last executing test programs: 4m3.492400204s ago: executing program 4 (id=2258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4m3.240436936s ago: executing program 4 (id=2261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4m3.062803186s ago: executing program 4 (id=2262): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd5, 0xb4, 0x6}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x64}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 4m2.864533153s ago: executing program 4 (id=2265): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@empty, @empty, 0xb, 0x1c}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4m2.372061688s ago: executing program 4 (id=2266): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4m2.140529711s ago: executing program 4 (id=2269): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 3m46.842219137s ago: executing program 32 (id=2269): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 2m37.615991699s ago: executing program 2 (id=3067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m36.992559433s ago: executing program 2 (id=3072): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13e, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000036ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 2m36.737953318s ago: executing program 2 (id=3075): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x96400, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0x3]}, {0x7f, 0xff, 0x400, 0x800}}, 0xc0002, &(0x7f0000000340), &(0x7f0000000780)}, {[0x1, 0x8, 0x80000c, 0x401]}, 0x4, 0x62, &(0x7f0000000180)=""/98}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x64, r5, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x64}}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa}, [@typed={0x8, 0xd1, 0x0, 0x0, @pid}, @nested={0x1a0, 0x123, 0x0, 0x1, [@generic="12c819a645925e845ff80d202ac74ba00009d3e64d073f0f0e76e72584867bf57e1343afe2530e27febea9cff67138a07e37a34bbc84fe76003367809281f5b0fd1ccbadd5266cd5f3d4daecfbea2bb0bef9f095cc19ccdff568055df7447079534c6d81f26d8ba81e299edfafbf93e411567bada1ac53fedc77f0", @generic, @generic="e66dec8d697ebbec62863dfd3e6a1ba2f8e834eac4045e79626c392629139c9e3399e21da554bce5f412ca54aee8c06ade9b1c8e3e6d17b4dd8c2075634f221a9fd04103198a4883d9d98a63d917839545b45af0b3d1b36a02c1028138f505e91734914935e2097ff1c1b23df3d233bda53720909cba432fc5011a8d9f0c71e0c8402140c40e108cf8dd8a204abe0501b3ed73a21c9afbf9fef17e570c9efd683150d648e8541364671032b05678b233d80ededdf44dfe5f1c4608ab0666cd7ca921dc421f92633dc27d2ed82d0c640777a086205230ef8137cf98b29299fedbf890dceff4ff77587c7d5e3a3626a25f751fc4ef35c58838e6", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast1, 0x9, 0x1}, 0x20) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r12}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000240)=0x3ff, 0x4) bind$can_raw(r11, &(0x7f0000000080), 0x10) listen(r10, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe1, &(0x7f0000001840)=""/4065}, 0x94) 2m36.297791441s ago: executing program 2 (id=3082): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 2m36.132030241s ago: executing program 2 (id=3086): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x13e, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000036ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 2m35.962946408s ago: executing program 2 (id=3088): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m20.905696184s ago: executing program 33 (id=3088): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m1.692128559s ago: executing program 3 (id=3305): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r2, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000280)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x728, 0x568, 0x568, 0x310, 0x568, 0x0, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x2a, "e5940e4b91112443dee63d22728f303f77fdf65a51032d8da6652f6abfd3"}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@multicast1, 0x2, 0x0, 0x8e}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"e9de"}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000040)=""/121, &(0x7f00000000c0)=0x79) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000940)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x48880) 2m1.563323295s ago: executing program 3 (id=3307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='\x00', 0x96400, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0x3]}, {0x7f, 0xff, 0x400, 0x800}}, 0xc0002, &(0x7f0000000340), &(0x7f0000000780)}, {[0x1, 0x8, 0x80000c, 0x401]}, 0x4, 0x62, &(0x7f0000000180)=""/98}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x64, r5, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x64}}, 0x90) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa}, [@typed={0x8, 0xd1, 0x0, 0x0, @pid}, @nested={0x1a0, 0x123, 0x0, 0x1, [@generic="12c819a645925e845ff80d202ac74ba00009d3e64d073f0f0e76e72584867bf57e1343afe2530e27febea9cff67138a07e37a34bbc84fe76003367809281f5b0fd1ccbadd5266cd5f3d4daecfbea2bb0bef9f095cc19ccdff568055df7447079534c6d81f26d8ba81e299edfafbf93e411567bada1ac53fedc77f0", @generic, @generic="e66dec8d697ebbec62863dfd3e6a1ba2f8e834eac4045e79626c392629139c9e3399e21da554bce5f412ca54aee8c06ade9b1c8e3e6d17b4dd8c2075634f221a9fd04103198a4883d9d98a63d917839545b45af0b3d1b36a02c1028138f505e91734914935e2097ff1c1b23df3d233bda53720909cba432fc5011a8d9f0c71e0c8402140c40e108cf8dd8a204abe0501b3ed73a21c9afbf9fef17e570c9efd683150d648e8541364671032b05678b233d80ededdf44dfe5f1c4608ab0666cd7ca921dc421f92633dc27d2ed82d0c640777a086205230ef8137cf98b29299fedbf890dceff4ff77587c7d5e3a3626a25f751fc4ef35c58838e6", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast1, 0x9, 0x1}, 0x20) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r12}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000240)=0x3ff, 0x4) bind$can_raw(r11, &(0x7f0000000080), 0x10) listen(r10, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe1, &(0x7f0000001840)=""/4065}, 0x94) 2m1.18387422s ago: executing program 3 (id=3313): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m0.914921076s ago: executing program 3 (id=3316): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x51}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x101}, 0x1c, 0x0}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @remote, 0x7}, 0x70) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m0.612545316s ago: executing program 3 (id=3320): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffa, @empty, 0x8001}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4040) 2m0.571307701s ago: executing program 3 (id=3321): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res(0x0, 0xffffff0d, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @empty}}, 0x38b, 0x2}, 0x90) 1m45.509969695s ago: executing program 34 (id=3321): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res(0x0, 0xffffff0d, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @empty}}, 0x38b, 0x2}, 0x90) 39.588032197s ago: executing program 7 (id=3934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='\x00', 0x96400, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0x3]}, {0x7f, 0xff, 0x400, 0x800}}, 0xc0002, &(0x7f0000000340), &(0x7f0000000780)}, {[0x1, 0x8, 0x80000c, 0x401]}, 0x4, 0x62, &(0x7f0000000180)=""/98}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x64, r6, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x64}}, 0x90) sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa}, [@typed={0x8, 0xd1, 0x0, 0x0, @pid}, @nested={0x1a0, 0x123, 0x0, 0x1, [@generic="12c819a645925e845ff80d202ac74ba00009d3e64d073f0f0e76e72584867bf57e1343afe2530e27febea9cff67138a07e37a34bbc84fe76003367809281f5b0fd1ccbadd5266cd5f3d4daecfbea2bb0bef9f095cc19ccdff568055df7447079534c6d81f26d8ba81e299edfafbf93e411567bada1ac53fedc77f0", @generic, @generic="e66dec8d697ebbec62863dfd3e6a1ba2f8e834eac4045e79626c392629139c9e3399e21da554bce5f412ca54aee8c06ade9b1c8e3e6d17b4dd8c2075634f221a9fd04103198a4883d9d98a63d917839545b45af0b3d1b36a02c1028138f505e91734914935e2097ff1c1b23df3d233bda53720909cba432fc5011a8d9f0c71e0c8402140c40e108cf8dd8a204abe0501b3ed73a21c9afbf9fef17e570c9efd683150d648e8541364671032b05678b233d80ededdf44dfe5f1c4608ab0666cd7ca921dc421f92633dc27d2ed82d0c640777a086205230ef8137cf98b29299fedbf890dceff4ff77587c7d5e3a3626a25f751fc4ef35c58838e6", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast1, 0x9, 0x1}, 0x20) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000000)={0x1d, r13}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000240)=0x3ff, 0x4) bind$can_raw(r12, &(0x7f0000000080), 0x10) listen(r11, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe1, &(0x7f0000001840)=""/4065}, 0x94) 36.493401119s ago: executing program 7 (id=3957): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0xc, 0x42, 0x3e, 0x42}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) unshare(0x6020080) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) (fail_nth: 11) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x28, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000895}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000340)={0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 35.130569762s ago: executing program 7 (id=3961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001600), 0xfffffffffffffffe, 0x10040, r0}, 0x38) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x2, 0x0, 0x8000, 0x929, 0x3, 0xc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = getpid() r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @void}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r8 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2cc, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded24", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380ecbc35b44ba647b25d52ef6740811a89212bdda86ce23790d7cd9765c06595e7e26fa21d42768305ce079a47f09bc83fcc0f64a81b7", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}]}, 0x2cc}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000000480)={0xa4, 0x29, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b720e97613b1fff45d983707235de8d035b9a12de8a2881ec683b37534e7d", @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@mcast2}]}, 0xa4}], 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x8012) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002940)={0x0, 0x0}, &(0x7f0000002980)=0xc) r10 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000001440)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000002880)=[{&(0x7f00000014c0)="93ddf2b732e7e259c9fca9ffde3ac867b1ce893c714b714a041c0fef592bb5d37865ec96b5d48645823b7ede682c8c2ab203515ba077cf8841bb36616065e25b38bc6aa062e1cf8d59682c110637e4197d234ff67693b2948770c98df00e97292b7f709f04e49ca8f575e27be035a67fd181b404c4ce089d781557d4df", 0x7d}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="aeb5c11b30d6ea07a1a955f354aa396f4587e488a624787c22e1d6853be6294509af19feb0776e9af88b28cae2f32fb14891d7cfe53d49d7ac56f009bcf6abe3b8c168e7ab35e16460b581393700b84274c6d6d7d60e17f1f5b47155b123", 0x5e}, {&(0x7f0000002640)="62c9cd84b2f9dd7f892aba5f1cd060e1bbd2561ae66107de2f3943f29813b8f4f7619b19829d373e6703fe25de08ac24ad3b7340fc3ae70b1dae6de0ab76352fad5d7a8abd04b69746147b825d4f636665864f25a022920a8c3203a05349c503278f32e940124c7e677ef7432f21991a23b1317bf9eb9c77a53c7898", 0x7c}, {&(0x7f00000026c0)="9c0980d6ba66765422d8682cc6ac5772a1f8b67819dc73789a9651afb2009e51fe469fd0d82947350104d4502e49a7418e2948972e60157c9986577e940c298e0c7ed22729a46cd59ababb7893902776a3fc1427e1ea18acb62d249b4299ec318cd62e51bdf6674ff9bd09e2d3d9fb861bd1a5fb35da352891ea3bc26133ee2a14f64510ce4be505ec31092fff550c612ba355a75b8a3df10c374b4037c01339f06fa9f4a2046e965b3d1c4ce0e6d776cc86ddee537aae2579e1d788c851e1f4469804872ab4f623", 0xc8}, {&(0x7f00000027c0)="801f0b304642a48e07b97eb417d23aecd31638579e1e9835c701e72e580680537a2459ffeb75c26abd9bf682e7cc703fe72a8f46b4b6db70a493a5cb6804ce763262ad9a800d0c86672f13c9c8daed016ae1e9de52c8341c015fb555ef230277bbd8a301120780fa2bb7d21feb907be52a1138a1efb4bee05bad1373a85e1a9777a7dbb0", 0x84}], 0x6, &(0x7f00000029c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @rights={{0x10}}], 0x70, 0x20044004}}], 0x1, 0x4) recvmmsg(r3, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x40000000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000, r6}, 0x18) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {{@in=@empty, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e20, 0xb22, 0xa, 0xe0, 0x0, 0x32}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x3c}, @in=@broadcast, {0x7, 0x5, 0x8000, 0xe, 0x5, 0x4, 0x5, 0x9}, {0x3, 0x0, 0x1, 0x7}, {0x4, 0x81}, 0x70bd29, 0x0, 0xa, 0x1, 0xfa, 0x35}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd3000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 34.63273615s ago: executing program 7 (id=3968): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) unshare(0x8040480) r0 = socket(0x8, 0x4, 0x3) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'vxcan1\x00'}}, 0x1e) shutdown(r0, 0x1) 31.87241895s ago: executing program 7 (id=3986): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0xfe}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 31.752373462s ago: executing program 7 (id=3987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x800000000000, 0x7}) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc011) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4850) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba9"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) writev(r5, &(0x7f0000000040), 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffe0, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) 16.755841729s ago: executing program 35 (id=3987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x48, 0x76, 0x1, 0x70bd2b, 0x25d7dbfc, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x800000000000, 0x7}) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc011) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4850) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba9"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) writev(r5, &(0x7f0000000040), 0x8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffe0, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) 11.62526785s ago: executing program 6 (id=4118): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c00058005"], 0x44}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x2, 0x6, 0x780, 0x550, 0x550, 0x250, 0x250, 0x0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x1) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf25150000000a0014002f292b3a5e2c000008000100a5"], 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000080)=""/180, 0xb4}], 0x1, 0x47b7, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd604dda0000240600fc010000000000000000000000000002fe80000000000056914c9bfee1b657420000000000400000aa00004003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000220d148140a4713403000000db0403a8"], 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@newtfilter={0xc0, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x90, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x7a}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc4aa}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x55}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0xfff1}}, @TCA_ROUTE4_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x2, 0xc2, 0x72643904, 0x8, {0x6, 0x2, 0x117, 0x8, 0x400, 0x626}, {0x0, 0x2, 0xf108, 0x7, 0x3, 0x100}, 0x8, 0x0, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8c4}, 0x40) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32, @ANYBLOB="1bf9e11c7458597d74e1f942e4dd31998aa18f7fc614760afe2177724df15c66a72f1913345b67e1c54dd1a2f003ff479629c776d4"], 0x1c}}, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x4, 0x70bd2b, 0x25dfdbf8, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 11.074652041s ago: executing program 6 (id=4121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.611650676s ago: executing program 6 (id=4122): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x7, 0x5}, &(0x7f0000000040)=0xc) 10.50569831s ago: executing program 6 (id=4124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES8=r5, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRESOCT=r5], 0x32600) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x80, 0x1, 0x4, 0xfffffffb, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0xd, [{@local, 0x3}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x5}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x7, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8000000f}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', r6}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x4, '\x00', r3, r5, 0x0, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 10.020415998s ago: executing program 6 (id=4127): r0 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0x17d4}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4) 9.908691563s ago: executing program 6 (id=4128): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x22020400) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000480)={0x4, 0x10, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x88) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000880) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x464, 0x0, 0x1, [@nested={0xc, 0xcd, 0x0, 0x1, [@nested={0x8, 0xd6, 0x0, 0x1, [@nested={0x4, 0x18}]}]}]}]}]}, 0x2c}}, 0xc000) r5 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@delchain={0x0, 0x65, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xffff}, {0xc, 0x9}, {0x0, 0x6}}, [@TCA_CHAIN={0x0, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040010) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000001c0)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000f9ffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB="03050000000002000800250001"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_open_procfs$namespace(r5, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1, 0x1d, r9}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 7.84697488s ago: executing program 0 (id=4142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='\x00', 0x96400, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0x3]}, {0x7f, 0xff, 0x400, 0x800}}, 0xc0002, &(0x7f0000000340), &(0x7f0000000780)}, {[0x1, 0x8, 0x80000c, 0x401]}, 0x4, 0x62, &(0x7f0000000180)=""/98}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0], 0x80}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x64, r6, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x64}}, 0x90) sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa}, [@typed={0x8, 0xd1, 0x0, 0x0, @pid}, @nested={0x1a0, 0x123, 0x0, 0x1, [@generic="12c819a645925e845ff80d202ac74ba00009d3e64d073f0f0e76e72584867bf57e1343afe2530e27febea9cff67138a07e37a34bbc84fe76003367809281f5b0fd1ccbadd5266cd5f3d4daecfbea2bb0bef9f095cc19ccdff568055df7447079534c6d81f26d8ba81e299edfafbf93e411567bada1ac53fedc77f0", @generic, @generic="e66dec8d697ebbec62863dfd3e6a1ba2f8e834eac4045e79626c392629139c9e3399e21da554bce5f412ca54aee8c06ade9b1c8e3e6d17b4dd8c2075634f221a9fd04103198a4883d9d98a63d917839545b45af0b3d1b36a02c1028138f505e91734914935e2097ff1c1b23df3d233bda53720909cba432fc5011a8d9f0c71e0c8402140c40e108cf8dd8a204abe0501b3ed73a21c9afbf9fef17e570c9efd683150d648e8541364671032b05678b233d80ededdf44dfe5f1c4608ab0666cd7ca921dc421f92633dc27d2ed82d0c640777a086205230ef8137cf98b29299fedbf890dceff4ff77587c7d5e3a3626a25f751fc4ef35c58838e6", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast1, 0x9, 0x1}, 0x20) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000000)={0x1d, r13}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000240)=0x3ff, 0x4) bind$can_raw(r12, &(0x7f0000000080), 0x10) listen(r11, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe1, &(0x7f0000001840)=""/4065}, 0x94) 4.749950814s ago: executing program 0 (id=4169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x55, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x2, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000940000040000000000000000850000002a000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x0, 0x2b, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffe, 0xfffc, 0x0, 0x1, 'veth1_vlan\x00', 'erspan0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x1}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xffffffff, 0xf, 0x5, {@empty, {[0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xca63d3e56e13e625]}}, 0x0, 0x1, 0x4, 0xe4, 0x1, 0xfd, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0x1fe}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4.025216472s ago: executing program 0 (id=4172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed000007030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffee9}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3951d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x220, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0x100}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0xe8, 0x120, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0xff, 0xb, [0x4e24, 0x4e21, 0x4e20, 0x4e21, 0x4e20, 0x4e22, 0x4e24, 0x4e23, 0x4e21, 0x4e22, 0x4e24, 0x4e20, 0x4e20, 0x4e20, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1]}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x0, 0x5}, {0x2, 0x2, 0x4}, {0x4, 0x2}, 0xfffff296, 0x6}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d2, 0x4d5], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2003, 0xa, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x3b, 0x1a, 0x0, 0x3e, 0x9, 0x2, 0x24, 0x39], 0x1, 0x6, 0xa}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'team0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0xa, 0x20, 0x28, 0x18, 0x22, 0xa], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10235, 0x40110}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) socket$tipc(0x1e, 0x2, 0x0) 3.633125115s ago: executing program 0 (id=4177): r0 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4883}, 0x4805) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0xfe, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x5e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2a, 0x3503}]}, 0x78}, 0x21, 0x7}, 0x0) 3.385181121s ago: executing program 0 (id=4179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='\x00', 0x96400, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0x3]}, {0x7f, 0xff, 0x400, 0x800}}, 0xc0002, &(0x7f0000000340), &(0x7f0000000780)}, {[0x1, 0x8, 0x80000c, 0x401]}, 0x4, 0x62, &(0x7f0000000180)=""/98}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1000800800f3d, 0x7) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0], 0x80}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x64, r6, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x64}}, 0x90) sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1bc, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa}, [@typed={0x8, 0xd1, 0x0, 0x0, @pid}, @nested={0x1a0, 0x123, 0x0, 0x1, [@generic="12c819a645925e845ff80d202ac74ba00009d3e64d073f0f0e76e72584867bf57e1343afe2530e27febea9cff67138a07e37a34bbc84fe76003367809281f5b0fd1ccbadd5266cd5f3d4daecfbea2bb0bef9f095cc19ccdff568055df7447079534c6d81f26d8ba81e299edfafbf93e411567bada1ac53fedc77f0", @generic, @generic="e66dec8d697ebbec62863dfd3e6a1ba2f8e834eac4045e79626c392629139c9e3399e21da554bce5f412ca54aee8c06ade9b1c8e3e6d17b4dd8c2075634f221a9fd04103198a4883d9d98a63d917839545b45af0b3d1b36a02c1028138f505e91734914935e2097ff1c1b23df3d233bda53720909cba432fc5011a8d9f0c71e0c8402140c40e108cf8dd8a204abe0501b3ed73a21c9afbf9fef17e570c9efd683150d648e8541364671032b05678b233d80ededdf44dfe5f1c4608ab0666cd7ca921dc421f92633dc27d2ed82d0c640777a086205230ef8137cf98b29299fedbf890dceff4ff77587c7d5e3a3626a25f751fc4ef35c58838e6", @typed={0xc, 0x3f, 0x0, 0x0, @u64=0xfffffffffffffffa}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bind$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0x400, @mcast1, 0x9, 0x1}, 0x20) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000000)={0x1d, r13}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000240)=0x3ff, 0x4) bind$can_raw(r12, &(0x7f0000000080), 0x10) listen(r11, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe1, &(0x7f0000001840)=""/4065}, 0x94) 3.21133816s ago: executing program 5 (id=4181): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffe4}, 0x50) 3.09810294s ago: executing program 5 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x7000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 2.940487372s ago: executing program 5 (id=4187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 2.834543692s ago: executing program 5 (id=4190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x5, 0x6, 0x77}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4) 2.655426198s ago: executing program 1 (id=4192): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000002c0)="1eac2a", 0x3}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20}, 0x3000c810) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @remote}, 0x10) 2.566570943s ago: executing program 1 (id=4193): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) shutdown(r0, 0x1) 2.460831501s ago: executing program 1 (id=4194): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x1, 0x0, 0x0, 0x11, 0x8, 0x5, 0x5508, 0x6, 0x2, 0x1, 'syz1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0500000000000016c9f595179dff630123000000ac"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.381079619s ago: executing program 5 (id=4195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @private1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff9}}], 0x18}}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000002200)=""/195, 0x0, 0xea, '\x00', 0x0, @sock_ops}, 0x94) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000100)={0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x80800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001c00010429bd7000ffdbdf250700", @ANYRES32=r8, @ANYBLOB="40004c060a000200aaaaaaaaaa14e3000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000280)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@iv={0x10}], 0x10, 0x48880}, 0x14000012) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x1000}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb1, 0x1}, [@migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180600000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0xd5, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r12, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$tipc(0x1e, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r13, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r9, @ANYRESHEX=r13, @ANYRES8=r2, @ANYRESHEX=r14], 0x0) 2.299057588s ago: executing program 8 (id=4196): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}}, 0x0) (fail_nth: 6) 1.660200527s ago: executing program 8 (id=4197): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, &(0x7f00000000c0)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b65740000140002800800024000000008080001400000000d0900020073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x12c, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x100a1}, [@IFLA_VF_PORTS={0x10c, 0x18, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "85d381c335de8eb4ce6fe92c5a3275fd"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c0ce47f3304b1a2ea45a9190404f0fa4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1d35578d02642b4d111319271b2df68d"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'geneve\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfd}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "296b1660531f86cb6827bc9a49639982"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7bf21880faf36fcf33ace50a6459afdf"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9f1dd4d1e9691b64eba27c283055c1bb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cf172fdf77b94e09b00d87d9fae2d543"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1300dd136b55ffa01caf7efee3aedbf5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "659b75d0a5d6688ec0b78a6e2e8d367c"}]}]}]}, 0x12c}}, 0x20000020) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000f80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000700)={0x82c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7f4, 0x3, 0x0, 0x1, [{0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "4b10e3e5bce87cdc510d81b88f677590addbc332631c9f9c168fc7b8917dbf28657dbeeb09b96c992836b8f8d85b54c2c97ae734311dc3ab6a39404043a3aa8d6f54a77f061a9dd0db136fb0db4dcd7c12f74e5a44c3af1091e5fdff7d4ecac79acfe34e2e98c2c421ee9824f9d03db455b39e168cab204c5b40ccb862ab36b8d6eec51cc72480242fd0dc86330fc87874f6cf6c701cb8c3b20f3a77d42936376f551cbff2355f33f69a36e293e5aefb19446055bea181f56a16b8ed22b92b3f"}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x94, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPRESSIONS={0x60, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x45, 0x6, 0x1, 0x0, "b855a3d1d5a49a9a045d3095fcebee260f814aa386c521a588216255968f0aa9412786f354a7e334fb0ae20125d7a62d3601a3b7da722ded75576add0db3fcd01b"}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3e, 0x6, 0x1, 0x0, "69a3af2581a5964f93e7680a032a41986ff9c5480e78d376154a955bb909d6d9a0c898ddc3d1cb732bb3357c54fde0d71ac0af65fa84b311fb66"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "69969a71e23a94ee4732b309fbba4ae29ab456c9c3393d798c61a77c9a596db9b35a89662ad0e607f189e88e5ce94ac8f9c7478cdc658f5bcc8ad7976f814e3a3bb90c163bbc28485783e0478d5a180ae5c925d6739f3fb2f67987d06de8f2fd119b5ceffc7045935cf2d195fd5cfadf6dc702966ab654211fa06b3469e7ac5f2dbeaf0f14a8a64373c37a76582638ee00b6dc65e90ee0e99f8b60b9"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "c3dbf9c677afdf556bbe93f249d94bd50a4c30930539871e6bd1b3f05283e8107b40461845fdfd20f725e46cd8c06d51ce98c2a9dcf47b7c0bd1969e68f5dfbe1d5597b4"}, @NFTA_DATA_VALUE={0x36, 0x1, "4fb319ba01ccb30eb5785c5c48d624ea40d06e1ca80ed139bf74cf09b3bcf05220cc498af87fb7fc3564e0ff4eee237d3dda"}]}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000001}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x31c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe76}, @NFTA_SET_ELEM_EXPRESSIONS={0x30c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x30, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x28c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x280, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x264, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "723dd5078e4365daa40c572869d011891e16c8bf91298b6cb0497fa0fedea5573b5d5ca3cf96b5e658a446e1ce62f636e2da98c4e72ecfbd611535b5114bee01dd3965c8acb6ab"}, @NFTA_DATA_VALUE={0x31, 0x1, "81c394f1f9789a6c3ed5267df7fb882f656f22112596f2804264f55e3230868e91f4a80fa8f77ae631ed625057"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "7d5d6568888312077b4babbbe2e08a9eff6ea8fafc206068f37b55e739004bde4e0a58e2ab7f2c65287b3cefc1ef773d47ff660a34be14f58b08915de840b76f03e9ec77749873fdf991a0dbadb5879b6e54633676278cffa521f11ba2d2b9e81a05f7b54fb27bceaddc4b162eb12968aa8b492b23443129a7ee11ecf1953db146e71b9f945e13dcc8701315e01634fbecbf2442ee2cee6ed2a792cf3a4a425575dd6b57aa923f961b83b3950f240c623449274c1e52239c21cb910bb9f39bcecab769377f43a9ff121ace2ded19e585df2d8f30eb1caf87b79c986a0eec3472c5175e1c9f0d121d3e2a7b23"}, @NFTA_DATA_VALUE={0x4f, 0x1, "eda51c3a8774ec965f4da5ac252a4c495c365406a3a995cf243aae6b8c22903d8fcf64e14de839c7271027898c459860cc28bede4c6349f774fe108df5526796296282f123cabbed9fa31a"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}, {0x4}]}]}, 0x82c}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1536ef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000400)={r6, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x9}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000005c0)={{r8, &(0x7f0000000440)='\x00', 0x40100, &(0x7f0000000480)={@align=0x3, {0x1828, 0x400, 0x0, 0xffffffffffff33af}}, 0x9, &(0x7f00000004c0), &(0x7f0000000500)=0xd3}, {[0xfffff2ab, 0x7000, 0x0, 0x800]}, 0xb, 0x6d, &(0x7f0000000540)=""/109}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x18, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) getsockname$l2tp6(r9, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000680)=0x20) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"/475, @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf250c0000000a00090000000000000000000800340009000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000405) 1.644339196s ago: executing program 5 (id=4198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xfd, 0xfffffffffffffffc, &(0x7f0000000a40)="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", &(0x7f0000000140)=""/13, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="c9fe0da955fa31fd06733d737a00f7bb88ee16d90c1f59dfe1e0589e751df3697eb0dde253a94335636603928a784796df9ac6d88b872cf94450aba5c998b65088047e1e10658a2a9f0ebfde5d8b7d7e6c1190b279f8be9d6f40500e5a96329de60d78e3ecd61955acaf3e935eb12c144d25d1162decb08b06ea03b021631eccf5cba679dec12e1bb091b4639315b141af1cd078a7849caeef41e045d479c52ff9f7eb75ecbf985a04ee970128b60b1fb07e16349b10f7eda6f7c1b38973dffcc3bd94c48032558c91bf2900319aef4c08cecf38c64990bcb76f3e91b39f8cf81177bb67f4893f694a54bfb6700039c30c42e19501c3c314ce9cac9dab0422b7ce208442ab22db2d67f203e599a2591deb03", 0x1, 0x0, 0x2}, 0x9) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}]}}]}, 0x50}}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{&(0x7f00000001c0)=@caif=@dgm, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/37, 0x25}], 0x1, &(0x7f00000003c0)=""/226, 0xe2}, 0x7}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/215, 0xd7}, 0x7}, {{&(0x7f0000000680)=@qipcrtr, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000700)=""/154, 0x9a}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)=""/187, 0xbb}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000000a00)=""/70, 0x46}, {&(0x7f0000000a80)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/126, 0x7e}, {&(0x7f0000001e40)=""/48, 0x30}], 0x9, &(0x7f0000001f40)=""/78, 0x4e}, 0xba2b}, {{&(0x7f0000001fc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002040)=""/63, 0x3f}, {&(0x7f0000002080)=""/87, 0x57}, {&(0x7f0000002100)=""/30, 0x1e}, {&(0x7f0000002140)=""/25, 0x19}, {&(0x7f0000002180)=""/62, 0x3e}, {&(0x7f00000021c0)=""/73, 0x49}], 0x6, &(0x7f00000022c0)=""/71, 0x47}, 0x6}, {{&(0x7f0000002340)=@alg, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/43, 0x2b}, {&(0x7f0000002400)=""/73, 0x49}, {&(0x7f0000002480)}], 0x3, &(0x7f0000002500)=""/163, 0xa3}, 0x2}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000025c0)=""/205, 0xcd}, {&(0x7f00000026c0)=""/194, 0xc2}, {&(0x7f00000027c0)=""/123, 0x7b}, {&(0x7f0000002840)=""/166, 0xa6}, {&(0x7f0000002900)=""/127, 0x7f}], 0x5, &(0x7f0000002a00)=""/171, 0xab}, 0x5}, {{&(0x7f0000002ac0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002b40)=""/204, 0xcc}, {&(0x7f0000002c40)=""/231, 0xe7}, {&(0x7f0000002d40)=""/168, 0xa8}, {&(0x7f0000002e00)=""/31, 0x1f}], 0x4, &(0x7f0000002e80)=""/173, 0xad}, 0x4eec}, {{&(0x7f0000002f40)=@isdn, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002fc0)=""/35, 0x23}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/145, 0x91}, {&(0x7f00000031c0)=""/47, 0x2f}, {&(0x7f0000003200)=""/21, 0x15}, {&(0x7f0000003240)=""/82, 0x52}], 0x6, &(0x7f0000003340)=""/156, 0x9c}, 0x6}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003400)=""/249, 0xf9}, {&(0x7f0000003500)=""/215, 0xd7}, {&(0x7f0000003600)=""/159, 0x9f}, {&(0x7f00000036c0)}], 0x4, &(0x7f0000003740)=""/157, 0x9d}, 0x1}], 0x9, 0x2000, &(0x7f0000003a40)={0x77359400}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000d80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x84, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xbc779c08db5f8913}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1.386550132s ago: executing program 8 (id=4199): socket(0x28, 0x2, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048814) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000d89ac4500000000000000000000088f3440008646101c4c15a9ea8e7c7601535ccfe7e07acfcac24f32352ec1c05e0b992de930f4804cfa500d2c6dd8f282bbdd5c894b330c295312fa1b12621a4af7d3564281121d1c2cc3d904550a63cebfc09c954bda549bef909bf582558c9613e0bb00fe4fbaf7b82714fde2f663b591fd1ad00750ddead5fb3e0803a88cf53300973ec815740b7e4066edd056428c5fe3c7185493686f6a6782f6f6bea7d5ba4e8d7201a40af4f151e440c06529d67eab8b95a1c56cf8885555d610d6457161628c45fe957cbcf846f7e1235fc2e9f74818690e5a894724bc433", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) 1.292107948s ago: executing program 8 (id=4200): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18040000000000000000000000000000711842000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x7, 0xfc, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve1\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xaa3}}}, {{@arp={@private=0xa010100, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 'pim6reg0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x84}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, 0x8, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) recvfrom(r5, &(0x7f0000000280)=""/5, 0x5, 0x40000041, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 1.130444806s ago: executing program 8 (id=4201): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.07429661s ago: executing program 1 (id=4202): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x129b}}]}, 0x3c}}, 0x4000081) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000000000000", @ANYRES32, @ANYBLOB="0f87ff7854370ff610bdebf2436021c074e174e042b42972ad5844b2f795cd3ce84b4c209ede570f86e512486e811a054555c2c9cac33e8547bd9110f40cc5d8da84dc36f6b5ef0d3196dfa60fbf2371c8acce20a7c21c19651e2ba274ee442e7f87a1865c7262c33317add94f9630d8c4c76133f9cdf5e8c88867f50030ab7ecf3ed6902e385e6c3c7c935c08286cbcac8042315888185170d3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x14, r5, 0x1, 0x70bd31, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000003c0)) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x3, 0x7, 0xcb27e6a1193df43d, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040004) 1.002089827s ago: executing program 8 (id=4203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x23, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x9be47000) getsockopt(r1, 0x200000000114, 0x2712, &(0x7f0000000240)=""/102390, &(0x7f0000000040)=0x18ff6) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffcb7, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x3, 0x6, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0xa, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x6, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 945.144129ms ago: executing program 1 (id=4204): r0 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="f9ffffff", 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 832.040443ms ago: executing program 1 (id=4205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x32, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0xa8, 0x1d8, 0xffffffff, 0xa8, 0x1d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x28, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @port=0x4e21}}}}, {{@ip={@remote, @loopback, 0xff, 0xff000000, 'ip6_vti0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x16, 0x2, 0x20}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x2, 0x2}}, @common=@unspec=@connbytes={{0x38}, {[{0x100}, {0x3}], 0x3, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @dev={0xac, 0x14, 0x14, 0x39}, @icmp_id=0x65, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1a, @local, @private=0xa010101, @gre_key=0x1, @port=0x4e22}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffffff, 0xffffffff, 'dummy0\x00', 'batadv0\x00', {0xff}, {}, 0x4, 0x3, 0x40}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x4, 0x2, 0x2}, {0xfd, 0x1ff}, {0xd, 0x14}, 0x9}}, @common=@ah={{0x30}, {[0x40, 0x9], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0xe, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) close(0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000a40)={'sit0\x00', r10, 0x7800, 0x1, 0x80000001, 0x108, {{0x2a, 0x4, 0x2, 0x28, 0xa8, 0x68, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x30, 0x1, 0x0, [{@rand_addr=0x64010102, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x8246}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0x44, 0x75, 0x3, 0x4, [{@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010101, 0x87c}, {@rand_addr=0x64010100}, {@private=0xa010101, 0x3}, {@multicast2, 0x4e}, {@private=0xa010101, 0x9}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xa}]}, @rr={0x7, 0x7, 0x89, [@loopback]}, @ssrr={0x89, 0x23, 0x75, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r12, 0x215eb000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) recvmmsg(r13, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) 0s ago: executing program 0 (id=4206): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) unshare(0x8040480) r0 = socket(0x8, 0x4, 0x3) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'vxcan1\x00'}}, 0x1e) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 14168][T15793] ksys_write+0x150/0x270 [ 400.414204][T15793] ? __pfx_ksys_write+0x10/0x10 [ 400.414247][T15793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.414271][T15793] do_syscall_64+0x174/0x580 [ 400.414295][T15793] ? trace_irq_disable+0x3b/0x140 [ 400.414322][T15793] ? clear_bhb_loop+0x40/0x90 [ 400.414349][T15793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.414371][T15793] RIP: 0033:0x7f835315e6ce [ 400.414392][T15793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.414410][T15793] RSP: 002b:00007f8353fdffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.414434][T15793] RAX: ffffffffffffffda RBX: 00007f8353fe06c0 RCX: 00007f835315e6ce [ 400.414449][T15793] RDX: 0000000000000062 RSI: 0000200000000a00 RDI: 00000000000000c8 [ 400.414463][T15793] RBP: 00007f8353fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 400.414476][T15793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.414489][T15793] R13: 00007f8353426128 R14: 00007f8353426090 R15: 00007ffd6fde7488 [ 400.414524][T15793] [ 400.737584][T15785] batadv0: entered promiscuous mode [ 400.744166][T15785] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 401.091576][T15805] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 401.103789][T15808] netlink: zone id is out of range [ 401.109940][T15808] netlink: zone id is out of range [ 401.120064][T15808] netlink: zone id is out of range [ 401.131179][T15808] netlink: zone id is out of range [ 401.140241][T15812] FAULT_INJECTION: forcing a failure. [ 401.140241][T15812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.155759][T15808] netlink: zone id is out of range [ 401.160378][T15814] syzkaller0: entered promiscuous mode [ 401.175827][T15808] netlink: zone id is out of range [ 401.177527][T15814] syzkaller0: entered allmulticast mode [ 401.186244][T15808] netlink: zone id is out of range [ 401.192483][T15812] CPU: 1 UID: 0 PID: 15812 Comm: syz.1.3561 Not tainted syzkaller #0 PREEMPT(full) [ 401.192510][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 401.192523][T15812] Call Trace: [ 401.192532][T15812] [ 401.192541][T15812] dump_stack_lvl+0xe8/0x150 [ 401.192578][T15812] should_fail_ex+0x40c/0x560 [ 401.192610][T15812] _copy_from_iter+0x1d3/0x1660 [ 401.192639][T15812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 401.192674][T15812] ? __pfx_policy_nodemask+0x10/0x10 [ 401.192706][T15812] ? unwind_next_frame+0x8f/0x2550 [ 401.192729][T15812] ? __pfx__copy_from_iter+0x10/0x10 [ 401.192762][T15812] ? alloc_pages_mpol+0x24a/0x380 [ 401.192805][T15812] copy_page_from_iter+0x219/0x2d0 [ 401.192840][T15812] tun_get_user+0x1bf1/0x4370 [ 401.192873][T15812] ? tun_get_user+0x6e7/0x4370 [ 401.192929][T15812] ? aa_file_perm+0x4ed/0x15f0 [ 401.192953][T15812] ? __pfx_tun_get_user+0x10/0x10 [ 401.192986][T15812] ? __lock_acquire+0x683/0x2cf0 [ 401.193036][T15812] ? ref_tracker_alloc+0x341/0x4b0 [ 401.193062][T15812] ? get_pid_task+0x20/0x1f0 [ 401.193094][T15812] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 401.193124][T15812] ? tun_get+0x1c/0x2f0 [ 401.193154][T15812] ? tun_get+0x1c/0x2f0 [ 401.193189][T15812] ? tun_get+0x1c/0x2f0 [ 401.193218][T15812] ? tun_get+0x1c/0x2f0 [ 401.193254][T15812] tun_chr_write_iter+0x113/0x200 [ 401.193287][T15812] vfs_write+0x612/0xba0 [ 401.193331][T15812] ? __pfx_vfs_write+0x10/0x10 [ 401.193375][T15812] ? __fget_files+0x2a/0x420 [ 401.193414][T15812] ksys_write+0x150/0x270 [ 401.193450][T15812] ? __pfx_ksys_write+0x10/0x10 [ 401.193492][T15812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.193517][T15812] do_syscall_64+0x174/0x580 [ 401.193541][T15812] ? trace_irq_disable+0x3b/0x140 [ 401.193568][T15812] ? clear_bhb_loop+0x40/0x90 [ 401.193596][T15812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.193618][T15812] RIP: 0033:0x7f835315e6ce [ 401.193638][T15812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.193656][T15812] RSP: 002b:00007f8354000fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.193678][T15812] RAX: ffffffffffffffda RBX: 00007f83540016c0 RCX: 00007f835315e6ce [ 401.193694][T15812] RDX: 00000000000000d2 RSI: 0000200000000140 RDI: 00000000000000c8 [ 401.193708][T15812] RBP: 00007f8354001090 R08: 0000000000000000 R09: 0000000000000000 [ 401.193722][T15812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.193735][T15812] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 401.193770][T15812] [ 402.383873][T15847] netlink: 'syz.1.3576': attribute type 10 has an invalid length. [ 402.392089][T15847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3576'. [ 402.497411][T15847] syzkaller1: entered promiscuous mode [ 402.509661][T15847] syzkaller1: entered allmulticast mode [ 402.802284][T15857] syzkaller0: entered promiscuous mode [ 402.819242][T15857] syzkaller0: entered allmulticast mode [ 403.031593][T15863] lo speed is unknown, defaulting to 1000 [ 403.032487][T15870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3585'. [ 403.324675][T15881] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3589'. [ 403.379372][T15884] netlink: 'syz.7.3590': attribute type 1 has an invalid length. [ 403.621170][T15890] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3591'. [ 403.750128][T15890] team0 (unregistering): Port device team_slave_0 removed [ 403.802500][T15890] team0 (unregistering): Port device team_slave_1 removed [ 404.149552][T15863] lo speed is unknown, defaulting to 1000 [ 404.229132][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3594'. [ 404.326126][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3594'. [ 404.492688][T15909] syzkaller0: entered promiscuous mode [ 404.506251][T15909] syzkaller0: entered allmulticast mode [ 404.845033][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3600'. [ 405.034485][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3602'. [ 405.058371][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3602'. [ 405.130560][T15927] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3603'. [ 405.168986][T15927] syzkaller0: entered promiscuous mode [ 405.186294][T15927] syzkaller0: entered allmulticast mode [ 405.379961][T15933] lo speed is unknown, defaulting to 1000 [ 405.718134][T15938] lo speed is unknown, defaulting to 1000 [ 405.732114][T15933] lo speed is unknown, defaulting to 1000 [ 405.805290][T15952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3608'. [ 405.955621][ T647] nci: nci_rx_work: unknown MT 0x6 [ 406.118052][ T4935] Bluetooth: hci6: command 0x0406 tx timeout [ 406.134027][T15967] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3611'. [ 406.194870][T15969] FAULT_INJECTION: forcing a failure. [ 406.194870][T15969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.208519][T15969] CPU: 0 UID: 0 PID: 15969 Comm: syz.7.3612 Not tainted syzkaller #0 PREEMPT(full) [ 406.208547][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 406.208560][T15969] Call Trace: [ 406.208568][T15969] [ 406.208577][T15969] dump_stack_lvl+0xe8/0x150 [ 406.208613][T15969] should_fail_ex+0x40c/0x560 [ 406.208643][T15969] _copy_from_iter+0x1d3/0x1660 [ 406.208670][T15969] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 406.208696][T15969] ? rcu_is_watching+0x15/0xb0 [ 406.208729][T15969] ? trace_kmem_cache_alloc+0x29/0xe0 [ 406.208756][T15969] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 406.208781][T15969] ? __pfx__copy_from_iter+0x10/0x10 [ 406.208807][T15969] ? __alloc_skb+0x276/0x7a0 [ 406.208825][T15969] ? __alloc_skb+0x276/0x7a0 [ 406.208850][T15969] ? netlink_sendmsg+0x650/0xb40 [ 406.208873][T15969] ? skb_put+0x112/0x210 [ 406.208896][T15969] netlink_sendmsg+0x6c0/0xb40 [ 406.208929][T15969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.208958][T15969] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.208985][T15969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.209008][T15969] sock_sendmsg_nosec+0x13a/0x180 [ 406.209040][T15969] ____sys_sendmsg+0x54e/0x850 [ 406.209069][T15969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.209101][T15969] ? import_iovec+0x73/0xa0 [ 406.209135][T15969] ___sys_sendmsg+0x2a5/0x360 [ 406.209156][T15969] ? __lock_acquire+0x683/0x2cf0 [ 406.209188][T15969] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.209248][T15969] ? __fget_files+0x2a/0x420 [ 406.209274][T15969] ? __fget_files+0x3a2/0x420 [ 406.209312][T15969] __x64_sys_sendmsg+0x1b1/0x290 [ 406.209338][T15969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.209392][T15969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.209415][T15969] do_syscall_64+0x174/0x580 [ 406.209439][T15969] ? trace_irq_disable+0x3b/0x140 [ 406.209465][T15969] ? clear_bhb_loop+0x40/0x90 [ 406.209495][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.209516][T15969] RIP: 0033:0x7f301559de99 [ 406.209536][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.209555][T15969] RSP: 002b:00007f30163d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.209577][T15969] RAX: ffffffffffffffda RBX: 00007f3015825fa0 RCX: 00007f301559de99 [ 406.209592][T15969] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 406.209606][T15969] RBP: 00007f30163d8090 R08: 0000000000000000 R09: 0000000000000000 [ 406.209619][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.209631][T15969] R13: 00007f3015826038 R14: 00007f3015825fa0 R15: 00007fff6a8c9af8 [ 406.209664][T15969] [ 406.834006][T15938] lo speed is unknown, defaulting to 1000 [ 407.662236][T15987] netlink: 'syz.6.3619': attribute type 6 has an invalid length. [ 407.670257][T15987] netlink: 'syz.6.3619': attribute type 5 has an invalid length. [ 407.839414][T15988] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.847158][T15988] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.861892][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.869190][T15988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.876883][T15988] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.884043][T15988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.909983][T15988] team0: Port device bridge0 added [ 408.875307][T15955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.105638][T15996] netlink: 'syz.0.3620': attribute type 1 has an invalid length. [ 409.254661][T16011] FAULT_INJECTION: forcing a failure. [ 409.254661][T16011] name failslab, interval 1, probability 0, space 0, times 0 [ 409.270503][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.7.3626 Not tainted syzkaller #0 PREEMPT(full) [ 409.270531][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 409.270544][T16011] Call Trace: [ 409.270552][T16011] [ 409.270561][T16011] dump_stack_lvl+0xe8/0x150 [ 409.270607][T16011] should_fail_ex+0x40c/0x560 [ 409.270639][T16011] should_failslab+0xa8/0x100 [ 409.270673][T16011] __kmalloc_cache_node_noprof+0xaa/0x630 [ 409.270706][T16011] ? __get_vm_area_node+0x136/0x300 [ 409.270728][T16011] ? __get_vm_area_node+0x136/0x300 [ 409.270759][T16011] __get_vm_area_node+0x136/0x300 [ 409.270788][T16011] __vmalloc_node_range_noprof+0x358/0x1730 [ 409.270814][T16011] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.270846][T16011] ? __lock_acquire+0x683/0x2cf0 [ 409.270900][T16011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.270927][T16011] ? aa_file_perm+0x18b/0x15f0 [ 409.270962][T16011] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.270989][T16011] __vmalloc_noprof+0xd2/0x120 [ 409.271014][T16011] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.271046][T16011] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.271073][T16011] ? bpf_prog_alloc+0x2a/0x1a0 [ 409.271104][T16011] bpf_prog_alloc+0x3c/0x1a0 [ 409.271135][T16011] bpf_prog_load+0x7f8/0x1c00 [ 409.271177][T16011] ? __pfx_bpf_prog_load+0x10/0x10 [ 409.271233][T16011] __sys_bpf+0xd0d/0xd90 [ 409.271271][T16011] ? __pfx___sys_bpf+0x10/0x10 [ 409.271311][T16011] ? __fget_files+0x2a/0x420 [ 409.271357][T16011] ? ksys_write+0x242/0x270 [ 409.271392][T16011] ? __pfx_ksys_write+0x10/0x10 [ 409.271430][T16011] __x64_sys_bpf+0xba/0xd0 [ 409.271455][T16011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.271477][T16011] do_syscall_64+0x174/0x580 [ 409.271501][T16011] ? trace_irq_disable+0x3b/0x140 [ 409.271525][T16011] ? clear_bhb_loop+0x40/0x90 [ 409.271550][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.271571][T16011] RIP: 0033:0x7f301559de99 [ 409.271600][T16011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.271617][T16011] RSP: 002b:00007f30163d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.271638][T16011] RAX: ffffffffffffffda RBX: 00007f3015825fa0 RCX: 00007f301559de99 [ 409.271653][T16011] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 409.271667][T16011] RBP: 00007f30163d8090 R08: 0000000000000000 R09: 0000000000000000 [ 409.271680][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.271693][T16011] R13: 00007f3015826038 R14: 00007f3015825fa0 R15: 00007fff6a8c9af8 [ 409.271725][T16011] [ 409.271736][T16011] syz.7.3626: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 409.394177][T15996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.478716][T16011] ,cpuset=/,mems_allowed=0-1 [ 409.574231][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.7.3626 Not tainted syzkaller #0 PREEMPT(full) [ 409.574259][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 409.574272][T16011] Call Trace: [ 409.574280][T16011] [ 409.574289][T16011] dump_stack_lvl+0xe8/0x150 [ 409.574328][T16011] warn_alloc+0x24c/0x270 [ 409.574356][T16011] ? __kasan_kmalloc+0x22/0xb0 [ 409.574388][T16011] ? __pfx_warn_alloc+0x10/0x10 [ 409.574423][T16011] ? __get_vm_area_node+0x2af/0x300 [ 409.574453][T16011] __vmalloc_node_range_noprof+0x37d/0x1730 [ 409.574484][T16011] ? __lock_acquire+0x683/0x2cf0 [ 409.574578][T16011] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 409.574605][T16011] ? aa_file_perm+0x18b/0x15f0 [ 409.574640][T16011] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.574668][T16011] __vmalloc_noprof+0xd2/0x120 [ 409.574693][T16011] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.574725][T16011] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 409.574753][T16011] ? bpf_prog_alloc+0x2a/0x1a0 [ 409.574783][T16011] bpf_prog_alloc+0x3c/0x1a0 [ 409.574815][T16011] bpf_prog_load+0x7f8/0x1c00 [ 409.574856][T16011] ? __pfx_bpf_prog_load+0x10/0x10 [ 409.574913][T16011] __sys_bpf+0xd0d/0xd90 [ 409.574951][T16011] ? __pfx___sys_bpf+0x10/0x10 [ 409.574990][T16011] ? __fget_files+0x2a/0x420 [ 409.575037][T16011] ? ksys_write+0x242/0x270 [ 409.575073][T16011] ? __pfx_ksys_write+0x10/0x10 [ 409.575111][T16011] __x64_sys_bpf+0xba/0xd0 [ 409.575137][T16011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.575165][T16011] do_syscall_64+0x174/0x580 [ 409.575189][T16011] ? trace_irq_disable+0x3b/0x140 [ 409.575216][T16011] ? clear_bhb_loop+0x40/0x90 [ 409.575241][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.575263][T16011] RIP: 0033:0x7f301559de99 [ 409.575282][T16011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.575300][T16011] RSP: 002b:00007f30163d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.575324][T16011] RAX: ffffffffffffffda RBX: 00007f3015825fa0 RCX: 00007f301559de99 [ 409.575340][T16011] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 409.575354][T16011] RBP: 00007f30163d8090 R08: 0000000000000000 R09: 0000000000000000 [ 409.575368][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.575380][T16011] R13: 00007f3015826038 R14: 00007f3015825fa0 R15: 00007fff6a8c9af8 [ 409.575414][T16011] [ 409.575564][T16011] Mem-Info: [ 409.844568][T16011] active_anon:6846 inactive_anon:0 isolated_anon:0 [ 409.844568][T16011] active_file:0 inactive_file:43885 isolated_file:0 [ 409.844568][T16011] unevictable:768 dirty:463 writeback:0 [ 409.844568][T16011] slab_reclaimable:12037 slab_unreclaimable:126966 [ 409.844568][T16011] mapped:45271 shmem:1289 pagetables:1408 [ 409.844568][T16011] sec_pagetables:0 bounce:0 [ 409.844568][T16011] kernel_misc_reclaimable:0 [ 409.844568][T16011] free:1251437 free_pcp:10443 free_cma:0 [ 409.891474][T16011] Node 0 active_anon:27384kB inactive_anon:0kB active_file:0kB inactive_file:175336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:181084kB dirty:1852kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15836kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 409.927667][T16011] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 409.978771][T16009] bond1: (slave gretap1): making interface the new active one [ 410.002274][T16016] net_ratelimit: 25 callbacks suppressed [ 410.002294][T16016] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 410.017737][T16009] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.036083][T16011] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.111996][T16011] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 410.130287][T16011] Node 0 DMA32 free:1045320kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27484kB inactive_anon:0kB active_file:0kB inactive_file:175336kB unevictable:1536kB writepending:1852kB zspages:0kB present:3129332kB managed:2548656kB mlocked:0kB bounce:0kB free_pcp:41736kB local_pcp:20460kB free_cma:0kB [ 410.220369][T16011] lowmem_reserve[]: 0 0 0 0 0 [ 410.234699][T16011] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.272581][T16021] syzkaller0: entered promiscuous mode [ 410.280052][T16021] syzkaller0: entered allmulticast mode [ 410.292127][T16021] tipc: Enabled bearer , priority 0 [ 410.299587][T16011] lowmem_reserve[]: 0 0 0 0 0 [ 410.311174][T16011] Node 1 Normal free:3944712kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.365449][T16011] lowmem_reserve[]: 0 0 0 0 0 [ 410.374768][T16011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.400438][T16011] Node 0 DMA32: 951*4kB (UME) 892*8kB (UM) 439*16kB (UME) 153*32kB (UME) 47*64kB (UM) 19*128kB (UM) 10*256kB (UM) 3*512kB (UM) 2*1024kB (M) 9*2048kB (UM) 242*4096kB (UME) = 1044108kB [ 410.472812][T16011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 410.517721][T16011] Node 1 Normal: 0*4kB 3*8kB (UM) 9*16kB (UM) 5*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944712kB [ 410.566565][T16011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.584799][T16011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.602022][T16011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.641048][T16011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.674309][T16011] 45220 total pagecache pages [ 410.680102][T16011] 0 pages in swap cache [ 410.684331][T16011] Free swap = 124996kB [ 410.688959][T16011] Total swap = 124996kB [ 410.693319][T16011] 2097051 pages RAM [ 410.701267][T16011] 0 pages HighMem/MovableOnly [ 410.707843][T16011] 428206 pages reserved [ 410.713820][T16011] 0 pages cma reserved [ 410.833970][T16021] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 410.934012][T16041] netlink: 'syz.7.3632': attribute type 1 has an invalid length. [ 410.950532][T16041] __nla_validate_parse: 6 callbacks suppressed [ 410.950551][T16041] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3632'. [ 411.001561][T16041] netlink: 'syz.7.3632': attribute type 13 has an invalid length. [ 411.201421][T12345] nci: nci_rx_work: unknown MT 0x6 [ 411.541926][T16021] tipc: Resetting bearer [ 411.577729][T16021] tipc: Disabling bearer [ 411.653052][T16050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3635'. [ 412.085753][T16071] FAULT_INJECTION: forcing a failure. [ 412.085753][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 412.099169][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.1.3641 Not tainted syzkaller #0 PREEMPT(full) [ 412.099196][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.099209][T16071] Call Trace: [ 412.099217][T16071] [ 412.099225][T16071] dump_stack_lvl+0xe8/0x150 [ 412.099262][T16071] should_fail_ex+0x40c/0x560 [ 412.099294][T16071] should_failslab+0xa8/0x100 [ 412.099327][T16071] __kmalloc_noprof+0xfe/0x720 [ 412.099351][T16071] ? __ipv6_chk_addr_and_flags+0x688/0x7e0 [ 412.099374][T16071] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 412.099398][T16071] ? sock_kmalloc+0xd6/0x160 [ 412.099420][T16071] ? sock_kmalloc+0xd6/0x160 [ 412.099450][T16071] sock_kmalloc+0xd6/0x160 [ 412.099478][T16071] ipv6_sock_ac_join+0x306/0x820 [ 412.099514][T16071] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 412.099544][T16071] ? _copy_from_user+0x94/0xb0 [ 412.099580][T16071] do_ipv6_setsockopt+0x20d1/0x3180 [ 412.099624][T16071] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 412.099655][T16071] ? get_pid_task+0x20/0x1f0 [ 412.099696][T16071] ? __lock_acquire+0x683/0x2cf0 [ 412.099747][T16071] ? aa_sk_perm+0x6d5/0x900 [ 412.099781][T16071] ? __fget_files+0x2a/0x420 [ 412.099829][T16071] ? __fget_files+0x2a/0x420 [ 412.099855][T16071] ? aa_sock_opt_perm+0xff/0x1a0 [ 412.099899][T16071] ipv6_setsockopt+0x59/0x170 [ 412.099919][T16071] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 412.099953][T16071] do_sock_setsockopt+0x17c/0x1b0 [ 412.099985][T16071] __x64_sys_setsockopt+0x13d/0x1b0 [ 412.100011][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.100035][T16071] do_syscall_64+0x174/0x580 [ 412.100060][T16071] ? trace_irq_disable+0x3b/0x140 [ 412.100087][T16071] ? clear_bhb_loop+0x40/0x90 [ 412.100115][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.100137][T16071] RIP: 0033:0x7f835319de99 [ 412.100158][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.100177][T16071] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.100200][T16071] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 412.100217][T16071] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 412.100230][T16071] RBP: 00007f8354001090 R08: 0000000000000020 R09: 0000000000000000 [ 412.100244][T16071] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 412.100258][T16071] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 412.100293][T16071] [ 412.515818][T16083] FAULT_INJECTION: forcing a failure. [ 412.515818][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.529383][T16083] CPU: 0 UID: 0 PID: 16083 Comm: syz.1.3645 Not tainted syzkaller #0 PREEMPT(full) [ 412.529410][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.529422][T16083] Call Trace: [ 412.529431][T16083] [ 412.529439][T16083] dump_stack_lvl+0xe8/0x150 [ 412.529478][T16083] should_fail_ex+0x40c/0x560 [ 412.529509][T16083] _copy_to_user+0x31/0xb0 [ 412.529544][T16083] copy_to_sockptr_offset+0x66/0xa0 [ 412.529572][T16083] do_ip_getsockopt+0x1021/0x1d00 [ 412.529608][T16083] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 412.529642][T16083] ? _parse_integer_limit+0x192/0x1e0 [ 412.529676][T16083] ? __lock_acquire+0x683/0x2cf0 [ 412.529706][T16083] ? kstrtouint+0x6e/0xe0 [ 412.529760][T16083] ? __might_fault+0xaf/0x130 [ 412.529787][T16083] ip_getsockopt+0xbb/0x230 [ 412.529821][T16083] ? __pfx_ip_getsockopt+0x10/0x10 [ 412.529849][T16083] ? sock_common_getsockopt+0x2d/0xb0 [ 412.529880][T16083] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 412.529911][T16083] do_sock_getsockopt+0x51d/0x7e0 [ 412.529939][T16083] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 412.529980][T16083] ? __fget_files+0x3a2/0x420 [ 412.530009][T16083] ? __fget_files+0x2a/0x420 [ 412.530046][T16083] __x64_sys_getsockopt+0x1a4/0x240 [ 412.530077][T16083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.530102][T16083] do_syscall_64+0x174/0x580 [ 412.530126][T16083] ? trace_irq_disable+0x3b/0x140 [ 412.530153][T16083] ? clear_bhb_loop+0x40/0x90 [ 412.530180][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.530202][T16083] RIP: 0033:0x7f835319de99 [ 412.530222][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.530241][T16083] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 412.530264][T16083] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 412.530280][T16083] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000003 [ 412.530293][T16083] RBP: 00007f8354001090 R08: 0000200000000080 R09: 0000000000000000 [ 412.530307][T16083] R10: 0000200000937fed R11: 0000000000000246 R12: 0000000000000001 [ 412.530321][T16083] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 412.530356][T16083] [ 412.797481][T16084] netlink: 'syz.5.3644': attribute type 13 has an invalid length. [ 412.958869][T16089] FAULT_INJECTION: forcing a failure. [ 412.958869][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.973619][T16089] CPU: 0 UID: 0 PID: 16089 Comm: syz.1.3647 Not tainted syzkaller #0 PREEMPT(full) [ 412.973647][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.973660][T16089] Call Trace: [ 412.973668][T16089] [ 412.973676][T16089] dump_stack_lvl+0xe8/0x150 [ 412.973714][T16089] should_fail_ex+0x40c/0x560 [ 412.973751][T16089] _copy_from_user+0x2d/0xb0 [ 412.973785][T16089] bpf_test_init+0xd8/0x150 [ 412.973832][T16089] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 412.973876][T16089] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.973908][T16089] ? __fget_files+0x2a/0x420 [ 412.973944][T16089] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.973970][T16089] bpf_prog_test_run+0x2c5/0x340 [ 412.974005][T16089] __sys_bpf+0xa22/0xd90 [ 412.974042][T16089] ? __pfx___sys_bpf+0x10/0x10 [ 412.974084][T16089] ? __fget_files+0x2a/0x420 [ 412.974132][T16089] ? ksys_write+0x242/0x270 [ 412.974169][T16089] ? __pfx_ksys_write+0x10/0x10 [ 412.974221][T16089] __x64_sys_bpf+0xba/0xd0 [ 412.974246][T16089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.974270][T16089] do_syscall_64+0x174/0x580 [ 412.974302][T16089] ? trace_irq_disable+0x3b/0x140 [ 412.974330][T16089] ? clear_bhb_loop+0x40/0x90 [ 412.974357][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.974379][T16089] RIP: 0033:0x7f835319de99 [ 412.974400][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.974419][T16089] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.974442][T16089] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 412.974458][T16089] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 412.974472][T16089] RBP: 00007f8354001090 R08: 0000000000000000 R09: 0000000000000000 [ 412.974486][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.974499][T16089] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 412.974535][T16089] [ 413.208555][T16081] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 413.284792][T16081] syzkaller0: entered promiscuous mode [ 413.290732][T16081] syzkaller0: entered allmulticast mode [ 413.311016][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 413.801588][T16104] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3653'. [ 414.004085][T16110] netlink: zone id is out of range [ 414.009463][T16110] netlink: zone id is out of range [ 414.014682][T16110] netlink: zone id is out of range [ 414.019975][T16110] netlink: zone id is out of range [ 414.025306][T16110] netlink: zone id is out of range [ 414.030580][T16110] netlink: zone id is out of range [ 414.035872][T16110] netlink: zone id is out of range [ 414.041516][T16110] netlink: zone id is out of range [ 414.107064][T16045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.350544][T16114] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3656'. [ 414.366168][T16116] FAULT_INJECTION: forcing a failure. [ 414.366168][T16116] name failslab, interval 1, probability 0, space 0, times 0 [ 414.380530][T16116] CPU: 1 UID: 0 PID: 16116 Comm: syz.6.3658 Not tainted syzkaller #0 PREEMPT(full) [ 414.380559][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 414.380571][T16116] Call Trace: [ 414.380580][T16116] [ 414.380589][T16116] dump_stack_lvl+0xe8/0x150 [ 414.380636][T16116] should_fail_ex+0x40c/0x560 [ 414.380668][T16116] should_failslab+0xa8/0x100 [ 414.380701][T16116] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 414.380728][T16116] ? __inet_hash_connect+0xe9b/0x25a0 [ 414.380755][T16116] ? __inet_hash_connect+0xe9b/0x25a0 [ 414.380795][T16116] __inet_hash_connect+0xe9b/0x25a0 [ 414.380828][T16116] ? __pfx___inet6_check_established+0x10/0x10 [ 414.380867][T16116] ? __inet_hash_connect+0x5ce/0x25a0 [ 414.380903][T16116] ? __pfx___inet_hash_connect+0x10/0x10 [ 414.380931][T16116] ? sk_setup_caps+0x94f/0xbc0 [ 414.380953][T16116] ? inet6_ehashfn+0x2f/0x3b0 [ 414.380980][T16116] ? inet6_hash_connect+0xeb/0x170 [ 414.381010][T16116] tcp_v6_connect+0x1231/0x1cf0 [ 414.381033][T16116] ? sock_sendmsg_nosec+0x90/0x180 [ 414.381071][T16116] ? __sys_sendto+0x408/0x5a0 [ 414.381117][T16116] ? __pfx_tcp_v6_connect+0x10/0x10 [ 414.381153][T16116] __inet_stream_connect+0x258/0xe00 [ 414.381193][T16116] ? rcu_is_watching+0x15/0xb0 [ 414.381222][T16116] ? __pfx___inet_stream_connect+0x10/0x10 [ 414.381251][T16116] ? __kasan_kmalloc+0x93/0xb0 [ 414.381279][T16116] ? __kmalloc_cache_noprof+0x32d/0x660 [ 414.381303][T16116] ? __kmalloc_cache_noprof+0x150/0x660 [ 414.381327][T16116] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 414.381357][T16116] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 414.381385][T16116] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 414.381409][T16116] ? tcp_sendmsg_locked+0x5c1/0x55c0 [ 414.381435][T16116] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 414.381466][T16116] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 414.381494][T16116] ? current_check_access_socket+0x26a/0xdf0 [ 414.381521][T16116] ? __lock_acquire+0x683/0x2cf0 [ 414.381595][T16116] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 414.381636][T16116] ? tcp_sendmsg+0x21/0x50 [ 414.381661][T16116] ? __local_bh_enable_ip+0xd0/0x130 [ 414.381690][T16116] tcp_sendmsg+0x2f/0x50 [ 414.381712][T16116] ? __pfx_inet6_sendmsg+0x10/0x10 [ 414.381734][T16116] sock_sendmsg_nosec+0x90/0x180 [ 414.381766][T16116] __sys_sendto+0x408/0x5a0 [ 414.381786][T16116] ? ksys_write+0x1e6/0x270 [ 414.381821][T16116] ? __pfx___sys_sendto+0x10/0x10 [ 414.381839][T16116] ? __mutex_unlock_slowpath+0x731/0x900 [ 414.381895][T16116] ? __pfx_ksys_write+0x10/0x10 [ 414.381932][T16116] __x64_sys_sendto+0xde/0x100 [ 414.381953][T16116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.381975][T16116] do_syscall_64+0x174/0x580 [ 414.381997][T16116] ? trace_irq_disable+0x3b/0x140 [ 414.382023][T16116] ? clear_bhb_loop+0x40/0x90 [ 414.382048][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.382069][T16116] RIP: 0033:0x7f276479de99 [ 414.382088][T16116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.382106][T16116] RSP: 002b:00007f276567d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 414.382128][T16116] RAX: ffffffffffffffda RBX: 00007f2764a25fa0 RCX: 00007f276479de99 [ 414.382144][T16116] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 [ 414.382157][T16116] RBP: 00007f276567d090 R08: 00002000000001c0 R09: 000000000000001c [ 414.382171][T16116] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000001 [ 414.382184][T16116] R13: 00007f2764a26038 R14: 00007f2764a25fa0 R15: 00007ffcbf5b76f8 [ 414.382218][T16116] [ 415.125777][T16137] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3663'. [ 415.556858][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 415.815604][T16156] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3667'. [ 416.904591][T16141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3664'. [ 416.922296][T16150] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 416.961590][T16156] ip6gre1: entered promiscuous mode [ 416.970468][T16156] ip6gre1: entered allmulticast mode [ 417.141789][T16159] syzkaller0: entered promiscuous mode [ 417.163856][T16159] syzkaller0: entered allmulticast mode [ 417.201809][T16165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.209114][T16165] IPv6: NLM_F_CREATE should be set when creating new route [ 417.216546][T16165] IPv6: NLM_F_CREATE should be set when creating new route [ 417.223804][T16165] IPv6: NLM_F_CREATE should be set when creating new route [ 417.275245][T16165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.381867][T16174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3674'. [ 417.794897][T16184] net_ratelimit: 431 callbacks suppressed [ 417.794917][T16184] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 417.894592][T16186] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3679'. [ 418.070830][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.395279][T16207] FAULT_INJECTION: forcing a failure. [ 418.395279][T16207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.435688][T16207] CPU: 0 UID: 0 PID: 16207 Comm: syz.0.3687 Not tainted syzkaller #0 PREEMPT(full) [ 418.435715][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 418.435732][T16207] Call Trace: [ 418.435741][T16207] [ 418.435749][T16207] dump_stack_lvl+0xe8/0x150 [ 418.435784][T16207] should_fail_ex+0x40c/0x560 [ 418.435814][T16207] _copy_from_user+0x2d/0xb0 [ 418.435847][T16207] ___sys_sendmsg+0x1c6/0x360 [ 418.435869][T16207] ? __lock_acquire+0x683/0x2cf0 [ 418.435901][T16207] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.435959][T16207] ? __fget_files+0x2a/0x420 [ 418.435986][T16207] ? __fget_files+0x3a2/0x420 [ 418.436034][T16207] __x64_sys_sendmsg+0x1b1/0x290 [ 418.436058][T16207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.436096][T16207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.436116][T16207] do_syscall_64+0x174/0x580 [ 418.436137][T16207] ? trace_irq_disable+0x3b/0x140 [ 418.436161][T16207] ? clear_bhb_loop+0x40/0x90 [ 418.436184][T16207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.436203][T16207] RIP: 0033:0x7fb4fc99de99 [ 418.436221][T16207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.436237][T16207] RSP: 002b:00007fb4fd86e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.436257][T16207] RAX: ffffffffffffffda RBX: 00007fb4fcc26090 RCX: 00007fb4fc99de99 [ 418.436272][T16207] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 418.436284][T16207] RBP: 00007fb4fd86e090 R08: 0000000000000000 R09: 0000000000000000 [ 418.436295][T16207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.436305][T16207] R13: 00007fb4fcc26128 R14: 00007fb4fcc26090 R15: 00007ffe8c1a6918 [ 418.436336][T16207] [ 418.719206][T16215] syzkaller0: entered promiscuous mode [ 418.724748][T16215] syzkaller0: entered allmulticast mode [ 419.017239][T16218] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3690'. [ 419.183499][T16225] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 419.191213][T11515] IPVS: starting estimator thread 0... [ 419.274471][T16231] debugfs: '1ù!' already exists in 'ieee80211' [ 419.291883][T16228] IPVS: using max 30 ests per chain, 72000 per kthread [ 419.396006][T16236] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3696'. [ 419.595529][T16244] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3697'. [ 419.649252][T16252] bond1: Removing last arp target with arp_interval on [ 419.807902][T16269] netlink: 'syz.5.3704': attribute type 5 has an invalid length. [ 419.816126][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3704'. [ 420.001330][T16279] netlink: zone id is out of range [ 420.006757][T16279] netlink: zone id is out of range [ 420.012840][T16279] netlink: zone id is out of range [ 420.018548][T16279] netlink: zone id is out of range [ 420.023868][T16279] netlink: zone id is out of range [ 420.029391][T16279] netlink: zone id is out of range [ 420.029550][T16280] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 420.034557][T16279] netlink: zone id is out of range [ 420.050315][T16280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3707'. [ 420.067357][T16280] netlink: 'syz.0.3707': attribute type 13 has an invalid length. [ 420.117604][T11295] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 420.838348][T11295] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 420.992164][T16284] netlink: 'syz.0.3708': attribute type 15 has an invalid length. [ 421.001522][T16284] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3708'. [ 422.287396][T16243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.587748][T16292] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3709'. [ 422.600441][T16295] FAULT_INJECTION: forcing a failure. [ 422.600441][T16295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.656597][T16295] CPU: 0 UID: 0 PID: 16295 Comm: syz.0.3713 Not tainted syzkaller #0 PREEMPT(full) [ 422.656625][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 422.656639][T16295] Call Trace: [ 422.656648][T16295] [ 422.656656][T16295] dump_stack_lvl+0xe8/0x150 [ 422.656693][T16295] should_fail_ex+0x40c/0x560 [ 422.656723][T16295] _copy_to_iter+0x1e4/0x1810 [ 422.656757][T16295] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 422.656788][T16295] ? csum_partial+0x239/0x2c0 [ 422.656830][T16295] ? __pfx__copy_to_iter+0x10/0x10 [ 422.656869][T16295] ? __skb_checksum_complete+0x1cf/0x3b0 [ 422.656901][T16295] udp_recvmsg+0x545/0xd10 [ 422.656939][T16295] ? __pfx_udp_recvmsg+0x10/0x10 [ 422.656964][T16295] ? __lock_acquire+0x683/0x2cf0 [ 422.656991][T16295] ? sock_rps_record_flow+0x19/0x350 [ 422.657025][T16295] ? inet_recvmsg+0xe2/0x120 [ 422.657057][T16295] ? __pfx_inet_recvmsg+0x10/0x10 [ 422.657088][T16295] sock_recvmsg+0x166/0x1e0 [ 422.657121][T16295] ____sys_recvmsg+0x1e6/0x4a0 [ 422.657155][T16295] ? __pfx_____sys_recvmsg+0x10/0x10 [ 422.657195][T16295] ? import_iovec+0x73/0xa0 [ 422.657240][T16295] ___sys_recvmsg+0x213/0x5a0 [ 422.657267][T16295] ? __pfx____sys_recvmsg+0x10/0x10 [ 422.657295][T16295] ? __fget_files+0x2a/0x420 [ 422.657338][T16295] ? __fget_files+0x3a2/0x420 [ 422.657374][T16295] do_recvmmsg+0x31a/0x7f0 [ 422.657407][T16295] ? __pfx_do_recvmmsg+0x10/0x10 [ 422.657442][T16295] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.657466][T16295] ? __fget_files+0x3a2/0x420 [ 422.657501][T16295] __x64_sys_recvmmsg+0x198/0x250 [ 422.657526][T16295] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 422.657557][T16295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.657579][T16295] do_syscall_64+0x174/0x580 [ 422.657599][T16295] ? trace_irq_disable+0x3b/0x140 [ 422.657623][T16295] ? clear_bhb_loop+0x40/0x90 [ 422.657647][T16295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.657665][T16295] RIP: 0033:0x7fb4fc99de99 [ 422.657700][T16295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.657718][T16295] RSP: 002b:00007fb4fd86e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 422.657739][T16295] RAX: ffffffffffffffda RBX: 00007fb4fcc26090 RCX: 00007fb4fc99de99 [ 422.657754][T16295] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 422.657767][T16295] RBP: 00007fb4fd86e090 R08: 0000000000000000 R09: 0000000000000000 [ 422.657780][T16295] R10: 0000000040000003 R11: 0000000000000246 R12: 0000000000000001 [ 422.657792][T16295] R13: 00007fb4fcc26128 R14: 00007fb4fcc26090 R15: 00007ffe8c1a6918 [ 422.657834][T16295] [ 423.144704][T16301] netlink: 'syz.1.3716': attribute type 5 has an invalid length. [ 423.186830][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'. [ 423.477452][T16311] netlink: 'syz.6.3718': attribute type 1 has an invalid length. [ 423.502903][T16311] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3718'. [ 423.535928][T16307] netlink: 'syz.6.3718': attribute type 13 has an invalid length. [ 423.683441][T16316] lo: Caught tx_queue_len zero misconfig [ 423.709698][T16316] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 423.987569][T16332] netlink: 'syz.6.3725': attribute type 2 has an invalid length. [ 424.140528][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3729'. [ 424.347719][T16345] netlink: 'syz.6.3730': attribute type 5 has an invalid length. [ 424.368293][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3730'. [ 424.560979][T16355] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3734'. [ 424.772839][T16365] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3738'. [ 425.081126][T16384] macvtap1: entered promiscuous mode [ 425.131861][T16384] vlan0: entered promiscuous mode [ 425.177832][T16384] team0: Device macvtap1 failed to register rx_handler [ 425.198507][T16384] vlan0: left promiscuous mode [ 425.445162][T16399] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3748'. [ 426.608145][ T4935] Bluetooth: hci2: command 0x0406 tx timeout [ 427.917290][T16375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.138116][T16438] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3762'. [ 428.352269][T16449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 429.170035][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3772'. [ 429.481043][T16478] ip6tnl0: Caught tx_queue_len zero misconfig [ 429.689336][T11526] NFSD: Failed to start, no listeners configured. [ 429.850303][T16496] net_ratelimit: 432 callbacks suppressed [ 429.850321][T16496] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 430.076846][T16503] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3782'. [ 430.092958][T16503] xfrm0: Caught tx_queue_len zero misconfig [ 430.111406][T16502] lo speed is unknown, defaulting to 1000 [ 430.213941][T16508] syz_tun: entered promiscuous mode [ 430.525597][T16502] lo speed is unknown, defaulting to 1000 [ 430.527495][T16512] lo speed is unknown, defaulting to 1000 [ 430.680512][T16500] syz_tun: left promiscuous mode [ 430.903907][T16512] lo speed is unknown, defaulting to 1000 [ 431.649369][T16550] netlink: zone id is out of range [ 431.654731][T16550] netlink: zone id is out of range [ 431.660538][T16550] netlink: zone id is out of range [ 431.668373][T16550] netlink: zone id is out of range [ 431.674422][T16550] netlink: zone id is out of range [ 431.683601][T16550] netlink: zone id is out of range [ 431.691631][T16548] netlink: zone id is out of range [ 431.700419][T16550] netlink: zone id is out of range [ 431.704388][T16548] netlink: zone id is out of range [ 431.959968][T16555] ip6tnl0: Caught tx_queue_len zero misconfig [ 432.053896][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3799'. [ 432.322211][T16572] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3804'. [ 432.347137][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3804'. [ 432.363627][T16568] tipc: Enabled bearer , priority 0 [ 432.396998][T16568] syzkaller0: entered promiscuous mode [ 432.425495][T16568] syzkaller0: entered allmulticast mode [ 432.503455][T16568] tipc: Resetting bearer [ 432.544564][T16578] netlink: 'syz.7.3806': attribute type 9 has an invalid length. [ 432.574634][T16565] tipc: Resetting bearer [ 432.646395][T16565] tipc: Disabling bearer [ 432.733525][T16585] syzkaller0: entered promiscuous mode [ 432.747271][T16585] syzkaller0: entered allmulticast mode [ 432.813245][T16594] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 433.113556][T16606] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3816'. [ 433.139272][T16607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3817'. [ 433.162067][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3817'. [ 433.241635][T16613] FAULT_INJECTION: forcing a failure. [ 433.241635][T16613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.275644][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.6.3819 Not tainted syzkaller #0 PREEMPT(full) [ 433.275672][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 433.275687][T16613] Call Trace: [ 433.275696][T16613] [ 433.275705][T16613] dump_stack_lvl+0xe8/0x150 [ 433.275741][T16613] should_fail_ex+0x40c/0x560 [ 433.275772][T16613] _copy_from_user+0x2d/0xb0 [ 433.275805][T16613] kstrtouint_from_user+0xd6/0x180 [ 433.275835][T16613] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 433.275881][T16613] proc_fail_nth_write+0x8e/0x210 [ 433.275911][T16613] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 433.275949][T16613] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 433.275978][T16613] vfs_write+0x296/0xba0 [ 433.276019][T16613] ? __pfx_vfs_write+0x10/0x10 [ 433.276053][T16613] ? __fget_files+0x2a/0x420 [ 433.276087][T16613] ? __fget_files+0x3a2/0x420 [ 433.276112][T16613] ? __fget_files+0x2a/0x420 [ 433.276151][T16613] ksys_write+0x150/0x270 [ 433.276186][T16613] ? __pfx_ksys_write+0x10/0x10 [ 433.276216][T16613] ? fput+0xa0/0xd0 [ 433.276251][T16613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.276275][T16613] do_syscall_64+0x174/0x580 [ 433.276298][T16613] ? trace_irq_disable+0x3b/0x140 [ 433.276325][T16613] ? clear_bhb_loop+0x40/0x90 [ 433.276352][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.276373][T16613] RIP: 0033:0x7f276475e6ce [ 433.276392][T16613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.276411][T16613] RSP: 002b:00007f276567cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.276432][T16613] RAX: ffffffffffffffda RBX: 00007f276567d6c0 RCX: 00007f276475e6ce [ 433.276447][T16613] RDX: 0000000000000001 RSI: 00007f276567d0a0 RDI: 0000000000000004 [ 433.276479][T16613] RBP: 00007f276567d090 R08: 0000000000000000 R09: 0000000000000000 [ 433.276490][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.276501][T16613] R13: 00007f2764a26038 R14: 00007f2764a25fa0 R15: 00007ffcbf5b76f8 [ 433.276534][T16613] [ 433.803396][T16626] tipc: Enabled bearer , priority 0 [ 433.811515][T16626] syzkaller0: entered promiscuous mode [ 433.819563][T16626] syzkaller0: entered allmulticast mode [ 433.859639][T16626] tipc: Resetting bearer [ 433.873804][T16628] syzkaller0: entered promiscuous mode [ 433.886327][T16628] syzkaller0: entered allmulticast mode [ 433.899297][T16625] tipc: Resetting bearer [ 433.930263][T16625] tipc: Disabling bearer [ 433.948455][T16630] debugfs: '1ù!' already exists in 'ieee80211' [ 434.474135][T16649] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3831'. [ 434.485367][T16647] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3830'. [ 434.500299][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3831'. [ 434.635492][T16651] syzkaller0: entered promiscuous mode [ 434.649206][T16651] syzkaller0: entered allmulticast mode [ 434.709162][T16651] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20002 [ 434.902328][T16663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 435.043474][T16669] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 435.059151][T16669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3837'. [ 435.275785][T16679] pim6reg1: entered promiscuous mode [ 435.287136][T16679] pim6reg1: entered allmulticast mode [ 435.335823][T16681] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3843'. [ 435.388015][T16684] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3844'. [ 435.419350][T16684] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3844'. [ 435.475159][T16685] dummy0: Caught tx_queue_len zero misconfig [ 436.188316][T16723] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3856'. [ 436.242978][T16727] FAULT_INJECTION: forcing a failure. [ 436.242978][T16727] name failslab, interval 1, probability 0, space 0, times 0 [ 436.277985][T16727] CPU: 0 UID: 0 PID: 16727 Comm: syz.6.3857 Not tainted syzkaller #0 PREEMPT(full) [ 436.278015][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 436.278028][T16727] Call Trace: [ 436.278036][T16727] [ 436.278054][T16727] dump_stack_lvl+0xe8/0x150 [ 436.278092][T16727] should_fail_ex+0x40c/0x560 [ 436.278125][T16727] should_failslab+0xa8/0x100 [ 436.278159][T16727] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 436.278186][T16727] ? skb_clone+0x212/0x3a0 [ 436.278209][T16727] ? skb_clone+0x212/0x3a0 [ 436.278242][T16727] skb_clone+0x212/0x3a0 [ 436.278270][T16727] __netlink_deliver_tap+0x413/0x860 [ 436.278310][T16727] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.278341][T16727] netlink_deliver_tap+0x19c/0x1b0 [ 436.278367][T16727] netlink_unicast+0x77f/0x940 [ 436.278402][T16727] netlink_sendmsg+0x813/0xb40 [ 436.278439][T16727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.278470][T16727] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.278499][T16727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.278523][T16727] sock_sendmsg_nosec+0x13a/0x180 [ 436.278557][T16727] ____sys_sendmsg+0x54e/0x850 [ 436.278588][T16727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.278623][T16727] ? import_iovec+0x73/0xa0 [ 436.278660][T16727] ___sys_sendmsg+0x2a5/0x360 [ 436.278683][T16727] ? __lock_acquire+0x683/0x2cf0 [ 436.278718][T16727] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.278784][T16727] ? __fget_files+0x2a/0x420 [ 436.278812][T16727] ? __fget_files+0x3a2/0x420 [ 436.278852][T16727] __x64_sys_sendmsg+0x1b1/0x290 [ 436.278880][T16727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.278926][T16727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.278951][T16727] do_syscall_64+0x174/0x580 [ 436.278976][T16727] ? trace_irq_disable+0x3b/0x140 [ 436.279004][T16727] ? clear_bhb_loop+0x40/0x90 [ 436.279031][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.279061][T16727] RIP: 0033:0x7f276479de99 [ 436.279081][T16727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.279100][T16727] RSP: 002b:00007f276567d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.279123][T16727] RAX: ffffffffffffffda RBX: 00007f2764a25fa0 RCX: 00007f276479de99 [ 436.279150][T16727] RDX: 0000000000008804 RSI: 0000200000000000 RDI: 0000000000000003 [ 436.279163][T16727] RBP: 00007f276567d090 R08: 0000000000000000 R09: 0000000000000000 [ 436.279176][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.279188][T16727] R13: 00007f2764a26038 R14: 00007f2764a25fa0 R15: 00007ffcbf5b76f8 [ 436.279238][T16727] [ 436.281859][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.545745][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.726259][T16733] x_tables: unsorted underflow at hook 4 [ 436.902429][T16740] dummy0: Caught tx_queue_len zero misconfig [ 438.000925][T16788] FAULT_INJECTION: forcing a failure. [ 438.000925][T16788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.020868][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.5.3872 Not tainted syzkaller #0 PREEMPT(full) [ 438.020900][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 438.020913][T16788] Call Trace: [ 438.020921][T16788] [ 438.020931][T16788] dump_stack_lvl+0xe8/0x150 [ 438.020969][T16788] should_fail_ex+0x40c/0x560 [ 438.021002][T16788] _copy_from_user+0x2d/0xb0 [ 438.021047][T16788] kstrtouint_from_user+0xd6/0x180 [ 438.021076][T16788] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 438.021122][T16788] proc_fail_nth_write+0x8e/0x210 [ 438.021162][T16788] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.021199][T16788] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.021238][T16788] vfs_write+0x296/0xba0 [ 438.021275][T16788] ? __pfx_vfs_write+0x10/0x10 [ 438.021324][T16788] ? __fget_files+0x2a/0x420 [ 438.021354][T16788] ? __fget_files+0x3a2/0x420 [ 438.021386][T16788] ? __fget_files+0x2a/0x420 [ 438.021420][T16788] ksys_write+0x150/0x270 [ 438.021452][T16788] ? __pfx_ksys_write+0x10/0x10 [ 438.021490][T16788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.021512][T16788] do_syscall_64+0x174/0x580 [ 438.021534][T16788] ? trace_irq_disable+0x3b/0x140 [ 438.021558][T16788] ? clear_bhb_loop+0x40/0x90 [ 438.021586][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.021606][T16788] RIP: 0033:0x7f7e96b5e6ce [ 438.021624][T16788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.021641][T16788] RSP: 002b:00007f7e979f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.021661][T16788] RAX: ffffffffffffffda RBX: 00007f7e979f26c0 RCX: 00007f7e96b5e6ce [ 438.021676][T16788] RDX: 0000000000000001 RSI: 00007f7e979f20a0 RDI: 0000000000000004 [ 438.021688][T16788] RBP: 00007f7e979f2090 R08: 0000000000000000 R09: 0000000000000000 [ 438.021699][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.021711][T16788] R13: 00007f7e96e26038 R14: 00007f7e96e25fa0 R15: 00007ffe829ee848 [ 438.021743][T16788] [ 438.422176][T16794] pimreg1: left allmulticast mode [ 438.485828][T16794] vlan2: left promiscuous mode [ 438.502738][T16794] bond0: left promiscuous mode [ 438.516544][T16794] bond_slave_0: left promiscuous mode [ 438.536765][T16794] bond_slave_1: left promiscuous mode [ 438.578814][T16794] batman_adv: batadv0: Interface deactivated: gretap1 [ 438.646018][T16794] gtp0: left promiscuous mode [ 438.677386][T16794] gtp0: left allmulticast mode [ 438.700467][T16794] ip6gre1: left promiscuous mode [ 438.766631][T16794] ip6gre1: left allmulticast mode [ 438.822330][T16794] gretap2: left allmulticast mode [ 438.889898][T16797] sysfs: cannot create duplicate filename '/class/ieee80211/1ù!' [ 438.908088][T16797] CPU: 1 UID: 0 PID: 16797 Comm: syz.0.3876 Not tainted syzkaller #0 PREEMPT(full) [ 438.908118][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 438.908130][T16797] Call Trace: [ 438.908139][T16797] [ 438.908148][T16797] dump_stack_lvl+0xe8/0x150 [ 438.908185][T16797] sysfs_warn_dup+0x8e/0xa0 [ 438.908211][T16797] sysfs_do_create_link_sd+0xc0/0x110 [ 438.908240][T16797] device_add_class_symlinks+0x1cf/0x240 [ 438.908264][T16797] device_add+0x467/0xb80 [ 438.908288][T16797] wiphy_register+0x1fc8/0x2ff0 [ 438.908326][T16797] ? __pfx_wiphy_register+0x10/0x10 [ 438.908347][T16797] ? __pfx_netdev_run_todo+0x10/0x10 [ 438.908372][T16797] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 438.908407][T16797] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 438.908432][T16797] ieee80211_register_hw+0x3d3d/0x4a50 [ 438.908469][T16797] ? ieee80211_register_hw+0x1981/0x4a50 [ 438.908519][T16797] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 438.908544][T16797] ? __asan_memset+0x22/0x50 [ 438.908566][T16797] ? __hrtimer_setup+0x1b7/0x260 [ 438.908603][T16797] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 438.908649][T16797] mac80211_hwsim_new_radio+0x3238/0x5680 [ 438.908727][T16797] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 438.908755][T16797] ? kstrndup+0xbd/0x160 [ 438.908807][T16797] ? kstrndup+0xbd/0x160 [ 438.908835][T16797] hwsim_new_radio_nl+0xd8b/0xf90 [ 438.908880][T16797] genl_family_rcv_msg_doit+0x233/0x340 [ 438.908918][T16797] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 438.908960][T16797] ? bpf_lsm_capable+0x9/0x20 [ 438.908983][T16797] ? security_capable+0x7e/0x2c0 [ 438.909019][T16797] genl_rcv_msg+0x614/0x7a0 [ 438.909053][T16797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.909078][T16797] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 438.909125][T16797] netlink_rcv_skb+0x226/0x4a0 [ 438.909147][T16797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.909174][T16797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.909212][T16797] ? down_read+0x2be/0x330 [ 438.909240][T16797] genl_rcv+0x28/0x40 [ 438.909264][T16797] netlink_unicast+0x7bb/0x940 [ 438.909295][T16797] netlink_sendmsg+0x813/0xb40 [ 438.909327][T16797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.909353][T16797] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.909379][T16797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.909398][T16797] sock_sendmsg_nosec+0x13a/0x180 [ 438.909427][T16797] ____sys_sendmsg+0x54e/0x850 [ 438.909453][T16797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.909484][T16797] ? import_iovec+0x73/0xa0 [ 438.909515][T16797] ___sys_sendmsg+0x2a5/0x360 [ 438.909534][T16797] ? __lock_acquire+0x683/0x2cf0 [ 438.909568][T16797] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.909598][T16797] ? futex_wait+0x2a2/0x390 [ 438.909653][T16797] ? __fget_files+0x2a/0x420 [ 438.909678][T16797] ? __fget_files+0x3a2/0x420 [ 438.909714][T16797] __x64_sys_sendmsg+0x1b1/0x290 [ 438.909739][T16797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.909788][T16797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.909811][T16797] do_syscall_64+0x174/0x580 [ 438.909837][T16797] ? trace_irq_disable+0x3b/0x140 [ 438.909861][T16797] ? clear_bhb_loop+0x40/0x90 [ 438.909912][T16797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.909932][T16797] RIP: 0033:0x7fb4fc99de99 [ 438.909951][T16797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.909968][T16797] RSP: 002b:00007fb4fd88f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.909990][T16797] RAX: ffffffffffffffda RBX: 00007fb4fcc25fa0 RCX: 00007fb4fc99de99 [ 438.910004][T16797] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 438.910017][T16797] RBP: 00007fb4fca33eaf R08: 0000000000000000 R09: 0000000000000000 [ 438.910030][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.910042][T16797] R13: 00007fb4fcc26038 R14: 00007fb4fcc25fa0 R15: 00007ffe8c1a6918 [ 438.910076][T16797] [ 439.454813][T16816] __nla_validate_parse: 1 callbacks suppressed [ 439.454832][T16816] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3880'. [ 439.689636][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3884'. [ 439.701195][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3884'. [ 439.785370][T16828] syzkaller0: entered promiscuous mode [ 439.794832][T16828] syzkaller0: entered allmulticast mode [ 439.824006][T16831] syzkaller0: entered promiscuous mode [ 439.836020][T16831] syzkaller0: entered allmulticast mode [ 439.849296][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3885'. [ 439.859624][T16831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3885'. [ 439.881212][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102565][T16841] FAULT_INJECTION: forcing a failure. [ 440.102565][T16841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.184562][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.1.3887 Not tainted syzkaller #0 PREEMPT(full) [ 440.184591][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 440.184605][T16841] Call Trace: [ 440.184613][T16841] [ 440.184622][T16841] dump_stack_lvl+0xe8/0x150 [ 440.184660][T16841] should_fail_ex+0x40c/0x560 [ 440.184700][T16841] _copy_from_user+0x2d/0xb0 [ 440.184734][T16841] generic_map_delete_batch+0x302/0x9d0 [ 440.184768][T16841] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 440.184792][T16841] ? __fget_files+0x2a/0x420 [ 440.184825][T16841] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 440.184850][T16841] bpf_map_do_batch+0x445/0x630 [ 440.184887][T16841] __sys_bpf+0xb55/0xd90 [ 440.184924][T16841] ? __pfx___sys_bpf+0x10/0x10 [ 440.184964][T16841] ? __fget_files+0x2a/0x420 [ 440.185012][T16841] ? ksys_write+0x242/0x270 [ 440.185053][T16841] ? __pfx_ksys_write+0x10/0x10 [ 440.185090][T16841] __x64_sys_bpf+0xba/0xd0 [ 440.185115][T16841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.185139][T16841] do_syscall_64+0x174/0x580 [ 440.185163][T16841] ? trace_irq_disable+0x3b/0x140 [ 440.185190][T16841] ? clear_bhb_loop+0x40/0x90 [ 440.185217][T16841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.185238][T16841] RIP: 0033:0x7f835319de99 [ 440.185258][T16841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.185277][T16841] RSP: 002b:00007f8353fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.185301][T16841] RAX: ffffffffffffffda RBX: 00007f8353426090 RCX: 00007f835319de99 [ 440.185317][T16841] RDX: 0000000000000038 RSI: 0000200000000080 RDI: 000000000000001b [ 440.185331][T16841] RBP: 00007f8353fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 440.185344][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.185357][T16841] R13: 00007f8353426128 R14: 00007f8353426090 R15: 00007ffd6fde7488 [ 440.185391][T16841] [ 440.241898][T16845] FAULT_INJECTION: forcing a failure. [ 440.241898][T16845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.401341][T16843] lo: Caught tx_queue_len zero misconfig [ 440.447558][T16845] CPU: 1 UID: 0 PID: 16845 Comm: syz.7.3890 Not tainted syzkaller #0 PREEMPT(full) [ 440.447584][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 440.447596][T16845] Call Trace: [ 440.447604][T16845] [ 440.447612][T16845] dump_stack_lvl+0xe8/0x150 [ 440.447646][T16845] should_fail_ex+0x40c/0x560 [ 440.447675][T16845] _copy_from_iter+0x1d3/0x1660 [ 440.447699][T16845] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 440.447726][T16845] ? rcu_is_watching+0x15/0xb0 [ 440.447756][T16845] ? trace_kmem_cache_alloc+0x29/0xe0 [ 440.447781][T16845] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 440.447804][T16845] ? __pfx__copy_from_iter+0x10/0x10 [ 440.447829][T16845] ? __alloc_skb+0x276/0x7a0 [ 440.447846][T16845] ? __alloc_skb+0x276/0x7a0 [ 440.447869][T16845] ? netlink_sendmsg+0x650/0xb40 [ 440.447891][T16845] ? skb_put+0x112/0x210 [ 440.447913][T16845] netlink_sendmsg+0x6c0/0xb40 [ 440.447944][T16845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.447971][T16845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 440.447997][T16845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.448019][T16845] sock_sendmsg_nosec+0x13a/0x180 [ 440.448049][T16845] ____sys_sendmsg+0x54e/0x850 [ 440.448076][T16845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.448107][T16845] ? import_iovec+0x73/0xa0 [ 440.448139][T16845] ___sys_sendmsg+0x2a5/0x360 [ 440.448166][T16845] ? __lock_acquire+0x683/0x2cf0 [ 440.448198][T16845] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.448255][T16845] ? __fget_files+0x2a/0x420 [ 440.448279][T16845] ? __fget_files+0x3a2/0x420 [ 440.448315][T16845] __x64_sys_sendmsg+0x1b1/0x290 [ 440.448340][T16845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.448380][T16845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.448402][T16845] do_syscall_64+0x174/0x580 [ 440.448424][T16845] ? trace_irq_disable+0x3b/0x140 [ 440.448449][T16845] ? clear_bhb_loop+0x40/0x90 [ 440.448473][T16845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.448493][T16845] RIP: 0033:0x7f301559de99 [ 440.448511][T16845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.448528][T16845] RSP: 002b:00007f30163d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.448549][T16845] RAX: ffffffffffffffda RBX: 00007f3015825fa0 RCX: 00007f301559de99 [ 440.448564][T16845] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 440.448576][T16845] RBP: 00007f30163d8090 R08: 0000000000000000 R09: 0000000000000000 [ 440.448588][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.448600][T16845] R13: 00007f3015826038 R14: 00007f3015825fa0 R15: 00007fff6a8c9af8 [ 440.448632][T16845] [ 441.030304][T16860] syzkaller1: entered promiscuous mode [ 441.064846][T16860] syzkaller1: entered allmulticast mode [ 441.222074][T16870] syzkaller0: entered promiscuous mode [ 441.228007][T16870] syzkaller0: entered allmulticast mode [ 441.245254][T16876] net_ratelimit: 871 callbacks suppressed [ 441.245270][T16876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.271793][T16877] FAULT_INJECTION: forcing a failure. [ 441.271793][T16877] name failslab, interval 1, probability 0, space 0, times 0 [ 441.285952][T16877] CPU: 0 UID: 0 PID: 16877 Comm: syz.6.3901 Not tainted syzkaller #0 PREEMPT(full) [ 441.285977][T16877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 441.285989][T16877] Call Trace: [ 441.285997][T16877] [ 441.286005][T16877] dump_stack_lvl+0xe8/0x150 [ 441.286045][T16877] should_fail_ex+0x40c/0x560 [ 441.286083][T16877] should_failslab+0xa8/0x100 [ 441.286115][T16877] __kmalloc_cache_noprof+0xa8/0x660 [ 441.286143][T16877] ? sctp_association_new+0x89/0x25d0 [ 441.286169][T16877] ? sctp_association_new+0x89/0x25d0 [ 441.286202][T16877] sctp_association_new+0x89/0x25d0 [ 441.286232][T16877] ? __ipv6_addr_type+0x23d/0x2f0 [ 441.286269][T16877] sctp_connect_new_asoc+0x2e4/0x6b0 [ 441.286299][T16877] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 441.286332][T16877] ? __local_bh_enable_ip+0xd0/0x130 [ 441.286355][T16877] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 441.286378][T16877] ? security_sctp_bind_connect+0x7e/0x2c0 [ 441.286412][T16877] sctp_sendmsg+0x159b/0x2d00 [ 441.286472][T16877] ? __pfx_sctp_sendmsg+0x10/0x10 [ 441.286506][T16877] ? aa_sk_perm+0x6d5/0x900 [ 441.286547][T16877] ? __might_fault+0xaf/0x130 [ 441.286575][T16877] ? sock_rps_record_flow+0x19/0x350 [ 441.286614][T16877] ? inet_sendmsg+0x298/0x320 [ 441.286649][T16877] ? __pfx_inet_sendmsg+0x10/0x10 [ 441.286681][T16877] sock_sendmsg_nosec+0x10e/0x180 [ 441.286715][T16877] __sys_sendto+0x408/0x5a0 [ 441.286737][T16877] ? ksys_write+0x1e6/0x270 [ 441.286774][T16877] ? __pfx___sys_sendto+0x10/0x10 [ 441.286793][T16877] ? __mutex_unlock_slowpath+0x731/0x900 [ 441.286852][T16877] ? __pfx_ksys_write+0x10/0x10 [ 441.286903][T16877] __x64_sys_sendto+0xde/0x100 [ 441.286925][T16877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.286949][T16877] do_syscall_64+0x174/0x580 [ 441.286973][T16877] ? trace_irq_disable+0x3b/0x140 [ 441.286999][T16877] ? clear_bhb_loop+0x40/0x90 [ 441.287025][T16877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.287046][T16877] RIP: 0033:0x7f276479de99 [ 441.287066][T16877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.287092][T16877] RSP: 002b:00007f276567d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 441.287115][T16877] RAX: ffffffffffffffda RBX: 00007f2764a25fa0 RCX: 00007f276479de99 [ 441.287130][T16877] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 441.287144][T16877] RBP: 00007f276567d090 R08: 0000200000000240 R09: 000000000000001c [ 441.287158][T16877] R10: 00000000000001f4 R11: 0000000000000246 R12: 0000000000000001 [ 441.287171][T16877] R13: 00007f2764a26038 R14: 00007f2764a25fa0 R15: 00007ffcbf5b76f8 [ 441.287207][T16877] [ 441.692864][T16880] hsr0: entered allmulticast mode [ 441.734179][T16880] hsr_slave_0: entered allmulticast mode [ 441.748641][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3902'. [ 441.775538][T16880] hsr_slave_1: entered allmulticast mode [ 441.796036][T16884] hsr_slave_0: left promiscuous mode [ 441.818465][T16884] hsr_slave_1: left promiscuous mode [ 441.828719][T16884] hsr0 (unregistering): left allmulticast mode [ 441.860640][T16889] debugfs: '1ù!' already exists in 'ieee80211' [ 441.898430][T16887] ip6tnl0: Caught tx_queue_len zero misconfig [ 441.957181][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 442.146222][T16902] syzkaller0: entered promiscuous mode [ 442.162645][T16902] syzkaller0: entered allmulticast mode [ 442.218100][T16905] netlink: 'syz.6.3912': attribute type 28 has an invalid length. [ 442.332275][T16909] FAULT_INJECTION: forcing a failure. [ 442.332275][T16909] name failslab, interval 1, probability 0, space 0, times 0 [ 442.347808][T16909] CPU: 0 UID: 0 PID: 16909 Comm: syz.6.3914 Not tainted syzkaller #0 PREEMPT(full) [ 442.347836][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 442.347849][T16909] Call Trace: [ 442.347857][T16909] [ 442.347866][T16909] dump_stack_lvl+0xe8/0x150 [ 442.347905][T16909] should_fail_ex+0x40c/0x560 [ 442.347936][T16909] should_failslab+0xa8/0x100 [ 442.347970][T16909] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 442.347997][T16909] ? skb_clone+0x212/0x3a0 [ 442.348020][T16909] ? skb_clone+0x212/0x3a0 [ 442.348051][T16909] skb_clone+0x212/0x3a0 [ 442.348081][T16909] __netlink_deliver_tap+0x413/0x860 [ 442.348126][T16909] ? netlink_deliver_tap+0x2e/0x1b0 [ 442.348153][T16909] netlink_deliver_tap+0x19c/0x1b0 [ 442.348179][T16909] netlink_unicast+0x77f/0x940 [ 442.348214][T16909] netlink_sendmsg+0x813/0xb40 [ 442.348249][T16909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.348292][T16909] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.348319][T16909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.348362][T16909] sock_sendmsg_nosec+0x13a/0x180 [ 442.348395][T16909] ____sys_sendmsg+0x54e/0x850 [ 442.348426][T16909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.348460][T16909] ? import_iovec+0x73/0xa0 [ 442.348497][T16909] ___sys_sendmsg+0x2a5/0x360 [ 442.348519][T16909] ? __lock_acquire+0x683/0x2cf0 [ 442.348554][T16909] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.348617][T16909] ? __fget_files+0x2a/0x420 [ 442.348646][T16909] ? __fget_files+0x3a2/0x420 [ 442.348686][T16909] __x64_sys_sendmsg+0x1b1/0x290 [ 442.348712][T16909] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.348748][T16909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.348767][T16909] do_syscall_64+0x174/0x580 [ 442.348789][T16909] ? clear_bhb_loop+0x40/0x90 [ 442.348811][T16909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.348828][T16909] RIP: 0033:0x7f276479de99 [ 442.348844][T16909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.348859][T16909] RSP: 002b:00007f276567d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.348878][T16909] RAX: ffffffffffffffda RBX: 00007f2764a25fa0 RCX: 00007f276479de99 [ 442.348891][T16909] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 442.348902][T16909] RBP: 00007f276567d090 R08: 0000000000000000 R09: 0000000000000000 [ 442.348912][T16909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.348922][T16909] R13: 00007f2764a26038 R14: 00007f2764a25fa0 R15: 00007ffcbf5b76f8 [ 442.348949][T16909] [ 442.655228][T16912] FAULT_INJECTION: forcing a failure. [ 442.655228][T16912] name failslab, interval 1, probability 0, space 0, times 0 [ 442.676166][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.0.3915 Not tainted syzkaller #0 PREEMPT(full) [ 442.676195][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 442.676208][T16912] Call Trace: [ 442.676216][T16912] [ 442.676225][T16912] dump_stack_lvl+0xe8/0x150 [ 442.676264][T16912] should_fail_ex+0x40c/0x560 [ 442.676295][T16912] should_failslab+0xa8/0x100 [ 442.676329][T16912] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 442.676354][T16912] ? local_lock_release+0x9c/0x160 [ 442.676393][T16912] ? __alloc_skb+0x1d7/0x7a0 [ 442.676411][T16912] ? __alloc_skb+0x1d7/0x7a0 [ 442.676437][T16912] __alloc_skb+0x1d7/0x7a0 [ 442.676462][T16912] netlink_sendmsg+0x5d4/0xb40 [ 442.676497][T16912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.676527][T16912] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.676556][T16912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.676579][T16912] sock_sendmsg_nosec+0x13a/0x180 [ 442.676612][T16912] ____sys_sendmsg+0x54e/0x850 [ 442.676642][T16912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.676676][T16912] ? import_iovec+0x73/0xa0 [ 442.676711][T16912] ___sys_sendmsg+0x2a5/0x360 [ 442.676734][T16912] ? __lock_acquire+0x683/0x2cf0 [ 442.676767][T16912] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.676831][T16912] ? __fget_files+0x2a/0x420 [ 442.676857][T16912] ? __fget_files+0x3a2/0x420 [ 442.676897][T16912] __x64_sys_sendmsg+0x1b1/0x290 [ 442.676924][T16912] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.676976][T16912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.677000][T16912] do_syscall_64+0x174/0x580 [ 442.677026][T16912] ? clear_bhb_loop+0x40/0x90 [ 442.677054][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.677074][T16912] RIP: 0033:0x7fb4fc99de99 [ 442.677094][T16912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.677113][T16912] RSP: 002b:00007fb4fd88f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.677141][T16912] RAX: ffffffffffffffda RBX: 00007fb4fcc25fa0 RCX: 00007fb4fc99de99 [ 442.677157][T16912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 442.677170][T16912] RBP: 00007fb4fd88f090 R08: 0000000000000000 R09: 0000000000000000 [ 442.677183][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.677196][T16912] R13: 00007fb4fcc26038 R14: 00007fb4fcc25fa0 R15: 00007ffe8c1a6918 [ 442.677232][T16912] [ 443.010482][T16914] syzkaller0: entered promiscuous mode [ 443.016014][T16914] syzkaller0: entered allmulticast mode [ 443.054915][T16918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3917'. [ 443.083609][T16918] FAULT_INJECTION: forcing a failure. [ 443.083609][T16918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.114130][T16918] CPU: 0 UID: 0 PID: 16918 Comm: syz.0.3917 Not tainted syzkaller #0 PREEMPT(full) [ 443.114155][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 443.114165][T16918] Call Trace: [ 443.114173][T16918] [ 443.114180][T16918] dump_stack_lvl+0xe8/0x150 [ 443.114212][T16918] should_fail_ex+0x40c/0x560 [ 443.114238][T16918] _copy_from_iter+0x1d3/0x1660 [ 443.114260][T16918] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 443.114284][T16918] ? rcu_is_watching+0x15/0xb0 [ 443.114312][T16918] ? trace_kmem_cache_alloc+0x29/0xe0 [ 443.114335][T16918] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 443.114356][T16918] ? __pfx__copy_from_iter+0x10/0x10 [ 443.114379][T16918] ? __alloc_skb+0x276/0x7a0 [ 443.114395][T16918] ? __alloc_skb+0x276/0x7a0 [ 443.114415][T16918] ? netlink_sendmsg+0x650/0xb40 [ 443.114445][T16918] ? skb_put+0x112/0x210 [ 443.114464][T16918] netlink_sendmsg+0x6c0/0xb40 [ 443.114494][T16918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.114518][T16918] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.114542][T16918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.114561][T16918] sock_sendmsg_nosec+0x13a/0x180 [ 443.114588][T16918] ____sys_sendmsg+0x54e/0x850 [ 443.114612][T16918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.114640][T16918] ? import_iovec+0x73/0xa0 [ 443.114669][T16918] ___sys_sendmsg+0x2a5/0x360 [ 443.114687][T16918] ? __lock_acquire+0x683/0x2cf0 [ 443.114715][T16918] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.114766][T16918] ? __fget_files+0x2a/0x420 [ 443.114789][T16918] ? __fget_files+0x3a2/0x420 [ 443.114822][T16918] __x64_sys_sendmsg+0x1b1/0x290 [ 443.114845][T16918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.114881][T16918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.114902][T16918] do_syscall_64+0x174/0x580 [ 443.114922][T16918] ? trace_irq_disable+0x3b/0x140 [ 443.114946][T16918] ? clear_bhb_loop+0x40/0x90 [ 443.114968][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.114986][T16918] RIP: 0033:0x7fb4fc99de99 [ 443.115003][T16918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.115018][T16918] RSP: 002b:00007fb4fd88f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.115037][T16918] RAX: ffffffffffffffda RBX: 00007fb4fcc25fa0 RCX: 00007fb4fc99de99 [ 443.115050][T16918] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 443.115061][T16918] RBP: 00007fb4fd88f090 R08: 0000000000000000 R09: 0000000000000000 [ 443.115072][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.115083][T16918] R13: 00007fb4fcc26038 R14: 00007fb4fcc25fa0 R15: 00007ffe8c1a6918 [ 443.115130][T16918] [ 443.878746][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3923'. [ 444.192426][T16941] FAULT_INJECTION: forcing a failure. [ 444.192426][T16941] name failslab, interval 1, probability 0, space 0, times 0 [ 444.206072][T16941] CPU: 1 UID: 0 PID: 16941 Comm: syz.1.3924 Not tainted syzkaller #0 PREEMPT(full) [ 444.206099][T16941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 444.206112][T16941] Call Trace: [ 444.206120][T16941] [ 444.206129][T16941] dump_stack_lvl+0xe8/0x150 [ 444.206165][T16941] should_fail_ex+0x40c/0x560 [ 444.206196][T16941] should_failslab+0xa8/0x100 [ 444.206229][T16941] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 444.206256][T16941] ? __nf_conntrack_alloc+0x81/0x3e0 [ 444.206287][T16941] ? __nf_conntrack_alloc+0x81/0x3e0 [ 444.206326][T16941] __nf_conntrack_alloc+0x81/0x3e0 [ 444.206366][T16941] init_conntrack+0x170/0x1080 [ 444.206396][T16941] ? __pfx_init_conntrack+0x10/0x10 [ 444.206428][T16941] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 444.206458][T16941] ? do_xdp_generic+0x168/0x12d0 [ 444.206485][T16941] ? __siphash_unaligned+0x25c/0x3e0 [ 444.206519][T16941] nf_conntrack_in+0xbc3/0x15a0 [ 444.206550][T16941] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.206597][T16941] ? __pfx_nf_conntrack_in+0x10/0x10 [ 444.206632][T16941] ? ip6t_do_table+0x1d1/0x15b0 [ 444.206662][T16941] ? __pfx_ip6t_do_table+0x10/0x10 [ 444.206686][T16941] ? __netif_receive_skb_core+0x2a0a/0x30b0 [ 444.206722][T16941] ? NF_HOOK+0x9e/0x3c0 [ 444.206755][T16941] ? ipv6_defrag+0x2d6/0x3b0 [ 444.206782][T16941] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 444.206812][T16941] nf_hook_slow+0xc5/0x220 [ 444.206849][T16941] NF_HOOK+0x21f/0x3c0 [ 444.206867][T16941] ? __pfx_sock_wfree+0x10/0x10 [ 444.206889][T16941] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 444.206917][T16941] ? NF_HOOK+0x9e/0x3c0 [ 444.206934][T16941] ? __pfx_NF_HOOK+0x10/0x10 [ 444.206962][T16941] ? ip6_rcv_core+0xa1/0x1870 [ 444.206993][T16941] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 444.207030][T16941] ? netif_receive_skb+0x102/0xbf0 [ 444.207058][T16941] netif_receive_skb+0x278/0xbf0 [ 444.207090][T16941] ? __pfx_netif_receive_skb+0x10/0x10 [ 444.207121][T16941] ? rcu_is_watching+0x15/0xb0 [ 444.207149][T16941] ? tun_rx_batched+0x185/0x790 [ 444.207180][T16941] tun_rx_batched+0x1de/0x790 [ 444.207215][T16941] ? __pfx_tun_rx_batched+0x10/0x10 [ 444.207242][T16941] ? tun_get_user+0x2717/0x4370 [ 444.207270][T16941] ? tun_get_user+0x2717/0x4370 [ 444.207299][T16941] ? tun_get_user+0x23cb/0x4370 [ 444.207326][T16941] ? tun_get_user+0x23cb/0x4370 [ 444.207353][T16941] ? __local_bh_enable_ip+0xd0/0x130 [ 444.207376][T16941] ? tun_get_user+0x2717/0x4370 [ 444.207402][T16941] ? tun_get_user+0x2717/0x4370 [ 444.207430][T16941] tun_get_user+0x2b44/0x4370 [ 444.207480][T16941] ? aa_file_perm+0x4ed/0x15f0 [ 444.207502][T16941] ? __pfx_tun_get_user+0x10/0x10 [ 444.207532][T16941] ? __lock_acquire+0x683/0x2cf0 [ 444.207574][T16941] ? ref_tracker_alloc+0x341/0x4b0 [ 444.207598][T16941] ? get_pid_task+0x20/0x1f0 [ 444.207624][T16941] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 444.207651][T16941] ? tun_get+0x1c/0x2f0 [ 444.207678][T16941] ? tun_get+0x1c/0x2f0 [ 444.207710][T16941] ? tun_get+0x1c/0x2f0 [ 444.207736][T16941] ? tun_get+0x1c/0x2f0 [ 444.207768][T16941] tun_chr_write_iter+0x113/0x200 [ 444.207799][T16941] vfs_write+0x612/0xba0 [ 444.207845][T16941] ? __pfx_vfs_write+0x10/0x10 [ 444.207886][T16941] ? __fget_files+0x2a/0x420 [ 444.207922][T16941] ksys_write+0x150/0x270 [ 444.207954][T16941] ? __pfx_ksys_write+0x10/0x10 [ 444.207993][T16941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.208015][T16941] do_syscall_64+0x174/0x580 [ 444.208036][T16941] ? trace_irq_disable+0x3b/0x140 [ 444.208061][T16941] ? clear_bhb_loop+0x40/0x90 [ 444.208086][T16941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.208106][T16941] RIP: 0033:0x7f835315e6ce [ 444.208125][T16941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.208141][T16941] RSP: 002b:00007f8353fdffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.208163][T16941] RAX: ffffffffffffffda RBX: 00007f8353fe06c0 RCX: 00007f835315e6ce [ 444.208177][T16941] RDX: 0000000000000096 RSI: 0000200000000080 RDI: 00000000000000c8 [ 444.208189][T16941] RBP: 00007f8353fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 444.208201][T16941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.208212][T16941] R13: 00007f8353426128 R14: 00007f8353426090 R15: 00007ffd6fde7488 [ 444.208245][T16941] [ 445.839852][T16937] erspan0: entered promiscuous mode [ 445.870609][T16937] macvtap1: entered promiscuous mode [ 445.885127][T16937] macvtap1: entered allmulticast mode [ 445.897841][T16937] erspan0: entered allmulticast mode [ 446.282276][T16968] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 446.292590][T16967] netlink: 'syz.1.3932': attribute type 18 has an invalid length. [ 446.329024][T16968] Cannot find del_set index 17 as target [ 446.425775][T16973] netdevsim netdevsim7 €Â: renamed from netdevsim0 (while UP) [ 446.468542][T16976] xt_hashlimit: size too large, truncated to 1048576 [ 447.489605][T16999] netlink: 'syz.5.3942': attribute type 322 has an invalid length. [ 447.686609][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3945'. [ 447.714302][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3945'. [ 447.736811][T17014] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3945'. [ 447.771250][T17013] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3947'. [ 447.801607][T17013] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.808827][T17013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.085205][T17029] xt_TCPMSS: Only works on TCP SYN packets [ 449.284684][T17044] lo speed is unknown, defaulting to 1000 [ 449.445337][T17044] lo speed is unknown, defaulting to 1000 [ 450.720145][T17013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.987835][T17066] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3963'. [ 451.015415][T17065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.066370][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'. [ 451.537582][T17094] netlink: 'syz.5.3970': attribute type 1 has an invalid length. [ 451.557373][T17094] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3970'. [ 451.577034][T17092] lo speed is unknown, defaulting to 1000 [ 451.601394][T17094] netlink: 'syz.5.3970': attribute type 13 has an invalid length. [ 451.759966][T17099] FAULT_INJECTION: forcing a failure. [ 451.759966][T17099] name failslab, interval 1, probability 0, space 0, times 0 [ 451.773438][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.1.3972 Not tainted syzkaller #0 PREEMPT(full) [ 451.773464][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 451.773477][T17099] Call Trace: [ 451.773486][T17099] [ 451.773494][T17099] dump_stack_lvl+0xe8/0x150 [ 451.773549][T17099] should_fail_ex+0x40c/0x560 [ 451.773591][T17099] should_failslab+0xa8/0x100 [ 451.773626][T17099] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 451.773653][T17099] ? skb_clone+0x212/0x3a0 [ 451.773675][T17099] ? skb_clone+0x212/0x3a0 [ 451.773707][T17099] skb_clone+0x212/0x3a0 [ 451.773737][T17099] __netlink_deliver_tap+0x413/0x860 [ 451.773775][T17099] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.773802][T17099] netlink_deliver_tap+0x19c/0x1b0 [ 451.773829][T17099] netlink_unicast+0x77f/0x940 [ 451.773864][T17099] netlink_sendmsg+0x813/0xb40 [ 451.773900][T17099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.773931][T17099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 451.773960][T17099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.773985][T17099] sock_sendmsg_nosec+0x13a/0x180 [ 451.774017][T17099] ____sys_sendmsg+0x54e/0x850 [ 451.774047][T17099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.774082][T17099] ? import_iovec+0x73/0xa0 [ 451.774118][T17099] ___sys_sendmsg+0x2a5/0x360 [ 451.774141][T17099] ? __lock_acquire+0x683/0x2cf0 [ 451.774176][T17099] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.774206][T17099] ? kstrtouint+0x6e/0xe0 [ 451.774265][T17099] ? __fget_files+0x2a/0x420 [ 451.774293][T17099] ? __fget_files+0x3a2/0x420 [ 451.774333][T17099] __sys_sendmmsg+0x273/0x4d0 [ 451.774363][T17099] ? __pfx___sys_sendmmsg+0x10/0x10 [ 451.774399][T17099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.774442][T17099] ? ksys_write+0x242/0x270 [ 451.774478][T17099] ? __pfx_ksys_write+0x10/0x10 [ 451.774519][T17099] __x64_sys_sendmmsg+0xa0/0xc0 [ 451.774544][T17099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.774567][T17099] do_syscall_64+0x174/0x580 [ 451.774599][T17099] ? trace_irq_disable+0x3b/0x140 [ 451.774626][T17099] ? clear_bhb_loop+0x40/0x90 [ 451.774654][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.774675][T17099] RIP: 0033:0x7f835319de99 [ 451.774695][T17099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.774714][T17099] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 451.774737][T17099] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 451.774753][T17099] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000003 [ 451.774767][T17099] RBP: 00007f8354001090 R08: 0000000000000000 R09: 0000000000000000 [ 451.774781][T17099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.774794][T17099] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 451.774830][T17099] [ 451.774959][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3972'. [ 452.151926][T17092] lo speed is unknown, defaulting to 1000 [ 452.182427][T17101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3973'. [ 452.282040][T17103] lo speed is unknown, defaulting to 1000 [ 452.354083][T17107] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 452.495272][T17115] FAULT_INJECTION: forcing a failure. [ 452.495272][T17115] name failslab, interval 1, probability 0, space 0, times 0 [ 452.529413][T17115] CPU: 0 UID: 0 PID: 17115 Comm: syz.0.3976 Not tainted syzkaller #0 PREEMPT(full) [ 452.529439][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 452.529451][T17115] Call Trace: [ 452.529458][T17115] [ 452.529466][T17115] dump_stack_lvl+0xe8/0x150 [ 452.529502][T17115] should_fail_ex+0x40c/0x560 [ 452.529531][T17115] should_failslab+0xa8/0x100 [ 452.529562][T17115] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 452.529587][T17115] ? __d_lookup+0x66/0x790 [ 452.529635][T17115] ? __d_alloc+0x37/0x6f0 [ 452.529661][T17115] ? __d_alloc+0x37/0x6f0 [ 452.529707][T17115] __d_alloc+0x37/0x6f0 [ 452.529747][T17115] d_alloc+0x4b/0x190 [ 452.529774][T17115] ? lookup_one_qstr_excl+0xc4/0x360 [ 452.529807][T17115] lookup_one_qstr_excl+0xd8/0x360 [ 452.529837][T17115] ? lookup_noperm_common+0x245/0x430 [ 452.529870][T17115] start_dirop+0x5c/0x90 [ 452.529917][T17115] simple_start_creating+0xcc/0x110 [ 452.529950][T17115] ? __pfx_simple_start_creating+0x10/0x10 [ 452.529984][T17115] ? do_raw_spin_unlock+0xf5/0x210 [ 452.530008][T17115] ? mntput+0x65/0xc0 [ 452.530038][T17115] debugfs_start_creating+0xdb/0x1a0 [ 452.530063][T17115] __debugfs_create_file+0x6f/0x400 [ 452.530091][T17115] debugfs_create_file_full+0x3f/0x60 [ 452.530118][T17115] ref_tracker_dir_debugfs+0x197/0x360 [ 452.530147][T17115] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 452.530205][T17115] ? __kvmalloc_node_noprof+0x55a/0x860 [ 452.530245][T17115] ? __raw_spin_lock_init+0x45/0x100 [ 452.530272][T17115] alloc_netdev_mqs+0x275/0x12b0 [ 452.530299][T17115] ? __pfx_snprintf+0x10/0x10 [ 452.530330][T17115] ? __pfx_vxcan_setup+0x10/0x10 [ 452.530361][T17115] rtnl_create_link+0x321/0xd70 [ 452.530397][T17115] rtnl_newlink_create+0x258/0x7b0 [ 452.530430][T17115] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 452.530458][T17115] ? __pfx___mutex_lock+0x10/0x10 [ 452.530510][T17115] ? ns_capable+0x89/0xe0 [ 452.530541][T17115] rtnl_newlink+0x166d/0x1c30 [ 452.530581][T17115] ? __pfx_rtnl_newlink+0x10/0x10 [ 452.530605][T17115] ? __lock_acquire+0x683/0x2cf0 [ 452.530644][T17115] ? __lock_acquire+0x683/0x2cf0 [ 452.530747][T17115] ? __kernel_text_address+0xd/0x30 [ 452.530779][T17115] ? unwind_get_return_address+0x4d/0x90 [ 452.530801][T17115] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.530828][T17115] ? arch_stack_walk+0xfb/0x150 [ 452.530863][T17115] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 452.530917][T17115] ? __pfx_rtnl_newlink+0x10/0x10 [ 452.530936][T17115] rtnetlink_rcv_msg+0x802/0xc00 [ 452.530968][T17115] ? netlink_sendmsg+0x5d4/0xb40 [ 452.530997][T17115] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 452.531031][T17115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.531066][T17115] ? __lock_acquire+0x683/0x2cf0 [ 452.531111][T17115] netlink_rcv_skb+0x226/0x4a0 [ 452.531137][T17115] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.531173][T17115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.531214][T17115] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.531238][T17115] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.531270][T17115] netlink_unicast+0x7bb/0x940 [ 452.531305][T17115] netlink_sendmsg+0x813/0xb40 [ 452.531342][T17115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.531373][T17115] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.531403][T17115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.531427][T17115] sock_sendmsg_nosec+0x13a/0x180 [ 452.531461][T17115] ____sys_sendmsg+0x54e/0x850 [ 452.531492][T17115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.531528][T17115] ? import_iovec+0x73/0xa0 [ 452.531565][T17115] ___sys_sendmsg+0x2a5/0x360 [ 452.531587][T17115] ? __lock_acquire+0x683/0x2cf0 [ 452.531621][T17115] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.531708][T17115] ? __fget_files+0x2a/0x420 [ 452.531735][T17115] ? __fget_files+0x3a2/0x420 [ 452.531772][T17115] __x64_sys_sendmsg+0x1b1/0x290 [ 452.531798][T17115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.531840][T17115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.531862][T17115] do_syscall_64+0x174/0x580 [ 452.531883][T17115] ? trace_irq_disable+0x3b/0x140 [ 452.531908][T17115] ? clear_bhb_loop+0x40/0x90 [ 452.531933][T17115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.531953][T17115] RIP: 0033:0x7fb4fc99de99 [ 452.531971][T17115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.531988][T17115] RSP: 002b:00007fb4fd88f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.532009][T17115] RAX: ffffffffffffffda RBX: 00007fb4fcc25fa0 RCX: 00007fb4fc99de99 [ 452.532023][T17115] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 452.532036][T17115] RBP: 00007fb4fd88f090 R08: 0000000000000000 R09: 0000000000000000 [ 452.532048][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.532059][T17115] R13: 00007fb4fcc26038 R14: 00007fb4fcc25fa0 R15: 00007ffe8c1a6918 [ 452.532093][T17115] [ 453.029310][T17116] ip6tnl0: Caught tx_queue_len zero misconfig [ 453.035460][T17116] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3977'. [ 453.170769][T17103] lo speed is unknown, defaulting to 1000 [ 453.200232][T17119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3978'. [ 453.612066][T17137] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3982'. [ 453.622118][T17137] netlink: 'syz.5.3982': attribute type 1 has an invalid length. [ 454.484189][T17164] syzkaller0: entered promiscuous mode [ 454.497218][T17164] syzkaller0: entered allmulticast mode [ 455.431799][T17203] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 455.461789][T17201] lo speed is unknown, defaulting to 1000 [ 455.584156][T17207] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3997'. [ 455.670416][T17207] ip6gre2: entered promiscuous mode [ 455.694843][T17207] ip6gre2: entered allmulticast mode [ 456.023674][T17201] lo speed is unknown, defaulting to 1000 [ 456.582501][T17230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'. [ 456.669922][T17235] syzkaller0: entered promiscuous mode [ 456.677666][T17235] syzkaller0: entered allmulticast mode [ 456.878911][T17246] netlink: 'syz.6.4008': attribute type 14 has an invalid length. [ 456.887458][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4008'. [ 456.899992][T17246] netlink: 'syz.6.4008': attribute type 14 has an invalid length. [ 456.908454][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4008'. [ 457.009466][T17254] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 457.128308][T17254] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4010'. [ 457.370410][T17268] FAULT_INJECTION: forcing a failure. [ 457.370410][T17268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.384484][T17268] CPU: 1 UID: 0 PID: 17268 Comm: syz.1.4014 Not tainted syzkaller #0 PREEMPT(full) [ 457.384504][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 457.384514][T17268] Call Trace: [ 457.384520][T17268] [ 457.384526][T17268] dump_stack_lvl+0xe8/0x150 [ 457.384554][T17268] should_fail_ex+0x40c/0x560 [ 457.384583][T17268] _copy_from_user+0x2d/0xb0 [ 457.384608][T17268] btf_new_fd+0x301/0xbb0 [ 457.384637][T17268] __sys_bpf+0xd2e/0xd90 [ 457.384664][T17268] ? __pfx___sys_bpf+0x10/0x10 [ 457.384691][T17268] ? __fget_files+0x2a/0x420 [ 457.384725][T17268] ? ksys_write+0x242/0x270 [ 457.384751][T17268] ? __pfx_ksys_write+0x10/0x10 [ 457.384778][T17268] __x64_sys_bpf+0xba/0xd0 [ 457.384796][T17268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.384812][T17268] do_syscall_64+0x174/0x580 [ 457.384830][T17268] ? trace_irq_disable+0x3b/0x140 [ 457.384849][T17268] ? clear_bhb_loop+0x40/0x90 [ 457.384868][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.384904][T17268] RIP: 0033:0x7f835319de99 [ 457.384927][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.384946][T17268] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.384969][T17268] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 457.384988][T17268] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 457.384998][T17268] RBP: 00007f8354001090 R08: 0000000000000000 R09: 0000000000000000 [ 457.385008][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.385017][T17268] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 457.385042][T17268] [ 457.667755][T17272] netlink: 'syz.1.4016': attribute type 13 has an invalid length. [ 457.712356][T17276] syzkaller0: entered promiscuous mode [ 457.719782][T17276] syzkaller0: entered allmulticast mode [ 458.234393][T17289] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 459.966545][T17249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.101433][T17299] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 460.119504][T17299] lo: Caught tx_queue_len zero misconfig [ 460.205656][T17308] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4021'. [ 460.236961][T17308] ip6gre1: entered promiscuous mode [ 460.244696][T17308] ip6gre1: entered allmulticast mode [ 460.427199][T17319] syzkaller0: entered promiscuous mode [ 460.441423][T17319] syzkaller0: entered allmulticast mode [ 461.654733][T17358] syzkaller0: entered promiscuous mode [ 461.660721][T17358] syzkaller0: entered allmulticast mode [ 462.446589][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 463.539047][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4039'. [ 463.723458][T17341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.120161][T17373] xt_hashlimit: size too large, truncated to 1048576 [ 464.595580][T17390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4050'. [ 464.605438][T17390] netlink: 'syz.0.4050': attribute type 7 has an invalid length. [ 464.613630][T17390] netlink: 'syz.0.4050': attribute type 8 has an invalid length. [ 464.622104][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4050'. [ 465.546179][T17397] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20002 [ 465.952358][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 465.966351][T17413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.621574][T17424] syzkaller0: entered promiscuous mode [ 466.627932][T17424] syzkaller0: entered allmulticast mode [ 466.866292][T17432] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 466.999250][T17436] netlink: 'syz.6.4065': attribute type 2 has an invalid length. [ 467.014762][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4065'. [ 467.050380][T17439] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 467.883590][T17462] IPv6: NLM_F_REPLACE set, but no existing node found! [ 467.988412][T17467] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 468.217176][T17474] lo speed is unknown, defaulting to 1000 [ 468.251826][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4078'. [ 468.500485][T17474] lo speed is unknown, defaulting to 1000 [ 469.387265][ T5626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 469.401269][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 469.410195][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 469.419964][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 469.428038][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 469.984527][T17501] lo speed is unknown, defaulting to 1000 [ 470.241233][T17501] lo speed is unknown, defaulting to 1000 [ 470.652997][T17501] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.660700][T17501] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.668345][T17501] bridge_slave_0: entered allmulticast mode [ 470.683052][T17501] bridge_slave_0: entered promiscuous mode [ 470.692898][T17501] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.701638][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.709546][T17501] bridge_slave_1: entered allmulticast mode [ 470.727887][T17501] bridge_slave_1: entered promiscuous mode [ 470.773664][T17501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.791675][T17501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.805270][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'. [ 470.918616][T17544] lo speed is unknown, defaulting to 1000 [ 470.928509][T17501] team0: Port device team_slave_0 added [ 470.937580][T17501] team0: Port device team_slave_1 added [ 470.993588][T17501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.005880][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.034029][T17501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.047373][T17501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.054357][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.093529][T17501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.298212][T17501] hsr_slave_0: entered promiscuous mode [ 471.311401][T17501] hsr_slave_1: entered promiscuous mode [ 471.326120][T17501] debugfs: 'hsr0' already exists in 'hsr' [ 471.338852][T17501] Cannot create hsr debugfs directory [ 471.478190][ T4935] Bluetooth: hci8: command tx timeout [ 471.635551][T17544] lo speed is unknown, defaulting to 1000 [ 471.909056][T17557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.976049][T17574] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.574565][T17574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.630239][T17574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.677168][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 473.319212][ T78] netdevsim netdevsim6 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.343107][ T78] netdevsim netdevsim6 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.356654][ T78] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.365797][ T78] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.378493][ T78] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.389203][ T78] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.520865][ T78] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.540542][ T78] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.557627][ T5626] Bluetooth: hci8: command tx timeout [ 473.770733][T17590] lo speed is unknown, defaulting to 1000 [ 473.991149][T17501] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 474.013140][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.025643][T17501] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 474.052525][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.069827][T17501] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 474.087775][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.127852][T17501] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 474.139090][T17501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.352697][T17590] lo speed is unknown, defaulting to 1000 [ 474.503950][T17501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.563827][T17501] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.623909][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.631231][T12345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.663650][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.670892][T12345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.850329][T17635] FAULT_INJECTION: forcing a failure. [ 474.850329][T17635] name failslab, interval 1, probability 0, space 0, times 0 [ 474.886555][T17635] CPU: 1 UID: 0 PID: 17635 Comm: syz.1.4120 Not tainted syzkaller #0 PREEMPT(full) [ 474.886599][T17635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 474.886620][T17635] Call Trace: [ 474.886629][T17635] [ 474.886638][T17635] dump_stack_lvl+0xe8/0x150 [ 474.886675][T17635] should_fail_ex+0x40c/0x560 [ 474.886706][T17635] should_failslab+0xa8/0x100 [ 474.886750][T17635] __kmalloc_cache_noprof+0xa8/0x660 [ 474.886795][T17635] ? __inet_diag_dump_start+0x90/0xbb0 [ 474.886826][T17635] ? __inet_diag_dump_start+0x90/0xbb0 [ 474.886865][T17635] __inet_diag_dump_start+0x90/0xbb0 [ 474.886897][T17635] ? netlink_lookup+0x30/0x200 [ 474.886926][T17635] ? netlink_lookup+0x30/0x200 [ 474.886955][T17635] __netlink_dump_start+0x442/0x7b0 [ 474.886984][T17635] inet_diag_handler_cmd+0x1df/0x2c0 [ 474.887014][T17635] ? sock_diag_lock_handler+0x19/0x290 [ 474.887048][T17635] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 474.887079][T17635] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 474.887108][T17635] ? __pfx_inet_diag_dump+0x10/0x10 [ 474.887136][T17635] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 474.887172][T17635] ? sock_diag_lock_handler+0x19/0x290 [ 474.887203][T17635] ? sock_diag_lock_handler+0x19/0x290 [ 474.887240][T17635] sock_diag_rcv_msg+0x4b0/0x5f0 [ 474.887275][T17635] netlink_rcv_skb+0x226/0x4a0 [ 474.887300][T17635] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 474.887334][T17635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.887382][T17635] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.887404][T17635] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.887432][T17635] netlink_unicast+0x7bb/0x940 [ 474.887463][T17635] netlink_sendmsg+0x813/0xb40 [ 474.887496][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.887523][T17635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.887549][T17635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.887571][T17635] sock_sendmsg_nosec+0x13a/0x180 [ 474.887611][T17635] ____sys_sendmsg+0x54e/0x850 [ 474.887637][T17635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.887667][T17635] ? import_iovec+0x73/0xa0 [ 474.887697][T17635] ___sys_sendmsg+0x2a5/0x360 [ 474.887717][T17635] ? __lock_acquire+0x683/0x2cf0 [ 474.887746][T17635] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.887800][T17635] ? __fget_files+0x2a/0x420 [ 474.887824][T17635] ? __fget_files+0x3a2/0x420 [ 474.887858][T17635] __x64_sys_sendmsg+0x1b1/0x290 [ 474.887881][T17635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.887925][T17635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.887945][T17635] do_syscall_64+0x174/0x580 [ 474.887966][T17635] ? trace_irq_disable+0x3b/0x140 [ 474.887989][T17635] ? clear_bhb_loop+0x40/0x90 [ 474.888016][T17635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.888034][T17635] RIP: 0033:0x7f835319de99 [ 474.888052][T17635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.888068][T17635] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.888088][T17635] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 474.888101][T17635] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 474.888113][T17635] RBP: 00007f8354001090 R08: 0000000000000000 R09: 0000000000000000 [ 474.888124][T17635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.888134][T17635] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 474.888164][T17635] [ 475.636903][ T5626] Bluetooth: hci8: command tx timeout [ 475.821994][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4126'. [ 475.842429][T17658] tipc: Invalid UDP bearer configuration [ 475.842477][T17658] tipc: Enabling of bearer rejected, failed to enable media [ 475.903555][T17658] pimreg: tun_chr_ioctl cmd 2147767520 [ 476.000859][T17501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.139558][T17661] bond2: Removing last arp target with arp_interval on [ 476.233496][T17673] netlink: zone id is out of range [ 476.255001][T17673] netlink: get zone limit has 4 unknown bytes [ 476.269799][T17673] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4128'. [ 476.449104][T17679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4130'. [ 476.486331][T17677] lo speed is unknown, defaulting to 1000 [ 476.563930][T17501] veth0_vlan: entered promiscuous mode [ 476.582473][T17501] veth1_vlan: entered promiscuous mode [ 476.628118][T17501] veth0_macvtap: entered promiscuous mode [ 476.639941][T17501] veth1_macvtap: entered promiscuous mode [ 476.669422][T17501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.693096][T17501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.712065][ T647] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.733739][ T647] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.743839][T17685] FAULT_INJECTION: forcing a failure. [ 476.743839][T17685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.759921][ T647] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.797375][ T76] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.819187][T17685] CPU: 1 UID: 0 PID: 17685 Comm: syz.1.4132 Not tainted syzkaller #0 PREEMPT(full) [ 476.819210][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 476.819221][T17685] Call Trace: [ 476.819228][T17685] [ 476.819235][T17685] dump_stack_lvl+0xe8/0x150 [ 476.819264][T17685] should_fail_ex+0x40c/0x560 [ 476.819296][T17685] _copy_from_user+0x2d/0xb0 [ 476.819323][T17685] ___sys_recvmsg+0x173/0x5a0 [ 476.819347][T17685] ? __pfx____sys_recvmsg+0x10/0x10 [ 476.819374][T17685] ? __fget_files+0x2a/0x420 [ 476.819419][T17685] do_recvmmsg+0x31a/0x7f0 [ 476.819444][T17685] ? __pfx_do_recvmmsg+0x10/0x10 [ 476.819473][T17685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.819494][T17685] ? __fget_files+0x3a2/0x420 [ 476.819524][T17685] __x64_sys_recvmmsg+0x198/0x250 [ 476.819549][T17685] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 476.819575][T17685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.819592][T17685] do_syscall_64+0x174/0x580 [ 476.819609][T17685] ? trace_irq_disable+0x3b/0x140 [ 476.819629][T17685] ? clear_bhb_loop+0x40/0x90 [ 476.819648][T17685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.819664][T17685] RIP: 0033:0x7f835319de99 [ 476.819681][T17685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.819695][T17685] RSP: 002b:00007f8353fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 476.819713][T17685] RAX: ffffffffffffffda RBX: 00007f8353426090 RCX: 00007f835319de99 [ 476.819725][T17685] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 476.819735][T17685] RBP: 00007f8353fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 476.819744][T17685] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 476.819754][T17685] R13: 00007f8353426128 R14: 00007f8353426090 R15: 00007ffd6fde7488 [ 476.819780][T17685] [ 477.067394][T12347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.105860][T12347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.170882][T12347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.198192][T12347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.417828][T17677] lo speed is unknown, defaulting to 1000 [ 477.512318][T17697] netlink: get zone limit has 4 unknown bytes [ 477.589516][T17697] tipc: Started in network mode [ 477.594895][T17697] tipc: Node identity ac14140f, cluster identity 4711 [ 477.603158][T17697] tipc: New replicast peer: 255.255.255.255 [ 477.610388][T17697] tipc: Enabled bearer , priority 10 [ 477.717039][ T5626] Bluetooth: hci8: command tx timeout [ 478.067214][T17708] syzkaller0: entered promiscuous mode [ 478.072782][T17708] syzkaller0: entered allmulticast mode [ 478.269905][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4144'. [ 478.494208][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4147'. [ 478.727225][ T187] tipc: Node number set to 2886997007 [ 478.748410][T17742] FAULT_INJECTION: forcing a failure. [ 478.748410][T17742] name failslab, interval 1, probability 0, space 0, times 0 [ 478.770355][T17735] lo speed is unknown, defaulting to 1000 [ 478.798752][T17742] CPU: 1 UID: 0 PID: 17742 Comm: syz.1.4150 Not tainted syzkaller #0 PREEMPT(full) [ 478.798781][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 478.798794][T17742] Call Trace: [ 478.798802][T17742] [ 478.798811][T17742] dump_stack_lvl+0xe8/0x150 [ 478.798848][T17742] should_fail_ex+0x40c/0x560 [ 478.798878][T17742] should_failslab+0xa8/0x100 [ 478.798912][T17742] __kmalloc_cache_noprof+0xa8/0x660 [ 478.798941][T17742] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 478.798974][T17742] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 478.799015][T17742] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 478.799048][T17742] ? sctp_stream_interleave_init+0x55/0x90 [ 478.799085][T17742] sctp_association_new+0x15be/0x25d0 [ 478.799123][T17742] sctp_connect_new_asoc+0x2e4/0x6b0 [ 478.799152][T17742] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 478.799185][T17742] ? __local_bh_enable_ip+0xd0/0x130 [ 478.799209][T17742] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 478.799232][T17742] ? security_sctp_bind_connect+0x7e/0x2c0 [ 478.799266][T17742] sctp_sendmsg+0x159b/0x2d00 [ 478.799307][T17742] ? __pfx_sctp_sendmsg+0x10/0x10 [ 478.799340][T17742] ? aa_sk_perm+0x6d5/0x900 [ 478.799379][T17742] ? __might_fault+0xaf/0x130 [ 478.799408][T17742] ? sock_rps_record_flow+0x19/0x350 [ 478.799444][T17742] ? inet_sendmsg+0x298/0x320 [ 478.799479][T17742] ? __pfx_inet_sendmsg+0x10/0x10 [ 478.799509][T17742] sock_sendmsg_nosec+0x10e/0x180 [ 478.799542][T17742] __sys_sendto+0x408/0x5a0 [ 478.799571][T17742] ? ksys_write+0x1e6/0x270 [ 478.799608][T17742] ? __pfx___sys_sendto+0x10/0x10 [ 478.799625][T17742] ? __mutex_unlock_slowpath+0x731/0x900 [ 478.799683][T17742] ? __pfx_ksys_write+0x10/0x10 [ 478.799721][T17742] __x64_sys_sendto+0xde/0x100 [ 478.799742][T17742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.799765][T17742] do_syscall_64+0x174/0x580 [ 478.799789][T17742] ? trace_irq_disable+0x3b/0x140 [ 478.799815][T17742] ? clear_bhb_loop+0x40/0x90 [ 478.799842][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.799862][T17742] RIP: 0033:0x7f835319de99 [ 478.799882][T17742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.799918][T17742] RSP: 002b:00007f8354001028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 478.799941][T17742] RAX: ffffffffffffffda RBX: 00007f8353425fa0 RCX: 00007f835319de99 [ 478.799957][T17742] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 478.799970][T17742] RBP: 00007f8354001090 R08: 000020000005ffe4 R09: 000000000000001c [ 478.799985][T17742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.799997][T17742] R13: 00007f8353426038 R14: 00007f8353425fa0 R15: 00007ffd6fde7488 [ 478.800034][T17742] [ 479.340402][T17735] lo speed is unknown, defaulting to 1000 [ 479.412370][T17744] netlink: 'syz.5.4151': attribute type 9 has an invalid length. [ 480.007200][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4157'. [ 480.025360][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4157'. [ 480.047659][T17764] veth0: Caught tx_queue_len zero misconfig [ 480.142124][T17767] syzkaller0: entered promiscuous mode [ 480.147744][T17767] syzkaller0: entered allmulticast mode [ 480.400047][T17775] block nbd0: server does not support multiple connections per device. [ 480.424983][T17775] block nbd0: shutting down sockets [ 480.642732][T17797] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4167'. [ 480.668594][T17794] lo speed is unknown, defaulting to 1000 [ 480.741240][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4167'. [ 480.768463][T17795] nbd: device at index 64 is going down [ 481.024976][T17794] lo speed is unknown, defaulting to 1000 [ 481.025126][T17796] lo speed is unknown, defaulting to 1000 [ 481.259794][T17808] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.334095][T17809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4169'. [ 481.419065][T17796] lo speed is unknown, defaulting to 1000 [ 481.684868][ T5635] udevd[5635]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 482.250317][T17829] syzkaller0: entered promiscuous mode [ 482.259390][T17829] syzkaller0: entered allmulticast mode [ 483.053692][T17855] lo speed is unknown, defaulting to 1000 [ 483.213653][T17867] syzkaller0: entered promiscuous mode [ 483.229427][T17867] syzkaller0: entered allmulticast mode [ 483.245193][T17869] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4191'. [ 483.499520][T17855] lo speed is unknown, defaulting to 1000 [ 483.602196][T17875] lo speed is unknown, defaulting to 1000 [ 483.693414][T17882] FAULT_INJECTION: forcing a failure. [ 483.693414][T17882] name failslab, interval 1, probability 0, space 0, times 0 [ 483.708514][T17882] CPU: 0 UID: 0 PID: 17882 Comm: syz.8.4196 Not tainted syzkaller #0 PREEMPT(full) [ 483.708538][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 483.708550][T17882] Call Trace: [ 483.708557][T17882] [ 483.708564][T17882] dump_stack_lvl+0xe8/0x150 [ 483.708598][T17882] should_fail_ex+0x40c/0x560 [ 483.708625][T17882] should_failslab+0xa8/0x100 [ 483.708657][T17882] __kmalloc_cache_noprof+0xa8/0x660 [ 483.708682][T17882] ? rtnl_newlink+0x143/0x1c30 [ 483.708699][T17882] ? rtnl_newlink+0x143/0x1c30 [ 483.708722][T17882] rtnl_newlink+0x143/0x1c30 [ 483.708742][T17882] ? kasan_save_track+0x4f/0x80 [ 483.708779][T17882] ? kasan_save_track+0x3e/0x80 [ 483.708804][T17882] ? __kasan_slab_free+0x5c/0x80 [ 483.708829][T17882] ? kmem_cache_free+0x182/0x650 [ 483.708849][T17882] ? nlmon_xmit+0xb0/0x100 [ 483.708874][T17882] ? dev_hard_start_xmit+0x2cd/0x830 [ 483.708893][T17882] ? __dev_queue_xmit+0x14c0/0x3820 [ 483.708912][T17882] ? __netlink_deliver_tap+0x5b4/0x860 [ 483.708931][T17882] ? netlink_deliver_tap+0x19c/0x1b0 [ 483.708948][T17882] ? netlink_unicast+0x77f/0x940 [ 483.708963][T17882] ? netlink_sendmsg+0x813/0xb40 [ 483.708983][T17882] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.708999][T17882] ? do_syscall_64+0x174/0x580 [ 483.709020][T17882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.709071][T17882] ? kasan_quarantine_put+0xbb/0x1f0 [ 483.709105][T17882] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.709131][T17882] ? nlmon_xmit+0xb0/0x100 [ 483.709153][T17882] ? kmem_cache_free+0x182/0x650 [ 483.709184][T17882] ? __lock_acquire+0x683/0x2cf0 [ 483.709212][T17882] ? __dev_queue_xmit+0x29b/0x3820 [ 483.709236][T17882] ? __local_bh_enable_ip+0xd0/0x130 [ 483.709256][T17882] ? lockdep_hardirqs_on+0x7a/0x110 [ 483.709275][T17882] ? __dev_queue_xmit+0x29b/0x3820 [ 483.709293][T17882] ? __local_bh_enable_ip+0xd0/0x130 [ 483.709311][T17882] ? __dev_queue_xmit+0x29b/0x3820 [ 483.709338][T17882] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 483.709367][T17882] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.709397][T17882] ? __pfx_rtnl_newlink+0x10/0x10 [ 483.709410][T17882] rtnetlink_rcv_msg+0x802/0xc00 [ 483.709441][T17882] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 483.709468][T17882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.709492][T17882] ? ref_tracker_free+0x689/0x830 [ 483.709517][T17882] ? __pfx_ref_tracker_free+0x10/0x10 [ 483.709549][T17882] ? __asan_memcpy+0x40/0x70 [ 483.709568][T17882] ? __skb_clone+0x5c/0x6c0 [ 483.709591][T17882] netlink_rcv_skb+0x226/0x4a0 [ 483.709611][T17882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 483.709638][T17882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.709666][T17882] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.709686][T17882] ? netlink_deliver_tap+0x2e/0x1b0 [ 483.709712][T17882] netlink_unicast+0x7bb/0x940 [ 483.709738][T17882] netlink_sendmsg+0x813/0xb40 [ 483.709762][T17882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.709784][T17882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.709807][T17882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.709824][T17882] sock_sendmsg_nosec+0x13a/0x180 [ 483.709848][T17882] ____sys_sendmsg+0x54e/0x850 [ 483.709870][T17882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.709914][T17882] ? import_iovec+0x73/0xa0 [ 483.709951][T17882] ___sys_sendmsg+0x2a5/0x360 [ 483.709969][T17882] ? __lock_acquire+0x683/0x2cf0 [ 483.709997][T17882] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.710052][T17882] ? __fget_files+0x2a/0x420 [ 483.710079][T17882] ? __fget_files+0x3a2/0x420 [ 483.710127][T17882] __x64_sys_sendmsg+0x1b1/0x290 [ 483.710163][T17882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.710200][T17882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.710219][T17882] do_syscall_64+0x174/0x580 [ 483.710238][T17882] ? trace_irq_disable+0x3b/0x140 [ 483.710260][T17882] ? clear_bhb_loop+0x40/0x90 [ 483.710281][T17882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.710298][T17882] RIP: 0033:0x7fc8ac39de99 [ 483.710315][T17882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.710330][T17882] RSP: 002b:00007fc8ad185028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.710349][T17882] RAX: ffffffffffffffda RBX: 00007fc8ac625fa0 RCX: 00007fc8ac39de99 [ 483.710361][T17882] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 483.710372][T17882] RBP: 00007fc8ad185090 R08: 0000000000000000 R09: 0000000000000000 [ 483.710383][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.710393][T17882] R13: 00007fc8ac626038 R14: 00007fc8ac625fa0 R15: 00007fffd1f34918 [ 483.710420][T17882] [ 484.162782][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4195'. [ 484.461434][T17875] lo speed is unknown, defaulting to 1000 [ 484.645825][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4200'. [ 485.184978][T17914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4205'. [ 485.979100][ T31] INFO: task syz.2.3088:14115 blocked for more than 143 seconds. [ 486.006493][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.045390][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.077181][ T31] task:syz.2.3088 state:D stack:27592 pid:14115 tgid:14114 ppid:13300 task_flags:0x400140 flags:0x00080002 [ 486.110883][ T31] Call Trace: [ 486.120986][ T31] [ 486.152829][ T31] __schedule+0x17d9/0x56c0 [ 486.184896][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.221320][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.272369][ T31] ? __pfx___schedule+0x10/0x10 [ 486.297158][ T31] ? schedule+0x90/0x2b0 [ 486.318866][ T31] schedule+0x164/0x2b0 [ 486.331431][ T31] schedule_preempt_disabled+0x13/0x30 [ 486.347684][ T31] __mutex_lock+0x7bf/0x1550 [ 486.369515][ T31] ? __mutex_lock+0x5d4/0x1550 [ 486.386963][ T31] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 486.394597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 486.400705][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.405992][ T31] nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 486.407866][T17928] lo speed is unknown, defaulting to 1000 [ 486.427729][ T31] ? __nla_parse+0x40/0x60 [ 486.432228][ T31] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 486.450599][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 486.467186][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 486.474261][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 486.480998][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.488187][ T31] ? bpf_lsm_capable+0x9/0x20 [ 486.492937][ T31] ? security_capable+0x7e/0x2c0 [ 486.498941][ T31] genl_rcv_msg+0x614/0x7a0 [ 486.503521][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.509493][ T31] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 486.516172][ T31] netlink_rcv_skb+0x226/0x4a0 [ 486.522198][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.528255][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.533620][ T31] ? down_read+0x2be/0x330 [ 486.539058][ T31] genl_rcv+0x28/0x40 [ 486.543094][ T31] netlink_unicast+0x7bb/0x940 [ 486.548510][ T31] netlink_sendmsg+0x813/0xb40 [ 486.555264][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.561134][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.566158][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.571885][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 486.577755][ T31] ____sys_sendmsg+0x54e/0x850 [ 486.582618][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.603806][ T31] ? import_iovec+0x73/0xa0 [ 486.609370][ T31] ___sys_sendmsg+0x2a5/0x360 [ 486.627038][ T31] ? __lock_acquire+0x683/0x2cf0 [ 486.632051][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.647197][ T31] ? futex_wait+0x2a2/0x390 [ 486.652649][ T31] ? __fget_files+0x2a/0x420 [ 486.666461][ T31] ? __fget_files+0x3a2/0x420 [ 486.672764][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 486.687088][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.693564][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.707081][ T31] do_syscall_64+0x174/0x580 [ 486.717227][ T31] ? trace_irq_disable+0x3b/0x140 [ 486.727151][ T31] ? clear_bhb_loop+0x40/0x90 [ 486.737160][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.746959][ T31] RIP: 0033:0x7f90aeb9de99 [ 486.754712][ T31] RSP: 002b:00007f90afaad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.780704][ T31] RAX: ffffffffffffffda RBX: 00007f90aee25fa0 RCX: 00007f90aeb9de99 [ 486.799072][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 486.816464][ T31] RBP: 00007f90aec33eaf R08: 0000000000000000 R09: 0000000000000000 [ 486.836766][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.847622][ T31] R13: 00007f90aee26038 R14: 00007f90aee25fa0 R15: 00007ffd42d6b568 [ 486.866895][ T31] [ 486.871618][ T31] [ 486.871618][ T31] Showing all locks held in the system: [ 486.940309][ T31] 1 lock held by pool_workqueue_/3: [ 486.956457][ T31] 1 lock held by khungtaskd/31: [ 486.962920][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 486.986475][ T31] 2 locks held by getty/5378: [ 486.992888][ T31] #0: ffff888036b990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 487.016469][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 487.037575][ T31] 2 locks held by syz.4.2269/11526: [ 487.048290][ T31] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.080519][ T31] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 487.110935][ T31] 4 locks held by kworker/u8:12/12347: [ 487.120474][T17928] lo speed is unknown, defaulting to 1000 [ 487.136579][ T31] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.165942][ T31] #1: ffffc9000670fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 487.198172][ T31] #2: ffffffff9001e948 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 487.216768][ T31] #3: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 487.241235][ T31] 2 locks held by syz.2.3088/14115: [ 487.259120][ T31] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.277104][ T31] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 487.297024][ T31] 2 locks held by syz.3.3321/14937: [ 487.307121][ T31] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.326637][ T31] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 487.349184][ T31] 2 locks held by syz.7.3987/17157: [ 487.360273][ T31] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.387039][ T31] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 487.407057][ T31] 2 locks held by syz.6.4128/17671: [ 487.417090][ T31] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.443540][ T31] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 487.454904][ T31] 2 locks held by syz.5.4198/17890: [ 487.461708][ T31] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 487.471489][ T31] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 487.491161][ T31] 2 locks held by syz.0.4206/17928: [ 487.497141][ T31] #0: ffffffff9001e948 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 487.507331][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 487.519055][ T31] [ 487.521426][ T31] ============================================= [ 487.521426][ T31] [ 487.536233][ T31] NMI backtrace for cpu 0 [ 487.536271][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 487.536291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 487.536304][ T31] Call Trace: [ 487.536311][ T31] [ 487.536320][ T31] dump_stack_lvl+0xe8/0x150 [ 487.536356][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 487.536388][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 487.536424][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 487.536458][ T31] sys_info+0x135/0x170 [ 487.536485][ T31] watchdog+0xfd7/0x1030 [ 487.536518][ T31] ? watchdog+0x1c7/0x1030 [ 487.536567][ T31] kthread+0x388/0x470 [ 487.536597][ T31] ? __pfx_watchdog+0x10/0x10 [ 487.536619][ T31] ? __pfx_kthread+0x10/0x10 [ 487.536650][ T31] ret_from_fork+0x514/0xb70 [ 487.536683][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 487.536712][ T31] ? __switch_to+0xc89/0x1420 [ 487.536740][ T31] ? __pfx_kthread+0x10/0x10 [ 487.536771][ T31] ret_from_fork_asm+0x1a/0x30 [ 487.536807][ T31] [ 487.643580][ T31] Sending NMI from CPU 0 to CPUs 1: [ 487.649548][ C1] NMI backtrace for cpu 1 [ 487.649562][ C1] CPU: 1 UID: 0 PID: 17921 Comm: syz.1.4205 Not tainted syzkaller #0 PREEMPT(full) [ 487.649581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 487.649592][ C1] RIP: 0010:__might_resched+0x5/0x4d0 [ 487.649618][ C1] Code: 89 ee e9 57 ff ff ff 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 20 89 d3 89 74 24 04 48 89 7c [ 487.649634][ C1] RSP: 0018:ffffc9000782fc50 EFLAGS: 00000246 [ 487.649649][ C1] RAX: ffffffff899730b4 RBX: 0000000000000000 RCX: 0000000000000002 [ 487.649660][ C1] RDX: 0000000000000000 RSI: 0000000000000c03 RDI: ffffffff8cff9560 [ 487.649671][ C1] RBP: ffffc9000782fe10 R08: ffffffff821b493f R09: 0000000000000000 [ 487.649682][ C1] R10: 0000000000000000 R11: ffff888052e59078 R12: 1ffff92000f05f98 [ 487.649694][ C1] R13: 0000000000000000 R14: 00000000000231c1 R15: 0000200000004480 [ 487.649705][ C1] FS: 00007f8353fe06c0(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 487.649719][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.649737][ C1] CR2: 00007f983e253e9c CR3: 00000000345d4000 CR4: 00000000003526f0 [ 487.649752][ C1] Call Trace: [ 487.649759][ C1] [ 487.649765][ C1] do_recvmmsg+0x500/0x7f0 [ 487.649790][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 487.649809][ C1] ? do_futex+0x3e7/0x4e0 [ 487.649847][ C1] __x64_sys_recvmmsg+0x198/0x250 [ 487.649868][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 487.649892][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.649930][ C1] do_syscall_64+0x174/0x580 [ 487.649951][ C1] ? trace_irq_disable+0x3b/0x140 [ 487.649973][ C1] ? clear_bhb_loop+0x40/0x90 [ 487.649995][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.650013][ C1] RIP: 0033:0x7f835319de99 [ 487.650029][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.650044][ C1] RSP: 002b:00007f8353fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 487.650062][ C1] RAX: ffffffffffffffda RBX: 00007f8353426090 RCX: 00007f835319de99 [ 487.650076][ C1] RDX: 00000000040000c2 RSI: 0000200000004480 RDI: 000000000000000b [ 487.650088][ C1] RBP: 00007f8353233eaf R08: 0000000000000000 R09: 0000000000000000 [ 487.650099][ C1] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 487.650110][ C1] R13: 00007f8353426128 R14: 00007f8353426090 R15: 00007ffd6fde7488 [ 487.650134][ C1] [ 487.940304][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 487.947229][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 487.956394][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 487.966480][ T31] Call Trace: [ 487.969786][ T31] [ 487.972740][ T31] vpanic+0x56c/0xa60 [ 487.976790][ T31] ? __pfx___schedule+0x10/0x10 [ 487.981671][ T31] ? __pfx_vpanic+0x10/0x10 [ 487.986210][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 487.992405][ T31] panic+0xc5/0xd0 [ 487.996174][ T31] ? __pfx_panic+0x10/0x10 [ 488.000642][ T31] ? preempt_schedule_common+0x82/0xd0 [ 488.006120][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 488.011500][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 488.017681][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 488.023853][ T31] watchdog+0x1030/0x1030 [ 488.028211][ T31] ? watchdog+0x1c7/0x1030 [ 488.032660][ T31] kthread+0x388/0x470 [ 488.036746][ T31] ? __pfx_watchdog+0x10/0x10 [ 488.041441][ T31] ? __pfx_kthread+0x10/0x10 [ 488.046054][ T31] ret_from_fork+0x514/0xb70 [ 488.050670][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 488.055831][ T31] ? __switch_to+0xc89/0x1420 [ 488.060546][ T31] ? __pfx_kthread+0x10/0x10 [ 488.065163][ T31] ret_from_fork_asm+0x1a/0x30 [ 488.069962][ T31] [ 488.073607][ T31] Kernel Offset: disabled [ 488.078131][ T31] Rebooting in 86400 seconds..