last executing test programs: 4m51.451299435s ago: executing program 0 (id=3734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24040090) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x5c, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f00000001c0), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) sendfile(r0, r6, 0x0, 0x1) 4m51.313692889s ago: executing program 0 (id=3738): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2000}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 4m51.222854517s ago: executing program 0 (id=3740): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x4, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000bc0)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000c00)=0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/288], 0x120}}], 0x2, 0x4040005) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000c40)={0x8, 'Z-\b'}, 0x6) listen(r3, 0x1ad72f7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 4m50.18031631s ago: executing program 0 (id=3748): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000410000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 4m49.953596416s ago: executing program 0 (id=3753): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x80) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c000680040002000400050090000580070001006962000007000100696200004400028008000200070000000800040004000000080004000400000008000100170000000800020005000000080003000700"], 0x160}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-1'], 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r9) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m49.459691024s ago: executing program 0 (id=3756): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x20000890) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) close(r1) socket$nl_route(0x10, 0x3, 0x0) 4m34.3312681s ago: executing program 32 (id=3756): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x20000890) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) close(r1) socket$nl_route(0x10, 0x3, 0x0) 2m25.556209401s ago: executing program 4 (id=5479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[], 0x70}}, 0x0) 2m25.47145472s ago: executing program 4 (id=5481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x140, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x8, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x5, 0x6, 0x3}) write$cgroup_subtree(r3, &(0x7f0000000380)={[{0x2b, 'pids'}, {0x2b, 'io'}, {0x2d, 'net_cls'}]}, 0x13) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000001c0)=0x4, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x50, r5, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc1711c6, 0x3a}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa34}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044040}, 0x10) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004801) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x0) 2m25.199778855s ago: executing program 4 (id=5485): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = accept4$rose(r2, &(0x7f0000000200)=@full={0xb, @remote, @default, 0x0, [@netrom, @netrom, @default, @bcast, @null, @netrom]}, &(0x7f0000000240)=0x40, 0x100800) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000004c0)={0x2, 0x2, @multicast1}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=0x0, @ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000240)="f6f4e91baf72541ab43a4b6208fe2b4afedea1e0015917a485b6bcc713ebabadfbaf", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40844}}], 0x1, 0x1) r11 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="13000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002c000000000000000000000007000000441c13c1ac1414bb00000007ac1414aa000000090a01010200f2ff0800000000"], 0x50}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)='X', 0x1}], 0x1}, 0x40c4) r16 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r16, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) r18 = gettid() sendmmsg$unix(r12, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r18, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r10}}}], 0xc0, 0x40044}}], 0x1, 0x4) sendmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2ee4ab8ebb91da8527427fcb58a507cae1000a52c17a4542a1973438f469b8b8d7a351d50ca2c7adbb9cdf388d945ce02dbcef22a41b6b1b58ab170ba222df27f82df0119c40863b0024875f3367196a34bef8bbcb309f0f2d991019ffc565f47767c579f52988bd87c04d3b81a751afdfa1c144b60d1194e7c37276504021bd67b133418fd48dcfae015fa8d0910b09700cd01f8a2a422a359322f428d8bc45b74758a9238884567a03821e0d14", 0xae}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="401cee3f750f1503811b83feb8c7a1d8c2dd5ebb394cf2f22a1a607865770b92c86bf25925efc85db9392bb7787d9e3d43d4dd81c0a813e13d3182d17e868fc667d93fef660f06b9a4cc05f0692423db665a459b09ac3e9b88be3acbda4026dd29534649a07141ad90d7907c9faca669d7862f6cd13f10ae41aa2b", @ANYRESDEC=r17], 0x58, 0x20040000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7, 0xfb00, 0x7, 0x3, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x64, 0x0, 0x23, 0x29, 0x0, @loopback, @remote}}}}) 2m24.218844304s ago: executing program 4 (id=5502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 8) 2m23.827401868s ago: executing program 4 (id=5506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a}, 0x28) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6], 0x38}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20020040) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m23.35519466s ago: executing program 4 (id=5507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x20000890) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) close(r1) socket$nl_route(0x10, 0x3, 0x0) 2m8.347151387s ago: executing program 33 (id=5507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x20000890) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) close(r1) socket$nl_route(0x10, 0x3, 0x0) 1m27.626315619s ago: executing program 5 (id=6037): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="650a0000000000006111c400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x40400, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(r8, r7, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e1"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x401}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x54, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) 1m26.63992551s ago: executing program 5 (id=6048): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2560000000000000008"}, {0x0, 0x9, "789607675ca638"}, {0x6, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c6f4ffffffffffffff0000000000"}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000004000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}, @ssrr={0x89, 0x3, 0x32}]}}}}}}}, 0x0) 1m26.491770301s ago: executing program 5 (id=6051): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0025016d00001d290000000000ab000f00ff00002ab899bcec2659f0f35d1a983e38", @ANYRES32=0x0, @ANYRES32], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0025016d00001d290000000000ab000f00ff00002ab899bcec2659f0f35d1a983e38", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0x80087601, 0x100000000010001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, 0x0, 0x0) 1m25.598837121s ago: executing program 5 (id=6063): socket$kcm(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4000}, 0x0, 0x0) 1m24.591354792s ago: executing program 5 (id=6079): unshare(0x4000800) r0 = socket$inet6(0xa, 0x4, 0xffffffff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0xb, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x640100fe}}}], 0x20}}], 0x2, 0x4000) 1m24.505204728s ago: executing program 5 (id=6080): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x20000890) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) close(r1) socket$nl_route(0x10, 0x3, 0x0) 1m9.203994914s ago: executing program 34 (id=6080): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x20000890) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) close(r1) socket$nl_route(0x10, 0x3, 0x0) 6.154499073s ago: executing program 1 (id=6872): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113f00000000008510000002000000850000002a00000095000000000000009500a50500000000614ffb663508bc5cd5ec86be1d62efd153b6600c88defcaf245b591b19600444fff89d34e2b6ff5b8c7b0c8ed16c60b283d509e23b92d7fec38b659eaefd5c3fa19766ed6aa1a0d86adde67d3382a849708c05f67f7bf6536657a5ce9feebad7d3293c831c7dcdae1ff50900000000000000e3258f69cd558f65a3119d2e00c0662ada8fc484eecf32076a5bb12007f094b3c02a6f18e64ce416346e30abfd1b668df36b32722c0a9d33a1eb0892aafc7ea4dda1568560a20d6fcc099ff96d71616547bc0c7a555b607a3f105a459ac82d5d219039f7340e7ee635ed3b35f3fef19156be8e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, &(0x7f00000003c0)=@l2tp6, &(0x7f00000005c0)=0x80, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004030000000000000000000000000000dbe9e4e1a2adb8a9f9d8461051d14e5de9938fb2e31cceead1c145334e6d04da8d1f"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0xfdff, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x3503, 0x9, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400fd}, 0x0) 4.503912755s ago: executing program 2 (id=6892): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x1800, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 4.411626368s ago: executing program 2 (id=6895): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r3, 0xef, 0x6}, 0xc) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0xfffffffffffffffe, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0xfffffeff}], '\x00\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8, 0x1}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x1b, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0x0, 0x1, 0x5, 0x30, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3c0c4abd, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 4.220944488s ago: executing program 2 (id=6896): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3.89297132s ago: executing program 6 (id=6901): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRESOCT=r0, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x51) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getrule={0x1c, 0x22, 0xcd2790f7bede27f, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x10, 0x40, 0x50, 0x0, 0x0, 0x1, 0x5}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) 3.779787455s ago: executing program 7 (id=6903): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0480000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000040b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x4f) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002340)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x80, @remote, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='>', 0x1}], 0x1}}], 0x1, 0x4000044) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x82) close(r8) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f00000000c0)={0xc025, 0x3}) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 3.778516313s ago: executing program 6 (id=6904): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000525bdaf8892a939ea3997ee487000fcdbdf256300200008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 3.52299224s ago: executing program 7 (id=6906): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r3, 0xef, 0x6}, 0xc) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0xfffffffffffffffe, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x9, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0xfffffeff}], '\x00\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8, 0x1}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x1b, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0x0, 0x1, 0x5, 0x30, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3c0c4abd, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 2.707492393s ago: executing program 1 (id=6908): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000011240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.519280417s ago: executing program 6 (id=6909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000070a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 2.491399084s ago: executing program 7 (id=6910): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = getpid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000200)=r5) (async) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000200)=r5) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000002800)) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) 2.371657809s ago: executing program 6 (id=6911): r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000200)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0025aef0ad02b7e6b000", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 2.339986578s ago: executing program 1 (id=6912): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r2, 0x0) shutdown(r1, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) close(0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000240)={0x0, 0x3, [@random="3a5566642e86", @random="efc1d4d5c7c8", @multicast]}) (async) r4 = socket(0x1e, 0x1, 0x0) listen(r4, 0x2000) (async) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$x25(r4, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000280)=0x100, 0x4) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x10f, 0x0, 0x5, 0x4, 0xff, @remote}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) syz_emit_ethernet(0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c2000003bfbbbbbbbbbb08004520003700000000bc019078ac1e0001ac1414aa030090781200183f2500000000680000000100007f0000017f00000100186371ae9b1cc0ba094d704659b3fa71835fcb1e772c0411eb70d7e4209cbb1c12435b45c87579529dc62aa9bd4ce988eb2dc4aa305e36f4e086d90a"], 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\'\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="04000000040000000c00000000000000000000000000000000000000078760d64fb12cbd9a72df150607a097c03c8f4b3ece1ad0db5c86fa574460d9385c303214e252127c6ea09bc93826e67e3d8ff27ebbc35d65be4656f35ea828fffffffffffffff800000000"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r0, r7}, 0xc) 2.262457464s ago: executing program 6 (id=6913): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) syz_emit_ethernet(0x45, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c6000003bbbbbbbbbbbb08004500003700000000bc019078ac1e0035b5da556cdaee545a60b7910a588cc900ac1414aa030090781200183f2500000000680000000100007f4db7017f00000100186371ae9b1c"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000280)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, 0x56}) (async) socket$kcm(0x2d, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0xa, 0x300) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) (async) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8100, 0x2, 0x1}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0x64, 0x0, 0x86, 0x2f, 0x0, @broadcast, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7f, 0x0, 0x1, 0x1, 0x7, 0xc}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x3, 0x3, 0x3, 0x5, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 2.168233289s ago: executing program 1 (id=6915): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, 0x0, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) recvmmsg$unix(r2, &(0x7f0000006200)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000006340)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000080)='virt_wifi0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r11 = socket(0x1d, 0x2, 0x6) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r13, 0x3, {0x1, 0xf0, 0x1}, 0xfe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000006a0001002abd7000fddbdf250a00000010"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.03138054s ago: executing program 6 (id=6917): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b0000020b89"], 0x20, 0x2400e044}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r12, 0x917, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r14 = socket(0x10, 0x803, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0xfff5, 0xffff}, {0x5, 0x10}}}, 0xffffffffffffffdb}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0) 1.491477437s ago: executing program 3 (id=6920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="8ed092", 0x3}], 0x1, 0x8001, 0x80) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendfile(r1, r0, 0x0, 0x101) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000340), &(0x7f0000000100)=r2}, 0x20) (async) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10) (rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[@ANYRES16=r4], 0x10448) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0xdb, &(0x7f0000000700)=""/219}, 0x94) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0xb98, 0x12) (async, rerun: 64) mkdirat$cgroup(r5, &(0x7f0000000740)='syz1\x00', 0x1ff) (async, rerun: 64) accept4(r4, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80, 0x80000) 1.491134225s ago: executing program 7 (id=6921): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 1.446697556s ago: executing program 3 (id=6922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) recvfrom$ax25(r1, &(0x7f0000000000)=""/128, 0x80, 0x2000, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x17) sendto(r1, &(0x7f0000000140)="d8e22679f5f78fb4266c64cb7969aaf62df8dbd8787b574a6e564eb1488fde1a026071f0b58404d868201b5d658c1c806057b35f5ae6192deddb1b683a525599fffc0d921962cffc0cce6d6e6051f17950424c0f22794a8a4a011f53b17eb22766f91cbe30485a28b4b96663a35522ab0f45f8627264ca8b4efcb6d3a247a62505339494591827e7", 0x88, 0x0, 0x0, 0x0) 1.231125319s ago: executing program 3 (id=6923): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001240)={0x0, 0x9, 0x101, 0x7, 0x8, 0x2, 0x4, 0xd, {0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0x8}}, 0x6c8, 0x5, 0xfffffff1, 0x3, 0x1}}, &(0x7f0000001300)=0xb0) sendmmsg$inet_sctp(r1, &(0x7f0000001380)=[{&(0x7f0000000400)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000500)="2c25f2d3d6027c51d88239ed2623571ca1525f5b8127969cd42b937ae176a537df89b03e16daa56d15737252d13e1507f05765cacfe75ebf35b493bf0e4b91201ca9ff5689f675e4171b3ef94a701452d5b7956029937f951fff069e0e", 0x5d}, {&(0x7f0000000580)="3888de30849b0450", 0x8}, {&(0x7f00000005c0)="cad458bdfd49f1887af49faca81cdd64f433a1fb1a32ecea0f6a9c4c2fc38656ac66fd658ec1eda0aab09b1360f8", 0x2e}, {&(0x7f0000000800)="dc7210b59c798e33d87d222362873d93c0827407e40cb433216e00475f94e54b0f0796cf07245e0f534cb7190f7919b4811e33ab01d88a81b66fc34ca739d6490fd322fd698322e77959563d49a5d94448a46cd46d35fafab1233cd4ad8fa5409af93c354f26e7322d84ef38bb58ef0d7e3876fc403c1f15d1ba0a6abb2012aef3252b0c699b0f8aabcf752edf941ba34f00fe7ec52a51953140c34ed917481476c7247035fdfb5f8e49026f9080dee88ef96837f505f65efd82538cdd67a4c7774fa60e", 0xc4}, {&(0x7f0000000600)="7c94de7637169abfe6ded6bb92e6a0c9c973c7a55d51fc0da6bad06b0eb4b8bf8c7f8bd753f3b4ec1c22a3fc650268f017396e80024a553b0b523bcc629ff4abde9e0052c4f7d0eb37cab5c07ec93e8d066630b22c114f3e06abf035599698ce1e104f1695af471d0691d6fdcfd3e50c4b1853e400f65cf4799ac161b6c4a0c276bb7ebcd262554f023f91633d8220bfe8975a404c1bb839f06221621eed96cc1611deafccc61c", 0xa7}, {&(0x7f0000000900)="8ac0b000d77fd7cd183122b1aba10e5991d3967a0f6e75b96673777912c682849554f5fd65ba32b9f49dbba9b8c693145bfc1c5d91155c14a20cacd68e3d42ea7ed12861aac4a82649ef8643a4b5c5a70756955ce7d9cc617ad42c0e1754cbeace6c476142fe29a32a7a4b62a915a15d84", 0x71}, {&(0x7f0000000780)="97dfdfa31935bbd1c44edee4d0d75b6619828e74de4b0d078674fa", 0x1b}], 0x7, 0x0, 0x0, 0x40000}, {&(0x7f0000000a00)=@in6={0xa, 0x4e24, 0x761c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000a40)="5f69ed7e4a1f13c3bebdf83373143b50a88c", 0x12}, {&(0x7f0000000a80)="bdf576e76482a7874d095a77005023a4644b7312cedeb562781a2b754f4600b610549766ba7ea2d3584cf972d729472ba1c9ed8411260e61ab67c9ad075ac7d55ee6d2238531419cca60222c8d3dd46f059025e57cb21ab1505cd555a692be781f4d338c1031e66182fd0f3880306952578cc7805177ba3c7bcfd83b27b3214e49dcf12c1681abdf32b134fd1e0496d17cfdab866be5904c20c547f016dbd5e370cda9f8185859df7d4c65a25b02d3c56c2c101f67670ed219d8c4a6", 0xbc}, {&(0x7f0000000b40)="59617911d7764edc8ee66f02f4", 0xd}, {&(0x7f0000000b80)="1f0460bdfc613b30fec350c5d422757145c0b1e8b2e855ac0c83e54dd086a6a599cf70e2d947c8d2e1d7e6d4e2ca77a13609ac934e9510ece85f315ef3a5f1f298add52fe46767cdfcc2595b954362f0174f42e9736492d6854eafe4e135ce103e4417bac819e690f1125ff8e9a730c0e0fac0da3c9ba7d6557eb2f99fabd72dade1aaff250886289e9044fbe48e440175327c4ba3a24f147001529b67b9e415de3708e48ecc5c4d9f9a7260309a9f1d001e6d9da52f1d3d", 0xb8}, {0x0}, {&(0x7f0000000c80)="d83b9da3879d95d40212a6", 0xb}, {&(0x7f0000000cc0)="9e785f65dbc941b22c133e9d105cc3437731a2b71d09a05bc7fd918043ab170a4a6648a0f9d1c237d18d4947538e3a93406ad7b443e954122d33b756222542d2de21c13c78af14fb0e0299972fb5cba5ba25debbb998207199a217725c5a9912b6be00f45828e2de37fe86564b47d6c323e47b256b24b4070ad655d4f5477af8a02ed4b7ae56b92449feb0d00b25bf61d7257bdff3bd7e9734ce1aea91ce5b8590db94eba2589163a8b00d75a7ebbbfb34b1e865c0a58e198157b28d8b2dc8ebae", 0xc1}, {&(0x7f0000000dc0)="33cf6e9f0c6e2fa5eb94e5375ae2cabfca0bf2aecc3e7fe93ebecf48bdc4ad12dfa0442f3ba0", 0x26}], 0x8, &(0x7f0000000e80)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @init={0x18, 0x84, 0x0, {0x5, 0xfff7, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x8000, 0xff, 0x10000, r7}}, @init={0x18, 0x84, 0x0, {0x9, 0x8, 0x6, 0x401}}, @init={0x18, 0x84, 0x0, {0x4b, 0x5, 0x3, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x8001, 0x1ff, 0x800c, 0x2, 0xffffffff, 0x6, 0x0, 0x10001}}], 0xd0, 0x4000000}, {&(0x7f0000000f80)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000fc0)="c57c21fd0fcbf13233713d00ff883b62e3cbf95065c800248a5b4f5799bd6335705a841a6aa7d8be6af37e646d96b65f4c0dfc815959f41b4663c6f4f2cdb457ca45495af737514fbf9709907fc0b78b5fecc3655da24f7b98adde54ac0d37f169755747bc6abe941ef4e3e2afdc7ea7c20ca3ce43c4808c3a860cf4bca52604f8003cdc18df20c82bb87d2d823913e37fe0c83585182b63ef0401615b9e5c65da0cfcbfe835ab47dc4bea67ef457e1787f4581a001e", 0xb6}, {&(0x7f0000001080)="64c8421ed5981eb196944bfc9586f0c4ed42dc30c93cd9d42a17f4f094a1834cbd0fbf03f5414bb1d84b5fa7616017e1a77a4a347cc64a45823802aab238a590b9eccf807b75a37d15142da4836fc6ed383cfe60c9cb6791a492f6d427a93e", 0x5f}, {&(0x7f0000001100)='-W&', 0x3}, {&(0x7f0000001140)="efec886d5e52c1bdcfbbb38b467dff4fd92b14e96ca3650c7db3020c0880583222f753f933fada645a92207aca49e82e98b4fb3613ba04a999ddf969c7e868c700eccac3d63959ac5e07c6302444d1205e9f716eeed97b168859ac386ca3743d349e3062887dff4673c3b05c9f0c7c68206afd0bede1d9ded600fd5e90da3f8707cc79897e03b0aa46a35495ddeaf6bdba", 0x91}], 0x4, &(0x7f0000001340)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8201, 0x6, 0x3, r8}}, @sndinfo={0x20, 0x84, 0x2, {0xbe, 0x8200, 0x1, 0x6}}], 0x40, 0x8000}], 0x3, 0x4800) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x1, 0x1}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "200002", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x8dffffff, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r12, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r13, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4) 1.113373498s ago: executing program 1 (id=6924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x1100000000000000) 709.438634ms ago: executing program 2 (id=6925): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xc1646000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="31305a0731298a615a6ae684010bcae3cb2b65a62916e8d391be9f787c72ac8882584313483b78677cdcabc3f44c9319eba49f85695727d242c890bc2ec4a3ab3889f4acb001ce8c6f23218f9ffe79f431585092a318d3c58e40de0075b4a8b83d14d7f98fb8234ded012e741dcbb755062fc9b66470204d0a6ad57ed9e859cf8104747555368c540f4c3ae2fad7c956f756ad2bc48a57e838e5ee72d2915c4bcfb43b8cf518", @ANYRES64=r0, @ANYBLOB="c3f88bee5dce6a46056748febd304199aac7b9d07ec19c915adbeeac6106ae192514c5ac38f1c3898b86996e3d9c0f1cc19ed5dc240cce7f334506524eaccf116e03d0fd03906dfcd8f898126afd6544a634e33162fb23f5c81620c1f5ff152d1f998d1ac5c120cb94f53211a87b62a2c9307ae33b52be8edda5b47e4e7f30615291ddc308b44c98bccbc69a3c7e3d55d0fc1024f7777822ee7626aac12d2198b9cbbb49d804000000000000008f697c5545e8498daffff9bd0e46f5af6c9b3b2922945867ca4d6d9d75a621c76c78d30587cefff63a0630eefdf31dd05572e9e27308a035bf4096e0f7ca404f71b6256916321a88bcc5597c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6d}, 0x94) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)={0x40, r4, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1000000a}]}]}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x164, r4, 0x72c185a434a5d75b, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x122ec809}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a9b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfaca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x449a3767}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2400}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29e21950}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5ab}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ab2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2998d60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46cd12d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1178}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1294}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf664}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20b75426}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe686}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f3e7e5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52fe72f5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x600a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e334aa1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67aa852d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x713961ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79f8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x2}, 0x20048890) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x60, r7, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c841}, 0xfcd0b5e774df122b) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf251800000008000300", @ANYRES32=r13, @ANYBLOB="1c00308018ef008008000100000000000c00038006000100fdff0000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xaa52048}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r11, 0x2, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1010}, 0x0) 502.434558ms ago: executing program 2 (id=6926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xc1646000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc80c0}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r6, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}}, 0x8080) socket(0x11, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0xfffe, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x1a0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x6, 0x300, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x0, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) 494.902946ms ago: executing program 7 (id=6927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xe8}}, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, r8, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@getlink={0x38, 0x12, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x180, 0x74204}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "fbaf01699113f76cdd"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000140)=0x90) (async) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6b41b1e04d3d062d45dd9dc1459"], 0xfdef) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4ea2, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r10, 0x0, 0x2f, &(0x7f00000003c0)={0xb, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4f24, @local}}}, 0x108) (async) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0x8, 0xfa04, 0xe8, 0x6c02, 0x218, 0x194, 0x194, 0x218, 0x194, 0x3, 0x0, {[{{@ip={@loopback, @broadcast, 0xff000000, 0xff000000, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x2, 0xc}, 0x0, 0xc0, 0xe8, 0x0, {0x0, 0x74020000}, [@common=@inet=@multiport={{0x50}, {0xfd, 0x8, [0x4e24, 0x4e20, 0x4e22, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e20, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e24, 0x4e22], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1], 0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfbff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @dev, 0xffffff00, 0xff000000, 'pim6reg1\x00', 'tunl0\x00', {}, {}, 0x67, 0x0, 0x23}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30}, {0xe42, 0x140, 0x1, 0x1}}, @common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0x3, 0x7, 0xc, 0x4], 0x0, 0x7}, {0x3, [0x3, 0x0, 0x2, 0x0, 0x0, 0x1], 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) (async) socket$nl_route(0x10, 0x3, 0x0) 371.457914ms ago: executing program 1 (id=6928): socket$kcm(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0) 369.048434ms ago: executing program 3 (id=6929): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x40, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000002c0)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) 265.471316ms ago: executing program 2 (id=6930): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) unshare(0x2c020400) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x204080c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 197.129483ms ago: executing program 3 (id=6931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000080a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 23.824785ms ago: executing program 3 (id=6932): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000020240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 7 (id=6933): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c01000010001307fefffffffcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0000001d000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r4, 0x4004743c, &(0x7f0000000100)) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000020950000000000001b"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x38, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.5.5834'. [ 677.699282][T25699] netlink: 'syz.2.5847': attribute type 4 has an invalid length. [ 677.771370][T25701] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5848'. [ 678.061042][T18979] svc: failed to register nfsdv3 RPC service (errno 512). [ 678.073823][T18979] svc: failed to register nfsaclv3 RPC service (errno 512). [ 678.761382][T25728] netlink: 'syz.5.5853': attribute type 9 has an invalid length. [ 679.039987][T25745] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5858'. [ 679.066086][T25745] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5858'. [ 679.193465][T25755] netlink: 'syz.1.5861': attribute type 7 has an invalid length. [ 679.205480][T25753] vlan2: entered promiscuous mode [ 679.304006][T25759] netlink: 'syz.5.5862': attribute type 1 has an invalid length. [ 679.354086][T25759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 679.424112][T25759] bond6: (slave veth6): Enslaving as an active interface with a down link [ 679.445650][T25764] IPv6: sit1: Disabled Multicast RS [ 679.462926][T25759] bond6: (slave macvlan1): Enslaving as an active interface with a down link [ 680.011411][ T5836] IPVS: starting estimator thread 0... [ 680.118272][T25786] IPVS: using max 29 ests per chain, 69600 per kthread [ 680.138830][T25791] batadv1: entered promiscuous mode [ 680.251132][T25795] netlink: 'syz.5.5873': attribute type 10 has an invalid length. [ 680.264629][T25797] __nla_validate_parse: 4 callbacks suppressed [ 680.264646][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5874'. [ 680.555298][T25818] netlink: 'syz.6.5880': attribute type 1 has an invalid length. [ 680.757286][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.796464][T25832] FAULT_INJECTION: forcing a failure. [ 680.796464][T25832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 680.811248][T25832] CPU: 0 UID: 0 PID: 25832 Comm: syz.2.5884 Not tainted syzkaller #0 PREEMPT(full) [ 680.811275][T25832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.811286][T25832] Call Trace: [ 680.811294][T25832] [ 680.811303][T25832] dump_stack_lvl+0x189/0x250 [ 680.811331][T25832] ? __pfx____ratelimit+0x10/0x10 [ 680.811357][T25832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 680.811379][T25832] ? __pfx__printk+0x10/0x10 [ 680.811400][T25832] ? fs_reclaim_acquire+0x7d/0x100 [ 680.811435][T25832] should_fail_ex+0x414/0x560 [ 680.811466][T25832] prepare_alloc_pages+0x213/0x610 [ 680.811496][T25832] __alloc_frozen_pages_noprof+0x123/0x370 [ 680.811519][T25832] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 680.811544][T25832] ? __lock_acquire+0xab9/0xd20 [ 680.811564][T25832] ? policy_nodemask+0x27c/0x720 [ 680.811588][T25832] alloc_pages_mpol+0x232/0x4a0 [ 680.811610][T25832] alloc_pages_noprof+0xa9/0x190 [ 680.811629][T25832] pte_alloc_one+0x23/0x310 [ 680.811647][T25832] ? __pte_alloc+0x1d/0x1a0 [ 680.811667][T25832] __pte_alloc+0x25/0x1a0 [ 680.811689][T25832] __handle_mm_fault+0x4985/0x5400 [ 680.811728][T25832] ? __pfx___handle_mm_fault+0x10/0x10 [ 680.811771][T25832] ? find_vma+0xe7/0x160 [ 680.811791][T25832] ? __pfx_find_vma+0x10/0x10 [ 680.811814][T25832] handle_mm_fault+0x40a/0x8e0 [ 680.811848][T25832] do_user_addr_fault+0x764/0x1380 [ 680.811882][T25832] exc_page_fault+0x82/0x100 [ 680.811903][T25832] asm_exc_page_fault+0x26/0x30 [ 680.811919][T25832] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 680.811940][T25832] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 680.811954][T25832] RSP: 0018:ffffc9000c367a18 EFLAGS: 00050206 [ 680.811971][T25832] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 680.811983][T25832] RDX: 0000000000000001 RSI: 0000200000005c80 RDI: ffffc9000c367aa0 [ 680.812000][T25832] RBP: ffffc9000c367c30 R08: ffffc9000c367ad7 R09: 1ffff9200186cf5a [ 680.812013][T25832] R10: dffffc0000000000 R11: fffff5200186cf5b R12: 0000000000000000 [ 680.812025][T25832] R13: dffffc0000000000 R14: ffffc9000c367aa0 R15: 0000200000005c80 [ 680.812056][T25832] _copy_from_user+0x7a/0xb0 [ 680.812082][T25832] ___sys_recvmsg+0x12e/0x510 [ 680.812108][T25832] ? __pfx____sys_recvmsg+0x10/0x10 [ 680.812152][T25832] ? __fget_files+0x3a0/0x420 [ 680.812180][T25832] do_recvmmsg+0x307/0x770 [ 680.812208][T25832] ? __pfx_do_recvmmsg+0x10/0x10 [ 680.812240][T25832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 680.812278][T25832] __x64_sys_recvmmsg+0x190/0x240 [ 680.812303][T25832] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 680.812328][T25832] ? do_syscall_64+0xbe/0xfa0 [ 680.812349][T25832] do_syscall_64+0xfa/0xfa0 [ 680.812365][T25832] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.812381][T25832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.812399][T25832] ? clear_bhb_loop+0x60/0xb0 [ 680.812428][T25832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.812445][T25832] RIP: 0033:0x7f358258f749 [ 680.812463][T25832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.812477][T25832] RSP: 002b:00007f35834e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 680.812495][T25832] RAX: ffffffffffffffda RBX: 00007f35827e5fa0 RCX: 00007f358258f749 [ 680.812508][T25832] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 680.812518][T25832] RBP: 00007f35834e9090 R08: 0000000000000000 R09: 0000000000000000 [ 680.812529][T25832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.812539][T25832] R13: 00007f35827e6038 R14: 00007f35827e5fa0 R15: 00007ffde6919678 [ 680.812566][T25832] [ 681.218370][T25834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.228885][T25834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.261448][T25825] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 681.276730][T25830] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 681.398096][T25844] bridge0: port 4(macvtap1) entered blocking state [ 681.405883][T25844] bridge0: port 4(macvtap1) entered disabled state [ 681.433990][T25844] macvtap1: entered allmulticast mode [ 681.476318][T25844] bridge0: entered allmulticast mode [ 681.488463][T25844] macvtap1: left allmulticast mode [ 681.494971][T25844] bridge0: left allmulticast mode [ 681.646260][T25854] netlink: 'syz.1.5890': attribute type 4 has an invalid length. [ 682.194523][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5895'. [ 682.305939][T25874] ipt_ECN: cannot use operation on non-tcp rule [ 682.523414][T25892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5902'. [ 682.617942][T25894] netlink: 'syz.6.5903': attribute type 9 has an invalid length. [ 682.776344][T25902] batadv0: left allmulticast mode [ 682.787409][T25902] vxcan0: left allmulticast mode [ 682.817433][T25902] vxcan1: left allmulticast mode [ 682.833075][T25902] wg0: left allmulticast mode [ 682.855471][T25902] wg1: left allmulticast mode [ 682.871010][T25902] wg2: left allmulticast mode [ 682.881132][T25902] veth0_to_bridge: left allmulticast mode [ 682.898154][T25902] bridge_slave_0: left allmulticast mode [ 682.904234][T25902] veth1_to_bridge: left allmulticast mode [ 682.924266][T25902] bridge_slave_1: left allmulticast mode [ 682.944361][T25902] veth0_to_bond: left allmulticast mode [ 682.964482][T25902] bond_slave_0: left allmulticast mode [ 682.970828][T25902] veth1_to_bond: left allmulticast mode [ 682.977439][T25902] bond_slave_1: left allmulticast mode [ 683.007386][T25902] veth0_to_team: left allmulticast mode [ 683.013214][T25902] team_slave_0: left allmulticast mode [ 683.067729][T25902] veth1_to_team: left allmulticast mode [ 683.073816][T25902] team_slave_1: left allmulticast mode [ 683.090507][T25902] veth0_to_batadv: left allmulticast mode [ 683.096590][T25902] batadv_slave_0: left allmulticast mode [ 683.203782][T25925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5911'. [ 683.281150][T25928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5913'. [ 683.417587][T25902] veth1_to_batadv: left allmulticast mode [ 683.424322][T25902] batadv_slave_1: left allmulticast mode [ 683.430669][T25902] xfrm0: left allmulticast mode [ 683.445441][T25902] veth0_to_hsr: left allmulticast mode [ 683.463472][T25902] veth1_to_hsr: left allmulticast mode [ 683.485826][T25902] hsr0: left allmulticast mode [ 683.502118][T25902] hsr_slave_0: left allmulticast mode [ 683.522302][T25902] hsr_slave_1: left allmulticast mode [ 683.537743][T25902] veth1_virt_wifi: left allmulticast mode [ 683.553268][T25902] veth0_virt_wifi: left allmulticast mode [ 683.568844][T25902] veth1_vlan: left allmulticast mode [ 683.585370][T25902] vlan0: left allmulticast mode [ 683.619536][T25902] vlan1: left allmulticast mode [ 683.632529][T25902] macvlan0: left allmulticast mode [ 683.654115][T25902] macvlan1: left allmulticast mode [ 683.661519][T25902] ipvlan0: left allmulticast mode [ 683.667481][T25902] ipvlan1: left allmulticast mode [ 683.672890][T25902] veth0_vlan: left allmulticast mode [ 683.698891][T25902] geneve0: left allmulticast mode [ 683.706635][T25902] geneve1: left allmulticast mode [ 683.712778][T25902] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 683.721212][T25902] mac80211_hwsim hwsim31 wlan0: left allmulticast mode [ 683.729058][T25902] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 683.736811][T25902] hsr1: left allmulticast mode [ 683.741884][T25902] ip6gretap0: left allmulticast mode [ 683.750721][T25902] veth2: left allmulticast mode [ 683.758293][T25902] veth3: left allmulticast mode [ 683.764796][T25902] ip6tnl1: left allmulticast mode [ 683.770492][T25902] bond1: left allmulticast mode [ 683.775740][T25902] vcan1: left allmulticast mode [ 683.781306][T25902] vcan2: left allmulticast mode [ 683.786427][T25902] bridge1: left allmulticast mode [ 683.792420][T25902] netdevsim netdevsim3 eth0: left allmulticast mode [ 683.805275][T25902] netdevsim netdevsim3 eth1: left allmulticast mode [ 683.813151][T25902] netdevsim netdevsim3 eth2: left allmulticast mode [ 683.820826][T25902] netdevsim netdevsim3 eth3: left allmulticast mode [ 683.829030][T25902] ip6gre1: left allmulticast mode [ 683.834648][T25902] mac80211_hwsim hwsim35 wlan2: left allmulticast mode [ 683.842464][T25902] syztnl0: left allmulticast mode [ 683.847775][T25902] bridge2: left allmulticast mode [ 683.853185][T25902] bond2: left allmulticast mode [ 683.858488][T25902] veth4: left allmulticast mode [ 683.863863][T25902] ?: left allmulticast mode [ 683.868819][T25902] gre1: left allmulticast mode [ 683.874325][T25902] macvlan2: left allmulticast mode [ 683.884481][T25902] bond3: left allmulticast mode [ 683.891121][T25902] ip6gretap1: left allmulticast mode [ 683.897364][T25902] !: left allmulticast mode [ 683.902489][T25902] : left allmulticast mode [ 683.908379][T25902] bond4: left allmulticast mode [ 683.913646][T25902] bond5: left allmulticast mode [ 683.920370][T25902] bond6: left allmulticast mode [ 683.925830][T25902] macvlan3: left allmulticast mode [ 683.935582][T25902] macvlan4: left allmulticast mode [ 683.941600][T25902] erspan1: left allmulticast mode [ 683.947751][T25902] veth1: left promiscuous mode [ 683.953191][T25902] ip6tnl2: left promiscuous mode [ 683.960101][T25902] ÿä: left allmulticast mode [ 683.965497][T25902] gtp0: left promiscuous mode [ 683.970995][T25902] gtp0: left allmulticast mode [ 684.284421][T25942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.337436][T25942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.686664][T25981] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 685.877323][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.895753][ T1303] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 686.303093][T25995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5933'. [ 686.535775][T25997] bond11: entered promiscuous mode [ 686.550882][T25997] bond11: entered allmulticast mode [ 686.569246][T25997] 8021q: adding VLAN 0 to HW filter on device bond11 [ 686.874447][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5943'. [ 687.748307][T26044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5953'. [ 688.054337][T26064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5958'. [ 688.079692][T26064] netlink: 'syz.2.5958': attribute type 7 has an invalid length. [ 688.105445][T26064] netlink: 'syz.2.5958': attribute type 8 has an invalid length. [ 688.113987][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5958'. [ 688.142186][T26044] hsr_slave_1 (unregistering): left promiscuous mode [ 688.178750][T26064] ip6gretap0: entered promiscuous mode [ 688.188235][T26064] syz_tun: entered promiscuous mode [ 688.201389][T26064] gretap0: entered promiscuous mode [ 688.211078][T26064] debugfs: 'hsr1' already exists in 'hsr' [ 688.220308][T26064] Cannot create hsr debugfs directory [ 688.454483][T26083] FAULT_INJECTION: forcing a failure. [ 688.454483][T26083] name failslab, interval 1, probability 0, space 0, times 0 [ 688.470090][T26083] CPU: 1 UID: 0 PID: 26083 Comm: syz.2.5965 Not tainted syzkaller #0 PREEMPT(full) [ 688.470117][T26083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.470129][T26083] Call Trace: [ 688.470137][T26083] [ 688.470146][T26083] dump_stack_lvl+0x189/0x250 [ 688.470175][T26083] ? __pfx____ratelimit+0x10/0x10 [ 688.470202][T26083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.470224][T26083] ? __pfx__printk+0x10/0x10 [ 688.470250][T26083] ? __pfx___might_resched+0x10/0x10 [ 688.470275][T26083] should_fail_ex+0x414/0x560 [ 688.470307][T26083] should_failslab+0xa8/0x100 [ 688.470327][T26083] kmem_cache_alloc_noprof+0x74/0x6e0 [ 688.470351][T26083] ? __anon_vma_prepare+0xcb/0x4a0 [ 688.470381][T26083] __anon_vma_prepare+0xcb/0x4a0 [ 688.470411][T26083] do_wp_page+0x3938/0x5800 [ 688.470457][T26083] ? __pfx_do_wp_page+0x10/0x10 [ 688.470474][T26083] ? do_raw_spin_lock+0x121/0x290 [ 688.470500][T26083] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 688.470534][T26083] __handle_mm_fault+0x1033/0x5400 [ 688.470574][T26083] ? __pfx___handle_mm_fault+0x10/0x10 [ 688.470614][T26083] ? find_vma+0xe7/0x160 [ 688.470636][T26083] ? __pfx_find_vma+0x10/0x10 [ 688.470661][T26083] handle_mm_fault+0x40a/0x8e0 [ 688.470695][T26083] do_user_addr_fault+0x764/0x1380 [ 688.470731][T26083] exc_page_fault+0x82/0x100 [ 688.470753][T26083] asm_exc_page_fault+0x26/0x30 [ 688.470770][T26083] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 688.470789][T26083] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 67 03 00 90 90 90 90 90 90 90 90 90 90 [ 688.470804][T26083] RSP: 0018:ffffc9001247f8b8 EFLAGS: 00050246 [ 688.470822][T26083] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000005cb0 [ 688.470834][T26083] RDX: ffff8880305e8000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 688.470847][T26083] RBP: ffffc9001247fa30 R08: ffffffff8f7cfe77 R09: 1ffffffff1ef9fce [ 688.470860][T26083] R10: dffffc0000000000 R11: fffffbfff1ef9fcf R12: 0000000000000000 [ 688.470878][T26083] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000005c80 [ 688.470910][T26083] ____sys_recvmsg+0x2ab/0x460 [ 688.470947][T26083] ? __pfx_____sys_recvmsg+0x10/0x10 [ 688.470986][T26083] ? import_iovec+0x74/0xa0 [ 688.471011][T26083] ___sys_recvmsg+0x1b5/0x510 [ 688.471038][T26083] ? __pfx____sys_recvmsg+0x10/0x10 [ 688.471087][T26083] ? __fget_files+0x3a0/0x420 [ 688.471116][T26083] do_recvmmsg+0x307/0x770 [ 688.471147][T26083] ? __pfx_do_recvmmsg+0x10/0x10 [ 688.471181][T26083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.471219][T26083] __x64_sys_recvmmsg+0x190/0x240 [ 688.471243][T26083] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 688.471269][T26083] ? do_syscall_64+0xbe/0xfa0 [ 688.471291][T26083] do_syscall_64+0xfa/0xfa0 [ 688.471307][T26083] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.471324][T26083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.471342][T26083] ? clear_bhb_loop+0x60/0xb0 [ 688.471364][T26083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.471381][T26083] RIP: 0033:0x7f358258f749 [ 688.471397][T26083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.471411][T26083] RSP: 002b:00007f35834e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 688.471429][T26083] RAX: ffffffffffffffda RBX: 00007f35827e5fa0 RCX: 00007f358258f749 [ 688.471442][T26083] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 688.471454][T26083] RBP: 00007f35834e9090 R08: 0000000000000000 R09: 0000000000000000 [ 688.471466][T26083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.471477][T26083] R13: 00007f35827e6038 R14: 00007f35827e5fa0 R15: 00007ffde6919678 [ 688.471510][T26083] [ 689.932873][T26107] @ÿ: renamed from hsr0 [ 689.996870][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5972'. [ 690.338701][T26123] FAULT_INJECTION: forcing a failure. [ 690.338701][T26123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 690.392576][T26125] netlink: 'syz.2.5977': attribute type 9 has an invalid length. [ 690.394508][T26123] CPU: 0 UID: 0 PID: 26123 Comm: syz.5.5976 Not tainted syzkaller #0 PREEMPT(full) [ 690.394532][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 690.394541][T26123] Call Trace: [ 690.394548][T26123] [ 690.394556][T26123] dump_stack_lvl+0x189/0x250 [ 690.394584][T26123] ? __pfx____ratelimit+0x10/0x10 [ 690.394608][T26123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.394630][T26123] ? __pfx__printk+0x10/0x10 [ 690.394650][T26123] ? fs_reclaim_acquire+0x7d/0x100 [ 690.394676][T26123] should_fail_ex+0x414/0x560 [ 690.394705][T26123] prepare_alloc_pages+0x213/0x610 [ 690.394739][T26123] __alloc_frozen_pages_noprof+0x123/0x370 [ 690.394757][T26123] ? rcu_is_watching+0x15/0xb0 [ 690.394779][T26123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 690.394795][T26123] ? __alloc_skb+0x27e/0x430 [ 690.394822][T26123] ? policy_nodemask+0x27c/0x720 [ 690.394845][T26123] alloc_pages_mpol+0x232/0x4a0 [ 690.394868][T26123] alloc_pages_noprof+0xa9/0x190 [ 690.394887][T26123] alloc_skb_with_frags+0x233/0x890 [ 690.394911][T26123] ? __lock_acquire+0xab9/0xd20 [ 690.394935][T26123] sock_alloc_send_pskb+0x84d/0x980 [ 690.394980][T26123] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 690.395017][T26123] tun_get_user+0xa43/0x3e90 [ 690.395058][T26123] ? aa_file_perm+0x44d/0x1550 [ 690.395075][T26123] ? __pfx_tun_get_user+0x10/0x10 [ 690.395093][T26123] ? _parse_integer_limit+0x1ae/0x1f0 [ 690.395119][T26123] ? __lock_acquire+0xab9/0xd20 [ 690.395141][T26123] ? ref_tracker_alloc+0x318/0x460 [ 690.395156][T26123] ? __lock_acquire+0xab9/0xd20 [ 690.395174][T26123] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 690.395197][T26123] ? tun_get+0x1c/0x2f0 [ 690.395221][T26123] ? tun_get+0x1c/0x2f0 [ 690.395240][T26123] ? tun_get+0x1c/0x2f0 [ 690.395264][T26123] tun_chr_write_iter+0x113/0x200 [ 690.395287][T26123] vfs_write+0x5c9/0xb30 [ 690.395315][T26123] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 690.395335][T26123] ? __pfx_vfs_write+0x10/0x10 [ 690.395367][T26123] ? __fget_files+0x2a/0x420 [ 690.395393][T26123] ksys_write+0x145/0x250 [ 690.395418][T26123] ? __pfx_ksys_write+0x10/0x10 [ 690.395443][T26123] ? do_syscall_64+0xbe/0xfa0 [ 690.395464][T26123] do_syscall_64+0xfa/0xfa0 [ 690.395479][T26123] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.395496][T26123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.395513][T26123] ? clear_bhb_loop+0x60/0xb0 [ 690.395538][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.395555][T26123] RIP: 0033:0x7f122d18e1ff [ 690.395572][T26123] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 690.395586][T26123] RSP: 002b:00007f122b3f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 690.395606][T26123] RAX: ffffffffffffffda RBX: 00007f122d3e6090 RCX: 00007f122d18e1ff [ 690.395618][T26123] RDX: 000000000000101a RSI: 0000200000000a00 RDI: 00000000000000c8 [ 690.395630][T26123] RBP: 00007f122b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 690.395640][T26123] R10: 000000000000101a R11: 0000000000000293 R12: 0000000000000001 [ 690.395651][T26123] R13: 00007f122d3e6128 R14: 00007f122d3e6090 R15: 00007fffa2b30518 [ 690.395682][T26123] [ 690.474511][T26131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5978'. [ 690.910321][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5980'. [ 691.093189][T26146] netlink: 173 bytes leftover after parsing attributes in process `syz.5.5984'. [ 692.749254][T26183] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5995'. [ 692.785967][T26183] netlink: 'syz.5.5995': attribute type 7 has an invalid length. [ 692.817390][T26183] netlink: 'syz.5.5995': attribute type 8 has an invalid length. [ 692.842431][T26185] netlink: 'syz.6.5996': attribute type 1 has an invalid length. [ 692.848257][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5995'. [ 692.983451][T26185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 693.112727][T26187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 693.130735][T26187] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 693.164235][T26187] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 693.198037][T26190] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5997'. [ 693.210791][T26188] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 693.473623][T26193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5998'. [ 693.744778][T26198] netlink: 'syz.5.6000': attribute type 4 has an invalid length. [ 694.952938][T26217] FAULT_INJECTION: forcing a failure. [ 694.952938][T26217] name failslab, interval 1, probability 0, space 0, times 0 [ 694.970680][T26217] CPU: 0 UID: 0 PID: 26217 Comm: syz.6.6004 Not tainted syzkaller #0 PREEMPT(full) [ 694.970707][T26217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 694.970716][T26217] Call Trace: [ 694.970723][T26217] [ 694.970731][T26217] dump_stack_lvl+0x189/0x250 [ 694.970760][T26217] ? __pfx____ratelimit+0x10/0x10 [ 694.970786][T26217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.970808][T26217] ? __pfx__printk+0x10/0x10 [ 694.970829][T26217] ? __pfx___might_resched+0x10/0x10 [ 694.970847][T26217] ? fs_reclaim_acquire+0x7d/0x100 [ 694.970867][T26217] should_fail_ex+0x414/0x560 [ 694.970896][T26217] should_failslab+0xa8/0x100 [ 694.970916][T26217] kmem_cache_alloc_node_noprof+0x77/0x710 [ 694.970939][T26217] ? __alloc_skb+0x255/0x430 [ 694.970953][T26217] ? napi_skb_cache_get+0x445/0x6e0 [ 694.970967][T26217] ? napi_skb_cache_get+0x151/0x6e0 [ 694.970987][T26217] __alloc_skb+0x255/0x430 [ 694.971006][T26217] ? __pfx___alloc_skb+0x10/0x10 [ 694.971023][T26217] ? nf_tables_deltable+0x81d/0xe10 [ 694.971048][T26217] ? netlink_ack_tlv_len+0x6c/0x210 [ 694.971071][T26217] netlink_ack+0x146/0xa50 [ 694.971108][T26217] nfnetlink_rcv+0x2309/0x2590 [ 694.971176][T26217] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 694.971212][T26217] ? ref_tracker_free+0x63a/0x7d0 [ 694.971259][T26217] ? __netlink_deliver_tap+0x807/0x850 [ 694.971277][T26217] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.971315][T26217] netlink_unicast+0x82f/0x9e0 [ 694.971354][T26217] ? __pfx_netlink_unicast+0x10/0x10 [ 694.971382][T26217] ? netlink_sendmsg+0x642/0xb30 [ 694.971398][T26217] ? skb_put+0x11b/0x210 [ 694.971417][T26217] netlink_sendmsg+0x805/0xb30 [ 694.971446][T26217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.971469][T26217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 694.971496][T26217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.971514][T26217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.971534][T26217] __sock_sendmsg+0x21c/0x270 [ 694.971561][T26217] ____sys_sendmsg+0x505/0x830 [ 694.971588][T26217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.971618][T26217] ? import_iovec+0x74/0xa0 [ 694.971644][T26217] ___sys_sendmsg+0x21f/0x2a0 [ 694.971663][T26217] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.971720][T26217] ? __fget_files+0x2a/0x420 [ 694.971737][T26217] ? __fget_files+0x3a0/0x420 [ 694.971764][T26217] __x64_sys_sendmsg+0x19b/0x260 [ 694.971788][T26217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.971815][T26217] ? __pfx_ksys_write+0x10/0x10 [ 694.971842][T26217] ? do_syscall_64+0xbe/0xfa0 [ 694.971864][T26217] do_syscall_64+0xfa/0xfa0 [ 694.971880][T26217] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.971898][T26217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.971916][T26217] ? clear_bhb_loop+0x60/0xb0 [ 694.971937][T26217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.971954][T26217] RIP: 0033:0x7f9fe198f749 [ 694.971971][T26217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.971986][T26217] RSP: 002b:00007f9fe27e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.972007][T26217] RAX: ffffffffffffffda RBX: 00007f9fe1be5fa0 RCX: 00007f9fe198f749 [ 694.972020][T26217] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 694.972032][T26217] RBP: 00007f9fe27e0090 R08: 0000000000000000 R09: 0000000000000000 [ 694.972044][T26217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.972055][T26217] R13: 00007f9fe1be6038 R14: 00007f9fe1be5fa0 R15: 00007ffde8c3e258 [ 694.972083][T26217] [ 695.453539][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6006'. [ 695.551726][T26221] netlink: 'syz.1.6007': attribute type 4 has an invalid length. [ 695.708911][T26226] ip6tnl1: entered promiscuous mode [ 695.716558][T26229] tipc: Enabling of bearer rejected, failed to enable media [ 695.804629][T26231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6009'. [ 695.880670][T26226] veth3: entered promiscuous mode [ 695.929059][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c82c00: rx timeout, send abort [ 696.427662][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c83000: rx timeout, send abort [ 696.438196][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c82c00: abort rx timeout. Force session deactivation [ 696.578842][T26261] batadv0: entered promiscuous mode [ 696.587437][T26261] macvtap1: entered promiscuous mode [ 696.602925][T26261] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 696.706953][T26265] netlink: 'syz.3.6023': attribute type 4 has an invalid length. [ 696.936341][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054c83000: abort rx timeout. Force session deactivation [ 697.297248][T26284] ipt_ECN: cannot use operation on non-tcp rule [ 697.653319][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6031'. [ 697.698945][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6031'. [ 697.727336][T26287] netlink: 'syz.3.6031': attribute type 19 has an invalid length. [ 697.746351][T26287] netlink: 'syz.3.6031': attribute type 20 has an invalid length. [ 697.941041][T26294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6035'. [ 697.962503][T26296] netlink: 'syz.2.6034': attribute type 21 has an invalid length. [ 697.989960][T26296] netlink: 'syz.2.6034': attribute type 6 has an invalid length. [ 698.014869][T26296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6034'. [ 698.188314][T26304] openvswitch: netlink: Unknown nsh attribute 0 [ 698.207381][T26304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.376534][T26312] bond0: Device is already in use. [ 698.770859][T26294] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 698.912083][T26332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6047'. [ 698.942006][T26332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6047'. [ 699.020334][T26332] bridge0: entered promiscuous mode [ 699.108972][T26332] bridge0: left promiscuous mode [ 699.333795][T26349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 699.525436][T26360] netlink: 'syz.3.6059': attribute type 4 has an invalid length. [ 699.556566][T26361] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6058'. [ 699.610374][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6060'. [ 699.622078][T26363] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6060'. [ 699.737842][T26369] tipc: Enabling of bearer rejected, failed to enable media [ 700.585385][T26403] netlink: 'syz.1.6071': attribute type 4 has an invalid length. [ 700.697332][T26405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6072'. [ 700.886261][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6076'. [ 701.172314][T26421] pim6reg1: entered promiscuous mode [ 701.178511][T26421] pim6reg1: entered allmulticast mode [ 701.329998][T26433] netlink: 'syz.6.6082': attribute type 4 has an invalid length. [ 701.407278][T26438] netlink: 'syz.3.6084': attribute type 7 has an invalid length. [ 701.439334][T26438] netlink: 'syz.3.6084': attribute type 8 has an invalid length. [ 701.805272][T26450] netlink: 'syz.6.6088': attribute type 1 has an invalid length. [ 701.900417][T26450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 701.939239][T26452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 701.946764][T26452] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 701.960062][T26452] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 702.011876][T26450] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 702.298804][T26469] vlan2: entered promiscuous mode [ 704.276782][T19284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.292355][T19284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.302070][T19284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.310705][T19284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.321152][T19284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.485231][T26527] tipc: Enabling of bearer rejected, failed to enable media [ 705.278876][T26522] chnl_net:caif_netlink_parms(): no params data found [ 705.566708][T26522] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.579327][T26522] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.594754][T26522] bridge_slave_0: entered allmulticast mode [ 705.612193][T26522] bridge_slave_0: entered promiscuous mode [ 705.734551][T26522] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.756552][T26522] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.779740][T26522] bridge_slave_1: entered allmulticast mode [ 705.794916][T26522] bridge_slave_1: entered promiscuous mode [ 705.875518][T26522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.968374][T26572] FAULT_INJECTION: forcing a failure. [ 705.968374][T26572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.983018][T26572] CPU: 0 UID: 0 PID: 26572 Comm: syz.1.6121 Not tainted syzkaller #0 PREEMPT(full) [ 705.983067][T26572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.983078][T26572] Call Trace: [ 705.983086][T26572] [ 705.983094][T26572] dump_stack_lvl+0x189/0x250 [ 705.983122][T26572] ? __pfx____ratelimit+0x10/0x10 [ 705.983148][T26572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.983171][T26572] ? __pfx__printk+0x10/0x10 [ 705.983189][T26572] ? __might_fault+0xb0/0x130 [ 705.983224][T26572] should_fail_ex+0x414/0x560 [ 705.983251][T26572] _copy_from_user+0x2d/0xb0 [ 705.983272][T26572] ___sys_recvmsg+0x12e/0x510 [ 705.983297][T26572] ? __pfx____sys_recvmsg+0x10/0x10 [ 705.983347][T26572] ? __might_fault+0xb0/0x130 [ 705.983373][T26572] do_recvmmsg+0x307/0x770 [ 705.983408][T26572] ? __pfx_do_recvmmsg+0x10/0x10 [ 705.983440][T26572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 705.983477][T26572] __x64_sys_recvmmsg+0x190/0x240 [ 705.983501][T26572] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 705.983527][T26572] ? do_syscall_64+0xbe/0xfa0 [ 705.983549][T26572] do_syscall_64+0xfa/0xfa0 [ 705.983573][T26572] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.983590][T26572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.983608][T26572] ? clear_bhb_loop+0x60/0xb0 [ 705.983629][T26572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.983646][T26572] RIP: 0033:0x7fec14d8f749 [ 705.983662][T26572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.983677][T26572] RSP: 002b:00007fec12ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 705.983697][T26572] RAX: ffffffffffffffda RBX: 00007fec14fe5fa0 RCX: 00007fec14d8f749 [ 705.983711][T26572] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 705.983723][T26572] RBP: 00007fec12ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 705.983734][T26572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.983745][T26572] R13: 00007fec14fe6038 R14: 00007fec14fe5fa0 R15: 00007fff705928c8 [ 705.983776][T26572] [ 706.275187][T26522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.459465][T26522] team0: Port device team_slave_0 added [ 706.465817][T26584] netlink: 'syz.1.6126': attribute type 1 has an invalid length. [ 706.496020][T26522] team0: Port device team_slave_1 added [ 706.521482][ T5148] Bluetooth: hci2: command tx timeout [ 706.640406][T26584] 8021q: adding VLAN 0 to HW filter on device bond11 [ 706.715753][T26586] 8021q: adding VLAN 0 to HW filter on device bond11 [ 706.724189][T26586] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 706.739802][T26586] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 706.796934][T26589] bond11: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 706.851570][T26588] __nla_validate_parse: 7 callbacks suppressed [ 706.851587][T26588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6127'. [ 706.874629][T26522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.883372][T26522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.914015][T26522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.948031][T26522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.955807][T26522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.985498][T26522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.006590][T26588] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 707.116842][T26522] hsr_slave_0: entered promiscuous mode [ 707.139415][T26522] hsr_slave_1: entered promiscuous mode [ 707.156281][T26522] debugfs: 'hsr0' already exists in 'hsr' [ 707.164182][T26522] Cannot create hsr debugfs directory [ 708.256465][T26522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 708.274437][T26522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 708.303837][T26522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 708.334102][T26522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 708.554203][T26522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.598028][ T5148] Bluetooth: hci2: command tx timeout [ 708.622167][T26522] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.656664][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.664636][ T8065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.695295][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.703840][ T8065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.088151][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 709.211617][T26664] geneve2: entered promiscuous mode [ 709.396992][T26522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.510726][T26675] netlink: 15028 bytes leftover after parsing attributes in process `syz.1.6145'. [ 709.546088][T26522] veth0_vlan: entered promiscuous mode [ 709.634534][T26522] veth1_vlan: entered promiscuous mode [ 709.811859][T26522] veth0_macvtap: entered promiscuous mode [ 709.828928][T26522] veth1_macvtap: entered promiscuous mode [ 709.884976][T26522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.913147][T26522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.953918][ T8065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.979179][ T8065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.016196][ T8065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.043829][ T8065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.265275][T26680] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6146'. [ 710.415263][ T8061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.434329][ T8061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.499132][ T8065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.509003][ T8065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.542330][T26688] netlink: zone id is out of range [ 710.548447][T26688] netlink: zone id is out of range [ 710.553751][T26688] netlink: zone id is out of range [ 710.559487][T26688] netlink: zone id is out of range [ 710.565215][T26688] netlink: zone id is out of range [ 710.573169][T26688] netlink: zone id is out of range [ 710.582724][T26688] netlink: zone id is out of range [ 710.588687][T26688] netlink: zone id is out of range [ 710.594349][T26688] netlink: zone id is out of range [ 710.615536][T26691] netlink: 'syz.1.6150': attribute type 1 has an invalid length. [ 710.633687][T26688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6149'. [ 710.668075][T26691] 8021q: adding VLAN 0 to HW filter on device bond12 [ 710.686878][T26690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6149'. [ 710.691206][ T5148] Bluetooth: hci2: command tx timeout [ 710.777549][T26696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6151'. [ 711.262932][T26707] FAULT_INJECTION: forcing a failure. [ 711.262932][T26707] name failslab, interval 1, probability 0, space 0, times 0 [ 711.278916][T12979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.288212][T26707] CPU: 1 UID: 0 PID: 26707 Comm: syz.6.6156 Not tainted syzkaller #0 PREEMPT(full) [ 711.288244][T26707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.288256][T26707] Call Trace: [ 711.288264][T26707] [ 711.288273][T26707] dump_stack_lvl+0x189/0x250 [ 711.288303][T26707] ? __pfx____ratelimit+0x10/0x10 [ 711.288327][T26707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.288349][T26707] ? __pfx__printk+0x10/0x10 [ 711.288370][T26707] ? __pfx___might_resched+0x10/0x10 [ 711.288389][T26707] ? fs_reclaim_acquire+0x7d/0x100 [ 711.288411][T26707] should_fail_ex+0x414/0x560 [ 711.288440][T26707] should_failslab+0xa8/0x100 [ 711.288459][T26707] kmem_cache_alloc_noprof+0x74/0x6e0 [ 711.288482][T26707] ? security_inode_alloc+0x39/0x330 [ 711.288510][T26707] security_inode_alloc+0x39/0x330 [ 711.288537][T26707] inode_init_always_gfp+0x9ed/0xdc0 [ 711.288567][T26707] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 711.288585][T26707] alloc_inode+0x82/0x1b0 [ 711.288609][T26707] new_inode+0x22/0x170 [ 711.288625][T26707] ? resv_map_alloc+0x1da/0x2c0 [ 711.288649][T26707] hugetlbfs_get_inode+0x80/0x660 [ 711.288675][T26707] ? fput+0xa0/0xd0 [ 711.288697][T26707] hugetlb_file_setup+0x21d/0x630 [ 711.288724][T26707] ksys_mmap_pgoff+0x22f/0x760 [ 711.288754][T26707] do_syscall_64+0xfa/0xfa0 [ 711.288771][T26707] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.288789][T26707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.288807][T26707] ? clear_bhb_loop+0x60/0xb0 [ 711.288827][T26707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.288844][T26707] RIP: 0033:0x7f9fe198f749 [ 711.288861][T26707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.288876][T26707] RSP: 002b:00007f9fe27e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 711.288897][T26707] RAX: ffffffffffffffda RBX: 00007f9fe1be5fa0 RCX: 00007f9fe198f749 [ 711.288911][T26707] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 711.288924][T26707] RBP: 00007f9fe27e0090 R08: ffffffffffffffff R09: 0000000000000000 [ 711.288934][T26707] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000001 [ 711.288945][T26707] R13: 00007f9fe1be6038 R14: 00007f9fe1be5fa0 R15: 00007ffde8c3e258 [ 711.288982][T26707] [ 711.572403][T26707] ip6gre1: entered allmulticast mode [ 711.831343][T26722] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6161'. [ 711.916422][T26726] bridge0: entered promiscuous mode [ 711.939253][T26726] bridge0: port 4(macvtap2) entered blocking state [ 711.987612][T26726] bridge0: port 4(macvtap2) entered disabled state [ 711.994800][T26726] macvtap2: entered allmulticast mode [ 712.001474][T26726] bridge0: entered allmulticast mode [ 712.010186][T26726] macvtap2: left allmulticast mode [ 712.027279][T26726] bridge0: left allmulticast mode [ 712.037763][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.062946][T26726] bridge0: left promiscuous mode [ 712.105230][T26730] net_ratelimit: 9 callbacks suppressed [ 712.105250][T26730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.132968][T26732] netlink: 'syz.2.6163': attribute type 10 has an invalid length. [ 712.154935][T26732] team0: Port device dummy0 added [ 712.451389][T26748] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6168'. [ 712.759714][ T5148] Bluetooth: hci2: command tx timeout [ 712.882429][T26771] netlink: zone id is out of range [ 712.888827][T26771] netlink: zone id is out of range [ 712.894652][T26771] netlink: set zone limit has 8 unknown bytes [ 713.209898][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6177'. [ 713.359984][T26792] Cannot find add_set index 0 as target [ 713.423823][T26795] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 713.460760][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6181'. [ 713.676300][T26806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6184'. [ 713.991554][T26818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6189'. [ 714.003544][T26818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6189'. [ 714.092350][T26822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6190'. [ 715.125793][T26846] tipc: Resetting bearer [ 715.150501][T26846] tipc: Resetting bearer [ 715.315159][T26853] netlink: 'syz.6.6200': attribute type 4 has an invalid length. [ 715.420430][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6201'. [ 715.441631][T26855] dummy0: entered promiscuous mode [ 715.454434][T26855] dummy0: left promiscuous mode [ 715.618776][T26859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6203'. [ 715.629282][T26859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6203'. [ 715.646494][T26859] bridge0: entered promiscuous mode [ 715.662778][T26859] bridge0: left promiscuous mode [ 715.872513][T26864] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.880580][T26864] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.998841][T26864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.022802][T26864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.198872][T26864] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 716.236867][T26864] ip6tnl1: left promiscuous mode [ 716.247945][T26864] veth3: left promiscuous mode [ 716.255299][T26864] macvtap1: left promiscuous mode [ 716.271979][T26864] geneve2: left promiscuous mode [ 716.311121][T26864] ip6gre1: left allmulticast mode [ 716.492275][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.518720][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.551069][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.577240][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.756751][T26882] netlink: 'syz.2.6211': attribute type 4 has an invalid length. [ 717.046090][ T5148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 717.060220][ T5148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 717.075027][ T5148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 717.096997][ T5148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 717.105250][ T5148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 717.223075][T26899] syzkaller1: entered allmulticast mode [ 717.620147][T26915] netlink: 'syz.6.6220': attribute type 1 has an invalid length. [ 717.644272][T26928] netlink: 'syz.3.6221': attribute type 4 has an invalid length. [ 717.657758][T26917] __nla_validate_parse: 5 callbacks suppressed [ 717.657775][T26917] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6220'. [ 717.852665][T26931] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 718.298257][T26891] chnl_net:caif_netlink_parms(): no params data found [ 718.398866][T26948] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6226'. [ 718.487978][T26960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6229'. [ 718.496936][T26964] netlink: 165 bytes leftover after parsing attributes in process `syz.6.6224'. [ 718.546663][T26952] xt_l2tp: missing protocol rule (udp|l2tpip) [ 718.681470][T26891] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.714676][T26891] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.748401][T26891] bridge_slave_0: entered allmulticast mode [ 718.760820][T26891] bridge_slave_0: entered promiscuous mode [ 718.786977][T26974] netlink: 'syz.3.6230': attribute type 1 has an invalid length. [ 718.797617][T26891] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.804876][T26891] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.812882][T26891] bridge_slave_1: entered allmulticast mode [ 718.869834][T26891] bridge_slave_1: entered promiscuous mode [ 718.960236][T26985] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6235'. [ 719.022012][T26977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6233'. [ 719.057344][T26974] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 719.080946][T26891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.110842][T26891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.157918][ T5148] Bluetooth: hci7: command tx timeout [ 719.211679][T26891] team0: Port device team_slave_0 added [ 719.228470][T26891] team0: Port device team_slave_1 added [ 719.330827][T26891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.364363][T26891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.407340][T26891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.420567][T26891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.434420][T26891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.462898][T26891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.549555][T26891] hsr_slave_0: entered promiscuous mode [ 719.557440][T26891] hsr_slave_1: entered promiscuous mode [ 719.564682][T26891] debugfs: 'hsr0' already exists in 'hsr' [ 719.571884][T26891] Cannot create hsr debugfs directory [ 719.572190][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6245'. [ 719.864955][T27027] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6249'. [ 720.213205][T27038] netlink: 'syz.2.6253': attribute type 2 has an invalid length. [ 720.334266][T27038] @„;: entered promiscuous mode [ 720.500528][T27048] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6256'. [ 720.509884][T27048] FAULT_INJECTION: forcing a failure. [ 720.509884][T27048] name failslab, interval 1, probability 0, space 0, times 0 [ 720.525043][T26891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 720.537866][T27048] CPU: 1 UID: 0 PID: 27048 Comm: syz.2.6256 Not tainted syzkaller #0 PREEMPT(full) [ 720.537891][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 720.537902][T27048] Call Trace: [ 720.537909][T27048] [ 720.537917][T27048] dump_stack_lvl+0x189/0x250 [ 720.537942][T27048] ? __pfx____ratelimit+0x10/0x10 [ 720.537965][T27048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.537985][T27048] ? __pfx__printk+0x10/0x10 [ 720.538003][T27048] ? __pfx___might_resched+0x10/0x10 [ 720.538021][T27048] ? fs_reclaim_acquire+0x7d/0x100 [ 720.538043][T27048] should_fail_ex+0x414/0x560 [ 720.538073][T27048] should_failslab+0xa8/0x100 [ 720.538093][T27048] kmem_cache_alloc_node_noprof+0x77/0x710 [ 720.538115][T27048] ? __alloc_skb+0x255/0x430 [ 720.538131][T27048] ? napi_skb_cache_get+0x445/0x6e0 [ 720.538144][T27048] ? napi_skb_cache_get+0x151/0x6e0 [ 720.538162][T27048] __alloc_skb+0x255/0x430 [ 720.538180][T27048] ? __pfx___alloc_skb+0x10/0x10 [ 720.538203][T27048] ? netlink_ack_tlv_len+0x6c/0x210 [ 720.538224][T27048] netlink_ack+0x146/0xa50 [ 720.538243][T27048] ? rcu_is_watching+0x15/0xb0 [ 720.538262][T27048] ? trace_contention_end+0x39/0x120 [ 720.538292][T27048] netlink_rcv_skb+0x28c/0x470 [ 720.538322][T27048] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 720.538346][T27048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 720.538379][T27048] ? netlink_deliver_tap+0x2e/0x1b0 [ 720.538398][T27048] ? netlink_deliver_tap+0x2e/0x1b0 [ 720.538419][T27048] xfrm_netlink_rcv+0x79/0x90 [ 720.538440][T27048] netlink_unicast+0x82f/0x9e0 [ 720.538474][T27048] ? __pfx_netlink_unicast+0x10/0x10 [ 720.538500][T27048] ? netlink_sendmsg+0x642/0xb30 [ 720.538516][T27048] ? skb_put+0x11b/0x210 [ 720.538537][T27048] netlink_sendmsg+0x805/0xb30 [ 720.538565][T27048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.538587][T27048] ? aa_sock_msg_perm+0xf1/0x1d0 [ 720.538612][T27048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 720.538629][T27048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.538648][T27048] __sock_sendmsg+0x21c/0x270 [ 720.538674][T27048] ____sys_sendmsg+0x505/0x830 [ 720.538699][T27048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.538728][T27048] ? import_iovec+0x74/0xa0 [ 720.538752][T27048] ___sys_sendmsg+0x21f/0x2a0 [ 720.538773][T27048] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.538829][T27048] ? __fget_files+0x2a/0x420 [ 720.538844][T27048] ? __fget_files+0x3a0/0x420 [ 720.538872][T27048] __x64_sys_sendmsg+0x19b/0x260 [ 720.538893][T27048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 720.538922][T27048] ? __pfx_ksys_write+0x10/0x10 [ 720.538948][T27048] ? do_syscall_64+0xbe/0xfa0 [ 720.538968][T27048] do_syscall_64+0xfa/0xfa0 [ 720.538983][T27048] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.539000][T27048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.539017][T27048] ? clear_bhb_loop+0x60/0xb0 [ 720.539038][T27048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.539054][T27048] RIP: 0033:0x7f358258f749 [ 720.539072][T27048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.539086][T27048] RSP: 002b:00007f35834e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.539105][T27048] RAX: ffffffffffffffda RBX: 00007f35827e5fa0 RCX: 00007f358258f749 [ 720.539118][T27048] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 720.539129][T27048] RBP: 00007f35834e9090 R08: 0000000000000000 R09: 0000000000000000 [ 720.539140][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.539150][T27048] R13: 00007f35827e6038 R14: 00007f35827e5fa0 R15: 00007ffde6919678 [ 720.539182][T27048] [ 720.903542][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6247'. [ 720.997575][T26891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 721.104072][T26891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 721.216235][T26891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 721.237908][ T5148] Bluetooth: hci7: command tx timeout [ 721.776292][T26891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.855269][T26891] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.884526][T27094] netlink: 'syz.2.6268': attribute type 13 has an invalid length. [ 721.895480][T27094] netlink: 'syz.2.6268': attribute type 17 has an invalid length. [ 721.990352][T27094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 722.109338][T27104] bridge0: port 1(macvtap1) entered blocking state [ 722.118359][T27104] bridge0: port 1(macvtap1) entered disabled state [ 722.126259][T27104] macvtap1: entered allmulticast mode [ 722.132187][T27104] bridge0: entered allmulticast mode [ 722.153226][T27104] macvtap1: left allmulticast mode [ 722.158867][T27104] bridge0: left allmulticast mode [ 722.203101][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.210540][ T8061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.229061][T27113] FAULT_INJECTION: forcing a failure. [ 722.229061][T27113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.254779][T27113] CPU: 1 UID: 0 PID: 27113 Comm: syz.3.6273 Not tainted syzkaller #0 PREEMPT(full) [ 722.254805][T27113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.254817][T27113] Call Trace: [ 722.254824][T27113] [ 722.254833][T27113] dump_stack_lvl+0x189/0x250 [ 722.254861][T27113] ? __pfx____ratelimit+0x10/0x10 [ 722.254886][T27113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.254908][T27113] ? __pfx__printk+0x10/0x10 [ 722.254927][T27113] ? __might_fault+0xb0/0x130 [ 722.254961][T27113] should_fail_ex+0x414/0x560 [ 722.254992][T27113] _copy_from_user+0x2d/0xb0 [ 722.255014][T27113] ___sys_recvmsg+0x12e/0x510 [ 722.255042][T27113] ? __pfx____sys_recvmsg+0x10/0x10 [ 722.255088][T27113] ? __fget_files+0x3a0/0x420 [ 722.255117][T27113] do_recvmmsg+0x307/0x770 [ 722.255147][T27113] ? __pfx_do_recvmmsg+0x10/0x10 [ 722.255188][T27113] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 722.255224][T27113] __x64_sys_recvmmsg+0x190/0x240 [ 722.255248][T27113] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 722.255273][T27113] ? do_syscall_64+0xbe/0xfa0 [ 722.255294][T27113] do_syscall_64+0xfa/0xfa0 [ 722.255310][T27113] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.255326][T27113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.255343][T27113] ? clear_bhb_loop+0x60/0xb0 [ 722.255365][T27113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.255382][T27113] RIP: 0033:0x7f879d98f749 [ 722.255398][T27113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.255411][T27113] RSP: 002b:00007f879e7d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 722.255428][T27113] RAX: ffffffffffffffda RBX: 00007f879dbe5fa0 RCX: 00007f879d98f749 [ 722.255437][T27113] RDX: 0000000000000001 RSI: 0000200000004600 RDI: 0000000000000004 [ 722.255447][T27113] RBP: 00007f879e7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 722.255458][T27113] R10: 0000000020001000 R11: 0000000000000246 R12: 0000000000000001 [ 722.255469][T27113] R13: 00007f879dbe6038 R14: 00007f879dbe5fa0 R15: 00007fff6d72f378 [ 722.255499][T27113] [ 722.518392][T27111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.649280][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.656716][ T8061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.680791][T27115] batadv0: entered allmulticast mode [ 723.318332][ T5148] Bluetooth: hci7: command tx timeout [ 723.394634][T27150] __nla_validate_parse: 4 callbacks suppressed [ 723.394653][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6280'. [ 723.413241][T26891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.168208][T27175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6283'. [ 724.355068][T27178] FAULT_INJECTION: forcing a failure. [ 724.355068][T27178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.408482][T27178] CPU: 1 UID: 0 PID: 27178 Comm: syz.1.6284 Not tainted syzkaller #0 PREEMPT(full) [ 724.408509][T27178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.408521][T27178] Call Trace: [ 724.408528][T27178] [ 724.408536][T27178] dump_stack_lvl+0x189/0x250 [ 724.408564][T27178] ? __pfx____ratelimit+0x10/0x10 [ 724.408590][T27178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.408613][T27178] ? __pfx__printk+0x10/0x10 [ 724.408631][T27178] ? __might_fault+0xb0/0x130 [ 724.408666][T27178] should_fail_ex+0x414/0x560 [ 724.408696][T27178] _copy_from_user+0x2d/0xb0 [ 724.408719][T27178] ___sys_recvmsg+0x12e/0x510 [ 724.408746][T27178] ? __pfx____sys_recvmsg+0x10/0x10 [ 724.408798][T27178] ? __might_fault+0xb0/0x130 [ 724.408824][T27178] do_recvmmsg+0x307/0x770 [ 724.408853][T27178] ? __pfx_do_recvmmsg+0x10/0x10 [ 724.408886][T27178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 724.408930][T27178] __x64_sys_recvmmsg+0x190/0x240 [ 724.408954][T27178] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 724.408979][T27178] ? do_syscall_64+0xbe/0xfa0 [ 724.409001][T27178] do_syscall_64+0xfa/0xfa0 [ 724.409017][T27178] ? lockdep_hardirqs_on+0x9c/0x150 [ 724.409038][T27178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.409055][T27178] ? clear_bhb_loop+0x60/0xb0 [ 724.409074][T27178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.409090][T27178] RIP: 0033:0x7fec14d8f749 [ 724.409105][T27178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.409119][T27178] RSP: 002b:00007fec12ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 724.409142][T27178] RAX: ffffffffffffffda RBX: 00007fec14fe5fa0 RCX: 00007fec14d8f749 [ 724.409155][T27178] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 724.409164][T27178] RBP: 00007fec12ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 724.409176][T27178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.409186][T27178] R13: 00007fec14fe6038 R14: 00007fec14fe5fa0 R15: 00007fff705928c8 [ 724.409218][T27178] [ 724.935742][T26891] veth0_vlan: entered promiscuous mode [ 724.969684][T26891] veth1_vlan: entered promiscuous mode [ 725.030767][T26891] veth0_macvtap: entered promiscuous mode [ 725.053069][T26891] veth1_macvtap: entered promiscuous mode [ 725.100341][T26891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.134952][T26891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.169434][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.201043][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.252360][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.268429][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.404376][ T5148] Bluetooth: hci7: command tx timeout [ 725.436551][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.464130][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.496619][ T8065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.515383][ T8065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.250502][T27227] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6300'. [ 727.259588][T19284] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 727.262001][T19284] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 727.280808][T19284] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 727.300267][T19284] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 727.309243][T19284] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 727.476194][T27227] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.484020][T27227] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.535994][T27236] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6302'. [ 727.576297][T27236] netlink: 'syz.7.6302': attribute type 7 has an invalid length. [ 727.599100][T27236] netlink: 'syz.7.6302': attribute type 8 has an invalid length. [ 727.632494][T27236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6302'. [ 727.681271][T27227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.700543][T27227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.875404][T27236] ip6gretap0: entered promiscuous mode [ 727.886943][T27236] syz_tun: entered promiscuous mode [ 727.901732][T27236] gretap0: entered promiscuous mode [ 727.908150][T27236] debugfs: 'hsr1' already exists in 'hsr' [ 727.938015][T27236] Cannot create hsr debugfs directory [ 727.969632][ T8063] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.987973][ T65] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.998135][ T65] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.037658][ T65] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.274974][T27256] netlink: 'syz.2.6309': attribute type 4 has an invalid length. [ 728.412837][T27258] ipt_ECN: cannot use operation on non-tcp rule [ 728.881436][T27228] chnl_net:caif_netlink_parms(): no params data found [ 729.124893][T27228] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.134255][T27228] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.142034][T27228] bridge_slave_0: entered allmulticast mode [ 729.150279][T27228] bridge_slave_0: entered promiscuous mode [ 729.159706][T27228] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.168358][T27228] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.175785][T27228] bridge_slave_1: entered allmulticast mode [ 729.184603][T27228] bridge_slave_1: entered promiscuous mode [ 729.243105][T27228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.257552][T27228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.318873][T27228] team0: Port device team_slave_0 added [ 729.330650][T27228] team0: Port device team_slave_1 added [ 729.380433][T27228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.397528][T27228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.399728][ T5148] Bluetooth: hci8: command tx timeout [ 729.434257][T27228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.451566][T27228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.462858][T27228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.493100][T27228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.588911][T27228] hsr_slave_0: entered promiscuous mode [ 729.595878][T27228] hsr_slave_1: entered promiscuous mode [ 729.603286][T27228] debugfs: 'hsr0' already exists in 'hsr' [ 729.609257][T27228] Cannot create hsr debugfs directory [ 729.615099][T27288] xfrm0: entered promiscuous mode [ 729.621132][T27288] xfrm0: entered allmulticast mode [ 729.925620][T27228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.015448][T27293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6320'. [ 730.027432][T27290] netlink: 'syz.6.6319': attribute type 4 has an invalid length. [ 730.060019][T27228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.100992][T27293] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6320'. [ 730.136179][T27228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.156667][T27296] netlink: 'syz.6.6321': attribute type 1 has an invalid length. [ 730.221940][T27296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 730.255050][T27228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 730.484562][T27301] netlink: 'syz.2.6322': attribute type 9 has an invalid length. [ 730.493447][T27301] netlink: 'syz.2.6322': attribute type 11 has an invalid length. [ 730.507340][T27301] netlink: 'syz.2.6322': attribute type 12 has an invalid length. [ 730.567680][T27301] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6322'. [ 730.633722][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6322'. [ 730.812569][T27315] bridge0: entered promiscuous mode [ 730.820736][T27315] bridge0: port 3(macvtap1) entered blocking state [ 730.829697][T27315] bridge0: port 3(macvtap1) entered disabled state [ 730.838410][T27315] macvtap1: entered allmulticast mode [ 730.844275][T27315] bridge0: entered allmulticast mode [ 730.855649][T27315] macvtap1: left allmulticast mode [ 730.861148][T27315] bridge0: left allmulticast mode [ 730.870500][T27315] bridge0: left promiscuous mode [ 730.953181][T27228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 730.985769][T27228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 731.012739][T27228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 731.027152][T27228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 731.113027][T27328] netlink: 'syz.2.6329': attribute type 12 has an invalid length. [ 731.124843][T27328] netlink: 'syz.2.6329': attribute type 4 has an invalid length. [ 731.190766][T27228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.225391][T27228] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.233892][T27332] Cannot find add_set index 0 as target [ 731.243231][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.250512][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.266260][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.273659][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.358931][T27334] bond1: entered promiscuous mode [ 731.364025][T27334] bond1: entered allmulticast mode [ 731.370307][T27334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 731.477177][ T5148] Bluetooth: hci8: command tx timeout [ 731.774135][T27228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.869509][T27352] gretap0: entered promiscuous mode [ 731.887573][T27352] vlan2: entered promiscuous mode [ 732.026564][T27228] veth0_vlan: entered promiscuous mode [ 732.054969][T27228] veth1_vlan: entered promiscuous mode [ 732.074533][T27361] FAULT_INJECTION: forcing a failure. [ 732.074533][T27361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 732.139073][T27361] CPU: 1 UID: 0 PID: 27361 Comm: syz.2.6341 Not tainted syzkaller #0 PREEMPT(full) [ 732.139100][T27361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.139111][T27361] Call Trace: [ 732.139118][T27361] [ 732.139126][T27361] dump_stack_lvl+0x189/0x250 [ 732.139154][T27361] ? __pfx____ratelimit+0x10/0x10 [ 732.139178][T27361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 732.139199][T27361] ? __pfx__printk+0x10/0x10 [ 732.139217][T27361] ? fs_reclaim_acquire+0x7d/0x100 [ 732.139240][T27361] should_fail_ex+0x414/0x560 [ 732.139268][T27361] prepare_alloc_pages+0x213/0x610 [ 732.139293][T27361] __alloc_frozen_pages_noprof+0x123/0x370 [ 732.139316][T27361] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 732.139344][T27361] ? policy_nodemask+0x27c/0x720 [ 732.139359][T27361] ? __lock_acquire+0xab9/0xd20 [ 732.139381][T27361] alloc_pages_mpol+0x232/0x4a0 [ 732.139403][T27361] vma_alloc_folio_noprof+0xe4/0x200 [ 732.139422][T27361] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 732.139451][T27361] folio_prealloc+0x30/0x180 [ 732.139476][T27361] __handle_mm_fault+0x2a8b/0x5400 [ 732.139517][T27361] ? __pfx___handle_mm_fault+0x10/0x10 [ 732.139556][T27361] ? follow_page_pte+0x7ef/0x13e0 [ 732.139590][T27361] handle_mm_fault+0x40a/0x8e0 [ 732.139632][T27361] __get_user_pages+0x165c/0x2a00 [ 732.139692][T27361] __gup_longterm_locked+0xde4/0x1660 [ 732.139729][T27361] ? sanity_check_pinned_pages+0x1241/0x1300 [ 732.139754][T27361] ? gup_fast_fallback+0x1b86/0x22d0 [ 732.139780][T27361] gup_fast_fallback+0x1d65/0x22d0 [ 732.139801][T27361] ? is_bpf_text_address+0x26/0x2b0 [ 732.139860][T27361] ? __pfx_gup_fast_fallback+0x10/0x10 [ 732.139880][T27361] ? stack_trace_save+0x9c/0xe0 [ 732.139906][T27361] ? stack_depot_save_flags+0x40/0x860 [ 732.139941][T27361] ? pin_user_pages_fast+0x4d/0xb0 [ 732.139965][T27361] iov_iter_extract_pages+0x35f/0x5e0 [ 732.139997][T27361] extract_iter_to_sg+0xe46/0x24e0 [ 732.140032][T27361] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 732.140078][T27361] ? __asan_memset+0x22/0x50 [ 732.140102][T27361] af_alg_get_rsgl+0x436/0x810 [ 732.140144][T27361] aead_recvmsg+0x4d5/0x13b0 [ 732.140174][T27361] ? aa_sk_perm+0x81e/0x950 [ 732.140203][T27361] ? __lock_acquire+0xab9/0xd20 [ 732.140223][T27361] ? __pfx_aead_recvmsg+0x10/0x10 [ 732.140250][T27361] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 732.140267][T27361] ? security_socket_recvmsg+0x7e/0x2e0 [ 732.140285][T27361] ? __pfx_aead_recvmsg+0x10/0x10 [ 732.140308][T27361] sock_recvmsg+0x22c/0x270 [ 732.140352][T27361] ____sys_recvmsg+0x1c9/0x460 [ 732.140382][T27361] ? __pfx_____sys_recvmsg+0x10/0x10 [ 732.140427][T27361] ? import_iovec+0x74/0xa0 [ 732.140452][T27361] ___sys_recvmsg+0x1b5/0x510 [ 732.140479][T27361] ? __pfx____sys_recvmsg+0x10/0x10 [ 732.140527][T27361] ? __fget_files+0x3a0/0x420 [ 732.140605][T27361] do_recvmmsg+0x307/0x770 [ 732.140640][T27361] ? __pfx_do_recvmmsg+0x10/0x10 [ 732.140675][T27361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 732.140720][T27361] __x64_sys_recvmmsg+0x190/0x240 [ 732.140752][T27361] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 732.140778][T27361] ? do_syscall_64+0xbe/0xfa0 [ 732.140800][T27361] do_syscall_64+0xfa/0xfa0 [ 732.140815][T27361] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.140836][T27361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.140854][T27361] ? clear_bhb_loop+0x60/0xb0 [ 732.140883][T27361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.140901][T27361] RIP: 0033:0x7f358258f749 [ 732.140918][T27361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.140933][T27361] RSP: 002b:00007f35834e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 732.140953][T27361] RAX: ffffffffffffffda RBX: 00007f35827e5fa0 RCX: 00007f358258f749 [ 732.140971][T27361] RDX: 0000000000000001 RSI: 0000200000004600 RDI: 0000000000000004 [ 732.140983][T27361] RBP: 00007f35834e9090 R08: 0000000000000000 R09: 0000000000000000 [ 732.140995][T27361] R10: 0000000020001000 R11: 0000000000000246 R12: 0000000000000001 [ 732.141006][T27361] R13: 00007f35827e6038 R14: 00007f35827e5fa0 R15: 00007ffde6919678 [ 732.141039][T27361] [ 732.553834][T27228] veth0_macvtap: entered promiscuous mode [ 732.564557][T27228] veth1_macvtap: entered promiscuous mode [ 732.586927][T27228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.601199][T27228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.674444][ T8063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.723573][ T8063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.798693][ T8063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.852637][ T8063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.931392][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.981897][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.072030][T27377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6346'. [ 733.142962][T27378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6346'. [ 733.170767][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.210817][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.352566][T27382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 733.558778][ T5148] Bluetooth: hci8: command tx timeout [ 733.661643][T27395] syzkaller1: entered promiscuous mode [ 733.667646][T27395] syzkaller1: entered allmulticast mode [ 733.860752][T27400] FAULT_INJECTION: forcing a failure. [ 733.860752][T27400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.923295][T27400] CPU: 1 UID: 0 PID: 27400 Comm: syz.3.6355 Not tainted syzkaller #0 PREEMPT(full) [ 733.923321][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 733.923330][T27400] Call Trace: [ 733.923336][T27400] [ 733.923344][T27400] dump_stack_lvl+0x189/0x250 [ 733.923370][T27400] ? __pfx____ratelimit+0x10/0x10 [ 733.923393][T27400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.923414][T27400] ? __pfx__printk+0x10/0x10 [ 733.923432][T27400] ? __might_fault+0xb0/0x130 [ 733.923467][T27400] should_fail_ex+0x414/0x560 [ 733.923505][T27400] _copy_from_user+0x2d/0xb0 [ 733.923525][T27400] ___sys_recvmsg+0x12e/0x510 [ 733.923552][T27400] ? __pfx____sys_recvmsg+0x10/0x10 [ 733.923603][T27400] ? __might_fault+0xb0/0x130 [ 733.923630][T27400] do_recvmmsg+0x307/0x770 [ 733.923659][T27400] ? __pfx_do_recvmmsg+0x10/0x10 [ 733.923692][T27400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.923730][T27400] __x64_sys_recvmmsg+0x190/0x240 [ 733.923753][T27400] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 733.923776][T27400] ? do_syscall_64+0xbe/0xfa0 [ 733.923797][T27400] do_syscall_64+0xfa/0xfa0 [ 733.923813][T27400] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.923830][T27400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.923847][T27400] ? clear_bhb_loop+0x60/0xb0 [ 733.923868][T27400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.923884][T27400] RIP: 0033:0x7f879d98f749 [ 733.923901][T27400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.923915][T27400] RSP: 002b:00007f879e7d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 733.923934][T27400] RAX: ffffffffffffffda RBX: 00007f879dbe5fa0 RCX: 00007f879d98f749 [ 733.923947][T27400] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 733.923959][T27400] RBP: 00007f879e7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 733.923970][T27400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.923980][T27400] R13: 00007f879dbe6038 R14: 00007f879dbe5fa0 R15: 00007fff6d72f378 [ 733.924011][T27400] [ 734.701514][T27419] validate_nla: 1 callbacks suppressed [ 734.701534][T27419] netlink: 'syz.6.6361': attribute type 1 has an invalid length. [ 734.940624][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6363'. [ 735.637340][ T5148] Bluetooth: hci8: command tx timeout [ 735.901344][T27452] netlink: 'syz.7.6370': attribute type 10 has an invalid length. [ 735.966493][T27461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6375'. [ 735.976627][T27464] netlink: 'syz.7.6370': attribute type 10 has an invalid length. [ 735.997533][T27461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6375'. [ 736.044591][T27452] team0: Port device dummy0 added [ 736.071105][T27461] bridge0: entered promiscuous mode [ 736.106769][T27461] ip6gretap0: entered promiscuous mode [ 736.124861][T27461] debugfs: 'hsr1' already exists in 'hsr' [ 736.150365][T27461] Cannot create hsr debugfs directory [ 736.172615][T27464] team0: Port device dummy0 removed [ 736.192556][T27464] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 736.412644][T27476] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.494185][T27485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6380'. [ 736.513722][T27485] netlink: 'syz.2.6380': attribute type 7 has an invalid length. [ 736.548625][T27485] netlink: 'syz.2.6380': attribute type 8 has an invalid length. [ 736.576825][T27485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6380'. [ 736.624948][T27482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.099720][T27476] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.460874][T27482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.755353][T27476] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.926870][T27482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.070201][T27476] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.195098][T27482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.396865][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6386'. [ 738.482222][ T1086] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.492523][ T1086] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.521595][ T1086] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.532154][ T1086] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.567421][ T1086] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.576076][ T1086] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.607365][ T1086] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.639576][ T8061] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.075211][T27520] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 739.141095][T27522] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 739.304222][T27525] netlink: 'syz.7.6394': attribute type 1 has an invalid length. [ 739.533856][T27532] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode [ 739.836726][T27537] mac80211_hwsim hwsim54 wlan0: left promiscuous mode [ 739.879755][T27542] veth0_vivt_wifi: renamed from dummy0 [ 740.009124][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6401'. [ 740.093630][T27550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6402'. [ 740.126331][T27552] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6403'. [ 740.164341][T27552] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6403'. [ 740.225264][T27559] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 740.240239][T27560] netlink: 'syz.1.6404': attribute type 9 has an invalid length. [ 740.269058][T27563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6406'. [ 741.048408][T27605] __nla_validate_parse: 1 callbacks suppressed [ 741.048426][T27605] netlink: 165 bytes leftover after parsing attributes in process `syz.6.6421'. [ 741.119819][T27611] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 741.772095][T27634] smc: net device wg0 applied user defined pnetid SYZ2 [ 741.855539][T27639] bridge0: port 4(macvtap2) entered blocking state [ 741.863434][T27639] bridge0: port 4(macvtap2) entered disabled state [ 741.882884][T27639] macvtap2: entered allmulticast mode [ 741.889495][ T9020] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc2.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 741.901499][T27639] bridge0: entered allmulticast mode [ 741.910249][T27639] macvtap2: left allmulticast mode [ 741.915929][T27639] bridge0: left allmulticast mode [ 741.940292][T27643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6431'. [ 741.949854][T27643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6431'. [ 741.976765][T27643] bridge0: entered promiscuous mode [ 741.985390][T27643] ip6gretap0: entered promiscuous mode [ 741.993422][T27643] debugfs: 'hsr1' already exists in 'hsr' [ 741.999902][T27643] Cannot create hsr debugfs directory [ 742.281164][T27655] netlink: 'syz.2.6434': attribute type 4 has an invalid length. [ 742.451020][T27663] netlink: 'syz.3.6437': attribute type 8 has an invalid length. [ 742.821642][T27671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6440'. [ 743.001931][T27673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.028214][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6442'. [ 743.158680][T27679] ipt_ECN: cannot use operation on non-tcp rule [ 743.168777][T27673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.474726][T27692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6449'. [ 743.485664][T27692] netlink: 'syz.6.6449': attribute type 7 has an invalid length. [ 743.493771][T27692] netlink: 'syz.6.6449': attribute type 8 has an invalid length. [ 743.518581][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6449'. [ 743.846453][T27695] netlink: 'syz.6.6450': attribute type 4 has an invalid length. [ 743.902603][T27697] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 744.268758][T27713] netlink: 1315 bytes leftover after parsing attributes in process `syz.2.6455'. [ 744.382010][T27717] netlink: 'syz.6.6457': attribute type 1 has an invalid length. [ 744.419771][T27720] FAULT_INJECTION: forcing a failure. [ 744.419771][T27720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.439418][T27720] CPU: 0 UID: 0 PID: 27720 Comm: syz.2.6459 Not tainted syzkaller #0 PREEMPT(full) [ 744.439462][T27720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 744.439473][T27720] Call Trace: [ 744.439487][T27720] [ 744.439496][T27720] dump_stack_lvl+0x189/0x250 [ 744.439526][T27720] ? __pfx____ratelimit+0x10/0x10 [ 744.439551][T27720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.439571][T27720] ? __pfx__printk+0x10/0x10 [ 744.439588][T27720] ? __might_fault+0xb0/0x130 [ 744.439620][T27720] should_fail_ex+0x414/0x560 [ 744.439650][T27720] _copy_from_user+0x2d/0xb0 [ 744.439673][T27720] ___sys_recvmsg+0x12e/0x510 [ 744.439701][T27720] ? __pfx____sys_recvmsg+0x10/0x10 [ 744.439752][T27720] ? __might_fault+0xb0/0x130 [ 744.439779][T27720] do_recvmmsg+0x307/0x770 [ 744.439809][T27720] ? __pfx_do_recvmmsg+0x10/0x10 [ 744.439843][T27720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 744.439879][T27720] __x64_sys_recvmmsg+0x190/0x240 [ 744.439903][T27720] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 744.439927][T27720] ? do_syscall_64+0xbe/0xfa0 [ 744.439949][T27720] do_syscall_64+0xfa/0xfa0 [ 744.440026][T27720] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.440052][T27720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.440071][T27720] ? clear_bhb_loop+0x60/0xb0 [ 744.440093][T27720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.440111][T27720] RIP: 0033:0x7f358258f749 [ 744.440129][T27720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.440145][T27720] RSP: 002b:00007f35834e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 744.440165][T27720] RAX: ffffffffffffffda RBX: 00007f35827e5fa0 RCX: 00007f358258f749 [ 744.440178][T27720] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 744.440191][T27720] RBP: 00007f35834e9090 R08: 0000000000000000 R09: 0000000000000000 [ 744.440203][T27720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.440214][T27720] R13: 00007f35827e6038 R14: 00007f35827e5fa0 R15: 00007ffde6919678 [ 744.440245][T27720] [ 744.682953][T27717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 744.701360][T27723] FAULT_INJECTION: forcing a failure. [ 744.701360][T27723] name failslab, interval 1, probability 0, space 0, times 0 [ 744.715992][T27723] CPU: 1 UID: 0 PID: 27723 Comm: syz.6.6457 Not tainted syzkaller #0 PREEMPT(full) [ 744.716018][T27723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 744.716029][T27723] Call Trace: [ 744.716037][T27723] [ 744.716046][T27723] dump_stack_lvl+0x189/0x250 [ 744.716074][T27723] ? __pfx____ratelimit+0x10/0x10 [ 744.716097][T27723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.716118][T27723] ? __pfx__printk+0x10/0x10 [ 744.716137][T27723] ? __pfx___might_resched+0x10/0x10 [ 744.716155][T27723] ? fs_reclaim_acquire+0x7d/0x100 [ 744.716175][T27723] should_fail_ex+0x414/0x560 [ 744.716204][T27723] should_failslab+0xa8/0x100 [ 744.716223][T27723] kmem_cache_alloc_node_noprof+0x77/0x710 [ 744.716246][T27723] ? __alloc_skb+0x255/0x430 [ 744.716262][T27723] ? napi_skb_cache_get+0x445/0x6e0 [ 744.716276][T27723] ? napi_skb_cache_get+0x151/0x6e0 [ 744.716295][T27723] __alloc_skb+0x255/0x430 [ 744.716313][T27723] ? __pfx___alloc_skb+0x10/0x10 [ 744.716337][T27723] ? netlink_ack_tlv_len+0x6c/0x210 [ 744.716357][T27723] netlink_ack+0x146/0xa50 [ 744.716372][T27723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.716405][T27723] netlink_rcv_skb+0x28c/0x470 [ 744.716421][T27723] ? __lock_acquire+0xab9/0xd20 [ 744.716439][T27723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.716458][T27723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.716487][T27723] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.716514][T27723] netlink_unicast+0x82f/0x9e0 [ 744.716548][T27723] ? __pfx_netlink_unicast+0x10/0x10 [ 744.716574][T27723] ? netlink_sendmsg+0x642/0xb30 [ 744.716591][T27723] ? skb_put+0x11b/0x210 [ 744.716613][T27723] netlink_sendmsg+0x805/0xb30 [ 744.716640][T27723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.716663][T27723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 744.716688][T27723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 744.716711][T27723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.716732][T27723] __sock_sendmsg+0x21c/0x270 [ 744.716758][T27723] ____sys_sendmsg+0x505/0x830 [ 744.716784][T27723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.716814][T27723] ? import_iovec+0x74/0xa0 [ 744.716838][T27723] ___sys_sendmsg+0x21f/0x2a0 [ 744.716861][T27723] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.716914][T27723] ? __fget_files+0x2a/0x420 [ 744.716930][T27723] ? __fget_files+0x3a0/0x420 [ 744.716959][T27723] __x64_sys_sendmsg+0x19b/0x260 [ 744.716981][T27723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.717014][T27723] ? __pfx_ksys_write+0x10/0x10 [ 744.717038][T27723] ? do_syscall_64+0xbe/0xfa0 [ 744.717056][T27723] do_syscall_64+0xfa/0xfa0 [ 744.717070][T27723] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.717087][T27723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.717102][T27723] ? clear_bhb_loop+0x60/0xb0 [ 744.717122][T27723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.717138][T27723] RIP: 0033:0x7f9fe198f749 [ 744.717153][T27723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.717167][T27723] RSP: 002b:00007f9fe27bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.717185][T27723] RAX: ffffffffffffffda RBX: 00007f9fe1be6090 RCX: 00007f9fe198f749 [ 744.717196][T27723] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 744.717207][T27723] RBP: 00007f9fe27bf090 R08: 0000000000000000 R09: 0000000000000000 [ 744.717218][T27723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.717229][T27723] R13: 00007f9fe1be6128 R14: 00007f9fe1be6090 R15: 00007ffde8c3e258 [ 744.717257][T27723] [ 744.738046][T27729] Bluetooth: MGMT ver 1.23 [ 744.870788][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6461'. [ 744.918738][T27733] Cannot find add_set index 0 as target [ 745.340246][T27748] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 745.385374][T27751] netlink: 'syz.1.6464': attribute type 10 has an invalid length. [ 746.173990][T27765] bond1: Unable to set up delay as MII monitoring is disabled [ 746.200758][T27765] bond1 (unregistering): Released all slaves [ 746.469511][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6474'. [ 746.545388][T27783] tipc: Started in network mode [ 746.550879][T27783] tipc: Node identity 4246, cluster identity 3223 [ 746.557788][T27783] tipc: Node number set to 16966 [ 746.660844][T27790] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 746.676994][T27791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6475'. [ 747.320790][ T1303] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 747.572666][T27819] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6481'. [ 747.583044][T27819] netlink: 'syz.3.6481': attribute type 21 has an invalid length. [ 747.591064][T27819] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6481'. [ 747.601178][T27819] netlink: 'syz.3.6481': attribute type 5 has an invalid length. [ 747.612663][T27819] netlink: 'syz.3.6481': attribute type 6 has an invalid length. [ 747.621710][T27819] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6481'. [ 747.882039][T27829] FAULT_INJECTION: forcing a failure. [ 747.882039][T27829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.927215][T27829] CPU: 0 UID: 0 PID: 27829 Comm: syz.1.6486 Not tainted syzkaller #0 PREEMPT(full) [ 747.927241][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.927253][T27829] Call Trace: [ 747.927261][T27829] [ 747.927270][T27829] dump_stack_lvl+0x189/0x250 [ 747.927297][T27829] ? __pfx____ratelimit+0x10/0x10 [ 747.927323][T27829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.927346][T27829] ? __pfx__printk+0x10/0x10 [ 747.927365][T27829] ? __might_fault+0xb0/0x130 [ 747.927401][T27829] should_fail_ex+0x414/0x560 [ 747.927430][T27829] _copy_from_user+0x2d/0xb0 [ 747.927453][T27829] ___sys_recvmsg+0x12e/0x510 [ 747.927488][T27829] ? __pfx____sys_recvmsg+0x10/0x10 [ 747.927539][T27829] ? __might_fault+0xb0/0x130 [ 747.927565][T27829] do_recvmmsg+0x307/0x770 [ 747.927593][T27829] ? __pfx_do_recvmmsg+0x10/0x10 [ 747.927624][T27829] ? bpf_trace_run2+0x322/0x4b0 [ 747.927644][T27829] ? __pfx_bpf_trace_run2+0x10/0x10 [ 747.927667][T27829] __x64_sys_recvmmsg+0x190/0x240 [ 747.927690][T27829] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 747.927718][T27829] do_syscall_64+0xfa/0xfa0 [ 747.927734][T27829] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.927749][T27829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.927765][T27829] ? clear_bhb_loop+0x60/0xb0 [ 747.927786][T27829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.927801][T27829] RIP: 0033:0x7f4b2e98f749 [ 747.927817][T27829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.927830][T27829] RSP: 002b:00007f4b2f7a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 747.927851][T27829] RAX: ffffffffffffffda RBX: 00007f4b2ebe5fa0 RCX: 00007f4b2e98f749 [ 747.927864][T27829] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 747.927876][T27829] RBP: 00007f4b2f7a4090 R08: 0000000000000000 R09: 0000000000000000 [ 747.927886][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.927897][T27829] R13: 00007f4b2ebe6038 R14: 00007f4b2ebe5fa0 R15: 00007ffce00463b8 [ 747.927925][T27829] [ 748.506117][T27845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6490'. [ 748.557966][ T30] audit: type=1800 audit(1763569377.520:4): pid=27827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6485" name="cgroup.controllers" dev="tmpfs" ino=1000 res=0 errno=0 [ 748.687716][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6492'. [ 748.886591][T27863] tipc: Enabled bearer , priority 0 [ 748.926595][T27861] FAULT_INJECTION: forcing a failure. [ 748.926595][T27861] name failslab, interval 1, probability 0, space 0, times 0 [ 748.940598][T27861] CPU: 1 UID: 0 PID: 27861 Comm: syz.2.6495 Not tainted syzkaller #0 PREEMPT(full) [ 748.940619][T27861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.940628][T27861] Call Trace: [ 748.940634][T27861] [ 748.940640][T27861] dump_stack_lvl+0x189/0x250 [ 748.940663][T27861] ? __pfx____ratelimit+0x10/0x10 [ 748.940682][T27861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.940701][T27861] ? __pfx__printk+0x10/0x10 [ 748.940721][T27861] ? __pfx___might_resched+0x10/0x10 [ 748.940736][T27861] ? fs_reclaim_acquire+0x7d/0x100 [ 748.940754][T27861] should_fail_ex+0x414/0x560 [ 748.940779][T27861] should_failslab+0xa8/0x100 [ 748.940795][T27861] kmem_cache_alloc_noprof+0x74/0x6e0 [ 748.940815][T27861] ? vm_area_alloc+0x24/0x140 [ 748.940835][T27861] vm_area_alloc+0x24/0x140 [ 748.940850][T27861] mmap_region+0xdcd/0x2110 [ 748.940882][T27861] ? __pfx_mmap_region+0x10/0x10 [ 748.940895][T27861] ? is_bpf_text_address+0x26/0x2b0 [ 748.940912][T27861] ? kernel_text_address+0xa5/0xe0 [ 748.940931][T27861] ? __kernel_text_address+0xd/0x40 [ 748.940948][T27861] ? unwind_get_return_address+0x4d/0x90 [ 748.941026][T27861] ? bpf_lsm_capable+0x9/0x20 [ 748.941041][T27861] ? security_capable+0x7e/0x2e0 [ 748.941059][T27861] ? shmem_mapping+0xd/0x50 [ 748.941073][T27861] ? memfd_check_seals_mmap+0x165/0x200 [ 748.941092][T27861] do_mmap+0xc45/0x10d0 [ 748.941120][T27861] ? __pfx_do_mmap+0x10/0x10 [ 748.941134][T27861] ? down_write_killable+0x178/0x230 [ 748.941153][T27861] ? __pfx_down_write_killable+0x10/0x10 [ 748.941169][T27861] ? common_file_perm+0x1b5/0x230 [ 748.941194][T27861] vm_mmap_pgoff+0x2a6/0x4d0 [ 748.941218][T27861] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 748.941243][T27861] ? hugetlb_file_setup+0x42c/0x630 [ 748.941267][T27861] ksys_mmap_pgoff+0x587/0x760 [ 748.941292][T27861] do_syscall_64+0xfa/0xfa0 [ 748.941307][T27861] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.941322][T27861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.941337][T27861] ? clear_bhb_loop+0x60/0xb0 [ 748.941354][T27861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.941369][T27861] RIP: 0033:0x7f358258f749 [ 748.941383][T27861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.941396][T27861] RSP: 002b:00007f35834e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 748.941423][T27861] RAX: ffffffffffffffda RBX: 00007f35827e5fa0 RCX: 00007f358258f749 [ 748.941432][T27861] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 748.941441][T27861] RBP: 00007f35834e9090 R08: ffffffffffffffff R09: 0000000000000000 [ 748.941450][T27861] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000002 [ 748.941458][T27861] R13: 00007f35827e6038 R14: 00007f35827e5fa0 R15: 00007ffde6919678 [ 748.941482][T27861] [ 748.944079][T27863] tipc: Disabling bearer [ 749.001502][T27868] netlink: 'syz.6.6499': attribute type 10 has an invalid length. [ 749.089687][T27871] netlink: 'syz.6.6499': attribute type 10 has an invalid length. [ 749.303042][T27868] team0: Port device veth0_vivt_wifi added [ 749.357536][T27878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6504'. [ 749.366925][T27878] netlink: 'syz.1.6504': attribute type 7 has an invalid length. [ 749.375354][T27878] netlink: 'syz.1.6504': attribute type 8 has an invalid length. [ 749.384416][T27871] team0: Port device veth0_vivt_wifi removed [ 749.394165][T27878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6504'. [ 749.411772][T27871] bond0: (slave veth0_vivt_wifi): Enslaving as an active interface with an up link [ 749.422683][T27880] netlink: 'syz.7.6502': attribute type 1 has an invalid length. [ 749.471473][T27880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 749.853397][T27900] pimreg: entered allmulticast mode [ 749.871859][T27900] pimreg: left allmulticast mode [ 749.894322][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6512'. [ 750.446497][T27934] Cannot find add_set index 0 as target [ 750.754023][T27953] netlink: 'syz.1.6525': attribute type 9 has an invalid length. [ 752.418082][T28013] ip6gre1: entered promiscuous mode [ 752.433107][T28013] ip6gre1: entered allmulticast mode [ 752.800314][T28039] dvmrp0: entered allmulticast mode [ 754.099367][T28091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6567'. [ 754.458311][T28095] syzkaller0: entered promiscuous mode [ 754.478048][T28095] syzkaller0: entered allmulticast mode [ 755.435478][T28134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6580'. [ 755.447564][T28131] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6578'. [ 755.467253][T28131] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6578'. [ 755.491327][T28134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6580'. [ 755.624621][T28140] ip6gre2: entered allmulticast mode [ 755.791426][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6585'. [ 756.195088][T28177] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6593'. [ 756.206790][T28178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6587'. [ 757.207287][T28208] ipt_ECN: cannot use operation on non-tcp rule [ 757.316691][T28211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6602'. [ 757.596840][T28220] netlink: 'syz.1.6606': attribute type 1 has an invalid length. [ 757.685200][T28220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.790240][T28225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.804460][T28225] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 757.816470][T28225] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 757.890764][T28228] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 757.925320][T28228] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 757.975590][T28193] netlink: 'syz.2.6597': attribute type 2 has an invalid length. [ 757.999531][T28239] Cannot find set identified by id 3 to match [ 758.001750][T28193] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6597'. [ 758.222448][T28249] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 758.368789][T28235] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 758.656950][T28245] bridge_slave_1: left allmulticast mode [ 758.679471][T28245] bridge_slave_1: left promiscuous mode [ 758.760667][T28245] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.866358][T28245] bridge_slave_0: left allmulticast mode [ 758.878546][T28245] bridge_slave_0: left promiscuous mode [ 758.890164][T28245] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.095157][T28245] bridge0 (unregistering): left promiscuous mode [ 759.368212][T28271] vlan2: entered promiscuous mode [ 759.375601][T28271] team0: entered promiscuous mode [ 759.387281][T28271] team_slave_0: entered promiscuous mode [ 759.393182][T28271] team_slave_1: entered promiscuous mode [ 759.403974][T28271] dummy0: entered promiscuous mode [ 759.725238][T28284] gtp0: entered promiscuous mode [ 759.735075][T28284] gtp0: entered allmulticast mode [ 760.952997][T28316] __nla_validate_parse: 1 callbacks suppressed [ 760.953017][T28316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6632'. [ 760.996498][T28316] netlink: 'syz.1.6632': attribute type 7 has an invalid length. [ 761.016848][T28316] netlink: 'syz.1.6632': attribute type 8 has an invalid length. [ 761.032129][T28316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6632'. [ 761.338343][T28328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6637'. [ 761.436405][T28335] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6639'. [ 761.487713][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6641'. [ 761.549961][T28343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6642'. [ 761.564083][T28343] netlink: 'syz.1.6642': attribute type 21 has an invalid length. [ 761.774406][T28356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6645'. [ 761.783692][T28356] netlink: 'syz.2.6645': attribute type 7 has an invalid length. [ 761.803684][T28356] netlink: 'syz.2.6645': attribute type 8 has an invalid length. [ 761.812239][T28358] Cannot find add_set index 0 as target [ 761.819154][T28356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6645'. [ 761.918050][T28367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6649'. [ 762.324228][T28392] xfrm0: entered promiscuous mode [ 762.330218][T28392] xfrm0: entered allmulticast mode [ 762.814626][T28407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.911846][T28415] netlink: 'syz.3.6664': attribute type 9 has an invalid length. [ 763.030007][T28413] syzkaller1: entered promiscuous mode [ 763.035528][T28413] syzkaller1: entered allmulticast mode [ 763.265477][T28429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6669'. [ 763.356583][T28430] netlink: 'syz.7.6666': attribute type 5 has an invalid length. [ 763.425876][T28430] geneve2: entered promiscuous mode [ 763.455186][T28430] geneve2: entered allmulticast mode [ 763.476027][ T12] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 763.485613][ T12] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 763.517587][ T12] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 763.525741][ T12] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 763.632867][T28439] sctp: [Deprecated]: syz.1.6672 (pid 28439) Use of int in maxseg socket option. [ 763.632867][T28439] Use struct sctp_assoc_value instead [ 763.948502][T28451] vlan2: entered promiscuous mode [ 764.467532][T28467] netlink: 'syz.6.6682': attribute type 4 has an invalid length. [ 764.746916][T28479] can: request_module (can-proto-0) failed. [ 765.041943][T28494] veth3: entered allmulticast mode [ 765.298837][T28505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.473965][T28511] netlink: 'syz.2.6695': attribute type 4 has an invalid length. [ 765.626398][T28516] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 765.970382][T28526] netlink: 'syz.3.6699': attribute type 1 has an invalid length. [ 766.014622][T28526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.092277][T28531] __nla_validate_parse: 8 callbacks suppressed [ 766.092295][T28531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6701'. [ 766.098720][T28526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.115745][T28526] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 766.128534][T28526] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 766.167632][T28532] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 766.179231][T28532] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 766.426693][T28544] netlink: 'syz.7.6706': attribute type 4 has an invalid length. [ 766.549203][T28551] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 766.990404][T28568] netlink: 'syz.2.6711': attribute type 5 has an invalid length. [ 767.112869][T28570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input6 [ 767.889266][T28584] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6715'. [ 767.898798][T28584] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6715'. [ 767.931072][T28584] bridge0: entered promiscuous mode [ 767.972201][T28584] bridge0: left promiscuous mode [ 768.286168][T28603] netlink: 'syz.6.6721': attribute type 1 has an invalid length. [ 768.321105][T28597] netlink: 'syz.3.6718': attribute type 4 has an invalid length. [ 768.483467][T28603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 768.569380][T28616] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 768.635592][T28622] netlink: 'syz.2.6725': attribute type 1 has an invalid length. [ 768.691540][T28619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6724'. [ 768.707796][T28619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6724'. [ 768.842032][T28622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.897834][T28625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.905442][T28625] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 768.919464][T28625] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 768.965446][T28628] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 768.975737][T28628] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 769.387191][T28644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.471093][T28645] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6728'. [ 769.480615][T28645] team0: No ports can be present during mode change [ 769.643369][T28649] vlan2: entered promiscuous mode [ 769.738188][T28653] netlink: 'syz.2.6733': attribute type 4 has an invalid length. [ 769.893286][ T5148] Bluetooth: hci5: command 0x0406 tx timeout [ 769.901412][T28663] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6734'. [ 770.003421][T28669] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6740'. [ 770.179671][T28675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6742'. [ 770.219457][T28675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6742'. [ 770.509558][T28686] bond0: entered promiscuous mode [ 770.514644][T28686] bond_slave_0: entered promiscuous mode [ 770.521753][T28686] bond_slave_1: entered promiscuous mode [ 770.527949][T28686] dummy0: entered promiscuous mode [ 770.535383][T28686] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 770.790561][T28695] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 771.251790][T28717] netlink: 'syz.2.6755': attribute type 9 has an invalid length. [ 771.902663][T28739] bridge0: port 3(macvtap0) entered blocking state [ 771.909909][T28739] bridge0: port 3(macvtap0) entered disabled state [ 771.918147][T28739] macvtap0: entered allmulticast mode [ 771.923991][T28739] bridge0: entered allmulticast mode [ 771.933066][T28739] macvtap0: left allmulticast mode [ 771.940406][T28739] bridge0: left allmulticast mode [ 772.653286][T28757] __nla_validate_parse: 6 callbacks suppressed [ 772.653303][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6769'. [ 772.655895][T28759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6770'. [ 772.678974][T28759] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6770'. [ 772.718982][T28761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.998793][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6773'. [ 773.027435][T28771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6773'. [ 773.104595][T28779] SET target dimension over the limit! [ 773.354872][T28791] FAULT_INJECTION: forcing a failure. [ 773.354872][T28791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.459893][T28791] CPU: 1 UID: 0 PID: 28791 Comm: syz.6.6781 Not tainted syzkaller #0 PREEMPT(full) [ 773.459920][T28791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.459940][T28791] Call Trace: [ 773.459947][T28791] [ 773.459956][T28791] dump_stack_lvl+0x189/0x250 [ 773.459984][T28791] ? __pfx____ratelimit+0x10/0x10 [ 773.460010][T28791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.460033][T28791] ? __pfx__printk+0x10/0x10 [ 773.460052][T28791] ? __might_fault+0xb0/0x130 [ 773.460087][T28791] should_fail_ex+0x414/0x560 [ 773.460117][T28791] _copy_from_user+0x2d/0xb0 [ 773.460139][T28791] ___sys_recvmsg+0x12e/0x510 [ 773.460167][T28791] ? __pfx____sys_recvmsg+0x10/0x10 [ 773.460217][T28791] ? __might_fault+0xb0/0x130 [ 773.460245][T28791] do_recvmmsg+0x307/0x770 [ 773.460283][T28791] ? __pfx_do_recvmmsg+0x10/0x10 [ 773.460321][T28791] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 773.460371][T28791] __x64_sys_recvmmsg+0x190/0x240 [ 773.460399][T28791] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 773.460423][T28791] ? do_syscall_64+0xbe/0xfa0 [ 773.460442][T28791] do_syscall_64+0xfa/0xfa0 [ 773.460462][T28791] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.460483][T28791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.460500][T28791] ? clear_bhb_loop+0x60/0xb0 [ 773.460530][T28791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.460552][T28791] RIP: 0033:0x7f9fe198f749 [ 773.460569][T28791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.460584][T28791] RSP: 002b:00007f9fe27e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 773.460620][T28791] RAX: ffffffffffffffda RBX: 00007f9fe1be5fa0 RCX: 00007f9fe198f749 [ 773.460646][T28791] RDX: 000000000400030f RSI: 0000200000005c80 RDI: 0000000000000003 [ 773.460659][T28791] RBP: 00007f9fe27e0090 R08: 0000000000000000 R09: 0000000000000000 [ 773.460670][T28791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.460681][T28791] R13: 00007f9fe1be6038 R14: 00007f9fe1be5fa0 R15: 00007ffde8c3e258 [ 773.460713][T28791] [ 774.301055][T28804] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6787'. [ 774.327406][T28804] netlink: 'syz.6.6787': attribute type 7 has an invalid length. [ 774.346918][T28804] netlink: 'syz.6.6787': attribute type 8 has an invalid length. [ 774.377377][T28804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6787'. [ 774.590923][T28811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6789'. [ 774.664049][T28813] syzkaller0: entered promiscuous mode [ 774.678314][T28815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6792'. [ 774.698871][T28813] syzkaller0: entered allmulticast mode [ 774.767493][T28819] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6794'. [ 775.104756][T28819] bridge0: entered promiscuous mode [ 775.113275][T28819] bridge0: left promiscuous mode [ 775.419599][T28847] netlink: 'syz.6.6801': attribute type 4 has an invalid length. [ 775.940060][T28868] vlan2: entered promiscuous mode [ 776.386760][T28882] netlink: 'syz.6.6816': attribute type 13 has an invalid length. [ 776.407373][T28882] netlink: 'syz.6.6816': attribute type 17 has an invalid length. [ 776.667289][T28894] netlink: 'syz.1.6820': attribute type 1 has an invalid length. [ 776.675270][T28894] netlink: 'syz.1.6820': attribute type 3 has an invalid length. [ 776.684328][T28894] netlink: 'syz.1.6820': attribute type 2 has an invalid length. [ 776.692257][T28894] netlink: 'syz.1.6820': attribute type 3 has an invalid length. [ 776.900390][T28882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.910330][T28882] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.925300][T28882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.134895][T28918] netlink: 'syz.1.6828': attribute type 10 has an invalid length. [ 777.172443][T28918] team0: Port device dummy0 added [ 777.198770][T28918] team0: Port device dummy0 removed [ 777.226760][T28918] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 777.261252][T28913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.433608][T28928] vlan2: entered promiscuous mode [ 777.443491][T28928] vlan2: entered allmulticast mode [ 777.449461][T28928] hsr_slave_1: entered allmulticast mode [ 777.774182][T28950] __nla_validate_parse: 9 callbacks suppressed [ 777.774200][T28950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6839'. [ 777.880438][T28954] veth0_vlan: entered allmulticast mode [ 777.983277][T28958] €Â: renamed from vlan0 [ 778.035887][T28960] team_slave_0: entered promiscuous mode [ 778.041692][T28960] team_slave_1: entered promiscuous mode [ 778.070704][T28960] vlan2: entered promiscuous mode [ 778.081591][T28960] team0: entered promiscuous mode [ 778.171618][T28968] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 778.246406][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6849'. [ 778.290213][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6849'. [ 778.382798][T28977] dummy0: entered promiscuous mode [ 778.448551][T28977] team0: Port device dummy0 added [ 778.485966][T28979] dummy0: left promiscuous mode [ 778.510865][T28979] team0: Port device dummy0 removed [ 778.545374][T28979] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 778.826829][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6856'. [ 779.016306][T29008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6860'. [ 779.100315][T29011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6862'. [ 779.538911][T29042] ip6t_srh: unknown srh match flags 4000 [ 780.358685][T29057] validate_nla: 7 callbacks suppressed [ 780.358706][T29057] netlink: 'syz.6.6878': attribute type 1 has an invalid length. [ 780.423545][T29057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.572516][T29074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6883'. [ 780.732287][T29065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 780.740450][T29065] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 780.763271][T29065] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 780.794838][T29057] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 780.805511][T29057] bond8: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 781.123073][T29095] bond2: Unable to set up delay as MII monitoring is disabled [ 781.138771][T29095] bond2 (unregistering): Released all slaves [ 781.318053][T29099] batadv1: entered promiscuous mode [ 781.389990][T29109] tipc: Enabling of bearer rejected, failed to enable media [ 781.431898][T29105] tipc: Enabling of bearer rejected, failed to enable media [ 781.700195][T29128] SET target dimension over the limit! [ 782.326283][T29119] syz.2.6896: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 782.393023][T29119] CPU: 0 UID: 0 PID: 29119 Comm: syz.2.6896 Not tainted syzkaller #0 PREEMPT(full) [ 782.393051][T29119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.393063][T29119] Call Trace: [ 782.393071][T29119] [ 782.393081][T29119] dump_stack_lvl+0x189/0x250 [ 782.393118][T29119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.393143][T29119] ? __pfx__printk+0x10/0x10 [ 782.393164][T29119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 782.393189][T29119] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 782.393217][T29119] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 782.393244][T29119] warn_alloc+0x214/0x310 [ 782.393270][T29119] ? stack_depot_save_flags+0x40/0x860 [ 782.393302][T29119] ? __pfx_warn_alloc+0x10/0x10 [ 782.393328][T29119] ? kasan_save_track+0x3e/0x80 [ 782.393349][T29119] ? __kasan_kmalloc+0x93/0xb0 [ 782.393364][T29119] ? xsk_setsockopt+0x4dc/0x8d0 [ 782.393383][T29119] ? do_sock_setsockopt+0x17c/0x1b0 [ 782.393399][T29119] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 782.393415][T29119] ? do_syscall_64+0xfa/0xfa0 [ 782.393431][T29119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.393459][T29119] __vmalloc_node_range_noprof+0x125/0x12d0 [ 782.393514][T29119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 782.393542][T29119] ? __kasan_kmalloc+0x93/0xb0 [ 782.393562][T29119] vmalloc_user_noprof+0xad/0xf0 [ 782.393586][T29119] ? xskq_create+0xbf/0x170 [ 782.393612][T29119] xskq_create+0xbf/0x170 [ 782.393640][T29119] xsk_init_queue+0xb0/0x110 [ 782.393667][T29119] xsk_setsockopt+0x4dc/0x8d0 [ 782.393692][T29119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 782.393719][T29119] ? __pfx_aa_sk_perm+0x10/0x10 [ 782.393745][T29119] ? aa_sock_opt_perm+0xff/0x1b0 [ 782.393774][T29119] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 782.393789][T29119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 782.393812][T29119] do_sock_setsockopt+0x17c/0x1b0 [ 782.393834][T29119] __x64_sys_setsockopt+0x13f/0x1b0 [ 782.393860][T29119] do_syscall_64+0xfa/0xfa0 [ 782.393877][T29119] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.393896][T29119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.393913][T29119] ? clear_bhb_loop+0x60/0xb0 [ 782.393945][T29119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.393967][T29119] RIP: 0033:0x7f358258f749 [ 782.393986][T29119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.394002][T29119] RSP: 002b:00007f35834a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.394024][T29119] RAX: ffffffffffffffda RBX: 00007f35827e6180 RCX: 00007f358258f749 [ 782.394040][T29119] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 782.394052][T29119] RBP: 00007f3582613f91 R08: 0000000000000004 R09: 0000000000000000 [ 782.394065][T29119] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.394078][T29119] R13: 00007f35827e6218 R14: 00007f35827e6180 R15: 00007ffde6919678 [ 782.394113][T29119] [ 782.695262][T29119] Mem-Info: [ 782.699151][T29119] active_anon:12754 inactive_anon:0 isolated_anon:0 [ 782.699151][T29119] active_file:4007 inactive_file:40186 isolated_file:0 [ 782.699151][T29119] unevictable:768 dirty:267 writeback:25 [ 782.699151][T29119] slab_reclaimable:13636 slab_unreclaimable:214958 [ 782.699151][T29119] mapped:48880 shmem:3101 pagetables:1288 [ 782.699151][T29119] sec_pagetables:0 bounce:0 [ 782.699151][T29119] kernel_misc_reclaimable:0 [ 782.699151][T29119] free:1158510 free_pcp:15594 free_cma:0 [ 782.747460][T29119] Node 0 active_anon:51016kB inactive_anon:0kB active_file:16028kB inactive_file:160544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:195520kB dirty:1068kB writeback:0kB shmem:10868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17436kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 782.970294][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6908'. [ 783.002790][T29119] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 783.206203][T29119] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.336879][T29119] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 783.381785][T29119] Node 0 DMA32 free:718200kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55608kB inactive_anon:0kB active_file:16028kB inactive_file:160552kB unevictable:1536kB writepending:1104kB zspages:0kB present:3129332kB managed:2565104kB mlocked:0kB bounce:0kB free_pcp:44548kB local_pcp:27660kB free_cma:0kB [ 783.581372][T29119] lowmem_reserve[]: 0 0 0 0 0 [ 783.604933][T29119] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 783.679024][T29119] lowmem_reserve[]: 0 0 0 0 0 [ 783.696680][T29119] Node 1 Normal free:3896936kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18416kB local_pcp:8276kB free_cma:0kB [ 783.786939][T29119] lowmem_reserve[]: 0 0 0 0 0 [ 783.792151][T29119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 783.808126][T29119] Node 0 DMA32: 3*4kB (UME) 2*8kB (ME) 282*16kB (M) 203*32kB (UM) 94*64kB (UME) 30*128kB (UM) 8*256kB (M) 8*512kB (UME) 4*1024kB (M) 3*2048kB (UM) 165*4096kB (UM) = 713116kB [ 783.827292][T29119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 783.864404][T29119] Node 1 Normal: 206*4kB (UE) 58*8kB (UME) 48*16kB (UME) 85*32kB (UME) 27*64kB (UME) 12*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3896936kB [ 783.887240][T29119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 783.924176][T29119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 783.938007][T29119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 783.953026][T29119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 783.964555][T29119] 48620 total pagecache pages [ 783.970891][T29119] 0 pages in swap cache [ 783.975077][T29119] Free swap = 124996kB [ 783.980756][T29119] Total swap = 124996kB [ 783.984952][T29119] 2097051 pages RAM [ 783.997948][T29119] 0 pages HighMem/MovableOnly [ 784.002684][T29119] 424133 pages reserved [ 784.006926][T29119] 0 pages cma reserved [ 784.394124][T29212] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 785.237703][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 785.260689][T29225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.563187][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6932'. [ 785.718543][ T31] INFO: task syz.4.5507:24590 blocked for more than 143 seconds. [ 785.728290][ T31] Not tainted syzkaller #0 [ 785.733264][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 785.748937][ T31] task:syz.4.5507 state:D stack:25936 pid:24590 tgid:24589 ppid:16865 task_flags:0x400140 flags:0x00080002 [ 785.761127][ T31] Call Trace: [ 785.764874][ T31] [ 785.768312][ T31] __schedule+0x1798/0x4cc0 [ 785.773581][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 785.787593][ T31] ? __lock_acquire+0xab9/0xd20 [ 785.794977][ T31] ? __pfx___schedule+0x10/0x10 [ 785.804300][ T31] ? schedule+0x91/0x360 [ 785.811591][ T31] schedule+0x165/0x360 [ 785.818977][ T31] schedule_preempt_disabled+0x13/0x30 [ 785.827935][ T31] __mutex_lock+0x7e6/0x1350 [ 785.832707][ T31] ? __mutex_lock+0x5bb/0x1350 [ 785.837913][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 785.858941][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 785.864504][ T31] ? net_generic+0x1e/0x240 [ 785.917196][ T31] ? net_generic+0x1e/0x240 [ 785.921767][ T31] ? net_generic+0x1e/0x240 [ 785.926295][ T31] ? net_generic+0x1e/0x240 [ 785.938102][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 785.943907][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 785.950256][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.956657][ T31] ? bpf_lsm_capable+0x9/0x20 [ 785.962058][ T31] ? security_capable+0x7e/0x2e0 [ 785.967513][ T31] genl_rcv_msg+0x60e/0x790 [ 785.972216][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.977431][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 785.983649][ T31] netlink_rcv_skb+0x208/0x470 [ 785.988945][ T31] ? __lock_acquire+0xab9/0xd20 [ 785.994022][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.999727][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 786.005292][ T31] ? down_read+0x1ad/0x2e0 [ 786.010316][ T31] genl_rcv+0x28/0x40 [ 786.014750][ T31] netlink_unicast+0x82f/0x9e0 [ 786.020021][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 786.025687][ T31] ? netlink_sendmsg+0x642/0xb30 [ 786.031388][ T31] ? skb_put+0x11b/0x210 [ 786.036102][ T31] netlink_sendmsg+0x805/0xb30 [ 786.041542][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.047771][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 786.053192][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 786.059149][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.064861][ T31] __sock_sendmsg+0x21c/0x270 [ 786.070192][ T31] ____sys_sendmsg+0x505/0x830 [ 786.075183][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.080786][ T31] ? import_iovec+0x74/0xa0 [ 786.085531][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 786.090804][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.096320][ T31] ? __fget_files+0x2a/0x420 [ 786.101293][ T31] ? __fget_files+0x3a0/0x420 [ 786.106473][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 786.112237][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 786.126790][ T31] ? do_syscall_64+0xbe/0xfa0 [ 786.137206][ T31] do_syscall_64+0xfa/0xfa0 [ 786.141921][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.148183][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.154370][ T31] ? clear_bhb_loop+0x60/0xb0 [ 786.159102][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.165006][ T31] RIP: 0033:0x7efdba38f749 [ 786.169723][ T31] RSP: 002b:00007efdbb164038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.178287][ T31] RAX: ffffffffffffffda RBX: 00007efdba5e5fa0 RCX: 00007efdba38f749 [ 786.186280][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 786.194588][ T31] RBP: 00007efdba413f91 R08: 0000000000000000 R09: 0000000000000000 [ 786.203275][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.211742][ T31] R13: 00007efdba5e6038 R14: 00007efdba5e5fa0 R15: 00007fff2f981ad8 [ 786.220365][ T31] [ 786.223630][ T31] [ 786.223630][ T31] Showing all locks held in the system: [ 786.235608][ T31] 4 locks held by kworker/u8:0/12: [ 786.241464][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 786.253207][ T31] #1: ffffc90000117ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 786.263964][ T31] #2: ffffffff8f2bf1f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 786.273357][ T31] #3: ffffffff8f2cc188 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 786.283018][ T31] 1 lock held by khungtaskd/31: [ 786.288005][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 786.298749][ T31] 3 locks held by kworker/0:2/983: [ 786.303880][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 786.315548][ T31] #1: ffffc900039c7ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 786.328598][ T31] #2: ffff888040d32240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 786.338817][ T31] 2 locks held by getty/5583: [ 786.343525][ T31] #0: ffff88802ff370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 786.353686][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 786.364538][ T31] 2 locks held by syz.0.3756/18979: [ 786.369870][ T31] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 786.378477][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 786.388586][ T31] 2 locks held by syz.4.5507/24590: [ 786.393779][ T31] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 786.402112][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 786.413216][ T31] 2 locks held by syz.5.6080/26424: [ 786.418490][ T31] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 786.426785][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 786.437626][ T31] [ 786.445414][ T31] ============================================= [ 786.445414][ T31] [ 786.457371][ T31] NMI backtrace for cpu 0 [ 786.457392][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 786.457412][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.457422][ T31] Call Trace: [ 786.457429][ T31] [ 786.457438][ T31] dump_stack_lvl+0x189/0x250 [ 786.457468][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.457489][ T31] ? __pfx__printk+0x10/0x10 [ 786.457520][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 786.457545][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 786.457563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.457589][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 786.457608][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 786.457632][ T31] watchdog+0xf60/0xfa0 [ 786.457655][ T31] ? watchdog+0x1e2/0xfa0 [ 786.457678][ T31] kthread+0x711/0x8a0 [ 786.457703][ T31] ? __pfx_watchdog+0x10/0x10 [ 786.457720][ T31] ? __pfx_kthread+0x10/0x10 [ 786.457744][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.457766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.457780][ T31] ? __pfx_kthread+0x10/0x10 [ 786.457802][ T31] ret_from_fork+0x4bc/0x870 [ 786.457823][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 786.457847][ T31] ? __switch_to_asm+0x39/0x70 [ 786.457860][ T31] ? __switch_to_asm+0x33/0x70 [ 786.457874][ T31] ? __pfx_kthread+0x10/0x10 [ 786.457896][ T31] ret_from_fork_asm+0x1a/0x30 [ 786.457926][ T31] [ 786.457934][ T31] Sending NMI from CPU 0 to CPUs 1: [ 786.606651][ C1] NMI backtrace for cpu 1 [ 786.606681][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 786.606698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.606708][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 786.606729][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 10 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 786.606742][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 786.606758][ C1] RAX: 0ea47ac9733f2600 RBX: ffffffff81967b47 RCX: 0ea47ac9733f2600 [ 786.606769][ C1] RDX: 0000000000000001 RSI: ffffffff8d7103d4 RDI: ffffffff8bbf0760 [ 786.606781][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 786.606792][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cfe70 [ 786.606803][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 786.606813][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 786.606825][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.606836][ C1] CR2: 0000001b34c05ff8 CR3: 00000000497a2000 CR4: 00000000003526f0 [ 786.606850][ C1] Call Trace: [ 786.606858][ C1] [ 786.606865][ C1] default_idle+0x13/0x20 [ 786.606881][ C1] default_idle_call+0x73/0xb0 [ 786.606899][ C1] do_idle+0x1e7/0x510 [ 786.606919][ C1] ? __pfx_do_idle+0x10/0x10 [ 786.606943][ C1] cpu_startup_entry+0x44/0x60 [ 786.606959][ C1] start_secondary+0x101/0x110 [ 786.606973][ C1] common_startup_64+0x13e/0x147 [ 786.607002][ C1] [ 793.397340][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!