last executing test programs: 3.432464875s ago: executing program 1 (id=13622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$alg(0x26, 0x5, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00810000"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.20856752s ago: executing program 1 (id=13625): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) 2.970244389s ago: executing program 1 (id=13628): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000800000002"], 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0186dd602e5cea00683c00fe8000000000000000000000000000bbff0200000000000000000000001f00013203000000000000c910fe8800000000000000000000000005010004262dffae000000000048907803000000010000003baf3f40e7560eaa00e40f74235dcbe4cb1f5ec052d732ff7edcf63d0322223af76b456f051e3de00c45257d795b1ddbed3330afcaf01b26"], 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x2, 0x4, 0x2}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a"], 0x26}}, 0x0) 2.824164726s ago: executing program 1 (id=13629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x6c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x451e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8044) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000e00)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @initial, @device_b, @random="f1ef52e74542", {0x5, 0x4}}, @random="3ab4a62da1bc853ff78a41e7c84c66be3bda1641c2661f5a5a3e702d1d8796fe2782ab979df38f2d52d4a6f7c423e19b19e0934d3af87eba7671bea81195412ace048218bd8e352cdbe0927b0573bb3e432949b7ce4e4038693f85dccede7e072db0463e587aeb23587084ca39d5b42d8c972887837081df37c71565cb4ceb2feceac90cca9d7e4a4689012e44e4bb677981b1a0dd6c88e607bc5ab7999e4e38dd4c7bd5bf51af313386987fc56b8255f290c5395cd7ff101a0f8166fad4ce09404ccfc703af45318d0f005ef6b910aa2e9f1a88d1f7ae9f431ca0c6c68378055fdb987418d621fcec0cb67d3a73c0be04f5dbcab77ff811b861349f74f07f9dbf91a242887198a61f2f0a405578202fbe07e198d332e6d1b1363f1c09e9be53c383574f7afaeed77859db2841b2dafeabf68deba00c8b3c31d274270903ad1ed789445d927387b654220446737656fa2d7eb68c0ea236186a6aec956c9813c5583cc236f2a904c1ed0e05f73e707c335f3dbda028425ae560904fb371b3e3882b51068d237c06716f1f9ee81164f64eae5d8a22b8830a787ebb54df566f29a964e51a5d5a256416b26e0973861b9a1ccb125a24de6fb2886da0f54bfc62c4a28dd7f68d7dd7917730ec2362146f6bf1a174782dfe626cdf2ded11a2a65757ff9fbe2438b336666666927ef2f341780d7356c9f7628895eadafa3b40b42e20fa58261503e4826b8f009662c464e5b91194db8be744c284acdec955d7b366c6f75e5ddd3a34c5dc587e4e15857a6d72beda3e371e362b0c842e214d9703e3965e3700dcd040ccb4932e21255c6d4b75253fee388afb2534681ef0ef8458fcd690afd4ab584894e12ea2ab51b5e2d3574e9f6f7d849c11045eff5d3b237fd56ea3b60bd45a93b86facb9078813d6524ffc68be9f4186a2367de32dc8af7d538fc453307648b1edb0e65911365a5211ae6dd2ad9de9ab9a5dce56384ad7510522c8cc1250b29eca920bf8f26a2f20b1905039b65f7afefeb7c93f4551efaf009e58db6a8043ca7dacb3692e1b558661bfd081515f02a43b1d6e22c14a1891417a565aef2c894811bac971727900ab3784128a1d6071dbe492869f81fc5d9832effa5d63a28f968af412bbde284c90c311f59679e5ae32e36420751e15dc09f372d29972b250f55828f891e49e880bc4a29b5413cb945039de6df562c0994cece834b7e231c1fb94cb5398293144fd782b9598906c7e8b2e659264e2c85a9ea0261ad1f7bef87f8ae97db7da867dd55ad31a9943f675671ef5a17e2e2e911784712685ad1c31b40e588b9fe7733b25d44dbc420abc85eae7061a5045a6a3f265d607a995e48f92af5b4adc5c308847cd3882058ab279f5f8aff39b47a5dce20339bba2404383f6047026e8dd2d6353a54e4db5668d38c7d5f52a6ebd0e72c5b00b24b69caeb9270952d0dc2b35d1332c5d4568b5130bf8fb9a276967bd766370d912ea81aade496d5bc273c3e410cc0323906ed690a1f1026921ffcd81cea3e8c3b1b4bbb199e49949cbb2f411081e8101e629636915d98a4202f3cc2552b72bbefac26a17b016bbc9de035826247f06fd7d1042c976838041a91ded00e4abc3708af275cba1446787e4e17a6742c8115f00580915f4238b0f179e057289616cb90b1b761337411cb224c2a38a9cdd8ca9b115be371757e877777c8e6ccb37fc65fc91ee620419cc15a8c6a2fb897649b47676271a80a1970e5ba8177fb05db670ee8ddae4463264a569fa245b7c2f3200a27a4182ca252d825353b08dabb6e26aa17d2bae3e2677bb4f3ca4186183741dded253855a5484d7a908270386d655f42a58b868b2d68b069219d496de27f3c013c84afba9dc00369a07c4b293116b5cfffbef195b1e9db6d2501b23082f63b8450213bd56d402076b8dfd0ca24a98d75bd555ecb2279354b3756ccdd0893c3e481722dbf394a8426860ffb5bf566f005be0b3d25f007793fc"}, 0x5a0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 2.628799394s ago: executing program 2 (id=13633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000080)=@udp, 0x19e6911585393082}, 0x20) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="00014499", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="1c002d80050004000000000008000200030000000500010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x40000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @empty, 0x4}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8002, 0xa, 0xa4}, &(0x7f00000000c0)=0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "5ff7"}]}], {0x14}}, 0x88}}, 0x4008044) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 2.397618475s ago: executing program 0 (id=13635): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r3, 0x0, 0x20004084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) write$tun(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2c081, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000000300)) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'wlan1\x00', 0x1000}) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) 2.23788829s ago: executing program 2 (id=13637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r11, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r12, r9, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x421, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, 0x10841, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x90) sendto$inet6(r3, &(0x7f0000000140)='\x00', 0x0, 0x4000000, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @private2, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) listen(r2, 0x0) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r13, 0x400442c9, &(0x7f0000000040)={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) getsockopt$sock_timeval(r1, 0x1, 0x57, 0x0, &(0x7f0000000340)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f5c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 2.010048225s ago: executing program 2 (id=13638): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 1.860345958s ago: executing program 2 (id=13639): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, 0x0, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f185f760a91e3e0b1f990d3b03a5517644baa879e267c0a69e1c5e25000d9a26fb228b4a847e4fafaadca19ca9c25d3f8bfc3d59fc6ddb5e80a5b0cc7bf233d9a137845aac398778c8860373c7892df743fbbc545053fd7d5c5113fafd59639bf83c76b65bca40c4c239cfc7ede32d32f49e02c2e20392a1e02ec58cc56671dc80ee432974f510712598a16f", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf2506000000080006001a7d0000080006000100000008000600011b000004000180"], 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0xfe4f907a138f28a) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) getsockopt(r3, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) write$cgroup_devices(r6, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r6, 0xec1b3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x26, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xacd, 0x0, 0x0, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @jmp={0x5, 0x0, 0x8, 0x2, 0xb, 0x80, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x0, 0x5, 0x6, 0x6184968b8cc8e096, 0x1}, @map_idx={0x18, 0xa}, @generic={0x0, 0xd, 0x1, 0x8, 0xb0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x4b, &(0x7f0000000380)=""/75, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x2, 0x3, 0xfffffffb}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r5, r5, r5, r5, 0x1, r5, r5], &(0x7f0000000800)=[{0x2, 0x5, 0x1}, {0x5, 0x5, 0xe, 0x2}, {0x2, 0x5, 0x9, 0x4}, {0x4, 0x3, 0x7, 0x7}, {0x1, 0x4, 0x1, 0x9}, {0x4, 0x5, 0xb, 0xb}, {0x0, 0x1, 0x4, 0x1}, {0x3, 0x1, 0x8}, {0x4, 0x4, 0x3, 0xf}, {0x3, 0x5, 0xe, 0xc}], 0x10, 0x10001}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.774018559s ago: executing program 0 (id=13641): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1600}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x3e, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x40008c5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000b00)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x6}}], 0x1, 0x8094) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000200000000000000000000000001f00"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000400000004060000090000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x6ffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0xffffff12, 0x9, 0x3}]}}]}, 0x55}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) close(r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r9, 0x0, 0xfffffffffffffff4}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r2, &(0x7f0000000f00)="5e38200088bc3ed954447c1da236380b3647a698c7b3fe4c879243b4c01df276fa1adcf084bb15276b7b98b8de2eee1384ba6420ad3282e9579fc751e73ffe6214a83b7abb692695257bdfbc8ec49ee2755ad28d79ce7a9155a452cfc32c19378853b47f595935ce5ce45dabf2452e668eeba1d77a1b3ad277ceb4af43b9a7ad04e01a46d3ac", &(0x7f0000000300)=""/121}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000900)=ANY=[@ANYBLOB="0e8000000004008000000000060001070f5f2c8d75979b8ad9a266d523bc54eef5343bb0b1c42f183fecf86509a2d1296522a5586c6a3b62d7ecd34e2713017ee4cf81d1f4ffcb26b5228dbfb62a60161a85ca974e718ca473829fa2542df0a009a98cf0f79e38a96709eb5d9736667b3666bf76d9142f3fb6261af44541cac047d35fed6d35c7500c04ba017c4f4af3c44c1bbfbb117480acd20c503f7c147cba847c3cf2c7fdca4b606ac5a267612985b8e034042a5046d030164aebb1"], 0xbe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES32=r10, @ANYRES16=0x0], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000180)) 1.716562298s ago: executing program 3 (id=13642): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd23, 0x25dfdbfd, {0x2, 0x20, 0x28, 0xcb, r3}, [@IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.43028965s ago: executing program 0 (id=13644): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000dc0)=""/150, 0x96}], 0x8}, 0x101}], 0x4, 0x40010022, 0x0) 1.33871441s ago: executing program 3 (id=13646): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 1.278514953s ago: executing program 0 (id=13647): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a3000000000090002"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x5, 0xfffeffff, 0x10, @remote, @remote, 0x7801, 0x10, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r3, 0x40, 0x8, 0xb, 0xfffff8a2, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x67, 0x0, 0x17, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xc, [0x9]}, @lsrr={0x83, 0x1b, 0x8c, [@empty, @rand_addr=0x64010101, @remote, @broadcast, @multicast2, @multicast2]}, @ssrr={0x89, 0x7, 0x30, [@rand_addr=0x64010100]}, @cipso={0x86, 0x11, 0x0, [{0x2, 0xb, "03774d25cb07cdbe50"}]}, @end, @rr={0x7, 0x13, 0xba, [@remote, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}]}, @noop, @noop, @generic={0x94, 0xb, "8ddc5be1974eec55fb"}, @ra={0x94, 0x4}]}}}}}) 1.270175336s ago: executing program 1 (id=13648): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000200000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470580800000900010073797a3000"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x5, 0xfffeffff, 0x10, @remote, @remote, 0x7801, 0x10, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r3, 0x40, 0x8, 0xb, 0xfffff8a2, {{0x1d, 0x4, 0x1, 0x0, 0x74, 0x67, 0x0, 0x17, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xc, [0x9]}, @lsrr={0x83, 0x1b, 0x8c, [@empty, @rand_addr=0x64010101, @remote, @broadcast, @multicast2, @multicast2]}, @ssrr={0x89, 0x7, 0x30, [@rand_addr=0x64010100]}, @cipso={0x86, 0x11, 0x0, [{0x2, 0xb, "03774d25cb07cdbe50"}]}, @end, @rr={0x7, 0x13, 0xba, [@remote, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}]}, @noop, @noop, @generic={0x94, 0xb, "8ddc5be1974eec55fb"}, @ra={0x94, 0x4}]}}}}}) 1.188131538s ago: executing program 3 (id=13650): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1, 0x0, 0xd1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x24040004) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4c24, 0x3, @local, 0x2000009}, 0x1c) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r6, 0x204) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8000000000000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x100000000000, 0x7fffff7c}, 0x0, 0x0) write(r2, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 962.005228ms ago: executing program 4 (id=13652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@rose, @remote, @netrom, @remote, @remote, @rose, @netrom, @null]}, &(0x7f0000000040)=0x48) recvfrom$ax25(r1, &(0x7f0000000340)=""/198, 0xc6, 0x10000, &(0x7f0000000240)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="4c00000014006b03000000d86e6c1d001001250002f70f2c000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4fd9e96811baa33c5d74518e3f6", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) close(r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000200000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) (async) bind$inet(r2, &(0x7f0000000540)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 958.918728ms ago: executing program 3 (id=13653): unshare(0x6020400) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') unshare(0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x1d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={r5, 0x5, 0x20}, &(0x7f00000001c0)=0x18) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000840000000000000072"], 0x18}, 0x41) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098", 0x38}, {&(0x7f00000002c0)="016e530b0e63ae07", 0x8}], 0x2, 0x0, 0x0, 0x40005}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) unshare(0x40000) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970006d03c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0xb50, 0x4, 0x8, 0x8000000000000000, 0x40000002, 0x4, 0x2, 0x5]}) 898.235646ms ago: executing program 4 (id=13654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001c80)=ANY=[@ANYBLOB="1802000000040000000000000000000085000000360000009500000000000000cfb0d7d47deff59eaa494ff3ba9639923bb9fe"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c1", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6", 0x1}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xab}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0xfd}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) accept(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x8) accept4(r2, 0x0, 0x0, 0x80000) 892.365363ms ago: executing program 2 (id=13655): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x584}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x4000000, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 717.67254ms ago: executing program 2 (id=13656): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000180)="560003000000", 0x6) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close(0x3) mmap(&(0x7f00003e4000/0x3000)=nil, 0x3000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x6e, 0x7, 0x7fff, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x40, 0x7788af31, 0x5}}) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xfc, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x90}, 0x8000) socket(0x10, 0x803, 0x0) 716.965984ms ago: executing program 3 (id=13657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000dc0)=""/150, 0x96}], 0x8}, 0x101}], 0x4, 0x40010022, 0x0) 675.880424ms ago: executing program 3 (id=13658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)={0x6c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x451e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8044) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000e00)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @initial, @device_b, @random="f1ef52e74542", {0x5, 0x4}}, @random="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"}, 0x5a0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 587.646233ms ago: executing program 4 (id=13659): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="64000000000101806600018008000100e000000108000200e00000010c000280050001"], 0x64}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 378.042411ms ago: executing program 4 (id=13660): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 366.137704ms ago: executing program 0 (id=13661): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 291.815167ms ago: executing program 1 (id=13662): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000f20000000000000000004fd9cd80dc4aa693f31e8ceabc2935e2a9325aa38a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="503b697d95ac23edc1a662f2d22d"], 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 234.496256ms ago: executing program 4 (id=13663): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000340)="7a2b893ebb1b769ba5e7e1d6893a9ca04745f3b4aa79bd5fcf1331a10cbb80abd10cd8b7755b5e859983205189871ef9220ab4a6f6bb93ac55791c7fd566e839b69645cd0b431afc7b22bfbabf3389d9b7b062ee15e9f6e91dd7dd894510bee58a1750e59b376542eb76865ec2d6b6f55980ed8798cf441ca2a6896eb2c34b38dab47b258937edc2fc6b90c86ca2638a39546e25be6912570f1aa23d42d64e1bf676ed75cd9924b4ed2320c5", 0xac) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x4, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x8000000000000000, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x80000, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newchain={0x45c, 0x64, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0x10, 0x3}, {0xa, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_route={{0xa}, {0x414, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0xffe0}}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x4, 0x1, 0xfffffffc, 0x2, 0x1, 0x4, 0x5, 0x10000, 0x7, 0x7081, 0xce3, 0x3, 0xd4, 0xfffffffb, 0xffff, 0xbf, 0x1000, 0x101, 0x5, 0x0, 0x1, 0xb93, 0x3, 0x5a1, 0x5, 0x6, 0x5, 0x7, 0x0, 0x2, 0x0, 0x6, 0x6, 0x0, 0x8, 0x4, 0xfffffffb, 0xc6a1, 0xc, 0x7f, 0x6, 0x4, 0xfff, 0x10001, 0x4, 0xd8, 0x6, 0xd96, 0x1, 0x4, 0x1a4c, 0x4b5200, 0x769, 0x49, 0x200, 0xfffffff8, 0x7, 0x3, 0x3, 0x7, 0x9, 0xfffff49b, 0x7, 0xeeba, 0x8, 0x6, 0x40, 0x8, 0x7, 0xffffffff, 0x401, 0x2, 0x2, 0x9, 0x3, 0x8f, 0x1, 0x1, 0xbf85, 0x5, 0x4, 0x5, 0x3, 0x7, 0x1, 0xb94, 0x4, 0x6, 0x6, 0x8, 0x6, 0x6, 0x5, 0x3, 0x800, 0x1007, 0xd8c, 0x4, 0x8f, 0x7, 0x0, 0x3, 0x7, 0x3, 0x7, 0x4, 0x8, 0x1, 0x5, 0x8001, 0x800, 0x9, 0x4, 0x120000, 0x0, 0x83, 0xffff, 0x34, 0x5, 0x6b2, 0x3, 0x6, 0xb6e00000, 0x5, 0x9, 0x400000, 0x5, 0x3, 0x8001, 0x8, 0x9, 0xc, 0x20000, 0x3, 0x7, 0xff, 0x1, 0x3, 0x9, 0x5, 0x7, 0x18, 0x2, 0xb7, 0x4, 0xc, 0x2, 0x3, 0x2, 0x4, 0x8, 0x0, 0x7, 0xfffffff8, 0x4, 0x3, 0x7fff, 0x13, 0x692, 0x7ff, 0x78, 0x6, 0x1, 0xa, 0x43c, 0xac79, 0x5, 0x8, 0xfffffffc, 0x9, 0x8, 0xe, 0x9, 0x2, 0x101, 0x7dbb, 0x3f400000, 0x9, 0x9, 0x3, 0x3, 0x24, 0x89d, 0x98c, 0x4, 0x7, 0x7fff, 0x10000, 0x3, 0x1, 0x3, 0x2, 0x7ff, 0x2, 0x3, 0x4, 0x6573, 0x40000a, 0x2, 0x101, 0x7, 0x101, 0x9, 0xe, 0xe8, 0x9, 0x5, 0x3, 0x9, 0x1, 0x8001, 0x10001, 0x9, 0x1, 0xfff, 0x40, 0x465af13e, 0x1c8, 0xe4ad, 0x9, 0x4982, 0x4, 0x9, 0x8, 0x8, 0xf, 0xfffff64c, 0x8, 0x4, 0x3, 0x2, 0x9, 0x81, 0x0, 0x4, 0x1, 0xb, 0x6, 0x8, 0x8, 0x8, 0x3, 0x2, 0x80, 0xffff, 0x40, 0x7, 0x90a1, 0x1, 0x9, 0x4, 0xff7, 0x10001, 0x582, 0x4]}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x8000}]}, 0x45c}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 62.096298ms ago: executing program 4 (id=13664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x24000001) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x24000001) sendmsg$inet_sctp(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="833a497e873d9d70c2916581aaa166d740319f1e281a6388a909b08cbea24c8061f30fb360c2e8aa41be172a8d9f4712f499fca24829297998d1609e78e6e7c97bcbee272e01cabb4cf6a00dbdcd95ea8672f62ec2a1a3b667bae1aea9a42d14e984f6ac1e61a6298430045549cb160c8ecc9e0a1e2685988029f2e07059d2571312914a330d1be5ae8b5f8728d7fa6f2b13af8497f0f1c644cfa84a9794c91fca3816227a9a8a640c88a77e4c826c525a568930cb2cc4cc402a7866a5c9aeb45b6026cd11a6c9af8d780c74f184028d4972afbea9a6d51c2bdc56154c5acade7f533adb0cbfa202c92dbf", 0xeb}, {&(0x7f0000000800)="af36fee05d4312a37761ae51c9699b9f1cd4c83fb4e31851f8e835b4070073aeb3339ba2fa5a20faf3a83a2979617c28ca472a9f114923d01d4a5b25ca83c080e6751d7d2b6f38540600000006ec43e57535195af86bc845c8b90eb7942eaa7253bbe50d9853d4588f6bedade537cc08699b72f45bb901793f1de392b675386e6fb4905449e48091ace33f54a58661a1d56b5cc135d401d1bd3d1912cb72710f2802ccc79488ea3f2cc3665fcfd2c4682a00c49ed71b6694", 0xb8}, {&(0x7f0000000040)="7fd141d7ade63cb2a27b39acc3847a49b06a4e5eb7b3791e485c505f1ba923dde1cc40910538745838", 0x29}, {&(0x7f0000000580)="ee12510f1c18d76a7f985864e6fa69c2728a62ea429c9d3dcc7ff32cc62fad4b500b249fdc72e846416dbadf37b5bb05bc4b350d9d47f8ee6715ba20a415eaf4cfaf24f67ee67a283a9fc1e3c98a5b8af9401dbfe23223a8913263e13fc3d111804f3d54383a031e771c1f8a99fa41a4191878d358ab7af233bb3102d7d9b318c049b8874739279d59e6f6678226a6b3ed5bfb3fd8d86032086b4fca510aafaff077fc29ccabc94d4d78e374a77952d725d2bb9e125621301c2f698420255af2e6c12ef86c53461b47520fb3cf6fcfb43f1f5717da11f5002d7f1267e26d6f", 0xdf}], 0x4, 0x0, 0x0, 0x20040000}, 0x1) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="833a497e873d9d70c2916581aaa166d740319f1e281a6388a909b08cbea24c8061f30fb360c2e8aa41be172a8d9f4712f499fca24829297998d1609e78e6e7c97bcbee272e01cabb4cf6a00dbdcd95ea8672f62ec2a1a3b667bae1aea9a42d14e984f6ac1e61a6298430045549cb160c8ecc9e0a1e2685988029f2e07059d2571312914a330d1be5ae8b5f8728d7fa6f2b13af8497f0f1c644cfa84a9794c91fca3816227a9a8a640c88a77e4c826c525a568930cb2cc4cc402a7866a5c9aeb45b6026cd11a6c9af8d780c74f184028d4972afbea9a6d51c2bdc56154c5acade7f533adb0cbfa202c92dbf", 0xeb}, {&(0x7f0000000800)="af36fee05d4312a37761ae51c9699b9f1cd4c83fb4e31851f8e835b4070073aeb3339ba2fa5a20faf3a83a2979617c28ca472a9f114923d01d4a5b25ca83c080e6751d7d2b6f38540600000006ec43e57535195af86bc845c8b90eb7942eaa7253bbe50d9853d4588f6bedade537cc08699b72f45bb901793f1de392b675386e6fb4905449e48091ace33f54a58661a1d56b5cc135d401d1bd3d1912cb72710f2802ccc79488ea3f2cc3665fcfd2c4682a00c49ed71b6694", 0xb8}, {&(0x7f0000000040)="7fd141d7ade63cb2a27b39acc3847a49b06a4e5eb7b3791e485c505f1ba923dde1cc40910538745838", 0x29}, {&(0x7f0000000580)="ee12510f1c18d76a7f985864e6fa69c2728a62ea429c9d3dcc7ff32cc62fad4b500b249fdc72e846416dbadf37b5bb05bc4b350d9d47f8ee6715ba20a415eaf4cfaf24f67ee67a283a9fc1e3c98a5b8af9401dbfe23223a8913263e13fc3d111804f3d54383a031e771c1f8a99fa41a4191878d358ab7af233bb3102d7d9b318c049b8874739279d59e6f6678226a6b3ed5bfb3fd8d86032086b4fca510aafaff077fc29ccabc94d4d78e374a77952d725d2bb9e125621301c2f698420255af2e6c12ef86c53461b47520fb3cf6fcfb43f1f5717da11f5002d7f1267e26d6f", 0xdf}], 0x4, 0x0, 0x0, 0x20040000}, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x10) 0s ago: executing program 0 (id=13665): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001180)={&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000840000000500000030000000ff0f00001800"], 0x30, 0x810}, 0x4000040) (fail_nth: 26) kernel console output (not intermixed with test programs): : 000000000000000a [ 1669.297533][T19036] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.297548][T19036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.297562][T19036] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1669.297600][T19036] [ 1669.806621][T19050] rdma_rxe: rxe_newlink: failed to add lo [ 1670.049788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1670.113703][T19065] netlink: 'syz.3.12661': attribute type 1 has an invalid length. [ 1670.274642][T19077] __nla_validate_parse: 1 callbacks suppressed [ 1670.274665][T19077] netlink: 292 bytes leftover after parsing attributes in process `syz.0.12666'. [ 1670.284164][T19079] netlink: 51 bytes leftover after parsing attributes in process `syz.4.12664'. [ 1670.572242][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12671'. [ 1670.732110][T19093] FAULT_INJECTION: forcing a failure. [ 1670.732110][T19093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.763280][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12676'. [ 1670.787139][T19093] CPU: 1 UID: 0 PID: 19093 Comm: syz.3.12674 Not tainted syzkaller #0 PREEMPT(full) [ 1670.787170][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1670.787183][T19093] Call Trace: [ 1670.787192][T19093] [ 1670.787202][T19093] dump_stack_lvl+0x189/0x250 [ 1670.787231][T19093] ? __pfx____ratelimit+0x10/0x10 [ 1670.787255][T19093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1670.787280][T19093] ? __pfx__printk+0x10/0x10 [ 1670.787310][T19093] ? __might_fault+0xb0/0x130 [ 1670.787350][T19093] should_fail_ex+0x414/0x560 [ 1670.787387][T19093] _copy_from_user+0x2d/0xb0 [ 1670.787420][T19093] ___sys_recvmsg+0x12e/0x510 [ 1670.787457][T19093] ? __pfx____sys_recvmsg+0x10/0x10 [ 1670.787535][T19093] ? __might_fault+0xb0/0x130 [ 1670.787567][T19093] do_recvmmsg+0x307/0x770 [ 1670.787605][T19093] ? __pfx_do_recvmmsg+0x10/0x10 [ 1670.787647][T19093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1670.787692][T19093] __x64_sys_recvmmsg+0x190/0x240 [ 1670.787743][T19093] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1670.787771][T19093] ? rcu_is_watching+0x15/0xb0 [ 1670.787798][T19093] ? do_syscall_64+0xbe/0x3b0 [ 1670.787829][T19093] do_syscall_64+0xfa/0x3b0 [ 1670.787853][T19093] ? lockdep_hardirqs_on+0x9c/0x150 [ 1670.787876][T19093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.787899][T19093] ? clear_bhb_loop+0x60/0xb0 [ 1670.787927][T19093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.787948][T19093] RIP: 0033:0x7fcb5fd8eec9 [ 1670.787968][T19093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1670.787988][T19093] RSP: 002b:00007fcb60c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1670.788011][T19093] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8eec9 [ 1670.788028][T19093] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000004 [ 1670.788043][T19093] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.788056][T19093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.788069][T19093] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1670.788114][T19093] [ 1671.089887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1671.191103][T19095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12673'. [ 1671.203182][T19095] netlink: 'syz.2.12673': attribute type 10 has an invalid length. [ 1671.451224][T19122] rdma_rxe: rxe_newlink: failed to add lo [ 1671.740340][T19134] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12685'. [ 1671.987354][T19142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12687'. [ 1672.071759][ T30] audit: type=1800 audit(1759244220.832:87): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12682" name="memory.events" dev="tmpfs" ino=13196 res=0 errno=0 [ 1672.129825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1672.330487][T19151] lo speed is unknown, defaulting to 1000 [ 1672.344886][T19151] wg1 speed is unknown, defaulting to 1000 [ 1672.391507][T19151] lo speed is unknown, defaulting to 1000 [ 1672.412479][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12693'. [ 1672.845781][T19166] lo speed is unknown, defaulting to 1000 [ 1672.884660][T19166] wg1 speed is unknown, defaulting to 1000 [ 1672.902630][T19166] lo speed is unknown, defaulting to 1000 [ 1673.169914][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1673.457435][T19196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12701'. [ 1673.485996][T19194] lo speed is unknown, defaulting to 1000 [ 1673.501986][T19194] wg1 speed is unknown, defaulting to 1000 [ 1673.526419][T19194] lo speed is unknown, defaulting to 1000 [ 1673.670398][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12703'. [ 1673.841493][T19199] lo speed is unknown, defaulting to 1000 [ 1673.947010][T19199] wg1 speed is unknown, defaulting to 1000 [ 1673.948516][T19207] lo speed is unknown, defaulting to 1000 [ 1674.050946][T19199] lo speed is unknown, defaulting to 1000 [ 1674.182673][T19207] wg1 speed is unknown, defaulting to 1000 [ 1674.209795][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1674.245786][T19207] lo speed is unknown, defaulting to 1000 [ 1674.256545][T19223] rdma_rxe: rxe_newlink: failed to add lo [ 1674.870664][T19237] FAULT_INJECTION: forcing a failure. [ 1674.870664][T19237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.960333][T19237] CPU: 0 UID: 0 PID: 19237 Comm: syz.2.12710 Not tainted syzkaller #0 PREEMPT(full) [ 1674.960362][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1674.960376][T19237] Call Trace: [ 1674.960385][T19237] [ 1674.960396][T19237] dump_stack_lvl+0x189/0x250 [ 1674.960428][T19237] ? __pfx____ratelimit+0x10/0x10 [ 1674.960453][T19237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1674.960476][T19237] ? __pfx__printk+0x10/0x10 [ 1674.960503][T19237] ? __might_fault+0xb0/0x130 [ 1674.960541][T19237] should_fail_ex+0x414/0x560 [ 1674.960575][T19237] _copy_from_iter+0x1de/0x1790 [ 1674.960605][T19237] ? rcu_is_watching+0x15/0xb0 [ 1674.960627][T19237] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1674.960656][T19237] ? __pfx__copy_from_iter+0x10/0x10 [ 1674.960681][T19237] ? __build_skb_around+0x257/0x3e0 [ 1674.960709][T19237] ? netlink_sendmsg+0x642/0xb30 [ 1674.960731][T19237] ? skb_put+0x11b/0x210 [ 1674.960759][T19237] netlink_sendmsg+0x6b2/0xb30 [ 1674.960791][T19237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1674.960829][T19237] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1674.960864][T19237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1674.960885][T19237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1674.960910][T19237] __sock_sendmsg+0x21c/0x270 [ 1674.960945][T19237] ____sys_sendmsg+0x505/0x830 [ 1674.960981][T19237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1674.961021][T19237] ? import_iovec+0x74/0xa0 [ 1674.961052][T19237] ___sys_sendmsg+0x21f/0x2a0 [ 1674.961081][T19237] ? __pfx____sys_sendmsg+0x10/0x10 [ 1674.961141][T19237] ? __fget_files+0x2a/0x420 [ 1674.961171][T19237] ? __fget_files+0x3a0/0x420 [ 1674.961208][T19237] __x64_sys_sendmsg+0x19b/0x260 [ 1674.961237][T19237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1674.961277][T19237] ? __pfx_ksys_write+0x10/0x10 [ 1674.961303][T19237] ? rcu_is_watching+0x15/0xb0 [ 1674.961329][T19237] ? do_syscall_64+0xbe/0x3b0 [ 1674.961357][T19237] do_syscall_64+0xfa/0x3b0 [ 1674.961378][T19237] ? lockdep_hardirqs_on+0x9c/0x150 [ 1674.961401][T19237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.961420][T19237] ? clear_bhb_loop+0x60/0xb0 [ 1674.961445][T19237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.961464][T19237] RIP: 0033:0x7f675ff8eec9 [ 1674.961483][T19237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1674.961501][T19237] RSP: 002b:00007f6760ee9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1674.961522][T19237] RAX: ffffffffffffffda RBX: 00007f67601e5fa0 RCX: 00007f675ff8eec9 [ 1674.961537][T19237] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1674.961550][T19237] RBP: 00007f6760ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1674.961562][T19237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1674.961575][T19237] R13: 00007f67601e6038 R14: 00007f67601e5fa0 R15: 00007ffe3de74eb8 [ 1674.961613][T19237] [ 1675.249794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1675.733641][T19254] __nla_validate_parse: 3 callbacks suppressed [ 1675.733733][T19254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12716'. [ 1675.906916][T19259] netlink: 'syz.1.12719': attribute type 10 has an invalid length. [ 1675.959381][T19260] netlink: 'syz.1.12719': attribute type 10 has an invalid length. [ 1675.979662][T19260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12719'. [ 1676.003039][T19259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.022533][T19259] batadv0: entered promiscuous mode [ 1676.051342][T19259] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1676.236688][T19268] netlink: 'syz.0.12721': attribute type 1 has an invalid length. [ 1676.245239][T19268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12721'. [ 1676.263301][T19265] pim6reg1: entered promiscuous mode [ 1676.265251][T19268] netlink: 'syz.0.12721': attribute type 2 has an invalid length. [ 1676.271381][T19265] pim6reg1: entered allmulticast mode [ 1676.289810][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1676.310810][T19268] netlink: 'syz.0.12721': attribute type 1 has an invalid length. [ 1676.337031][T19268] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12721'. [ 1676.588664][T19279] netlink: 'syz.1.12725': attribute type 1 has an invalid length. [ 1676.676771][T19279] bond14: entered promiscuous mode [ 1676.683302][T19279] bond14: entered allmulticast mode [ 1676.743537][T19286] netlink: 'syz.0.12727': attribute type 1 has an invalid length. [ 1676.772158][T19286] netlink: 'syz.0.12727': attribute type 1 has an invalid length. [ 1676.804162][T19286] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12727'. [ 1676.857862][T19279] bridge7: entered promiscuous mode [ 1676.864305][T19279] bridge7: entered allmulticast mode [ 1676.874148][T19279] bond14: (slave bridge7): making interface the new active one [ 1676.885234][T19279] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 1676.918341][T19292] lo speed is unknown, defaulting to 1000 [ 1676.931283][T19292] wg1 speed is unknown, defaulting to 1000 [ 1676.992148][T19292] lo speed is unknown, defaulting to 1000 [ 1677.329795][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1677.799269][T19329] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12743'. [ 1677.973951][T19335] rdma_rxe: rxe_newlink: failed to add lo [ 1678.173901][T19346] FAULT_INJECTION: forcing a failure. [ 1678.173901][T19346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.188523][T19346] CPU: 1 UID: 0 PID: 19346 Comm: syz.2.12747 Not tainted syzkaller #0 PREEMPT(full) [ 1678.188552][T19346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1678.188567][T19346] Call Trace: [ 1678.188576][T19346] [ 1678.188604][T19346] dump_stack_lvl+0x189/0x250 [ 1678.188635][T19346] ? __pfx____ratelimit+0x10/0x10 [ 1678.188661][T19346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1678.188687][T19346] ? __pfx__printk+0x10/0x10 [ 1678.188731][T19346] should_fail_ex+0x414/0x560 [ 1678.188767][T19346] _copy_to_user+0x31/0xb0 [ 1678.188798][T19346] simple_read_from_buffer+0xe1/0x170 [ 1678.188843][T19346] proc_fail_nth_read+0x1b3/0x220 [ 1678.188872][T19346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1678.188900][T19346] ? rw_verify_area+0x2a6/0x4d0 [ 1678.188925][T19346] ? __lock_acquire+0xab9/0xd20 [ 1678.188955][T19346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1678.188980][T19346] vfs_read+0x1fd/0xa30 [ 1678.189006][T19346] ? fdget_pos+0x247/0x320 [ 1678.189045][T19346] ? __pfx___mutex_lock+0x10/0x10 [ 1678.189071][T19346] ? __pfx_vfs_read+0x10/0x10 [ 1678.189100][T19346] ? __fget_files+0x2a/0x420 [ 1678.189136][T19346] ? __fget_files+0x3a0/0x420 [ 1678.189167][T19346] ? __fget_files+0x2a/0x420 [ 1678.189211][T19346] ksys_read+0x145/0x250 [ 1678.189243][T19346] ? __pfx_ksys_read+0x10/0x10 [ 1678.189268][T19346] ? rcu_is_watching+0x15/0xb0 [ 1678.189296][T19346] ? do_syscall_64+0xbe/0x3b0 [ 1678.189326][T19346] do_syscall_64+0xfa/0x3b0 [ 1678.189349][T19346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1678.189373][T19346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.189395][T19346] ? clear_bhb_loop+0x60/0xb0 [ 1678.189430][T19346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.189450][T19346] RIP: 0033:0x7f675ff8d8dc [ 1678.189471][T19346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1678.189490][T19346] RSP: 002b:00007f6760ee9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1678.189513][T19346] RAX: ffffffffffffffda RBX: 00007f67601e5fa0 RCX: 00007f675ff8d8dc [ 1678.189530][T19346] RDX: 000000000000000f RSI: 00007f6760ee90a0 RDI: 000000000000000a [ 1678.189544][T19346] RBP: 00007f6760ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.189558][T19346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1678.189571][T19346] R13: 00007f67601e6038 R14: 00007f67601e5fa0 R15: 00007ffe3de74eb8 [ 1678.189607][T19346] [ 1678.207078][T19343] lo speed is unknown, defaulting to 1000 [ 1678.369849][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1678.382905][T19343] wg1 speed is unknown, defaulting to 1000 [ 1678.522482][T19343] lo speed is unknown, defaulting to 1000 [ 1678.811090][T19360] lo speed is unknown, defaulting to 1000 [ 1678.821385][T19360] wg1 speed is unknown, defaulting to 1000 [ 1678.837824][T19360] lo speed is unknown, defaulting to 1000 [ 1678.938118][T19368] netem: change failed [ 1679.138376][T19376] 8021q: VLANs not supported on ip6tnl0 [ 1679.409756][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1679.567871][T19397] lo speed is unknown, defaulting to 1000 [ 1679.577505][T19397] wg1 speed is unknown, defaulting to 1000 [ 1679.593079][T19397] lo speed is unknown, defaulting to 1000 [ 1679.831509][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12764'. [ 1679.884736][T19404] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12764'. [ 1679.896653][T19408] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12764'. [ 1679.950650][T19408] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12764'. [ 1680.277811][T19422] lo speed is unknown, defaulting to 1000 [ 1680.315984][T19422] wg1 speed is unknown, defaulting to 1000 [ 1680.338138][T19422] lo speed is unknown, defaulting to 1000 [ 1680.449723][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1680.653021][T19447] netlink: 'syz.1.12777': attribute type 1 has an invalid length. [ 1680.773361][T19447] bond15: entered promiscuous mode [ 1680.778690][T19447] bond15: entered allmulticast mode [ 1680.788976][T19441] netlink: 'syz.0.12775': attribute type 10 has an invalid length. [ 1680.819738][T19445] geneve0: entered promiscuous mode [ 1680.825120][T19445] geneve0: entered allmulticast mode [ 1680.839037][T19454] bridge8: entered promiscuous mode [ 1680.849203][T19454] bridge8: entered allmulticast mode [ 1680.859360][T19454] bond15: (slave bridge8): making interface the new active one [ 1680.868132][T19454] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 1680.885885][T13551] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.896752][T13551] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.908207][T13551] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.024909][T13551] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.285618][T19477] __nla_validate_parse: 6 callbacks suppressed [ 1681.285641][T19477] netlink: 43 bytes leftover after parsing attributes in process `syz.1.12784'. [ 1681.402331][T19479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12786'. [ 1681.489877][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1681.553545][T19487] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12789'. [ 1681.781937][T19487] lo speed is unknown, defaulting to 1000 [ 1681.789490][T19487] wg1 speed is unknown, defaulting to 1000 [ 1681.860847][T19487] lo speed is unknown, defaulting to 1000 [ 1682.158496][T19510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12798'. [ 1682.325993][T19521] FAULT_INJECTION: forcing a failure. [ 1682.325993][T19521] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.375369][T19521] CPU: 1 UID: 0 PID: 19521 Comm: syz.2.12802 Not tainted syzkaller #0 PREEMPT(full) [ 1682.375402][T19521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1682.375417][T19521] Call Trace: [ 1682.375426][T19521] [ 1682.375436][T19521] dump_stack_lvl+0x189/0x250 [ 1682.375466][T19521] ? __pfx____ratelimit+0x10/0x10 [ 1682.375497][T19521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1682.375523][T19521] ? __pfx__printk+0x10/0x10 [ 1682.375568][T19521] ? __pfx___might_resched+0x10/0x10 [ 1682.375607][T19521] should_fail_ex+0x414/0x560 [ 1682.375644][T19521] should_failslab+0xa8/0x100 [ 1682.375676][T19521] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1682.375706][T19521] ? __alloc_skb+0x112/0x2d0 [ 1682.375737][T19521] __alloc_skb+0x112/0x2d0 [ 1682.375767][T19521] netlink_sendmsg+0x5c6/0xb30 [ 1682.375806][T19521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1682.375837][T19521] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1682.375874][T19521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1682.375897][T19521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1682.375925][T19521] __sock_sendmsg+0x21c/0x270 [ 1682.375964][T19521] ____sys_sendmsg+0x505/0x830 [ 1682.375999][T19521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1682.376040][T19521] ? import_iovec+0x74/0xa0 [ 1682.376073][T19521] ___sys_sendmsg+0x21f/0x2a0 [ 1682.376106][T19521] ? __pfx____sys_sendmsg+0x10/0x10 [ 1682.376178][T19521] ? __fget_files+0x2a/0x420 [ 1682.376210][T19521] ? __fget_files+0x3a0/0x420 [ 1682.376256][T19521] __x64_sys_sendmsg+0x19b/0x260 [ 1682.376289][T19521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1682.376332][T19521] ? __pfx_ksys_write+0x10/0x10 [ 1682.376358][T19521] ? rcu_is_watching+0x15/0xb0 [ 1682.376386][T19521] ? do_syscall_64+0xbe/0x3b0 [ 1682.376417][T19521] do_syscall_64+0xfa/0x3b0 [ 1682.376441][T19521] ? lockdep_hardirqs_on+0x9c/0x150 [ 1682.376466][T19521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.376489][T19521] ? clear_bhb_loop+0x60/0xb0 [ 1682.376518][T19521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.376548][T19521] RIP: 0033:0x7f675ff8eec9 [ 1682.376568][T19521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.376589][T19521] RSP: 002b:00007f6760ee9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.376615][T19521] RAX: ffffffffffffffda RBX: 00007f67601e5fa0 RCX: 00007f675ff8eec9 [ 1682.376632][T19521] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1682.376647][T19521] RBP: 00007f6760ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.376662][T19521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.376676][T19521] R13: 00007f67601e6038 R14: 00007f67601e5fa0 R15: 00007ffe3de74eb8 [ 1682.376714][T19521] [ 1682.653756][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1682.878660][T19523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12801'. [ 1682.951280][T19517] lo speed is unknown, defaulting to 1000 [ 1682.958824][T19517] wg1 speed is unknown, defaulting to 1000 [ 1683.008806][T19538] netlink: 51 bytes leftover after parsing attributes in process `syz.2.12806'. [ 1683.020985][T19523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12801'. [ 1683.042094][T19517] lo speed is unknown, defaulting to 1000 [ 1683.448602][T19550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12812'. [ 1683.472533][T19547] netlink: 'syz.2.12810': attribute type 13 has an invalid length. [ 1683.493042][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12810'. [ 1683.675223][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12810'. [ 1683.680172][T19547] lo speed is unknown, defaulting to 1000 [ 1683.731243][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1683.752453][T19547] wg1 speed is unknown, defaulting to 1000 [ 1683.754408][T19565] lo speed is unknown, defaulting to 1000 [ 1683.776500][T19565] wg1 speed is unknown, defaulting to 1000 [ 1683.783214][T19547] lo speed is unknown, defaulting to 1000 [ 1683.805095][T19565] lo speed is unknown, defaulting to 1000 [ 1684.095492][T19582] vlan3: entered allmulticast mode [ 1684.120901][T19582] bridge_slave_0: entered allmulticast mode [ 1684.415934][T19594] netlink: 'syz.0.12819': attribute type 10 has an invalid length. [ 1684.770194][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1685.056490][T19620] macsec1: entered promiscuous mode [ 1685.076399][T19620] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1685.168526][T19620] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 1685.324140][T19614] lo speed is unknown, defaulting to 1000 [ 1685.351143][T19614] wg1 speed is unknown, defaulting to 1000 [ 1685.392586][T19614] lo speed is unknown, defaulting to 1000 [ 1685.438544][T19632] netlink: 'syz.0.12833': attribute type 10 has an invalid length. [ 1685.637317][T19636] netlink: 'syz.3.12835': attribute type 27 has an invalid length. [ 1685.809891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1686.069131][T19643] lo speed is unknown, defaulting to 1000 [ 1686.100830][T19660] tipc: Enabling of bearer rejected, already enabled [ 1686.135222][T19655] lo speed is unknown, defaulting to 1000 [ 1686.147273][T19643] wg1 speed is unknown, defaulting to 1000 [ 1686.226310][T19655] wg1 speed is unknown, defaulting to 1000 [ 1686.302578][T19643] lo speed is unknown, defaulting to 1000 [ 1686.334787][T19655] lo speed is unknown, defaulting to 1000 [ 1686.338503][T19652] lo speed is unknown, defaulting to 1000 [ 1686.697309][T19652] wg1 speed is unknown, defaulting to 1000 [ 1686.722140][T19652] lo speed is unknown, defaulting to 1000 [ 1686.849761][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1687.333744][T19692] __nla_validate_parse: 4 callbacks suppressed [ 1687.333767][T19692] netlink: 51 bytes leftover after parsing attributes in process `syz.1.12848'. [ 1687.771847][T19712] netlink: 'syz.2.12853': attribute type 30 has an invalid length. [ 1687.889885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1688.431043][T19726] lo speed is unknown, defaulting to 1000 [ 1688.461481][T19726] wg1 speed is unknown, defaulting to 1000 [ 1688.469706][T19726] lo speed is unknown, defaulting to 1000 [ 1688.704915][T19740] syzkaller0: entered promiscuous mode [ 1688.726796][T19740] syzkaller0: entered allmulticast mode [ 1688.837492][T19747] lo speed is unknown, defaulting to 1000 [ 1688.913931][T19747] wg1 speed is unknown, defaulting to 1000 [ 1688.929107][T19742] lo speed is unknown, defaulting to 1000 [ 1688.935469][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1688.949449][T19747] lo speed is unknown, defaulting to 1000 [ 1688.954495][T19750] netlink: 'syz.4.12863': attribute type 3 has an invalid length. [ 1688.986432][T19750] netlink: 666 bytes leftover after parsing attributes in process `syz.4.12863'. [ 1689.070068][T19742] wg1 speed is unknown, defaulting to 1000 [ 1689.239299][T19742] lo speed is unknown, defaulting to 1000 [ 1689.970073][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1690.292787][T19819] FAULT_INJECTION: forcing a failure. [ 1690.292787][T19819] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.306239][T19819] CPU: 0 UID: 0 PID: 19819 Comm: syz.1.12887 Not tainted syzkaller #0 PREEMPT(full) [ 1690.306269][T19819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1690.306282][T19819] Call Trace: [ 1690.306291][T19819] [ 1690.306301][T19819] dump_stack_lvl+0x189/0x250 [ 1690.306330][T19819] ? __pfx____ratelimit+0x10/0x10 [ 1690.306355][T19819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1690.306380][T19819] ? __pfx__printk+0x10/0x10 [ 1690.306412][T19819] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1690.306440][T19819] ? l3mdev_update_flow+0x29/0x640 [ 1690.306468][T19819] ? l3mdev_update_flow+0x4d1/0x640 [ 1690.306500][T19819] should_fail_ex+0x414/0x560 [ 1690.306536][T19819] should_failslab+0xa8/0x100 [ 1690.306569][T19819] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1690.306596][T19819] ? dst_alloc+0x105/0x170 [ 1690.306632][T19819] dst_alloc+0x105/0x170 [ 1690.306668][T19819] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 1690.306713][T19819] ? ip_route_output_key_hash+0xc1/0x280 [ 1690.306749][T19819] ip_route_output_key_hash+0x174/0x280 [ 1690.306788][T19819] ? __lock_acquire+0xab9/0xd20 [ 1690.306820][T19819] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1690.306872][T19819] ip_route_output_flow+0x2a/0x150 [ 1690.306900][T19819] ? security_sk_classify_flow+0x70/0x180 [ 1690.306931][T19819] raw_sendmsg+0x1039/0x18b0 [ 1690.306982][T19819] ? __pfx_raw_sendmsg+0x10/0x10 [ 1690.307036][T19819] ? aa_sk_perm+0x81e/0x950 [ 1690.307074][T19819] ? __pfx_aa_sk_perm+0x10/0x10 [ 1690.307102][T19819] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 1690.307129][T19819] ? sock_rps_record_flow+0x19/0x410 [ 1690.307154][T19819] ? inet_sendmsg+0x2f4/0x370 [ 1690.307185][T19819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1690.307209][T19819] __sock_sendmsg+0x19c/0x270 [ 1690.307245][T19819] ____sys_sendmsg+0x52d/0x830 [ 1690.307278][T19819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1690.307316][T19819] ? import_iovec+0x74/0xa0 [ 1690.307346][T19819] ___sys_sendmsg+0x21f/0x2a0 [ 1690.307376][T19819] ? __pfx____sys_sendmsg+0x10/0x10 [ 1690.307443][T19819] ? __fget_files+0x2a/0x420 [ 1690.307472][T19819] ? __fget_files+0x3a0/0x420 [ 1690.307530][T19819] __sys_sendmmsg+0x227/0x430 [ 1690.307566][T19819] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1690.307592][T19819] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1690.307651][T19819] ? ksys_write+0x22a/0x250 [ 1690.307681][T19819] ? __pfx_ksys_write+0x10/0x10 [ 1690.307706][T19819] ? rcu_is_watching+0x15/0xb0 [ 1690.307735][T19819] __x64_sys_sendmmsg+0xa0/0xc0 [ 1690.307774][T19819] do_syscall_64+0xfa/0x3b0 [ 1690.307798][T19819] ? lockdep_hardirqs_on+0x9c/0x150 [ 1690.307821][T19819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.307844][T19819] ? clear_bhb_loop+0x60/0xb0 [ 1690.307871][T19819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.307892][T19819] RIP: 0033:0x7fd15e58eec9 [ 1690.307912][T19819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.307932][T19819] RSP: 002b:00007fd15f396038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1690.307955][T19819] RAX: ffffffffffffffda RBX: 00007fd15e7e5fa0 RCX: 00007fd15e58eec9 [ 1690.307972][T19819] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 1690.307987][T19819] RBP: 00007fd15f396090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.308001][T19819] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.308016][T19819] R13: 00007fd15e7e6038 R14: 00007fd15e7e5fa0 R15: 00007ffc47e13848 [ 1690.308053][T19819] [ 1690.797682][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12885'. [ 1690.821963][T19823] netlink: 'syz.3.12885': attribute type 10 has an invalid length. [ 1691.009917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1691.014938][T19843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12895'. [ 1691.026152][T19843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12895'. [ 1691.070469][T19842] block nbd19: shutting down sockets [ 1691.407684][T19841] lo speed is unknown, defaulting to 1000 [ 1691.448731][T19841] wg1 speed is unknown, defaulting to 1000 [ 1691.487079][T19841] lo speed is unknown, defaulting to 1000 [ 1691.887742][T19867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12903'. [ 1691.931010][T19872] netlink: 'syz.1.12902': attribute type 1 has an invalid length. [ 1691.954387][T19872] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12902'. [ 1692.050595][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1692.231233][T19882] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12908'. [ 1692.242248][T19882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12908'. [ 1692.261335][T19882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12908'. [ 1692.481743][T19885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12909'. [ 1692.571519][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12909'. [ 1692.657355][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12909'. [ 1692.674183][T19892] netlink: 596 bytes leftover after parsing attributes in process `syz.4.12911'. [ 1692.815256][T19895] netlink: 'syz.1.12912': attribute type 10 has an invalid length. [ 1692.966969][T19904] netlink: 'syz.2.12914': attribute type 32 has an invalid length. [ 1692.983276][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12914'. [ 1693.089774][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1693.121888][T19904] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 1693.297139][T19912] 8021q: VLANs not supported on ip6gre0 [ 1693.407604][T19919] netlink: 43 bytes leftover after parsing attributes in process `syz.2.12920'. [ 1693.474315][T19922] netlink: 51 bytes leftover after parsing attributes in process `syz.1.12918'. [ 1693.511258][T19924] macsec2: entered promiscuous mode [ 1693.516527][T19924] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 1693.583494][T19924] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1693.625089][T19920] lo speed is unknown, defaulting to 1000 [ 1693.642091][T19920] wg1 speed is unknown, defaulting to 1000 [ 1693.660685][T19920] lo speed is unknown, defaulting to 1000 [ 1693.864718][T19939] lo speed is unknown, defaulting to 1000 [ 1693.884889][T19939] wg1 speed is unknown, defaulting to 1000 [ 1693.910419][T19939] lo speed is unknown, defaulting to 1000 [ 1693.976395][T19947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12926'. [ 1693.990467][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12926'. [ 1694.129866][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1694.167642][T19953] macsec2: entered promiscuous mode [ 1694.173065][T19953] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 1694.219462][T19953] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1694.349892][T19958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12929'. [ 1694.454308][T19949] lo speed is unknown, defaulting to 1000 [ 1694.497939][T19949] wg1 speed is unknown, defaulting to 1000 [ 1694.517976][T19949] lo speed is unknown, defaulting to 1000 [ 1694.883066][T19977] netlink: 'syz.0.12935': attribute type 9 has an invalid length. [ 1695.170060][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1695.212045][T19989] lo speed is unknown, defaulting to 1000 [ 1695.220502][T19989] wg1 speed is unknown, defaulting to 1000 [ 1695.267214][T19989] lo speed is unknown, defaulting to 1000 [ 1695.276030][T19998] lo speed is unknown, defaulting to 1000 [ 1695.308756][T19998] wg1 speed is unknown, defaulting to 1000 [ 1695.421581][T19998] lo speed is unknown, defaulting to 1000 [ 1695.468288][T20007] lo speed is unknown, defaulting to 1000 [ 1695.503800][T20009] macsec2: entered promiscuous mode [ 1695.509937][T20009] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 1695.542286][T20009] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1695.638290][T20007] wg1 speed is unknown, defaulting to 1000 [ 1695.691774][T20007] lo speed is unknown, defaulting to 1000 [ 1696.201428][T20027] lo speed is unknown, defaulting to 1000 [ 1696.213436][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1696.242680][T20027] wg1 speed is unknown, defaulting to 1000 [ 1696.258379][T20027] lo speed is unknown, defaulting to 1000 [ 1696.560263][T20035] netlink: 'syz.3.12952': attribute type 3 has an invalid length. [ 1696.568407][T20035] netlink: 'syz.3.12952': attribute type 1 has an invalid length. [ 1696.576518][T20035] netlink: 'syz.3.12952': attribute type 3 has an invalid length. [ 1696.852562][T20041] lo speed is unknown, defaulting to 1000 [ 1696.862915][T20041] wg1 speed is unknown, defaulting to 1000 [ 1696.871851][T20041] lo speed is unknown, defaulting to 1000 [ 1697.250087][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1697.595685][T20070] __nla_validate_parse: 7 callbacks suppressed [ 1697.595707][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12963'. [ 1697.907461][T20073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12964'. [ 1697.959417][T20074] netlink: 'syz.4.12964': attribute type 10 has an invalid length. [ 1698.173318][T20098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12973'. [ 1698.194229][T20098] FAULT_INJECTION: forcing a failure. [ 1698.194229][T20098] name failslab, interval 1, probability 0, space 0, times 0 [ 1698.214546][T20098] CPU: 1 UID: 0 PID: 20098 Comm: syz.3.12973 Not tainted syzkaller #0 PREEMPT(full) [ 1698.214578][T20098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1698.214593][T20098] Call Trace: [ 1698.214602][T20098] [ 1698.214612][T20098] dump_stack_lvl+0x189/0x250 [ 1698.214644][T20098] ? __pfx____ratelimit+0x10/0x10 [ 1698.214670][T20098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1698.214696][T20098] ? __pfx__printk+0x10/0x10 [ 1698.214732][T20098] ? __pfx___might_resched+0x10/0x10 [ 1698.214766][T20098] ? fs_reclaim_acquire+0x7d/0x100 [ 1698.214805][T20098] should_fail_ex+0x414/0x560 [ 1698.214843][T20098] should_failslab+0xa8/0x100 [ 1698.214877][T20098] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1698.214906][T20098] ? __alloc_skb+0x112/0x2d0 [ 1698.214937][T20098] __alloc_skb+0x112/0x2d0 [ 1698.214968][T20098] netlink_ack+0x146/0xa50 [ 1698.214990][T20098] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1698.215014][T20098] ? ref_tracker_free+0x63a/0x7d0 [ 1698.215049][T20098] ? __asan_memcpy+0x40/0x70 [ 1698.215073][T20098] ? __pfx_ref_tracker_free+0x10/0x10 [ 1698.215120][T20098] netlink_rcv_skb+0x28c/0x470 [ 1698.215147][T20098] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1698.215181][T20098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1698.215222][T20098] ? netlink_deliver_tap+0x2e/0x1b0 [ 1698.215259][T20098] netlink_unicast+0x82c/0x9e0 [ 1698.215293][T20098] ? __pfx_netlink_unicast+0x10/0x10 [ 1698.215319][T20098] ? netlink_sendmsg+0x642/0xb30 [ 1698.215343][T20098] ? skb_put+0x11b/0x210 [ 1698.215374][T20098] netlink_sendmsg+0x805/0xb30 [ 1698.215413][T20098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1698.215445][T20098] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1698.215484][T20098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1698.215507][T20098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1698.215535][T20098] __sock_sendmsg+0x21c/0x270 [ 1698.215576][T20098] ____sys_sendmsg+0x505/0x830 [ 1698.215613][T20098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1698.215655][T20098] ? import_iovec+0x74/0xa0 [ 1698.215688][T20098] ___sys_sendmsg+0x21f/0x2a0 [ 1698.215722][T20098] ? __pfx____sys_sendmsg+0x10/0x10 [ 1698.215798][T20098] ? __fget_files+0x2a/0x420 [ 1698.215842][T20098] ? __fget_files+0x3a0/0x420 [ 1698.215904][T20098] __x64_sys_sendmsg+0x19b/0x260 [ 1698.215938][T20098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1698.215980][T20098] ? __pfx_ksys_write+0x10/0x10 [ 1698.216006][T20098] ? rcu_is_watching+0x15/0xb0 [ 1698.216035][T20098] ? do_syscall_64+0xbe/0x3b0 [ 1698.216066][T20098] do_syscall_64+0xfa/0x3b0 [ 1698.216091][T20098] ? lockdep_hardirqs_on+0x9c/0x150 [ 1698.216115][T20098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.216138][T20098] ? clear_bhb_loop+0x60/0xb0 [ 1698.216172][T20098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.216195][T20098] RIP: 0033:0x7fcb5fd8eec9 [ 1698.216215][T20098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1698.216235][T20098] RSP: 002b:00007fcb60c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1698.216259][T20098] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8eec9 [ 1698.216276][T20098] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1698.216292][T20098] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.216306][T20098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.216320][T20098] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1698.216358][T20098] [ 1698.555755][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1698.602075][T20104] netlink: 'syz.2.12975': attribute type 1 has an invalid length. [ 1698.637446][T20104] bond5: entered promiscuous mode [ 1698.643089][T20104] bond5: entered allmulticast mode [ 1698.654319][T20107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12976'. [ 1698.656056][T20099] block nbd19: shutting down sockets [ 1698.698993][T20104] bridge5: entered promiscuous mode [ 1698.705168][T20104] bridge5: entered allmulticast mode [ 1698.715012][T20104] bond5: (slave bridge5): making interface the new active one [ 1698.724080][T20104] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1698.810675][T20114] lo speed is unknown, defaulting to 1000 [ 1698.818274][T20114] wg1 speed is unknown, defaulting to 1000 [ 1698.827097][T20114] lo speed is unknown, defaulting to 1000 [ 1699.084431][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12979'. [ 1699.153042][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12979'. [ 1699.176809][T20124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12979'. [ 1699.196737][T20130] FAULT_INJECTION: forcing a failure. [ 1699.196737][T20130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.212050][T20130] CPU: 0 UID: 0 PID: 20130 Comm: syz.0.12981 Not tainted syzkaller #0 PREEMPT(full) [ 1699.212082][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1699.212097][T20130] Call Trace: [ 1699.212106][T20130] [ 1699.212117][T20130] dump_stack_lvl+0x189/0x250 [ 1699.212148][T20130] ? __pfx____ratelimit+0x10/0x10 [ 1699.212173][T20130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1699.212199][T20130] ? __pfx__printk+0x10/0x10 [ 1699.212229][T20130] ? __might_fault+0xb0/0x130 [ 1699.212273][T20130] should_fail_ex+0x414/0x560 [ 1699.212312][T20130] _copy_from_user+0x2d/0xb0 [ 1699.212341][T20130] ___sys_sendmsg+0x158/0x2a0 [ 1699.212374][T20130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1699.212467][T20130] ? __fget_files+0x2a/0x420 [ 1699.212498][T20130] ? __fget_files+0x3a0/0x420 [ 1699.212542][T20130] __x64_sys_sendmsg+0x19b/0x260 [ 1699.212574][T20130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1699.212615][T20130] ? __pfx_ksys_write+0x10/0x10 [ 1699.212641][T20130] ? rcu_is_watching+0x15/0xb0 [ 1699.212670][T20130] ? do_syscall_64+0xbe/0x3b0 [ 1699.212702][T20130] do_syscall_64+0xfa/0x3b0 [ 1699.212725][T20130] ? lockdep_hardirqs_on+0x9c/0x150 [ 1699.212748][T20130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.212770][T20130] ? clear_bhb_loop+0x60/0xb0 [ 1699.212798][T20130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.212820][T20130] RIP: 0033:0x7f50d8b8eec9 [ 1699.212841][T20130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1699.212861][T20130] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1699.212885][T20130] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1699.212903][T20130] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 1699.212918][T20130] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.212932][T20130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.212946][T20130] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1699.212984][T20130] [ 1699.475964][T20138] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12984'. [ 1699.505922][T20138] nbd: nbd2 already in use [ 1699.511752][T20138] block nbd2: NBD_DISCONNECT [ 1699.516553][T20138] block nbd2: Send disconnect failed -107 [ 1699.549719][T20138] block nbd2: shutting down sockets [ 1699.569870][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1699.638271][T20138] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 1699.778107][T20153] xt_l2tp: wrong L2TP version: 1 [ 1700.032206][T20161] netlink: 'syz.0.12990': attribute type 13 has an invalid length. [ 1700.049269][T20161] netlink: 'syz.0.12990': attribute type 17 has an invalid length. [ 1700.062052][T20163] netlink: 'syz.1.12991': attribute type 1 has an invalid length. [ 1700.113206][T20161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1700.174677][T20163] bond16: entered promiscuous mode [ 1700.180011][T20163] bond16: entered allmulticast mode [ 1700.193862][T20167] bridge9: entered promiscuous mode [ 1700.199125][T20167] bridge9: entered allmulticast mode [ 1700.208410][T20167] bond16: (slave bridge9): making interface the new active one [ 1700.216959][T20167] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 1700.295908][T20161] lo speed is unknown, defaulting to 1000 [ 1700.352458][T20161] wg1 speed is unknown, defaulting to 1000 [ 1700.366478][T20161] lo speed is unknown, defaulting to 1000 [ 1700.609911][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1700.685462][T20194] lo speed is unknown, defaulting to 1000 [ 1700.702151][T20194] wg1 speed is unknown, defaulting to 1000 [ 1700.712934][T20194] lo speed is unknown, defaulting to 1000 [ 1700.872562][T20206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13000'. [ 1700.911335][T20202] lo speed is unknown, defaulting to 1000 [ 1700.918941][T20202] wg1 speed is unknown, defaulting to 1000 [ 1700.928239][T20202] lo speed is unknown, defaulting to 1000 [ 1701.300436][T20221] rdma_rxe: rxe_newlink: failed to add lo [ 1701.536753][T20233] rdma_rxe: rxe_newlink: failed to add lo [ 1701.649803][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1701.657115][T18674] Bluetooth: hci4: command tx timeout [ 1701.743119][T20237] lo speed is unknown, defaulting to 1000 [ 1701.750832][T20237] wg1 speed is unknown, defaulting to 1000 [ 1701.759457][T20237] lo speed is unknown, defaulting to 1000 [ 1701.961872][T20253] FAULT_INJECTION: forcing a failure. [ 1701.961872][T20253] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.975410][T20253] CPU: 0 UID: 0 PID: 20253 Comm: syz.2.13014 Not tainted syzkaller #0 PREEMPT(full) [ 1701.975441][T20253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1701.975455][T20253] Call Trace: [ 1701.975464][T20253] [ 1701.975474][T20253] dump_stack_lvl+0x189/0x250 [ 1701.975505][T20253] ? __pfx____ratelimit+0x10/0x10 [ 1701.975530][T20253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1701.975556][T20253] ? __pfx__printk+0x10/0x10 [ 1701.975603][T20253] should_fail_ex+0x414/0x560 [ 1701.975642][T20253] should_failslab+0xa8/0x100 [ 1701.975674][T20253] __kmalloc_cache_noprof+0x70/0x3d0 [ 1701.975704][T20253] ? sctp_add_bind_addr+0x8c/0x370 [ 1701.975737][T20253] sctp_add_bind_addr+0x8c/0x370 [ 1701.975770][T20253] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1701.975802][T20253] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1701.975841][T20253] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1701.975872][T20253] ? sctp_v4_is_any+0x35/0x60 [ 1701.975899][T20253] ? sctp_copy_one_addr+0x93/0x360 [ 1701.975929][T20253] sctp_bind_addr_copy+0xb3/0x3c0 [ 1701.975957][T20253] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1701.975984][T20253] sctp_connect_new_asoc+0x2e0/0x690 [ 1701.976021][T20253] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1701.976050][T20253] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1701.976092][T20253] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1701.976116][T20253] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1701.976157][T20253] sctp_sendmsg+0x155c/0x2810 [ 1701.976204][T20253] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1701.976240][T20253] ? aa_sk_perm+0x81e/0x950 [ 1701.976280][T20253] ? __pfx_aa_sk_perm+0x10/0x10 [ 1701.976315][T20253] ? sock_rps_record_flow+0x19/0x410 [ 1701.976342][T20253] ? inet_sendmsg+0x2f4/0x370 [ 1701.976370][T20253] __sock_sendmsg+0x19c/0x270 [ 1701.976410][T20253] ____sys_sendmsg+0x505/0x830 [ 1701.976447][T20253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1701.976487][T20253] ? import_iovec+0x74/0xa0 [ 1701.976520][T20253] ___sys_sendmsg+0x21f/0x2a0 [ 1701.976552][T20253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1701.976626][T20253] ? __fget_files+0x2a/0x420 [ 1701.976657][T20253] ? __fget_files+0x3a0/0x420 [ 1701.976703][T20253] __x64_sys_sendmsg+0x19b/0x260 [ 1701.976736][T20253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1701.976779][T20253] ? __pfx_ksys_write+0x10/0x10 [ 1701.976804][T20253] ? rcu_is_watching+0x15/0xb0 [ 1701.976832][T20253] ? do_syscall_64+0xbe/0x3b0 [ 1701.976863][T20253] do_syscall_64+0xfa/0x3b0 [ 1701.976887][T20253] ? lockdep_hardirqs_on+0x9c/0x150 [ 1701.976910][T20253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.976933][T20253] ? clear_bhb_loop+0x60/0xb0 [ 1701.976961][T20253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.976983][T20253] RIP: 0033:0x7f675ff8eec9 [ 1701.977003][T20253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.977023][T20253] RSP: 002b:00007f6760ee9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.977047][T20253] RAX: ffffffffffffffda RBX: 00007f67601e5fa0 RCX: 00007f675ff8eec9 [ 1701.977064][T20253] RDX: 0000000004000040 RSI: 0000200000001180 RDI: 0000000000000003 [ 1701.977079][T20253] RBP: 00007f6760ee9090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.977093][T20253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.977106][T20253] R13: 00007f67601e6038 R14: 00007f67601e5fa0 R15: 00007ffe3de74eb8 [ 1701.977153][T20253] [ 1702.341168][T20252] lo speed is unknown, defaulting to 1000 [ 1702.348936][T20252] wg1 speed is unknown, defaulting to 1000 [ 1702.435681][T20252] lo speed is unknown, defaulting to 1000 [ 1702.689805][T18674] Bluetooth: hci2: command 0x0405 tx timeout [ 1702.689940][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1702.716551][T20261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13015'. [ 1703.033453][T20293] netlink: 'syz.0.13024': attribute type 4 has an invalid length. [ 1703.075735][T20293] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13024'. [ 1703.088946][T20270] lo speed is unknown, defaulting to 1000 [ 1703.187822][T20299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13026'. [ 1703.200694][T20299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13026'. [ 1703.287081][T20295] tipc: Resetting bearer [ 1703.297767][T20295] syzkaller0: left promiscuous mode [ 1703.303767][T20295] syzkaller0: left allmulticast mode [ 1703.346114][T20295] bond9: left promiscuous mode [ 1703.363316][T20295] bond9: left allmulticast mode [ 1703.369991][T20295] bridge0: left promiscuous mode [ 1703.375370][T20295] bridge0: left allmulticast mode [ 1703.395091][T20295] geneve0: left promiscuous mode [ 1703.402609][T20295] geneve0: left allmulticast mode [ 1703.449060][T20270] wg1 speed is unknown, defaulting to 1000 [ 1703.455690][T13554] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.501018][T13554] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.550973][T20270] lo speed is unknown, defaulting to 1000 [ 1703.579039][T13554] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.620387][T13554] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.664139][T20309] macsec1: entered promiscuous mode [ 1703.669404][T20309] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1703.690330][T20309] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 1703.729891][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1703.770417][T20308] lo speed is unknown, defaulting to 1000 [ 1703.801036][T20308] wg1 speed is unknown, defaulting to 1000 [ 1703.865518][T20308] lo speed is unknown, defaulting to 1000 [ 1704.403681][T20340] netlink: set zone limit has 8 unknown bytes [ 1704.556494][T20349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13043'. [ 1704.576675][T20349] vlan0: entered promiscuous mode [ 1704.592554][T20349] macvtap0: entered promiscuous mode [ 1704.753753][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13044'. [ 1704.770004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1705.307078][T20376] lo speed is unknown, defaulting to 1000 [ 1705.335181][T20376] wg1 speed is unknown, defaulting to 1000 [ 1705.364389][T20376] lo speed is unknown, defaulting to 1000 [ 1705.809871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1706.108030][T20412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13056'. [ 1706.122161][T20411] macsec2: entered promiscuous mode [ 1706.127434][T20411] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 1706.163042][T20411] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1706.284982][T20416] tipc: Enabling of bearer rejected, already enabled [ 1706.444398][T20419] lo speed is unknown, defaulting to 1000 [ 1706.501774][T20419] wg1 speed is unknown, defaulting to 1000 [ 1706.523397][T20419] lo speed is unknown, defaulting to 1000 [ 1706.852243][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1707.138857][T20435] lo speed is unknown, defaulting to 1000 [ 1707.253456][T20435] wg1 speed is unknown, defaulting to 1000 [ 1707.270885][T20435] lo speed is unknown, defaulting to 1000 [ 1707.819413][T20460] netlink: 596 bytes leftover after parsing attributes in process `syz.3.13072'. [ 1707.889842][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1707.996509][T20468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13075'. [ 1708.087093][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13074'. [ 1708.279437][T20479] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 1708.319922][T20466] lo speed is unknown, defaulting to 1000 [ 1708.337640][T20466] wg1 speed is unknown, defaulting to 1000 [ 1708.380073][T20466] lo speed is unknown, defaulting to 1000 [ 1708.481468][T20491] bridge0: entered promiscuous mode [ 1708.487710][T20491] bridge0: port 2(macvlan2) entered blocking state [ 1708.495091][T20491] bridge0: port 2(macvlan2) entered disabled state [ 1708.502144][T20491] macvlan2: entered allmulticast mode [ 1708.507720][T20491] bridge0: entered allmulticast mode [ 1708.518729][T20491] macvlan2: left allmulticast mode [ 1708.526051][T20491] bridge0: left allmulticast mode [ 1708.537745][T20491] bridge0: left promiscuous mode [ 1708.580316][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13083'. [ 1708.595141][T20497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13083'. [ 1708.599254][T20499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13085'. [ 1708.616684][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13085'. [ 1708.742350][T20504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13087'. [ 1708.931328][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1709.075020][T20506] syzkaller1: entered promiscuous mode [ 1709.081602][T20506] syzkaller1: entered allmulticast mode [ 1709.244280][T20520] netlink: 'syz.2.13092': attribute type 1 has an invalid length. [ 1709.252407][T20518] lo speed is unknown, defaulting to 1000 [ 1709.254281][T20518] wg1 speed is unknown, defaulting to 1000 [ 1709.269659][T20518] lo speed is unknown, defaulting to 1000 [ 1709.377969][T20520] bond6: entered promiscuous mode [ 1709.415974][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13095'. [ 1709.418067][T20520] bond6: entered allmulticast mode [ 1709.494890][T20526] bridge6: entered promiscuous mode [ 1709.503684][T20526] bridge6: entered allmulticast mode [ 1709.523650][T20526] bond6: (slave bridge6): making interface the new active one [ 1709.536951][T20526] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1709.558073][T20534] vlan3: entered promiscuous mode [ 1709.897242][T20555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13103'. [ 1709.969780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1710.616726][T20585] FAULT_INJECTION: forcing a failure. [ 1710.616726][T20585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.703080][T20579] netlink: 'syz.3.13107': attribute type 10 has an invalid length. [ 1710.721664][T20585] CPU: 1 UID: 0 PID: 20585 Comm: syz.1.13109 Not tainted syzkaller #0 PREEMPT(full) [ 1710.721696][T20585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1710.721711][T20585] Call Trace: [ 1710.721721][T20585] [ 1710.721732][T20585] dump_stack_lvl+0x189/0x250 [ 1710.721762][T20585] ? __pfx____ratelimit+0x10/0x10 [ 1710.721788][T20585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1710.721813][T20585] ? __pfx__printk+0x10/0x10 [ 1710.721844][T20585] ? __might_fault+0xb0/0x130 [ 1710.721887][T20585] should_fail_ex+0x414/0x560 [ 1710.721924][T20585] _copy_from_iter+0x1de/0x1790 [ 1710.721958][T20585] ? rcu_is_watching+0x15/0xb0 [ 1710.721981][T20585] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1710.722012][T20585] ? __pfx__copy_from_iter+0x10/0x10 [ 1710.722038][T20585] ? __build_skb_around+0x257/0x3e0 [ 1710.722069][T20585] ? netlink_sendmsg+0x642/0xb30 [ 1710.722094][T20585] ? skb_put+0x11b/0x210 [ 1710.722125][T20585] netlink_sendmsg+0x6b2/0xb30 [ 1710.722164][T20585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.722195][T20585] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1710.722233][T20585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1710.722256][T20585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.722292][T20585] __sock_sendmsg+0x21c/0x270 [ 1710.722331][T20585] ____sys_sendmsg+0x505/0x830 [ 1710.722368][T20585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.722409][T20585] ? import_iovec+0x74/0xa0 [ 1710.722442][T20585] ___sys_sendmsg+0x21f/0x2a0 [ 1710.722474][T20585] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.722560][T20585] ? __fget_files+0x2a/0x420 [ 1710.722590][T20585] ? __fget_files+0x3a0/0x420 [ 1710.722637][T20585] __x64_sys_sendmsg+0x19b/0x260 [ 1710.722669][T20585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.722709][T20585] ? __pfx_ksys_write+0x10/0x10 [ 1710.722733][T20585] ? rcu_is_watching+0x15/0xb0 [ 1710.722759][T20585] ? do_syscall_64+0xbe/0x3b0 [ 1710.722789][T20585] do_syscall_64+0xfa/0x3b0 [ 1710.722812][T20585] ? lockdep_hardirqs_on+0x9c/0x150 [ 1710.722836][T20585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.722859][T20585] ? clear_bhb_loop+0x60/0xb0 [ 1710.722886][T20585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.722907][T20585] RIP: 0033:0x7fd15e58eec9 [ 1710.722926][T20585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.722945][T20585] RSP: 002b:00007fd15f396038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.722968][T20585] RAX: ffffffffffffffda RBX: 00007fd15e7e5fa0 RCX: 00007fd15e58eec9 [ 1710.722984][T20585] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1710.722997][T20585] RBP: 00007fd15f396090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.723011][T20585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.723024][T20585] R13: 00007fd15e7e6038 R14: 00007fd15e7e5fa0 R15: 00007ffc47e13848 [ 1710.723060][T20585] [ 1711.011191][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1711.245810][T20599] tipc: Enabling of bearer rejected, already enabled [ 1711.678336][T20622] netlink: 'syz.3.13120': attribute type 1 has an invalid length. [ 1711.757849][T20622] bond16: entered promiscuous mode [ 1711.764669][T20622] bond16: entered allmulticast mode [ 1711.807139][T20635] FAULT_INJECTION: forcing a failure. [ 1711.807139][T20635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.816661][T20622] bridge19: entered promiscuous mode [ 1711.821994][T20635] CPU: 1 UID: 0 PID: 20635 Comm: syz.0.13124 Not tainted syzkaller #0 PREEMPT(full) [ 1711.822028][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1711.822044][T20635] Call Trace: [ 1711.822053][T20635] [ 1711.822064][T20635] dump_stack_lvl+0x189/0x250 [ 1711.822099][T20635] ? __pfx____ratelimit+0x10/0x10 [ 1711.822126][T20635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.822153][T20635] ? __pfx__printk+0x10/0x10 [ 1711.822186][T20635] ? __might_fault+0xb0/0x130 [ 1711.822244][T20635] should_fail_ex+0x414/0x560 [ 1711.822285][T20635] _copy_from_user+0x2d/0xb0 [ 1711.822317][T20635] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 1711.822378][T20635] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1711.822428][T20635] ? trace_kmalloc+0x1f/0xd0 [ 1711.822461][T20635] ip_generic_getfrag+0x12f/0x2b0 [ 1711.822501][T20635] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1711.822542][T20635] ? skb_put+0x11b/0x210 [ 1711.822595][T20635] __ip6_append_data+0x3974/0x3f30 [ 1711.822622][T20635] ? __lock_acquire+0xab9/0xd20 [ 1711.822687][T20635] ? __pfx_raw6_getfrag+0x10/0x10 [ 1711.822745][T20635] ? __pfx___ip6_append_data+0x10/0x10 [ 1711.822771][T20635] ? __pfx_ip6_mtu+0x10/0x10 [ 1711.822811][T20635] ip6_append_data+0x1c1/0x380 [ 1711.822845][T20635] ? __pfx_raw6_getfrag+0x10/0x10 [ 1711.822883][T20635] rawv6_sendmsg+0x1286/0x1830 [ 1711.822941][T20635] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1711.822970][T20635] ? __lock_acquire+0xab9/0xd20 [ 1711.823040][T20635] ? __pfx_aa_sk_perm+0x10/0x10 [ 1711.823083][T20635] ? sock_rps_record_flow+0x19/0x410 [ 1711.823112][T20635] ? inet_sendmsg+0x2f4/0x370 [ 1711.823135][T20635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1711.823167][T20635] __sock_sendmsg+0x19c/0x270 [ 1711.823216][T20635] ____sys_sendmsg+0x505/0x830 [ 1711.823258][T20635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.823304][T20635] ? import_iovec+0x74/0xa0 [ 1711.823342][T20635] ___sys_sendmsg+0x21f/0x2a0 [ 1711.823379][T20635] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.823463][T20635] ? __fget_files+0x2a/0x420 [ 1711.823498][T20635] ? __fget_files+0x3a0/0x420 [ 1711.823550][T20635] __x64_sys_sendmsg+0x19b/0x260 [ 1711.823587][T20635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1711.823634][T20635] ? __pfx_ksys_write+0x10/0x10 [ 1711.823663][T20635] ? rcu_is_watching+0x15/0xb0 [ 1711.823696][T20635] ? do_syscall_64+0xbe/0x3b0 [ 1711.823729][T20635] do_syscall_64+0xfa/0x3b0 [ 1711.823750][T20635] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.823781][T20635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.823807][T20635] ? clear_bhb_loop+0x60/0xb0 [ 1711.823838][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.823863][T20635] RIP: 0033:0x7f50d8b8eec9 [ 1711.823885][T20635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.823908][T20635] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.823936][T20635] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1711.823955][T20635] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1711.823972][T20635] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.823988][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.824002][T20635] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1711.824045][T20635] [ 1712.049942][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1712.053033][T20622] bridge19: entered allmulticast mode [ 1712.178411][T20622] bond16: (slave bridge19): making interface the new active one [ 1712.187108][T20622] bond16: (slave bridge19): Enslaving as an active interface with an up link [ 1712.197157][T20631] lo speed is unknown, defaulting to 1000 [ 1712.238418][T20631] wg1 speed is unknown, defaulting to 1000 [ 1712.320780][T20631] lo speed is unknown, defaulting to 1000 [ 1712.371439][T20636] lo speed is unknown, defaulting to 1000 [ 1712.379004][T20636] wg1 speed is unknown, defaulting to 1000 [ 1712.409438][T20648] lo speed is unknown, defaulting to 1000 [ 1712.592112][T20636] lo speed is unknown, defaulting to 1000 [ 1712.602594][T20648] wg1 speed is unknown, defaulting to 1000 [ 1712.624116][T20661] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004 [ 1712.723151][T20648] lo speed is unknown, defaulting to 1000 [ 1712.783978][T20668] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20000 [ 1713.089828][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1713.381842][T20678] lo speed is unknown, defaulting to 1000 [ 1713.389437][T20678] wg1 speed is unknown, defaulting to 1000 [ 1713.453098][T20678] lo speed is unknown, defaulting to 1000 [ 1713.754620][T20698] lo speed is unknown, defaulting to 1000 [ 1713.762944][T20698] wg1 speed is unknown, defaulting to 1000 [ 1713.771528][T20698] lo speed is unknown, defaulting to 1000 [ 1714.026440][T20706] netlink: 'syz.2.13142': attribute type 1 has an invalid length. [ 1714.056604][T20707] __nla_validate_parse: 6 callbacks suppressed [ 1714.056624][T20707] netlink: 51 bytes leftover after parsing attributes in process `syz.4.13141'. [ 1714.129771][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1714.145103][T20709] bond7: (slave gretap2): making interface the new active one [ 1714.156441][T20709] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1714.238277][T20712] sctp: [Deprecated]: syz.4.13143 (pid 20712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1714.238277][T20712] Use struct sctp_sack_info instead [ 1714.377991][T20717] netlink: 'syz.3.13145': attribute type 10 has an invalid length. [ 1714.410080][T20717] netlink: 'syz.3.13145': attribute type 10 has an invalid length. [ 1714.422697][T20717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13145'. [ 1714.484265][T20720] lo speed is unknown, defaulting to 1000 [ 1714.507463][T20720] wg1 speed is unknown, defaulting to 1000 [ 1714.553159][T20720] lo speed is unknown, defaulting to 1000 [ 1714.748045][T20723] lo speed is unknown, defaulting to 1000 [ 1714.784537][T20735] netlink: 59 bytes leftover after parsing attributes in process `syz.3.13150'. [ 1714.822411][T20723] wg1 speed is unknown, defaulting to 1000 [ 1714.870286][T20723] lo speed is unknown, defaulting to 1000 [ 1715.169847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1715.345126][T20745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13153'. [ 1715.488890][T20745] lo speed is unknown, defaulting to 1000 [ 1715.511699][T20745] wg1 speed is unknown, defaulting to 1000 [ 1715.544170][T20745] lo speed is unknown, defaulting to 1000 [ 1715.576968][T20751] FAULT_INJECTION: forcing a failure. [ 1715.576968][T20751] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.619799][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.0.13154 Not tainted syzkaller #0 PREEMPT(full) [ 1715.619829][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1715.619861][T20751] Call Trace: [ 1715.619871][T20751] [ 1715.619881][T20751] dump_stack_lvl+0x189/0x250 [ 1715.619911][T20751] ? __pfx____ratelimit+0x10/0x10 [ 1715.619936][T20751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.619961][T20751] ? __pfx__printk+0x10/0x10 [ 1715.620008][T20751] should_fail_ex+0x414/0x560 [ 1715.620055][T20751] should_failslab+0xa8/0x100 [ 1715.620083][T20751] __kmalloc_cache_noprof+0x70/0x3d0 [ 1715.620108][T20751] ? sctp_add_bind_addr+0x8c/0x370 [ 1715.620136][T20751] sctp_add_bind_addr+0x8c/0x370 [ 1715.620165][T20751] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1715.620203][T20751] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1715.620227][T20751] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1715.620257][T20751] ? sctp_v4_is_any+0x35/0x60 [ 1715.620281][T20751] ? sctp_copy_one_addr+0x93/0x360 [ 1715.620308][T20751] sctp_bind_addr_copy+0xb3/0x3c0 [ 1715.620334][T20751] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1715.620359][T20751] sctp_connect_new_asoc+0x2e0/0x690 [ 1715.620393][T20751] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1715.620420][T20751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1715.620459][T20751] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1715.620482][T20751] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1715.620512][T20751] sctp_sendmsg+0x155c/0x2810 [ 1715.620553][T20751] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1715.620586][T20751] ? aa_sk_perm+0x81e/0x950 [ 1715.620620][T20751] ? __pfx_aa_sk_perm+0x10/0x10 [ 1715.620653][T20751] ? sock_rps_record_flow+0x19/0x410 [ 1715.620677][T20751] ? inet_sendmsg+0x2f4/0x370 [ 1715.620702][T20751] __sock_sendmsg+0x19c/0x270 [ 1715.620737][T20751] ____sys_sendmsg+0x505/0x830 [ 1715.620770][T20751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1715.620810][T20751] ? import_iovec+0x74/0xa0 [ 1715.620839][T20751] ___sys_sendmsg+0x21f/0x2a0 [ 1715.620868][T20751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1715.620934][T20751] ? __fget_files+0x2a/0x420 [ 1715.620981][T20751] ? __fget_files+0x3a0/0x420 [ 1715.621024][T20751] __x64_sys_sendmsg+0x19b/0x260 [ 1715.621056][T20751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1715.621096][T20751] ? __pfx_ksys_write+0x10/0x10 [ 1715.621120][T20751] ? rcu_is_watching+0x15/0xb0 [ 1715.621146][T20751] ? do_syscall_64+0xbe/0x3b0 [ 1715.621176][T20751] do_syscall_64+0xfa/0x3b0 [ 1715.621206][T20751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.621229][T20751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.621250][T20751] ? clear_bhb_loop+0x60/0xb0 [ 1715.621277][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.621298][T20751] RIP: 0033:0x7f50d8b8eec9 [ 1715.621318][T20751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1715.621337][T20751] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.621360][T20751] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1715.621375][T20751] RDX: 0000000004000040 RSI: 0000200000001180 RDI: 0000000000000003 [ 1715.621390][T20751] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.621403][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.621416][T20751] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1715.621453][T20751] [ 1716.210273][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1716.248534][T20765] netlink: 59 bytes leftover after parsing attributes in process `syz.3.13161'. [ 1716.366140][T20772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13164'. [ 1716.547145][T20780] 8021q: VLANs not supported on vxcan1 [ 1716.624701][T20771] lo speed is unknown, defaulting to 1000 [ 1716.633472][T20771] wg1 speed is unknown, defaulting to 1000 [ 1716.677204][T20774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13163'. [ 1716.692052][T20771] lo speed is unknown, defaulting to 1000 [ 1716.705228][T20774] netlink: 'syz.1.13163': attribute type 10 has an invalid length. [ 1717.250189][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1717.331389][T20809] netlink: 'syz.3.13174': attribute type 1 has an invalid length. [ 1717.339634][T20809] netlink: 'syz.3.13174': attribute type 1 has an invalid length. [ 1717.354393][T20809] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13174'. [ 1717.369166][T20809] FAULT_INJECTION: forcing a failure. [ 1717.369166][T20809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1717.386527][T20809] CPU: 1 UID: 0 PID: 20809 Comm: syz.3.13174 Not tainted syzkaller #0 PREEMPT(full) [ 1717.386557][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1717.386570][T20809] Call Trace: [ 1717.386578][T20809] [ 1717.386588][T20809] dump_stack_lvl+0x189/0x250 [ 1717.386617][T20809] ? __pfx____ratelimit+0x10/0x10 [ 1717.386640][T20809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1717.386664][T20809] ? __pfx__printk+0x10/0x10 [ 1717.386704][T20809] should_fail_ex+0x414/0x560 [ 1717.386739][T20809] _copy_to_user+0x31/0xb0 [ 1717.386767][T20809] simple_read_from_buffer+0xe1/0x170 [ 1717.386810][T20809] proc_fail_nth_read+0x1b3/0x220 [ 1717.386835][T20809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1717.386861][T20809] ? rw_verify_area+0x2a6/0x4d0 [ 1717.386885][T20809] ? __lock_acquire+0xab9/0xd20 [ 1717.386912][T20809] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1717.386936][T20809] vfs_read+0x1fd/0xa30 [ 1717.386959][T20809] ? fdget_pos+0x247/0x320 [ 1717.386994][T20809] ? __pfx___mutex_lock+0x10/0x10 [ 1717.387018][T20809] ? __pfx_vfs_read+0x10/0x10 [ 1717.387045][T20809] ? __fget_files+0x2a/0x420 [ 1717.387079][T20809] ? __fget_files+0x3a0/0x420 [ 1717.387107][T20809] ? __fget_files+0x2a/0x420 [ 1717.387146][T20809] ksys_read+0x145/0x250 [ 1717.387175][T20809] ? __pfx_ksys_read+0x10/0x10 [ 1717.387196][T20809] ? rcu_is_watching+0x15/0xb0 [ 1717.387221][T20809] ? do_syscall_64+0xbe/0x3b0 [ 1717.387249][T20809] do_syscall_64+0xfa/0x3b0 [ 1717.387271][T20809] ? lockdep_hardirqs_on+0x9c/0x150 [ 1717.387293][T20809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.387313][T20809] ? clear_bhb_loop+0x60/0xb0 [ 1717.387339][T20809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.387359][T20809] RIP: 0033:0x7fcb5fd8d8dc [ 1717.387378][T20809] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1717.387396][T20809] RSP: 002b:00007fcb60c87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1717.387417][T20809] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8d8dc [ 1717.387433][T20809] RDX: 000000000000000f RSI: 00007fcb60c870a0 RDI: 0000000000000003 [ 1717.387447][T20809] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.387460][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.387472][T20809] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1717.387507][T20809] [ 1717.571116][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13176'. [ 1717.670973][T20818] lo speed is unknown, defaulting to 1000 [ 1717.763675][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13177'. [ 1717.775255][T20818] wg1 speed is unknown, defaulting to 1000 [ 1717.800227][T20813] netlink: 'syz.4.13177': attribute type 10 has an invalid length. [ 1717.814873][T20818] lo speed is unknown, defaulting to 1000 [ 1718.290058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1718.690396][T20867] netlink: 'syz.0.13191': attribute type 1 has an invalid length. [ 1718.805907][T20841] team0 (unregistering): Port device bridge1 removed [ 1718.832448][T20841] team0 (unregistering): Port device bridge2 removed [ 1718.844378][T20841] team0 (unregistering): Port device bridge5 removed [ 1718.878636][T20851] syzkaller0: entered promiscuous mode [ 1718.885012][T20851] syzkaller0: entered allmulticast mode [ 1718.974692][T20867] bond13: entered promiscuous mode [ 1718.988318][T20867] bond13: entered allmulticast mode [ 1719.035906][T20869] bridge32: entered promiscuous mode [ 1719.042194][T20869] bridge32: entered allmulticast mode [ 1719.053072][T20869] bond13: (slave bridge32): making interface the new active one [ 1719.064889][T20869] bond13: (slave bridge32): Enslaving as an active interface with an up link [ 1719.330069][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1719.460431][T20891] __nla_validate_parse: 1 callbacks suppressed [ 1719.460454][T20891] netlink: 67 bytes leftover after parsing attributes in process `syz.1.13198'. [ 1719.521455][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1719.574533][T20893] geneve3: entered promiscuous mode [ 1719.574903][T20895] FAULT_INJECTION: forcing a failure. [ 1719.574903][T20895] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.597717][T20893] geneve3: entered allmulticast mode [ 1719.612670][T20895] CPU: 1 UID: 0 PID: 20895 Comm: syz.3.13199 Not tainted syzkaller #0 PREEMPT(full) [ 1719.612701][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1719.612716][T20895] Call Trace: [ 1719.612725][T20895] [ 1719.612735][T20895] dump_stack_lvl+0x189/0x250 [ 1719.612766][T20895] ? __pfx____ratelimit+0x10/0x10 [ 1719.612791][T20895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1719.612816][T20895] ? __pfx__printk+0x10/0x10 [ 1719.612847][T20895] ? __pfx___might_resched+0x10/0x10 [ 1719.612880][T20895] ? fs_reclaim_acquire+0x7d/0x100 [ 1719.612924][T20895] should_fail_ex+0x414/0x560 [ 1719.612961][T20895] should_failslab+0xa8/0x100 [ 1719.612994][T20895] __kmalloc_noprof+0xcb/0x4f0 [ 1719.613020][T20895] ? tomoyo_encode+0x28b/0x550 [ 1719.613046][T20895] tomoyo_encode+0x28b/0x550 [ 1719.613074][T20895] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1719.613098][T20895] ? tomoyo_domain+0xd9/0x130 [ 1719.613127][T20895] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1719.613158][T20895] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1719.613191][T20895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1719.613242][T20895] ? __lock_acquire+0xab9/0xd20 [ 1719.613296][T20895] ? __fget_files+0x2a/0x420 [ 1719.613332][T20895] ? __fget_files+0x2a/0x420 [ 1719.613361][T20895] ? __fget_files+0x3a0/0x420 [ 1719.613391][T20895] ? __fget_files+0x2a/0x420 [ 1719.613427][T20895] security_file_ioctl+0xcb/0x2d0 [ 1719.613458][T20895] __se_sys_ioctl+0x47/0x170 [ 1719.613486][T20895] do_syscall_64+0xfa/0x3b0 [ 1719.613511][T20895] ? lockdep_hardirqs_on+0x9c/0x150 [ 1719.613533][T20895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.613554][T20895] ? clear_bhb_loop+0x60/0xb0 [ 1719.613581][T20895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.613603][T20895] RIP: 0033:0x7fcb5fd8eec9 [ 1719.613622][T20895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1719.613642][T20895] RSP: 002b:00007fcb60c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1719.613683][T20895] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8eec9 [ 1719.613701][T20895] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000003 [ 1719.613716][T20895] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.613730][T20895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.613743][T20895] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1719.613781][T20895] [ 1719.613804][T20895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1719.753565][T13546] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1719.889709][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13202'. [ 1719.898719][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13202'. [ 1719.909865][T13546] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1719.944379][T13546] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1719.967756][T13546] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1719.986287][T20907] lo speed is unknown, defaulting to 1000 [ 1719.994168][T20907] wg1 speed is unknown, defaulting to 1000 [ 1720.002246][T20907] lo speed is unknown, defaulting to 1000 [ 1720.022434][T20904] block nbd2: shutting down sockets [ 1720.137687][T20914] netlink: 51 bytes leftover after parsing attributes in process `syz.4.13205'. [ 1720.184193][T20917] : entered promiscuous mode [ 1720.191021][T20917] bond_slave_0: entered promiscuous mode [ 1720.196884][T20917] bond_slave_1: entered promiscuous mode [ 1720.206381][T20917] team0: entered promiscuous mode [ 1720.213086][T20917] team_slave_0: entered promiscuous mode [ 1720.221307][T20917] team_slave_1: entered promiscuous mode [ 1720.227521][T20917] dummy0: entered promiscuous mode [ 1720.286472][T20919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13208'. [ 1720.303030][T20920] netlink: 248 bytes leftover after parsing attributes in process `syz.3.13208'. [ 1720.370124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1720.583419][T20930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.681919][T20936] lo speed is unknown, defaulting to 1000 [ 1720.688040][T20940] FAULT_INJECTION: forcing a failure. [ 1720.688040][T20940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.696352][T20936] wg1 speed is unknown, defaulting to 1000 [ 1720.701860][T20940] CPU: 0 UID: 0 PID: 20940 Comm: syz.3.13215 Not tainted syzkaller #0 PREEMPT(full) [ 1720.701891][T20940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1720.701905][T20940] Call Trace: [ 1720.701914][T20940] [ 1720.701924][T20940] dump_stack_lvl+0x189/0x250 [ 1720.701956][T20940] ? __pfx____ratelimit+0x10/0x10 [ 1720.701982][T20940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1720.702008][T20940] ? __pfx__printk+0x10/0x10 [ 1720.702038][T20940] ? __might_fault+0xb0/0x130 [ 1720.702081][T20940] should_fail_ex+0x414/0x560 [ 1720.702119][T20940] _copy_from_iter+0x1de/0x1790 [ 1720.702153][T20940] ? rcu_is_watching+0x15/0xb0 [ 1720.702176][T20940] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1720.702208][T20940] ? __pfx__copy_from_iter+0x10/0x10 [ 1720.702236][T20940] ? __build_skb_around+0x257/0x3e0 [ 1720.702278][T20940] ? netlink_sendmsg+0x642/0xb30 [ 1720.702301][T20940] ? skb_put+0x11b/0x210 [ 1720.702331][T20940] netlink_sendmsg+0x6b2/0xb30 [ 1720.702368][T20940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1720.702397][T20940] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1720.702441][T20940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1720.702469][T20940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1720.702501][T20940] __sock_sendmsg+0x21c/0x270 [ 1720.702546][T20940] ____sys_sendmsg+0x505/0x830 [ 1720.702653][T20940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1720.702706][T20940] ? import_iovec+0x74/0xa0 [ 1720.702743][T20940] ___sys_sendmsg+0x21f/0x2a0 [ 1720.702786][T20940] ? __pfx____sys_sendmsg+0x10/0x10 [ 1720.702868][T20940] ? __fget_files+0x2a/0x420 [ 1720.702904][T20940] ? __fget_files+0x3a0/0x420 [ 1720.702954][T20940] __x64_sys_sendmsg+0x19b/0x260 [ 1720.702991][T20940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1720.703040][T20940] ? __pfx_ksys_write+0x10/0x10 [ 1720.703069][T20940] ? rcu_is_watching+0x15/0xb0 [ 1720.703099][T20940] ? do_syscall_64+0xbe/0x3b0 [ 1720.703135][T20940] do_syscall_64+0xfa/0x3b0 [ 1720.703162][T20940] ? lockdep_hardirqs_on+0x9c/0x150 [ 1720.703189][T20940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.703213][T20940] ? clear_bhb_loop+0x60/0xb0 [ 1720.703246][T20940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.703271][T20940] RIP: 0033:0x7fcb5fd8eec9 [ 1720.703294][T20940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1720.703318][T20940] RSP: 002b:00007fcb60c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1720.703345][T20940] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8eec9 [ 1720.703364][T20940] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1720.703380][T20940] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.703395][T20940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.703411][T20940] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1720.703453][T20940] [ 1720.918136][T20946] syzkaller1: entered promiscuous mode [ 1721.008504][T20946] syzkaller1: entered allmulticast mode [ 1721.015957][T20936] lo speed is unknown, defaulting to 1000 [ 1721.159420][T20954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13219'. [ 1721.409962][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1721.548951][T20964] lo speed is unknown, defaulting to 1000 [ 1721.618739][T20964] wg1 speed is unknown, defaulting to 1000 [ 1721.645808][T20964] lo speed is unknown, defaulting to 1000 [ 1721.722177][T20980] netlink: 67 bytes leftover after parsing attributes in process `syz.1.13227'. [ 1721.748502][T20970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13226'. [ 1721.780394][T20970] netlink: 'syz.3.13226': attribute type 10 has an invalid length. [ 1722.237400][T20996] lo speed is unknown, defaulting to 1000 [ 1722.246348][T20996] wg1 speed is unknown, defaulting to 1000 [ 1722.255438][T20996] lo speed is unknown, defaulting to 1000 [ 1722.449847][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1722.647734][T21009] vlan3: entered promiscuous mode [ 1723.133873][T21025] lo speed is unknown, defaulting to 1000 [ 1723.209060][T21025] wg1 speed is unknown, defaulting to 1000 [ 1723.265772][T21025] lo speed is unknown, defaulting to 1000 [ 1723.489904][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1723.594300][T21048] netlink: 'syz.3.13246': attribute type 3 has an invalid length. [ 1723.947213][T21065] FAULT_INJECTION: forcing a failure. [ 1723.947213][T21065] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1724.054162][T21065] CPU: 1 UID: 0 PID: 21065 Comm: syz.3.13251 Not tainted syzkaller #0 PREEMPT(full) [ 1724.054195][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1724.054211][T21065] Call Trace: [ 1724.054220][T21065] [ 1724.054231][T21065] dump_stack_lvl+0x189/0x250 [ 1724.054264][T21065] ? __pfx____ratelimit+0x10/0x10 [ 1724.054290][T21065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1724.054316][T21065] ? __pfx__printk+0x10/0x10 [ 1724.054361][T21065] ? fs_reclaim_acquire+0x7d/0x100 [ 1724.054406][T21065] should_fail_ex+0x414/0x560 [ 1724.054446][T21065] prepare_alloc_pages+0x213/0x610 [ 1724.054491][T21065] __alloc_frozen_pages_noprof+0x123/0x370 [ 1724.054533][T21065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1724.054587][T21065] ? policy_nodemask+0x27c/0x720 [ 1724.054623][T21065] alloc_pages_mpol+0x232/0x4a0 [ 1724.054661][T21065] vma_alloc_folio_noprof+0xe4/0x200 [ 1724.054696][T21065] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1724.054745][T21065] folio_prealloc+0x30/0x180 [ 1724.054779][T21065] do_wp_page+0x1231/0x5800 [ 1724.054835][T21065] ? __pfx_do_wp_page+0x10/0x10 [ 1724.054859][T21065] ? do_raw_spin_lock+0x121/0x290 [ 1724.054890][T21065] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1724.054930][T21065] __handle_mm_fault+0x1033/0x5440 [ 1724.054980][T21065] ? __pfx___handle_mm_fault+0x10/0x10 [ 1724.055027][T21065] ? follow_page_pte+0xd03/0x13e0 [ 1724.055070][T21065] handle_mm_fault+0x40a/0x8e0 [ 1724.055112][T21065] __get_user_pages+0x1699/0x2ce0 [ 1724.055135][T21065] ? __lock_acquire+0xab9/0xd20 [ 1724.055210][T21065] __gup_longterm_locked+0xde9/0x1660 [ 1724.055255][T21065] ? sanity_check_pinned_pages+0x1241/0x1300 [ 1724.055285][T21065] ? gup_fast_fallback+0x195f/0x2010 [ 1724.055316][T21065] gup_fast_fallback+0x1e6a/0x2010 [ 1724.055385][T21065] ? __lock_acquire+0xab9/0xd20 [ 1724.055419][T21065] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1724.055446][T21065] ? kasan_save_track+0x4f/0x80 [ 1724.055470][T21065] ? kasan_save_track+0x3e/0x80 [ 1724.055494][T21065] ? __kasan_kmalloc+0x93/0xb0 [ 1724.055521][T21065] ? sock_kmalloc+0xd6/0x160 [ 1724.055551][T21065] ? af_alg_get_rsgl+0x236/0x810 [ 1724.055578][T21065] ? skcipher_recvmsg+0x3d1/0x11d0 [ 1724.055610][T21065] ? ____sys_recvmsg+0x1c9/0x460 [ 1724.055637][T21065] ? ___sys_recvmsg+0x1b5/0x510 [ 1724.055665][T21065] ? __x64_sys_recvmsg+0x198/0x260 [ 1724.055700][T21065] ? pin_user_pages_fast+0x4d/0xb0 [ 1724.055730][T21065] iov_iter_extract_pages+0x35a/0x5e0 [ 1724.055770][T21065] extract_iter_to_sg+0xe46/0x24e0 [ 1724.055815][T21065] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1724.055839][T21065] ? sock_kmalloc+0xd6/0x160 [ 1724.055873][T21065] ? rcu_is_watching+0x15/0xb0 [ 1724.055895][T21065] ? trace_kmalloc+0x1f/0xd0 [ 1724.055920][T21065] ? __kmalloc_noprof+0x29b/0x4f0 [ 1724.055957][T21065] ? __asan_memset+0x22/0x50 [ 1724.055984][T21065] af_alg_get_rsgl+0x436/0x810 [ 1724.056037][T21065] skcipher_recvmsg+0x3d1/0x11d0 [ 1724.056075][T21065] ? aa_sk_perm+0x81e/0x950 [ 1724.056124][T21065] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1724.056161][T21065] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1724.056183][T21065] ? security_socket_recvmsg+0x7e/0x2e0 [ 1724.056209][T21065] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1724.056242][T21065] sock_recvmsg+0x22c/0x270 [ 1724.056269][T21065] ____sys_recvmsg+0x1c9/0x460 [ 1724.056312][T21065] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1724.056370][T21065] ? import_iovec+0x74/0xa0 [ 1724.056404][T21065] ___sys_recvmsg+0x1b5/0x510 [ 1724.056442][T21065] ? __pfx____sys_recvmsg+0x10/0x10 [ 1724.056506][T21065] ? __fget_files+0x3a0/0x420 [ 1724.056554][T21065] __x64_sys_recvmsg+0x198/0x260 [ 1724.056589][T21065] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1724.056634][T21065] ? __pfx_ksys_write+0x10/0x10 [ 1724.056660][T21065] ? rcu_is_watching+0x15/0xb0 [ 1724.056688][T21065] ? do_syscall_64+0xbe/0x3b0 [ 1724.056720][T21065] do_syscall_64+0xfa/0x3b0 [ 1724.056744][T21065] ? lockdep_hardirqs_on+0x9c/0x150 [ 1724.056768][T21065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.056791][T21065] ? clear_bhb_loop+0x60/0xb0 [ 1724.056820][T21065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.056842][T21065] RIP: 0033:0x7fcb5fd8eec9 [ 1724.056862][T21065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1724.056882][T21065] RSP: 002b:00007fcb60c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1724.056906][T21065] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8eec9 [ 1724.056923][T21065] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1724.056937][T21065] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.056949][T21065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1724.056962][T21065] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1724.056998][T21065] [ 1724.529835][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1724.806060][T21079] lo speed is unknown, defaulting to 1000 [ 1724.818164][T21079] wg1 speed is unknown, defaulting to 1000 [ 1724.893412][T21080] lo speed is unknown, defaulting to 1000 [ 1724.899603][T21079] lo speed is unknown, defaulting to 1000 [ 1724.987792][T21080] wg1 speed is unknown, defaulting to 1000 [ 1725.006498][T21114] lo speed is unknown, defaulting to 1000 [ 1725.052440][T21114] wg1 speed is unknown, defaulting to 1000 [ 1725.064368][T21127] __nla_validate_parse: 8 callbacks suppressed [ 1725.064388][T21127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13261'. [ 1725.086152][T21080] lo speed is unknown, defaulting to 1000 [ 1725.121493][T21114] lo speed is unknown, defaulting to 1000 [ 1725.224462][T21130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13263'. [ 1725.390238][T21136] block nbd2: shutting down sockets [ 1725.542753][T21141] macsec2: entered promiscuous mode [ 1725.548147][T21141] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode [ 1725.568656][T21141] mac80211_hwsim hwsim61 wlan1: left promiscuous mode [ 1725.575958][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1725.719219][T21138] lo speed is unknown, defaulting to 1000 [ 1725.737508][T21138] wg1 speed is unknown, defaulting to 1000 [ 1725.746335][T21138] lo speed is unknown, defaulting to 1000 [ 1726.076481][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13274'. [ 1726.121392][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13274'. [ 1726.251705][T21172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13278'. [ 1726.360615][T21172] netlink: 268 bytes leftover after parsing attributes in process `syz.2.13278'. [ 1726.397077][T21181] FAULT_INJECTION: forcing a failure. [ 1726.397077][T21181] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.411021][T21181] CPU: 1 UID: 0 PID: 21181 Comm: syz.0.13281 Not tainted syzkaller #0 PREEMPT(full) [ 1726.411051][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1726.411065][T21181] Call Trace: [ 1726.411075][T21181] [ 1726.411085][T21181] dump_stack_lvl+0x189/0x250 [ 1726.411115][T21181] ? __pfx____ratelimit+0x10/0x10 [ 1726.411140][T21181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1726.411174][T21181] ? __pfx__printk+0x10/0x10 [ 1726.411210][T21181] ? __pfx___might_resched+0x10/0x10 [ 1726.411248][T21181] should_fail_ex+0x414/0x560 [ 1726.411285][T21181] should_failslab+0xa8/0x100 [ 1726.411318][T21181] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1726.411347][T21181] ? __alloc_skb+0x112/0x2d0 [ 1726.411369][T21181] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1726.411407][T21181] __alloc_skb+0x112/0x2d0 [ 1726.411436][T21181] __ip6_append_data+0x2c16/0x3f30 [ 1726.411460][T21181] ? __lock_acquire+0xab9/0xd20 [ 1726.411533][T21181] ? __pfx_raw6_getfrag+0x10/0x10 [ 1726.411586][T21181] ? __pfx___ip6_append_data+0x10/0x10 [ 1726.411610][T21181] ? __pfx_ip6_mtu+0x10/0x10 [ 1726.411644][T21181] ip6_append_data+0x1c1/0x380 [ 1726.411675][T21181] ? __pfx_raw6_getfrag+0x10/0x10 [ 1726.411708][T21181] rawv6_sendmsg+0x1286/0x1830 [ 1726.411760][T21181] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1726.411786][T21181] ? __lock_acquire+0xab9/0xd20 [ 1726.411849][T21181] ? __pfx_aa_sk_perm+0x10/0x10 [ 1726.411888][T21181] ? sock_rps_record_flow+0x19/0x410 [ 1726.411916][T21181] ? inet_sendmsg+0x2f4/0x370 [ 1726.411937][T21181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1726.411965][T21181] __sock_sendmsg+0x19c/0x270 [ 1726.412005][T21181] ____sys_sendmsg+0x505/0x830 [ 1726.412053][T21181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.412094][T21181] ? import_iovec+0x74/0xa0 [ 1726.412126][T21181] ___sys_sendmsg+0x21f/0x2a0 [ 1726.412158][T21181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.412238][T21181] ? __fget_files+0x2a/0x420 [ 1726.412268][T21181] ? __fget_files+0x3a0/0x420 [ 1726.412313][T21181] __x64_sys_sendmsg+0x19b/0x260 [ 1726.412345][T21181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1726.412396][T21181] ? __pfx_ksys_write+0x10/0x10 [ 1726.412421][T21181] ? rcu_is_watching+0x15/0xb0 [ 1726.412446][T21181] ? do_syscall_64+0xbe/0x3b0 [ 1726.412474][T21181] do_syscall_64+0xfa/0x3b0 [ 1726.412496][T21181] ? lockdep_hardirqs_on+0x9c/0x150 [ 1726.412519][T21181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.412539][T21181] ? clear_bhb_loop+0x60/0xb0 [ 1726.412565][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.412585][T21181] RIP: 0033:0x7f50d8b8eec9 [ 1726.412603][T21181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1726.412622][T21181] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.412644][T21181] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1726.412660][T21181] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1726.412673][T21181] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.412705][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.412718][T21181] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1726.412769][T21181] [ 1726.735017][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1726.753332][T21179] lo speed is unknown, defaulting to 1000 [ 1726.761476][T21179] wg1 speed is unknown, defaulting to 1000 [ 1726.769058][T21179] lo speed is unknown, defaulting to 1000 [ 1727.021073][T21194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13286'. [ 1727.044303][T21195] rdma_rxe: rxe_newlink: failed to add lo [ 1727.144667][T21198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13286'. [ 1727.181916][T21198] netlink: 34 bytes leftover after parsing attributes in process `syz.1.13286'. [ 1727.461861][T21209] lo speed is unknown, defaulting to 1000 [ 1727.471364][T21209] wg1 speed is unknown, defaulting to 1000 [ 1727.479057][T21209] lo speed is unknown, defaulting to 1000 [ 1727.568605][T21211] macsec3: entered promiscuous mode [ 1727.579215][T21211] macvlan0: entered promiscuous mode [ 1727.591509][T21211] macvlan0: left promiscuous mode [ 1727.636360][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13293'. [ 1727.809832][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1728.143922][T21227] syzkaller0: entered promiscuous mode [ 1728.151142][T21227] syzkaller0: entered allmulticast mode [ 1728.849794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1729.890673][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1730.932543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1731.916083][T21259] tipc: Enabling of bearer rejected, failed to enable media [ 1731.969895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1731.998147][T21247] lo speed is unknown, defaulting to 1000 [ 1732.022470][T21247] wg1 speed is unknown, defaulting to 1000 [ 1732.043435][T21247] lo speed is unknown, defaulting to 1000 [ 1732.294698][T21282] netlink: 'syz.3.13312': attribute type 1 has an invalid length. [ 1732.365604][T21282] bond17: entered promiscuous mode [ 1732.372730][T21282] bond17: entered allmulticast mode [ 1732.411262][T21284] bridge20: entered promiscuous mode [ 1732.416638][T21284] bridge20: entered allmulticast mode [ 1732.435806][T21284] bond17: (slave bridge20): making interface the new active one [ 1732.463922][T21284] bond17: (slave bridge20): Enslaving as an active interface with an up link [ 1732.511102][T21289] lo speed is unknown, defaulting to 1000 [ 1732.519086][T21289] wg1 speed is unknown, defaulting to 1000 [ 1732.546477][T21289] lo speed is unknown, defaulting to 1000 [ 1732.595035][T21291] lo speed is unknown, defaulting to 1000 [ 1732.623311][T21291] wg1 speed is unknown, defaulting to 1000 [ 1732.651209][T21291] lo speed is unknown, defaulting to 1000 [ 1732.867452][T21306] __nla_validate_parse: 1 callbacks suppressed [ 1732.867474][T21306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13316'. [ 1732.925765][T21306] vlan0: entered promiscuous mode [ 1732.994488][T21311] lo speed is unknown, defaulting to 1000 [ 1733.009796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1733.012725][T21311] wg1 speed is unknown, defaulting to 1000 [ 1733.053348][T21311] lo speed is unknown, defaulting to 1000 [ 1733.127530][T21319] netlink: 27748 bytes leftover after parsing attributes in process `syz.3.13320'. [ 1733.287063][T21320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13319'. [ 1733.363657][T21328] netlink: 'syz.4.13322': attribute type 1 has an invalid length. [ 1733.401592][T21320] netlink: 'syz.2.13319': attribute type 10 has an invalid length. [ 1733.405030][T21328] bond10: entered promiscuous mode [ 1733.415271][T21328] bond10: entered allmulticast mode [ 1733.474357][T21328] bridge8: entered promiscuous mode [ 1733.486622][T21328] bridge8: entered allmulticast mode [ 1733.584202][T21328] bond10: (slave bridge8): making interface the new active one [ 1733.592838][T21328] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 1733.882892][T21346] bond8: entered promiscuous mode [ 1733.904630][T21346] bond8: entered allmulticast mode [ 1733.911053][T21346] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1734.050023][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1734.145922][T21344] lo speed is unknown, defaulting to 1000 [ 1734.147643][T21365] netlink: 'syz.3.13331': attribute type 4 has an invalid length. [ 1734.196043][T21344] wg1 speed is unknown, defaulting to 1000 [ 1734.211943][T21357] block nbd2: shutting down sockets [ 1734.271507][T21365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13331'. [ 1734.371913][T21344] lo speed is unknown, defaulting to 1000 [ 1734.417573][T21361] syzkaller0: entered promiscuous mode [ 1734.424938][T21361] syzkaller0: entered allmulticast mode [ 1734.782844][T21373] lo speed is unknown, defaulting to 1000 [ 1735.089793][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1736.129819][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1736.545451][T21373] wg1 speed is unknown, defaulting to 1000 [ 1736.624756][T21386] lo speed is unknown, defaulting to 1000 [ 1736.634278][T21373] lo speed is unknown, defaulting to 1000 [ 1736.656848][T21386] wg1 speed is unknown, defaulting to 1000 [ 1736.705367][T21386] lo speed is unknown, defaulting to 1000 [ 1736.742262][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13341'. [ 1737.134147][T21408] block nbd2: shutting down sockets [ 1737.169797][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1737.426011][T21431] rdma_rxe: rxe_newlink: failed to add lo [ 1737.539378][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13352'. [ 1737.692775][T21448] netlink: 'syz.4.13358': attribute type 1 has an invalid length. [ 1737.716793][T21443] ip6gre1: entered allmulticast mode [ 1737.824072][T21448] bond11: entered promiscuous mode [ 1737.853052][T21448] bond11: entered allmulticast mode [ 1737.866624][T21445] lo speed is unknown, defaulting to 1000 [ 1737.915108][T21453] bridge9: entered promiscuous mode [ 1737.921989][T21453] bridge9: entered allmulticast mode [ 1737.935154][T21453] bond11: (slave bridge9): making interface the new active one [ 1737.943666][T21453] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 1737.962243][T21446] lo speed is unknown, defaulting to 1000 [ 1737.999597][T21445] wg1 speed is unknown, defaulting to 1000 [ 1738.020700][T21465] dvmrp12: entered allmulticast mode [ 1738.037029][T21463] dvmrp12: left allmulticast mode [ 1738.174685][T21446] wg1 speed is unknown, defaulting to 1000 [ 1738.184269][T21445] lo speed is unknown, defaulting to 1000 [ 1738.199434][T21446] lo speed is unknown, defaulting to 1000 [ 1738.210030][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1738.399148][T21477] lo speed is unknown, defaulting to 1000 [ 1738.445537][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13367'. [ 1738.450669][T21477] wg1 speed is unknown, defaulting to 1000 [ 1738.536751][T21477] lo speed is unknown, defaulting to 1000 [ 1739.116903][T21505] rdma_rxe: rxe_newlink: failed to add lo [ 1739.249751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1739.346462][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13374'. [ 1739.666587][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13379'. [ 1739.727645][T21525] block nbd2: shutting down sockets [ 1739.856796][T21537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13385'. [ 1740.108950][T21553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13388'. [ 1740.289871][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1740.376040][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13395'. [ 1740.489366][T21570] lo speed is unknown, defaulting to 1000 [ 1740.502315][T21570] wg1 speed is unknown, defaulting to 1000 [ 1740.516695][T21570] lo speed is unknown, defaulting to 1000 [ 1740.600721][T21574] block nbd2: shutting down sockets [ 1740.785900][T21580] FAULT_INJECTION: forcing a failure. [ 1740.785900][T21580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.816558][T21580] CPU: 0 UID: 0 PID: 21580 Comm: syz.3.13398 Not tainted syzkaller #0 PREEMPT(full) [ 1740.816596][T21580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1740.816610][T21580] Call Trace: [ 1740.816620][T21580] [ 1740.816631][T21580] dump_stack_lvl+0x189/0x250 [ 1740.816663][T21580] ? __pfx____ratelimit+0x10/0x10 [ 1740.816690][T21580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1740.816715][T21580] ? __pfx__printk+0x10/0x10 [ 1740.816746][T21580] ? __might_fault+0xb0/0x130 [ 1740.816791][T21580] should_fail_ex+0x414/0x560 [ 1740.816829][T21580] _copy_from_user+0x2d/0xb0 [ 1740.816858][T21580] ___sys_recvmsg+0x12e/0x510 [ 1740.816899][T21580] ? __pfx____sys_recvmsg+0x10/0x10 [ 1740.816970][T21580] ? __might_fault+0xb0/0x130 [ 1740.817004][T21580] do_recvmmsg+0x307/0x770 [ 1740.817045][T21580] ? __pfx_do_recvmmsg+0x10/0x10 [ 1740.817088][T21580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1740.817135][T21580] __x64_sys_recvmmsg+0x190/0x240 [ 1740.817171][T21580] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1740.817199][T21580] ? rcu_is_watching+0x15/0xb0 [ 1740.817228][T21580] ? do_syscall_64+0xbe/0x3b0 [ 1740.817259][T21580] do_syscall_64+0xfa/0x3b0 [ 1740.817284][T21580] ? lockdep_hardirqs_on+0x9c/0x150 [ 1740.817308][T21580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.817332][T21580] ? clear_bhb_loop+0x60/0xb0 [ 1740.817360][T21580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.817389][T21580] RIP: 0033:0x7fcb5fd8eec9 [ 1740.817410][T21580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1740.817430][T21580] RSP: 002b:00007fcb60c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1740.817454][T21580] RAX: ffffffffffffffda RBX: 00007fcb5ffe5fa0 RCX: 00007fcb5fd8eec9 [ 1740.817472][T21580] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000004 [ 1740.817487][T21580] RBP: 00007fcb60c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.817501][T21580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.817516][T21580] R13: 00007fcb5ffe6038 R14: 00007fcb5ffe5fa0 R15: 00007ffcaede0d98 [ 1740.817554][T21580] [ 1741.037581][T21585] : renamed from veth0_to_bond [ 1741.166069][T21593] FAULT_INJECTION: forcing a failure. [ 1741.166069][T21593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.206782][T21593] CPU: 0 UID: 0 PID: 21593 Comm: syz.0.13403 Not tainted syzkaller #0 PREEMPT(full) [ 1741.206815][T21593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1741.206830][T21593] Call Trace: [ 1741.206840][T21593] [ 1741.206850][T21593] dump_stack_lvl+0x189/0x250 [ 1741.206879][T21593] ? __pfx____ratelimit+0x10/0x10 [ 1741.206904][T21593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.206929][T21593] ? __pfx__printk+0x10/0x10 [ 1741.206958][T21593] ? __might_fault+0xb0/0x130 [ 1741.207000][T21593] should_fail_ex+0x414/0x560 [ 1741.207038][T21593] _copy_from_user+0x2d/0xb0 [ 1741.207067][T21593] ___sys_sendmsg+0x158/0x2a0 [ 1741.207100][T21593] ? __pfx____sys_sendmsg+0x10/0x10 [ 1741.207170][T21593] ? __fget_files+0x2a/0x420 [ 1741.207201][T21593] ? __fget_files+0x3a0/0x420 [ 1741.207245][T21593] __sys_sendmmsg+0x227/0x430 [ 1741.207281][T21593] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1741.207307][T21593] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1741.207365][T21593] ? ksys_write+0x22a/0x250 [ 1741.207402][T21593] ? __pfx_ksys_write+0x10/0x10 [ 1741.207427][T21593] ? rcu_is_watching+0x15/0xb0 [ 1741.207456][T21593] __x64_sys_sendmmsg+0xa0/0xc0 [ 1741.207488][T21593] do_syscall_64+0xfa/0x3b0 [ 1741.207512][T21593] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.207536][T21593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.207558][T21593] ? clear_bhb_loop+0x60/0xb0 [ 1741.207586][T21593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.207607][T21593] RIP: 0033:0x7f50d8b8eec9 [ 1741.207627][T21593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1741.207647][T21593] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1741.207671][T21593] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1741.207688][T21593] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 1741.207702][T21593] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.207716][T21593] R10: 000000002400c042 R11: 0000000000000246 R12: 0000000000000001 [ 1741.207729][T21593] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1741.207765][T21593] [ 1741.329986][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1741.574281][T21606] netlink: 216 bytes leftover after parsing attributes in process `syz.2.13408'. [ 1741.629379][T21606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13408'. [ 1741.684724][T21602] lo speed is unknown, defaulting to 1000 [ 1741.698584][T21602] wg1 speed is unknown, defaulting to 1000 [ 1741.707634][T21606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13408'. [ 1741.748084][T21602] lo speed is unknown, defaulting to 1000 [ 1741.872160][T21618] netlink: 'syz.4.13412': attribute type 2 has an invalid length. [ 1741.884146][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13412'. [ 1741.942797][T21617] syzkaller0: entered promiscuous mode [ 1741.949237][T21617] syzkaller0: entered allmulticast mode [ 1742.369750][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1743.415495][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1744.340978][T21646] lo speed is unknown, defaulting to 1000 [ 1744.358225][T21646] wg1 speed is unknown, defaulting to 1000 [ 1744.381788][T21646] lo speed is unknown, defaulting to 1000 [ 1744.449794][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1744.552003][T21662] __nla_validate_parse: 2 callbacks suppressed [ 1744.552025][T21662] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13426'. [ 1744.695162][T21669] lo speed is unknown, defaulting to 1000 [ 1744.703147][T21669] wg1 speed is unknown, defaulting to 1000 [ 1744.710871][T21669] lo speed is unknown, defaulting to 1000 [ 1744.782968][T21671] macsec5: entered promiscuous mode [ 1744.788426][T21671] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1744.811217][T21671] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1745.025422][T21679] lo speed is unknown, defaulting to 1000 [ 1745.037040][T21679] wg1 speed is unknown, defaulting to 1000 [ 1745.046187][T21679] lo speed is unknown, defaulting to 1000 [ 1745.489872][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1745.683822][T21701] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20004 [ 1745.697543][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13436'. [ 1745.744169][T21710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13439'. [ 1745.820851][T21708] block nbd2: shutting down sockets [ 1745.895528][T21714] netlink: 'syz.4.13440': attribute type 1 has an invalid length. [ 1746.019022][T21714] bridge10: entered promiscuous mode [ 1746.050563][T21714] bridge10: entered allmulticast mode [ 1746.270485][T21727] lo speed is unknown, defaulting to 1000 [ 1746.312471][T21727] wg1 speed is unknown, defaulting to 1000 [ 1746.365935][T21727] lo speed is unknown, defaulting to 1000 [ 1746.481352][T21741] block nbd2: shutting down sockets [ 1746.529805][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1746.575142][T21743] bridge21: entered promiscuous mode [ 1746.597412][T21743] bridge21: entered allmulticast mode [ 1746.673018][T21753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13452'. [ 1747.569760][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1747.708603][T21789] lo speed is unknown, defaulting to 1000 [ 1747.734624][T21789] wg1 speed is unknown, defaulting to 1000 [ 1747.771904][T21789] lo speed is unknown, defaulting to 1000 [ 1748.022631][T21808] lo speed is unknown, defaulting to 1000 [ 1748.030446][T21808] wg1 speed is unknown, defaulting to 1000 [ 1748.038382][T21808] lo speed is unknown, defaulting to 1000 [ 1748.122195][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13473'. [ 1748.514161][T21824] netlink: 'syz.2.13477': attribute type 10 has an invalid length. [ 1748.517807][T21826] lo speed is unknown, defaulting to 1000 [ 1748.536061][T21826] wg1 speed is unknown, defaulting to 1000 [ 1748.572770][T21826] lo speed is unknown, defaulting to 1000 [ 1748.609684][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1748.761318][T21840] netlink: 'syz.4.13481': attribute type 1 has an invalid length. [ 1748.833937][T21840] bridge10: entered promiscuous mode [ 1748.839471][T21840] bridge10: entered allmulticast mode [ 1748.902275][T21848] FAULT_INJECTION: forcing a failure. [ 1748.902275][T21848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1748.918168][T21848] CPU: 0 UID: 0 PID: 21848 Comm: syz.1.13483 Not tainted syzkaller #0 PREEMPT(full) [ 1748.918200][T21848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1748.918215][T21848] Call Trace: [ 1748.918224][T21848] [ 1748.918235][T21848] dump_stack_lvl+0x189/0x250 [ 1748.918266][T21848] ? __pfx____ratelimit+0x10/0x10 [ 1748.918291][T21848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1748.918317][T21848] ? __pfx__printk+0x10/0x10 [ 1748.918360][T21848] ? fs_reclaim_acquire+0x7d/0x100 [ 1748.918402][T21848] should_fail_ex+0x414/0x560 [ 1748.918440][T21848] prepare_alloc_pages+0x213/0x610 [ 1748.918487][T21848] __alloc_frozen_pages_noprof+0x123/0x370 [ 1748.918527][T21848] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1748.918587][T21848] ? policy_nodemask+0x27c/0x720 [ 1748.918623][T21848] alloc_pages_mpol+0x232/0x4a0 [ 1748.918660][T21848] vma_alloc_folio_noprof+0xe4/0x200 [ 1748.918694][T21848] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1748.918740][T21848] folio_prealloc+0x30/0x180 [ 1748.918791][T21848] do_wp_page+0x1231/0x5800 [ 1748.918864][T21848] ? __pfx_do_wp_page+0x10/0x10 [ 1748.918888][T21848] ? do_raw_spin_lock+0x121/0x290 [ 1748.918917][T21848] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1748.918956][T21848] __handle_mm_fault+0x1033/0x5440 [ 1748.919004][T21848] ? __pfx___handle_mm_fault+0x10/0x10 [ 1748.919048][T21848] ? follow_page_pte+0xd03/0x13e0 [ 1748.919088][T21848] handle_mm_fault+0x40a/0x8e0 [ 1748.919124][T21848] __get_user_pages+0x1699/0x2ce0 [ 1748.919145][T21848] ? __lock_acquire+0xab9/0xd20 [ 1748.919212][T21848] __gup_longterm_locked+0xde9/0x1660 [ 1748.919249][T21848] ? sanity_check_pinned_pages+0x1241/0x1300 [ 1748.919273][T21848] ? gup_fast_fallback+0x195f/0x2010 [ 1748.919298][T21848] gup_fast_fallback+0x1e6a/0x2010 [ 1748.919376][T21848] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1748.919400][T21848] ? kasan_save_track+0x4f/0x80 [ 1748.919422][T21848] ? kasan_save_track+0x3e/0x80 [ 1748.919445][T21848] ? __kasan_kmalloc+0x93/0xb0 [ 1748.919468][T21848] ? sock_kmalloc+0xd6/0x160 [ 1748.919496][T21848] ? af_alg_get_rsgl+0x236/0x810 [ 1748.919520][T21848] ? skcipher_recvmsg+0x3d1/0x11d0 [ 1748.919558][T21848] ? ____sys_recvmsg+0x1c9/0x460 [ 1748.919585][T21848] ? ___sys_recvmsg+0x1b5/0x510 [ 1748.919613][T21848] ? __x64_sys_recvmsg+0x198/0x260 [ 1748.919648][T21848] ? pin_user_pages_fast+0x4d/0xb0 [ 1748.919679][T21848] iov_iter_extract_pages+0x35a/0x5e0 [ 1748.919720][T21848] extract_iter_to_sg+0xe46/0x24e0 [ 1748.919764][T21848] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1748.919794][T21848] ? rcu_is_watching+0x15/0xb0 [ 1748.919817][T21848] ? trace_kmalloc+0x1f/0xd0 [ 1748.919843][T21848] ? __kmalloc_noprof+0x29b/0x4f0 [ 1748.919879][T21848] ? __asan_memset+0x22/0x50 [ 1748.919907][T21848] af_alg_get_rsgl+0x436/0x810 [ 1748.919960][T21848] skcipher_recvmsg+0x3d1/0x11d0 [ 1748.919997][T21848] ? aa_sk_perm+0x81e/0x950 [ 1748.920046][T21848] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1748.920083][T21848] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1748.920104][T21848] ? security_socket_recvmsg+0x7e/0x2e0 [ 1748.920131][T21848] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1748.920163][T21848] sock_recvmsg+0x22c/0x270 [ 1748.920192][T21848] ____sys_recvmsg+0x1c9/0x460 [ 1748.920232][T21848] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1748.920280][T21848] ? import_iovec+0x74/0xa0 [ 1748.920312][T21848] ___sys_recvmsg+0x1b5/0x510 [ 1748.920349][T21848] ? __pfx____sys_recvmsg+0x10/0x10 [ 1748.920412][T21848] ? __fget_files+0x3a0/0x420 [ 1748.920459][T21848] __x64_sys_recvmsg+0x198/0x260 [ 1748.920494][T21848] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1748.920537][T21848] ? __pfx_ksys_write+0x10/0x10 [ 1748.920585][T21848] ? rcu_is_watching+0x15/0xb0 [ 1748.920612][T21848] ? do_syscall_64+0xbe/0x3b0 [ 1748.920643][T21848] do_syscall_64+0xfa/0x3b0 [ 1748.920666][T21848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1748.920689][T21848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.920711][T21848] ? clear_bhb_loop+0x60/0xb0 [ 1748.920739][T21848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.920760][T21848] RIP: 0033:0x7fd15e58eec9 [ 1748.920779][T21848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1748.920799][T21848] RSP: 002b:00007fd15f396038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1748.920840][T21848] RAX: ffffffffffffffda RBX: 00007fd15e7e5fa0 RCX: 00007fd15e58eec9 [ 1748.920857][T21848] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1748.920872][T21848] RBP: 00007fd15f396090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.920885][T21848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1748.920899][T21848] R13: 00007fd15e7e6038 R14: 00007fd15e7e5fa0 R15: 00007ffc47e13848 [ 1748.920936][T21848] [ 1748.974785][T21852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13484'. [ 1749.625140][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13487'. [ 1749.649857][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1749.693267][T21868] rdma_rxe: rxe_newlink: failed to add lo [ 1749.802969][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13490'. [ 1749.976111][T21880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13491'. [ 1750.392107][T21897] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13495'. [ 1750.689743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1750.826742][T21890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13495'. [ 1750.831578][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13498'. [ 1750.942216][T21916] netlink: 'syz.4.13499': attribute type 1 has an invalid length. [ 1751.033065][T21916] bond12: entered promiscuous mode [ 1751.040201][T21916] bond12: entered allmulticast mode [ 1751.088138][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13500'. [ 1751.196369][T21916] bridge10: entered promiscuous mode [ 1751.210223][T21928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13502'. [ 1751.216818][T21916] bridge10: entered allmulticast mode [ 1751.244600][T21916] bond12: (slave bridge10): making interface the new active one [ 1751.253871][T21916] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 1751.272306][T21928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13502'. [ 1751.283780][T21928] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13502'. [ 1751.311513][T21906] lo speed is unknown, defaulting to 1000 [ 1751.337094][T21906] wg1 speed is unknown, defaulting to 1000 [ 1751.365522][T21906] lo speed is unknown, defaulting to 1000 [ 1751.406233][T21934] rdma_rxe: rxe_newlink: failed to add lo [ 1751.729938][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1751.849060][T21948] lo speed is unknown, defaulting to 1000 [ 1751.887891][T21950] netlink: 'syz.0.13509': attribute type 10 has an invalid length. [ 1751.904569][T21948] wg1 speed is unknown, defaulting to 1000 [ 1751.933918][T21948] lo speed is unknown, defaulting to 1000 [ 1752.477845][T21973] netlink: 'syz.0.13515': attribute type 1 has an invalid length. [ 1752.531863][T21973] bond14: entered promiscuous mode [ 1752.542477][T21973] bond14: entered allmulticast mode [ 1752.615925][T21973] bridge33: entered promiscuous mode [ 1752.623553][T21973] bridge33: entered allmulticast mode [ 1752.634402][T21973] bond14: (slave bridge33): making interface the new active one [ 1752.646336][T21973] bond14: (slave bridge33): Enslaving as an active interface with an up link [ 1752.658175][T21974] lo speed is unknown, defaulting to 1000 [ 1752.669165][T21974] wg1 speed is unknown, defaulting to 1000 [ 1752.692474][T21987] lo speed is unknown, defaulting to 1000 [ 1752.703706][T21974] lo speed is unknown, defaulting to 1000 [ 1752.721461][T21987] wg1 speed is unknown, defaulting to 1000 [ 1752.755467][T21987] lo speed is unknown, defaulting to 1000 [ 1752.769796][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1753.415946][T22018] netlink: 'syz.0.13526': attribute type 10 has an invalid length. [ 1753.752745][T22026] lo speed is unknown, defaulting to 1000 [ 1753.809772][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1754.002254][T22026] wg1 speed is unknown, defaulting to 1000 [ 1754.024652][T22033] lo speed is unknown, defaulting to 1000 [ 1754.048957][T22026] lo speed is unknown, defaulting to 1000 [ 1754.086037][T22033] wg1 speed is unknown, defaulting to 1000 [ 1754.156610][T22033] lo speed is unknown, defaulting to 1000 [ 1754.849731][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1755.102874][T22076] rdma_rxe: rxe_newlink: failed to add lo [ 1755.432529][T22084] macsec1: entered promiscuous mode [ 1755.444265][T22084] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1755.454650][T22084] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 1755.518208][T22082] lo speed is unknown, defaulting to 1000 [ 1755.591976][T22082] wg1 speed is unknown, defaulting to 1000 [ 1755.602040][T22082] lo speed is unknown, defaulting to 1000 [ 1755.761363][T22092] netlink: 'syz.0.13549': attribute type 1 has an invalid length. [ 1755.889722][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1755.919279][T22092] bond15: entered promiscuous mode [ 1755.926847][T22092] bond15: entered allmulticast mode [ 1755.944884][T22099] bridge34: entered promiscuous mode [ 1755.950644][T22099] bridge34: entered allmulticast mode [ 1755.963537][T22099] bond15: (slave bridge34): making interface the new active one [ 1755.972837][T22099] bond15: (slave bridge34): Enslaving as an active interface with an up link [ 1756.148919][T22118] __nla_validate_parse: 3 callbacks suppressed [ 1756.148940][T22118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13557'. [ 1756.225375][T22125] rdma_rxe: rxe_newlink: failed to add lo [ 1756.413935][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13560'. [ 1756.827460][T22142] lo speed is unknown, defaulting to 1000 [ 1756.866744][T22142] wg1 speed is unknown, defaulting to 1000 [ 1756.876552][T22142] lo speed is unknown, defaulting to 1000 [ 1756.929727][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1756.954585][T22149] lo speed is unknown, defaulting to 1000 [ 1757.115642][T22162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13570'. [ 1757.130979][T22149] wg1 speed is unknown, defaulting to 1000 [ 1757.227527][T22149] lo speed is unknown, defaulting to 1000 [ 1757.359028][T22169] syzkaller1: entered promiscuous mode [ 1757.366557][T22169] syzkaller1: entered allmulticast mode [ 1757.438916][T22174] lo speed is unknown, defaulting to 1000 [ 1757.448754][T22174] wg1 speed is unknown, defaulting to 1000 [ 1757.456734][T22174] lo speed is unknown, defaulting to 1000 [ 1757.680802][T22181] lo speed is unknown, defaulting to 1000 [ 1757.735899][T22181] wg1 speed is unknown, defaulting to 1000 [ 1757.801147][T22181] lo speed is unknown, defaulting to 1000 [ 1757.970048][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1758.042066][T22188] vlan0: entered promiscuous mode [ 1758.268585][T22198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13580'. [ 1758.396549][T22204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13582'. [ 1758.634402][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13584'. [ 1758.644148][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13584'. [ 1758.670715][T22208] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13584'. [ 1758.701725][T22208] nbd: socks must be embedded in a SOCK_ITEM attr [ 1758.796885][T22206] syzkaller0: entered promiscuous mode [ 1758.803929][T22206] syzkaller0: entered allmulticast mode [ 1758.940717][T22224] block nbd2: shutting down sockets [ 1759.009815][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1759.028300][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13589'. [ 1759.138621][T22236] netlink: 'syz.4.13592': attribute type 13 has an invalid length. [ 1759.234056][T22245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13595'. [ 1760.049781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1761.089761][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1761.164212][T22236] tipc: Resetting bearer [ 1761.343172][T22243] lo speed is unknown, defaulting to 1000 [ 1761.385161][T22243] wg1 speed is unknown, defaulting to 1000 [ 1761.401542][T22243] lo speed is unknown, defaulting to 1000 [ 1761.647698][T22269] syzkaller0: entered promiscuous mode [ 1761.654273][T22269] syzkaller0: entered allmulticast mode [ 1761.835015][T22278] ip6gre1: entered promiscuous mode [ 1762.129802][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1763.169740][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1763.651624][T22276] lo speed is unknown, defaulting to 1000 [ 1763.659386][T22276] wg1 speed is unknown, defaulting to 1000 [ 1763.687372][T22276] lo speed is unknown, defaulting to 1000 [ 1763.695131][T22291] lo speed is unknown, defaulting to 1000 [ 1763.703738][T22291] wg1 speed is unknown, defaulting to 1000 [ 1763.725648][T22291] lo speed is unknown, defaulting to 1000 [ 1763.825908][T22298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13609'. [ 1763.931530][T22297] lo speed is unknown, defaulting to 1000 [ 1763.939955][T22297] wg1 speed is unknown, defaulting to 1000 [ 1763.947666][T22297] lo speed is unknown, defaulting to 1000 [ 1764.209765][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1764.298603][T22313] lo speed is unknown, defaulting to 1000 [ 1764.307578][T22313] wg1 speed is unknown, defaulting to 1000 [ 1764.316651][T22313] lo speed is unknown, defaulting to 1000 [ 1764.460476][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13614'. [ 1765.001475][T22331] block nbd2: shutting down sockets [ 1765.256045][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1765.333678][T22329] : (slave team0): Releasing backup interface [ 1765.361904][T22329] team0 (unregistering): left promiscuous mode [ 1765.374823][T22329] team_slave_0: left promiscuous mode [ 1765.381766][T22329] team_slave_1: left promiscuous mode [ 1765.412452][T22329] team0 (unregistering): Port device team_slave_0 removed [ 1765.440861][T22329] team0 (unregistering): Port device team_slave_1 removed [ 1765.472363][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13625'. [ 1765.746531][T22359] lo speed is unknown, defaulting to 1000 [ 1765.754870][T22359] wg1 speed is unknown, defaulting to 1000 [ 1765.791316][T22359] lo speed is unknown, defaulting to 1000 [ 1765.852136][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13630'. [ 1766.053412][T22361] lo speed is unknown, defaulting to 1000 [ 1766.091219][T22361] wg1 speed is unknown, defaulting to 1000 [ 1766.106343][T22370] lo speed is unknown, defaulting to 1000 [ 1766.154021][T22361] lo speed is unknown, defaulting to 1000 [ 1766.223555][T22386] netlink: 'syz.0.13635': attribute type 23 has an invalid length. [ 1766.235184][T22370] wg1 speed is unknown, defaulting to 1000 [ 1766.290051][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1766.307967][T22370] lo speed is unknown, defaulting to 1000 [ 1766.458777][T22389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13636'. [ 1766.900069][T22403] lo speed is unknown, defaulting to 1000 [ 1766.907686][T22403] wg1 speed is unknown, defaulting to 1000 [ 1766.916013][T22403] lo speed is unknown, defaulting to 1000 [ 1767.039312][T22412] netlink: 51 bytes leftover after parsing attributes in process `syz.3.13642'. [ 1767.170889][T22417] block nbd2: shutting down sockets [ 1767.329754][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1767.458993][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13648'. [ 1767.496940][T22436] netlink: 'syz.3.13650': attribute type 1 has an invalid length. [ 1767.513066][T22436] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13650'. [ 1768.062224][T22456] lo speed is unknown, defaulting to 1000 [ 1768.102728][T22456] wg1 speed is unknown, defaulting to 1000 [ 1768.136625][T22456] lo speed is unknown, defaulting to 1000 [ 1768.646892][T22485] FAULT_INJECTION: forcing a failure. [ 1768.646892][T22485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.648492][T22485] [ 1768.648503][T22485] ====================================================== [ 1768.648513][T22485] WARNING: possible circular locking dependency detected [ 1768.648525][T22485] syzkaller #0 Not tainted [ 1768.648537][T22485] ------------------------------------------------------ [ 1768.648547][T22485] syz.0.13665/22485 is trying to acquire lock: [ 1768.648559][T22485] ffffffff8e12e320 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 1768.648617][T22485] [ 1768.648617][T22485] but task is already holding lock: [ 1768.648626][T22485] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1768.648683][T22485] [ 1768.648683][T22485] which lock already depends on the new lock. [ 1768.648683][T22485] [ 1768.648692][T22485] [ 1768.648692][T22485] the existing dependency chain (in reverse order) is: [ 1768.648701][T22485] [ 1768.648701][T22485] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1768.648731][T22485] lock_acquire+0x120/0x360 [ 1768.648772][T22485] _raw_spin_lock_nested+0x32/0x50 [ 1768.648793][T22485] raw_spin_rq_lock_nested+0x2a/0x140 [ 1768.648822][T22485] task_rq_lock+0xbc/0x470 [ 1768.648850][T22485] cgroup_move_task+0x92/0x2a0 [ 1768.648868][T22485] css_set_move_task+0x658/0x9e0 [ 1768.648889][T22485] cgroup_post_fork+0x1ef/0x790 [ 1768.648910][T22485] copy_process+0x3862/0x3c00 [ 1768.648929][T22485] kernel_clone+0x21e/0x840 [ 1768.648949][T22485] user_mode_thread+0xdd/0x140 [ 1768.648970][T22485] rest_init+0x23/0x300 [ 1768.648997][T22485] start_kernel+0x3a9/0x410 [ 1768.649026][T22485] x86_64_start_reservations+0x24/0x30 [ 1768.649048][T22485] x86_64_start_kernel+0x143/0x1c0 [ 1768.649069][T22485] common_startup_64+0x13e/0x147 [ 1768.649094][T22485] [ 1768.649094][T22485] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1768.649121][T22485] lock_acquire+0x120/0x360 [ 1768.649157][T22485] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1768.649175][T22485] try_to_wake_up+0x67/0x12b0 [ 1768.649197][T22485] __wake_up_common_lock+0x137/0x1f0 [ 1768.649221][T22485] tty_port_default_wakeup+0xa2/0xf0 [ 1768.649244][T22485] serial8250_tx_chars+0x72e/0x970 [ 1768.649263][T22485] serial8250_handle_irq+0x633/0xbb0 [ 1768.649282][T22485] serial8250_default_handle_irq+0xbf/0x1e0 [ 1768.649307][T22485] serial8250_interrupt+0x8d/0x160 [ 1768.649335][T22485] __handle_irq_event_percpu+0x289/0x980 [ 1768.649358][T22485] handle_irq_event+0x8b/0x1e0 [ 1768.649380][T22485] handle_edge_irq+0x23b/0xa10 [ 1768.649399][T22485] __common_interrupt+0x13e/0x1f0 [ 1768.649427][T22485] common_interrupt+0xb6/0xe0 [ 1768.649454][T22485] asm_common_interrupt+0x26/0x40 [ 1768.649472][T22485] pv_native_safe_halt+0x13/0x20 [ 1768.649490][T22485] default_idle+0x13/0x20 [ 1768.649513][T22485] default_idle_call+0x74/0xb0 [ 1768.649536][T22485] do_idle+0x1e8/0x510 [ 1768.649563][T22485] cpu_startup_entry+0x44/0x60 [ 1768.649591][T22485] rest_init+0x2de/0x300 [ 1768.649616][T22485] start_kernel+0x3a9/0x410 [ 1768.649642][T22485] x86_64_start_reservations+0x24/0x30 [ 1768.649663][T22485] x86_64_start_kernel+0x143/0x1c0 [ 1768.649683][T22485] common_startup_64+0x13e/0x147 [ 1768.649708][T22485] [ 1768.649708][T22485] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1768.649737][T22485] lock_acquire+0x120/0x360 [ 1768.649762][T22485] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1768.649780][T22485] __wake_up_common_lock+0x2f/0x1f0 [ 1768.649803][T22485] tty_port_default_wakeup+0xa2/0xf0 [ 1768.649825][T22485] serial8250_tx_chars+0x72e/0x970 [ 1768.649843][T22485] serial8250_handle_irq+0x633/0xbb0 [ 1768.649861][T22485] serial8250_default_handle_irq+0xbf/0x1e0 [ 1768.649884][T22485] serial8250_interrupt+0x8d/0x160 [ 1768.649910][T22485] __handle_irq_event_percpu+0x289/0x980 [ 1768.649932][T22485] handle_irq_event+0x8b/0x1e0 [ 1768.649953][T22485] handle_edge_irq+0x23b/0xa10 [ 1768.649971][T22485] __common_interrupt+0x13e/0x1f0 [ 1768.649999][T22485] common_interrupt+0xb6/0xe0 [ 1768.650026][T22485] asm_common_interrupt+0x26/0x40 [ 1768.650045][T22485] pv_native_safe_halt+0x13/0x20 [ 1768.650064][T22485] default_idle+0x13/0x20 [ 1768.650088][T22485] default_idle_call+0x74/0xb0 [ 1768.650113][T22485] do_idle+0x1e8/0x510 [ 1768.650148][T22485] cpu_startup_entry+0x44/0x60 [ 1768.650176][T22485] rest_init+0x2de/0x300 [ 1768.650200][T22485] start_kernel+0x3a9/0x410 [ 1768.650227][T22485] x86_64_start_reservations+0x24/0x30 [ 1768.650248][T22485] x86_64_start_kernel+0x143/0x1c0 [ 1768.650268][T22485] common_startup_64+0x13e/0x147 [ 1768.650291][T22485] [ 1768.650291][T22485] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1768.650317][T22485] lock_acquire+0x120/0x360 [ 1768.650343][T22485] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1768.650361][T22485] serial8250_console_write+0x17e/0x1ba0 [ 1768.650383][T22485] console_flush_all+0x728/0xc40 [ 1768.650403][T22485] console_unlock+0xc4/0x270 [ 1768.650421][T22485] vprintk_emit+0x5b7/0x7a0 [ 1768.650438][T22485] _printk+0xcf/0x120 [ 1768.650463][T22485] register_console+0xa8b/0xf90 [ 1768.650485][T22485] univ8250_console_init+0x3a/0x70 [ 1768.650507][T22485] console_init+0x10e/0x430 [ 1768.650527][T22485] start_kernel+0x254/0x410 [ 1768.650555][T22485] x86_64_start_reservations+0x24/0x30 [ 1768.650577][T22485] x86_64_start_kernel+0x143/0x1c0 [ 1768.650598][T22485] common_startup_64+0x13e/0x147 [ 1768.650623][T22485] [ 1768.650623][T22485] -> #0 (console_owner){-.-.}-{0:0}: [ 1768.650651][T22485] validate_chain+0xb9b/0x2140 [ 1768.650669][T22485] __lock_acquire+0xab9/0xd20 [ 1768.650696][T22485] lock_acquire+0x120/0x360 [ 1768.650722][T22485] console_flush_all+0x6d2/0xc40 [ 1768.650744][T22485] console_unlock+0xc4/0x270 [ 1768.650761][T22485] vprintk_emit+0x5b7/0x7a0 [ 1768.650779][T22485] _printk+0xcf/0x120 [ 1768.650802][T22485] should_fail_ex+0x3f5/0x560 [ 1768.650829][T22485] strncpy_from_user+0x36/0x290 [ 1768.650855][T22485] strncpy_from_user_nofault+0x72/0x150 [ 1768.650895][T22485] bpf_probe_read_compat_str+0xe2/0x180 [ 1768.650926][T22485] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 1768.650944][T22485] bpf_trace_run4+0x28b/0x4a0 [ 1768.650968][T22485] __bpf_trace_sched_switch+0x17a/0x1e0 [ 1768.650991][T22485] __traceiter_sched_switch+0x9d/0xd0 [ 1768.651015][T22485] __schedule+0x238f/0x4cc0 [ 1768.651033][T22485] preempt_schedule_irq+0xb5/0x150 [ 1768.651054][T22485] irqentry_exit+0x6f/0x90 [ 1768.651074][T22485] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1768.651097][T22485] lock_acquire+0x175/0x360 [ 1768.651124][T22485] unwind_next_frame+0xc2/0x2390 [ 1768.651167][T22485] arch_stack_walk+0x11c/0x150 [ 1768.651188][T22485] stack_trace_save+0x9c/0xe0 [ 1768.651209][T22485] kasan_save_track+0x3e/0x80 [ 1768.651231][T22485] __kasan_kmalloc+0x93/0xb0 [ 1768.651256][T22485] __kmalloc_cache_noprof+0x230/0x3d0 [ 1768.651282][T22485] sctp_add_bind_addr+0x8c/0x370 [ 1768.651306][T22485] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1768.651329][T22485] sctp_bind_addr_copy+0xb3/0x3c0 [ 1768.651352][T22485] sctp_connect_new_asoc+0x2e0/0x690 [ 1768.651381][T22485] sctp_sendmsg+0x155c/0x2810 [ 1768.651409][T22485] __sock_sendmsg+0x19c/0x270 [ 1768.651439][T22485] ____sys_sendmsg+0x505/0x830 [ 1768.651464][T22485] ___sys_sendmsg+0x21f/0x2a0 [ 1768.651489][T22485] __x64_sys_sendmsg+0x19b/0x260 [ 1768.651514][T22485] do_syscall_64+0xfa/0x3b0 [ 1768.651537][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.651556][T22485] [ 1768.651556][T22485] other info that might help us debug this: [ 1768.651556][T22485] [ 1768.651565][T22485] Chain exists of: [ 1768.651565][T22485] console_owner --> &p->pi_lock --> &rq->__lock [ 1768.651565][T22485] [ 1768.651599][T22485] Possible unsafe locking scenario: [ 1768.651599][T22485] [ 1768.651606][T22485] CPU0 CPU1 [ 1768.651614][T22485] ---- ---- [ 1768.651621][T22485] lock(&rq->__lock); [ 1768.651635][T22485] lock(&p->pi_lock); [ 1768.651651][T22485] lock(&rq->__lock); [ 1768.651667][T22485] lock(console_owner); [ 1768.651682][T22485] [ 1768.651682][T22485] *** DEADLOCK *** [ 1768.651682][T22485] [ 1768.651697][T22485] 7 locks held by syz.0.13665/22485: [ 1768.651710][T22485] #0: ffff8880359ba558 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_sendmsg+0xb97/0x2810 [ 1768.651768][T22485] #1: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: sctp_copy_local_addr_list+0x9b/0x4e0 [ 1768.651821][T22485] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 1768.651870][T22485] #3: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1768.651927][T22485] #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 1768.651979][T22485] #5: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 1768.652031][T22485] #6: ffffffff8e015c50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 1768.652079][T22485] [ 1768.652079][T22485] stack backtrace: [ 1768.652090][T22485] CPU: 1 UID: 0 PID: 22485 Comm: syz.0.13665 Not tainted syzkaller #0 PREEMPT(full) [ 1768.652114][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1768.652133][T22485] Call Trace: [ 1768.652142][T22485] [ 1768.652152][T22485] dump_stack_lvl+0x189/0x250 [ 1768.652178][T22485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1768.652202][T22485] ? __pfx__printk+0x10/0x10 [ 1768.652231][T22485] ? print_lock_name+0xde/0x100 [ 1768.652260][T22485] print_circular_bug+0x2ee/0x310 [ 1768.652285][T22485] check_noncircular+0x134/0x160 [ 1768.652310][T22485] validate_chain+0xb9b/0x2140 [ 1768.652346][T22485] __lock_acquire+0xab9/0xd20 [ 1768.652379][T22485] ? console_flush_all+0x13a/0xc40 [ 1768.652401][T22485] lock_acquire+0x120/0x360 [ 1768.652429][T22485] ? console_flush_all+0x13a/0xc40 [ 1768.652458][T22485] ? do_raw_spin_unlock+0x122/0x240 [ 1768.652482][T22485] ? console_flush_all+0x13a/0xc40 [ 1768.652507][T22485] console_flush_all+0x6d2/0xc40 [ 1768.652528][T22485] ? console_flush_all+0x13a/0xc40 [ 1768.652553][T22485] ? console_flush_all+0x13a/0xc40 [ 1768.652580][T22485] ? __pfx_console_flush_all+0x10/0x10 [ 1768.652610][T22485] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1768.652640][T22485] console_unlock+0xc4/0x270 [ 1768.652661][T22485] ? __pfx_console_unlock+0x10/0x10 [ 1768.652684][T22485] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1768.652713][T22485] vprintk_emit+0x5b7/0x7a0 [ 1768.652735][T22485] ? __pfx_vprintk_emit+0x10/0x10 [ 1768.652768][T22485] _printk+0xcf/0x120 [ 1768.652794][T22485] ? __pfx____ratelimit+0x10/0x10 [ 1768.652818][T22485] ? __pfx__printk+0x10/0x10 [ 1768.652843][T22485] ? bsearch+0x95/0xc0 [ 1768.652872][T22485] ? search_extable+0x8f/0xd0 [ 1768.652900][T22485] should_fail_ex+0x3f5/0x560 [ 1768.652931][T22485] strncpy_from_user+0x36/0x290 [ 1768.652962][T22485] strncpy_from_user_nofault+0x72/0x150 [ 1768.652987][T22485] bpf_probe_read_compat_str+0xe2/0x180 [ 1768.653022][T22485] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 1768.653040][T22485] bpf_trace_run4+0x28b/0x4a0 [ 1768.653066][T22485] ? bpf_trace_run4+0x19c/0x4a0 [ 1768.653092][T22485] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1768.653116][T22485] ? rcu_read_lock_sched_held+0x89/0x100 [ 1768.653148][T22485] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 1768.653176][T22485] __bpf_trace_sched_switch+0x17a/0x1e0 [ 1768.653203][T22485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1768.653229][T22485] ? psi_group_change+0xab8/0x1050 [ 1768.653268][T22485] ? __schedule+0x22e9/0x4cc0 [ 1768.653289][T22485] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 1768.653315][T22485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1768.653341][T22485] __traceiter_sched_switch+0x9d/0xd0 [ 1768.653368][T22485] __schedule+0x238f/0x4cc0 [ 1768.653393][T22485] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 1768.653428][T22485] ? rcu_is_watching+0x15/0xb0 [ 1768.653446][T22485] ? trace_page_fault_kernel+0x84/0x1e0 [ 1768.653478][T22485] ? __pfx___schedule+0x10/0x10 [ 1768.653509][T22485] ? preempt_schedule_irq+0xaa/0x150 [ 1768.653533][T22485] preempt_schedule_irq+0xb5/0x150 [ 1768.653555][T22485] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1768.653583][T22485] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1768.653617][T22485] irqentry_exit+0x6f/0x90 [ 1768.653638][T22485] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1768.653661][T22485] RIP: 0010:lock_acquire+0x175/0x360 [ 1768.653691][T22485] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 10 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1768.653710][T22485] RSP: 0018:ffffc90019f4eff8 EFLAGS: 00000206 [ 1768.653728][T22485] RAX: b57c66cb567e3800 RBX: 0000000000000000 RCX: b57c66cb567e3800 [ 1768.653744][T22485] RDX: 0000000000000000 RSI: ffffffff8dba098d RDI: ffffffff8be33f80 [ 1768.653760][T22485] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 1768.653775][T22485] R10: ffffc90019f4f1b8 R11: ffffffff81ac3c30 R12: 0000000000000002 [ 1768.653791][T22485] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1768.653807][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1768.653829][T22485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1768.653854][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1768.653886][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1768.653908][T22485] ? sctp_connect_new_asoc+0x2e0/0x690 [ 1768.653940][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1768.653961][T22485] unwind_next_frame+0xc2/0x2390 [ 1768.653982][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1768.654007][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1768.654030][T22485] ? sctp_bind_addr_copy+0xb3/0x3c0 [ 1768.654057][T22485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1768.654082][T22485] arch_stack_walk+0x11c/0x150 [ 1768.654109][T22485] ? sctp_connect_new_asoc+0x2e0/0x690 [ 1768.654150][T22485] stack_trace_save+0x9c/0xe0 [ 1768.654173][T22485] ? __pfx_stack_trace_save+0x10/0x10 [ 1768.654203][T22485] kasan_save_track+0x3e/0x80 [ 1768.654227][T22485] ? kasan_save_track+0x3e/0x80 [ 1768.654250][T22485] ? __kasan_kmalloc+0x93/0xb0 [ 1768.654274][T22485] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1768.654301][T22485] ? sctp_add_bind_addr+0x8c/0x370 [ 1768.654325][T22485] ? sctp_copy_local_addr_list+0x30b/0x4e0 [ 1768.654349][T22485] ? sctp_bind_addr_copy+0xb3/0x3c0 [ 1768.654371][T22485] ? sctp_connect_new_asoc+0x2e0/0x690 [ 1768.654432][T22485] __kasan_kmalloc+0x93/0xb0 [ 1768.654460][T22485] __kmalloc_cache_noprof+0x230/0x3d0 [ 1768.654486][T22485] ? sctp_add_bind_addr+0x8c/0x370 [ 1768.654513][T22485] sctp_add_bind_addr+0x8c/0x370 [ 1768.654539][T22485] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1768.654565][T22485] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1768.654590][T22485] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1768.654634][T22485] ? sctp_v4_is_any+0x35/0x60 [ 1768.654660][T22485] ? sctp_copy_one_addr+0x93/0x360 [ 1768.654686][T22485] sctp_bind_addr_copy+0xb3/0x3c0 [ 1768.654712][T22485] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1768.654739][T22485] sctp_connect_new_asoc+0x2e0/0x690 [ 1768.654772][T22485] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1768.654803][T22485] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1768.654841][T22485] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1768.654865][T22485] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1768.654894][T22485] sctp_sendmsg+0x155c/0x2810 [ 1768.654934][T22485] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1768.654968][T22485] ? aa_sk_perm+0x81e/0x950 [ 1768.655003][T22485] ? __pfx_aa_sk_perm+0x10/0x10 [ 1768.655036][T22485] ? sock_rps_record_flow+0x19/0x410 [ 1768.655060][T22485] ? inet_sendmsg+0x2f4/0x370 [ 1768.655085][T22485] __sock_sendmsg+0x19c/0x270 [ 1768.655120][T22485] ____sys_sendmsg+0x505/0x830 [ 1768.655160][T22485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.655195][T22485] ? import_iovec+0x74/0xa0 [ 1768.655224][T22485] ___sys_sendmsg+0x21f/0x2a0 [ 1768.655254][T22485] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.655304][T22485] ? __fget_files+0x2a/0x420 [ 1768.655336][T22485] ? __fget_files+0x3a0/0x420 [ 1768.655375][T22485] __x64_sys_sendmsg+0x19b/0x260 [ 1768.655406][T22485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1768.655441][T22485] ? __pfx_ksys_write+0x10/0x10 [ 1768.655468][T22485] ? rcu_is_watching+0x15/0xb0 [ 1768.655491][T22485] ? do_syscall_64+0xbe/0x3b0 [ 1768.655518][T22485] do_syscall_64+0xfa/0x3b0 [ 1768.655543][T22485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1768.655566][T22485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.655588][T22485] ? clear_bhb_loop+0x60/0xb0 [ 1768.655614][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.655635][T22485] RIP: 0033:0x7f50d8b8eec9 [ 1768.655654][T22485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.655673][T22485] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.655696][T22485] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1768.655712][T22485] RDX: 0000000004000040 RSI: 0000200000001180 RDI: 0000000000000003 [ 1768.655727][T22485] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.655742][T22485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.655756][T22485] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1768.655783][T22485] [ 1770.336528][T22485] CPU: 1 UID: 0 PID: 22485 Comm: syz.0.13665 Not tainted syzkaller #0 PREEMPT(full) [ 1770.336550][T22485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1770.336560][T22485] Call Trace: [ 1770.336568][T22485] [ 1770.336578][T22485] dump_stack_lvl+0x189/0x250 [ 1770.336600][T22485] ? __pfx____ratelimit+0x10/0x10 [ 1770.336618][T22485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.336635][T22485] ? __pfx__printk+0x10/0x10 [ 1770.336654][T22485] ? bsearch+0x95/0xc0 [ 1770.336676][T22485] ? search_extable+0x8f/0xd0 [ 1770.336697][T22485] should_fail_ex+0x414/0x560 [ 1770.336720][T22485] strncpy_from_user+0x36/0x290 [ 1770.336744][T22485] strncpy_from_user_nofault+0x72/0x150 [ 1770.336764][T22485] bpf_probe_read_compat_str+0xe2/0x180 [ 1770.336792][T22485] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 1770.336807][T22485] bpf_trace_run4+0x28b/0x4a0 [ 1770.336826][T22485] ? bpf_trace_run4+0x19c/0x4a0 [ 1770.336845][T22485] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1770.336864][T22485] ? rcu_read_lock_sched_held+0x89/0x100 [ 1770.336882][T22485] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 1770.336904][T22485] __bpf_trace_sched_switch+0x17a/0x1e0 [ 1770.336924][T22485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1770.336943][T22485] ? psi_group_change+0xab8/0x1050 [ 1770.336972][T22485] ? __schedule+0x22e9/0x4cc0 [ 1770.336989][T22485] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 1770.337013][T22485] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1770.337033][T22485] __traceiter_sched_switch+0x9d/0xd0 [ 1770.337054][T22485] __schedule+0x238f/0x4cc0 [ 1770.337073][T22485] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 1770.337100][T22485] ? rcu_is_watching+0x15/0xb0 [ 1770.337115][T22485] ? trace_page_fault_kernel+0x84/0x1e0 [ 1770.337140][T22485] ? __pfx___schedule+0x10/0x10 [ 1770.337162][T22485] ? preempt_schedule_irq+0xaa/0x150 [ 1770.337179][T22485] preempt_schedule_irq+0xb5/0x150 [ 1770.337195][T22485] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1770.337215][T22485] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1770.337241][T22485] irqentry_exit+0x6f/0x90 [ 1770.337257][T22485] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1770.337274][T22485] RIP: 0010:lock_acquire+0x175/0x360 [ 1770.337298][T22485] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 10 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1770.337313][T22485] RSP: 0018:ffffc90019f4eff8 EFLAGS: 00000206 [ 1770.337328][T22485] RAX: b57c66cb567e3800 RBX: 0000000000000000 RCX: b57c66cb567e3800 [ 1770.337340][T22485] RDX: 0000000000000000 RSI: ffffffff8dba098d RDI: ffffffff8be33f80 [ 1770.337351][T22485] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 1770.337363][T22485] R10: ffffc90019f4f1b8 R11: ffffffff81ac3c30 R12: 0000000000000002 [ 1770.337374][T22485] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1770.337399][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1770.337414][T22485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1770.337431][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1770.337454][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1770.337469][T22485] ? sctp_connect_new_asoc+0x2e0/0x690 [ 1770.337492][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1770.337507][T22485] unwind_next_frame+0xc2/0x2390 [ 1770.337522][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1770.337540][T22485] ? unwind_next_frame+0xa5/0x2390 [ 1770.337555][T22485] ? sctp_bind_addr_copy+0xb3/0x3c0 [ 1770.337575][T22485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1770.337592][T22485] arch_stack_walk+0x11c/0x150 [ 1770.337612][T22485] ? sctp_connect_new_asoc+0x2e0/0x690 [ 1770.337636][T22485] stack_trace_save+0x9c/0xe0 [ 1770.337652][T22485] ? __pfx_stack_trace_save+0x10/0x10 [ 1770.337673][T22485] kasan_save_track+0x3e/0x80 [ 1770.337691][T22485] ? kasan_save_track+0x3e/0x80 [ 1770.337707][T22485] ? __kasan_kmalloc+0x93/0xb0 [ 1770.337724][T22485] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1770.337743][T22485] ? sctp_add_bind_addr+0x8c/0x370 [ 1770.337759][T22485] ? sctp_copy_local_addr_list+0x30b/0x4e0 [ 1770.337776][T22485] ? sctp_bind_addr_copy+0xb3/0x3c0 [ 1770.337793][T22485] ? sctp_connect_new_asoc+0x2e0/0x690 [ 1770.337836][T22485] __kasan_kmalloc+0x93/0xb0 [ 1770.337855][T22485] __kmalloc_cache_noprof+0x230/0x3d0 [ 1770.337875][T22485] ? sctp_add_bind_addr+0x8c/0x370 [ 1770.337894][T22485] sctp_add_bind_addr+0x8c/0x370 [ 1770.337914][T22485] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1770.337933][T22485] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1770.337951][T22485] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1770.337971][T22485] ? sctp_v4_is_any+0x35/0x60 [ 1770.338013][T22485] ? sctp_copy_one_addr+0x93/0x360 [ 1770.338033][T22485] sctp_bind_addr_copy+0xb3/0x3c0 [ 1770.338052][T22485] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1770.338069][T22485] sctp_connect_new_asoc+0x2e0/0x690 [ 1770.338094][T22485] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1770.338116][T22485] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1770.338144][T22485] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1770.338161][T22485] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1770.338183][T22485] sctp_sendmsg+0x155c/0x2810 [ 1770.338211][T22485] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1770.338234][T22485] ? aa_sk_perm+0x81e/0x950 [ 1770.338259][T22485] ? __pfx_aa_sk_perm+0x10/0x10 [ 1770.338283][T22485] ? sock_rps_record_flow+0x19/0x410 [ 1770.338301][T22485] ? inet_sendmsg+0x2f4/0x370 [ 1770.338317][T22485] __sock_sendmsg+0x19c/0x270 [ 1770.338344][T22485] ____sys_sendmsg+0x505/0x830 [ 1770.338367][T22485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1770.338391][T22485] ? import_iovec+0x74/0xa0 [ 1770.338412][T22485] ___sys_sendmsg+0x21f/0x2a0 [ 1770.338433][T22485] ? __pfx____sys_sendmsg+0x10/0x10 [ 1770.338470][T22485] ? __fget_files+0x2a/0x420 [ 1770.338492][T22485] ? __fget_files+0x3a0/0x420 [ 1770.338518][T22485] __x64_sys_sendmsg+0x19b/0x260 [ 1770.338540][T22485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1770.338565][T22485] ? __pfx_ksys_write+0x10/0x10 [ 1770.338583][T22485] ? rcu_is_watching+0x15/0xb0 [ 1770.338599][T22485] ? do_syscall_64+0xbe/0x3b0 [ 1770.338619][T22485] do_syscall_64+0xfa/0x3b0 [ 1770.338636][T22485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.338652][T22485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.338667][T22485] ? clear_bhb_loop+0x60/0xb0 [ 1770.338685][T22485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.338701][T22485] RIP: 0033:0x7f50d8b8eec9 [ 1770.338715][T22485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.338728][T22485] RSP: 002b:00007f50d994e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1770.338743][T22485] RAX: ffffffffffffffda RBX: 00007f50d8de5fa0 RCX: 00007f50d8b8eec9 [ 1770.338755][T22485] RDX: 0000000004000040 RSI: 0000200000001180 RDI: 0000000000000003 [ 1770.338765][T22485] RBP: 00007f50d994e090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.338775][T22485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1770.338785][T22485] R13: 00007f50d8de6038 R14: 00007f50d8de5fa0 R15: 00007ffd46ab31d8 [ 1770.338804][T22485]