last executing test programs: 6.961547512s ago: executing program 2 (id=6032): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711086000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x32, 0x0, @val=@perf_event={0x9}}, 0x18) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000680)={'syzkaller1\x00', {0x2, 0x0, @local}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x20, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x10, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8"}]}, 0x20}], 0x1}, 0x0) writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000740)="c4823e4914e942897aec281637913c483b3e2d34987f8a5b8eafae033c395d63a7d5dd9a55d07e7576009b34ae3bf007db7d0549d22dd32b8d1a5a38863e73e62ab78be1f38beb2458ed514210802b0a34b070dfb1cf916b5992894c1276c594a75d12519718e2c601f8ce920adf9a9d879b0e0a4ff04187160dd044ac962d0320105aea6bfa3d871d4eecf647faeb995a3017d2db132025e7b95a31462b402d13de4e7338980164dc938d41f65dbf5406875ea8061a380a51ca45071a268389f9c27783240e4cfe900bd60ab72c", 0xce}, {&(0x7f0000000640)="5f9c409d5e9d7dcf2bfe8ed0ba71c7d118a75e11d28d39d81d3b823da01e5e112d9e1b04f5c4dab76dd21be40180a9059e897be99d59db2529f873", 0x3b}, {&(0x7f0000000680)}, {&(0x7f0000000840)="61c7d5c4bba7ffef5dca53961fdaa1e90b70e51dd4bd2c0804bafdd07c7584b9a014f20068876ee70f7f658cf040b42edd2e5d04918156e2cec50ef5efe919c12c0fadd336472cc77adb511bcadd96db4d59cb91a464be3659c1269ab253f40543cbede4d04c86e8ce8093bb71ff4f8b08cadc4ad4fd0e66fc7b0c61199fca0f2211aa4fcb5dc275636b48f0e446fba7a89c97c481f1bb17675f835251668827fcb5965cd106cf4ac3303be404115954339cb297bfba73cb0d4e59479054c470472605d4341593e9e21fb6184557fa2588", 0xd1}, {&(0x7f0000000940)="05ee8385ac2a6ac85be7484a8cd3f306312b30cbc76eda8ab701804685187ed382a8257dc643e03194a4131819f963ee4bf68e70f62d4cea7f1a281294c27e036c938a41c7b899263a842078f008913f761ad4756ec275fc7c93a6cd0c9bfab8f6038696814c36cd92215e11cfec0727da8d554a2a8ea200c3b36c570b40f9ef5cb03454ddb16c8d63051cc410e6d956ed32146c3996fb83fe5a28d1a0989b6c59464d221c7cbc84c24d7d54d4dbf8b076", 0xb1}, {&(0x7f0000000a00)="9e83ba7f48445755f0159d9674234b14b873eb74fa19f66b865a6c292fda8445647ad549e6f8c49b7894ce7823d2fe9ddccd10d6818cac685e838cf31fd5c84310bae5874ab0651e5bb220435b52647fdf2919a2b19f8711f764f5c4d7eca8ddb7f255abf66ec596be", 0x69}, {&(0x7f0000000a80)="6a0dbfbe0cbdcc99debe89dfef8b32b7ded4726a85e06a63ba8e678b9c3e07afecdc01657aad597395ba7ac55231201c813bbe88d097720aee0b9cc7d601da1e784e380ff8ab62945a8ec044e81091be93ae7059b2664db77698c0e88db88a6103ffb74dbd5a1bfd1f3285cd1fe005b4975ca0911e31478c6805ef2734f503ad14193b1826376777f98214c9e5939904f3c72d5da28209adc4777b5a8232e08931cd44e62fac78a969610683659de9d3dda0ebc5ef098fb65291f544c552eb108dee10dd078a15889cdafe086766789ec5a9bacd1e708981d6d018b5323bce60f12d3bc4bf1d1cff2614c0872f0502eca01dc8c7ea", 0xf5}], 0x7) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x8001, {{0x16, 0x4, 0x1, 0x7, 0x58, 0x66, 0x0, 0x58, 0x4, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x10, 0x70, 0x0, 0x0, [0x6, 0x4, 0x10001]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x10, "f36224db3ca0afe04909bda3b137"}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x5, 0x3, "e6"}]}, @noop, @cipso={0x86, 0x14, 0x2, [{0x7, 0x6, "e7b3cebd"}, {0x6, 0x8, "64357168cdfa"}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100185ab0bb6300000028000000280000000c0000000b0000000000000a040000000100000000000011020000000700000007000000000000090400000000005f2e002e30005f616100"], &(0x7f00000003c0)=""/250, 0x4c, 0xfa, 0x0, 0x7, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x13a, '\x00', 0x0, r4, 0x5, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0xaa, 0x3, 0x81, 0x140, r5, 0x5, '\x00', r3, r4, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010101}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r8, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000140)=0x8) unshare(0x40020000) 5.494520173s ago: executing program 2 (id=6050): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='devices.list\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='spmi_write_begin\x00', r5, 0x0, 0x3}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x8000000000, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) shutdown(r0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 5.039179831s ago: executing program 1 (id=6054): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30"], 0xc8}}, 0x0) 4.477415348s ago: executing program 2 (id=6059): unshare(0x22020600) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x6) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r2, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4a16}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x50}}, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f4305", 0x12}, {&(0x7f0000000100)="adec2585713a7d435e114b60d622ec318b6d9bb046da24b3", 0x18}], 0x2) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000680)="68c8", 0x2}], 0x1) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000c00600000000404730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x53215029, &(0x7f00000000c0), 0x1}, 0x0) 4.069715167s ago: executing program 2 (id=6062): r0 = socket(0x29, 0xa, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0xffffffff}}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000)=0xfffffffd, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) ioctl$int_in(r2, 0x5452, &(0x7f0000000380)=0x3) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) accept4(r2, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010101, @local, 0x1, "dd5aef360c62332b680ee92be580c2fe976d809b049bf1126ba8e3bea422248a", 0x0, 0x3, 0x5, 0x8}, 0x3c) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) r8 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8], 0x138}}, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e24, 0x350, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r9], 0x18}, 0x40c0) 3.552046784s ago: executing program 3 (id=6068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x18) 3.527354013s ago: executing program 3 (id=6069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x314080, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="201c0300", @ANYRES16=r5, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}}, 0x4000054) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000380)="fd", 0x1}, {&(0x7f0000000880)="cfd32ce43508def824047423e33cd9fac1284cc2706d9cf3169ca5961a3628cc1cea6a3a6de0e456cde1518bdaa805fae493a79c5aa2c3ab2187393d07952f81f4124f94fb36d40c0587e7bc62ce46832bb69f2aff47deb2691b75091a76df3ffe49f3535104e22ea44556eb224f72fe23cc56328e179b2d33112341026c8c3bc2bed0213a4fd51ce68dca0ed1ba3acf34971e7308000000622a535dead0a38b79211ed1f85f8257c94ec8a1c2caf7232a4fbd6e7bdbb5afb0022ed3ec0ab70e29a1adf2fabac8aa7186325d1fa40b0003e69b74673d388644b3c88c", 0xdc}, {&(0x7f0000000400)="24f6ff668f85bf79d531e916b22a00", 0xf}, {&(0x7f0000000700)="462917aa7e31d5", 0x7}, {&(0x7f00000003c0)='1', 0x1}, {&(0x7f0000000600)="9de58865e0ae45f3b88730d96074b7a78eef440f434fb267ed4f53177ca1f12762ec3dafbd087f1645eaf715c83c3fe3624eb32bb1b7cd856e96db944418b266e5cc76b42762f4ed79de5828349e820ca9533382d5890e931d06d48f231dfd5f1bc68338aba8bcca002778bd77de54b84c13d7eaecb05266f952fbd0329f8e6110def9d64643a7cbeef6a26e35f70a1ff91cce525e03f9060fb2fc6e9a", 0x9d}], 0x6, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000840)) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 2.964435149s ago: executing program 1 (id=6073): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1e, @multicast2}}, 0x5a4, 0xff}, &(0x7f0000000180)=0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200150f"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7, 0x8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 2.759044553s ago: executing program 2 (id=6075): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ff5bdf256300"/42], 0x30}, 0x1, 0x0, 0x0, 0x48840}, 0x1810) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r9, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r10}, 0x10) ppoll(&(0x7f0000000100)=[{r6}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r11}, 0x18) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 2.423989682s ago: executing program 0 (id=6077): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0) 2.184687055s ago: executing program 0 (id=6079): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r0) socket$inet6(0xa, 0x800, 0x7fffffff) 1.966350027s ago: executing program 0 (id=6081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001a00)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c0, 0x3f, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfe}, @nested={0x1a8, 0x1, 0x0, 0x1, [@nested={0x1a1, 0x4e, 0x0, 0x1, [@nested={0xe1, 0xd0, 0x0, 0x1, [@generic="72f34e19826432337c2a07d469337eafae724b848795c7eb365fe42ce4889a4698ac387d9d26babbe8a62804c1b596d435ff3631506b11c1b1d929f2ec0461d01572ea20a457bb63719dee7d470be448c77b63012fd9a38259115c38d2cf213318eb5da531f25d33ba4a0c0b6e09f2aa3c32664dbac68015b0aa0de5b289bf98eec75437b83f5ad8e36c7ab26ab74f4d62abe3a591ab7f1d803587d672da280a0bacf6b07e683609b4afe8b25b56518bbb37b9d4bc957303ab1ee436ec257ad6192ce3a1911fcb636eee9189c8afd6f3a1", @typed={0xc, 0x93, 0x0, 0x0, @u64=0x1ff}]}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r1}, @nested={0x8, 0xc2, 0x0, 0x1, [@nested={0x4, 0xa5}]}, @nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x12e}]}, @generic="1badfff5a3d5573e8cf20e61bb28ee2a2f02f35eee73ef67e139cadb399199ebfce5f283b9d7b4850f73293f8fbe4628a5aa415a1e05112295ce351b34792001c8fa3c7cea", @nested={0x48, 0xe4, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x8, 0x12a, 0x0, 0x0, @pid=r2}, @generic="9a9b28b0b8ac7f9ea1715d935fa9b95510a9f2763949483fa8320b038d3a156756b5ec54df8ce3dc5cbd3e6db9742a31d622093c7007c1b3"]}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_emit_ethernet(0x114, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x106, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0xffff, 0x0, 0xffff, {[@md5sig={0x13, 0x7, "3174c3e571216d408d6c07279b048be8"}]}}, {"0b50c82ac24614afa1f872ffdf5eb8ea22d1327edf96d6eecc66b83091aba64a3ef7ff924f5ca60271a52e95a9177c0289527c518335a4417ae6612b5774878cb03d3ff3263a22b3fc2554e30b61e9a09a5435b1c17ca3413fe14735be1f7cdaf3368a3b9aa52e1a9ae34d988818ec76e416c5c01f9e5c185cd3d75e8f8e3b7c480454c16847b89ed8884b9bd74705345e8eda77f79d076945843d8170f57a10d30cedea7b10f9b8f4354b87937b3586a95f4bd77e4fc8a8fb850080000000000000ca5d4a3e53b24600"}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001e80)={0x0, 0x781, 0x49f, 0x2, 0xa9, 0x1}, &(0x7f0000001ec0)=0x14) sendmsg$inet_sctp(r5, &(0x7f0000002000)={&(0x7f0000001a80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001ac0)="cd958a3992d18916a7ffb418a56195d73748eb4eb4d8ac31b21f826b94b1cfe3ab933b925211a6fef6ecbbf5ad7a73984f6970364115dfcdae768bbe4aaa121d20f72e340626d3dfdc9ce3d5eeed9623d127577c7721f48c157adebf61f57c3bd90f56e32da6db084e7af8a05c12d1d2b442c139323fd232da0e4e", 0x7b}, {&(0x7f0000001b40)="76a779a98faaac4a0b62ea77dabd9c78f7959f2673700b", 0x17}, {&(0x7f0000001b80)="fc2f116cd73ad426693ad5679d0ea49694c670477409ff857873333e73a09c6c6c70b589b1be4cf546cff9951f3c3e4403b7dca003c2cb29ce9c282c2bdcdbc3a5994e352555227a574312b8cb78ecd0624c62102c8f918caab3ff60066ac7629d7fd49c0ac0d0ab2d16ba5afc3cfa33f5897e984ed37209028348959a4d868eb5a42418a4ce5c27add071a3c2889139b663e8d800c13386e690cc81fa90e5835c4d22728a0b7d0aaf3cc8ee594af0a25dd8bbb37d93260673299211cd6843977ab7b420877c6006ae", 0xc9}, {&(0x7f0000001c80)="548d2f8f8197e883db8f90ecb9136fe9c0484d3dc908c1a09c095b55e9be51c9434a78f378028146a2c22df2059946913a19affc5ed4b93d87348fb7", 0x3c}, {&(0x7f0000001cc0)="e68b3d2b14c3c0d572654c9e28a1c7e0bae1511c4c4dda3d7009172778a5da98cdf4e7688e3e0856acc416542f12f7cf5509fc690c635f412cb1193449feeb76fc0f1de59258f43ef50d6872ce3084512f49618a0e010c3843d5c732487190e309cf4dfe76442af74e012bdd87c342a3f5da2080f518c6d5cf0b3a6fe2eb34b602680d127a79e04843143760ad4ca332f89e79460dd945059f4247bba45f835487e4234ad642dbaecaa9dcc2b41ad4b81065bc1b3be2ceecd265080ff49bfd6224e2567fea962fcf5a821d54984e9988291501bee1", 0xd5}, {&(0x7f0000001dc0)='}5', 0x2}], 0x6, &(0x7f0000001f00)=[@authinfo={0x18, 0x84, 0x6, {0x2c}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x942f, 0x202, 0x5202d710, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x961}}, @sndrcv={0x30, 0x84, 0x1, {0x8f5f, 0x1, 0x208, 0x8, 0x3, 0x5, 0x7, 0x3, r6}}], 0xe0, 0xc4}, 0x4800) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0x2, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0xebec5f9295bc7b2e, 0x2e, 0x61, 0x5f]}}, &(0x7f0000001740)=""/250, 0x2b, 0xfa, 0x1, 0x3, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x4e065a96658397c7, 0x1, 0x8, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000740)=""/4096, 0x41000, 0x23, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001840)={0x0, 0x1, 0x31, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001880)=[{0x5, 0x3, 0x3, 0x1}, {0x1, 0x2}, {0x3, 0x2, 0x5, 0xb}, {0x5, 0x4, 0xd, 0x9}, {0x0, 0x4, 0x7, 0xc}, {0x3, 0x4, 0x10, 0xc}, {0x2, 0x1, 0xe, 0xc}, {0x4, 0x2, 0x7, 0x7}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x101}, 0x94) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000700", @ANYRES16=r4, @ANYBLOB="0100000000000200000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000019}, 0x4800) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0522000000000000140012800900000000040002803c0012800b00010069703667726500002c000280064010004e230000080004000900000008000d000500000006000f000600000008001400ff07000000000000000000"], 0x70}, 0x1, 0xba01}, 0x0) 1.703071048s ago: executing program 3 (id=6082): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='\b', 0x1}], 0x1}}], 0x1, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)=0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x9c, 0x24, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9}, {0x1, 0xf}, {0x5, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x6}}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa00, 0x6}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x9df0}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0xc, 0x7}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x26044069}, 0x20000014) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38a70000ef00", @ANYRES32=0x0, @ANYBLOB="a08806000800000008001b000000000008000d000100000008001f0041580000"], 0x38}}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt(r12, 0x9, 0xa345, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 1.588205465s ago: executing program 4 (id=6083): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r1, 0x201}], 0x1, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000640)={0x6, {0x24, 0x3bfc, 0x8, 0x7fffffffffffffff, 0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44080) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x76}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xb8}}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x8010, r6, 0xf93b5000) sendto$inet6(r9, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20208}}, @ringbuf_query]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x85e1, 0x0, 0x0, 0x41100, 0x7, '\x00', r11, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x94) 1.470664825s ago: executing program 1 (id=6084): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r4, r5, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r5, r5, 0x2f, 0x2028, 0x4, @void, @void, @value=r8}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f308000700030000001400"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00158008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) sendmsg$inet(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43c}], 0x3}, 0x0) recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.344090071s ago: executing program 0 (id=6085): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60000090}, 0x40090) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c00018005"], 0x28}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', r5, 0x7, 0x20, 0x6, 0x4, {{0x22, 0x4, 0x0, 0x29, 0x88, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x1e, 0x1, [{0x5, 0xa, "0f09a5e52aab2792"}, {0x5, 0xe, "420fea0b3fc3f4ce5b13a561"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xc1, [@empty, @multicast1, @loopback]}, @cipso={0x86, 0x3f, 0x1, [{0x4, 0x6, "b7fee2c3"}, {0x6, 0x9, "3b9f67fa2363d7"}, {0x5, 0xf, "2af73f9d7df825f2fc30591d43"}, {0x7, 0xc, "d5b57a1a926be5dac36f"}, {0x7, 0x5, "2b9b84"}, {0x1, 0xa, "bb35ccb816aef722"}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) 1.33546893s ago: executing program 4 (id=6086): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020090000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c445705d8500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ef}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sendmmsg$inet6(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044) shutdown(r3, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xb3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x10}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x101}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r13, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 1.304676095s ago: executing program 2 (id=6087): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000280)=0x314080, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="201c0300", @ANYRES16=r5, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}}, 0x4000054) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000380)="fd", 0x1}, {&(0x7f0000000880)="cfd32ce43508def824047423e33cd9fac1284cc2706d9cf3169ca5961a3628cc1cea6a3a6de0e456cde1518bdaa805fae493a79c5aa2c3ab2187393d07952f81f4124f94fb36d40c0587e7bc62ce46832bb69f2aff47deb2691b75091a76df3ffe49f3535104e22ea44556eb224f72fe23cc56328e179b2d33112341026c8c3bc2bed0213a4fd51ce68dca0ed1ba3acf34971e7308000000622a535dead0a38b79211ed1f85f8257c94ec8a1c2caf7232a4fbd6e7bdbb5afb0022ed3ec0ab70e29a1adf2fabac8aa7186325d1fa40b0003e69b74673d388644b3c88c", 0xdc}, {&(0x7f0000000400)="24f6ff668f85bf79d531e916b22a00", 0xf}, {&(0x7f0000000700)="462917aa7e31d5", 0x7}, {&(0x7f00000003c0)='1', 0x1}, {&(0x7f0000000600)="9de58865e0ae45f3b88730d96074b7a78eef440f434fb267ed4f53177ca1f12762ec3dafbd087f1645eaf715c83c3fe3624eb32bb1b7cd856e96db944418b266e5cc76b42762f4ed79de5828349e820ca9533382d5890e931d06d48f231dfd5f1bc68338aba8bcca002778bd77de54b84c13d7eaecb05266f952fbd0329f8e6110def9d64643a7cbeef6a26e35f70a1ff91cce525e03f9060fb2fc6e9a", 0x9d}], 0x6, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000840)) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 742.75663ms ago: executing program 1 (id=6088): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x4000010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 608.189532ms ago: executing program 0 (id=6089): r0 = socket(0x1d, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000008400000008000022"], 0x10}}], 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200055a2d800", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 607.762188ms ago: executing program 4 (id=6090): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010000", 0x7) 601.313318ms ago: executing program 3 (id=6091): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0500000001a20000", 0x8) socket$nl_rdma(0x10, 0x3, 0x14) 488.080076ms ago: executing program 4 (id=6092): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) 436.162187ms ago: executing program 3 (id=6093): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x20}}], 0x1, 0x4000000) 389.835242ms ago: executing program 0 (id=6094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x100, 0x2000000a, 0x7, 0xd4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000a00000000000000feffffffd40e00001000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x89, &(0x7f00000001c0)=""/137, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010002c217b635e010000000000000000000000000a2c000000180a0104000000000000000002000000090098f9208cfa30000000000900020073797a3000000000140000001000010000002b3cbdc203"], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c095bb0d70fbd626d71bd1b10df98abbcffb7d3bfdd20cf00fbdbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="97800000212000001c0012800b0001006d616373656300000c0002800500030010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000002) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000008e00000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) clock_gettime(0x0, &(0x7f00000005c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x80000000000, 0x4}, &(0x7f0000000280)={0x77359400}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r5, 0x0, 0x1500}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x11c, 0x30, 0xb, 0x1, 0x0, {}, [{0x108, 0x1, [@m_skbmod={0x104, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x8000, 0x7, 0x10001, 0x7}, 0x10}}]}, {0xb3, 0x6, "632f3539f6c8919a151d60018893af64f6b4495463765a27f6f60ad9c7f4fa2aebf6f1bf9cd3470dd761466266bd280e7ec3fb05a6ccd9eec5a282ce3b03000000ae6b94210b64ddc10ac29e4042b0e4ba1b91cd5d14035604d8ca9545471fab4c4ecc137019b3cdc2e82b06783f429fcce2e8bb3168e16c5428a3641b4df9c1700afbd453f5486066c923dba1a6d5c1879590d723ff67cf8511a643210292cda5c99890a9ca0c6bf3f7b9615971ce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x11c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast2, @in=@multicast1, 0x4e23, 0x1, 0x4e23, 0x9, 0x2, 0x80, 0xa0, 0x16, r6, 0xee01}, {0xe, 0xbccb, 0x7fff, 0x0, 0x0, 0xfffffffffffffff8, 0x9, 0x380000}, {0x6, 0x1, 0x80000001, 0x7fffffff}, 0x5, 0x0, 0x2, 0x1, 0x1, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in6=@local, 0x0, 0x2, 0x2, 0x5, 0xffff, 0x80000000, 0xf9b}}, 0xe8) 382.02611ms ago: executing program 1 (id=6095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x10, 0x8, 0x8, 0x1b, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x80, 0x80, 0x8000, 0x80000000}}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000280)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query], &(0x7f00000002c0)='syzkaller\x00', 0x40, 0x9d, &(0x7f0000000300)=""/157, 0x41100, 0x1cd4f5d15d8ea098, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x1], &(0x7f0000000440)=[{0x0, 0x5}, {0x2, 0x1, 0x10, 0x6}, {0x0, 0x3, 0xc, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='fsi_master_aspeed_opb_error\x00', r4, 0x0, 0x8}, 0x18) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000580)=[{{0x2, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/time_for_children\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x10, r5}, 0x18) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000680)=""/102, &(0x7f0000000700)=0x66) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x29}]}, 0x70}, 0x1, 0x0, 0x0, 0x48888}, 0x20000011) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000900)={0x0, 'bridge_slave_1\x00', {0x3}, 0x3}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r6) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r8, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000e00)={&(0x7f0000000ac0)=@phonet={0x23, 0xc5, 0x8b, 0xd}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b40)="59582a9044c98b", 0x7}, {&(0x7f0000000b80)="4255cccc0368687c3e9a89485eb92ee7ce444f6c501edc18c1dd8bcd5c5ffe9f14a84d1c08939cdb9e40e41e98563615e8ccbe1807ea523ed542de6fe6bed381512afe31585f89594a1b7fd2cc6f634d674c65ebed02c663617fcfac5a66437e1c54af4b67f68b04f8cefd6a47aecf01825de7db", 0x74}, {&(0x7f0000000c00)="5a0047d8201d7fa2dc6a040807f7d2ed792a33623091342740e1d8f7e49213874a98062e3592c30c30c0d60fd4f5e007374d4d97ad5af79d04a9cea19891356a3a7039a93c5980f87d236ee93b36f6281ea81d2b4e33292a5d9f78acda0f702a8a2c39bf9185f1e7f304ec8690bfd62732cdb37ba0d93d3957b3af080d67f48e338efd2074d3644f2a745461e3ec0fb0f78b965457426a4d1b7352ba6541b4fbe4af3ff3ae21fd9c48629e031e55595bf837fca458f1f68d93", 0xb9}], 0x3, &(0x7f0000000d00)=[{0xe8, 0x102, 0x7f, "6a699bb034eee0b793d51ae2256947e93235bd7c5a0dc42b838907016f9098b9bc1016c285d062d00474dc95835a92f7288e988878064ea91d32e0bf1c826c09a0f046237d36b3571e8d58fac27d4dd448d24da4a8ee42e0d1ddaaf8c826733a4d6192fb2da3e3a427c72ad72effb8212750ad8e693ea7d32e6cd97af5deef7ebf407cb883387889740f3a1cd59bc4b397a41cdef0e079f606e1f09f20850eb9da96ddcdef8914c03870af460a94ed60a322cc84dc4893fcf4080aaeda9d56a7785110cc8846130270eb765ff9d384cca5"}], 0xe8}, 0x4000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r10, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r11, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}}, 0x4008) bind$inet6(r2, &(0x7f0000000f80)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x85}, 0x1c) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r6) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={0x240, r12, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37b758a2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8a8b, @private2, 0x3}}}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}, 0xbb}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6319}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbe07}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x26}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffc0}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x240}, 0x1, 0x0, 0x0, 0xc0}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r13, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r14, 0x1, 0x400, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) 300.039485ms ago: executing program 4 (id=6096): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0401f0ff100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 226.52337ms ago: executing program 3 (id=6097): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0023000000000000000000000000000000000000ff7a5a0a951760032d3b691330579bb1031ddc58fc140882d12b78d7decdc4f17450fe885a4fd3d45b89e191d23372b1e46b9b80bcd53e59c773313f6abe576e10154589181468e1267ada3f5fa407e44b9fc8876b965d1779d0037623b225b45b70169624192b09deda1fe5b0dd43586975dd0b96fc4993997ea8c40a827222d08e482f1c50d51d7e79bb0a8dabca1139daf87a10bcb5c99f28f3a38990e5d01dc952d15dbd0bf749f384e99fd22b", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES8=r0, @ANYRES32, @ANYRES16], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) syz_emit_ethernet(0x20f, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r5}, 0x10) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) 202.329292ms ago: executing program 1 (id=6098): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xb748, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="78d021bc9f9303bb4b8fc134ece57249e638d03970e5b2f2c5ad9bb4a6f5939dc729182367320ab7e30695d8f6f05f99af98e4263c9be37f0630c1b93a7641d1ebf98f428d0701dd1f0ab1ead8f914e6e9ff5fc0774f22f27cd8fa7910e1f34c8482231be5abb8da92a1de4f69303a5d6ce7312d3208989236054ce6ba72e42cb1b1c40b5a4754103909233d49702f456284c22c68e1354a94fa99f148137bb880ce48df30ecf571344ccafd8e1196c6a6449bbdcb8c4ca394b75c4fda48946f55020e0a592fef35b4f4aeeadb5f0f67db85f2220d22008f8b46", 0xda}, {&(0x7f0000000200)="cf5462f2deff09631d75c4464db684c84898ae441e51708936ac2a601677bf0ff5afdfebe9ca04a0e6a9851f126ae33eb7cce6b8e703ed2137d3a103a6a3c409e70269356d4632fef969b40f579242f0d6cec4ebdc247f8bff0f4b6937a4fe92bf9fe5e5f87cc6aa253261c8185a82340cbf1fb7780b9fd55a5d5d31c637b008da025f9629bd70c1414b15c2ae32c3", 0x8f}, {&(0x7f0000000540)="225acafa825a8393668cff776ed86c341c6086e4169b0316b224a89d3158ebb0dffb05cc1ff6bb31b20eefc273a797b90a970a3da24faabf48a759ee4617998b124714b31ed1aacbc9a594e74db1ac0b8356fb26a8858f619d53dca018b18e6e7c1f4d5b8afd881b75a9195da5cc410e1df3efd8a229db201508c7430699698d061fed7b7389536cdac62e58daeb39f431062367d9d2d0cb408b983698a081221180ea32f5cf3ed8e86fd1926d3762bc9dff3cd592be0e765a2ecbc73630670383f13a3bdfa576778604f2893a5393a10eabb7aead72f891a85e740040da62eec5", 0xe1}, {&(0x7f0000000640)="f4f1713afa73e5507ac189e738efd834ab32d815a9ecf3fa23957a24e99866632e55743311c35d62d9b971bca94c73ed61b4653a776c22d86d5f3706e4b544ac21b17e821ce3e561d8a89abd9cd98b485a26f89951bcbfda9a6cbc7ea209f7cbb4f2729c3b21a1d2ff270be60f946b3099c989845d6b84e4517deb0a776a872959b11e2198a2a0c35a8b95ba1f2de458b5d15298547ecc57a615fc8771a1b61b41835e26b510a1b88b1a14220ed468ccac607ec5a126902ce7ec82009b75a2e032661f7360f7e8e710e134f177138ef58c25be748cdd1dbc6dcc46ca9822f25ee2b4be9d01a1526c570684c9f561f1", 0xef}], 0x4}}], 0x1, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8933}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 0s ago: executing program 4 (id=6099): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14048010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000005000000000000000000000950004e00000000018010000202070250000000000202020db1af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c}, 0x90) syz_genetlink_get_family_id$tipc2(0x0, r1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast2, 0xe, 0xd}}) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): 377] ? fs_reclaim_acquire+0x7d/0x100 [ 1433.370333][T30377] should_fail_ex+0x414/0x560 [ 1433.370370][T30377] should_failslab+0xa8/0x100 [ 1433.370435][T30377] __kmalloc_noprof+0xcb/0x4f0 [ 1433.370482][T30377] ? tomoyo_encode+0x28b/0x550 [ 1433.370560][T30377] tomoyo_encode+0x28b/0x550 [ 1433.370607][T30377] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1433.370632][T30377] ? tomoyo_domain+0xd9/0x130 [ 1433.370662][T30377] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1433.370718][T30377] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1433.370753][T30377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1433.370807][T30377] ? __lock_acquire+0xab9/0xd20 [ 1433.370867][T30377] ? __fget_files+0x2a/0x420 [ 1433.370904][T30377] ? __fget_files+0x2a/0x420 [ 1433.370932][T30377] ? __fget_files+0x3a0/0x420 [ 1433.370962][T30377] ? __fget_files+0x2a/0x420 [ 1433.370998][T30377] security_file_ioctl+0xcb/0x2d0 [ 1433.371084][T30377] __se_sys_ioctl+0x47/0x170 [ 1433.371115][T30377] do_syscall_64+0xfa/0x3b0 [ 1433.371141][T30377] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.371165][T30377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.371188][T30377] ? clear_bhb_loop+0x60/0xb0 [ 1433.371215][T30377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.371237][T30377] RIP: 0033:0x7fc90438eec9 [ 1433.371257][T30377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.371276][T30377] RSP: 002b:00007fc9025ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.371298][T30377] RAX: ffffffffffffffda RBX: 00007fc9045e5fa0 RCX: 00007fc90438eec9 [ 1433.371315][T30377] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000003 [ 1433.371330][T30377] RBP: 00007fc9025ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.371343][T30377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.371356][T30377] R13: 00007fc9045e6038 R14: 00007fc9045e5fa0 R15: 00007ffe45612bd8 [ 1433.371396][T30377] [ 1433.716995][T30377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1433.828896][T30388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1433.852507][T30388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1433.898332][T30390] FAULT_INJECTION: forcing a failure. [ 1433.898332][T30390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.912969][T30390] CPU: 0 UID: 0 PID: 30390 Comm: syz.2.5393 Not tainted syzkaller #0 PREEMPT(full) [ 1433.912998][T30390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1433.913010][T30390] Call Trace: [ 1433.913018][T30390] [ 1433.913028][T30390] dump_stack_lvl+0x189/0x250 [ 1433.913055][T30390] ? __pfx____ratelimit+0x10/0x10 [ 1433.913079][T30390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.913101][T30390] ? __pfx__printk+0x10/0x10 [ 1433.913127][T30390] ? __might_fault+0xb0/0x130 [ 1433.913170][T30390] should_fail_ex+0x414/0x560 [ 1433.913203][T30390] _copy_from_user+0x2d/0xb0 [ 1433.913229][T30390] core_sys_select+0x4b7/0xa20 [ 1433.913267][T30390] ? __pfx_core_sys_select+0x10/0x10 [ 1433.913321][T30390] ? __pfx_set_user_sigmask+0x10/0x10 [ 1433.913353][T30390] __se_sys_pselect6+0x27a/0x300 [ 1433.913385][T30390] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1433.913410][T30390] ? __pfx_ksys_write+0x10/0x10 [ 1433.913431][T30390] ? rcu_is_watching+0x15/0xb0 [ 1433.913456][T30390] ? __x64_sys_pselect6+0x21/0xf0 [ 1433.913485][T30390] do_syscall_64+0xfa/0x3b0 [ 1433.913506][T30390] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.913522][T30390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.913538][T30390] ? clear_bhb_loop+0x60/0xb0 [ 1433.913557][T30390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.913572][T30390] RIP: 0033:0x7f41db38eec9 [ 1433.913586][T30390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.913600][T30390] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1433.913616][T30390] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1433.913628][T30390] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1433.913638][T30390] RBP: 00007f41dc24b090 R08: 0000200000000280 R09: 0000000000000000 [ 1433.913648][T30390] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1433.913658][T30390] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1433.913684][T30390] [ 1434.188827][T30394] FAULT_INJECTION: forcing a failure. [ 1434.188827][T30394] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.208741][T30396] FAULT_INJECTION: forcing a failure. [ 1434.208741][T30396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.217153][T30394] CPU: 0 UID: 0 PID: 30394 Comm: syz.4.5392 Not tainted syzkaller #0 PREEMPT(full) [ 1434.217186][T30394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1434.217202][T30394] Call Trace: [ 1434.217212][T30394] [ 1434.217223][T30394] dump_stack_lvl+0x189/0x250 [ 1434.217258][T30394] ? __pfx____ratelimit+0x10/0x10 [ 1434.217287][T30394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.217316][T30394] ? __pfx__printk+0x10/0x10 [ 1434.217357][T30394] ? __pfx___might_resched+0x10/0x10 [ 1434.217416][T30394] should_fail_ex+0x414/0x560 [ 1434.217458][T30394] should_failslab+0xa8/0x100 [ 1434.217504][T30394] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1434.217536][T30394] ? __alloc_skb+0x112/0x2d0 [ 1434.217674][T30394] __alloc_skb+0x112/0x2d0 [ 1434.217706][T30394] netlink_sendmsg+0x5c6/0xb30 [ 1434.217785][T30394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1434.217818][T30394] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1434.217892][T30394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1434.217983][T30394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1434.218013][T30394] __sock_sendmsg+0x219/0x270 [ 1434.218083][T30394] ____sys_sendmsg+0x52d/0x830 [ 1434.218122][T30394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1434.218165][T30394] ? import_iovec+0x74/0xa0 [ 1434.218199][T30394] ___sys_sendmsg+0x21f/0x2a0 [ 1434.218232][T30394] ? __pfx____sys_sendmsg+0x10/0x10 [ 1434.218313][T30394] ? __fget_files+0x2a/0x420 [ 1434.218346][T30394] ? __fget_files+0x3a0/0x420 [ 1434.218393][T30394] __sys_sendmmsg+0x227/0x430 [ 1434.218431][T30394] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1434.218458][T30394] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1434.218522][T30394] ? ksys_write+0x22a/0x250 [ 1434.218554][T30394] ? __pfx_ksys_write+0x10/0x10 [ 1434.218580][T30394] ? rcu_is_watching+0x15/0xb0 [ 1434.218612][T30394] __x64_sys_sendmmsg+0xa0/0xc0 [ 1434.218645][T30394] do_syscall_64+0xfa/0x3b0 [ 1434.218670][T30394] ? lockdep_hardirqs_on+0x9c/0x150 [ 1434.218695][T30394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.218717][T30394] ? clear_bhb_loop+0x60/0xb0 [ 1434.218746][T30394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.218768][T30394] RIP: 0033:0x7fc08578eec9 [ 1434.218789][T30394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.218810][T30394] RSP: 002b:00007fc0865f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1434.218837][T30394] RAX: ffffffffffffffda RBX: 00007fc0859e5fa0 RCX: 00007fc08578eec9 [ 1434.218854][T30394] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1434.218870][T30394] RBP: 00007fc0865f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.218885][T30394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.218899][T30394] R13: 00007fc0859e6038 R14: 00007fc0859e5fa0 R15: 00007ffdc00096a8 [ 1434.218949][T30394] [ 1434.525185][T30396] CPU: 1 UID: 0 PID: 30396 Comm: syz.2.5396 Not tainted syzkaller #0 PREEMPT(full) [ 1434.525216][T30396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1434.525230][T30396] Call Trace: [ 1434.525239][T30396] [ 1434.525249][T30396] dump_stack_lvl+0x189/0x250 [ 1434.525280][T30396] ? __pfx____ratelimit+0x10/0x10 [ 1434.525308][T30396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.525334][T30396] ? __pfx__printk+0x10/0x10 [ 1434.525364][T30396] ? __might_fault+0xb0/0x130 [ 1434.525401][T30396] should_fail_ex+0x414/0x560 [ 1434.525433][T30396] _copy_from_iter+0x1de/0x1790 [ 1434.525483][T30396] ? __pfx__copy_from_iter+0x10/0x10 [ 1434.525506][T30396] ? rcu_is_watching+0x15/0xb0 [ 1434.525524][T30396] ? trace_kmalloc+0x1f/0xd0 [ 1434.525545][T30396] ? kernfs_fop_write_iter+0x158/0x540 [ 1434.525687][T30396] kernfs_fop_write_iter+0x19b/0x540 [ 1434.525719][T30396] vfs_write+0x5c6/0xb30 [ 1434.525746][T30396] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1434.525772][T30396] ? __pfx_vfs_write+0x10/0x10 [ 1434.525805][T30396] ? __fget_files+0x2a/0x420 [ 1434.525840][T30396] ksys_write+0x145/0x250 [ 1434.525865][T30396] ? __pfx_ksys_write+0x10/0x10 [ 1434.525885][T30396] ? rcu_is_watching+0x15/0xb0 [ 1434.525908][T30396] ? do_syscall_64+0xbe/0x3b0 [ 1434.525933][T30396] do_syscall_64+0xfa/0x3b0 [ 1434.525952][T30396] ? lockdep_hardirqs_on+0x9c/0x150 [ 1434.525971][T30396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.525988][T30396] ? clear_bhb_loop+0x60/0xb0 [ 1434.526011][T30396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.526027][T30396] RIP: 0033:0x7f41db38eec9 [ 1434.526043][T30396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.526062][T30396] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1434.526083][T30396] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1434.526096][T30396] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000005 [ 1434.526107][T30396] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.526117][T30396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.526128][T30396] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1434.526165][T30396] [ 1434.841102][T30417] FAULT_INJECTION: forcing a failure. [ 1434.841102][T30417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.854960][T30417] CPU: 1 UID: 0 PID: 30417 Comm: syz.4.5402 Not tainted syzkaller #0 PREEMPT(full) [ 1434.854991][T30417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1434.855005][T30417] Call Trace: [ 1434.855015][T30417] [ 1434.855025][T30417] dump_stack_lvl+0x189/0x250 [ 1434.855057][T30417] ? __pfx____ratelimit+0x10/0x10 [ 1434.855084][T30417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1434.855110][T30417] ? __pfx__printk+0x10/0x10 [ 1434.855142][T30417] ? __might_fault+0xb0/0x130 [ 1434.855189][T30417] should_fail_ex+0x414/0x560 [ 1434.855229][T30417] _copy_from_iter+0x1de/0x1790 [ 1434.855277][T30417] ? __pfx__copy_from_iter+0x10/0x10 [ 1434.855302][T30417] ? __kmalloc_noprof+0x421/0x4f0 [ 1434.855333][T30417] ? rcu_is_watching+0x15/0xb0 [ 1434.855355][T30417] ? trace_kmalloc+0x1f/0xd0 [ 1434.855382][T30417] ? kernfs_fop_write_iter+0x158/0x540 [ 1434.855420][T30417] kernfs_fop_write_iter+0x19b/0x540 [ 1434.855462][T30417] vfs_write+0x5c6/0xb30 [ 1434.855498][T30417] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1434.855532][T30417] ? __pfx_vfs_write+0x10/0x10 [ 1434.855587][T30417] ? __fget_files+0x2a/0x420 [ 1434.855632][T30417] ksys_write+0x145/0x250 [ 1434.855663][T30417] ? __pfx_ksys_write+0x10/0x10 [ 1434.855687][T30417] ? rcu_is_watching+0x15/0xb0 [ 1434.855715][T30417] ? do_syscall_64+0xbe/0x3b0 [ 1434.855746][T30417] do_syscall_64+0xfa/0x3b0 [ 1434.855770][T30417] ? lockdep_hardirqs_on+0x9c/0x150 [ 1434.855794][T30417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.855817][T30417] ? clear_bhb_loop+0x60/0xb0 [ 1434.855844][T30417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.855874][T30417] RIP: 0033:0x7fc08578eec9 [ 1434.855894][T30417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.855913][T30417] RSP: 002b:00007fc0865f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1434.855936][T30417] RAX: ffffffffffffffda RBX: 00007fc0859e5fa0 RCX: 00007fc08578eec9 [ 1434.855952][T30417] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000004 [ 1434.855966][T30417] RBP: 00007fc0865f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.855980][T30417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.855993][T30417] R13: 00007fc0859e6038 R14: 00007fc0859e5fa0 R15: 00007ffdc00096a8 [ 1434.856032][T30417] [ 1435.244916][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5403'. [ 1435.297901][T30427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1435.353756][T30424] netlink: 'syz.2.5401': attribute type 7 has an invalid length. [ 1435.361589][T30424] netlink: 'syz.2.5401': attribute type 8 has an invalid length. [ 1435.369884][T30424] netlink: 'syz.2.5401': attribute type 13 has an invalid length. [ 1435.469995][T30434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1435.740528][T30446] FAULT_INJECTION: forcing a failure. [ 1435.740528][T30446] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.754233][T30446] CPU: 0 UID: 0 PID: 30446 Comm: syz.2.5408 Not tainted syzkaller #0 PREEMPT(full) [ 1435.754263][T30446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1435.754277][T30446] Call Trace: [ 1435.754286][T30446] [ 1435.754297][T30446] dump_stack_lvl+0x189/0x250 [ 1435.754328][T30446] ? __pfx____ratelimit+0x10/0x10 [ 1435.754355][T30446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1435.754380][T30446] ? __pfx__printk+0x10/0x10 [ 1435.754418][T30446] ? __pfx___might_resched+0x10/0x10 [ 1435.754459][T30446] should_fail_ex+0x414/0x560 [ 1435.754499][T30446] should_failslab+0xa8/0x100 [ 1435.754533][T30446] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1435.754564][T30446] ? __alloc_skb+0x112/0x2d0 [ 1435.754595][T30446] __alloc_skb+0x112/0x2d0 [ 1435.754627][T30446] netlink_sendmsg+0x5c6/0xb30 [ 1435.754668][T30446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.754701][T30446] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1435.754739][T30446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1435.754762][T30446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1435.754791][T30446] __sock_sendmsg+0x219/0x270 [ 1435.754831][T30446] ____sys_sendmsg+0x505/0x830 [ 1435.754870][T30446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1435.754913][T30446] ? import_iovec+0x74/0xa0 [ 1435.754946][T30446] ___sys_sendmsg+0x21f/0x2a0 [ 1435.754980][T30446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1435.755069][T30446] ? __fget_files+0x2a/0x420 [ 1435.755102][T30446] ? __fget_files+0x3a0/0x420 [ 1435.755149][T30446] __x64_sys_sendmsg+0x19b/0x260 [ 1435.755184][T30446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1435.755228][T30446] ? __pfx_ksys_write+0x10/0x10 [ 1435.755252][T30446] ? rcu_is_watching+0x15/0xb0 [ 1435.755279][T30446] ? do_syscall_64+0xbe/0x3b0 [ 1435.755310][T30446] do_syscall_64+0xfa/0x3b0 [ 1435.755335][T30446] ? lockdep_hardirqs_on+0x9c/0x150 [ 1435.755360][T30446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.755382][T30446] ? clear_bhb_loop+0x60/0xb0 [ 1435.755411][T30446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.755433][T30446] RIP: 0033:0x7f41db38eec9 [ 1435.755454][T30446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1435.755486][T30446] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1435.755511][T30446] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1435.755527][T30446] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1435.755542][T30446] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.755556][T30446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1435.755569][T30446] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1435.755609][T30446] [ 1436.882180][T30475] tap0: tun_chr_ioctl cmd 1074025677 [ 1436.904230][T30475] tap0: linktype set to 825 [ 1436.925298][T30477] FAULT_INJECTION: forcing a failure. [ 1436.925298][T30477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.946594][T30477] CPU: 1 UID: 0 PID: 30477 Comm: syz.4.5415 Not tainted syzkaller #0 PREEMPT(full) [ 1436.946625][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1436.946637][T30477] Call Trace: [ 1436.946647][T30477] [ 1436.946657][T30477] dump_stack_lvl+0x189/0x250 [ 1436.946687][T30477] ? __pfx____ratelimit+0x10/0x10 [ 1436.946713][T30477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1436.946739][T30477] ? __pfx__printk+0x10/0x10 [ 1436.946786][T30477] should_fail_ex+0x414/0x560 [ 1436.946825][T30477] _copy_from_user+0x2d/0xb0 [ 1436.946854][T30477] bpf_test_init+0xd8/0x150 [ 1436.946987][T30477] bpf_prog_test_run_flow_dissector+0x1e1/0x5c0 [ 1436.947034][T30477] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1436.947066][T30477] ? __fget_files+0x2a/0x420 [ 1436.947103][T30477] ? __fget_files+0x2a/0x420 [ 1436.947144][T30477] ? __fget_files+0x3a0/0x420 [ 1436.947173][T30477] ? __fget_files+0x2a/0x420 [ 1436.947209][T30477] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1436.947237][T30477] bpf_prog_test_run+0x2c4/0x340 [ 1436.947337][T30477] __sys_bpf+0x581/0x870 [ 1436.947367][T30477] ? __pfx___sys_bpf+0x10/0x10 [ 1436.947410][T30477] ? ksys_write+0x22a/0x250 [ 1436.947440][T30477] ? __pfx_ksys_write+0x10/0x10 [ 1436.947463][T30477] ? rcu_is_watching+0x15/0xb0 [ 1436.947493][T30477] __x64_sys_bpf+0x7c/0x90 [ 1436.947518][T30477] do_syscall_64+0xfa/0x3b0 [ 1436.947541][T30477] ? lockdep_hardirqs_on+0x9c/0x150 [ 1436.947564][T30477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.947584][T30477] ? clear_bhb_loop+0x60/0xb0 [ 1436.947611][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.947630][T30477] RIP: 0033:0x7fc08578eec9 [ 1436.947650][T30477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1436.947668][T30477] RSP: 002b:00007fc0865f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1436.947691][T30477] RAX: ffffffffffffffda RBX: 00007fc0859e5fa0 RCX: 00007fc08578eec9 [ 1436.947706][T30477] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1436.947720][T30477] RBP: 00007fc0865f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.947733][T30477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.947746][T30477] R13: 00007fc0859e6038 R14: 00007fc0859e5fa0 R15: 00007ffdc00096a8 [ 1436.947783][T30477] [ 1437.328717][T30484] FAULT_INJECTION: forcing a failure. [ 1437.328717][T30484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1437.362365][T30484] CPU: 1 UID: 0 PID: 30484 Comm: syz.1.5418 Not tainted syzkaller #0 PREEMPT(full) [ 1437.362396][T30484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1437.362409][T30484] Call Trace: [ 1437.362418][T30484] [ 1437.362428][T30484] dump_stack_lvl+0x189/0x250 [ 1437.362458][T30484] ? __pfx____ratelimit+0x10/0x10 [ 1437.362484][T30484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.362507][T30484] ? __pfx__printk+0x10/0x10 [ 1437.362537][T30484] ? fs_reclaim_acquire+0x7d/0x100 [ 1437.362601][T30484] should_fail_ex+0x414/0x560 [ 1437.362650][T30484] prepare_alloc_pages+0x213/0x610 [ 1437.362713][T30484] __alloc_frozen_pages_noprof+0x123/0x370 [ 1437.362755][T30484] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1437.362795][T30484] ? unwind_next_frame+0xa5/0x2390 [ 1437.362817][T30484] ? unwind_next_frame+0x19ae/0x2390 [ 1437.362845][T30484] ? policy_nodemask+0x27c/0x720 [ 1437.362872][T30484] ? __lock_acquire+0xab9/0xd20 [ 1437.362910][T30484] alloc_pages_mpol+0x232/0x4a0 [ 1437.362949][T30484] vma_alloc_folio_noprof+0xe4/0x200 [ 1437.362984][T30484] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1437.363033][T30484] folio_prealloc+0x30/0x180 [ 1437.363067][T30484] __handle_mm_fault+0x2ab9/0x5440 [ 1437.363119][T30484] ? __pfx___handle_mm_fault+0x10/0x10 [ 1437.363172][T30484] ? follow_page_pte+0x7ef/0x13e0 [ 1437.363214][T30484] handle_mm_fault+0x40a/0x8e0 [ 1437.363258][T30484] __get_user_pages+0x1699/0x2ce0 [ 1437.363281][T30484] ? __lock_acquire+0xab9/0xd20 [ 1437.363362][T30484] __gup_longterm_locked+0xde9/0x1660 [ 1437.363408][T30484] ? sanity_check_pinned_pages+0x1241/0x1300 [ 1437.363437][T30484] ? gup_fast_fallback+0x195f/0x2010 [ 1437.363466][T30484] gup_fast_fallback+0x1e6a/0x2010 [ 1437.363540][T30484] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1437.363587][T30484] ? pin_user_pages_fast+0x4d/0xb0 [ 1437.363624][T30484] iov_iter_extract_pages+0x35a/0x5e0 [ 1437.363656][T30484] ? ___sys_recvmsg+0x1b5/0x510 [ 1437.363694][T30484] extract_iter_to_sg+0xe46/0x24e0 [ 1437.363739][T30484] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1437.363789][T30484] ? __asan_memset+0x22/0x50 [ 1437.363819][T30484] af_alg_get_rsgl+0x436/0x810 [ 1437.363969][T30484] aead_recvmsg+0x4d5/0x13b0 [ 1437.364033][T30484] ? aa_sk_perm+0x81e/0x950 [ 1437.364080][T30484] ? __pfx_aead_recvmsg+0x10/0x10 [ 1437.364116][T30484] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1437.364138][T30484] ? security_socket_recvmsg+0x7e/0x2e0 [ 1437.364164][T30484] ? __pfx_aead_recvmsg+0x10/0x10 [ 1437.364196][T30484] sock_recvmsg+0x229/0x270 [ 1437.364226][T30484] ____sys_recvmsg+0x1c9/0x460 [ 1437.364269][T30484] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1437.364327][T30484] ? import_iovec+0x74/0xa0 [ 1437.364360][T30484] ___sys_recvmsg+0x1b5/0x510 [ 1437.364416][T30484] ? __pfx____sys_recvmsg+0x10/0x10 [ 1437.364485][T30484] ? __fget_files+0x3a0/0x420 [ 1437.364532][T30484] __x64_sys_recvmsg+0x198/0x260 [ 1437.364568][T30484] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1437.364620][T30484] ? __pfx_ksys_write+0x10/0x10 [ 1437.364646][T30484] ? rcu_is_watching+0x15/0xb0 [ 1437.364674][T30484] ? do_syscall_64+0xbe/0x3b0 [ 1437.364705][T30484] do_syscall_64+0xfa/0x3b0 [ 1437.364728][T30484] ? lockdep_hardirqs_on+0x9c/0x150 [ 1437.364751][T30484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.364773][T30484] ? clear_bhb_loop+0x60/0xb0 [ 1437.364801][T30484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.364821][T30484] RIP: 0033:0x7f6ae6d8eec9 [ 1437.364842][T30484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.364860][T30484] RSP: 002b:00007f6ae7bcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1437.364883][T30484] RAX: ffffffffffffffda RBX: 00007f6ae6fe5fa0 RCX: 00007f6ae6d8eec9 [ 1437.364899][T30484] RDX: 0000000040010021 RSI: 0000200000001440 RDI: 0000000000000004 [ 1437.364913][T30484] RBP: 00007f6ae7bcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.364927][T30484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.364941][T30484] R13: 00007f6ae6fe6038 R14: 00007f6ae6fe5fa0 R15: 00007ffe2260d268 [ 1437.364983][T30484] [ 1437.830636][T30491] atomic_op ffff88807a886998 conn xmit_atomic 0000000000000000 [ 1437.903562][T30496] bond29: option arp_validate: invalid value (18446744073491447809) [ 1437.914304][T30499] __nla_validate_parse: 3 callbacks suppressed [ 1437.914322][T30499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5421'. [ 1437.916867][T30488] netlink: 'syz.4.5417': attribute type 13 has an invalid length. [ 1437.928939][T30496] bond29 (unregistering): Released all slaves [ 1438.017909][T30500] tipc: Enabled bearer , priority 0 [ 1438.027554][T30500] syzkaller0: entered promiscuous mode [ 1438.033134][T30500] syzkaller0: entered allmulticast mode [ 1438.111436][T30503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1438.134383][T30500] tipc: Resetting bearer [ 1438.208089][T30498] tipc: Resetting bearer [ 1438.247549][T30498] tipc: Disabling bearer [ 1439.287971][T30546] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1439.321226][T30545] netlink: 'syz.1.5433': attribute type 13 has an invalid length. [ 1439.372480][T30539] bond29: option arp_validate: invalid value (18446744073491447809) [ 1439.401382][T30539] bond29 (unregistering): Released all slaves [ 1439.912178][T30579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1440.170709][T30589] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5442'. [ 1440.193069][T30572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5442'. [ 1440.304397][T30573] lo speed is unknown, defaulting to 1000 [ 1440.742926][T30600] FAULT_INJECTION: forcing a failure. [ 1440.742926][T30600] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.757223][T30600] CPU: 1 UID: 0 PID: 30600 Comm: syz.0.5450 Not tainted syzkaller #0 PREEMPT(full) [ 1440.757254][T30600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1440.757267][T30600] Call Trace: [ 1440.757278][T30600] [ 1440.757288][T30600] dump_stack_lvl+0x189/0x250 [ 1440.757320][T30600] ? __pfx____ratelimit+0x10/0x10 [ 1440.757346][T30600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.757371][T30600] ? __pfx__printk+0x10/0x10 [ 1440.757410][T30600] ? __pfx___might_resched+0x10/0x10 [ 1440.757450][T30600] should_fail_ex+0x414/0x560 [ 1440.757488][T30600] ? alloc_netdev_mqs+0xa3/0x11b0 [ 1440.757616][T30600] should_failslab+0xa8/0x100 [ 1440.757650][T30600] __kvmalloc_node_noprof+0x161/0x5f0 [ 1440.757682][T30600] ? alloc_netdev_mqs+0xa3/0x11b0 [ 1440.757711][T30600] ? __pfx_snprintf+0x10/0x10 [ 1440.757750][T30600] alloc_netdev_mqs+0xa3/0x11b0 [ 1440.757781][T30600] ? __pfx_vlan_setup+0x10/0x10 [ 1440.757895][T30600] register_vlan_device+0x24f/0x4c0 [ 1440.757931][T30600] ? __pfx_register_vlan_device+0x10/0x10 [ 1440.757965][T30600] ? security_capable+0x7e/0x2e0 [ 1440.758034][T30600] vlan_ioctl_handler+0x281/0x650 [ 1440.758066][T30600] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1440.758095][T30600] ? __lock_acquire+0xab9/0xd20 [ 1440.758146][T30600] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1440.758178][T30600] sock_ioctl+0x610/0x790 [ 1440.758215][T30600] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.758249][T30600] ? __fget_files+0x2a/0x420 [ 1440.758281][T30600] ? __fget_files+0x3a0/0x420 [ 1440.758311][T30600] ? __fget_files+0x2a/0x420 [ 1440.758348][T30600] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1440.758404][T30600] ? __pfx_sock_ioctl+0x10/0x10 [ 1440.758437][T30600] __se_sys_ioctl+0xf9/0x170 [ 1440.758467][T30600] do_syscall_64+0xfa/0x3b0 [ 1440.758493][T30600] ? lockdep_hardirqs_on+0x9c/0x150 [ 1440.758523][T30600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.758545][T30600] ? clear_bhb_loop+0x60/0xb0 [ 1440.758574][T30600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.758596][T30600] RIP: 0033:0x7f3cfcf8eec9 [ 1440.758616][T30600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.758636][T30600] RSP: 002b:00007f3cfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.758659][T30600] RAX: ffffffffffffffda RBX: 00007f3cfd1e5fa0 RCX: 00007f3cfcf8eec9 [ 1440.758675][T30600] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 0000000000000003 [ 1440.758690][T30600] RBP: 00007f3cfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.758704][T30600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.758718][T30600] R13: 00007f3cfd1e6038 R14: 00007f3cfd1e5fa0 R15: 00007ffef47e54c8 [ 1440.758758][T30600] [ 1441.025341][T30573] lo speed is unknown, defaulting to 1000 [ 1441.032202][T30580] lo speed is unknown, defaulting to 1000 [ 1441.154877][T30602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5452'. [ 1441.185443][T30605] FAULT_INJECTION: forcing a failure. [ 1441.185443][T30605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.203999][T30605] CPU: 1 UID: 0 PID: 30605 Comm: syz.0.5453 Not tainted syzkaller #0 PREEMPT(full) [ 1441.204031][T30605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1441.204047][T30605] Call Trace: [ 1441.204057][T30605] [ 1441.204067][T30605] dump_stack_lvl+0x189/0x250 [ 1441.204100][T30605] ? __pfx____ratelimit+0x10/0x10 [ 1441.204127][T30605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.204153][T30605] ? __pfx__printk+0x10/0x10 [ 1441.204185][T30605] ? __might_fault+0xb0/0x130 [ 1441.204242][T30605] should_fail_ex+0x414/0x560 [ 1441.204282][T30605] _copy_from_user+0x2d/0xb0 [ 1441.204312][T30605] __tun_chr_ioctl+0x1c4/0x1df0 [ 1441.204475][T30605] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1441.204509][T30605] ? __fget_files+0x2a/0x420 [ 1441.204541][T30605] ? __fget_files+0x3a0/0x420 [ 1441.204572][T30605] ? __fget_files+0x2a/0x420 [ 1441.204610][T30605] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1441.204637][T30605] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1441.204663][T30605] __se_sys_ioctl+0xf9/0x170 [ 1441.204698][T30605] do_syscall_64+0xfa/0x3b0 [ 1441.204725][T30605] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.204749][T30605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.204773][T30605] ? clear_bhb_loop+0x60/0xb0 [ 1441.204802][T30605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.204825][T30605] RIP: 0033:0x7f3cfcf8eec9 [ 1441.204846][T30605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.204866][T30605] RSP: 002b:00007f3cfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.204890][T30605] RAX: ffffffffffffffda RBX: 00007f3cfd1e5fa0 RCX: 00007f3cfcf8eec9 [ 1441.204907][T30605] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000003 [ 1441.204922][T30605] RBP: 00007f3cfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.204937][T30605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.204951][T30605] R13: 00007f3cfd1e6038 R14: 00007f3cfd1e5fa0 R15: 00007ffef47e54c8 [ 1441.204992][T30605] [ 1441.255899][T30607] netlink: 'syz.1.5454': attribute type 16 has an invalid length. [ 1441.440867][T30607] netlink: 'syz.1.5454': attribute type 17 has an invalid length. [ 1441.464616][T30580] lo speed is unknown, defaulting to 1000 [ 1441.507641][T30607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.517940][T30607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.530879][T30607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1441.591076][T30587] siw: device registration error -23 [ 1441.735578][T30617] FAULT_INJECTION: forcing a failure. [ 1441.735578][T30617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.749993][T30617] CPU: 0 UID: 0 PID: 30617 Comm: syz.2.5458 Not tainted syzkaller #0 PREEMPT(full) [ 1441.750021][T30617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1441.750033][T30617] Call Trace: [ 1441.750041][T30617] [ 1441.750049][T30617] dump_stack_lvl+0x189/0x250 [ 1441.750079][T30617] ? __pfx____ratelimit+0x10/0x10 [ 1441.750104][T30617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.750130][T30617] ? __pfx__printk+0x10/0x10 [ 1441.750160][T30617] ? __might_fault+0xb0/0x130 [ 1441.750205][T30617] should_fail_ex+0x414/0x560 [ 1441.750244][T30617] _copy_from_iter+0x1de/0x1790 [ 1441.750279][T30617] ? rcu_is_watching+0x15/0xb0 [ 1441.750302][T30617] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1441.750333][T30617] ? __pfx__copy_from_iter+0x10/0x10 [ 1441.750360][T30617] ? __build_skb_around+0x257/0x3e0 [ 1441.750392][T30617] ? netlink_sendmsg+0x642/0xb30 [ 1441.750429][T30617] ? skb_put+0x11b/0x210 [ 1441.750461][T30617] netlink_sendmsg+0x6b2/0xb30 [ 1441.750500][T30617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.750533][T30617] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1441.750569][T30617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1441.750591][T30617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.750618][T30617] __sock_sendmsg+0x219/0x270 [ 1441.750659][T30617] ____sys_sendmsg+0x505/0x830 [ 1441.750697][T30617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.750739][T30617] ? import_iovec+0x74/0xa0 [ 1441.750771][T30617] ___sys_sendmsg+0x21f/0x2a0 [ 1441.750804][T30617] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.750884][T30617] ? __fget_files+0x2a/0x420 [ 1441.750915][T30617] ? __fget_files+0x3a0/0x420 [ 1441.750960][T30617] __x64_sys_sendmsg+0x19b/0x260 [ 1441.750994][T30617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1441.751036][T30617] ? __pfx_ksys_write+0x10/0x10 [ 1441.751062][T30617] ? rcu_is_watching+0x15/0xb0 [ 1441.751091][T30617] ? do_syscall_64+0xbe/0x3b0 [ 1441.751123][T30617] do_syscall_64+0xfa/0x3b0 [ 1441.751147][T30617] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.751172][T30617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.751195][T30617] ? clear_bhb_loop+0x60/0xb0 [ 1441.751224][T30617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.751246][T30617] RIP: 0033:0x7f41db38eec9 [ 1441.751267][T30617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.751286][T30617] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.751310][T30617] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1441.751327][T30617] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1441.751342][T30617] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.751357][T30617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.751371][T30617] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1441.751419][T30617] [ 1442.179485][T30621] FAULT_INJECTION: forcing a failure. [ 1442.179485][T30621] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.215477][T30621] CPU: 0 UID: 0 PID: 30621 Comm: syz.2.5460 Not tainted syzkaller #0 PREEMPT(full) [ 1442.215510][T30621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1442.215525][T30621] Call Trace: [ 1442.215535][T30621] [ 1442.215545][T30621] dump_stack_lvl+0x189/0x250 [ 1442.215577][T30621] ? __pfx____ratelimit+0x10/0x10 [ 1442.215603][T30621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.215630][T30621] ? __pfx__printk+0x10/0x10 [ 1442.215668][T30621] ? __pfx___might_resched+0x10/0x10 [ 1442.215699][T30621] ? fs_reclaim_acquire+0x7d/0x100 [ 1442.215739][T30621] should_fail_ex+0x414/0x560 [ 1442.215778][T30621] should_failslab+0xa8/0x100 [ 1442.215811][T30621] __kmalloc_noprof+0xcb/0x4f0 [ 1442.215846][T30621] ? security_sk_alloc+0x52/0x390 [ 1442.215877][T30621] security_sk_alloc+0x52/0x390 [ 1442.215905][T30621] sk_prot_alloc+0x101/0x220 [ 1442.215930][T30621] ? sk_alloc+0x24/0x370 [ 1442.215961][T30621] sk_alloc+0x3a/0x370 [ 1442.215995][T30621] pfkey_create+0xdc/0x570 [ 1442.216129][T30621] __sock_create+0x4b3/0x9f0 [ 1442.216166][T30621] __sys_socket+0xd7/0x1b0 [ 1442.216195][T30621] __x64_sys_socket+0x7a/0x90 [ 1442.216221][T30621] do_syscall_64+0xfa/0x3b0 [ 1442.216244][T30621] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.216269][T30621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.216292][T30621] ? clear_bhb_loop+0x60/0xb0 [ 1442.216321][T30621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.216343][T30621] RIP: 0033:0x7f41db38eec9 [ 1442.216364][T30621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1442.216391][T30621] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1442.216415][T30621] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1442.216433][T30621] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 1442.216447][T30621] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.216462][T30621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.216474][T30621] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1442.216514][T30621] [ 1442.619841][T30627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1443.591632][T30662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.696221][T30665] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5470'. [ 1443.712032][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5470'. [ 1443.856899][T30669] FAULT_INJECTION: forcing a failure. [ 1443.856899][T30669] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.870291][T30669] CPU: 0 UID: 0 PID: 30669 Comm: syz.2.5475 Not tainted syzkaller #0 PREEMPT(full) [ 1443.870310][T30669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1443.870319][T30669] Call Trace: [ 1443.870326][T30669] [ 1443.870333][T30669] dump_stack_lvl+0x189/0x250 [ 1443.870353][T30669] ? __pfx____ratelimit+0x10/0x10 [ 1443.870369][T30669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1443.870384][T30669] ? __pfx__printk+0x10/0x10 [ 1443.870407][T30669] ? __pfx___might_resched+0x10/0x10 [ 1443.870428][T30669] ? fs_reclaim_acquire+0x7d/0x100 [ 1443.870453][T30669] should_fail_ex+0x414/0x560 [ 1443.870477][T30669] should_failslab+0xa8/0x100 [ 1443.870499][T30669] __kmalloc_noprof+0xcb/0x4f0 [ 1443.870515][T30669] ? kfree+0x4d/0x440 [ 1443.870528][T30669] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1443.870547][T30669] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1443.870572][T30669] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1443.870593][T30669] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1443.870612][T30669] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1443.870657][T30669] ? lockref_get+0x15/0x60 [ 1443.870748][T30669] ? tomoyo_file_open+0x165/0x220 [ 1443.870767][T30669] security_file_open+0xb1/0x270 [ 1443.870787][T30669] do_dentry_open+0x384/0x13f0 [ 1443.870811][T30669] ? vfs_open+0x31/0x340 [ 1443.870827][T30669] vfs_open+0x3b/0x340 [ 1443.870838][T30669] ? path_openat+0x2ecd/0x3830 [ 1443.870882][T30669] path_openat+0x2ee5/0x3830 [ 1443.870896][T30669] ? arch_stack_walk+0xfc/0x150 [ 1443.870933][T30669] ? stack_depot_save_flags+0x40/0x860 [ 1443.870990][T30669] ? __pfx_path_openat+0x10/0x10 [ 1443.871004][T30669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.871036][T30669] do_filp_open+0x1fa/0x410 [ 1443.871055][T30669] ? __lock_acquire+0xab9/0xd20 [ 1443.871084][T30669] ? __pfx_do_filp_open+0x10/0x10 [ 1443.871133][T30669] ? _raw_spin_unlock+0x28/0x50 [ 1443.871177][T30669] ? alloc_fd+0x64c/0x6c0 [ 1443.871222][T30669] do_sys_openat2+0x121/0x1c0 [ 1443.871240][T30669] ? __pfx_do_sys_openat2+0x10/0x10 [ 1443.871255][T30669] ? ksys_write+0x22a/0x250 [ 1443.871282][T30669] ? __pfx_ksys_write+0x10/0x10 [ 1443.871304][T30669] ? rcu_is_watching+0x15/0xb0 [ 1443.871329][T30669] __x64_sys_openat+0x138/0x170 [ 1443.871356][T30669] do_syscall_64+0xfa/0x3b0 [ 1443.871374][T30669] ? lockdep_hardirqs_on+0x9c/0x150 [ 1443.871389][T30669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.871403][T30669] ? clear_bhb_loop+0x60/0xb0 [ 1443.871420][T30669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.871433][T30669] RIP: 0033:0x7f41db38eec9 [ 1443.871446][T30669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1443.871458][T30669] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1443.871473][T30669] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1443.871484][T30669] RDX: 000000000000035c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1443.871493][T30669] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.871502][T30669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.871510][T30669] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1443.871534][T30669] [ 1443.871558][T30669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1444.355617][T30678] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1444.865477][T30687] lo speed is unknown, defaulting to 1000 [ 1445.018445][T30703] bond45: option arp_validate: invalid value (18446744073491447809) [ 1445.052403][T30707] netlink: 'syz.3.5488': attribute type 13 has an invalid length. [ 1445.091901][T30703] bond45 (unregistering): Released all slaves [ 1445.246597][T30687] lo speed is unknown, defaulting to 1000 [ 1445.267083][T30715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5491'. [ 1445.891132][T30728] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5492'. [ 1445.914650][T30721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5492'. [ 1446.430217][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5494'. [ 1447.184333][T30762] bond26: option arp_validate: invalid value (18446744073491447809) [ 1447.195158][T30762] bond26 (unregistering): Released all slaves [ 1447.211484][T30774] netlink: 'syz.0.5506': attribute type 13 has an invalid length. [ 1447.471686][T30783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5510'. [ 1447.598254][T30792] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1447.637519][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1448.168270][T30812] siw: device registration error -23 [ 1448.249626][T30816] FAULT_INJECTION: forcing a failure. [ 1448.249626][T30816] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.264026][T30816] CPU: 0 UID: 0 PID: 30816 Comm: syz.2.5521 Not tainted syzkaller #0 PREEMPT(full) [ 1448.264052][T30816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1448.264064][T30816] Call Trace: [ 1448.264071][T30816] [ 1448.264079][T30816] dump_stack_lvl+0x189/0x250 [ 1448.264109][T30816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1448.264129][T30816] ? __pfx__printk+0x10/0x10 [ 1448.264160][T30816] ? should_fail_ex+0x3c1/0x560 [ 1448.264192][T30816] should_fail_ex+0x414/0x560 [ 1448.264222][T30816] should_failslab+0xa8/0x100 [ 1448.264258][T30816] __kmalloc_cache_noprof+0x70/0x3d0 [ 1448.264284][T30816] ? ip_set_create+0x348/0x1940 [ 1448.264442][T30816] ip_set_create+0x348/0x1940 [ 1448.264490][T30816] ? __mutex_lock+0x335/0x1350 [ 1448.264525][T30816] ? __pfx_ip_set_create+0x10/0x10 [ 1448.264599][T30816] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1448.264621][T30816] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1448.264664][T30816] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1448.264681][T30816] ? __schedule+0x17ae/0x4cc0 [ 1448.264732][T30816] ? __pfx___schedule+0x10/0x10 [ 1448.264779][T30816] netlink_rcv_skb+0x208/0x470 [ 1448.264808][T30816] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1448.264834][T30816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1448.264877][T30816] ? bpf_lsm_capable+0x9/0x20 [ 1448.264936][T30816] ? security_capable+0x7e/0x2e0 [ 1448.264981][T30816] nfnetlink_rcv+0x282/0x2590 [ 1448.265008][T30816] ? __dev_queue_xmit+0x27b/0x3b50 [ 1448.265082][T30816] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1448.265134][T30816] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1448.265159][T30816] ? lockdep_hardirqs_on+0x9c/0x150 [ 1448.265185][T30816] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1448.265209][T30816] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1448.265234][T30816] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1448.265267][T30816] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 1448.265322][T30816] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1448.265366][T30816] ? rcu_is_watching+0x15/0xb0 [ 1448.265391][T30816] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 1448.265425][T30816] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1448.265454][T30816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1448.265491][T30816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1448.265545][T30816] netlink_unicast+0x82c/0x9e0 [ 1448.265580][T30816] ? __pfx_netlink_unicast+0x10/0x10 [ 1448.265606][T30816] ? netlink_sendmsg+0x642/0xb30 [ 1448.265629][T30816] ? skb_put+0x11b/0x210 [ 1448.265661][T30816] netlink_sendmsg+0x805/0xb30 [ 1448.265700][T30816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.265731][T30816] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1448.265768][T30816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1448.265790][T30816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1448.265818][T30816] __sock_sendmsg+0x219/0x270 [ 1448.265858][T30816] ____sys_sendmsg+0x505/0x830 [ 1448.265895][T30816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1448.265937][T30816] ? import_iovec+0x74/0xa0 [ 1448.265970][T30816] ___sys_sendmsg+0x21f/0x2a0 [ 1448.266013][T30816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1448.266088][T30816] ? __fget_files+0x2a/0x420 [ 1448.266117][T30816] ? __fget_files+0x3a0/0x420 [ 1448.266160][T30816] __x64_sys_sendmsg+0x19b/0x260 [ 1448.266191][T30816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1448.266231][T30816] ? __pfx_ksys_write+0x10/0x10 [ 1448.266255][T30816] ? rcu_is_watching+0x15/0xb0 [ 1448.266280][T30816] ? do_syscall_64+0xbe/0x3b0 [ 1448.266320][T30816] do_syscall_64+0xfa/0x3b0 [ 1448.266341][T30816] ? lockdep_hardirqs_on+0x9c/0x150 [ 1448.266362][T30816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.266381][T30816] ? clear_bhb_loop+0x60/0xb0 [ 1448.266406][T30816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.266424][T30816] RIP: 0033:0x7f41db38eec9 [ 1448.266443][T30816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1448.266459][T30816] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.266480][T30816] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1448.266495][T30816] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1448.266515][T30816] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.266528][T30816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.266539][T30816] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1448.266574][T30816] [ 1449.109952][T30840] siw: device registration error -23 [ 1449.309945][T30845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5531'. [ 1449.348946][T30849] FAULT_INJECTION: forcing a failure. [ 1449.348946][T30849] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.382968][T30849] CPU: 1 UID: 0 PID: 30849 Comm: syz.0.5532 Not tainted syzkaller #0 PREEMPT(full) [ 1449.382996][T30849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1449.383009][T30849] Call Trace: [ 1449.383016][T30849] [ 1449.383025][T30849] dump_stack_lvl+0x189/0x250 [ 1449.383052][T30849] ? __pfx____ratelimit+0x10/0x10 [ 1449.383073][T30849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1449.383093][T30849] ? __pfx__printk+0x10/0x10 [ 1449.383124][T30849] ? __pfx___might_resched+0x10/0x10 [ 1449.383155][T30849] ? fs_reclaim_acquire+0x7d/0x100 [ 1449.383190][T30849] should_fail_ex+0x414/0x560 [ 1449.383223][T30849] should_failslab+0xa8/0x100 [ 1449.383252][T30849] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1449.383276][T30849] ? alloc_empty_file+0x55/0x1d0 [ 1449.383378][T30849] alloc_empty_file+0x55/0x1d0 [ 1449.383398][T30849] alloc_file_pseudo+0x13d/0x210 [ 1449.383421][T30849] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1449.383439][T30849] ? do_raw_spin_unlock+0x122/0x240 [ 1449.383465][T30849] ? _raw_spin_unlock+0x28/0x50 [ 1449.383494][T30849] sock_alloc_file+0xb8/0x2e0 [ 1449.383521][T30849] ? __sys_socket+0x12c/0x1b0 [ 1449.383544][T30849] __sys_socket+0x13d/0x1b0 [ 1449.383569][T30849] __x64_sys_socket+0x7a/0x90 [ 1449.383591][T30849] do_syscall_64+0xfa/0x3b0 [ 1449.383612][T30849] ? lockdep_hardirqs_on+0x9c/0x150 [ 1449.383639][T30849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.383659][T30849] ? clear_bhb_loop+0x60/0xb0 [ 1449.383681][T30849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.383699][T30849] RIP: 0033:0x7f3cfcf8eec9 [ 1449.383717][T30849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1449.383734][T30849] RSP: 002b:00007f3cfb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1449.383754][T30849] RAX: ffffffffffffffda RBX: 00007f3cfd1e5fa0 RCX: 00007f3cfcf8eec9 [ 1449.383769][T30849] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 1449.383780][T30849] RBP: 00007f3cfb1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.383793][T30849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.383804][T30849] R13: 00007f3cfd1e6038 R14: 00007f3cfd1e5fa0 R15: 00007ffef47e54c8 [ 1449.383839][T30849] [ 1449.682834][T30854] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5528'. [ 1449.984240][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 1450.516954][T30877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5535'. [ 1450.534611][T30876] FAULT_INJECTION: forcing a failure. [ 1450.534611][T30876] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.563000][T30879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5537'. [ 1450.599118][T30876] CPU: 0 UID: 0 PID: 30876 Comm: syz.3.5536 Not tainted syzkaller #0 PREEMPT(full) [ 1450.599149][T30876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1450.599163][T30876] Call Trace: [ 1450.599173][T30876] [ 1450.599184][T30876] dump_stack_lvl+0x189/0x250 [ 1450.599214][T30876] ? __pfx____ratelimit+0x10/0x10 [ 1450.599240][T30876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1450.599276][T30876] ? __pfx__printk+0x10/0x10 [ 1450.599310][T30876] ? __pfx___might_resched+0x10/0x10 [ 1450.599340][T30876] ? fs_reclaim_acquire+0x7d/0x100 [ 1450.599376][T30876] should_fail_ex+0x414/0x560 [ 1450.599412][T30876] should_failslab+0xa8/0x100 [ 1450.599444][T30876] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1450.599488][T30876] ? __d_alloc+0x36/0x7a0 [ 1450.599517][T30876] __d_alloc+0x36/0x7a0 [ 1450.599557][T30876] d_alloc_pseudo+0x21/0xc0 [ 1450.599582][T30876] alloc_file_pseudo+0xcc/0x210 [ 1450.599609][T30876] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1450.599629][T30876] ? do_raw_spin_unlock+0x122/0x240 [ 1450.599660][T30876] ? _raw_spin_unlock+0x28/0x50 [ 1450.599691][T30876] sock_alloc_file+0xb8/0x2e0 [ 1450.599723][T30876] ? __sys_socket+0x12c/0x1b0 [ 1450.599749][T30876] __sys_socket+0x13d/0x1b0 [ 1450.599777][T30876] __x64_sys_socket+0x7a/0x90 [ 1450.599801][T30876] do_syscall_64+0xfa/0x3b0 [ 1450.599826][T30876] ? lockdep_hardirqs_on+0x9c/0x150 [ 1450.599850][T30876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.599871][T30876] ? clear_bhb_loop+0x60/0xb0 [ 1450.599899][T30876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.599920][T30876] RIP: 0033:0x7fc904390de7 [ 1450.599940][T30876] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1450.599960][T30876] RSP: 002b:00007fc9025ecfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1450.599983][T30876] RAX: ffffffffffffffda RBX: 00007fc9045e5fa0 RCX: 00007fc904390de7 [ 1450.599999][T30876] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1450.600013][T30876] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1450.600027][T30876] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001 [ 1450.600041][T30876] R13: 00007fc9045e6038 R14: 00007fc9045e5fa0 R15: 00007ffe45612bd8 [ 1450.600081][T30876] [ 1451.119092][T30889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5539'. [ 1451.259955][T30890] !: renamed from dummy0 [ 1451.313641][T30889] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5539'. [ 1451.509441][T30890] lo speed is unknown, defaulting to 1000 [ 1451.686905][T30907] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1452.427462][T30918] FAULT_INJECTION: forcing a failure. [ 1452.427462][T30918] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.441463][T30918] CPU: 0 UID: 0 PID: 30918 Comm: syz.2.5549 Not tainted syzkaller #0 PREEMPT(full) [ 1452.441495][T30918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1452.441511][T30918] Call Trace: [ 1452.441520][T30918] [ 1452.441531][T30918] dump_stack_lvl+0x189/0x250 [ 1452.441562][T30918] ? __pfx____ratelimit+0x10/0x10 [ 1452.441589][T30918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.441615][T30918] ? __pfx__printk+0x10/0x10 [ 1452.441653][T30918] ? __pfx___might_resched+0x10/0x10 [ 1452.441686][T30918] ? fs_reclaim_acquire+0x7d/0x100 [ 1452.441727][T30918] should_fail_ex+0x414/0x560 [ 1452.441767][T30918] should_failslab+0xa8/0x100 [ 1452.441801][T30918] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1452.441831][T30918] ? __alloc_skb+0x112/0x2d0 [ 1452.441865][T30918] __alloc_skb+0x112/0x2d0 [ 1452.441897][T30918] netlink_ack+0x146/0xa50 [ 1452.441948][T30918] netlink_rcv_skb+0x28c/0x470 [ 1452.441976][T30918] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1452.442002][T30918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1452.442045][T30918] ? bpf_lsm_capable+0x9/0x20 [ 1452.442081][T30918] ? security_capable+0x7e/0x2e0 [ 1452.442125][T30918] nfnetlink_rcv+0x282/0x2590 [ 1452.442152][T30918] ? __dev_queue_xmit+0x27b/0x3b50 [ 1452.442186][T30918] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1452.442233][T30918] ? __dev_queue_xmit+0x27b/0x3b50 [ 1452.442293][T30918] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1452.442316][T30918] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1452.442370][T30918] ? ref_tracker_free+0x63a/0x7d0 [ 1452.442405][T30918] ? __asan_memcpy+0x40/0x70 [ 1452.442428][T30918] ? __pfx_ref_tracker_free+0x10/0x10 [ 1452.442483][T30918] ? skb_clone+0x246/0x3a0 [ 1452.442518][T30918] ? __netlink_deliver_tap+0x807/0x850 [ 1452.442543][T30918] ? netlink_deliver_tap+0x2e/0x1b0 [ 1452.442577][T30918] ? netlink_deliver_tap+0x2e/0x1b0 [ 1452.442624][T30918] netlink_unicast+0x82c/0x9e0 [ 1452.442657][T30918] ? __pfx_netlink_unicast+0x10/0x10 [ 1452.442681][T30918] ? netlink_sendmsg+0x642/0xb30 [ 1452.442703][T30918] ? skb_put+0x11b/0x210 [ 1452.442732][T30918] netlink_sendmsg+0x805/0xb30 [ 1452.442768][T30918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.442797][T30918] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1452.442831][T30918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1452.442852][T30918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1452.442878][T30918] __sock_sendmsg+0x219/0x270 [ 1452.442914][T30918] ____sys_sendmsg+0x505/0x830 [ 1452.442948][T30918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1452.442988][T30918] ? import_iovec+0x74/0xa0 [ 1452.443019][T30918] ___sys_sendmsg+0x21f/0x2a0 [ 1452.443049][T30918] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.443128][T30918] ? __fget_files+0x2a/0x420 [ 1452.443156][T30918] ? __fget_files+0x3a0/0x420 [ 1452.443198][T30918] __x64_sys_sendmsg+0x19b/0x260 [ 1452.443229][T30918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1452.443269][T30918] ? __pfx_ksys_write+0x10/0x10 [ 1452.443292][T30918] ? rcu_is_watching+0x15/0xb0 [ 1452.443318][T30918] ? do_syscall_64+0xbe/0x3b0 [ 1452.443347][T30918] do_syscall_64+0xfa/0x3b0 [ 1452.443369][T30918] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.443391][T30918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.443412][T30918] ? clear_bhb_loop+0x60/0xb0 [ 1452.443438][T30918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.443458][T30918] RIP: 0033:0x7f41db38eec9 [ 1452.443477][T30918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.443495][T30918] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1452.443516][T30918] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1452.443532][T30918] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1452.443545][T30918] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.443558][T30918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.443571][T30918] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1452.443608][T30918] [ 1452.986416][T30890] lo speed is unknown, defaulting to 1000 [ 1453.215789][T30925] FAULT_INJECTION: forcing a failure. [ 1453.215789][T30925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.229246][T30925] CPU: 0 UID: 0 PID: 30925 Comm: syz.2.5551 Not tainted syzkaller #0 PREEMPT(full) [ 1453.229270][T30925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1453.229281][T30925] Call Trace: [ 1453.229289][T30925] [ 1453.229297][T30925] dump_stack_lvl+0x189/0x250 [ 1453.229321][T30925] ? __pfx____ratelimit+0x10/0x10 [ 1453.229341][T30925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.229359][T30925] ? __pfx__printk+0x10/0x10 [ 1453.229393][T30925] should_fail_ex+0x414/0x560 [ 1453.229421][T30925] _copy_to_user+0x31/0xb0 [ 1453.229445][T30925] simple_read_from_buffer+0xe1/0x170 [ 1453.229541][T30925] proc_fail_nth_read+0x1b3/0x220 [ 1453.229583][T30925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1453.229604][T30925] ? rw_verify_area+0x2a6/0x4d0 [ 1453.229623][T30925] ? __lock_acquire+0xab9/0xd20 [ 1453.229644][T30925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1453.229664][T30925] vfs_read+0x1fd/0xa30 [ 1453.229683][T30925] ? fdget_pos+0x247/0x320 [ 1453.229711][T30925] ? __pfx___mutex_lock+0x10/0x10 [ 1453.229731][T30925] ? __pfx_vfs_read+0x10/0x10 [ 1453.229753][T30925] ? __fget_files+0x2a/0x420 [ 1453.229780][T30925] ? __fget_files+0x3a0/0x420 [ 1453.229802][T30925] ? __fget_files+0x2a/0x420 [ 1453.229834][T30925] ksys_read+0x145/0x250 [ 1453.229857][T30925] ? __pfx_ksys_read+0x10/0x10 [ 1453.229875][T30925] ? rcu_is_watching+0x15/0xb0 [ 1453.229895][T30925] ? do_syscall_64+0xbe/0x3b0 [ 1453.229918][T30925] do_syscall_64+0xfa/0x3b0 [ 1453.229935][T30925] ? lockdep_hardirqs_on+0x9c/0x150 [ 1453.229953][T30925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.229969][T30925] ? clear_bhb_loop+0x60/0xb0 [ 1453.229989][T30925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.230005][T30925] RIP: 0033:0x7f41db38d8dc [ 1453.230020][T30925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1453.230034][T30925] RSP: 002b:00007f41dc24b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1453.230057][T30925] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38d8dc [ 1453.230069][T30925] RDX: 000000000000000f RSI: 00007f41dc24b0a0 RDI: 0000000000000005 [ 1453.230079][T30925] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.230089][T30925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.230099][T30925] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1453.230128][T30925] [ 1453.779528][T30932] netlink: 'syz.4.5554': attribute type 13 has an invalid length. [ 1453.854029][T30932] netlink: 14589 bytes leftover after parsing attributes in process `syz.4.5554'. [ 1454.361393][T30937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1454.936007][T30961] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1455.004983][T30946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5558'. [ 1455.152946][T30958] bond26: option arp_validate: invalid value (18446744073491447809) [ 1455.169660][T30958] bond26 (unregistering): Released all slaves [ 1455.218641][T30962] netlink: 'syz.2.5560': attribute type 13 has an invalid length. [ 1455.481783][T30979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5566'. [ 1455.785890][T22126] lo speed is unknown, defaulting to 1000 [ 1455.804128][T22126] syz0: Port: 1 Link DOWN [ 1455.845098][T30970] lo speed is unknown, defaulting to 1000 [ 1455.901448][T30986] netlink: 'syz.4.5568': attribute type 13 has an invalid length. [ 1455.921770][T30984] bond29: option arp_validate: invalid value (18446744073491447809) [ 1455.953054][T30984] bond29 (unregistering): Released all slaves [ 1456.018082][T30995] netlink: 'syz.2.5571': attribute type 1 has an invalid length. [ 1456.027305][T30995] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5571'. [ 1456.134317][T30998] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5572'. [ 1456.164119][T30998] FAULT_INJECTION: forcing a failure. [ 1456.164119][T30998] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.198536][T30998] CPU: 0 UID: 0 PID: 30998 Comm: syz.2.5572 Not tainted syzkaller #0 PREEMPT(full) [ 1456.198568][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1456.198582][T30998] Call Trace: [ 1456.198591][T30998] [ 1456.198602][T30998] dump_stack_lvl+0x189/0x250 [ 1456.198632][T30998] ? __pfx____ratelimit+0x10/0x10 [ 1456.198658][T30998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1456.198684][T30998] ? __pfx__printk+0x10/0x10 [ 1456.198721][T30998] ? __pfx___might_resched+0x10/0x10 [ 1456.198763][T30998] ? fs_reclaim_acquire+0x7d/0x100 [ 1456.198800][T30998] should_fail_ex+0x414/0x560 [ 1456.198838][T30998] should_failslab+0xa8/0x100 [ 1456.198870][T30998] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1456.198899][T30998] ? __alloc_skb+0x112/0x2d0 [ 1456.198929][T30998] __alloc_skb+0x112/0x2d0 [ 1456.198959][T30998] netlink_ack+0x146/0xa50 [ 1456.198981][T30998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1456.199128][T30998] netlink_rcv_skb+0x28c/0x470 [ 1456.199152][T30998] ? __lock_acquire+0xab9/0xd20 [ 1456.199182][T30998] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1456.199208][T30998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1456.199249][T30998] ? netlink_deliver_tap+0x2e/0x1b0 [ 1456.199286][T30998] netlink_unicast+0x82c/0x9e0 [ 1456.199321][T30998] ? __pfx_netlink_unicast+0x10/0x10 [ 1456.199346][T30998] ? netlink_sendmsg+0x642/0xb30 [ 1456.199369][T30998] ? skb_put+0x11b/0x210 [ 1456.199400][T30998] netlink_sendmsg+0x805/0xb30 [ 1456.199439][T30998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1456.199468][T30998] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1456.199505][T30998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1456.199531][T30998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1456.199560][T30998] __sock_sendmsg+0x219/0x270 [ 1456.199600][T30998] __sys_sendto+0x3bd/0x520 [ 1456.199630][T30998] ? __pfx___sys_sendto+0x10/0x10 [ 1456.199653][T30998] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1456.199697][T30998] ? __fget_files+0x3a0/0x420 [ 1456.199751][T30998] ? ksys_write+0x22a/0x250 [ 1456.199783][T30998] ? __pfx_ksys_write+0x10/0x10 [ 1456.199808][T30998] ? rcu_is_watching+0x15/0xb0 [ 1456.199836][T30998] __x64_sys_sendto+0xde/0x100 [ 1456.199868][T30998] do_syscall_64+0xfa/0x3b0 [ 1456.199892][T30998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1456.199916][T30998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.199939][T30998] ? clear_bhb_loop+0x60/0xb0 [ 1456.199967][T30998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.199988][T30998] RIP: 0033:0x7f41db38eec9 [ 1456.200009][T30998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1456.200029][T30998] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1456.200052][T30998] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1456.200069][T30998] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1456.200083][T30998] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.200097][T30998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.200110][T30998] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1456.200150][T30998] [ 1456.665947][T30970] lo speed is unknown, defaulting to 1000 [ 1456.831810][T31004] bond26: option arp_validate: invalid value (18446744073491447809) [ 1456.859669][T31004] bond26 (unregistering): Released all slaves [ 1456.886849][T31017] netlink: 'syz.2.5575': attribute type 13 has an invalid length. [ 1457.290437][T31030] FAULT_INJECTION: forcing a failure. [ 1457.290437][T31030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.346366][T31030] CPU: 0 UID: 0 PID: 31030 Comm: syz.2.5581 Not tainted syzkaller #0 PREEMPT(full) [ 1457.346397][T31030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1457.346410][T31030] Call Trace: [ 1457.346418][T31030] [ 1457.346429][T31030] dump_stack_lvl+0x189/0x250 [ 1457.346459][T31030] ? __pfx____ratelimit+0x10/0x10 [ 1457.346484][T31030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1457.346509][T31030] ? __pfx__printk+0x10/0x10 [ 1457.346552][T31030] should_fail_ex+0x414/0x560 [ 1457.346589][T31030] _copy_to_user+0x31/0xb0 [ 1457.346623][T31030] simple_read_from_buffer+0xe1/0x170 [ 1457.346658][T31030] proc_fail_nth_read+0x1b3/0x220 [ 1457.346686][T31030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1457.346712][T31030] ? rw_verify_area+0x2a6/0x4d0 [ 1457.346737][T31030] ? __lock_acquire+0xab9/0xd20 [ 1457.346764][T31030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1457.346788][T31030] vfs_read+0x1fd/0xa30 [ 1457.346820][T31030] ? fdget_pos+0x247/0x320 [ 1457.346856][T31030] ? __pfx___mutex_lock+0x10/0x10 [ 1457.346881][T31030] ? __pfx_vfs_read+0x10/0x10 [ 1457.346909][T31030] ? __fget_files+0x2a/0x420 [ 1457.346945][T31030] ? __fget_files+0x3a0/0x420 [ 1457.346973][T31030] ? __fget_files+0x2a/0x420 [ 1457.347015][T31030] ksys_read+0x145/0x250 [ 1457.347038][T31030] ? fd_install+0x97/0x540 [ 1457.347069][T31030] ? __pfx_ksys_read+0x10/0x10 [ 1457.347102][T31030] ? do_syscall_64+0xbe/0x3b0 [ 1457.347132][T31030] do_syscall_64+0xfa/0x3b0 [ 1457.347154][T31030] ? lockdep_hardirqs_on+0x9c/0x150 [ 1457.347177][T31030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.347198][T31030] ? clear_bhb_loop+0x60/0xb0 [ 1457.347225][T31030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.347245][T31030] RIP: 0033:0x7f41db38d8dc [ 1457.347265][T31030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1457.347283][T31030] RSP: 002b:00007f41dc24b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1457.347304][T31030] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38d8dc [ 1457.347320][T31030] RDX: 000000000000000f RSI: 00007f41dc24b0a0 RDI: 0000000000000004 [ 1457.347333][T31030] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.347347][T31030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.347360][T31030] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1457.347398][T31030] [ 1458.134082][T31053] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5580'. [ 1458.183994][T31050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5588'. [ 1458.220996][T31050] bridge0: entered promiscuous mode [ 1458.230422][T31050] macsec1: entered promiscuous mode [ 1458.238541][T31050] bridge0: port 1(macsec1) entered blocking state [ 1458.241525][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5580'. [ 1458.249120][T31050] bridge0: port 1(macsec1) entered disabled state [ 1458.262874][T31050] macsec1: entered allmulticast mode [ 1458.271097][T31050] bridge0: entered allmulticast mode [ 1458.285568][T31050] macsec1: left allmulticast mode [ 1458.290769][T31050] bridge0: left allmulticast mode [ 1458.299951][T31050] bridge0: left promiscuous mode [ 1458.325840][T31061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1459.301991][T31092] lo speed is unknown, defaulting to 1000 [ 1459.385066][T31095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1459.632388][T31092] lo speed is unknown, defaulting to 1000 [ 1460.199081][T31108] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5603'. [ 1460.267240][T31116] netlink: 'syz.3.5604': attribute type 13 has an invalid length. [ 1460.269683][T31112] bond45: option arp_validate: invalid value (18446744073491447809) [ 1460.307890][T31112] bond45 (unregistering): Released all slaves [ 1460.351616][T31118] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5606'. [ 1460.361974][T31118] FAULT_INJECTION: forcing a failure. [ 1460.361974][T31118] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.398953][T31118] CPU: 1 UID: 0 PID: 31118 Comm: syz.1.5606 Not tainted syzkaller #0 PREEMPT(full) [ 1460.398984][T31118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1460.398998][T31118] Call Trace: [ 1460.399008][T31118] [ 1460.399018][T31118] dump_stack_lvl+0x189/0x250 [ 1460.399048][T31118] ? __pfx____ratelimit+0x10/0x10 [ 1460.399074][T31118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1460.399099][T31118] ? __pfx__printk+0x10/0x10 [ 1460.399124][T31118] ? netlink_unicast+0x82c/0x9e0 [ 1460.399147][T31118] ? __x64_sys_sendto+0xde/0x100 [ 1460.399172][T31118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.399207][T31118] should_fail_ex+0x414/0x560 [ 1460.399245][T31118] should_failslab+0xa8/0x100 [ 1460.399278][T31118] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1460.399305][T31118] ? skb_clone+0x212/0x3a0 [ 1460.399340][T31118] skb_clone+0x212/0x3a0 [ 1460.399374][T31118] __netlink_deliver_tap+0x404/0x850 [ 1460.399416][T31118] ? netlink_deliver_tap+0x2e/0x1b0 [ 1460.399444][T31118] netlink_deliver_tap+0x19c/0x1b0 [ 1460.399471][T31118] netlink_sendskb+0x68/0x140 [ 1460.399505][T31118] netlink_unicast+0x397/0x9e0 [ 1460.399524][T31118] ? __asan_memcpy+0x40/0x70 [ 1460.399560][T31118] ? __pfx_netlink_unicast+0x10/0x10 [ 1460.399597][T31118] netlink_rcv_skb+0x28c/0x470 [ 1460.399624][T31118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1460.399652][T31118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1460.399693][T31118] ? netlink_deliver_tap+0x2e/0x1b0 [ 1460.399729][T31118] netlink_unicast+0x82c/0x9e0 [ 1460.399769][T31118] ? __pfx_netlink_unicast+0x10/0x10 [ 1460.399800][T31118] ? netlink_sendmsg+0x642/0xb30 [ 1460.399823][T31118] ? skb_put+0x11b/0x210 [ 1460.399854][T31118] netlink_sendmsg+0x805/0xb30 [ 1460.399892][T31118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.399923][T31118] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1460.399961][T31118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1460.399985][T31118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.400012][T31118] __sock_sendmsg+0x219/0x270 [ 1460.400051][T31118] __sys_sendto+0x3bd/0x520 [ 1460.400081][T31118] ? __pfx___sys_sendto+0x10/0x10 [ 1460.400104][T31118] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1460.400149][T31118] ? __fget_files+0x3a0/0x420 [ 1460.400196][T31118] ? ksys_write+0x22a/0x250 [ 1460.400251][T31118] ? __pfx_ksys_write+0x10/0x10 [ 1460.400277][T31118] ? rcu_is_watching+0x15/0xb0 [ 1460.400322][T31118] __x64_sys_sendto+0xde/0x100 [ 1460.400356][T31118] do_syscall_64+0xfa/0x3b0 [ 1460.400382][T31118] ? lockdep_hardirqs_on+0x9c/0x150 [ 1460.400406][T31118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.400430][T31118] ? clear_bhb_loop+0x60/0xb0 [ 1460.400460][T31118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.400482][T31118] RIP: 0033:0x7f6ae6d8eec9 [ 1460.400510][T31118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1460.400530][T31118] RSP: 002b:00007f6ae7bcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1460.400555][T31118] RAX: ffffffffffffffda RBX: 00007f6ae6fe5fa0 RCX: 00007f6ae6d8eec9 [ 1460.400572][T31118] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1460.400586][T31118] RBP: 00007f6ae7bcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.400601][T31118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.400614][T31118] R13: 00007f6ae6fe6038 R14: 00007f6ae6fe5fa0 R15: 00007ffe2260d268 [ 1460.400656][T31118] [ 1461.207905][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1461.218827][T31136] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1461.414214][T31163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5619'. [ 1461.448481][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5617'. [ 1461.631325][T31173] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 1461.679154][T31173] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1461.702105][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1462.280345][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5626'. [ 1462.297963][T31200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5627'. [ 1462.528008][T31211] netlink: 'syz.1.5631': attribute type 1 has an invalid length. [ 1462.541351][T31204] bond45: option arp_validate: invalid value (18446744073491447809) [ 1462.554439][T31211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1462.564822][T31207] netlink: 'syz.3.5630': attribute type 13 has an invalid length. [ 1462.577200][T31204] bond45 (unregistering): Released all slaves [ 1462.679917][T31220] netlink: 'syz.1.5631': attribute type 1 has an invalid length. [ 1462.790474][T31227] netlink: 'syz.4.5635': attribute type 16 has an invalid length. [ 1462.800469][T31227] netlink: 'syz.4.5635': attribute type 17 has an invalid length. [ 1462.876276][T31227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.894345][T31227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1464.080177][T31271] netlink: 'syz.3.5647': attribute type 13 has an invalid length. [ 1464.457889][T31270] bond45: option arp_validate: invalid value (18446744073491447809) [ 1464.510446][T31270] bond45 (unregistering): Released all slaves [ 1464.578941][T31274] lo speed is unknown, defaulting to 1000 [ 1465.081338][T31298] bond26: option arp_validate: invalid value (18446744073491447809) [ 1465.087239][T31294] netlink: 'syz.0.5657': attribute type 13 has an invalid length. [ 1465.100474][T31298] bond26 (unregistering): Released all slaves [ 1465.142002][T31274] lo speed is unknown, defaulting to 1000 [ 1465.440339][T31308] __nla_validate_parse: 4 callbacks suppressed [ 1465.440360][T31308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5658'. [ 1465.789803][T31321] tipc: Enabling of bearer rejected, already enabled [ 1466.281112][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1466.357396][T31341] lo speed is unknown, defaulting to 1000 [ 1466.400275][T31348] netlink: 'syz.4.5668': attribute type 12 has an invalid length. [ 1466.419872][T31348] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5668'. [ 1466.967798][T31357] bond29: option arp_validate: invalid value (18446744073491447809) [ 1467.018850][T31357] bond29 (unregistering): Released all slaves [ 1467.265696][T31341] lo speed is unknown, defaulting to 1000 [ 1467.547762][T31379] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1467.604068][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'. [ 1467.719613][T31378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5679'. [ 1467.874816][T31387] netlink: 'syz.1.5680': attribute type 16 has an invalid length. [ 1467.887655][T31387] netlink: 'syz.1.5680': attribute type 17 has an invalid length. [ 1467.912363][T31387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1468.410989][T31401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5683'. [ 1468.564818][T31406] lo speed is unknown, defaulting to 1000 [ 1468.695227][T31408] bond29: option arp_validate: invalid value (18446744073491447809) [ 1468.748155][T31408] bond29 (unregistering): Released all slaves [ 1468.770124][T31423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5685'. [ 1469.135979][T31436] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5690'. [ 1469.159143][T31438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5689'. [ 1469.312218][T31406] lo speed is unknown, defaulting to 1000 [ 1469.359659][T31444] sock: sock_timestamping_bind_phc: sock not bind to device [ 1469.940051][T31463] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1469.965707][T31468] netlink: 'syz.3.5699': attribute type 16 has an invalid length. [ 1469.974582][T31468] netlink: 'syz.3.5699': attribute type 17 has an invalid length. [ 1470.075959][T31465] tipc: Enabled bearer , priority 0 [ 1470.138224][T31468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1470.178186][T31469] syzkaller0: entered promiscuous mode [ 1470.206683][T31469] syzkaller0: entered allmulticast mode [ 1470.226011][T22126] lo speed is unknown, defaulting to 1000 [ 1470.232000][T22126] syz2: Port: 1 Link ACTIVE [ 1470.270330][T31463] tipc: Resetting bearer [ 1470.314732][T31462] tipc: Resetting bearer [ 1470.332653][T31462] tipc: Disabling bearer [ 1470.374407][T31474] bond29: option arp_validate: invalid value (18446744073491447809) [ 1470.384741][T31474] bond29 (unregistering): Released all slaves [ 1470.620404][T31484] pimreg: entered allmulticast mode [ 1470.632414][T31484] __nla_validate_parse: 4 callbacks suppressed [ 1470.632435][T31484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5701'. [ 1470.691028][T31492] netlink: 'syz.4.5704': attribute type 1 has an invalid length. [ 1470.735673][T31492] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.5704'. [ 1470.786794][T31496] FAULT_INJECTION: forcing a failure. [ 1470.786794][T31496] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.852938][T31496] CPU: 0 UID: 0 PID: 31496 Comm: syz.3.5706 Not tainted syzkaller #0 PREEMPT(full) [ 1470.852971][T31496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1470.852986][T31496] Call Trace: [ 1470.852995][T31496] [ 1470.853005][T31496] dump_stack_lvl+0x189/0x250 [ 1470.853037][T31496] ? __pfx____ratelimit+0x10/0x10 [ 1470.853063][T31496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1470.853089][T31496] ? __pfx__printk+0x10/0x10 [ 1470.853120][T31496] ? __lock_acquire+0xab9/0xd20 [ 1470.853167][T31496] should_fail_ex+0x414/0x560 [ 1470.853205][T31496] should_failslab+0xa8/0x100 [ 1470.853239][T31496] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1470.853266][T31496] ? skb_clone+0x212/0x3a0 [ 1470.853303][T31496] skb_clone+0x212/0x3a0 [ 1470.853338][T31496] __netlink_deliver_tap+0x404/0x850 [ 1470.853383][T31496] ? netlink_deliver_tap+0x2e/0x1b0 [ 1470.853411][T31496] netlink_deliver_tap+0x19c/0x1b0 [ 1470.853447][T31496] netlink_unicast+0x7fa/0x9e0 [ 1470.853482][T31496] ? __pfx_netlink_unicast+0x10/0x10 [ 1470.853508][T31496] ? netlink_sendmsg+0x642/0xb30 [ 1470.853531][T31496] ? skb_put+0x11b/0x210 [ 1470.853563][T31496] netlink_sendmsg+0x805/0xb30 [ 1470.853603][T31496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.853635][T31496] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1470.853672][T31496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1470.853695][T31496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.853723][T31496] __sock_sendmsg+0x219/0x270 [ 1470.853762][T31496] __sys_sendto+0x3bd/0x520 [ 1470.853791][T31496] ? __pfx___sys_sendto+0x10/0x10 [ 1470.853830][T31496] ? count_memcg_event_mm+0x21/0x260 [ 1470.853873][T31496] ? exc_page_fault+0x76/0xf0 [ 1470.853902][T31496] ? do_user_addr_fault+0xc8a/0x1390 [ 1470.853942][T31496] __x64_sys_sendto+0xde/0x100 [ 1470.853974][T31496] do_syscall_64+0xfa/0x3b0 [ 1470.853998][T31496] ? lockdep_hardirqs_on+0x9c/0x150 [ 1470.854022][T31496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.854045][T31496] ? clear_bhb_loop+0x60/0xb0 [ 1470.854073][T31496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.854094][T31496] RIP: 0033:0x7fc904390d5c [ 1470.854115][T31496] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1470.854134][T31496] RSP: 002b:00007fc9025ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1470.854158][T31496] RAX: ffffffffffffffda RBX: 00007fc9025ecfc0 RCX: 00007fc904390d5c [ 1470.854174][T31496] RDX: 0000000000000020 RSI: 00007fc9025ed010 RDI: 0000000000000005 [ 1470.854188][T31496] RBP: 0000000000000000 R08: 00007fc9025ecf14 R09: 000000000000000c [ 1470.854202][T31496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 1470.854215][T31496] R13: 00007fc9025ecf68 R14: 00007fc9025ed010 R15: 0000000000000000 [ 1470.854253][T31496] [ 1471.156014][T31503] netlink: 'syz.2.5707': attribute type 7 has an invalid length. [ 1471.187962][T31503] lo speed is unknown, defaulting to 1000 [ 1471.441671][T31505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.465716][T31505] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1471.495671][T22126] lo speed is unknown, defaulting to 1000 [ 1471.501542][T22126] syz0: Port: 1 Link ACTIVE [ 1471.511156][T31503] lo speed is unknown, defaulting to 1000 [ 1471.632243][T31518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1471.727988][T31522] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5703'. [ 1471.748492][T31498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'. [ 1471.839313][T31526] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 1472.742163][T31547] netlink: 'syz.0.5716': attribute type 16 has an invalid length. [ 1472.750949][T31547] netlink: 'syz.0.5716': attribute type 17 has an invalid length. [ 1472.937268][T31547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.996262][T31547] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1473.026192][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1473.239337][T31554] netlink: 'syz.1.5718': attribute type 1 has an invalid length. [ 1473.244094][T31551] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1473.248125][T31554] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5718'. [ 1473.272155][T31539] lo speed is unknown, defaulting to 1000 [ 1473.389885][T31555] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1473.473125][T31543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1473.705794][T31557] bond26: option arp_validate: invalid value (18446744073491447809) [ 1473.777123][T31558] netlink: 'syz.0.5719': attribute type 13 has an invalid length. [ 1473.789513][T31557] bond26 (unregistering): Released all slaves [ 1473.824433][T31539] lo speed is unknown, defaulting to 1000 [ 1474.344712][T31575] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 1474.363714][T31578] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 1474.411735][T31578] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 1474.942555][T31601] netlink: 'syz.3.5729': attribute type 16 has an invalid length. [ 1474.951193][T31601] netlink: 'syz.3.5729': attribute type 17 has an invalid length. [ 1475.123882][T31601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1475.607690][T31616] lo speed is unknown, defaulting to 1000 [ 1476.476181][T31633] bond0 (unregistering): Released all slaves [ 1476.553931][T31616] lo speed is unknown, defaulting to 1000 [ 1476.568052][T31645] __nla_validate_parse: 5 callbacks suppressed [ 1476.568070][T31645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5740'. [ 1476.703845][T31647] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1476.717033][T31636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1477.181301][T31671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.202117][T31671] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1477.432475][T31681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1477.566637][T31687] syzkaller1: entered promiscuous mode [ 1477.572379][T31687] syzkaller1: entered allmulticast mode [ 1477.639013][T31653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1478.097513][T31700] bond26: option arp_validate: invalid value (18446744073491447809) [ 1478.108932][T31700] bond26 (unregistering): Released all slaves [ 1478.117628][T31712] netlink: 'syz.0.5756': attribute type 13 has an invalid length. [ 1478.728964][T31724] tipc: Enabling of bearer rejected, already enabled [ 1478.769769][T31725] bond29: option arp_validate: invalid value (18446744073491447809) [ 1478.781122][T31725] bond29 (unregistering): Released all slaves [ 1478.997873][T31744] FAULT_INJECTION: forcing a failure. [ 1478.997873][T31744] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.027069][T31744] CPU: 1 UID: 0 PID: 31744 Comm: syz.2.5764 Not tainted syzkaller #0 PREEMPT(full) [ 1479.027112][T31744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1479.027131][T31744] Call Trace: [ 1479.027141][T31744] [ 1479.027152][T31744] dump_stack_lvl+0x189/0x250 [ 1479.027183][T31744] ? __pfx____ratelimit+0x10/0x10 [ 1479.027210][T31744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1479.027236][T31744] ? __pfx__printk+0x10/0x10 [ 1479.027287][T31744] should_fail_ex+0x414/0x560 [ 1479.027326][T31744] should_failslab+0xa8/0x100 [ 1479.027375][T31744] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1479.027402][T31744] ? skb_clone+0x212/0x3a0 [ 1479.027440][T31744] skb_clone+0x212/0x3a0 [ 1479.027477][T31744] __netlink_deliver_tap+0x404/0x850 [ 1479.027523][T31744] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.027553][T31744] netlink_deliver_tap+0x19c/0x1b0 [ 1479.027581][T31744] netlink_sendskb+0x68/0x140 [ 1479.027609][T31744] netlink_unicast+0x397/0x9e0 [ 1479.027645][T31744] ? __pfx_netlink_unicast+0x10/0x10 [ 1479.027668][T31744] ? __alloc_skb+0x1bc/0x2d0 [ 1479.027705][T31744] nlmsg_notify+0x12e/0x1a0 [ 1479.027737][T31744] qdisc_graft+0x1109/0x1590 [ 1479.027925][T31744] ? __pfx_qdisc_graft+0x10/0x10 [ 1479.027965][T31744] ? qdisc_create+0xa52/0xea0 [ 1479.028029][T31744] tc_modify_qdisc+0x189b/0x20e0 [ 1479.028089][T31744] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1479.028180][T31744] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1479.028212][T31744] rtnetlink_rcv_msg+0x77c/0xb70 [ 1479.028244][T31744] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1479.028288][T31744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.028311][T31744] ? ref_tracker_free+0x63a/0x7d0 [ 1479.028365][T31744] ? __asan_memcpy+0x40/0x70 [ 1479.028389][T31744] ? __pfx_ref_tracker_free+0x10/0x10 [ 1479.028438][T31744] netlink_rcv_skb+0x208/0x470 [ 1479.028486][T31744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1479.028514][T31744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1479.028559][T31744] ? netlink_deliver_tap+0x2e/0x1b0 [ 1479.028598][T31744] netlink_unicast+0x82c/0x9e0 [ 1479.028635][T31744] ? __pfx_netlink_unicast+0x10/0x10 [ 1479.028662][T31744] ? netlink_sendmsg+0x642/0xb30 [ 1479.028687][T31744] ? skb_put+0x11b/0x210 [ 1479.028720][T31744] netlink_sendmsg+0x805/0xb30 [ 1479.028761][T31744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.028795][T31744] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1479.028833][T31744] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1479.028856][T31744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.028885][T31744] __sock_sendmsg+0x219/0x270 [ 1479.028926][T31744] ____sys_sendmsg+0x52d/0x830 [ 1479.028965][T31744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1479.029010][T31744] ? import_iovec+0x74/0xa0 [ 1479.029045][T31744] ___sys_sendmsg+0x21f/0x2a0 [ 1479.029079][T31744] ? __pfx____sys_sendmsg+0x10/0x10 [ 1479.029165][T31744] ? __fget_files+0x2a/0x420 [ 1479.029197][T31744] ? __fget_files+0x3a0/0x420 [ 1479.029246][T31744] __sys_sendmmsg+0x227/0x430 [ 1479.029285][T31744] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1479.029313][T31744] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1479.029386][T31744] ? ksys_write+0x22a/0x250 [ 1479.029420][T31744] ? __pfx_ksys_write+0x10/0x10 [ 1479.029446][T31744] ? rcu_is_watching+0x15/0xb0 [ 1479.029478][T31744] __x64_sys_sendmmsg+0xa0/0xc0 [ 1479.029512][T31744] do_syscall_64+0xfa/0x3b0 [ 1479.029538][T31744] ? lockdep_hardirqs_on+0x9c/0x150 [ 1479.029564][T31744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.029588][T31744] ? clear_bhb_loop+0x60/0xb0 [ 1479.029617][T31744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.029640][T31744] RIP: 0033:0x7f41db38eec9 [ 1479.029662][T31744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1479.029683][T31744] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1479.029707][T31744] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1479.029725][T31744] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1479.029741][T31744] RBP: 00007f41dc24b090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.029756][T31744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1479.029770][T31744] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1479.029813][T31744] [ 1479.500842][T31750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1479.597307][T31754] FAULT_INJECTION: forcing a failure. [ 1479.597307][T31754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1479.614443][T31754] CPU: 1 UID: 0 PID: 31754 Comm: syz.2.5767 Not tainted syzkaller #0 PREEMPT(full) [ 1479.614474][T31754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1479.614489][T31754] Call Trace: [ 1479.614498][T31754] [ 1479.614508][T31754] dump_stack_lvl+0x189/0x250 [ 1479.614539][T31754] ? __pfx____ratelimit+0x10/0x10 [ 1479.614565][T31754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1479.614591][T31754] ? __pfx__printk+0x10/0x10 [ 1479.614620][T31754] ? __might_fault+0xb0/0x130 [ 1479.614666][T31754] should_fail_ex+0x414/0x560 [ 1479.614705][T31754] _copy_from_user+0x2d/0xb0 [ 1479.614735][T31754] sk_getsockopt+0x197/0x2530 [ 1479.614773][T31754] ? __pfx_sk_getsockopt+0x10/0x10 [ 1479.614800][T31754] ? write_ibpb+0x30/0x40 [ 1479.614840][T31754] ? __lock_acquire+0xab9/0xd20 [ 1479.614886][T31754] ? __might_fault+0xb0/0x130 [ 1479.614944][T31754] do_sock_getsockopt+0x237/0x450 [ 1479.614973][T31754] ? write_ibpb+0x30/0x40 [ 1479.615003][T31754] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1479.615032][T31754] ? write_ibpb+0x30/0x40 [ 1479.615056][T31754] ? __fget_files+0x3a0/0x420 [ 1479.615088][T31754] ? __fget_files+0x2a/0x420 [ 1479.615130][T31754] __x64_sys_getsockopt+0x1a5/0x250 [ 1479.615158][T31754] ? write_ibpb+0x30/0x40 [ 1479.615186][T31754] ? write_ibpb+0x30/0x40 [ 1479.615217][T31754] do_syscall_64+0xfa/0x3b0 [ 1479.615241][T31754] ? lockdep_hardirqs_on+0x9c/0x150 [ 1479.615265][T31754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.615297][T31754] ? clear_bhb_loop+0x60/0xb0 [ 1479.615326][T31754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.615348][T31754] RIP: 0033:0x7f41db38eec9 [ 1479.615369][T31754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1479.615387][T31754] RSP: 002b:00007f41dc24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1479.615411][T31754] RAX: ffffffffffffffda RBX: 00007f41db5e5fa0 RCX: 00007f41db38eec9 [ 1479.615427][T31754] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 1479.615441][T31754] RBP: 00007f41dc24b090 R08: 0000200000000480 R09: 0000000000000000 [ 1479.615457][T31754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.615471][T31754] R13: 00007f41db5e6038 R14: 00007f41db5e5fa0 R15: 00007ffc6bdc04c8 [ 1479.615512][T31754] [ 1479.616954][T31756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5769'. [ 1479.640386][T31760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5768'. [ 1479.672875][T31756] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR [ 1480.040076][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1480.159262][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1480.196021][T31777] netlink: 'syz.2.5772': attribute type 5 has an invalid length. [ 1480.210762][T31777] netlink: 'syz.2.5772': attribute type 8 has an invalid length. [ 1480.232527][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1480.325279][T31777] geneve3: entered promiscuous mode [ 1480.337712][T31777] geneve3: entered allmulticast mode [ 1480.369593][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1480.397751][T31792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1480.448036][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1480.463013][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1480.496050][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1480.560391][T31788] lo speed is unknown, defaulting to 1000 [ 1481.268322][T31809] bond0: option arp_validate: invalid value (18446744073491447809) [ 1481.291874][T31809] bond0 (unregistering): Released all slaves [ 1481.470641][T31788] lo speed is unknown, defaulting to 1000 [ 1481.532057][T31820] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5781'. [ 1481.594719][T31807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5781'. [ 1481.640729][T31822] netlink: 'syz.2.5786': attribute type 1 has an invalid length. [ 1482.295894][T31840] lo speed is unknown, defaulting to 1000 [ 1482.607519][T31853] bond29: option arp_validate: invalid value (18446744073491447809) [ 1482.644413][T31853] bond29 (unregistering): Released all slaves [ 1482.896454][T31840] lo speed is unknown, defaulting to 1000 [ 1482.897638][T31860] lo speed is unknown, defaulting to 1000 [ 1483.380769][T31877] FAULT_INJECTION: forcing a failure. [ 1483.380769][T31877] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.410185][T31877] CPU: 0 UID: 0 PID: 31877 Comm: syz.4.5802 Not tainted syzkaller #0 PREEMPT(full) [ 1483.410218][T31877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1483.410233][T31877] Call Trace: [ 1483.410243][T31877] [ 1483.410253][T31877] dump_stack_lvl+0x189/0x250 [ 1483.410286][T31877] ? __pfx____ratelimit+0x10/0x10 [ 1483.410314][T31877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.410339][T31877] ? __pfx__printk+0x10/0x10 [ 1483.410365][T31877] ? __lock_acquire+0xab9/0xd20 [ 1483.410416][T31877] should_fail_ex+0x414/0x560 [ 1483.410456][T31877] should_failslab+0xa8/0x100 [ 1483.410491][T31877] __kmalloc_cache_noprof+0x70/0x3d0 [ 1483.410521][T31877] ? proc_self_get_link+0xe6/0x180 [ 1483.410544][T31877] ? __task_pid_nr_ns+0x398/0x470 [ 1483.410675][T31877] proc_self_get_link+0xe6/0x180 [ 1483.410699][T31877] ? __pfx_proc_self_get_link+0x10/0x10 [ 1483.410724][T31877] pick_link+0x679/0xe80 [ 1483.410770][T31877] step_into+0xc5d/0xf30 [ 1483.410807][T31877] ? __d_lookup_rcu+0x427/0x490 [ 1483.410841][T31877] ? __pfx_step_into+0x10/0x10 [ 1483.410888][T31877] path_openat+0x1bc6/0x3830 [ 1483.410911][T31877] ? arch_stack_walk+0xfc/0x150 [ 1483.410962][T31877] ? stack_depot_save_flags+0x40/0x860 [ 1483.411014][T31877] ? __pfx_path_openat+0x10/0x10 [ 1483.411036][T31877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.411088][T31877] do_filp_open+0x1fa/0x410 [ 1483.411112][T31877] ? __lock_acquire+0xab9/0xd20 [ 1483.411145][T31877] ? __pfx_do_filp_open+0x10/0x10 [ 1483.411227][T31877] ? _raw_spin_unlock+0x28/0x50 [ 1483.411249][T31877] ? alloc_fd+0x64c/0x6c0 [ 1483.411298][T31877] do_sys_openat2+0x121/0x1c0 [ 1483.411326][T31877] ? __pfx_do_sys_openat2+0x10/0x10 [ 1483.411363][T31877] ? exc_page_fault+0x76/0xf0 [ 1483.411393][T31877] ? do_user_addr_fault+0xc8a/0x1390 [ 1483.411431][T31877] __x64_sys_openat+0x138/0x170 [ 1483.411462][T31877] do_syscall_64+0xfa/0x3b0 [ 1483.411486][T31877] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.411510][T31877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.411532][T31877] ? clear_bhb_loop+0x60/0xb0 [ 1483.411560][T31877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.411582][T31877] RIP: 0033:0x7fc08578d710 [ 1483.411602][T31877] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1483.411621][T31877] RSP: 002b:00007fc0865f0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1483.411644][T31877] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc08578d710 [ 1483.411660][T31877] RDX: 0000000000000000 RSI: 00007fc0865f0fa0 RDI: 00000000ffffff9c [ 1483.411674][T31877] RBP: 00007fc0865f0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.411688][T31877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1483.411701][T31877] R13: 00007fc0859e6038 R14: 00007fc0859e5fa0 R15: 00007ffdc00096a8 [ 1483.411741][T31877] [ 1483.759065][T31860] lo speed is unknown, defaulting to 1000 [ 1483.800123][T31880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1484.042029][T31887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5804'. [ 1484.052629][T31882] bond0: option arp_validate: invalid value (18446744073491447809) [ 1484.063637][T31882] bond0 (unregistering): Released all slaves [ 1484.282509][T31891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1484.296499][T31891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1484.375166][T30265] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1484.405839][T30265] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1484.415050][ T6387] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1484.554747][T31897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5809'. [ 1484.571685][T31897] IPv6: sit3: Disabled Multicast RS [ 1484.614449][T30351] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1484.922323][T31910] bond0 (unregistering): Released all slaves [ 1484.973843][T31915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1485.143313][T31921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5817'. [ 1485.235203][ T6387] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1485.628075][T31925] tipc: Resetting bearer [ 1485.667747][T31948] openvswitch: netlink: Tunnel attr 214 out of range max 16 [ 1485.697771][T31948] netlink: 'syz.0.5824': attribute type 1 has an invalid length. [ 1485.714565][T31940] 8021q: VLANs not supported on ip6gre0 [ 1485.724370][T30980] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1485.758770][T31942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1485.787170][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1486.120073][T31969] tipc: Enabling of bearer rejected, already enabled [ 1486.284169][T30980] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1486.339133][T31981] sctp: [Deprecated]: syz.2.5838 (pid 31981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1486.339133][T31981] Use struct sctp_sack_info instead [ 1486.508289][T31978] tipc: Resetting bearer [ 1486.525354][ T6387] lo speed is unknown, defaulting to 1000 [ 1486.534857][ T6387] syz2: Port: 1 Link DOWN [ 1486.561935][T31987] netlink: 'syz.4.5837': attribute type 16 has an invalid length. [ 1486.570772][T31987] netlink: 'syz.4.5837': attribute type 17 has an invalid length. [ 1486.596405][T31987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.811686][T31991] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1486.852287][T31994] tipc: Enabled bearer , priority 0 [ 1486.862354][T31994] syzkaller0: entered promiscuous mode [ 1486.868083][T31994] syzkaller0: entered allmulticast mode [ 1486.900171][T31991] tipc: Resetting bearer [ 1486.914783][T31990] tipc: Resetting bearer [ 1486.938681][T31990] tipc: Disabling bearer [ 1486.940148][T31998] __nla_validate_parse: 1 callbacks suppressed [ 1486.940172][T31998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1487.265810][T32009] bridge0: port 1(erspan0) entered blocking state [ 1487.282789][T32009] bridge0: port 1(erspan0) entered disabled state [ 1487.306831][T32009] erspan0: entered allmulticast mode [ 1487.345888][T32009] erspan0: entered promiscuous mode [ 1487.352447][T32009] bridge0: port 1(erspan0) entered blocking state [ 1487.359074][T32009] bridge0: port 1(erspan0) entered forwarding state [ 1487.420384][T32022] sctp: [Deprecated]: syz.0.5850 (pid 32022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.420384][T32022] Use struct sctp_sack_info instead [ 1487.438503][T32021] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1487.505176][T32011] erspan0: left allmulticast mode [ 1487.510355][T32011] erspan0: left promiscuous mode [ 1487.522311][T32011] bridge0: port 1(erspan0) entered disabled state [ 1487.535005][T32023] tipc: Enabled bearer , priority 0 [ 1487.554424][T32025] FAULT_INJECTION: forcing a failure. [ 1487.554424][T32025] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.567341][T32011] netlink: 'syz.1.5848': attribute type 11 has an invalid length. [ 1487.577550][T32025] CPU: 0 UID: 0 PID: 32025 Comm: syz.4.5853 Not tainted syzkaller #0 PREEMPT(full) [ 1487.577588][T32025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1487.577602][T32025] Call Trace: [ 1487.577611][T32025] [ 1487.577621][T32025] dump_stack_lvl+0x189/0x250 [ 1487.577653][T32025] ? __pfx____ratelimit+0x10/0x10 [ 1487.577680][T32025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1487.577704][T32025] ? __pfx__printk+0x10/0x10 [ 1487.577740][T32025] ? __pfx___might_resched+0x10/0x10 [ 1487.577780][T32025] should_fail_ex+0x414/0x560 [ 1487.577817][T32025] should_failslab+0xa8/0x100 [ 1487.577849][T32025] __kmalloc_cache_noprof+0x70/0x3d0 [ 1487.577878][T32025] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 1487.577918][T32025] alloc_netdev_mqs+0xbf1/0x11b0 [ 1487.577960][T32025] tun_set_iff+0x532/0xf00 [ 1487.578000][T32025] __tun_chr_ioctl+0x788/0x1df0 [ 1487.578036][T32025] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1487.578068][T32025] ? __fget_files+0x2a/0x420 [ 1487.578098][T32025] ? __fget_files+0x3a0/0x420 [ 1487.578128][T32025] ? __fget_files+0x2a/0x420 [ 1487.578165][T32025] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1487.578193][T32025] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1487.578216][T32025] __se_sys_ioctl+0xf9/0x170 [ 1487.578246][T32025] do_syscall_64+0xfa/0x3b0 [ 1487.578268][T32025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1487.578293][T32025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.578315][T32025] ? clear_bhb_loop+0x60/0xb0 [ 1487.578343][T32025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.578364][T32025] RIP: 0033:0x7fc08578eec9 [ 1487.578384][T32025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1487.578403][T32025] RSP: 002b:00007fc0865f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.578427][T32025] RAX: ffffffffffffffda RBX: 00007fc0859e5fa0 RCX: 00007fc08578eec9 [ 1487.578443][T32025] RDX: 0000200000000140 RSI: 00000000400454ca RDI: 0000000000000003 [ 1487.578457][T32025] RBP: 00007fc0865f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.578471][T32025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.578485][T32025] R13: 00007fc0859e6038 R14: 00007fc0859e5fa0 R15: 00007ffdc00096a8 [ 1487.578525][T32025] [ 1487.582399][T32027] syzkaller0: entered promiscuous mode [ 1487.824941][T32027] syzkaller0: entered allmulticast mode [ 1487.896540][T32021] tipc: Resetting bearer [ 1487.934187][T32016] tipc: Resetting bearer [ 1487.978140][T32016] tipc: Disabling bearer [ 1488.113461][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1488.125132][T32048] netlink: 'syz.2.5861': attribute type 1 has an invalid length. [ 1488.225192][T32054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1488.235138][T32054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1488.245537][T32054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1489.071122][T32098] netlink: 'syz.2.5875': attribute type 13 has an invalid length. [ 1489.084155][T32091] bond26: option arp_validate: invalid value (18446744073491447809) [ 1489.102540][T32091] bond26 (unregistering): Released all slaves [ 1489.151656][T32103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5876'. [ 1489.210099][T32101] bond26: option arp_validate: invalid value (18446744073491447809) [ 1489.221280][T32101] bond26 (unregistering): Released all slaves [ 1489.640353][T32121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5878'. [ 1489.655898][T32121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5878'. [ 1489.679253][T32124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1489.690967][T32123] netlink: 'syz.4.5882': attribute type 3 has an invalid length. [ 1489.699989][T32123] netlink: 'syz.4.5882': attribute type 1 has an invalid length. [ 1489.716772][T32123] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5882'. [ 1490.472412][T32139] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5884'. [ 1490.705775][T32151] netlink: 'syz.1.5890': attribute type 1 has an invalid length. [ 1491.160985][T32168] bond26: option arp_validate: invalid value (18446744073491447809) [ 1491.174393][T32168] bond26 (unregistering): Released all slaves [ 1491.185231][T32173] netlink: 'syz.2.5895': attribute type 13 has an invalid length. [ 1491.304608][ T6398] lo speed is unknown, defaulting to 1000 [ 1491.310413][ T6398] syz0: Port: 1 Link DOWN [ 1491.321835][ T78] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.352101][ T78] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.377577][ T78] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.407442][ T78] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.570933][T32185] lo speed is unknown, defaulting to 1000 [ 1491.690703][T32195] netlink: 'syz.1.5903': attribute type 4 has an invalid length. [ 1492.329021][T32185] lo speed is unknown, defaulting to 1000 [ 1492.454206][T32223] __nla_validate_parse: 6 callbacks suppressed [ 1492.454245][T32223] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5906'. [ 1492.565915][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5906'. [ 1492.771990][T32225] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1492.815181][T32221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1493.093834][T32229] netlink: 'syz.0.5913': attribute type 10 has an invalid length. [ 1493.349258][T32234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5916'. [ 1493.359045][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5916'. [ 1493.407898][T32239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1493.438114][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5917'. [ 1493.640714][T32246] team0: Device ipip0 is of different type [ 1493.759976][T32259] tipc: Enabling of bearer rejected, already enabled [ 1493.918817][T32270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1494.007769][T32265] bond26: option arp_validate: invalid value (18446744073491447809) [ 1494.026056][T32265] bond26 (unregistering): Released all slaves [ 1494.250125][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5934'. [ 1495.465125][T32334] netlink: 'syz.2.5945': attribute type 13 has an invalid length. [ 1495.474608][T32334] netlink: 'syz.2.5945': attribute type 27 has an invalid length. [ 1495.633335][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1495.731411][T32333] bond26: option arp_validate: invalid value (18446744073491447809) [ 1495.755605][T32333] bond26 (unregistering): Released all slaves [ 1495.961734][T32341] FAULT_INJECTION: forcing a failure. [ 1495.961734][T32341] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.025746][T32341] CPU: 0 UID: 0 PID: 32341 Comm: syz.1.5949 Not tainted syzkaller #0 PREEMPT(full) [ 1496.025780][T32341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1496.025794][T32341] Call Trace: [ 1496.025803][T32341] [ 1496.025819][T32341] dump_stack_lvl+0x189/0x250 [ 1496.025850][T32341] ? __pfx____ratelimit+0x10/0x10 [ 1496.025876][T32341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.025902][T32341] ? __pfx__printk+0x10/0x10 [ 1496.025940][T32341] ? __pfx___might_resched+0x10/0x10 [ 1496.025972][T32341] ? fs_reclaim_acquire+0x7d/0x100 [ 1496.026009][T32341] should_fail_ex+0x414/0x560 [ 1496.026049][T32341] should_failslab+0xa8/0x100 [ 1496.026082][T32341] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1496.026108][T32341] ? skb_clone+0x212/0x3a0 [ 1496.026146][T32341] skb_clone+0x212/0x3a0 [ 1496.026174][T32341] ? nfnetlink_rcv+0x4ba/0x2590 [ 1496.026201][T32341] nfnetlink_rcv+0x4ec/0x2590 [ 1496.026227][T32341] ? __dev_queue_xmit+0x27b/0x3b50 [ 1496.026260][T32341] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1496.026303][T32341] ? __dev_queue_xmit+0x27b/0x3b50 [ 1496.026348][T32341] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1496.026391][T32341] ? ref_tracker_free+0x63a/0x7d0 [ 1496.026426][T32341] ? __asan_memcpy+0x40/0x70 [ 1496.026449][T32341] ? __pfx_ref_tracker_free+0x10/0x10 [ 1496.026502][T32341] ? skb_clone+0x246/0x3a0 [ 1496.026536][T32341] ? __netlink_deliver_tap+0x807/0x850 [ 1496.026561][T32341] ? netlink_deliver_tap+0x2e/0x1b0 [ 1496.026621][T32341] netlink_unicast+0x82c/0x9e0 [ 1496.026657][T32341] ? __pfx_netlink_unicast+0x10/0x10 [ 1496.026682][T32341] ? netlink_sendmsg+0x642/0xb30 [ 1496.026706][T32341] ? skb_put+0x11b/0x210 [ 1496.026737][T32341] netlink_sendmsg+0x805/0xb30 [ 1496.026776][T32341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1496.026807][T32341] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1496.026845][T32341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1496.026868][T32341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1496.026896][T32341] __sock_sendmsg+0x219/0x270 [ 1496.026935][T32341] ____sys_sendmsg+0x505/0x830 [ 1496.026972][T32341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1496.027014][T32341] ? import_iovec+0x74/0xa0 [ 1496.027047][T32341] ___sys_sendmsg+0x21f/0x2a0 [ 1496.027087][T32341] ? __pfx____sys_sendmsg+0x10/0x10 [ 1496.027166][T32341] ? __fget_files+0x2a/0x420 [ 1496.027197][T32341] ? __fget_files+0x3a0/0x420 [ 1496.027243][T32341] __x64_sys_sendmsg+0x19b/0x260 [ 1496.027276][T32341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1496.027319][T32341] ? __pfx_ksys_write+0x10/0x10 [ 1496.027344][T32341] ? rcu_is_watching+0x15/0xb0 [ 1496.027372][T32341] ? do_syscall_64+0xbe/0x3b0 [ 1496.027404][T32341] do_syscall_64+0xfa/0x3b0 [ 1496.027428][T32341] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.027452][T32341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.027474][T32341] ? clear_bhb_loop+0x60/0xb0 [ 1496.027502][T32341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.027523][T32341] RIP: 0033:0x7f6ae6d8eec9 [ 1496.027543][T32341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.027563][T32341] RSP: 002b:00007f6ae7bcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.027586][T32341] RAX: ffffffffffffffda RBX: 00007f6ae6fe5fa0 RCX: 00007f6ae6d8eec9 [ 1496.027713][T32341] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1496.027727][T32341] RBP: 00007f6ae7bcc090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.027741][T32341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.027754][T32341] R13: 00007f6ae6fe6038 R14: 00007f6ae6fe5fa0 R15: 00007ffe2260d268 [ 1496.027794][T32341] [ 1496.658355][T32363] team0: Device ipip0 is of different type [ 1496.721787][T32366] tipc: Enabled bearer , priority 0 [ 1496.865417][T32363] syzkaller0: entered promiscuous mode [ 1496.870937][T32363] syzkaller0: entered allmulticast mode [ 1496.945432][T32363] tipc: Resetting bearer [ 1496.980099][T32362] tipc: Resetting bearer [ 1497.042259][T32362] tipc: Disabling bearer [ 1497.541201][T32390] __nla_validate_parse: 9 callbacks suppressed [ 1497.541222][T32390] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1497.624740][T32378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'. [ 1497.692338][T32392] lo speed is unknown, defaulting to 1000 [ 1497.838721][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1498.104931][T32407] netlink: 'syz.3.5968': attribute type 13 has an invalid length. [ 1498.121333][T32407] netlink: 'syz.3.5968': attribute type 27 has an invalid length. [ 1498.140742][T32399] bond45: option arp_validate: invalid value (18446744073491447809) [ 1498.157901][T32399] bond45 (unregistering): Released all slaves [ 1498.229486][T32392] lo speed is unknown, defaulting to 1000 [ 1498.304587][T32418] netlink: 'syz.4.5973': attribute type 1 has an invalid length. [ 1498.354276][T32418] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5973'. [ 1498.499435][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5975'. [ 1499.322912][T32444] netlink: 'syz.1.5978': attribute type 1 has an invalid length. [ 1499.354359][T32444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5978'. [ 1499.364274][T32447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5980'. [ 1499.736422][T32455] netlink: 'syz.2.5981': attribute type 1 has an invalid length. [ 1499.820195][T32455] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1499.888846][T32464] bond26: (slave ip6erspan0): making interface the new active one [ 1499.900926][T32464] bond26: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1499.961198][T32457] bond26: option arp_validate: invalid value (18446744073491447809) [ 1499.973246][T32465] netlink: 'syz.0.5982': attribute type 13 has an invalid length. [ 1499.994021][T32457] bond26 (unregistering): Released all slaves [ 1500.253086][T32474] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1500.266406][T32474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5983'. [ 1500.514597][T32481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1500.677952][T32482] lo speed is unknown, defaulting to 1000 [ 1501.647409][T32482] lo speed is unknown, defaulting to 1000 [ 1502.521810][T32514] bond26: option arp_validate: invalid value (18446744073491447809) [ 1502.522556][T32521] netlink: 'syz.0.5997': attribute type 13 has an invalid length. [ 1502.556818][T32514] bond26 (unregistering): Released all slaves [ 1502.648425][T32524] netlink: 'syz.2.5999': attribute type 1 has an invalid length. [ 1502.700814][T32524] __nla_validate_parse: 5 callbacks suppressed [ 1502.700835][T32524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5999'. [ 1503.167094][T32541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1503.299018][T32533] bond27: option arp_validate: invalid value (18446744073491447809) [ 1503.322891][T32533] bond27 (unregistering): Released all slaves [ 1503.337260][T32544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1503.606680][T32546] netlink: 'syz.1.6004': attribute type 1 has an invalid length. [ 1503.641508][T32546] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1503.687518][T32548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6005'. [ 1504.236137][T32567] tipc: Enabling of bearer rejected, already enabled [ 1504.347791][T32573] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6007'. [ 1504.401472][T32560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6007'. [ 1504.414554][T32575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1504.451822][T32576] netlink: 'syz.0.6013': attribute type 1 has an invalid length. [ 1504.497385][T32576] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1504.934374][T32593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6019'. [ 1505.621393][T32624] netlink: 'syz.1.6026': attribute type 16 has an invalid length. [ 1505.630826][T32624] netlink: 'syz.1.6026': attribute type 17 has an invalid length. [ 1505.646813][T32624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.159417][T32645] lo speed is unknown, defaulting to 1000 [ 1506.307670][T32648] bond0: option arp_validate: invalid value (18446744073491447809) [ 1506.322308][T32648] bond0 (unregistering): Released all slaves [ 1506.494003][T32648] netlink: 'syz.4.6035': attribute type 13 has an invalid length. [ 1506.586718][T32648] netlink: 'syz.4.6035': attribute type 27 has an invalid length. [ 1506.691434][T32664] syzkaller0: entered promiscuous mode [ 1506.706026][T32664] syzkaller0: entered allmulticast mode [ 1506.712947][T32645] lo speed is unknown, defaulting to 1000 [ 1507.092628][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.102106][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.134341][T32716] bridge0: port 1(erspan0) entered blocking state [ 1508.162249][T32716] bridge0: port 1(erspan0) entered disabled state [ 1508.176864][T32716] erspan0: entered allmulticast mode [ 1508.209702][T32716] erspan0: entered promiscuous mode [ 1508.613632][T32730] __nla_validate_parse: 9 callbacks suppressed [ 1508.613655][T32730] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1508.985464][T32743] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1509.026958][T32745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6063'. [ 1509.108354][T32747] netlink: 'syz.3.6064': attribute type 21 has an invalid length. [ 1509.120475][T32747] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6064'. [ 1509.131751][T32747] netlink: 'syz.3.6064': attribute type 5 has an invalid length. [ 1509.140661][T32747] netlink: 'syz.3.6064': attribute type 6 has an invalid length. [ 1509.149291][T32747] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6064'. [ 1509.599766][T32762] bond0: option arp_validate: invalid value (18446744073491447809) [ 1509.627541][ T305] netlink: 'syz.4.6070': attribute type 13 has an invalid length. [ 1509.639647][T32762] bond0 (unregistering): Released all slaves [ 1509.672025][ T305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1509.738439][ T303] lo speed is unknown, defaulting to 1000 [ 1509.994103][ T303] lo speed is unknown, defaulting to 1000 [ 1510.220887][ T320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6076'. [ 1510.353941][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1510.504714][ T322] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1510.637612][ T316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1511.189422][ T334] netlink: zone id is out of range [ 1511.232126][ T338] netlink: 'syz.3.6082': attribute type 11 has an invalid length. [ 1511.241530][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1511.276261][ T334] netlink: zone id is out of range [ 1511.281444][ T334] netlink: zone id is out of range [ 1511.322097][ T334] netlink: zone id is out of range [ 1511.335060][ T334] netlink: zone id is out of range [ 1511.364201][ T334] netlink: zone id is out of range [ 1511.381851][ T334] netlink: zone id is out of range [ 1511.391175][ T334] netlink: zone id is out of range [ 1511.420721][ T334] netlink: zone id is out of range [ 1511.430873][ T334] netlink: zone id is out of range [ 1511.656876][ T350] netlink: 'syz.0.6085': attribute type 1 has an invalid length. [ 1511.659515][ T345] netlink: 'syz.1.6084': attribute type 13 has an invalid length. [ 1511.668338][ T350] netlink: 'syz.0.6085': attribute type 4 has an invalid length. [ 1511.694691][ T343] bond29: option arp_validate: invalid value (18446744073491447809) [ 1511.723021][ T343] bond29 (unregistering): Released all slaves [ 1511.776721][ T349] netlink: 'syz.4.6086': attribute type 13 has an invalid length. [ 1511.785901][ T349] netlink: 'syz.4.6086': attribute type 17 has an invalid length. [ 1512.428570][ T366] can: request_module (can-proto-0) failed. [ 1514.145062][ T5867] syz_tun (unregistering): left allmulticast mode [ 1514.224417][ T393] team0: Port device macvlan2 removed [ 1514.588901][ T12] erspan0: left allmulticast mode [ 1514.595020][ T12] erspan0: left promiscuous mode [ 1514.601817][ T12] bridge0: port 1(erspan0) entered disabled state [ 1514.634708][ T12] tipc: Resetting bearer [ 1514.695892][ T12] bond0 (unregistering): (slave ip6erspan0): Releasing active interface [ 1514.856502][ T12] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1514.865179][ T12] gretap1 (unregistering): left promiscuous mode [ 1514.871563][ T12] gretap1 (unregistering): left allmulticast mode [ 1514.896307][ T12] bond9 (unregistering): (slave gretap2): Releasing active interface [ 1515.266000][ T12] tipc: Disabling bearer [ 1516.157191][ T12] bond1 (unregistering): Released all slaves [ 1516.267061][ T12] bond2 (unregistering): Released all slaves [ 1516.380065][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 1516.389343][ T12] bond3 (unregistering): Released all slaves [ 1516.542218][ T12] bond0 (unregistering): Released all slaves [ 1516.665261][ T12] bond4 (unregistering): Released all slaves [ 1516.782340][ T12] bond5 (unregistering): Released all slaves [ 1516.891828][ T12] bond6 (unregistering): Released all slaves [ 1517.001491][ T12] bond7 (unregistering): Released all slaves [ 1517.109458][ T12] bond8 (unregistering): (slave wlan0): Releasing active interface [ 1517.118851][ T12] bond8 (unregistering): Released all slaves [ 1517.231683][ T12] bond9 (unregistering): (slave veth11): Releasing active interface [ 1517.240909][ T12] bond9 (unregistering): Released all slaves [ 1517.349993][ T12] bond10 (unregistering): Released all slaves [ 1517.460097][ T12] bond11 (unregistering): Released all slaves [ 1517.565557][ T12] bond12 (unregistering): Released all slaves [ 1517.670335][ T12] bond13 (unregistering): Released all slaves [ 1517.776544][ T12] bond14 (unregistering): Released all slaves [ 1517.882880][ T12] bond15 (unregistering): Released all slaves [ 1517.989210][ T12] bond16 (unregistering): Released all slaves [ 1518.092070][ T12] bond17 (unregistering): Released all slaves [ 1518.197581][ T12] bond18 (unregistering): Released all slaves [ 1518.304462][ T12] bond19 (unregistering): Released all slaves [ 1518.410545][ T12] bond20 (unregistering): Released all slaves [ 1518.514208][ T12] bond21 (unregistering): Released all slaves [ 1518.626557][ T12] bond22 (unregistering): Released all slaves [ 1518.736664][ T12] bond23 (unregistering): Released all slaves [ 1518.844357][ T12] bond24 (unregistering): Released all slaves [ 1518.955828][ T12] bond25 (unregistering): Released all slaves [ 1519.064957][ T12] bond26 (unregistering): Released all slaves [ 1519.178423][ T12] bond27 (unregistering): Released all slaves [ 1519.287059][ T12] bond28 (unregistering): Released all slaves [ 1519.399373][ T12] bond29 (unregistering): Released all slaves [ 1519.505011][ T12] bond30 (unregistering): Released all slaves [ 1519.615679][ T12] bond31 (unregistering): Released all slaves [ 1519.726742][ T12] bond32 (unregistering): Released all slaves [ 1519.842012][ T12] bond33 (unregistering): Released all slaves [ 1519.953102][ T12] bond34 (unregistering): Released all slaves [ 1520.061158][ T12] bond35 (unregistering): Released all slaves [ 1520.171203][ T12] bond36 (unregistering): Released all slaves [ 1520.279187][ T12] bond37 (unregistering): Released all slaves [ 1520.390669][ T12] bond38 (unregistering): Released all slaves [ 1520.498235][ T12] bond39 (unregistering): Released all slaves [ 1520.612678][ T12] bond40 (unregistering): Released all slaves [ 1520.721748][ T12] bond41 (unregistering): Released all slaves [ 1520.826871][ T12] bond42 (unregistering): Released all slaves [ 1520.936580][ T12] bond43 (unregistering): Released all slaves [ 1521.041052][ T12] bond44 (unregistering): Released all slaves [ 1521.478991][ T12] tipc: Disabling bearer [ 1521.494322][ T12] tipc: Left network mode [ 1521.516252][ T12] IPVS: stopping backup sync thread 13576 ... [ 1521.725424][ T12] hsr_slave_0: left promiscuous mode [ 1521.732241][ T12] hsr_slave_1: left promiscuous mode [ 1523.163655][ T12] ------------[ cut here ]------------ [ 1523.169184][ T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100 [ 1523.179742][ T12] Modules linked in: [ 1523.184623][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1523.194500][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1523.205009][ T12] Workqueue: netns cleanup_net [ 1523.209855][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100 [ 1523.216473][ T12] Code: 78 43 dd f7 4b 83 3c 2c 00 75 19 e8 dc c1 79 f7 49 81 fd f8 07 00 00 74 1d e8 ce c1 79 f7 49 83 c5 08 eb c9 e8 c3 c1 79 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6 [ 1523.236630][ T12] RSP: 0018:ffffc900001178b0 EFLAGS: 00010293 [ 1523.242744][ T12] RAX: ffffffff8a45ecfd RBX: ffff8880321a4000 RCX: ffff88801ce9da00 [ 1523.251423][ T12] RDX: 0000000000000000 RSI: ffffffff8d9b22b6 RDI: ffff8880321a4000 [ 1523.259933][ T12] RBP: ffffc900001179b0 R08: