][T11603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.560541][T11603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.699968][T11603] vlan2: left promiscuous mode [ 330.705244][T11603] bond0: left promiscuous mode [ 330.710219][T11603] bond_slave_0: left promiscuous mode [ 330.715976][T11603] bond_slave_1: left promiscuous mode [ 330.721916][T11603] vlan2: left allmulticast mode [ 330.727190][T11603] bond0: left allmulticast mode [ 330.732359][T11603] bond_slave_0: left allmulticast mode [ 330.739041][T11603] bond_slave_1: left allmulticast mode [ 330.773756][T11603] bridge3: left promiscuous mode [ 330.778827][T11603] bridge3: left allmulticast mode [ 330.848446][T11612] tipc: MTU too low for tipc bearer [ 330.854455][T11625] ksmbd: Unknown IPC event: 3, ignore. [ 330.854757][ T1168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.863092][T11625] validate_nla: 4 callbacks suppressed [ 330.863112][T11625] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 330.871123][ T1168] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.913062][ T1168] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.928562][ T1168] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.953987][T11620] sit0: left promiscuous mode [ 330.967681][T11620] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 330.976923][T11628] ksmbd: Unknown IPC event: 3, ignore. [ 330.987782][T11628] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 331.005409][T11620] bridge6: left promiscuous mode [ 331.016106][T11620] bridge6: left allmulticast mode [ 331.033729][T11630] sit0: entered promiscuous mode [ 331.039112][T11630] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 331.046964][T11630] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1358'. [ 331.056660][T11633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1359'. [ 331.461317][T11651] C speed is unknown, defaulting to 1000 [ 331.690371][T11670] ksmbd: Unknown IPC event: 3, ignore. [ 331.708111][T11670] netlink: 'syz.3.1367': attribute type 10 has an invalid length. [ 331.952848][T11681] netlink: 'syz.4.1371': attribute type 10 has an invalid length. [ 331.967486][T11681] veth0_vlan: left promiscuous mode [ 331.975395][T11681] veth0_vlan: entered promiscuous mode [ 331.984187][T11681] team0: Device veth0_vlan failed to register rx_handler [ 332.389848][T11702] ksmbd: Unknown IPC event: 3, ignore. [ 332.398247][T11702] netlink: 'syz.4.1379': attribute type 10 has an invalid length. [ 332.506921][T11711] IPVS: set_ctl: invalid protocol: 59 172.20.20.31:20000 [ 332.684896][T11718] C speed is unknown, defaulting to 1000 [ 333.066698][T11723] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 333.496083][T11747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.503487][T11747] IPv6: NLM_F_CREATE should be set when creating new route [ 333.511236][T11747] IPv6: NLM_F_CREATE should be set when creating new route [ 333.733548][T11761] __nla_validate_parse: 4 callbacks suppressed [ 333.733567][T11761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1392'. [ 333.756941][T11762] syzkaller1: entered promiscuous mode [ 333.770029][T11762] syzkaller1: entered allmulticast mode [ 334.209674][T11793] netlink: 'syz.2.1401': attribute type 3 has an invalid length. [ 334.235912][T11793] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 334.297790][T11797] ksmbd: Unknown IPC event: 3, ignore. [ 334.310549][T11797] netlink: 'syz.2.1403': attribute type 10 has an invalid length. [ 334.487233][ T5183] Bluetooth: hci5: command 0x0405 tx timeout [ 334.529479][T11832] sctp: [Deprecated]: syz.1.1408 (pid 11832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.529479][T11832] Use struct sctp_sack_info instead [ 334.609209][T11854] netlink: 884 bytes leftover after parsing attributes in process `syz.4.1410'. [ 334.846441][T11911] C speed is unknown, defaulting to 1000 [ 335.557762][T11989] C: renamed from team_slave_0 [ 335.572663][T11989] netlink: 'syz.1.1415': attribute type 2 has an invalid length. [ 335.581917][T11989] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1415'. [ 335.591211][T11994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.616347][T11989] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 335.724075][T11994] bridge: RTM_NEWNEIGH with invalid ether address [ 335.840425][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 335.911020][T12010] FAULT_INJECTION: forcing a failure. [ 335.911020][T12010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.947161][T12010] CPU: 1 UID: 0 PID: 12010 Comm: syz.3.1417 Not tainted syzkaller #0 PREEMPT(full) [ 335.947187][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.947196][T12010] Call Trace: [ 335.947203][T12010] [ 335.947209][T12010] dump_stack_lvl+0x189/0x250 [ 335.947233][T12010] ? __pfx____ratelimit+0x10/0x10 [ 335.947251][T12010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.947269][T12010] ? __pfx__printk+0x10/0x10 [ 335.947291][T12010] ? fs_reclaim_acquire+0x7d/0x100 [ 335.947316][T12010] should_fail_ex+0x414/0x560 [ 335.947342][T12010] prepare_alloc_pages+0x213/0x610 [ 335.947365][T12010] __alloc_frozen_pages_noprof+0x123/0x370 [ 335.947386][T12010] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.947411][T12010] ? policy_nodemask+0x27c/0x720 [ 335.947437][T12010] alloc_pages_mpol+0x232/0x4a0 [ 335.947465][T12010] vma_alloc_folio_noprof+0xe4/0x200 [ 335.947489][T12010] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 335.947531][T12010] folio_prealloc+0x30/0x180 [ 335.947554][T12010] do_wp_page+0x1231/0x5800 [ 335.947597][T12010] ? __pfx_do_wp_page+0x10/0x10 [ 335.947614][T12010] ? do_raw_spin_lock+0x121/0x290 [ 335.947636][T12010] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 335.947666][T12010] __handle_mm_fault+0x1033/0x5440 [ 335.947704][T12010] ? __pfx___handle_mm_fault+0x10/0x10 [ 335.947747][T12010] ? find_vma+0xe7/0x160 [ 335.947767][T12010] ? __pfx_find_vma+0x10/0x10 [ 335.947790][T12010] handle_mm_fault+0x40a/0x8e0 [ 335.947821][T12010] do_user_addr_fault+0x764/0x1390 [ 335.947862][T12010] exc_page_fault+0x76/0xf0 [ 335.947882][T12010] asm_exc_page_fault+0x26/0x30 [ 335.947898][T12010] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 335.947919][T12010] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 335.947933][T12010] RSP: 0018:ffffc9000b4b7678 EFLAGS: 00050206 [ 335.947948][T12010] RAX: ffffffff84c61401 RBX: ffff88804b8c00e8 RCX: 00000000000035d0 [ 335.947960][T12010] RDX: 0000000000000000 RSI: ffff88804b8ccce8 RDI: 000020000000d000 [ 335.947970][T12010] RBP: ffffc9000b4b7800 R08: ffff88804b8d02b7 R09: 1ffff1100971a056 [ 335.947982][T12010] R10: dffffc0000000000 R11: ffffed100971a057 R12: 1ffff92001696fbf [ 335.947994][T12010] R13: 0000200000000400 R14: ffffc9000b4b7e08 R15: 00000000000101d0 [ 335.948014][T12010] ? _copy_to_iter+0x1f1/0x1790 [ 335.948041][T12010] _copy_to_iter+0x24f/0x1790 [ 335.948059][T12010] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 335.948076][T12010] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.948095][T12010] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 335.948124][T12010] ? __pfx__copy_to_iter+0x10/0x10 [ 335.948140][T12010] ? remove_wait_queue+0x33/0x120 [ 335.948171][T12010] ? tipc_wait_for_rcvmsg+0x4ef/0x630 [ 335.948204][T12010] __skb_datagram_iter+0xf8/0x990 [ 335.948226][T12010] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 335.948245][T12010] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 335.948267][T12010] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 335.948283][T12010] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.948306][T12010] skb_copy_datagram_iter+0xc5/0x230 [ 335.948333][T12010] tipc_recvstream+0x72d/0xe70 [ 335.948369][T12010] ? __pfx_tipc_recvstream+0x10/0x10 [ 335.948387][T12010] sock_recvmsg+0x22c/0x270 [ 335.948410][T12010] ____sys_recvmsg+0x1c9/0x460 [ 335.948441][T12010] ? __pfx_____sys_recvmsg+0x10/0x10 [ 335.948479][T12010] ? import_iovec+0x74/0xa0 [ 335.948503][T12018] netlink: 'syz.1.1420': attribute type 6 has an invalid length. [ 335.948511][T12010] ___sys_recvmsg+0x1b5/0x510 [ 335.948536][T12010] ? __pfx____sys_recvmsg+0x10/0x10 [ 335.948575][T12010] ? __fget_files+0x3a0/0x420 [ 335.948602][T12010] __x64_sys_recvmsg+0x198/0x260 [ 335.948626][T12010] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 335.948658][T12010] ? __pfx_ksys_write+0x10/0x10 [ 335.948676][T12010] ? rcu_is_watching+0x15/0xb0 [ 335.948702][T12010] ? do_syscall_64+0xbe/0x3b0 [ 335.948725][T12010] do_syscall_64+0xfa/0x3b0 [ 335.948741][T12010] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.948756][T12010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.948773][T12010] ? clear_bhb_loop+0x60/0xb0 [ 335.948793][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.948808][T12010] RIP: 0033:0x7f02a338ec29 [ 335.948824][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.948838][T12010] RSP: 002b:00007f02a416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 335.948855][T12010] RAX: ffffffffffffffda RBX: 00007f02a35d5fa0 RCX: 00007f02a338ec29 [ 335.948866][T12010] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000006 [ 335.948877][T12010] RBP: 00007f02a416e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.948887][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.948897][T12010] R13: 00007f02a35d6038 R14: 00007f02a35d5fa0 R15: 00007ffec1c1c868 [ 335.948927][T12010] [ 336.750463][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 336.768688][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 336.991050][T12082] 8021q: VLANs not supported on ip6_vti0 [ 337.201106][T12096] netlink: 'syz.4.1433': attribute type 13 has an invalid length. [ 337.214483][T12096] netlink: 'syz.4.1433': attribute type 17 has an invalid length. [ 337.405732][T12096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.497104][T12096] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.524829][T12096] bridge0: port 1(dummy0) entered blocking state [ 337.531642][T12096] bridge0: port 1(dummy0) entered forwarding state [ 337.560405][T12096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.713590][T12106] tipc: Enabled bearer , priority 0 [ 337.904527][ T5183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.920343][ T5183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.954752][ T5183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.972411][ T5183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.003551][ T5183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.843184][ T979] tipc: Node number set to 3374004356 [ 340.093541][ T5864] Bluetooth: hci6: command tx timeout [ 340.390165][T12113] ÿÿÿÿÿÿ: renamed from syzkaller0 [ 340.396794][T12113] tipc: Disabling bearer [ 340.450331][T12114] C speed is unknown, defaulting to 1000 [ 340.606328][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1441'. [ 340.661505][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 340.674173][T12134] netlink: 'syz.3.1444': attribute type 10 has an invalid length. [ 340.687112][T12134] veth0_macvtap: left promiscuous mode [ 340.698790][T12134] team0: Device veth0_macvtap failed to register rx_handler [ 340.740284][T12139] FAULT_INJECTION: forcing a failure. [ 340.740284][T12139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.782219][T12139] CPU: 1 UID: 0 PID: 12139 Comm: syz.4.1446 Not tainted syzkaller #0 PREEMPT(full) [ 340.782244][T12139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.782255][T12139] Call Trace: [ 340.782262][T12139] [ 340.782269][T12139] dump_stack_lvl+0x189/0x250 [ 340.782295][T12139] ? __pfx____ratelimit+0x10/0x10 [ 340.782313][T12139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.782331][T12139] ? __pfx__printk+0x10/0x10 [ 340.782351][T12139] ? __might_fault+0xb0/0x130 [ 340.782379][T12139] should_fail_ex+0x414/0x560 [ 340.782404][T12139] _copy_from_user+0x2d/0xb0 [ 340.782432][T12139] ___sys_sendmsg+0x158/0x2a0 [ 340.782455][T12139] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.782507][T12139] ? __fget_files+0x2a/0x420 [ 340.782521][T12139] ? __fget_files+0x3a0/0x420 [ 340.782547][T12139] __x64_sys_sendmsg+0x19b/0x260 [ 340.782571][T12139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.782602][T12139] ? __pfx_ksys_write+0x10/0x10 [ 340.782620][T12139] ? rcu_is_watching+0x15/0xb0 [ 340.782642][T12139] ? do_syscall_64+0xbe/0x3b0 [ 340.782664][T12139] do_syscall_64+0xfa/0x3b0 [ 340.782681][T12139] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.782698][T12139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.782715][T12139] ? clear_bhb_loop+0x60/0xb0 [ 340.782735][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.782751][T12139] RIP: 0033:0x7f71f3b8ec29 [ 340.782766][T12139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.782781][T12139] RSP: 002b:00007f71f1df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.782800][T12139] RAX: ffffffffffffffda RBX: 00007f71f3dd5fa0 RCX: 00007f71f3b8ec29 [ 340.782812][T12139] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 340.782824][T12139] RBP: 00007f71f1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.782834][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.782845][T12139] R13: 00007f71f3dd6038 R14: 00007f71f3dd5fa0 R15: 00007ffd8d0a7dd8 [ 340.782874][T12139] [ 340.980919][ T30] audit: type=1800 audit(1758393457.187:8): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1445" name="memory.events" dev="tmpfs" ino=1575 res=0 errno=0 [ 341.199666][T12114] chnl_net:caif_netlink_parms(): no params data found [ 341.252358][T12157] batman_adv: batadv0: Adding interface: vlan4 [ 341.260260][T12157] batman_adv: batadv0: The MTU of interface vlan4 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.286387][T12157] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 341.512026][T12178] ksmbd: Unknown IPC event: 3, ignore. [ 341.522406][T12178] netlink: 'syz.4.1455': attribute type 10 has an invalid length. [ 341.656433][T12114] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.666447][T12114] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.674752][T12114] bridge_slave_0: entered allmulticast mode [ 341.682882][T12114] bridge_slave_0: entered promiscuous mode [ 341.695382][T12114] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.703201][T12114] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.711993][T12114] bridge_slave_1: entered allmulticast mode [ 341.724643][T12114] bridge_slave_1: entered promiscuous mode [ 341.798643][T12114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.834750][T12114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.887704][T12205] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1465'. [ 341.911779][T12114] team0: Port device team_slave_0 added [ 341.920934][T12114] team0: Port device team_slave_1 added [ 341.927760][T12206] tap0: tun_chr_ioctl cmd 1074025677 [ 341.933712][T12206] tap0: linktype set to 270 [ 341.981934][T12212] ksmbd: Unknown IPC event: 3, ignore. [ 341.987263][T12114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.995494][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.997937][T12212] netlink: 'syz.2.1467': attribute type 10 has an invalid length. [ 342.032593][T12114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.047917][T12114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.055411][T12114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.082638][T12114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.160836][T12114] hsr_slave_0: entered promiscuous mode [ 342.169293][ T5864] Bluetooth: hci6: command tx timeout [ 342.180316][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 342.191022][T12114] hsr_slave_1: entered promiscuous mode [ 342.201959][T12114] debugfs: 'hsr0' already exists in 'hsr' [ 342.207932][T12114] Cannot create hsr debugfs directory [ 342.220270][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1468'. [ 342.350951][T12220] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 342.375756][T12223] nbd: must specify at least one socket [ 342.622853][T12114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.638647][T12114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.655545][T12114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.676311][T12114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.700110][T12242] veth0: entered promiscuous mode [ 342.832911][T12257] ksmbd: Unknown IPC event: 3, ignore. [ 342.850030][T12234] veth0: left promiscuous mode [ 342.854619][T12257] netlink: 'syz.3.1477': attribute type 10 has an invalid length. [ 342.919711][T12114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.951898][T12114] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.964010][T12260] sctp: [Deprecated]: syz.1.1478 (pid 12260) Use of int in maxseg socket option. [ 342.964010][T12260] Use struct sctp_assoc_value instead [ 342.982461][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.989978][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.008805][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.016654][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.031246][T12267] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 343.072589][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1479'. [ 343.117275][T12267] 8021q: adding VLAN 0 to HW filter on device bond5 [ 343.157780][T12267] bond5: (slave gretap2): making interface the new active one [ 343.170567][T12267] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 343.326656][T12274] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.1481'. [ 343.349127][T12274] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 343.388306][T12274] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 343.413786][T12277] C speed is unknown, defaulting to 1000 [ 343.612020][T12114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.765646][T12297] ksmbd: Unknown IPC event: 3, ignore. [ 343.812228][T12297] netlink: 'syz.4.1488': attribute type 10 has an invalid length. [ 343.842549][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 343.876838][T12303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1490'. [ 344.071431][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 344.106347][T12320] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20001 [ 344.202049][T12309] C speed is unknown, defaulting to 1000 [ 344.249756][ T5864] Bluetooth: hci6: command tx timeout [ 344.347504][T12114] veth0_vlan: entered promiscuous mode [ 344.397976][T12114] veth1_vlan: entered promiscuous mode [ 344.578067][T12338] FAULT_INJECTION: forcing a failure. [ 344.578067][T12338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.595032][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.3.1499 Not tainted syzkaller #0 PREEMPT(full) [ 344.595058][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.595068][T12338] Call Trace: [ 344.595076][T12338] [ 344.595084][T12338] dump_stack_lvl+0x189/0x250 [ 344.595108][T12338] ? __pfx____ratelimit+0x10/0x10 [ 344.595127][T12338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.595146][T12338] ? __pfx__printk+0x10/0x10 [ 344.595166][T12338] ? __might_fault+0xb0/0x130 [ 344.595199][T12338] should_fail_ex+0x414/0x560 [ 344.595228][T12338] _copy_from_iter+0x1de/0x1790 [ 344.595255][T12338] ? rcu_is_watching+0x15/0xb0 [ 344.595274][T12338] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 344.595298][T12338] ? __pfx__copy_from_iter+0x10/0x10 [ 344.595319][T12338] ? __build_skb_around+0x257/0x3e0 [ 344.595343][T12338] ? netlink_sendmsg+0x642/0xb30 [ 344.595360][T12338] ? skb_put+0x11b/0x210 [ 344.595383][T12338] netlink_sendmsg+0x6b2/0xb30 [ 344.595412][T12338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.595434][T12338] ? aa_sock_msg_perm+0xf1/0x1d0 [ 344.595454][T12338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.595472][T12338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.595492][T12338] __sock_sendmsg+0x21c/0x270 [ 344.595512][T12338] ____sys_sendmsg+0x505/0x830 [ 344.595539][T12338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.595569][T12338] ? import_iovec+0x74/0xa0 [ 344.595592][T12338] ___sys_sendmsg+0x21f/0x2a0 [ 344.595616][T12338] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.595674][T12338] ? __fget_files+0x2a/0x420 [ 344.595689][T12338] ? __fget_files+0x3a0/0x420 [ 344.595714][T12338] __x64_sys_sendmsg+0x19b/0x260 [ 344.595738][T12338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.595769][T12338] ? __pfx_ksys_write+0x10/0x10 [ 344.595788][T12338] ? rcu_is_watching+0x15/0xb0 [ 344.595810][T12338] ? do_syscall_64+0xbe/0x3b0 [ 344.595838][T12338] do_syscall_64+0xfa/0x3b0 [ 344.595854][T12338] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.595872][T12338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.595889][T12338] ? clear_bhb_loop+0x60/0xb0 [ 344.595909][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.595925][T12338] RIP: 0033:0x7f02a338ec29 [ 344.595941][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.595959][T12338] RSP: 002b:00007f02a416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.595977][T12338] RAX: ffffffffffffffda RBX: 00007f02a35d5fa0 RCX: 00007f02a338ec29 [ 344.595990][T12338] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 344.596001][T12338] RBP: 00007f02a416e090 R08: 0000000000000000 R09: 0000000000000000 [ 344.596012][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.596023][T12338] R13: 00007f02a35d6038 R14: 00007f02a35d5fa0 R15: 00007ffec1c1c868 [ 344.596052][T12338] [ 344.667844][T12114] veth0_macvtap: entered promiscuous mode [ 344.980425][T12114] veth1_macvtap: entered promiscuous mode [ 344.996349][T12342] netlink: 'syz.3.1501': attribute type 49 has an invalid length. [ 345.011227][T12114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.034967][T12114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.052209][ T1146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.064263][ T1146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.078619][ T1146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.090369][ T1146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.311018][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.337687][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.457109][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.473643][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.517610][T12362] netlink: 'syz.3.1506': attribute type 4 has an invalid length. [ 345.609263][T12367] netlink: 'syz.2.1508': attribute type 10 has an invalid length. [ 345.625053][T12367] team0: Port device 0! added [ 345.658385][T12370] C speed is unknown, defaulting to 1000 [ 345.676602][T12373] __nla_validate_parse: 2 callbacks suppressed [ 345.676619][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1509'. [ 345.922522][T12381] ksmbd: Unknown IPC event: 3, ignore. [ 345.948941][T12381] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 346.172607][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1514'. [ 346.260854][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1435'. [ 346.323295][ T5864] Bluetooth: hci6: command tx timeout [ 346.341309][T12361] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 346.556278][T12406] macsec1: entered allmulticast mode [ 346.592670][T12406] ip6gretap0: entered allmulticast mode [ 346.619166][T12406] ip6gretap0: left allmulticast mode [ 346.702127][T12411] bond0: entered promiscuous mode [ 346.707944][T12411] : entered promiscuous mode [ 346.713653][T12411] bond_slave_1: entered promiscuous mode [ 346.719923][T12411] dummy0: entered promiscuous mode [ 346.866706][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 346.906077][T12427] ksmbd: Unknown IPC event: 3, ignore. [ 346.925756][T12427] netlink: 'syz.6.1522': attribute type 10 has an invalid length. [ 346.951846][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 346.998651][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 347.018275][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 347.051682][T12430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1523'. [ 347.082086][T12437] FAULT_INJECTION: forcing a failure. [ 347.082086][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 347.116516][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.4.1524 Not tainted syzkaller #0 PREEMPT(full) [ 347.116592][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.116601][T12437] Call Trace: [ 347.116610][T12437] [ 347.116619][T12437] dump_stack_lvl+0x189/0x250 [ 347.116648][T12437] ? __pfx____ratelimit+0x10/0x10 [ 347.116667][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.116687][T12437] ? __pfx__printk+0x10/0x10 [ 347.116714][T12437] ? __pfx___might_resched+0x10/0x10 [ 347.116731][T12437] ? fs_reclaim_acquire+0x7d/0x100 [ 347.116753][T12437] should_fail_ex+0x414/0x560 [ 347.116782][T12437] should_failslab+0xa8/0x100 [ 347.116806][T12437] __kmalloc_cache_noprof+0x70/0x3d0 [ 347.116828][T12437] ? rtnl_newlink+0xfb/0x1c80 [ 347.116853][T12437] rtnl_newlink+0xfb/0x1c80 [ 347.116871][T12437] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 347.116892][T12437] ? __netlink_deliver_tap+0x5ad/0x850 [ 347.116910][T12437] ? netlink_deliver_tap+0x19c/0x1b0 [ 347.116928][T12437] ? netlink_unicast+0x7fa/0x9e0 [ 347.116943][T12437] ? netlink_sendmsg+0x805/0xb30 [ 347.116960][T12437] ? __sock_sendmsg+0x21c/0x270 [ 347.116974][T12437] ? ____sys_sendmsg+0x505/0x830 [ 347.116998][T12437] ? ___sys_sendmsg+0x21f/0x2a0 [ 347.117017][T12437] ? __x64_sys_sendmsg+0x19b/0x260 [ 347.117036][T12437] ? do_syscall_64+0xfa/0x3b0 [ 347.117053][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.117076][T12437] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.117123][T12437] ? kasan_quarantine_put+0xdd/0x220 [ 347.117143][T12437] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.117168][T12437] ? nlmon_xmit+0xb0/0x100 [ 347.117185][T12437] ? kmem_cache_free+0x18f/0x400 [ 347.117214][T12437] ? __local_bh_enable_ip+0x12d/0x1c0 [ 347.117232][T12437] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.117250][T12437] ? __local_bh_enable_ip+0x12d/0x1c0 [ 347.117267][T12437] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 347.117288][T12437] ? __dev_queue_xmit+0x27b/0x3b50 [ 347.117309][T12437] ? __dev_queue_xmit+0x27b/0x3b50 [ 347.117392][T12437] ? __dev_queue_xmit+0x27b/0x3b50 [ 347.117415][T12437] ? __dev_queue_xmit+0x1d79/0x3b50 [ 347.117443][T12437] ? __lock_acquire+0xab9/0xd20 [ 347.117493][T12437] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.117510][T12437] rtnetlink_rcv_msg+0x7cf/0xb70 [ 347.117533][T12437] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 347.117553][T12437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.117568][T12437] ? ref_tracker_free+0x63a/0x7d0 [ 347.117583][T12437] ? __asan_memcpy+0x40/0x70 [ 347.117598][T12437] ? __pfx_ref_tracker_free+0x10/0x10 [ 347.117619][T12437] netlink_rcv_skb+0x208/0x470 [ 347.117638][T12437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.117655][T12437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.117684][T12437] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.117710][T12437] netlink_unicast+0x82f/0x9e0 [ 347.117736][T12437] ? __pfx_netlink_unicast+0x10/0x10 [ 347.117755][T12437] ? netlink_sendmsg+0x642/0xb30 [ 347.117770][T12437] ? skb_put+0x11b/0x210 [ 347.117793][T12437] netlink_sendmsg+0x805/0xb30 [ 347.117819][T12437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.117840][T12437] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.117860][T12437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.117877][T12437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.117897][T12437] __sock_sendmsg+0x21c/0x270 [ 347.117917][T12437] ____sys_sendmsg+0x505/0x830 [ 347.117944][T12437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.117975][T12437] ? import_iovec+0x74/0xa0 [ 347.117999][T12437] ___sys_sendmsg+0x21f/0x2a0 [ 347.118023][T12437] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.118078][T12437] ? __fget_files+0x2a/0x420 [ 347.118094][T12437] ? __fget_files+0x3a0/0x420 [ 347.118118][T12437] __x64_sys_sendmsg+0x19b/0x260 [ 347.118142][T12437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.118174][T12437] ? __pfx_ksys_write+0x10/0x10 [ 347.118192][T12437] ? rcu_is_watching+0x15/0xb0 [ 347.118215][T12437] ? do_syscall_64+0xbe/0x3b0 [ 347.118238][T12437] do_syscall_64+0xfa/0x3b0 [ 347.118254][T12437] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.118272][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.118288][T12437] ? clear_bhb_loop+0x60/0xb0 [ 347.118309][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.118335][T12437] RIP: 0033:0x7f71f3b8ec29 [ 347.118352][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.118366][T12437] RSP: 002b:00007f71f1df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.118386][T12437] RAX: ffffffffffffffda RBX: 00007f71f3dd5fa0 RCX: 00007f71f3b8ec29 [ 347.118399][T12437] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 347.118410][T12437] RBP: 00007f71f1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.118421][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.118431][T12437] R13: 00007f71f3dd6038 R14: 00007f71f3dd5fa0 R15: 00007ffd8d0a7dd8 [ 347.118461][T12437] [ 347.627431][T12439] C speed is unknown, defaulting to 1000 [ 348.193626][T12460] : renamed from veth0_to_bond [ 348.322403][T12469] C speed is unknown, defaulting to 1000 [ 348.691486][T12475] C speed is unknown, defaulting to 1000 [ 349.588471][T12482] C speed is unknown, defaulting to 1000 [ 349.986692][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 350.009550][T12500] bridge_slave_1: left allmulticast mode [ 350.025310][T12500] bridge_slave_1: left promiscuous mode [ 350.040039][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.059956][T12500] bridge_slave_0: left allmulticast mode [ 350.093159][T12500] bridge_slave_0: left promiscuous mode [ 350.153307][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.387354][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'. [ 350.413057][T12502] netlink: 'syz.6.1541': attribute type 12 has an invalid length. [ 350.542743][T12502] netlink: 'syz.6.1541': attribute type 12 has an invalid length. [ 350.591291][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.603530][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.647056][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.678273][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.777123][T12508] __nla_validate_parse: 1 callbacks suppressed [ 350.777202][T12508] netlink: 732 bytes leftover after parsing attributes in process `syz.6.1543'. [ 350.800313][T12508] netlink: 732 bytes leftover after parsing attributes in process `syz.6.1543'. [ 350.822372][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 350.871004][T12511] netlink: 'syz.6.1543': attribute type 1 has an invalid length. [ 350.930990][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1543'. [ 351.179918][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 351.618658][T12535] C speed is unknown, defaulting to 1000 [ 351.731214][T12542] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1554'. [ 351.748999][T12543] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 351.758043][T12544] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 352.082428][T12558] netlink: 'syz.6.1558': attribute type 4 has an invalid length. [ 352.114715][T12557] netlink: 'syz.6.1558': attribute type 4 has an invalid length. [ 352.383261][T12576] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1560'. [ 352.399401][T12576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 352.615128][T12584] syzkaller0: entered promiscuous mode [ 352.621083][T12584] syzkaller0: entered allmulticast mode [ 352.835944][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1566'. [ 353.588392][T12607] ksmbd: Unknown IPC event: 3, ignore. [ 353.597075][T12607] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 354.868141][T12622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1573'. [ 354.883338][T12587] C speed is unknown, defaulting to 1000 [ 355.010309][T12622] 8021q: VLANs not supported on sit0 [ 355.031209][T12631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'. [ 355.187357][T12631] veth7: entered promiscuous mode [ 355.223757][T12635] erspan0: entered allmulticast mode [ 355.267813][T12624] C speed is unknown, defaulting to 1000 [ 355.372805][T12644] ksmbd: Unknown IPC event: 3, ignore. [ 355.381874][T12644] netlink: 'syz.1.1580': attribute type 10 has an invalid length. [ 355.507555][T12650] tipc: Enabled bearer , priority 0 [ 355.518047][T12650] syzkaller0: entered promiscuous mode [ 355.524024][T12650] syzkaller0: entered allmulticast mode [ 355.553193][T12650] tipc: Resetting bearer [ 355.567740][T12648] tipc: Resetting bearer [ 355.617858][T12648] tipc: Disabling bearer [ 356.028993][T12668] ip6gre1: entered allmulticast mode [ 356.351515][T12685] __nla_validate_parse: 2 callbacks suppressed [ 356.351535][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1594'. [ 356.764606][T12716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.777945][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1603'. [ 356.787094][T12719] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1603'. [ 356.811038][T12718] C speed is unknown, defaulting to 1000 [ 357.280015][T12735] netlink: 210328 bytes leftover after parsing attributes in process `syz.4.1610'. [ 357.445224][T12744] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1612'. [ 357.488932][T12746] FAULT_INJECTION: forcing a failure. [ 357.488932][T12746] name failslab, interval 1, probability 0, space 0, times 0 [ 357.509667][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.3.1613 Not tainted syzkaller #0 PREEMPT(full) [ 357.509693][T12746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.509704][T12746] Call Trace: [ 357.509711][T12746] [ 357.509719][T12746] dump_stack_lvl+0x189/0x250 [ 357.509746][T12746] ? __pfx____ratelimit+0x10/0x10 [ 357.509765][T12746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.509783][T12746] ? __pfx__printk+0x10/0x10 [ 357.509807][T12746] ? __pfx___might_resched+0x10/0x10 [ 357.509824][T12746] ? fs_reclaim_acquire+0x7d/0x100 [ 357.509842][T12746] should_fail_ex+0x414/0x560 [ 357.509869][T12746] should_failslab+0xa8/0x100 [ 357.509892][T12746] __kmalloc_cache_noprof+0x70/0x3d0 [ 357.509911][T12746] ? alloc_netdev_mqs+0xb90/0x11b0 [ 357.509930][T12746] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 357.509950][T12746] alloc_netdev_mqs+0xb90/0x11b0 [ 357.509977][T12746] rtnl_create_link+0x31f/0xd10 [ 357.510004][T12746] rtnl_newlink_create+0x25c/0xb00 [ 357.510027][T12746] ? __lock_acquire+0xab9/0xd20 [ 357.510051][T12746] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 357.510079][T12746] ? __pfx___mutex_lock+0x10/0x10 [ 357.510106][T12746] ? ns_capable+0x8a/0xf0 [ 357.510125][T12746] rtnl_newlink+0x16e4/0x1c80 [ 357.510157][T12746] ? __pfx_rtnl_newlink+0x10/0x10 [ 357.510187][T12746] ? is_bpf_text_address+0x26/0x2b0 [ 357.510216][T12746] ? __lock_acquire+0xab9/0xd20 [ 357.510250][T12746] ? __lock_acquire+0xab9/0xd20 [ 357.510287][T12746] ? is_bpf_text_address+0x26/0x2b0 [ 357.510312][T12746] ? is_bpf_text_address+0x292/0x2b0 [ 357.510329][T12746] ? is_bpf_text_address+0x26/0x2b0 [ 357.510357][T12746] ? __lock_acquire+0xab9/0xd20 [ 357.510407][T12746] ? __pfx_rtnl_newlink+0x10/0x10 [ 357.510425][T12746] rtnetlink_rcv_msg+0x7cf/0xb70 [ 357.510441][T12746] ? __lock_acquire+0xab9/0xd20 [ 357.510462][T12746] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 357.510480][T12746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.510515][T12746] netlink_rcv_skb+0x208/0x470 [ 357.510532][T12746] ? __lock_acquire+0xab9/0xd20 [ 357.510553][T12746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.510573][T12746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.510603][T12746] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.510628][T12746] netlink_unicast+0x82f/0x9e0 [ 357.510650][T12746] ? __pfx_netlink_unicast+0x10/0x10 [ 357.510671][T12746] ? netlink_sendmsg+0x642/0xb30 [ 357.510686][T12746] ? skb_put+0x11b/0x210 [ 357.510709][T12746] netlink_sendmsg+0x805/0xb30 [ 357.510735][T12746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.510754][T12746] ? aa_sock_msg_perm+0xf1/0x1d0 [ 357.510772][T12746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.510787][T12746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.510807][T12746] __sock_sendmsg+0x21c/0x270 [ 357.510826][T12746] ____sys_sendmsg+0x505/0x830 [ 357.510851][T12746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.510878][T12746] ? import_iovec+0x74/0xa0 [ 357.510902][T12746] ___sys_sendmsg+0x21f/0x2a0 [ 357.510922][T12746] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.510978][T12746] ? __fget_files+0x2a/0x420 [ 357.510991][T12746] ? __fget_files+0x3a0/0x420 [ 357.511014][T12746] __x64_sys_sendmsg+0x19b/0x260 [ 357.511035][T12746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.511066][T12746] ? __pfx_ksys_write+0x10/0x10 [ 357.511083][T12746] ? rcu_is_watching+0x15/0xb0 [ 357.511106][T12746] ? do_syscall_64+0xbe/0x3b0 [ 357.511128][T12746] do_syscall_64+0xfa/0x3b0 [ 357.511144][T12746] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.511159][T12746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.511176][T12746] ? clear_bhb_loop+0x60/0xb0 [ 357.511196][T12746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.511213][T12746] RIP: 0033:0x7f02a338ec29 [ 357.511230][T12746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.511243][T12746] RSP: 002b:00007f02a416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.511261][T12746] RAX: ffffffffffffffda RBX: 00007f02a35d5fa0 RCX: 00007f02a338ec29 [ 357.511272][T12746] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 357.511281][T12746] RBP: 00007f02a416e090 R08: 0000000000000000 R09: 0000000000000000 [ 357.511291][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.511300][T12746] R13: 00007f02a35d6038 R14: 00007f02a35d5fa0 R15: 00007ffec1c1c868 [ 357.511325][T12746] [ 358.053689][T12748] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1614'. [ 358.094510][T12752] netlink: 'syz.3.1615': attribute type 31 has an invalid length. [ 358.133065][T12755] netlink: 'syz.3.1615': attribute type 31 has an invalid length. [ 358.263968][T12765] openvswitch: netlink: Message has 1 unknown bytes. [ 358.288483][T12765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.451964][T12770] C speed is unknown, defaulting to 1000 [ 358.459551][T12774] FAULT_INJECTION: forcing a failure. [ 358.459551][T12774] name failslab, interval 1, probability 0, space 0, times 0 [ 358.479592][T12774] CPU: 1 UID: 0 PID: 12774 Comm: syz.1.1625 Not tainted syzkaller #0 PREEMPT(full) [ 358.479619][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.479629][T12774] Call Trace: [ 358.479636][T12774] [ 358.479644][T12774] dump_stack_lvl+0x189/0x250 [ 358.479669][T12774] ? __pfx____ratelimit+0x10/0x10 [ 358.479688][T12774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.479707][T12774] ? __pfx__printk+0x10/0x10 [ 358.479734][T12774] ? __pfx___might_resched+0x10/0x10 [ 358.479749][T12774] ? fs_reclaim_acquire+0x7d/0x100 [ 358.479769][T12774] should_fail_ex+0x414/0x560 [ 358.479797][T12774] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 358.479818][T12774] should_failslab+0xa8/0x100 [ 358.479842][T12774] __kvmalloc_node_noprof+0x161/0x5f0 [ 358.479864][T12774] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 358.479892][T12774] alloc_netdev_mqs+0x8a0/0x11b0 [ 358.479923][T12774] rtnl_create_link+0x31f/0xd10 [ 358.479953][T12774] rtnl_newlink_create+0x25c/0xb00 [ 358.479980][T12774] ? __lock_acquire+0xab9/0xd20 [ 358.480007][T12774] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 358.480031][T12774] ? __pfx___mutex_lock+0x10/0x10 [ 358.480059][T12774] ? ns_capable+0x8a/0xf0 [ 358.480079][T12774] rtnl_newlink+0x16e4/0x1c80 [ 358.480113][T12774] ? __pfx_rtnl_newlink+0x10/0x10 [ 358.480145][T12774] ? is_bpf_text_address+0x26/0x2b0 [ 358.480175][T12774] ? __lock_acquire+0xab9/0xd20 [ 358.480209][T12774] ? __lock_acquire+0xab9/0xd20 [ 358.480250][T12774] ? is_bpf_text_address+0x26/0x2b0 [ 358.480275][T12774] ? is_bpf_text_address+0x292/0x2b0 [ 358.480295][T12774] ? is_bpf_text_address+0x26/0x2b0 [ 358.480333][T12774] ? __lock_acquire+0xab9/0xd20 [ 358.480380][T12774] ? __pfx_rtnl_newlink+0x10/0x10 [ 358.480398][T12774] rtnetlink_rcv_msg+0x7cf/0xb70 [ 358.480415][T12774] ? __lock_acquire+0xab9/0xd20 [ 358.480437][T12774] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 358.480455][T12774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 358.480491][T12774] netlink_rcv_skb+0x208/0x470 [ 358.480508][T12774] ? __lock_acquire+0xab9/0xd20 [ 358.480528][T12774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 358.480547][T12774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.480578][T12774] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.480604][T12774] netlink_unicast+0x82f/0x9e0 [ 358.480631][T12774] ? __pfx_netlink_unicast+0x10/0x10 [ 358.480652][T12774] ? netlink_sendmsg+0x642/0xb30 [ 358.480669][T12774] ? skb_put+0x11b/0x210 [ 358.480692][T12774] netlink_sendmsg+0x805/0xb30 [ 358.480722][T12774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.480743][T12774] ? aa_sock_msg_perm+0xf1/0x1d0 [ 358.480762][T12774] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.480781][T12774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.480802][T12774] __sock_sendmsg+0x21c/0x270 [ 358.480823][T12774] ____sys_sendmsg+0x505/0x830 [ 358.480851][T12774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.480883][T12774] ? import_iovec+0x74/0xa0 [ 358.480908][T12774] ___sys_sendmsg+0x21f/0x2a0 [ 358.480931][T12774] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.480991][T12774] ? __fget_files+0x2a/0x420 [ 358.481005][T12774] ? __fget_files+0x3a0/0x420 [ 358.481028][T12774] __x64_sys_sendmsg+0x19b/0x260 [ 358.481052][T12774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.481083][T12774] ? __pfx_ksys_write+0x10/0x10 [ 358.481102][T12774] ? rcu_is_watching+0x15/0xb0 [ 358.481126][T12774] ? do_syscall_64+0xbe/0x3b0 [ 358.481149][T12774] do_syscall_64+0xfa/0x3b0 [ 358.481165][T12774] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.481182][T12774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.481198][T12774] ? clear_bhb_loop+0x60/0xb0 [ 358.481218][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.481234][T12774] RIP: 0033:0x7f06d7d8ec29 [ 358.481250][T12774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.481263][T12774] RSP: 002b:00007f06d8c0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.481280][T12774] RAX: ffffffffffffffda RBX: 00007f06d7fd5fa0 RCX: 00007f06d7d8ec29 [ 358.481291][T12774] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 358.481300][T12774] RBP: 00007f06d8c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 358.481318][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.481328][T12774] R13: 00007f06d7fd6038 R14: 00007f06d7fd5fa0 R15: 00007ffec564e828 [ 358.481355][T12774] [ 358.929754][T12785] pimreg: tun_chr_ioctl cmd 1074025677 [ 358.935436][T12785] pimreg: linktype set to 780 [ 358.941055][T12785] pimreg: tun_chr_ioctl cmd 35111 [ 359.122188][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 359.168390][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 359.514810][ T8467] IPVS: starting estimator thread 0... [ 359.659323][T12813] sctp: [Deprecated]: syz.4.1631 (pid 12813) Use of int in max_burst socket option. [ 359.659323][T12813] Use struct sctp_assoc_value instead [ 359.703482][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1631'. [ 359.760728][T12805] IPVS: using max 35 ests per chain, 84000 per kthread [ 359.855727][T12821] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 360.098667][T12831] ip6erspan0: entered promiscuous mode [ 360.337817][T12842] tap0: tun_chr_ioctl cmd 1074025677 [ 360.359317][T12842] tap0: linktype set to 776 [ 360.664150][T12856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.813638][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1648'. [ 360.859371][T12868] team0: Port device 0! removed [ 360.874582][T12868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.029048][T12884] ksmbd: Unknown IPC event: 3, ignore. [ 361.044688][T12884] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 361.157303][T12891] batman_adv: batadv0: Adding interface: vlan0 [ 361.163588][T12891] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 361.191118][T12891] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 361.448171][T12905] FAULT_INJECTION: forcing a failure. [ 361.448171][T12905] name failslab, interval 1, probability 0, space 0, times 0 [ 361.503181][T12905] CPU: 0 UID: 0 PID: 12905 Comm: syz.3.1658 Not tainted syzkaller #0 PREEMPT(full) [ 361.503208][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.503218][T12905] Call Trace: [ 361.503225][T12905] [ 361.503233][T12905] dump_stack_lvl+0x189/0x250 [ 361.503258][T12905] ? __pfx____ratelimit+0x10/0x10 [ 361.503277][T12905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.503294][T12905] ? __pfx__printk+0x10/0x10 [ 361.503316][T12905] ? __pfx___might_resched+0x10/0x10 [ 361.503329][T12905] ? fs_reclaim_acquire+0x7d/0x100 [ 361.503346][T12905] should_fail_ex+0x414/0x560 [ 361.503368][T12905] should_failslab+0xa8/0x100 [ 361.503388][T12905] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 361.503406][T12905] ? __alloc_skb+0x112/0x2d0 [ 361.503424][T12905] __alloc_skb+0x112/0x2d0 [ 361.503442][T12905] netlink_ack+0x146/0xa50 [ 361.503456][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.503485][T12905] netlink_rcv_skb+0x28c/0x470 [ 361.503498][T12905] ? __lock_acquire+0xab9/0xd20 [ 361.503515][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.503531][T12905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.503555][T12905] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.503576][T12905] netlink_unicast+0x82f/0x9e0 [ 361.503596][T12905] ? __pfx_netlink_unicast+0x10/0x10 [ 361.503612][T12905] ? netlink_sendmsg+0x642/0xb30 [ 361.503625][T12905] ? skb_put+0x11b/0x210 [ 361.503643][T12905] netlink_sendmsg+0x805/0xb30 [ 361.503666][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.503683][T12905] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.503699][T12905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.503713][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.503730][T12905] __sock_sendmsg+0x21c/0x270 [ 361.503746][T12905] ____sys_sendmsg+0x505/0x830 [ 361.503767][T12905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.503791][T12905] ? import_iovec+0x74/0xa0 [ 361.503810][T12905] ___sys_sendmsg+0x21f/0x2a0 [ 361.503829][T12905] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.503873][T12905] ? __fget_files+0x2a/0x420 [ 361.503885][T12905] ? __fget_files+0x3a0/0x420 [ 361.503905][T12905] __x64_sys_sendmsg+0x19b/0x260 [ 361.503924][T12905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.503948][T12905] ? __pfx_ksys_write+0x10/0x10 [ 361.503962][T12905] ? rcu_is_watching+0x15/0xb0 [ 361.503986][T12905] ? do_syscall_64+0xbe/0x3b0 [ 361.504003][T12905] do_syscall_64+0xfa/0x3b0 [ 361.504016][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.504029][T12905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.504042][T12905] ? clear_bhb_loop+0x60/0xb0 [ 361.504059][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.504072][T12905] RIP: 0033:0x7f02a338ec29 [ 361.504084][T12905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.504096][T12905] RSP: 002b:00007f02a416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.504112][T12905] RAX: ffffffffffffffda RBX: 00007f02a35d5fa0 RCX: 00007f02a338ec29 [ 361.504121][T12905] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 361.504130][T12905] RBP: 00007f02a416e090 R08: 0000000000000000 R09: 0000000000000000 [ 361.504138][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.504146][T12905] R13: 00007f02a35d6038 R14: 00007f02a35d5fa0 R15: 00007ffec1c1c868 [ 361.504168][T12905] [ 361.992777][T12933] netlink: 'syz.3.1663': attribute type 10 has an invalid length. [ 362.075418][T12943] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 362.177770][T12945] C speed is unknown, defaulting to 1000 [ 362.214529][ T8491] IPVS: starting estimator thread 0... [ 362.303071][T12952] IPVS: using max 29 ests per chain, 69600 per kthread [ 362.344484][T12950] C speed is unknown, defaulting to 1000 [ 362.624519][T12958] C speed is unknown, defaulting to 1000 [ 362.687871][T12921] ksmbd: Unknown IPC event: 3, ignore. [ 362.975397][T12971] FAULT_INJECTION: forcing a failure. [ 362.975397][T12971] name failslab, interval 1, probability 0, space 0, times 0 [ 363.052710][T12971] CPU: 1 UID: 0 PID: 12971 Comm: syz.3.1675 Not tainted syzkaller #0 PREEMPT(full) [ 363.052737][T12971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.052749][T12971] Call Trace: [ 363.052756][T12971] [ 363.052764][T12971] dump_stack_lvl+0x189/0x250 [ 363.052790][T12971] ? __pfx____ratelimit+0x10/0x10 [ 363.052809][T12971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.052835][T12971] ? __pfx__printk+0x10/0x10 [ 363.052861][T12971] ? __pfx___might_resched+0x10/0x10 [ 363.052875][T12971] ? fs_reclaim_acquire+0x7d/0x100 [ 363.052897][T12971] should_fail_ex+0x414/0x560 [ 363.052927][T12971] should_failslab+0xa8/0x100 [ 363.052950][T12971] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 363.052971][T12971] ? __alloc_skb+0x112/0x2d0 [ 363.052995][T12971] __alloc_skb+0x112/0x2d0 [ 363.053018][T12971] netlink_ack+0x146/0xa50 [ 363.053035][T12971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.053071][T12971] netlink_rcv_skb+0x28c/0x470 [ 363.053089][T12971] ? __lock_acquire+0xab9/0xd20 [ 363.053111][T12971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.053130][T12971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.053161][T12971] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.053188][T12971] netlink_unicast+0x82f/0x9e0 [ 363.053215][T12971] ? __pfx_netlink_unicast+0x10/0x10 [ 363.053234][T12971] ? netlink_sendmsg+0x642/0xb30 [ 363.053251][T12971] ? skb_put+0x11b/0x210 [ 363.053274][T12971] netlink_sendmsg+0x805/0xb30 [ 363.053303][T12971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.053325][T12971] ? aa_sock_msg_perm+0xf1/0x1d0 [ 363.053344][T12971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 363.053361][T12971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.053381][T12971] __sock_sendmsg+0x21c/0x270 [ 363.053401][T12971] ____sys_sendmsg+0x505/0x830 [ 363.053428][T12971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.053458][T12971] ? import_iovec+0x74/0xa0 [ 363.053482][T12971] ___sys_sendmsg+0x21f/0x2a0 [ 363.053506][T12971] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.053563][T12971] ? __fget_files+0x2a/0x420 [ 363.053577][T12971] ? __fget_files+0x3a0/0x420 [ 363.053602][T12971] __x64_sys_sendmsg+0x19b/0x260 [ 363.053626][T12971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.053656][T12971] ? __pfx_ksys_write+0x10/0x10 [ 363.053675][T12971] ? rcu_is_watching+0x15/0xb0 [ 363.053697][T12971] ? do_syscall_64+0xbe/0x3b0 [ 363.053720][T12971] do_syscall_64+0xfa/0x3b0 [ 363.053737][T12971] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.053754][T12971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.053770][T12971] ? clear_bhb_loop+0x60/0xb0 [ 363.053790][T12971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.053806][T12971] RIP: 0033:0x7f02a338ec29 [ 363.053822][T12971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.053844][T12971] RSP: 002b:00007f02a416e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.053863][T12971] RAX: ffffffffffffffda RBX: 00007f02a35d5fa0 RCX: 00007f02a338ec29 [ 363.053876][T12971] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 363.053886][T12971] RBP: 00007f02a416e090 R08: 0000000000000000 R09: 0000000000000000 [ 363.053896][T12971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.053905][T12971] R13: 00007f02a35d6038 R14: 00007f02a35d5fa0 R15: 00007ffec1c1c868 [ 363.053934][T12971] [ 363.583890][T12987] netlink: 'syz.1.1679': attribute type 13 has an invalid length. [ 363.596597][T12987] netlink: 'syz.1.1679': attribute type 17 has an invalid length. [ 363.715725][T12988] syzkaller1: entered promiscuous mode [ 363.750362][T12988] syzkaller1: entered allmulticast mode [ 363.900051][T12999] netlink: 'syz.1.1679': attribute type 7 has an invalid length. [ 364.033584][T12987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.057162][T12987] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.083302][T12987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.123402][T12990] xfrm0: entered promiscuous mode [ 364.128499][T12990] xfrm0: entered allmulticast mode [ 364.163994][T12994] C speed is unknown, defaulting to 1000 [ 364.432861][T13010] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 364.442379][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 364.595022][T13002] C speed is unknown, defaulting to 1000 [ 364.885983][T13020] netlink: 'syz.1.1687': attribute type 1 has an invalid length. [ 364.933742][T13020] netlink: 'syz.1.1687': attribute type 2 has an invalid length. [ 364.964106][T13026] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 364.976525][T13026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.008869][T13026] batadv0: entered promiscuous mode [ 365.030321][T13027] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 365.039188][T13026] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 365.051015][T13027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1686'. [ 365.061288][T13027] batadv0: entered allmulticast mode [ 365.070097][T13027] bond0: (slave batadv0): Releasing backup interface [ 365.105196][T13027] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 365.133704][T13021] C speed is unknown, defaulting to 1000 [ 365.148437][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 365.574690][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 365.820816][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 366.034912][T13041] gtp1: entered promiscuous mode [ 366.050916][T13041] gtp1: entered allmulticast mode [ 366.802324][T13072] tipc: Started in network mode [ 366.807874][T13072] tipc: Node identity 322cd8baa696, cluster identity 4711 [ 366.816649][T13072] tipc: Enabled bearer , priority 0 [ 366.856304][T13069] syzkaller0: entered promiscuous mode [ 366.862523][T13069] syzkaller0: entered allmulticast mode [ 366.936443][T13069] tipc: Resetting bearer [ 366.959134][T13075] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1699'. [ 366.992223][T13068] tipc: Resetting bearer [ 367.034388][T13068] tipc: Disabling bearer [ 367.069242][T13075] 0ªX¹¦À: renamed from caif0 [ 367.129186][T13075] 0ªX¹¦À: entered allmulticast mode [ 367.143535][T13075] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 367.224369][T13077] macvlan3: entered allmulticast mode [ 367.240445][T13077] bond0: entered allmulticast mode [ 367.257439][T13077] bond_slave_0: entered allmulticast mode [ 367.287897][T13077] bond_slave_1: entered allmulticast mode [ 367.321597][T13077] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 367.345658][T13077] bond0: left allmulticast mode [ 367.360766][T13077] bond_slave_0: left allmulticast mode [ 367.371352][T13077] bond_slave_1: left allmulticast mode [ 368.344308][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 368.420712][T13105] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1708'. [ 368.458069][T13112] veth0: entered promiscuous mode [ 368.509065][T13104] C speed is unknown, defaulting to 1000 [ 368.536616][T13112] netlink: 20824 bytes leftover after parsing attributes in process `syz.6.1710'. [ 368.625713][T13112] batman_adv: batadv0: Adding interface: vlan2 [ 368.632734][T13120] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1713'. [ 368.646633][T13112] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.693131][T13112] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 368.706182][T13120] 0ªX¹¦À: renamed from caif0 [ 368.732361][T13120] 0ªX¹¦À: entered allmulticast mode [ 368.740338][T13120] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 368.817424][T13111] veth0: left promiscuous mode [ 369.371994][T13119] C speed is unknown, defaulting to 1000 [ 369.901073][T13150] __nla_validate_parse: 2 callbacks suppressed [ 369.901091][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 369.918740][T13150] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1729'. [ 371.169763][T13184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.236058][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1730'. [ 371.385052][T13202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1734'. [ 371.394187][T13202] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1734'. [ 371.404128][T13202] netlink: 'syz.1.1734': attribute type 5 has an invalid length. [ 371.411966][T13202] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1734'. [ 371.432190][T13204] tipc: Enabling of bearer rejected, failed to enable media [ 371.442314][T13204] tipc: Enabling of bearer rejected, failed to enable media [ 371.515680][T13209] C speed is unknown, defaulting to 1000 [ 371.624350][T13211] ip6gretap1: entered promiscuous mode [ 372.282256][T13220] netlink: 'syz.2.1738': attribute type 3 has an invalid length. [ 372.306258][T13220] netlink: 'syz.2.1738': attribute type 3 has an invalid length. [ 372.440043][T13235] 8021q: VLANs not supported on ip_vti0 [ 372.527815][T13238] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1743'. [ 372.623991][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 372.689542][T13243] netlink: 'syz.3.1746': attribute type 2 has an invalid length. [ 372.712019][T13243] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 372.945307][T13264] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 372.973431][T13264] bridge0: port 1(dummy0) entered disabled state [ 373.049271][T13267] macsec2: entered promiscuous mode [ 373.066665][T13267] bridge0: entered promiscuous mode [ 373.073191][T13267] bridge0: port 2(macsec2) entered blocking state [ 373.079865][T13267] bridge0: port 2(macsec2) entered disabled state [ 373.128139][T13267] macsec2: entered allmulticast mode [ 373.143076][T13267] bridge0: entered allmulticast mode [ 373.216100][T13267] macsec2: left allmulticast mode [ 373.221319][T13267] bridge0: left allmulticast mode [ 373.255937][T13267] bridge0: left promiscuous mode [ 373.414533][T13276] C speed is unknown, defaulting to 1000 [ 373.751650][T13292] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 373.766605][T13292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1760'. [ 373.788643][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 374.092286][T13313] ksmbd: Unknown IPC event: 3, ignore. [ 374.101991][T13313] netlink: 'syz.6.1767': attribute type 10 has an invalid length. [ 374.154233][T13303] netlink: 'syz.3.1764': attribute type 4 has an invalid length. [ 375.044024][T13367] __nla_validate_parse: 4 callbacks suppressed [ 375.044045][T13367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1783'. [ 375.059559][T13369] C speed is unknown, defaulting to 1000 [ 375.091546][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'. [ 375.135440][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'. [ 375.254822][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1781'. [ 375.559793][T13387] C speed is unknown, defaulting to 1000 [ 375.679094][T13396] netlink: 'syz.3.1789': attribute type 21 has an invalid length. [ 375.687808][T13396] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1789'. [ 375.932484][T13396] netlink: 'syz.3.1789': attribute type 5 has an invalid length. [ 375.952871][T13396] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1789'. [ 376.463785][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1796'. [ 376.475100][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1796'. [ 376.485161][T13422] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1796'. [ 376.781077][T13431] bridge0: entered promiscuous mode [ 377.005654][T13441] ksmbd: Unknown IPC event: 3, ignore. [ 377.014173][T13441] validate_nla: 1 callbacks suppressed [ 377.014193][T13441] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 377.059387][T13445] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 377.103091][T13445] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1804'. [ 377.127464][T13445] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 377.332698][T13469] syzkaller1: entered promiscuous mode [ 377.348854][T13469] syzkaller1: entered allmulticast mode [ 377.575478][T13476] C speed is unknown, defaulting to 1000 [ 377.790130][T13494] ksmbd: Unknown IPC event: 3, ignore. [ 377.801147][T13494] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 378.207095][T13516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.519156][T13535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.859505][T13539] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 378.869909][T13539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.907894][T13543] ksmbd: Unknown IPC event: 3, ignore. [ 378.932096][T13543] netlink: 'syz.6.1833': attribute type 10 has an invalid length. [ 379.032664][T13550] tipc: Enabled bearer , priority 0 [ 379.067059][T13550] tipc: Disabling bearer [ 379.132680][T13555] bridge_slave_1: left allmulticast mode [ 379.140694][T13555] bridge_slave_1: left promiscuous mode [ 379.147493][T13555] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.162456][T13555] bridge_slave_0: left allmulticast mode [ 379.183746][T13555] bridge_slave_0: left promiscuous mode [ 379.194899][T13555] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.361254][T13574] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 379.392716][T13556] C speed is unknown, defaulting to 1000 [ 379.668278][T13585] ksmbd: Unknown IPC event: 3, ignore. [ 379.686178][T13585] netlink: 'syz.2.1847': attribute type 10 has an invalid length. [ 379.987740][T13604] batadv1: entered promiscuous mode [ 380.024885][T13613] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 380.026402][T13604] batadv1: entered allmulticast mode [ 380.098980][T13598] __nla_validate_parse: 11 callbacks suppressed [ 380.098999][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1853'. [ 380.254019][T13619] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1856'. [ 380.266961][T13622] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1857'. [ 380.453991][T13631] ksmbd: Unknown IPC event: 3, ignore. [ 380.462722][T13631] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 380.705695][T13646] ksmbd: Unknown IPC event: 3, ignore. [ 380.717615][T13646] netlink: 'syz.2.1865': attribute type 10 has an invalid length. [ 380.863666][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1868'. [ 380.991568][T13657] C speed is unknown, defaulting to 1000 [ 381.022194][T13655] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 381.031895][T13655] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 381.454033][T13679] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1875'. [ 381.572775][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 381.606895][T13684] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1877'. [ 381.695564][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1880'. [ 381.717055][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1880'. [ 381.810859][T13699] xt_l2tp: invalid flags combination: 8 [ 381.884332][T13691] pimreg: entered allmulticast mode [ 381.918763][T13694] pimreg: left allmulticast mode [ 382.117343][T13712] C speed is unknown, defaulting to 1000 [ 382.375245][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 382.581202][T13732] validate_nla: 2 callbacks suppressed [ 382.581219][T13732] netlink: 'syz.1.1892': attribute type 3 has an invalid length. [ 382.720764][T13735] ksmbd: Unknown IPC event: 3, ignore. [ 382.736751][T13735] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 382.984409][T13746] can: request_module (can-proto-0) failed. [ 383.551544][T13776] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.009311][T13800] @0Ù: renamed from bond_slave_1 (while UP) [ 384.535530][T13808] 0ªX¹¦À: left allmulticast mode [ 384.575446][T13808] xfrm0: left promiscuous mode [ 384.580374][T13808] xfrm0: left allmulticast mode [ 384.667681][T13808] gtp1: left promiscuous mode [ 384.684756][T13808] gtp1: left allmulticast mode [ 384.776588][T13816] hsr_slave_0: left promiscuous mode [ 384.801408][T13816] hsr_slave_1: left promiscuous mode [ 384.890541][T13846] bridge2: entered promiscuous mode [ 384.915124][T13846] bridge2: entered allmulticast mode [ 385.085421][T13844] C speed is unknown, defaulting to 1000 [ 385.510506][T13876] netlink: 'syz.6.1933': attribute type 9 has an invalid length. [ 385.540035][T13878] openvswitch: netlink: Tunnel attr 132 out of range max 16 [ 385.596067][T13878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.747726][T13891] __nla_validate_parse: 10 callbacks suppressed [ 385.747746][T13891] netlink: 212936 bytes leftover after parsing attributes in process `syz.4.1940'. [ 385.759330][T13894] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 385.780692][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 385.804648][T13894] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1935'. [ 385.931735][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 385.991027][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1935'. [ 386.182000][T13894] bond0 (unregistering): (slave 30): Releasing backup interface [ 386.191563][T13894] : left promiscuous mode [ 386.198410][T13894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.207744][T13894] bond_slave_1: left promiscuous mode [ 386.215370][T13894] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 386.225325][T13894] dummy0: left promiscuous mode [ 386.235726][T13894] bond0 (unregistering): Released all slaves [ 386.401331][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1942'. [ 386.629990][T13926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.710547][T13935] sctp: [Deprecated]: syz.3.1950 (pid 13935) Use of int in max_burst socket option. [ 386.710547][T13935] Use struct sctp_assoc_value instead [ 386.769641][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1949'. [ 386.791641][T13940] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1949'. [ 386.820355][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1949'. [ 387.009657][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 387.024205][T13949] netlink: 'syz.2.1952': attribute type 21 has an invalid length. [ 387.033974][T13949] netlink: 'syz.2.1952': attribute type 5 has an invalid length. [ 387.041741][T13949] netlink: 'syz.2.1952': attribute type 6 has an invalid length. [ 387.187120][T13958] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.395723][T13970] netlink: 'syz.3.1960': attribute type 10 has an invalid length. [ 387.454983][T13970] team0: Port device dummy0 added [ 387.506089][T13975] C speed is unknown, defaulting to 1000 [ 387.892343][T14000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.927193][T13980] C speed is unknown, defaulting to 1000 [ 388.148503][T13990] C speed is unknown, defaulting to 1000 [ 388.454331][T13987] C speed is unknown, defaulting to 1000 [ 437.004153][T14023] __nla_validate_parse: 3 callbacks suppressed [ 437.004172][T14023] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1972'. [ 437.096780][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 437.436441][T14033] C speed is unknown, defaulting to 1000 [ 437.611494][T14052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 437.624650][T14052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 437.636155][T14052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 437.647637][T14052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 437.657249][T14052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 437.848066][T14058] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1983'. [ 438.213675][T14044] C speed is unknown, defaulting to 1000 [ 438.514061][T14074] tipc: Enabled bearer , priority 0 [ 438.521303][T14075] syzkaller0: entered promiscuous mode [ 438.527274][T14075] syzkaller0: entered allmulticast mode [ 438.643444][T14080] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.655544][T14080] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.680167][T14075] tipc: Resetting bearer [ 438.702246][T14075] tipc: Disabling bearer [ 438.804672][T14080] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.827711][T14080] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.952370][T14080] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.963828][T14080] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.065747][T14080] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.078548][T14080] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.157391][T14044] chnl_net:caif_netlink_parms(): no params data found [ 439.288653][ T1100] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.306515][ T1100] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.344630][ T1168] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.354747][ T1168] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.363774][ T1168] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.372585][ T1168] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.387381][ T1168] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.398516][ T1168] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.478964][T14044] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.489796][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.498284][T14044] bridge_slave_0: entered allmulticast mode [ 439.515226][T14044] bridge_slave_0: entered promiscuous mode [ 439.540233][T14044] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.554842][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.575234][T14044] bridge_slave_1: entered allmulticast mode [ 439.591414][T14044] bridge_slave_1: entered promiscuous mode [ 439.707805][T14044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.738929][T14044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.765182][ T5183] Bluetooth: hci7: command tx timeout [ 439.898271][T14044] team0: Port device team_slave_0 added [ 439.910021][T14044] team0: Port device team_slave_1 added [ 440.296598][T14044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.410755][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.442091][T14044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.471465][T14044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.480423][T14044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.525042][T14044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.537064][T14120] C speed is unknown, defaulting to 1000 [ 440.671746][T14044] hsr_slave_0: entered promiscuous mode [ 440.685102][T14044] hsr_slave_1: entered promiscuous mode [ 440.984331][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 441.114028][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2009'. [ 441.257552][T14153] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 441.268699][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2009'. [ 441.282303][T14153] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 441.297432][T14153] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 441.435984][T14044] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 441.488339][T14044] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 441.535176][T14044] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 441.846309][ T5183] Bluetooth: hci7: command tx timeout [ 443.424315][T14044] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 443.528930][T14044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.580923][T14044] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.625038][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.632830][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.661374][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.670654][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.923139][ T5183] Bluetooth: hci7: command tx timeout [ 443.939163][T14173] C speed is unknown, defaulting to 1000 [ 443.989558][ T30] audit: type=1800 audit(1758393560.277:9): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2019" name="memory.events" dev="tmpfs" ino=2275 res=0 errno=0 [ 444.298445][T14193] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2022'. [ 444.456113][T14199] netlink: 'syz.2.2023': attribute type 13 has an invalid length. [ 444.477225][T14044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.501968][T14199] netlink: 'syz.2.2023': attribute type 17 has an invalid length. [ 444.711493][T14199] erspan0: left allmulticast mode [ 444.732688][T14199] sit0: left promiscuous mode [ 444.776920][T14199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.787177][T14199] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.800569][T14199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.064391][T14200] C speed is unknown, defaulting to 1000 [ 445.120193][T14220] openvswitch: netlink: Flow key attr not present in new flow. [ 445.255917][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.338781][T14194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.457686][T14044] veth0_vlan: entered promiscuous mode [ 445.497998][T14044] veth1_vlan: entered promiscuous mode [ 445.586311][T14044] veth0_macvtap: entered promiscuous mode [ 445.599035][T14044] veth1_macvtap: entered promiscuous mode [ 445.675808][T14044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.735630][T14044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.767840][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.777949][ T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.820555][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.839769][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.004021][ T5183] Bluetooth: hci7: command tx timeout [ 446.200854][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.218446][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.264978][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.296084][T14263] IPv6: NLM_F_REPLACE set, but no existing node found! [ 446.303069][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.420675][T14263] syz.1.2039 (14263) used obsolete PPPIOCDETACH ioctl [ 446.654816][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1974'. [ 446.772074][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.833586][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.041590][T14292] geneve2: entered promiscuous mode [ 447.183857][T14302] netlink: 'syz.2.2048': attribute type 13 has an invalid length. [ 447.215424][T14302] netlink: 'syz.2.2048': attribute type 17 has an invalid length. [ 447.819943][T14344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.965525][T14354] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 448.090358][T14365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.097972][T14365] IPv6: NLM_F_CREATE should be set when creating new route [ 448.105672][T14365] IPv6: NLM_F_CREATE should be set when creating new route [ 448.126726][T14365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2069'. [ 448.136761][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2070'. [ 448.184484][T14368] vlan2: entered promiscuous mode [ 448.189931][T14368] macvtap0: entered promiscuous mode [ 448.342301][T14378] bond0: default FDB implementation only supports local addresses [ 448.381950][T14379] netlink: 'syz.7.2075': attribute type 1 has an invalid length. [ 448.664623][T14394] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 448.674768][T14394] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 448.948617][T14401] C speed is unknown, defaulting to 1000 [ 449.054590][T14413] netlink: 'syz.2.2082': attribute type 3 has an invalid length. [ 449.211962][T14419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2085'. [ 449.349865][T14422] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2087'. [ 449.507094][T14426] C speed is unknown, defaulting to 1000 [ 449.641035][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2091'. [ 450.178559][T14456] netlink: 'syz.6.2096': attribute type 9 has an invalid length. [ 450.203375][T14456] netlink: 212160 bytes leftover after parsing attributes in process `syz.6.2096'. [ 450.268224][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2096'. [ 450.284320][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2096'. [ 450.304892][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2096'. [ 450.339575][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2096'. [ 450.349043][T14456] netlink: 'syz.6.2096': attribute type 6 has an invalid length. [ 452.581355][T14052] Bluetooth: hci5: command 0x0405 tx timeout [ 452.759155][T14477] netdevsim netdevsim1: Direct firmware load for . [ 452.759155][T14477] failed with error -2 [ 452.771847][T14477] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 452.771847][T14477] [ 453.119424][T14503] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 453.149723][T14503] netlink: 'syz.4.2107': attribute type 3 has an invalid length. [ 453.232516][T14503] netlink: 564 bytes leftover after parsing attributes in process `syz.4.2107'. [ 453.551144][T14527] bond0: (slave rose0): Error: Device can not be enslaved while up [ 453.589730][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2112'. [ 453.743444][T14528] C speed is unknown, defaulting to 1000 [ 453.959730][T14534] C speed is unknown, defaulting to 1000 [ 454.468735][T14564] can: request_module (can-proto-0) failed. [ 454.637514][T14576] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 454.654008][T14577] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 454.700148][T14580] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 455.229108][T14586] bridge0: entered allmulticast mode [ 455.964502][T14602] C speed is unknown, defaulting to 1000 [ 456.412539][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2133'. [ 456.829548][T14648] netlink: 'syz.2.2139': attribute type 10 has an invalid length. [ 456.851343][T14648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2139'. [ 456.901756][T14631] C speed is unknown, defaulting to 1000 [ 456.953396][T14648] !: entered promiscuous mode [ 456.969231][T14648] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 457.186282][T14662] syzkaller1: entered promiscuous mode [ 457.193164][T14662] syzkaller1: entered allmulticast mode [ 457.222191][T14662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2142'. [ 457.279783][T14668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 457.578006][T14666] C speed is unknown, defaulting to 1000 [ 457.757256][T14685] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 457.809628][T14688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2146'. [ 457.983228][T14685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.386174][T14712] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2148'. [ 458.406668][T14712] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 459.492615][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2156'. [ 459.671942][T14744] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.682168][T14744] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.780958][T14744] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.825655][T14744] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.858404][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 459.891228][T14744] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.927960][T14744] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.982669][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 460.008811][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 460.023301][T14765] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2164'. [ 460.032537][T14765] netlink: 'syz.7.2164': attribute type 1 has an invalid length. [ 460.082667][T14744] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.127436][T14744] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.133877][T14771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.196928][T14772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.211108][T14777] netlink: 'syz.2.2168': attribute type 13 has an invalid length. [ 460.424893][T14777] C speed is unknown, defaulting to 1000 [ 460.529835][ T6386] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.547101][ T6386] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.638102][ T36] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.653984][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.749123][T14707] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.764203][T14707] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.789642][T14707] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.834407][T14707] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.680613][T14813] __nla_validate_parse: 1 callbacks suppressed [ 461.680630][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2175'. [ 461.715761][T14818] netlink: 'syz.7.2176': attribute type 1 has an invalid length. [ 461.715958][T14813] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2175'. [ 461.874255][T14813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.910440][T14827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.922377][T14813] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.958778][T14813] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 461.978298][T14829] netlink: 'syz.6.2177': attribute type 5 has an invalid length. [ 462.105685][T14832] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 462.119689][T14832] bridge3: entered promiscuous mode [ 464.230618][T14855] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 464.307077][T14857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.400789][T14868] ip6gre1: entered allmulticast mode [ 464.614478][T14880] bond0: (slave rose0): Error: Device can not be enslaved while up [ 465.334649][T14911] netlink: 'syz.6.2202': attribute type 4 has an invalid length. [ 465.373160][T14911] netlink: 'syz.6.2202': attribute type 4 has an invalid length. [ 465.651691][T14930] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 465.680366][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 465.855355][T14950] tipc: Trying to set illegal importance in message [ 466.029387][T14960] C speed is unknown, defaulting to 1000 [ 466.218432][T14977] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2223'. [ 466.691883][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.719711][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.005491][T14982] geneve2: entered promiscuous mode [ 467.010947][T14982] geneve2: entered allmulticast mode [ 467.103277][T14994] veth0: entered promiscuous mode [ 467.128037][T14707] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.143108][T14707] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 467.162765][T14707] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.171980][T14707] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 467.220283][T14707] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.230100][T14707] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 467.239411][T14707] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.250431][T14707] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 467.269406][T14983] veth0: left promiscuous mode [ 467.276311][T15001] tap0: tun_chr_ioctl cmd 1074025680 [ 467.324031][T15001] tipc: Started in network mode [ 467.329194][T15001] tipc: Node identity 3eabc8dcc9d7, cluster identity 4711 [ 467.340413][T15009] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2230'. [ 467.351595][T15001] tipc: Enabled bearer , priority 0 [ 467.358530][T15011] !: renamed from dummy0 (while UP) [ 467.380840][T15001] D: renamed from syzkaller0 [ 467.396110][T15009] atomic_op ffff888023c79998 conn xmit_atomic 0000000000000000 [ 467.431859][T15001] tipc: Disabling bearer [ 467.673397][T15012] C speed is unknown, defaulting to 1000 [ 467.991232][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 468.129029][T15029] bond6: entered promiscuous mode [ 468.134836][T15029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.206005][T15041] netlink: 'syz.7.2238': attribute type 10 has an invalid length. [ 468.257349][T15049] netlink: 'syz.7.2238': attribute type 10 has an invalid length. [ 468.285662][T15041] team0: Port device dummy0 added [ 468.295548][T15049] team0: Failed to send options change via netlink (err -105) [ 468.326113][T15049] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 468.337127][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 468.348334][T15049] team0: Port device dummy0 removed [ 468.358642][T15049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.768558][T15070] tipc: Enabled bearer , priority 0 [ 468.789431][T15070] syzkaller0: entered promiscuous mode [ 468.793690][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2248'. [ 468.802411][T15073] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2247'. [ 468.823091][T15070] syzkaller0: entered allmulticast mode [ 468.890390][T15079] tipc: Can't bind to reserved service type 1 [ 468.906396][T15070] tipc: Resetting bearer [ 468.928500][T15069] tipc: Resetting bearer [ 468.967557][T15069] tipc: Disabling bearer [ 469.034179][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2251'. [ 469.292116][T15110] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 469.298991][T15110] syzkaller1: linktype set to 6 [ 469.437923][T15122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2260'. [ 469.456084][T15122] tipc: Enabling of bearer rejected, failed to enable media [ 469.596308][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2261'. [ 469.716544][T15140] bond1: entered promiscuous mode [ 470.022160][T15162] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2270'. [ 470.126612][T15171] IPVS: length: 172 != 8 [ 470.212594][T15177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.229544][T15181] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 470.333916][T15187] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2277'. [ 470.377682][T15187] ipvlan2: entered promiscuous mode [ 470.605490][T15214] FAULT_INJECTION: forcing a failure. [ 470.605490][T15214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.673150][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.6.2283 Not tainted syzkaller #0 PREEMPT(full) [ 470.673175][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.673190][T15214] Call Trace: [ 470.673197][T15214] [ 470.673205][T15214] dump_stack_lvl+0x189/0x250 [ 470.673230][T15214] ? __pfx____ratelimit+0x10/0x10 [ 470.673249][T15214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.673268][T15214] ? __pfx__printk+0x10/0x10 [ 470.673289][T15214] ? __might_fault+0xb0/0x130 [ 470.673322][T15214] should_fail_ex+0x414/0x560 [ 470.673350][T15214] _copy_from_user+0x2d/0xb0 [ 470.673372][T15214] __sys_bpf+0x1ed/0x870 [ 470.673396][T15214] ? __pfx___sys_bpf+0x10/0x10 [ 470.673430][T15214] ? ksys_write+0x22a/0x250 [ 470.673461][T15214] ? __pfx_ksys_write+0x10/0x10 [ 470.673478][T15214] ? rcu_is_watching+0x15/0xb0 [ 470.673504][T15214] __x64_sys_bpf+0x7c/0x90 [ 470.673520][T15214] do_syscall_64+0xfa/0x3b0 [ 470.673536][T15214] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.673548][T15214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.673560][T15214] ? clear_bhb_loop+0x60/0xb0 [ 470.673574][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.673590][T15214] RIP: 0033:0x7f3b1d78ec29 [ 470.673604][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.673618][T15214] RSP: 002b:00007f3b1e6ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.673636][T15214] RAX: ffffffffffffffda RBX: 00007f3b1d9d6090 RCX: 00007f3b1d78ec29 [ 470.673648][T15214] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000001c [ 470.673659][T15214] RBP: 00007f3b1e6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 470.673669][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.673679][T15214] R13: 00007f3b1d9d6128 R14: 00007f3b1d9d6090 R15: 00007ffc4f9fa358 [ 470.673709][T15214] [ 470.886144][T15221] tipc: Enabling of bearer rejected, failed to enable media [ 470.945044][ T8491] IPVS: starting estimator thread 0... [ 471.022020][T15232] raw_sendmsg: syz.4.2288 forgot to set AF_INET. Fix it! [ 471.031993][T15224] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 471.046153][T15222] IPVS: using max 30 ests per chain, 72000 per kthread [ 471.201477][T15244] netlink: 'syz.7.2292': attribute type 13 has an invalid length. [ 471.322893][T15244] C speed is unknown, defaulting to 1000 [ 471.678012][T15264] FAULT_INJECTION: forcing a failure. [ 471.678012][T15264] name failslab, interval 1, probability 0, space 0, times 0 [ 471.696441][T15264] CPU: 0 UID: 0 PID: 15264 Comm: syz.1.2300 Not tainted syzkaller #0 PREEMPT(full) [ 471.696469][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.696479][T15264] Call Trace: [ 471.696487][T15264] [ 471.696495][T15264] dump_stack_lvl+0x189/0x250 [ 471.696520][T15264] ? __pfx____ratelimit+0x10/0x10 [ 471.696539][T15264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.696558][T15264] ? __pfx__printk+0x10/0x10 [ 471.696587][T15264] ? __pfx___might_resched+0x10/0x10 [ 471.696603][T15264] ? fs_reclaim_acquire+0x7d/0x100 [ 471.696625][T15264] should_fail_ex+0x414/0x560 [ 471.696655][T15264] should_failslab+0xa8/0x100 [ 471.696679][T15264] __kmalloc_cache_noprof+0x70/0x3d0 [ 471.696700][T15264] ? bpf_xdp_link_attach+0x166/0x8f0 [ 471.696728][T15264] bpf_xdp_link_attach+0x166/0x8f0 [ 471.696748][T15264] ? __lock_acquire+0xab9/0xd20 [ 471.696777][T15264] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 471.696827][T15264] ? __fget_files+0x3a0/0x420 [ 471.696842][T15264] ? __fget_files+0x2a/0x420 [ 471.696859][T15264] ? attach_type_to_prog_type+0x40a/0x470 [ 471.696882][T15264] ? bpf_prog_attach_check_attach_type+0x39c/0x540 [ 471.696912][T15264] link_create+0x4d8/0x850 [ 471.696940][T15264] __sys_bpf+0x6dc/0x870 [ 471.696963][T15264] ? __pfx___sys_bpf+0x10/0x10 [ 471.696998][T15264] ? ksys_write+0x22a/0x250 [ 471.697022][T15264] ? __pfx_ksys_write+0x10/0x10 [ 471.697040][T15264] ? rcu_is_watching+0x15/0xb0 [ 471.697065][T15264] __x64_sys_bpf+0x7c/0x90 [ 471.697085][T15264] do_syscall_64+0xfa/0x3b0 [ 471.697103][T15264] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.697121][T15264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.697137][T15264] ? clear_bhb_loop+0x60/0xb0 [ 471.697158][T15264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.697175][T15264] RIP: 0033:0x7f06d7d8ec29 [ 471.697194][T15264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.697209][T15264] RSP: 002b:00007f06d8c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.697227][T15264] RAX: ffffffffffffffda RBX: 00007f06d7fd5fa0 RCX: 00007f06d7d8ec29 [ 471.697239][T15264] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000001c [ 471.697250][T15264] RBP: 00007f06d8c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 471.697261][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.697271][T15264] R13: 00007f06d7fd6038 R14: 00007f06d7fd5fa0 R15: 00007ffec564e828 [ 471.697302][T15264] [ 483.123414][ T31] INFO: task syz.5.1273:11312 blocked for more than 143 seconds. [ 483.131612][ T31] Not tainted syzkaller #0 [ 483.136851][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.145582][ T31] task:syz.5.1273 state:D stack:26120 pid:11312 tgid:11309 ppid:10675 task_flags:0x400040 flags:0x00004004 [ 483.157685][ T31] Call Trace: [ 483.160966][ T31] [ 483.163966][ T31] __schedule+0x1798/0x4cc0 [ 483.168469][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 483.173608][ T31] ? __lock_acquire+0xab9/0xd20 [ 483.178808][ T31] ? __pfx___schedule+0x10/0x10 [ 483.184442][ T31] ? schedule+0x91/0x360 [ 483.188720][ T31] schedule+0x165/0x360 [ 483.193214][ T31] schedule_preempt_disabled+0x13/0x30 [ 483.198867][ T31] __mutex_lock+0x7e6/0x1350 [ 483.213033][ T31] ? __mutex_lock+0x5bb/0x1350 [ 483.217855][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 483.288568][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 483.303640][ T31] ? stack_trace_save+0x9c/0xe0 [ 483.308546][ T31] ? stack_depot_save_flags+0x40/0x860 [ 483.343008][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 483.348441][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 483.383798][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 483.390541][ T31] ? kmalloc_reserve+0x136/0x290 [ 483.419588][ T31] ? __alloc_skb+0x142/0x2d0 [ 483.433057][ T31] ? netlink_dump+0x1b7/0xe90 [ 483.437780][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 483.463575][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 483.469656][ T31] ? genl_rcv_msg+0x5da/0x790 [ 483.482892][ T31] ? netlink_rcv_skb+0x208/0x470 [ 483.488139][ T31] ? genl_rcv+0x28/0x40 [ 483.492314][ T31] ? netlink_unicast+0x82f/0x9e0 [ 483.513076][ T31] ? netlink_sendmsg+0x805/0xb30 [ 483.518066][ T31] ? __sock_sendmsg+0x21c/0x270 [ 483.533055][ T31] ? ____sys_sendmsg+0x505/0x830 [ 483.538042][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 483.563683][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 483.569247][ T31] ? do_syscall_64+0xfa/0x3b0 [ 483.583885][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.590026][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 483.633092][ T31] ? rcu_is_watching+0x15/0xb0 [ 483.638016][ T31] ? trace_kmalloc+0x1f/0xd0 [ 483.642832][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 483.673012][ T31] ? __build_skb_around+0x257/0x3e0 [ 483.678276][ T31] genl_dumpit+0x108/0x1b0 [ 483.682723][ T31] netlink_dump+0x6e1/0xe90 [ 483.713237][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 483.719261][ T31] ? genl_start+0x1c9/0x6c0 [ 483.743680][ T31] ? genl_start+0x499/0x6c0 [ 483.748259][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 483.774067][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 483.780034][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 483.812996][ T31] ? genl_get_cmd+0x496/0x910 [ 483.817917][ T31] ? __pfx_genl_start+0x10/0x10 [ 483.833999][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 483.839088][ T31] ? __pfx_genl_done+0x10/0x10 [ 483.853649][ T31] genl_rcv_msg+0x5da/0x790 [ 483.858234][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.863504][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 483.870118][ T31] ? __asan_memcpy+0x40/0x70 [ 483.874966][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.880366][ T31] netlink_rcv_skb+0x208/0x470 [ 483.885465][ T31] ? __lock_acquire+0xab9/0xd20 [ 483.890631][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.895989][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.902015][ T31] ? down_read+0x1ad/0x2e0 [ 483.906530][ T31] genl_rcv+0x28/0x40 [ 483.910525][ T31] netlink_unicast+0x82f/0x9e0 [ 483.915652][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 483.920983][ T31] ? netlink_sendmsg+0x642/0xb30 [ 483.926221][ T31] ? skb_put+0x11b/0x210 [ 483.930483][ T31] netlink_sendmsg+0x805/0xb30 [ 483.935703][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.941365][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 483.946463][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.951891][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.957375][ T31] __sock_sendmsg+0x21c/0x270 [ 483.962173][ T31] ____sys_sendmsg+0x505/0x830 [ 483.967021][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.972352][ T31] ? import_iovec+0x74/0xa0 [ 483.977098][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 483.981806][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.987161][ T31] ? __fget_files+0x2a/0x420 [ 483.991738][ T31] ? __fget_files+0x3a0/0x420 [ 483.996626][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 484.001851][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.007365][ T31] ? rcu_is_watching+0x15/0xb0 [ 484.012489][ T31] ? do_syscall_64+0xbe/0x3b0 [ 484.017247][ T31] do_syscall_64+0xfa/0x3b0 [ 484.022188][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.027656][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.034208][ T31] ? clear_bhb_loop+0x60/0xb0 [ 484.038892][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.044931][ T31] RIP: 0033:0x7f2cd118ec29 [ 484.049445][ T31] RSP: 002b:00007f2cd207f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.058119][ T31] RAX: ffffffffffffffda RBX: 00007f2cd13d6090 RCX: 00007f2cd118ec29 [ 484.066160][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 484.074296][ T31] RBP: 00007f2cd1211e41 R08: 0000000000000000 R09: 0000000000000000 [ 484.082373][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.090583][ T31] R13: 00007f2cd13d6128 R14: 00007f2cd13d6090 R15: 00007ffc92690728 [ 484.098845][ T31] [ 484.102106][ T31] [ 484.102106][ T31] Showing all locks held in the system: [ 484.118408][ T31] 1 lock held by khungtaskd/31: [ 484.133491][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 484.143644][ T31] 2 locks held by getty/5618: [ 484.148691][ T31] #0: ffff8880337ce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 484.159706][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 484.170894][ T31] 2 locks held by syz-executor/5859: [ 484.176337][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 484.185585][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 484.196774][ T31] 1 lock held by syz-executor/5863: [ 484.202145][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 484.211683][ T31] 3 locks held by kworker/1:9/8491: [ 484.217252][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 484.229364][ T31] #1: ffffc90019f37bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 484.240308][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 484.251585][ T31] 2 locks held by syz.0.981/10179: [ 484.256725][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 484.265306][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 484.275593][ T31] 3 locks held by syz.5.1273/11312: [ 484.280809][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 484.289058][ T31] #1: ffff88807b5136e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 484.299539][ T31] #2: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 484.310170][ T31] 4 locks held by syz-executor/12114: [ 484.315599][ T31] #0: ffff88804b440dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 484.325651][ T31] #1: ffff88804b4400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 484.335408][ T31] #2: ffffffff8f69f1e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 484.345538][ T31] #3: ffff8880315a1338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 484.355208][ T31] 2 locks held by syz.3.1967/13992: [ 484.360404][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 484.368825][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 484.379205][ T31] 3 locks held by syz-executor/14044: [ 484.384705][ T31] #0: ffff88804b444dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 484.394746][ T31] #1: ffff88804b4440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 484.404894][ T31] #2: ffffffff8f69f1e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 484.415775][ T31] 2 locks held by syz.2.2225/14990: [ 484.420960][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 484.429303][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 484.439642][ T31] [ 484.441979][ T31] ============================================= [ 484.441979][ T31] [ 484.450520][ T31] NMI backtrace for cpu 0 [ 484.450539][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 484.450558][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.450568][ T31] Call Trace: [ 484.450574][ T31] [ 484.450583][ T31] dump_stack_lvl+0x189/0x250 [ 484.450608][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.450632][ T31] ? __pfx__printk+0x10/0x10 [ 484.450665][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 484.450688][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 484.450712][ T31] ? __pfx__printk+0x10/0x10 [ 484.450738][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 484.450764][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 484.450790][ T31] watchdog+0xf93/0xfe0 [ 484.450816][ T31] ? watchdog+0x1de/0xfe0 [ 484.450842][ T31] kthread+0x70e/0x8a0 [ 484.450865][ T31] ? __pfx_watchdog+0x10/0x10 [ 484.450885][ T31] ? __pfx_kthread+0x10/0x10 [ 484.450906][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.450923][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.450938][ T31] ? __pfx_kthread+0x10/0x10 [ 484.450959][ T31] ret_from_fork+0x439/0x7d0 [ 484.450979][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 484.451002][ T31] ? __switch_to_asm+0x39/0x70 [ 484.451020][ T31] ? __switch_to_asm+0x33/0x70 [ 484.451039][ T31] ? __pfx_kthread+0x10/0x10 [ 484.451059][ T31] ret_from_fork_asm+0x1a/0x30 [ 484.451094][ T31] [ 484.451101][ T31] Sending NMI from CPU 0 to CPUs 1: [ 484.602072][ C1] NMI backtrace for cpu 1 [ 484.602089][ C1] CPU: 1 UID: 0 PID: 14706 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 484.602107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.602118][ C1] Workqueue: events_unbound toggle_allocation_gate [ 484.602142][ C1] RIP: 0010:check_preemption_disabled+0x49/0x120 [ 484.602163][ C1] Code: 8b 0d bb ae 25 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 9b ae 25 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f <5d> e9 81 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 [ 484.602176][ C1] RSP: 0018:ffffc9000d41f638 EFLAGS: 00000082 [ 484.602190][ C1] RAX: 0000000000000001 RBX: 0000000000000287 RCX: 0e4032742c5edb00 [ 484.602201][ C1] RDX: 0000000000000006 RSI: ffffffff8dba998c RDI: ffffffff8be33f00 [ 484.602212][ C1] RBP: ffff88803e358be0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206 [ 484.602224][ C1] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: 0000000000000006 [ 484.602235][ C1] R13: 0000000000000006 R14: ffff88801a47b078 R15: ffff88803e358000 [ 484.602246][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 484.602259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.602270][ C1] CR2: 0000565289d60fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 484.602285][ C1] Call Trace: [ 484.602291][ C1] [ 484.602299][ C1] lock_release+0x27a/0x3e0 [ 484.602319][ C1] ? __text_poke+0x7b1/0xa10 [ 484.602338][ C1] ? __kmalloc_cache_noprof+0x83/0x3d0 [ 484.602356][ C1] _raw_spin_unlock+0x16/0x50 [ 484.602375][ C1] __text_poke+0x7b1/0xa10 [ 484.602395][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 484.602413][ C1] ? __kmalloc_cache_noprof+0x83/0x3d0 [ 484.602430][ C1] ? __pfx___text_poke+0x10/0x10 [ 484.602446][ C1] ? rcu_is_watching+0x15/0xb0 [ 484.602461][ C1] ? trace_contention_end+0x39/0x120 [ 484.602482][ C1] smp_text_poke_batch_finish+0xd0f/0x1130 [ 484.602504][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 484.602525][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 484.602549][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 484.602569][ C1] static_key_disable_cpuslocked+0xc5/0x1b0 [ 484.602589][ C1] static_key_disable+0x1a/0x20 [ 484.602607][ C1] toggle_allocation_gate+0x1a1/0x240 [ 484.602626][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 484.602645][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 484.602665][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 484.602680][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 484.602695][ C1] process_scheduled_works+0xae1/0x17b0 [ 484.602720][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.602759][ C1] worker_thread+0x8a0/0xda0 [ 484.602784][ C1] kthread+0x70e/0x8a0 [ 484.602808][ C1] ? __pfx_worker_thread+0x10/0x10 [ 484.602822][ C1] ? __pfx_kthread+0x10/0x10 [ 484.602839][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.602853][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.602867][ C1] ? __pfx_kthread+0x10/0x10 [ 484.602884][ C1] ret_from_fork+0x439/0x7d0 [ 484.602900][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 484.602917][ C1] ? __switch_to_asm+0x39/0x70 [ 484.602936][ C1] ? __switch_to_asm+0x33/0x70 [ 484.602949][ C1] ? __pfx_kthread+0x10/0x10 [ 484.602965][ C1] ret_from_fork_asm+0x1a/0x30 [ 484.602989][ C1] [ 484.603611][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 484.603627][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 484.603647][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.603658][ T31] Call Trace: [ 484.603665][ T31] [ 484.603674][ T31] dump_stack_lvl+0x99/0x250 [ 484.603696][ T31] ? __asan_memcpy+0x40/0x70 [ 484.603717][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.603736][ T31] ? __pfx__printk+0x10/0x10 [ 484.603770][ T31] vpanic+0x281/0x750 [ 484.603792][ T31] ? __pfx_vpanic+0x10/0x10 [ 484.603809][ T31] ? preempt_schedule+0xae/0xc0 [ 484.603829][ T31] ? preempt_schedule_common+0x83/0xd0 [ 484.603852][ T31] panic+0xb9/0xc0 [ 484.603870][ T31] ? __pfx_panic+0x10/0x10 [ 484.603890][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 484.603917][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 484.603943][ T31] watchdog+0xfd2/0xfe0 [ 484.603970][ T31] ? watchdog+0x1de/0xfe0 [ 484.603997][ T31] kthread+0x70e/0x8a0 [ 484.604020][ T31] ? __pfx_watchdog+0x10/0x10 [ 484.604040][ T31] ? __pfx_kthread+0x10/0x10 [ 484.604062][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.604078][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.604095][ T31] ? __pfx_kthread+0x10/0x10 [ 484.604114][ T31] ret_from_fork+0x439/0x7d0 [ 484.604135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 484.604158][ T31] ? __switch_to_asm+0x39/0x70 [ 484.604177][ T31] ? __switch_to_asm+0x33/0x70 [ 484.604195][ T31] ? __pfx_kthread+0x10/0x10 [ 484.604216][ T31] ret_from_fork_asm+0x1a/0x30 [ 484.604250][ T31] [ 485.102240][ T31] Kernel Offset: disabled [ 485.106634][ T31] Rebooting in 86400 seconds..