last executing test programs: 5.0316241s ago: executing program 3 (id=3211): sendmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="550be700d1e6cdd41ffd9bb83bb8f48f72de3b3223763a05511fd0abf06818291b01f133694ac6b5dcd5d44e5e79f5989a0004debd0e78934b996b6fedda674acf9b8b06dcfceabc947dec43fe725d9b", 0x50}], 0x1}}], 0x1, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.926418877s ago: executing program 3 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="11780400030000001c0016801800018014000b00ffffffff00"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d1b9b2a96f3dec, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1ac, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@loopback}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x58, 0x14, {{'cmac(aes)\x00'}, 0x60, 0x0, "b74a27a4f44bd05db8f139a0"}}]}, 0x1ac}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x2a, 0xa, 0x1, 0x52, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, 0x20, 0xb6cfa4117767c35d, 0x9, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', r8, 0x20, 0x781c, 0x6, 0x3, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0x9e, 0x3, 0x4}, @generic={0x94, 0xe, "9bd247e09578cd167aa45456"}, @noop]}}}}}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000080)="29000300010003", 0x7) listen(r0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f0000001540)="deff9a3a", 0x4, 0x8000050, &(0x7f0000000080)={0x11, 0x8100, r12, 0x1, 0xfb}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESDEC=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x40001) 4.200504172s ago: executing program 3 (id=3222): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1d, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc01, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_fd={0x18, 0x8}, @alu={0x7, 0x1, 0x0, 0x4, 0x1, 0x40, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, @jmp={0x5, 0x1, 0xd, 0x5, 0xa, 0x20, 0xffffffffffffffff}, @cb_func={0x18, 0xb}, @ringbuf_query, @alu={0x57f1e7737714fedf, 0x0, 0x0, 0xa, 0x9, 0x4, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x3, 0xd4, &(0x7f0000000140)=""/212, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xb, 0x5786}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{0x5, 0x1, 0x4, 0x6}, {0x2, 0x5, 0x0, 0x9}, {0x1, 0x1, 0xa, 0x1}, {0x5, 0x4, 0x5, 0x9}, {0x3, 0x4, 0x0, 0x1}, {0x4, 0x3, 0xa, 0x8}], 0x10, 0x6584f05c}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000400)) (async, rerun: 64) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000480)={0x6, 0x18, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0]}) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000004c0)=0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000500)={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}, {0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x0, {[0x8, 0x1000, 0x6, 0x3, 0x0, 0xfff, 0x2, 0xc]}}, 0x5c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xe9, 0x2ca125b, 0x1, 0x2000, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0xe}, 0x50) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000680)={0x10001, 0x100, 0x2, 0x2, 0x73}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000006c0)={0x3, 0x7}) (async, rerun: 64) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0x25, 0x0, @void}, 0x10) (rerun: 64) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r5}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), r6) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x84) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x1c, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2d4d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x1, 0xb, 0xb, 0x2, 0xffffffffffffffc0, 0x10}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @alu={0x7, 0x1, 0xa, 0x3, 0x4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='GPL\x00', 0xffff0000, 0x68, &(0x7f0000000a00)=""/104, 0x40f00, 0x25, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x0, &(0x7f0000000b00)=[r3, r6]}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000c00), 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0xfccb3de05469dc06) socket$netlink(0x10, 0x3, 0x14) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000d80)={0x0, 0x6, 0x3}, &(0x7f0000000dc0)=0x8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x18, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004054}, 0x40) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000f00)) (async, rerun: 64) r11 = openat$cgroup_ro(r6, &(0x7f0000000f40)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r11, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, r12, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1ff, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) sendmsg$key(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x2, 0x4, 0x9, 0x7, 0x9, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x17, 0x33, 0x20, 0x0, @in6={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaa9c}}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x48}}, 0x50) 3.994255054s ago: executing program 3 (id=3224): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000005880)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000004e20000890780000000000000000000000980b6e90588a638191138c1be496fd3cea66d6af9a68052a845102d8eefa9f7e39d61e4aebbd31"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xff, 0x11, 0x0, @empty=0xe0000000, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xde, 0x100, @void}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01008000000001dcdf250f000000180007800c0003000000000000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) pread64(r2, &(0x7f0000000040)=""/38, 0x26, 0x4004) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r5, &(0x7f00000056c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xa, @mcast2, 0x1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000080)="cb7d0f7211ea6ea36cb37b4ea0a8aad97b5b272e1fe16587cf118306b9ca2cb2eda238a30a69e4bf828c08654f776c5e012f4cd3951d93459254940a89e8346742", 0x41}, {&(0x7f0000000140)="d1a36c9d90c57784a97fef94", 0xc}, {&(0x7f0000000180)="fbcd0ce1fcb3a6a4b201dcfc9c580b382df216c15d24a6ff38d03c915c", 0x1d}, {&(0x7f0000000100)="685e9b9e8eee60841b5dcc5e464042a063b02f", 0x13}], 0x4, &(0x7f0000000280)=[@hopopts={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@pad1]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x88, 0x6, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x5, 0xfff9}}, @generic={0x8, 0x2b, "77ce97da5179b2f80f4123fdbc607917b1d288a0efa9e30866d3bb7528d1d22d44716bf6b1b7cf0e5e9a97"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x88}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0xc56, @remote}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="0f8d09f69d8928f01580d19bf27cec5f97d559d1b4d5e71eab09270b32eeb0674a923ca0864e0357dd93beb8f3b7baeb87602d42b58d4b6dff9a74c8ef634f54079819721d90aed32737475ced0f5d73be3851d83a7bed6292872d1c05422052d339535029a457347bad766f57665b2b5610e8ec08a92ade56c4f3a7a6f8b450b0ee76481974a04376dd", 0x8a}, {&(0x7f0000000400)="6888e9d72b3241a189e8ed86b4e3bda3691a0af5f61c28ad13aaea5e070bd6f5350bb4285da41d71475efdad16b5aa7d1dc18b40abc3e3bc82f8159e6f7b985dd42713ea923a9d3724d932d63a17e3f27d19de4c772b2be388cf5b8a0995e9f5c51b000000000000", 0x68}, {&(0x7f0000000480)="a4d92cfe985d29784762c64358d1f0bcd7513e3e0c36a8e85b91e7898a0edcb8f50ebb2b69bb33d8b008bf31e0d23fbe54afb8e78ff13638fda2a9335afbebdebdcf0c8d29d21488abc82bab52289e35dca30628443e04f7fee01474994bb09038ae0759dff4c8289f7026f311de865746520aba256a9197be313b839cfd3975c7c140ca0361f0445fbe535877157ace4af455b91f2aa1343f441313661542ad247291c3ce1b6965e673843d79cf7bfedae6130baf88bdc2463fbc8e15dd52ce", 0xc0}, {&(0x7f0000000540)="d7a482fc30b161de2e5b43eb8f91", 0xe}, {&(0x7f0000000580)="1c55965fd762ab70ad06f2", 0xb}, {&(0x7f00000005c0)}], 0x6, &(0x7f0000000680)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0x18}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0xffff875f, @dev={0xfe, 0x80, '\x00', 0x12}, 0x4}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000740)="be7c0119167bc7b2f5a4bf315e1eaa4aa2b5e692613cc99622ff0d646f2a7ab7c0c05ce177a0918c0605f479", 0x2c}, {&(0x7f0000000780)="890ecdb34a50b8e2e58db1693e54237dab1e5b6ad0f309f6836e5c57e9cdb81fc79828c212021795c9138508d7b1fec23bc5100a4afad6cb5360fdf941dbc8f9fd31616e5d3da8d5d2dc29fbd1c1d1a054160986793482bd4c77a48d0009e5c3827969bebd451d6f7fa9cc59b730a414e869e56ccf7ed22c8e279e374cbfb967310e860703184ecfdb91fb9a90e6336d11", 0x91}, {&(0x7f0000000840)="e6653e00ae52409a4de7d78621425385138604d0a5464d4dabc5e54e4a69cd50599d162989a6edb6cf61f3a1473d7f76013e84150000a8d4ee6e2d8a46a6460c8dc4cc96fc50202771fa1df7d7d0dbee48771428dd679f21dcf2e95f560e867388ba05da3812bb5ce18b83", 0x6b}, {&(0x7f00000008c0)="5df881baa977cca3eaf771920a7409b53ab03b19ac43ec7a76a72e5a27693d50f787696851326fcad1229a429ea9dc9fe966001e38bf7e24a56c9262bfdb7a31d4cb35b4b50aa40368bd2a22ad08b751e11a55ec2edf0dcf7fd22f2cbcbd7e12e51513a2079646f83fd038533184f85e1c70e7018321667d89e0ce517c55a42118ecc5af729b542e98c42b5d9d3fbe776090c12883e0679ac2361d2ce36ce2d98fbc35e9c62e440e1093f2c5fc51546c36a93f32b1a604e58b616112da28fb6edc5e1328b87f8f6f1971f349306f9f21239282b0c742d846406462044c80583b1d54e43147c8c6adb2fe55cd3e0886693cbc", 0xf2}, {&(0x7f00000009c0)="aa87b5ca4b928af9dc4f893dba21295ad49cbba07bc69ab937a51e444b8f1106c662fc283e1b06e29392672f5492730df18c1eb76510fdd45427ba51109ee430032813890280b9ece94c92867cc83de7cee17d3109dcbcdd779b3b8eb642d5464210aaf7e1e852b3371785042b6a0ecf146dbe38be2753a968dbda7db6091d998a04a24f289df172f91c21202f72fe964c35ec866092cc13b71bb52b62e69b7bc5fb5227da9ff3569a711fe5bdcd6afd55bd909594f8efcd3883eb5f09f0b7a713a5e99b119cd7887ecbbe2bf3", 0xcd}, {&(0x7f0000000ac0)="304fd13e43920626c291e0daabdde65446a72da76530adb0627d262927aad080a2d3d3e1d04a95715e4ed5a604ba2232f51b0747ffe52d53604bdaee5043fe3573f0d502751078d843451cd997573853e37b897170ddba3b007424954589132606c70ad017ad4891293ad874bc195e090942ad4628602ef4ab2503a89988b20d0e6bc83466f46a1843f7d2060f37ce171fe19cda13945fd0ea6af8331070ec4c12", 0xa1}, {&(0x7f0000000b80)="6974f2c6bcec513540451751bb8ee36667184fbce7b8d262e61e5a500854d6c4ea6b3c9b4f980687214daabd1471da5918c352a78ee9ef8060169ca51fc9640f52fc4dfc0eec52393baafc4a0b243c63c4c1b4ac4c4a690073acf74eed0ce4b9d464ce5c80dce82e12f4727e08aed8b10c940e5bcbe4a9cca05a5082a8743ff2d2c3cdec6ed9deb6eb4f2eb0e73c960afffd2e025337dd91dbee805076032b9b39c4", 0xa2}, {&(0x7f0000000c40)="cc81832d83f4a43a587c366387eba0d3b1217bedbf10b7e25294fa65b90e29db2298b617f65156fe4d086f331bf9c9ea64572d58ee6026d0b7f4ab9cf69e367b1561bfa2fe565d95c33613c7f0ee4667cc358d283991a3b4db8117a1ae4e977509ae44c22176b3af0e0f3abd70578658241ca6c8b35308deda45497664eca3e3a109e301cb4e5e781cded845a45725e7e11f82505e35799f92a3e336d5a0c942c978a5c3365cdfb6", 0xa8}, {&(0x7f0000000d00)="f8a4b0841393f07ea4497910b7ca5dfb8b176b1d8726c71f0a91458252905c0d57c6d7c778a1fd17a0108bbfb4f5343943d9a8c676800f0bb33cd5167dfa9c1a92c61a685e", 0x45}], 0x9, &(0x7f0000000e40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x6c, 0xb, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private2}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xe75}]}}}], 0x90}}, {{&(0x7f0000000f40)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000f80)="64c930c3bb9b359f9b30c413dad352d65a89ae3d64e14ed6295547789361265f7f291f654bcea0318e4f4dfc968036b06601702250e2f5dfe10aef16dfc22854b0c7fa4681a058a8abdb97ebb79b17b0ee3f0b927ae183a1da1973a1056dcd3d3395096ae5092ed3ccbda353d7c57a92db", 0x71}], 0x1, &(0x7f0000001040)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0x3, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x29}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}], 0x98}}, {{&(0x7f0000001100)={0xa, 0x4e23, 0x8000, @mcast2, 0x5}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000001140)="c2116e1f00541835bcf62567524610694bc22a30dc530e65c72d1b93e37fc0aa8d62327cd4eb299a1172c3928d0b91e416c37a0fe5e4a628007db7f4df3e8a7a8bc2596ab4029aebd0b848087f01797e9ac46d32d47286239c60c2ff280cc4a67e2f98bfa0270393c764d5bc452e6c43c092572205a666ae56d5233e780d499cd8fc3414fde7703a79cde66e3b4b351af5a5be230805017cfb9e3cfba2e73469fc", 0xa1}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="912a2fd7f7c5f5bb9da9", 0xa}, {&(0x7f0000005900)="aae9d4b78ccf88ba40b794c5e7d6a7f7a2e9cef838a71bace808a9ce86d6f2a8ebd0bed43186540f81ea36e25183052d707ef2f5a236c4ed0193bcf8401c65751f1c0c7ad0ec962abacb48475458b177f919bafb5e27a600983d2918146f554382de113867472591004f4be0fe3dab66885b4cf82b79a9dffc9734246c6d55003a43961d979a7999ad72518f0e1303db4a21d98a6ae094b46c674d00bc8a390926cfaab88ea4942f9fed3b6dc4aa03a82669f02508710fc26dcc6c8ffd9157fb9b4c8e385b2a7631a7b8dd00eb88ff9c4c10455ecc5c3b51292c4299", 0xdc}], 0x4}}, {{&(0x7f0000002380)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c, &(0x7f0000002800)=[{&(0x7f00000023c0)="85130f50e69754d47ef890a4421e395d347909704dd97558c4bf0489bc9e16e6c483a443b3ef1510c3c8619346302a1437acfc67d3ee9e0d27978c5c8b4040966ba685997b24c44c86dedff179d7101c6b8d3d0b04d11bcac22346b961f879f197438f7ca90f4440d5e8a291cb4ca8cd77bbe3f7ac0e8a6e67921b518cf825498bbbbaea757d4f84078d480e506169ae3a51c0cca77673d9da8527717a3f883882734d09ebf6c566f78712f5d4addfe1c33c87e7c506dea434cca33296f4df4a81b70eebc29cb85a8cd269ac56539701bd76bfbf56f63adc64ae0d9fa90fe7461f8cc90d5e57e71f55d13f9046", 0xed}, {&(0x7f00000024c0)="2ff7e0c8d2b42e371dab992d2c1829c5e8b0a4b00ebbc646eafbcadd765525a90ab1d33db198449b", 0x28}, {&(0x7f0000002500)="64488174296821c7e63b910b2a1f22322e93698bb3f751876533d6b32e0490cabb6cd69af48def970d83436e43b6dc4ec302f697da37681e8ff8f052860f3bafea82a307e7143182f8a8ae97c3", 0x4d}, {&(0x7f0000002580)="1b71eec702acd7fb244190e5", 0xc}, {&(0x7f00000025c0)="d1708904f3c37960c38cc633e47d175262da26bd7f7a590da6f0ccc70154b1780c3a03f2982e9c3be47dc4e792d94ffaa134ec4b2b1f633d3e95503f4e76def0a1ccf032d486e25c79b0ffd97634e8b7aab46bfe3b04dc810659ccc0d963c1142eb5a481cc40e1ba0df3e4c2638fdc9ff1a4bd41a961df", 0x77}, {&(0x7f0000003240)="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", 0x1000}, {&(0x7f0000002640)="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", 0xfc}, {&(0x7f0000002740)="fe3f25922340ccfd01e52f6b6e18e5f41e29c183538da4bc8d73c2d8348d6b6549c7722c98e20394b326e7c4c1e02ce0d4c079fe1c7ab253ab84e389454fb31930ead2f5d60273135a2f2378f8d2f0e05f75d50cea91a67ff4cd77a0ed55952df6386b6604cae181e7c075b2a9f791d63d8d9d73", 0x74}, {&(0x7f00000027c0)="17deab7bd8137c79f1206339a0527181839f0521b67bca1638", 0x19}], 0x9, &(0x7f00000028c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0x50, 0x29, 0x37, {0x1, 0x6, '\x00', [@generic={0x40, 0x2c, "a28dbd313078881b1ed2df5766c9d38471fe0801d618be792a334f93677bfcc91373217217fd67f6f5befbb4"}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0xb8, 0x29, 0x36, {0x2f, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x8}, @generic={0xf5, 0x92, "be210ba38bee38d894c87bb445de37c06970191326180c6e48df8874036eb3dcbe7a006d869b5ca5349a2d6da5fd446e9141c52e545fb1b5f30bdda0a4730b8f76ba4c81a020d94010a6bd1d4c4efa7f6dab044800c4d89027ae08b3d1e2e36743092d5741848b05fdede46acf1ce1286114c2ba6bc62e47de54354ab43f986c1d7a13ef4a5f3db8a55c77a3b0af045bc9b5"}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x87, 0x1e, '\x00', [@ra={0x5, 0x2, 0x3fda}, @calipso={0x7, 0x38, {0x0, 0xc, 0x2, 0x9, [0xa, 0xca, 0x1, 0x3, 0x6, 0x8000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x7f, 0x93, "a699e8e8bd3531d6df57d4e3e77b5be9b33d92cb65f5865269afc655abc417e8319403b967c161f038a58bbabb8a853db3c7cda09662e0c5696af4b0bfbcf8e458be8f4c8a5f0f3367769d64c3948de40c4c35366569dafde31474af93edc1798236ae85f001feebaeadb1adb3ac33ed74aa521ad77e6cd71f4f12ca62ce1f2b1c7bb5e0dcb15e79e258c10526ee2e46f522b0"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x2, [0x8, 0x91c]}}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x87, 0x0, 0x0, 0x8}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x33, 0x15, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x8, 0x26, "886af834db643c439d486f3fc366d79f267be3853cf939bf398ff6d60b636ddf50d57411d53e"}, @ra={0x5, 0x2, 0x6}, @ra, @ra={0x5, 0x2, 0x400}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x8000, [0xa2, 0xf80ac7f, 0x401, 0x6, 0x8, 0xffff, 0x5, 0x9, 0x2]}}]}}}], 0x320}}, {{&(0x7f0000002c00)={0xa, 0x4e22, 0x3ff, @mcast2, 0x57}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002c40)="fd5537589b803f03babdc63301066974257b0a5a10f7e3da461714fe63dce526faefd7778551a1a08e9af19cf9d2e12b65b274f71f54d00c2889bba332913bc7aa1ddce4445547a48ac8c01b83dd98564d52411b8d4c4f10569769409c4c9762b3bd3a322e35b5cdcf8f", 0x6a}, {&(0x7f0000002cc0)="000d570dcbcb0dbeb3996134ade80fba44879d2db2a0a2928422f27db9f302ff43bda18fd2d09b36f26595079a86ba68c9a90660407114a9f8e0136ad9c696f6b13175d14278216cc28d112a6e1aa0ee258fc1dd2626c83a55e2047eb33d342c34650ff7a185473bda697614c9861b15621201ac78cd2381741eca045686b12534bb788f91d460da1f48c60eb56c437f96f3ed47d7d931626a357fe755891b628cbdb42b5f466ffd273bfa8d3ffb79fbcea700d7064073c504a8a3973efc6cbcf32970850a233fee22b664341c7ffee92f08469440b0570c930464fae9033ddae1162cc8a9088b92f603fb50beb534c5d5f770d4b9", 0xf5}, {&(0x7f0000002240)="9f16b2dfbdd46f778f2fe59d12361d8aef3bdbbbfdd5ac78a5665346698e7aa930aeb678da8b0bd43f297625b24540f62b314a0e253141249a438d428a86dddb9f8bdfb2f83c53e41f781e3fcd9516a1c8bfbcf9deeb5f604492a5ff5a7527bde113d02a1e4736c7778f881b272aae3d67485d892f995325193dca5d48f95867088a5654d60f56eeff1b9e77ba23baf65d5ddf3f2f56a4c918653ad3ff7d1e206dc572199e3949e99763c18b8fb4b4f3be4b5cb3703fa1c22e2fb15868f45bdcecaeb300000000000000", 0xca}, {&(0x7f0000002e40)="620cd89e5143421a14d453b04995339bbf06746a5f4c1f2cf3fa6638861281b71958993edcced4716bc941a1423be679250a482debaf1ac1a6cfd90f55c42209149b5f91e8ea453cc385acbd18a9abf266202bce1488f61d9ff69620b99542e8ddf5ef728396a2c94840774d896e058c6ea4ccb610e7c45e8326718158cd5cf35438e0b64205e4b78c41", 0x8a}, {&(0x7f0000002f00)="820001a30cd1f9bdb917f1b63b2f4a1debdf143a", 0x14}, {&(0x7f0000002f40)="5cc9f3742662a1782863ea89bb6e2b90c976ac9acf7f59d0cc06ba61adcf7a3dd63f337dce9cf407d393029689963dd0bc12cf40b41ebdf191e084a613292bafe1771b39d8a07b812bdb7affc44c57958e4bb033e05f6e9c9f70cb6733da5743487e122d017a4f15bc3a965b1de62ecb1c0b3644195791f4401b", 0x7a}, {&(0x7f0000002fc0)="b16b0a71f9d3da94bca46c98c68495601239ada9b6946b671dfab77284b308e6e898595859cabbb0cb5e9bed7cebeb446a7d630f9c277969f8ebbcb4ba2ff22d4189a1e2dd0e1232010997cd316365695114b977da1c54ef7dfcefdc1b4265668eed92c5c55307dd191a5fc830a78e55bf6e5f9e988e001919fedc7873c870ffcb48cc87fdb491ed85e32f21232c53da3f01f2119ac560301a8b11fd32862a78de2590c5e5f5aa83fe87a0650cb6126d41d3df37c0437157b0b320d07c9c8e29809939207bc804058a152dc64b0ae611b2", 0xd1}, {&(0x7f00000030c0)="583aa1f42aceef943d12988ab38733508c215dab86c6c1e209fe451164890dbb22191ee641a3c63b6e7fd651481878da413c7769b49b1e37cba143aa703c4bbd6a3527bfb335c2ac655c9a3728d1f6a687a1f3ccacaf9fb7ccf9dac5c7fb688476a10083285ae691a6074df71c08cfa751b63c4dbca83452e755eef8a2abe9ee020a020d98398faa4fe97cbe0290", 0x8e}], 0x8, &(0x7f0000004240)=[@dstopts={{0x18, 0x29, 0x37, {0x5e}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7bb}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts_2292={{0x10c0, 0x29, 0x4, {0x73, 0x215, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0x9, [0x8, 0x3, 0x1, 0x6b, 0x85a, 0x3, 0x0, 0xa, 0xff9]}}, @calipso={0x7, 0x48, {0x3, 0x10, 0x7, 0xff, [0x74a, 0x12b, 0x3, 0x9, 0xffff, 0x5, 0x8, 0x3]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x36, 0x1000, "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"}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit={{0x14}}, @hopopts_2292={{0x1b8, 0x29, 0x36, {0x0, 0x34, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast2}, @generic={0x8f, 0xb1, "ac1669f1717ce9901af75db279381d78ed3bbaf986065ac4bcb32ff949a2c1ff9d2d03b9b52b87bb409a92e2da989cd765559d3013da752dad739661b0caf99bf05d32ea01aa7c830dd6acb63d6bd5f0cbea1378579912883dfde0c7e9f9566bf78b17c8a5cf2d7e2f0c439066b93ec8cba1916587f9e9002837567015a5ff8d586b2cb76cb9192baaf4e5a6f2c369e315f6b775b443cd62f4dff02bfec401cfebd4d9326c865040c2658cd8e6f12acd13"}, @enc_lim={0x4, 0x1, 0x17}, @hao={0xc9, 0x10, @mcast1}, @generic={0x7, 0xb2, "c35562c140ca1e810e575150c90dd89df6ae88d061e3f1dd8dc692472a8fcf18756a60298d9f8fb7e1179a6a75a774425aa6d6018f2aa04cf92c8696dd8a59a700cb3e1173f770e0dd5e78a7042042826361b0064ddcd0cce34524726e7bd48238f2f571ea7a37f65574faee10d28e2d4cbcb37eec5cc350e538b6aec605f002aa671b2be0653d3a003858fc17a0ed6a692ffd260eea08b83dcaf6ce64114e1cd33e46b2dc29911adecf13eeede1dd471063"}]}}}, @dontfrag={{0x14}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x2, 0xc, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x58, {0x3, 0x14, 0x2, 0x1, [0xd73f, 0x8, 0x1, 0x6, 0x2de, 0x0, 0x1, 0x8, 0x2, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xd}}], 0x1388}}], 0x7, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000700)=0xf5500, 0x4) 3.524346407s ago: executing program 3 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) unshare(0x400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) write(r1, &(0x7f0000000100)="822a0a0300000000", 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe4}}, 0x0) 1.933940773s ago: executing program 4 (id=3242): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x10, 0x8, 0x5, 0x8, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x65, 0x0, 0xd3, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@noop, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000007d80)='filter\x00', 0x7) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xa67, 0x5212}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x4c}}, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x0, 0x8a, 0x0, 0x0, 0x6, 0x10000, @value=r5}, 0x28) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = accept4$netrom(r3, &(0x7f0000000600)={{0x3, @default}, [@null, @null, @default, @remote, @bcast, @null, @null, @bcast]}, &(0x7f00000000c0)=0x48, 0x80800) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000006c0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xb, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18, 0xc4382e240e177d74}, 0x0) recvmsg$unix(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100003040000000080000080000000d5f4d2d2fafca884478dcd72003c18dc3b2d825dbb8ed3965627ca42681c83630476abcdbfd064e29d464334bcab4f", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002400128009000100626f6e64000000001400028005001b002d0000000500010001000000"], 0x44}}, 0x0) 1.874106947s ago: executing program 1 (id=3243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0xa, 0x300) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x0, 0x3, 0x0, 0x3, 0x0, 0x400000}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x1, 0x0, 0xb7, 0x1ff, 0x0, 0x96dd}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000000), 0x4) (async) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) unshare(0x40020000) 1.706409512s ago: executing program 4 (id=3245): unshare(0x22020400) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000180012800e0001006970366772657461700000000000000006000100"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000440)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000700)="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", 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000400), &(0x7f00000004c0)=""/78}, 0x20) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@file={0x0, './bus\x00'}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0441b6ccdc"}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x40) r7 = socket$kcm(0x23, 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030005000000050003008000000008000200"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$sock(r7, &(0x7f0000000040)={&(0x7f00000002c0)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0, 0xea}, {0x0}, {&(0x7f0000000200)}], 0x4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=@mpls_getnetconf={0x14, 0x52, 0xd03, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) (async) r10 = socket$caif_seqpacket(0x25, 0x5, 0x2) write(r10, 0x0, 0x0) 1.646551199s ago: executing program 1 (id=3246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x18, 0x0, 0xfffffff8, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x68, 0x0, 0x8b, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x88, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102]}, @generic={0x83, 0x8, "d3a84c4b3c6e"}, @timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0x4, [{@multicast1, 0x8}, {@broadcast, 0x400}]}, @timestamp={0x44, 0x8, 0x8f, 0x0, 0x9, [0x8]}, @timestamp_prespec={0x44, 0x2c, 0x6, 0x3, 0xb, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@multicast2, 0x1ff}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x10001}]}, @noop]}}}}}) socket$kcm(0x2, 0x3, 0x84) (async) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d58643e6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324458b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1.570661746s ago: executing program 2 (id=3247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00004359000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="1100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000600"/28], 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000540)=0xffffffff, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40054}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x18, 0xfffffff7, @l2={'ib', 0x3a, 'wlan0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x8005) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24002001}, 0x20000000) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.482568527s ago: executing program 1 (id=3248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010029bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b88000084be47cc6398b9fe5fbaddaab456090008002e0003000000be75f9effd9f828e7ebac6840af169e116d3e8b3bf8381ce19dd0479d39c5a07c6e4a15dd92afa5f3d6bd08ced92da4008054142ba49167dff7bb5ac10ad46818b664109"], 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010029bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b88000084be47cc6398b9fe5fbaddaab456090008002e0003000000be75f9effd9f828e7ebac6840af169e116d3e8b3bf8381ce19dd0479d39c5a07c6e4a15dd92afa5f3d6bd08ced92da4008054142ba49167dff7bb5ac10ad46818b664109"], 0x28}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) (async) 1.481825094s ago: executing program 0 (id=3249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b3000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) recvmmsg(r0, &(0x7f0000003740)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/140, 0x8c}], 0x1, &(0x7f00000002c0)=""/133, 0x85}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/223, 0xdf}, {&(0x7f0000000480)=""/150, 0x96}], 0x2, &(0x7f0000000580)=""/7, 0x7}, 0x70000000}, {{&(0x7f00000005c0)=@caif, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/214, 0xd6}], 0x4, &(0x7f0000000a80)=""/81, 0x51}}, {{&(0x7f0000000b00), 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f0000000c80)=""/75, 0x4b}, {&(0x7f0000000d00)=""/118, 0x76}, {&(0x7f0000000d80)=""/64, 0x40}, {&(0x7f0000000dc0)=""/239, 0xef}], 0x5, &(0x7f0000000f40)=""/149, 0x95}, 0x1a6e}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/47, 0x2f}, {&(0x7f0000001040)=""/103, 0x67}, {&(0x7f00000010c0)=""/147, 0x93}, {&(0x7f0000001180)=""/214, 0xd6}, {&(0x7f0000001280)=""/51, 0x33}], 0x5}, 0x12}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001340)=""/242, 0xf2}, {&(0x7f0000001440)=""/197, 0xc5}, {&(0x7f0000001540)=""/31, 0x1f}, {&(0x7f0000001580)=""/75, 0x4b}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/66, 0x42}, {&(0x7f0000002680)=""/16, 0x10}], 0x7, &(0x7f0000002740)=""/4096, 0x1000}, 0x400}], 0x6, 0x2021, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000038c0)=0x0) sendmsg$sock(r0, &(0x7f0000003ac0)={&(0x7f0000003900)=@nfc={0x27, r1, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003980)="c648e7851b8f1d07c64260ef4cb9851772ffb9d6726c361d8eb8a735557ee795c370bef7e76afe274fae0af54792b4da173546c3424f695aa656b2f06b842369911f0a4fc199128bb06a9bf3fbfbb21da1eb7dcfec9ef05abdc466b6379325009bd4b64391ab67323faf9d170c1ba95801237886c56fb78c20303b1053af26855798ef39bf647ef6a92b6401c0bb67e714bdfc52235a47573e16de4e21c5968abec3e6e974699e75cbe5531612a972295042d0a51528", 0xb6}], 0x1, &(0x7f0000003a80)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xfffffffa}}], 0x30}, 0x44) 1.374375651s ago: executing program 4 (id=3250): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4c20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x10001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket(0x2, 0xa, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES8=r6, @ANYRES8=r5], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8fc}, 0x94) syz_emit_ethernet(0x9e, &(0x7f0000003680)=ANY=[], 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) (async) r8 = socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYRES64=r9, @ANYRESDEC=0x0, @ANYRESHEX=r9, @ANYRESHEX=r9], 0x108}, 0x1, 0x0, 0x0, 0x20040094}, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010329bd7000fcdbdf25240000000c00018008000100", @ANYBLOB="29f344e43e2ff2ae74acf1259237d3f21bb0d485688c7289ac57f7726034468f263ce1ba58b26ca92263e1d9fb5ce5664caac3353b30da34148e934977f0ad3f3a9dab0da04388b9cc83ccd0afc7e6975d3d8322633c877491df97ffd92f7534e068b2daa79e092949f342101d016be2f1c67531299b0be41edcc204920f29fd396ecae03341b54c9882ff30e6e455b1a0e3340c759418917dcc442c0368587ff1da211fa90100000004000000000000"], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) 1.308534211s ago: executing program 0 (id=3251): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbd}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.214695515s ago: executing program 4 (id=3252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) 1.062515221s ago: executing program 2 (id=3253): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d4, 0x12, 0x100, 0x70bd29, 0x25dfdbfb, {0x23, 0x0, 0x6, 0xb, {0x4e22, 0x4e24, [0x3, 0x9, 0x3f, 0x5], [0x46d0501e, 0x1, 0x200, 0x2], r1, [0x7568, 0x8]}, 0x3, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "757185fe0128064b0a25056ffd632fc5d89b9c77e10a0d34f46906dcddb4b8a118af2a16e3eed551a83fb58be8049af3509fc186bb77549cc4c74825ec01e07393cebe63602516f64584d79bf68d2e9ff86a917c05c7be0cf244e66796d4830716e0cd1742fbee68f9d88362b402b27c86d09419f885e0f6c3db32dfe8e9a2ce9c418ea475ce70cc68c4"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "843dc19c3ac67a5f4f2e7bd0f2e7e7449f0b75ec33561c632ec1ec6d6af3d36e326eff6f4e329cc055acf655a0fbb304bdbed21fecc0e2489f541b4fb80c662d2bbdde7f71e94dbda385822dbcaf7f8c3549ac7b1dcbe0abd065ecdbfd195790c26ae04f212369aa9df9e7a88ff72e5378adac34aab14f72c998699b3d80bab15a316b8088e39b16ce1a7e47d4c93433ea9237810eca72f94d27a93f44ca8f1b9956724b6e7fc2197802a9cba4f06e6c9f23cc62925847bbf71fa1b1fdebeddeeb7dbbbc7e7875a0fc28a4501f82cb5bece27b859c8367947db6415495c83ea72357126dc37d72ae5048d92957484b7ab9c6a9b8"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) 1.06203616s ago: executing program 4 (id=3254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000002d00)={0x6, {{0xa, 0x4e24, 0xc, @mcast2, 0x3}}, 0x1}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x8, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0xe, 0xb}, {0x8, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x8, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x20004044) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.035914533s ago: executing program 1 (id=3255): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000008de0d50003000400000085000000d3000000250000000000000085100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="430b4646ea372145e4421ee2d42780d169095923505843e276eebef3cbff7fb5759ef0d7f21627646454282b47fc2d4f2326085d390e9d02f64cfc7852727c9f15386fda604f6e139778c13c8040935018e7c4a0a87e32f344ae2194c234d6c2ac059ed2753c7ec8e6e52952dc88407d5cdd178c150570a690d1d5f3d8458525436859ee6b0e2a392dd661bf202f12332cd227a85fae3691e76023284f88", @ANYRES16=r1, @ANYBLOB="040026bd7000fcdbdf2519000000800001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200776730000000000000000000000000000800030002000000140002006261746164765f736c6176655f3000001400020076657468315f766c616e000000000000140002007465616d5f736c6176655f30000000000800030002000000180001801400020070696d72656730000000000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 881.434736ms ago: executing program 0 (id=3256): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800800010067726500100002800400120008000700ac14142308000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="d98c68ab1af8a63cf88fa1e2723952e66b36c0469b7044661e20a76ea564b7f6e761bc52c79c9a18d94272ca41cf83383965740f"], 0x4c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x4c, r6, 0x511, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008001240000018000500050000000000050001"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x44) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000680)={0x2, 0x7}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r9, &(0x7f0000003440)=[{{&(0x7f0000000400)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80, 0x0}}], 0x1, 0x20000010) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000009c0)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @empty}, 0x10) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000000000000001, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000000000000001, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac"], 0x184}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac"], 0x184}}, 0x0) 819.474476ms ago: executing program 1 (id=3257): r0 = socket(0x11, 0x800000003, 0x0) (async) r1 = socket(0x11, 0x3, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ppoll(&(0x7f0000000340)=[{r2, 0x8}, {r0, 0x400}, {r0}, {r1, 0x40d0}, {r0, 0x8410}, {r0, 0x40a}], 0x6, &(0x7f0000000380)={0x77359400}, 0x0, 0x0) (async) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r7}, 0x10) (async, rerun: 32) close(0x3) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async, rerun: 64) getpeername(r5, &(0x7f0000000180)=@nl=@unspec, 0x0) (rerun: 64) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 577.917377ms ago: executing program 2 (id=3258): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=@delsa={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {@in6=@local, 0x4d4, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)={0x114, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x4c, 0x64, 0x0, 0x1, [@nested={0x45, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f5", @typed={0x8, 0x94, 0x0, 0x0, @fd=r1}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9"]}]}, 0x114}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=@delsa={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {@in6=@local, 0x4d4, 0xa, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)={0x114, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x4c, 0x64, 0x0, 0x1, [@nested={0x45, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f5", @typed={0x8, 0x94, 0x0, 0x0, @fd=r1}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9"]}]}, 0x114}], 0x1}, 0x0) (async) 439.842117ms ago: executing program 0 (id=3259): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/274], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="ffa88387", 0x4}], 0x1}, 0x40810) 354.505606ms ago: executing program 2 (id=3260): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000009d43e07050002000000000085000000000000005e100000010000000500feff0820000095"], &(0x7f00000003c0)='GPL\x00', 0x5}, 0x94) 353.145107ms ago: executing program 0 (id=3261): unshare(0x8040480) unshare(0x2a020480) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xd5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5000}, 0x408d8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800db8d000400000000000002000000fd000006000000008002c01e411e14e0f7bbc86ae825d38ca46afdacfdc068ba9c9f7631490de9c6d1"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 333.765246ms ago: executing program 1 (id=3262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x1, 0x3, {0xa, 0x4e22, 0x6, @mcast1, 0x3c9f}}}, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r10, {}, {0x7, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) socket$inet_icmp(0x2, 0x2, 0x1) 271.457791ms ago: executing program 2 (id=3263): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000042b7daed024da0081bf89b5388e641bbeda215a6fd3c05f2fef6ac49a313d892ecbefc9f54b4e63bec022e434dc960e9d6bb607b2e5f491ac7ba3a220d4b4c00600a6ce4fdec1792b6526b38fe6880b3d2af06702c21b237f143cad12b0c84c8abeeeb7f94535d56819f27471fba3b6c2476efe352f8254d502957fbdb080025fa4621b59ec7606bce2111f3625f7376fda19cc104159a8c4e6664bb2d4f8847b210882e06a862a412c5b8b32efd2c0db36981b0d6fd50e3841f4c20e7333d1bb482d448789b55103dc84395842136b806fd9e5740a29336c8e07562b0b245970c6176cce0efed054a60b60"], 0x48) r0 = socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x814) (async) socket$tipc(0x1e, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e21, 0x6f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e24, 0xe1, @mcast2, 0x6}, 0x0, {[0x0, 0xe5, 0x90c, 0x3, 0x1000, 0x5, 0x9, 0x74]}}, 0x5c) (async) ppoll(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000009ea1c3a255000d000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async) socket$caif_seqpacket(0x25, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 102.298632ms ago: executing program 4 (id=3264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='veth0_macvtap\x00', 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000002c0)={0x6, 0x6, 0x9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001805000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000b90600008500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmmsg$alg(r1, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f00000000c0)="ebe3a0e90000000000000080e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e03b2052579c5084df41f536aca3", 0x32}], 0x2, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x40814) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x4, 0x0, 0x10008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @value=r5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0xc080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000092d8e79b0f5be02e61c233211f93388ed90badceffe6964470b270bb345dc3ed567b443482113874ab7aaf727b79edbadb730adbbf61f30f2e78061c3b6725f01f8fc13a1613e20563accc94a27e18103e6abfa41a388268096d66ef6357ab16e535fae5b1274a4cd1bdfbaa75845df513dd6a2f9ed4ab3d5b260f88338b20bcbb3b4019769f3c459c8e0f8bcd9972ea89e8204bd9562fcf7fe63aa059802531fc6e7ca2de15fdd34ef0abee615500b2e09a1c29b6bff141eca002d5f38aed74dc3f043b7a8919efdd2a1b0d2f71d285f3114"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 100.765419ms ago: executing program 3 (id=3265): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xd, 0x8}, {0xffed}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffe0}, {0x0, 0x7}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0, 0xf}, {0x0, 0xfff1}, {0x5, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 68.870106ms ago: executing program 2 (id=3266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000294ce4e1610d8f029781000036569ca3ca002300000000000000000000000000d982d612f647930400700c5d24583aecd70ca287362b3668d5fbcd75dd022197d23b8252403679fe033661439d76df471a2017e1cf6fc8438b58"], 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x0, 0xa, 0x4400047, r5}) (async) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x481, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5f}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9aad}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6, 0x0, 0x11}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=3267): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x3) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), r5) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x58, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) kernel console output (not intermixed with test programs): 322.438703][T14891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 322.438723][T14891] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 322.438778][T14891] ? ksys_write+0x22a/0x250 [ 322.438806][T14891] ? __pfx_ksys_write+0x10/0x10 [ 322.438827][T14891] ? rcu_is_watching+0x15/0xb0 [ 322.438856][T14891] __x64_sys_sendmmsg+0xa0/0xc0 [ 322.438881][T14891] do_syscall_64+0xfa/0x3b0 [ 322.438899][T14891] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.438919][T14891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.438937][T14891] ? clear_bhb_loop+0x60/0xb0 [ 322.438961][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.438980][T14891] RIP: 0033:0x7f1bb438ebe9 [ 322.438997][T14891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.439014][T14891] RSP: 002b:00007f1bb5255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 322.439035][T14891] RAX: ffffffffffffffda RBX: 00007f1bb45c5fa0 RCX: 00007f1bb438ebe9 [ 322.439049][T14891] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 322.439061][T14891] RBP: 00007f1bb5255090 R08: 0000000000000000 R09: 0000000000000000 [ 322.439073][T14891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.439084][T14891] R13: 00007f1bb45c6038 R14: 00007f1bb45c5fa0 R15: 00007ffefe38f118 [ 322.439118][T14891] [ 322.758196][T14897] __nla_validate_parse: 2 callbacks suppressed [ 322.758217][T14897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2517'. [ 323.139502][T14911] lo speed is unknown, defaulting to 1000 [ 323.168096][T14911] lo speed is unknown, defaulting to 1000 [ 323.503213][T14933] FAULT_INJECTION: forcing a failure. [ 323.503213][T14933] name failslab, interval 1, probability 0, space 0, times 0 [ 323.581944][T14933] CPU: 1 UID: 0 PID: 14933 Comm: syz.0.2529 Not tainted syzkaller #0 PREEMPT(full) [ 323.581975][T14933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.581987][T14933] Call Trace: [ 323.581995][T14933] [ 323.582003][T14933] dump_stack_lvl+0x189/0x250 [ 323.582032][T14933] ? __pfx____ratelimit+0x10/0x10 [ 323.582053][T14933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.582075][T14933] ? __pfx__printk+0x10/0x10 [ 323.582105][T14933] ? __pfx___might_resched+0x10/0x10 [ 323.582124][T14933] ? fs_reclaim_acquire+0x7d/0x100 [ 323.582147][T14933] should_fail_ex+0x414/0x560 [ 323.582180][T14933] should_failslab+0xa8/0x100 [ 323.582209][T14933] __kmalloc_noprof+0xcb/0x4f0 [ 323.582233][T14933] ? sock_kmalloc+0xd6/0x160 [ 323.582262][T14933] sock_kmalloc+0xd6/0x160 [ 323.582288][T14933] ____sys_sendmsg+0x1b5/0x830 [ 323.582317][T14933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.582352][T14933] ? import_iovec+0x74/0xa0 [ 323.582379][T14933] ___sys_sendmsg+0x21f/0x2a0 [ 323.582404][T14933] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.582470][T14933] ? __fget_files+0x2a/0x420 [ 323.582486][T14933] ? __fget_files+0x3a0/0x420 [ 323.582517][T14933] __sys_sendmmsg+0x227/0x430 [ 323.582546][T14933] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.582575][T14933] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 323.582629][T14933] ? ksys_write+0x22a/0x250 [ 323.582656][T14933] ? __pfx_ksys_write+0x10/0x10 [ 323.582689][T14933] __x64_sys_sendmmsg+0xa0/0xc0 [ 323.582715][T14933] do_syscall_64+0xfa/0x3b0 [ 323.582735][T14933] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.582754][T14933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.582779][T14933] ? clear_bhb_loop+0x60/0xb0 [ 323.582803][T14933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.582819][T14933] RIP: 0033:0x7fb19318ebe9 [ 323.582838][T14933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.582854][T14933] RSP: 002b:00007fb1913f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.582875][T14933] RAX: ffffffffffffffda RBX: 00007fb1933c6090 RCX: 00007fb19318ebe9 [ 323.582889][T14933] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 323.582901][T14933] RBP: 00007fb1913f6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.582912][T14933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.582923][T14933] R13: 00007fb1933c6128 R14: 00007fb1933c6090 R15: 00007ffea77ffc18 [ 323.582957][T14933] [ 324.002835][T14944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2531'. [ 324.024831][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 324.072442][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 324.112910][T14943] netlink: 'syz.3.2533': attribute type 12 has an invalid length. [ 324.155027][T14943] netlink: 'syz.3.2533': attribute type 1 has an invalid length. [ 324.268088][T14943] bond4: entered promiscuous mode [ 324.282239][T14943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.544665][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 324.618518][T14976] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2545'. [ 324.648263][T14976] netlink: zone id is out of range [ 324.655083][T14976] netlink: get zone limit has 8 unknown bytes [ 324.668846][T14979] FAULT_INJECTION: forcing a failure. [ 324.668846][T14979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.693115][T14979] CPU: 0 UID: 0 PID: 14979 Comm: syz.4.2546 Not tainted syzkaller #0 PREEMPT(full) [ 324.693144][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.693157][T14979] Call Trace: [ 324.693165][T14979] [ 324.693174][T14979] dump_stack_lvl+0x189/0x250 [ 324.693203][T14979] ? __pfx____ratelimit+0x10/0x10 [ 324.693225][T14979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.693248][T14979] ? __pfx__printk+0x10/0x10 [ 324.693275][T14979] ? __might_fault+0xb0/0x130 [ 324.693315][T14979] should_fail_ex+0x414/0x560 [ 324.693347][T14979] _copy_from_user+0x2d/0xb0 [ 324.693372][T14979] ____sys_sendmsg+0x2fe/0x830 [ 324.693402][T14979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.693437][T14979] ? import_iovec+0x74/0xa0 [ 324.693464][T14979] ___sys_sendmsg+0x21f/0x2a0 [ 324.693489][T14979] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.693550][T14979] ? __fget_files+0x2a/0x420 [ 324.693567][T14979] ? __fget_files+0x3a0/0x420 [ 324.693595][T14979] __sys_sendmmsg+0x227/0x430 [ 324.693624][T14979] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.693643][T14979] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 324.693694][T14979] ? ksys_write+0x22a/0x250 [ 324.693719][T14979] ? __pfx_ksys_write+0x10/0x10 [ 324.693741][T14979] ? rcu_is_watching+0x15/0xb0 [ 324.693767][T14979] __x64_sys_sendmmsg+0xa0/0xc0 [ 324.693791][T14979] do_syscall_64+0xfa/0x3b0 [ 324.693811][T14979] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.693830][T14979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.693848][T14979] ? clear_bhb_loop+0x60/0xb0 [ 324.693869][T14979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.693895][T14979] RIP: 0033:0x7f5e0e98ebe9 [ 324.693913][T14979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.693928][T14979] RSP: 002b:00007f5e0f8d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.693949][T14979] RAX: ffffffffffffffda RBX: 00007f5e0ebc5fa0 RCX: 00007f5e0e98ebe9 [ 324.693963][T14979] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 324.693975][T14979] RBP: 00007f5e0f8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 324.693987][T14979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.693998][T14979] R13: 00007f5e0ebc6038 R14: 00007f5e0ebc5fa0 R15: 00007ffd30b6a638 [ 324.694032][T14979] [ 325.121498][T14990] netlink: 'syz.4.2549': attribute type 1 has an invalid length. [ 325.169038][T14990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2549'. [ 325.422789][T14999] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2552'. [ 325.891967][T15015] lo speed is unknown, defaulting to 1000 [ 325.899763][T15015] lo speed is unknown, defaulting to 1000 [ 325.948588][T15025] FAULT_INJECTION: forcing a failure. [ 325.948588][T15025] name failslab, interval 1, probability 0, space 0, times 0 [ 325.990416][T15025] CPU: 0 UID: 0 PID: 15025 Comm: syz.1.2559 Not tainted syzkaller #0 PREEMPT(full) [ 325.990446][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.990464][T15025] Call Trace: [ 325.990472][T15025] [ 325.990480][T15025] dump_stack_lvl+0x189/0x250 [ 325.990509][T15025] ? __pfx____ratelimit+0x10/0x10 [ 325.990529][T15025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.990549][T15025] ? __pfx__printk+0x10/0x10 [ 325.990574][T15025] ? __pfx___might_resched+0x10/0x10 [ 325.990589][T15025] ? fs_reclaim_acquire+0x7d/0x100 [ 325.990608][T15025] should_fail_ex+0x414/0x560 [ 325.990638][T15025] should_failslab+0xa8/0x100 [ 325.990667][T15025] __kmalloc_noprof+0xcb/0x4f0 [ 325.990692][T15025] ? ip_options_get+0x51/0x4c0 [ 325.990721][T15025] ip_options_get+0x51/0x4c0 [ 325.990752][T15025] ip_cmsg_send+0x591/0xa70 [ 325.990805][T15025] raw_sendmsg+0x53a/0x18b0 [ 325.990848][T15025] ? __pfx_raw_sendmsg+0x10/0x10 [ 325.990892][T15025] ? aa_sk_perm+0x81e/0x950 [ 325.990924][T15025] ? __pfx_aa_sk_perm+0x10/0x10 [ 325.990947][T15025] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 325.990971][T15025] ? sock_rps_record_flow+0x19/0x410 [ 325.990997][T15025] ? inet_sendmsg+0x2f4/0x370 [ 325.991019][T15025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.991044][T15025] __sock_sendmsg+0x19c/0x270 [ 325.991073][T15025] ____sys_sendmsg+0x52d/0x830 [ 325.991102][T15025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.991135][T15025] ? import_iovec+0x74/0xa0 [ 325.991162][T15025] ___sys_sendmsg+0x21f/0x2a0 [ 325.991188][T15025] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.991261][T15025] ? __fget_files+0x2a/0x420 [ 325.991278][T15025] ? __fget_files+0x3a0/0x420 [ 325.991305][T15025] __sys_sendmmsg+0x227/0x430 [ 325.991334][T15025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 325.991354][T15025] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 325.991407][T15025] ? ksys_write+0x22a/0x250 [ 325.991436][T15025] ? __pfx_ksys_write+0x10/0x10 [ 325.991457][T15025] ? rcu_is_watching+0x15/0xb0 [ 325.991484][T15025] __x64_sys_sendmmsg+0xa0/0xc0 [ 325.991509][T15025] do_syscall_64+0xfa/0x3b0 [ 325.991529][T15025] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.991546][T15025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.991564][T15025] ? clear_bhb_loop+0x60/0xb0 [ 325.991588][T15025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.991605][T15025] RIP: 0033:0x7f1bb438ebe9 [ 325.991624][T15025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.991648][T15025] RSP: 002b:00007f1bb5255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 325.991676][T15025] RAX: ffffffffffffffda RBX: 00007f1bb45c5fa0 RCX: 00007f1bb438ebe9 [ 325.991690][T15025] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 325.991702][T15025] RBP: 00007f1bb5255090 R08: 0000000000000000 R09: 0000000000000000 [ 325.991713][T15025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.991724][T15025] R13: 00007f1bb45c6038 R14: 00007f1bb45c5fa0 R15: 00007ffefe38f118 [ 325.991758][T15025] [ 326.519835][T15031] netlink: zone id is out of range [ 326.603635][T15031] netlink: del zone limit has 8 unknown bytes [ 327.039526][T15048] macsec1: entered promiscuous mode [ 327.046203][T15048] macsec1: entered allmulticast mode [ 327.053709][T15048] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 327.596410][T15083] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 327.779668][T15093] netlink: 'syz.0.2579': attribute type 23 has an invalid length. [ 328.108020][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'. [ 328.212885][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'. [ 328.790852][T15146] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2595'. [ 329.094699][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 329.111649][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 329.589554][T15175] syz_tun: entered promiscuous mode [ 329.616859][T15175] vlan2: entered promiscuous mode [ 329.687841][T15181] FAULT_INJECTION: forcing a failure. [ 329.687841][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.751474][T15181] CPU: 0 UID: 0 PID: 15181 Comm: syz.0.2608 Not tainted syzkaller #0 PREEMPT(full) [ 329.751504][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.751516][T15181] Call Trace: [ 329.751525][T15181] [ 329.751541][T15181] dump_stack_lvl+0x189/0x250 [ 329.751571][T15181] ? __pfx____ratelimit+0x10/0x10 [ 329.751592][T15181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.751614][T15181] ? __pfx__printk+0x10/0x10 [ 329.751641][T15181] ? __might_fault+0xb0/0x130 [ 329.751679][T15181] should_fail_ex+0x414/0x560 [ 329.751712][T15181] _copy_from_user+0x2d/0xb0 [ 329.751736][T15181] ___sys_sendmsg+0x158/0x2a0 [ 329.751762][T15181] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.751827][T15181] ? __fget_files+0x2a/0x420 [ 329.751844][T15181] ? __fget_files+0x3a0/0x420 [ 329.751874][T15181] __x64_sys_sendmsg+0x19b/0x260 [ 329.751900][T15181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.751934][T15181] ? __pfx_ksys_write+0x10/0x10 [ 329.751957][T15181] ? rcu_is_watching+0x15/0xb0 [ 329.751983][T15181] ? do_syscall_64+0xbe/0x3b0 [ 329.752009][T15181] do_syscall_64+0xfa/0x3b0 [ 329.752028][T15181] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.752047][T15181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.752066][T15181] ? clear_bhb_loop+0x60/0xb0 [ 329.752089][T15181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.752107][T15181] RIP: 0033:0x7fb19318ebe9 [ 329.752125][T15181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.752140][T15181] RSP: 002b:00007fb193f2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.752163][T15181] RAX: ffffffffffffffda RBX: 00007fb1933c5fa0 RCX: 00007fb19318ebe9 [ 329.752177][T15181] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 329.752188][T15181] RBP: 00007fb193f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 329.752200][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.752211][T15181] R13: 00007fb1933c6038 R14: 00007fb1933c5fa0 R15: 00007ffea77ffc18 [ 329.752243][T15181] [ 330.312796][T15193] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2613'. [ 330.595431][T15197] syzkaller0: entered promiscuous mode [ 330.610277][T15197] syzkaller0: entered allmulticast mode [ 330.937910][T15210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2618'. [ 331.016623][T15214] netlink: 'syz.0.2619': attribute type 2 has an invalid length. [ 331.024771][T15214] netlink: 'syz.0.2619': attribute type 5 has an invalid length. [ 332.997824][T15223] lo speed is unknown, defaulting to 1000 [ 333.043912][T15223] lo speed is unknown, defaulting to 1000 [ 333.176846][T15233] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 333.655215][T15260] FAULT_INJECTION: forcing a failure. [ 333.655215][T15260] name failslab, interval 1, probability 0, space 0, times 0 [ 333.719571][T15260] CPU: 0 UID: 0 PID: 15260 Comm: syz.3.2631 Not tainted syzkaller #0 PREEMPT(full) [ 333.719601][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.719612][T15260] Call Trace: [ 333.719620][T15260] [ 333.719628][T15260] dump_stack_lvl+0x189/0x250 [ 333.719657][T15260] ? __pfx____ratelimit+0x10/0x10 [ 333.719678][T15260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.719701][T15260] ? __pfx__printk+0x10/0x10 [ 333.719735][T15260] ? __pfx___might_resched+0x10/0x10 [ 333.719752][T15260] ? fs_reclaim_acquire+0x7d/0x100 [ 333.719785][T15260] should_fail_ex+0x414/0x560 [ 333.719816][T15260] should_failslab+0xa8/0x100 [ 333.719845][T15260] __kmalloc_noprof+0xcb/0x4f0 [ 333.719870][T15260] ? security_sk_alloc+0x52/0x390 [ 333.719898][T15260] security_sk_alloc+0x52/0x390 [ 333.719924][T15260] sk_prot_alloc+0x101/0x220 [ 333.719944][T15260] ? sk_alloc+0x24/0x370 [ 333.719967][T15260] sk_alloc+0x3a/0x370 [ 333.719986][T15260] ? bpf_ctx_init+0x167/0x1d0 [ 333.720009][T15260] bpf_prog_test_run_skb+0x2ed/0x1560 [ 333.720029][T15260] ? __fget_files+0x2a/0x420 [ 333.720063][T15260] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 333.720084][T15260] bpf_prog_test_run+0x2c7/0x340 [ 333.720115][T15260] __sys_bpf+0x581/0x870 [ 333.720142][T15260] ? __pfx___sys_bpf+0x10/0x10 [ 333.720190][T15260] ? rcu_is_watching+0x15/0xb0 [ 333.720218][T15260] __x64_sys_bpf+0x7c/0x90 [ 333.720243][T15260] do_syscall_64+0xfa/0x3b0 [ 333.720263][T15260] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.720283][T15260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.720302][T15260] ? clear_bhb_loop+0x60/0xb0 [ 333.720326][T15260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.720344][T15260] RIP: 0033:0x7fc909d8ebe9 [ 333.720362][T15260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.720378][T15260] RSP: 002b:00007fc907ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.720400][T15260] RAX: ffffffffffffffda RBX: 00007fc909fc5fa0 RCX: 00007fc909d8ebe9 [ 333.720414][T15260] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 333.720427][T15260] RBP: 00007fc907ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.720439][T15260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.720450][T15260] R13: 00007fc909fc6038 R14: 00007fc909fc5fa0 R15: 00007fffaa853538 [ 333.720484][T15260] [ 334.398656][T15284] FAULT_INJECTION: forcing a failure. [ 334.398656][T15284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.419544][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.4.2639 Not tainted syzkaller #0 PREEMPT(full) [ 334.419573][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.419585][T15284] Call Trace: [ 334.419593][T15284] [ 334.419601][T15284] dump_stack_lvl+0x189/0x250 [ 334.419631][T15284] ? __pfx____ratelimit+0x10/0x10 [ 334.419651][T15284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.419675][T15284] ? __pfx__printk+0x10/0x10 [ 334.419700][T15284] ? __might_fault+0xb0/0x130 [ 334.419742][T15284] should_fail_ex+0x414/0x560 [ 334.419774][T15284] _copy_from_user+0x2d/0xb0 [ 334.419798][T15284] kstrtouint_from_user+0xc4/0x170 [ 334.419821][T15284] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 334.419863][T15284] proc_fail_nth_write+0x88/0x200 [ 334.419885][T15284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.419915][T15284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 334.419940][T15284] vfs_write+0x27b/0xb30 [ 334.419978][T15284] ? __pfx_vfs_write+0x10/0x10 [ 334.420007][T15284] ? __fget_files+0x2a/0x420 [ 334.420030][T15284] ? __fget_files+0x3a0/0x420 [ 334.420047][T15284] ? __fget_files+0x2a/0x420 [ 334.420076][T15284] ksys_write+0x145/0x250 [ 334.420105][T15284] ? __pfx_ksys_write+0x10/0x10 [ 334.420127][T15284] ? rcu_is_watching+0x15/0xb0 [ 334.420153][T15284] ? do_syscall_64+0xbe/0x3b0 [ 334.420180][T15284] do_syscall_64+0xfa/0x3b0 [ 334.420199][T15284] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.420219][T15284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.420238][T15284] ? clear_bhb_loop+0x60/0xb0 [ 334.420262][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.420281][T15284] RIP: 0033:0x7f5e0e98d69f [ 334.420300][T15284] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 334.420316][T15284] RSP: 002b:00007f5e0f8d9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 334.420337][T15284] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e0e98d69f [ 334.420352][T15284] RDX: 0000000000000001 RSI: 00007f5e0f8d90a0 RDI: 0000000000000004 [ 334.420364][T15284] RBP: 00007f5e0f8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 334.420376][T15284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 334.420388][T15284] R13: 00007f5e0ebc6038 R14: 00007f5e0ebc5fa0 R15: 00007ffd30b6a638 [ 334.420424][T15284] [ 334.908937][T15302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2644'. [ 334.957444][T15304] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.965874][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'. [ 334.972000][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2646'. [ 334.985630][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2646'. [ 335.298038][T15321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2652'. [ 335.363259][T15300] bridge_slave_1 (unregistering): left allmulticast mode [ 335.380795][T15300] bridge_slave_1 (unregistering): left promiscuous mode [ 335.408398][T15300] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.870405][T15335] netlink: 'syz.2.2653': attribute type 10 has an invalid length. [ 335.987649][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2658'. [ 336.329564][T15335] bond0: (slave wlan1): Opening slave failed [ 336.491095][T15357] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2661'. [ 336.513348][T15357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2661'. [ 336.513850][T15355] lo speed is unknown, defaulting to 1000 [ 336.563545][T15355] lo speed is unknown, defaulting to 1000 [ 336.678152][T15366] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 336.783980][T15366] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2660'. [ 337.148258][T15372] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 337.158902][T15372] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 337.305888][T15376] lo speed is unknown, defaulting to 1000 [ 337.337129][T15388] FAULT_INJECTION: forcing a failure. [ 337.337129][T15388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.352031][T15376] lo speed is unknown, defaulting to 1000 [ 337.358014][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 337.371081][T15387] netlink: 'syz.3.2669': attribute type 11 has an invalid length. [ 337.397829][T15388] CPU: 1 UID: 0 PID: 15388 Comm: syz.1.2668 Not tainted syzkaller #0 PREEMPT(full) [ 337.397859][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.397871][T15388] Call Trace: [ 337.397879][T15388] [ 337.397888][T15388] dump_stack_lvl+0x189/0x250 [ 337.397916][T15388] ? __pfx____ratelimit+0x10/0x10 [ 337.397936][T15388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.397958][T15388] ? __pfx__printk+0x10/0x10 [ 337.397985][T15388] ? __might_fault+0xb0/0x130 [ 337.398025][T15388] should_fail_ex+0x414/0x560 [ 337.398057][T15388] _copy_from_user+0x2d/0xb0 [ 337.398081][T15388] ___sys_sendmsg+0x158/0x2a0 [ 337.398108][T15388] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.398180][T15388] ? __fget_files+0x2a/0x420 [ 337.398197][T15388] ? __fget_files+0x3a0/0x420 [ 337.398227][T15388] __sys_sendmmsg+0x227/0x430 [ 337.398257][T15388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 337.398277][T15388] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 337.398329][T15388] ? ksys_write+0x22a/0x250 [ 337.398356][T15388] ? __pfx_ksys_write+0x10/0x10 [ 337.398377][T15388] ? rcu_is_watching+0x15/0xb0 [ 337.398404][T15388] __x64_sys_sendmmsg+0xa0/0xc0 [ 337.398430][T15388] do_syscall_64+0xfa/0x3b0 [ 337.398449][T15388] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.398468][T15388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.398487][T15388] ? clear_bhb_loop+0x60/0xb0 [ 337.398511][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.398530][T15388] RIP: 0033:0x7f1bb438ebe9 [ 337.398548][T15388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.398563][T15388] RSP: 002b:00007f1bb5255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.398584][T15388] RAX: ffffffffffffffda RBX: 00007f1bb45c5fa0 RCX: 00007f1bb438ebe9 [ 337.398598][T15388] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 337.398610][T15388] RBP: 00007f1bb5255090 R08: 0000000000000000 R09: 0000000000000000 [ 337.398622][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.398632][T15388] R13: 00007f1bb45c6038 R14: 00007f1bb45c5fa0 R15: 00007ffefe38f118 [ 337.398665][T15388] [ 338.145495][T15404] lo speed is unknown, defaulting to 1000 [ 338.297773][T15404] lo speed is unknown, defaulting to 1000 [ 338.718634][T15433] sctp: [Deprecated]: syz.1.2686 (pid 15433) Use of int in max_burst socket option. [ 338.718634][T15433] Use struct sctp_assoc_value instead [ 338.780088][T15438] FAULT_INJECTION: forcing a failure. [ 338.780088][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 338.864483][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.3.2687 Not tainted syzkaller #0 PREEMPT(full) [ 338.864514][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.864526][T15438] Call Trace: [ 338.864535][T15438] [ 338.864544][T15438] dump_stack_lvl+0x189/0x250 [ 338.864574][T15438] ? __pfx____ratelimit+0x10/0x10 [ 338.864596][T15438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.864619][T15438] ? __pfx__printk+0x10/0x10 [ 338.864642][T15438] ? stack_trace_save+0x9c/0xe0 [ 338.864684][T15438] should_fail_ex+0x414/0x560 [ 338.864726][T15438] should_failslab+0xa8/0x100 [ 338.864756][T15438] kmem_cache_alloc_noprof+0x73/0x3c0 [ 338.864781][T15438] ? skb_clone+0x212/0x3a0 [ 338.864811][T15438] skb_clone+0x212/0x3a0 [ 338.864840][T15438] __netlink_deliver_tap+0x404/0x850 [ 338.864876][T15438] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.864899][T15438] netlink_deliver_tap+0x19c/0x1b0 [ 338.864922][T15438] netlink_sendskb+0x68/0x140 [ 338.864953][T15438] netlink_unicast+0x397/0x9e0 [ 338.864993][T15438] ? __pfx_netlink_unicast+0x10/0x10 [ 338.865031][T15438] ? __build_skb_around+0x257/0x3e0 [ 338.865063][T15438] rtnl_unicast+0x4e/0x60 [ 338.865089][T15438] inet_netconf_get_devconf+0x4c5/0xad0 [ 338.865125][T15438] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 338.865175][T15438] ? __pfx_inet_netconf_get_devconf+0x10/0x10 [ 338.865201][T15438] rtnetlink_rcv_msg+0x7cc/0xb70 [ 338.865226][T15438] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 338.865243][T15438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.865288][T15438] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 338.865323][T15438] netlink_rcv_skb+0x208/0x470 [ 338.865340][T15438] ? rcu_is_watching+0x15/0xb0 [ 338.865359][T15438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.865379][T15438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.865410][T15438] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.865439][T15438] netlink_unicast+0x82f/0x9e0 [ 338.865507][T15438] ? __pfx_netlink_unicast+0x10/0x10 [ 338.865538][T15438] ? netlink_sendmsg+0x642/0xb30 [ 338.865556][T15438] ? skb_put+0x11b/0x210 [ 338.865582][T15438] netlink_sendmsg+0x805/0xb30 [ 338.865614][T15438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.865638][T15438] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.865660][T15438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.865679][T15438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.865718][T15438] __sock_sendmsg+0x21c/0x270 [ 338.865749][T15438] ____sys_sendmsg+0x505/0x830 [ 338.865778][T15438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.865810][T15438] ? import_iovec+0x74/0xa0 [ 338.865835][T15438] ___sys_sendmsg+0x21f/0x2a0 [ 338.865862][T15438] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.865924][T15438] ? __fget_files+0x2a/0x420 [ 338.865940][T15438] ? __fget_files+0x3a0/0x420 [ 338.865967][T15438] __x64_sys_sendmsg+0x19b/0x260 [ 338.865992][T15438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.866023][T15438] ? __pfx_ksys_write+0x10/0x10 [ 338.866043][T15438] ? rcu_is_watching+0x15/0xb0 [ 338.866066][T15438] ? do_syscall_64+0xbe/0x3b0 [ 338.866090][T15438] do_syscall_64+0xfa/0x3b0 [ 338.866108][T15438] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.866126][T15438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.866145][T15438] ? clear_bhb_loop+0x60/0xb0 [ 338.866167][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.866183][T15438] RIP: 0033:0x7fc909d8ebe9 [ 338.866200][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.866215][T15438] RSP: 002b:00007fc907ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.866237][T15438] RAX: ffffffffffffffda RBX: 00007fc909fc5fa0 RCX: 00007fc909d8ebe9 [ 338.866250][T15438] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 338.866263][T15438] RBP: 00007fc907ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.866273][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.866283][T15438] R13: 00007fc909fc6038 R14: 00007fc909fc5fa0 R15: 00007fffaa853538 [ 338.866316][T15438] [ 338.875531][T15437] lo speed is unknown, defaulting to 1000 [ 339.062881][T15446] netlink: 'syz.3.2689': attribute type 4 has an invalid length. [ 339.068913][T15437] lo speed is unknown, defaulting to 1000 [ 339.306189][ T10] lo speed is unknown, defaulting to 1000 [ 339.311751][T15404] tipc: Enabled bearer , priority 10 [ 339.319649][ T10] syz2: Port: 1 Link DOWN [ 339.763117][T15466] FAULT_INJECTION: forcing a failure. [ 339.763117][T15466] name failslab, interval 1, probability 0, space 0, times 0 [ 339.787342][T15466] CPU: 1 UID: 0 PID: 15466 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 339.787372][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.787383][T15466] Call Trace: [ 339.787390][T15466] [ 339.787399][T15466] dump_stack_lvl+0x189/0x250 [ 339.787426][T15466] ? __pfx____ratelimit+0x10/0x10 [ 339.787445][T15466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.787468][T15466] ? __pfx__printk+0x10/0x10 [ 339.787497][T15466] ? __pfx___might_resched+0x10/0x10 [ 339.787520][T15466] should_fail_ex+0x414/0x560 [ 339.787548][T15466] should_failslab+0xa8/0x100 [ 339.787575][T15466] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 339.787598][T15466] ? __alloc_skb+0x112/0x2d0 [ 339.787621][T15466] __alloc_skb+0x112/0x2d0 [ 339.787642][T15466] netlink_sendmsg+0x5c6/0xb30 [ 339.787676][T15466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.787709][T15466] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.787730][T15466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.787751][T15466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.787772][T15466] __sock_sendmsg+0x21c/0x270 [ 339.787818][T15466] ____sys_sendmsg+0x505/0x830 [ 339.787847][T15466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.787889][T15466] ? import_iovec+0x74/0xa0 [ 339.787915][T15466] ___sys_sendmsg+0x21f/0x2a0 [ 339.787949][T15466] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.788016][T15466] ? __fget_files+0x2a/0x420 [ 339.788032][T15466] ? __fget_files+0x3a0/0x420 [ 339.788062][T15466] __x64_sys_sendmsg+0x19b/0x260 [ 339.788087][T15466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.788122][T15466] ? __pfx_ksys_write+0x10/0x10 [ 339.788143][T15466] ? rcu_is_watching+0x15/0xb0 [ 339.788169][T15466] ? do_syscall_64+0xbe/0x3b0 [ 339.788196][T15466] do_syscall_64+0xfa/0x3b0 [ 339.788214][T15466] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.788234][T15466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.788252][T15466] ? clear_bhb_loop+0x60/0xb0 [ 339.788276][T15466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.788293][T15466] RIP: 0033:0x7fc909d8ebe9 [ 339.788312][T15466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.788327][T15466] RSP: 002b:00007fc907ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.788349][T15466] RAX: ffffffffffffffda RBX: 00007fc909fc5fa0 RCX: 00007fc909d8ebe9 [ 339.788364][T15466] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 339.788376][T15466] RBP: 00007fc907ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.788388][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.788399][T15466] R13: 00007fc909fc6038 R14: 00007fc909fc5fa0 R15: 00007fffaa853538 [ 339.788432][T15466] [ 340.142693][T15473] netlink: 'syz.4.2693': attribute type 16 has an invalid length. [ 340.209922][T15473] netlink: 'syz.4.2693': attribute type 17 has an invalid length. [ 340.337834][T15471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.366828][T15485] __nla_validate_parse: 4 callbacks suppressed [ 340.366849][T15485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2699'. [ 340.418266][T15473] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 340.466587][T15487] FAULT_INJECTION: forcing a failure. [ 340.466587][T15487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.475340][ T49] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.482002][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.2.2700 Not tainted syzkaller #0 PREEMPT(full) [ 340.482027][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.482038][T15487] Call Trace: [ 340.482045][T15487] [ 340.482053][T15487] dump_stack_lvl+0x189/0x250 [ 340.482079][T15487] ? __pfx____ratelimit+0x10/0x10 [ 340.482099][T15487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.482118][T15487] ? __pfx__printk+0x10/0x10 [ 340.482155][T15487] should_fail_ex+0x414/0x560 [ 340.482183][T15487] _copy_to_user+0x31/0xb0 [ 340.482206][T15487] simple_read_from_buffer+0xe1/0x170 [ 340.482235][T15487] proc_fail_nth_read+0x1b3/0x220 [ 340.482258][T15487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.482281][T15487] ? rw_verify_area+0x2a6/0x4d0 [ 340.482300][T15487] ? __lock_acquire+0xab9/0xd20 [ 340.482322][T15487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.482343][T15487] vfs_read+0x200/0xa30 [ 340.482363][T15487] ? fdget_pos+0x247/0x320 [ 340.482383][T15487] ? __pfx___mutex_lock+0x10/0x10 [ 340.482403][T15487] ? __pfx_vfs_read+0x10/0x10 [ 340.482426][T15487] ? __fget_files+0x2a/0x420 [ 340.482445][T15487] ? __fget_files+0x3a0/0x420 [ 340.482459][T15487] ? __fget_files+0x2a/0x420 [ 340.482484][T15487] ksys_read+0x145/0x250 [ 340.482509][T15487] ? __pfx_ksys_read+0x10/0x10 [ 340.482528][T15487] ? rcu_is_watching+0x15/0xb0 [ 340.482551][T15487] ? do_syscall_64+0xbe/0x3b0 [ 340.482575][T15487] do_syscall_64+0xfa/0x3b0 [ 340.482591][T15487] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.482608][T15487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.482634][T15487] ? clear_bhb_loop+0x60/0xb0 [ 340.482654][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.482670][T15487] RIP: 0033:0x7fd87378d5fc [ 340.482686][T15487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 340.482700][T15487] RSP: 002b:00007fd8745e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.482719][T15487] RAX: ffffffffffffffda RBX: 00007fd8739c5fa0 RCX: 00007fd87378d5fc [ 340.482731][T15487] RDX: 000000000000000f RSI: 00007fd8745e80a0 RDI: 0000000000000004 [ 340.482742][T15487] RBP: 00007fd8745e8090 R08: 0000000000000000 R09: 0000000000000000 [ 340.482752][T15487] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.482762][T15487] R13: 00007fd8739c6038 R14: 00007fd8739c5fa0 R15: 00007ffef84d90d8 [ 340.482793][T15487] [ 340.546762][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'. [ 340.825674][ T49] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.842383][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.869551][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.901474][T15496] syzkaller0: entered promiscuous mode [ 340.907654][T15496] syzkaller0: entered allmulticast mode [ 340.924313][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 340.928708][T15500] FAULT_INJECTION: forcing a failure. [ 340.928708][T15500] name failslab, interval 1, probability 0, space 0, times 0 [ 340.952901][T15500] CPU: 1 UID: 0 PID: 15500 Comm: syz.1.2705 Not tainted syzkaller #0 PREEMPT(full) [ 340.952931][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.952943][T15500] Call Trace: [ 340.952950][T15500] [ 340.952957][T15500] dump_stack_lvl+0x189/0x250 [ 340.952986][T15500] ? __pfx____ratelimit+0x10/0x10 [ 340.953007][T15500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.953029][T15500] ? __pfx__printk+0x10/0x10 [ 340.953057][T15500] ? __pfx___might_resched+0x10/0x10 [ 340.953075][T15500] ? fs_reclaim_acquire+0x7d/0x100 [ 340.953098][T15500] should_fail_ex+0x414/0x560 [ 340.953127][T15500] should_failslab+0xa8/0x100 [ 340.953155][T15500] __kmalloc_noprof+0xcb/0x4f0 [ 340.953178][T15500] ? sock_kmalloc+0xd6/0x160 [ 340.953207][T15500] sock_kmalloc+0xd6/0x160 [ 340.953231][T15500] ____sys_sendmsg+0x1b5/0x830 [ 340.953260][T15500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.953295][T15500] ? import_iovec+0x74/0xa0 [ 340.953322][T15500] ___sys_sendmsg+0x21f/0x2a0 [ 340.953346][T15500] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.953407][T15500] ? __fget_files+0x2a/0x420 [ 340.953421][T15500] ? __fget_files+0x3a0/0x420 [ 340.953446][T15500] __sys_sendmmsg+0x227/0x430 [ 340.953470][T15500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 340.953487][T15500] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 340.953532][T15500] ? ksys_write+0x22a/0x250 [ 340.953556][T15500] ? __pfx_ksys_write+0x10/0x10 [ 340.953575][T15500] ? rcu_is_watching+0x15/0xb0 [ 340.953600][T15500] __x64_sys_sendmmsg+0xa0/0xc0 [ 340.953622][T15500] do_syscall_64+0xfa/0x3b0 [ 340.953640][T15500] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.953659][T15500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.953675][T15500] ? clear_bhb_loop+0x60/0xb0 [ 340.953692][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.953705][T15500] RIP: 0033:0x7f1bb438ebe9 [ 340.953720][T15500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.953732][T15500] RSP: 002b:00007f1bb5255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.953751][T15500] RAX: ffffffffffffffda RBX: 00007f1bb45c5fa0 RCX: 00007f1bb438ebe9 [ 340.953765][T15500] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 340.953777][T15500] RBP: 00007f1bb5255090 R08: 0000000000000000 R09: 0000000000000000 [ 340.953788][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.953799][T15500] R13: 00007f1bb45c6038 R14: 00007f1bb45c5fa0 R15: 00007ffefe38f118 [ 340.953831][T15500] [ 341.227191][T15496] tipc: Enabled bearer , priority 0 [ 341.263502][T15495] tipc: Resetting bearer [ 341.308219][T15495] tipc: Disabling bearer [ 341.510005][T15514] dvmrp0: entered allmulticast mode [ 341.721635][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2712'. [ 341.737143][T15523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.932366][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 341.971522][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2721'. [ 341.991629][T15537] netlink: 'syz.2.2721': attribute type 18 has an invalid length. [ 342.164816][T15548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2726'. [ 342.295199][T15555] tipc: Enabled bearer , priority 0 [ 342.316207][T15558] sctp: [Deprecated]: syz.1.2728 (pid 15558) Use of int in max_burst socket option. [ 342.316207][T15558] Use struct sctp_assoc_value instead [ 342.341448][T15555] syzkaller0: entered promiscuous mode [ 342.358929][T15555] syzkaller0: entered allmulticast mode [ 342.457717][T15564] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2727'. [ 342.491763][T15555] tipc: Resetting bearer [ 342.571188][T15554] tipc: Resetting bearer [ 342.625909][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 342.664658][T15554] tipc: Disabling bearer [ 342.709903][T15578] netlink: 844 bytes leftover after parsing attributes in process `syz.0.2735'. [ 343.057495][T15602] FAULT_INJECTION: forcing a failure. [ 343.057495][T15602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.071032][T15602] CPU: 1 UID: 0 PID: 15602 Comm: syz.4.2742 Not tainted syzkaller #0 PREEMPT(full) [ 343.071059][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.071071][T15602] Call Trace: [ 343.071080][T15602] [ 343.071088][T15602] dump_stack_lvl+0x189/0x250 [ 343.071118][T15602] ? __pfx____ratelimit+0x10/0x10 [ 343.071139][T15602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.071163][T15602] ? __pfx__printk+0x10/0x10 [ 343.071206][T15602] should_fail_ex+0x414/0x560 [ 343.071238][T15602] _copy_from_user+0x2d/0xb0 [ 343.071262][T15602] bpf_test_init+0xf8/0x170 [ 343.071287][T15602] bpf_prog_test_run_skb+0x1e9/0x1560 [ 343.071306][T15602] ? __fget_files+0x2a/0x420 [ 343.071328][T15602] ? __fget_files+0x2a/0x420 [ 343.071354][T15602] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 343.071374][T15602] bpf_prog_test_run+0x2c7/0x340 [ 343.071407][T15602] __sys_bpf+0x581/0x870 [ 343.071435][T15602] ? __pfx___sys_bpf+0x10/0x10 [ 343.071476][T15602] ? ksys_write+0x22a/0x250 [ 343.071505][T15602] ? __pfx_ksys_write+0x10/0x10 [ 343.071527][T15602] ? rcu_is_watching+0x15/0xb0 [ 343.071556][T15602] __x64_sys_bpf+0x7c/0x90 [ 343.071580][T15602] do_syscall_64+0xfa/0x3b0 [ 343.071608][T15602] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.071628][T15602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.071647][T15602] ? clear_bhb_loop+0x60/0xb0 [ 343.071671][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.071690][T15602] RIP: 0033:0x7f5e0e98ebe9 [ 343.071708][T15602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.071724][T15602] RSP: 002b:00007f5e0f8d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.071746][T15602] RAX: ffffffffffffffda RBX: 00007f5e0ebc5fa0 RCX: 00007f5e0e98ebe9 [ 343.071760][T15602] RDX: 000000000000004c RSI: 00002000000002c0 RDI: 000000000000000a [ 343.071773][T15602] RBP: 00007f5e0f8d9090 R08: 0000000000000000 R09: 0000000000000000 [ 343.071785][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.071796][T15602] R13: 00007f5e0ebc6038 R14: 00007f5e0ebc5fa0 R15: 00007ffd30b6a638 [ 343.071829][T15602] [ 343.547165][T15623] team0: entered promiscuous mode [ 344.124409][T15623] team0 (unregistering): left promiscuous mode [ 344.169086][ T5884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.179857][ T5884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.198519][ T5884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.213380][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.225687][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.252054][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.259850][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.269520][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.279793][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.288829][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.574592][T15640] lo speed is unknown, defaulting to 1000 [ 344.634332][T15640] lo speed is unknown, defaulting to 1000 [ 344.878189][T15668] netlink: 'syz.2.2760': attribute type 5 has an invalid length. [ 345.019427][T15668] tipc: Enabling of bearer rejected, failed to enable media [ 345.069117][T15675] vlan0: entered promiscuous mode [ 345.121601][T15668] nbd0: detected capacity change from 0 to 127 [ 345.181566][ T5884] block nbd0: Receive control failed (result -32) [ 345.270211][T15640] chnl_net:caif_netlink_parms(): no params data found [ 345.371811][ T2992] bridge_slave_0: left allmulticast mode [ 345.377737][ T2992] bridge_slave_0: left promiscuous mode [ 345.438174][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.633378][ T2992] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 345.698811][T15700] __nla_validate_parse: 9 callbacks suppressed [ 345.698835][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2769'. [ 346.358253][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.369031][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.371043][ T5884] Bluetooth: hci4: command tx timeout [ 346.387959][ T2992] bond0 (unregistering): Released all slaves [ 346.505227][ T2992] bond1 (unregistering): Released all slaves [ 346.629905][ T2992] bond2 (unregistering): Released all slaves [ 346.645966][ T2992] bond3 (unregistering): Released all slaves [ 346.759794][ T2992] bond4 (unregistering): Released all slaves [ 346.795907][T15691] dvmrp0: entered allmulticast mode [ 346.994837][ T2992] : left promiscuous mode [ 347.158523][T15723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2775'. [ 347.195070][ T2992] tipc: Disabling bearer [ 347.234837][T15726] netlink: 'syz.1.2776': attribute type 1 has an invalid length. [ 347.246919][ T2992] tipc: Left network mode [ 347.273919][ T2992] IPVS: stopping master sync thread 7588 ... [ 347.299899][T15727] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2776'. [ 347.332361][T15640] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.354560][T15640] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.362321][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2777'. [ 347.379239][T15640] bridge_slave_0: entered allmulticast mode [ 347.399797][T15640] bridge_slave_0: entered promiscuous mode [ 347.490360][T15726] bond7: entered promiscuous mode [ 347.497706][T15726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.546512][T15726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2776'. [ 347.585364][T15727] batadv2: entered promiscuous mode [ 347.593761][T15727] batadv2: entered allmulticast mode [ 347.653152][T15727] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 347.696107][T15727] bond7: (slave batadv2): making interface the new active one [ 347.733082][T15727] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 347.811032][T15640] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.827269][T15640] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.837683][T15640] bridge_slave_1: entered allmulticast mode [ 347.867482][T15640] bridge_slave_1: entered promiscuous mode [ 347.941969][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 348.076188][T15640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.139116][T15640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.382403][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 348.391409][T15640] team0: Port device team_slave_0 added [ 348.448401][ T5884] Bluetooth: hci4: command tx timeout [ 348.457352][T15640] team0: Port device team_slave_1 added [ 348.616884][ T2936] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 348.629191][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 348.656967][T15773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.961239][T15784] netlink: 'syz.2.2789': attribute type 30 has an invalid length. [ 349.023198][T15786] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 349.113059][T15791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2791'. [ 349.131882][T15640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.149536][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.217905][T15640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.447645][T15786] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.559011][T15793] gretap1: entered promiscuous mode [ 349.585284][T15793] bond8: (slave gretap1): making interface the new active one [ 349.595502][T15793] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 349.605688][T15640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.613460][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.640252][T15802] netlink: 'syz.0.2792': attribute type 4 has an invalid length. [ 349.649434][T15640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.849688][T15809] FAULT_INJECTION: forcing a failure. [ 349.849688][T15809] name failslab, interval 1, probability 0, space 0, times 0 [ 349.882275][T15809] CPU: 0 UID: 0 PID: 15809 Comm: syz.2.2795 Not tainted syzkaller #0 PREEMPT(full) [ 349.882305][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.882317][T15809] Call Trace: [ 349.882325][T15809] [ 349.882333][T15809] dump_stack_lvl+0x189/0x250 [ 349.882362][T15809] ? __pfx____ratelimit+0x10/0x10 [ 349.882384][T15809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.882406][T15809] ? __pfx__printk+0x10/0x10 [ 349.882439][T15809] ? __pfx___might_resched+0x10/0x10 [ 349.882457][T15809] ? fs_reclaim_acquire+0x7d/0x100 [ 349.882481][T15809] should_fail_ex+0x414/0x560 [ 349.882520][T15809] should_failslab+0xa8/0x100 [ 349.882550][T15809] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 349.882576][T15809] ? __d_alloc+0x36/0x7a0 [ 349.882601][T15809] __d_alloc+0x36/0x7a0 [ 349.882628][T15809] d_alloc_pseudo+0x21/0xc0 [ 349.882650][T15809] alloc_file_pseudo+0xcc/0x210 [ 349.882673][T15809] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 349.882691][T15809] ? __local_bh_enable_ip+0x12d/0x1c0 [ 349.882727][T15809] anon_inode_getfile+0xc5/0x1a0 [ 349.882752][T15809] bpf_link_prime+0xfc/0x220 [ 349.882777][T15809] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 349.882803][T15809] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 349.882837][T15809] ? __fget_files+0x2a/0x420 [ 349.882865][T15809] bpf_raw_tracepoint_open+0x1b2/0x220 [ 349.882896][T15809] __sys_bpf+0x75a/0x870 [ 349.882924][T15809] ? __pfx___sys_bpf+0x10/0x10 [ 349.882964][T15809] ? ksys_write+0x22a/0x250 [ 349.882991][T15809] ? __pfx_ksys_write+0x10/0x10 [ 349.883014][T15809] ? rcu_is_watching+0x15/0xb0 [ 349.883042][T15809] __x64_sys_bpf+0x7c/0x90 [ 349.883067][T15809] do_syscall_64+0xfa/0x3b0 [ 349.883086][T15809] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.883104][T15809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.883123][T15809] ? clear_bhb_loop+0x60/0xb0 [ 349.883147][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.883165][T15809] RIP: 0033:0x7fd87378ebe9 [ 349.883183][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.883197][T15809] RSP: 002b:00007fd8745e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.883219][T15809] RAX: ffffffffffffffda RBX: 00007fd8739c5fa0 RCX: 00007fd87378ebe9 [ 349.883232][T15809] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 349.883244][T15809] RBP: 00007fd8745e8090 R08: 0000000000000000 R09: 0000000000000000 [ 349.883254][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.883265][T15809] R13: 00007fd8739c6038 R14: 00007fd8739c5fa0 R15: 00007ffef84d90d8 [ 349.883298][T15809] [ 350.176982][T15640] hsr_slave_0: entered promiscuous mode [ 350.187356][T15640] hsr_slave_1: entered promiscuous mode [ 350.297280][ T2992] hsr_slave_0: left promiscuous mode [ 350.311877][ T2992] hsr_slave_1: left promiscuous mode [ 350.321734][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.331303][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.386053][T15820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2797'. [ 350.521371][ T5884] Bluetooth: hci4: command tx timeout [ 351.415389][T15834] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 351.427420][T15834] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2801'. [ 351.459423][T15834] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 351.714992][T15845] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 351.934038][T15845] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2805'. [ 352.088521][T15870] netlink: 'syz.2.2809': attribute type 11 has an invalid length. [ 352.126535][T15870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2809'. [ 352.403345][T15880] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2812'. [ 352.415707][T15880] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.440064][ T2992] IPVS: stop unused estimator thread 0... [ 352.447852][T15880] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2812'. [ 352.482994][T15880] tipc: Enabled bearer , priority 0 [ 352.501420][T15880] syzkaller0: entered promiscuous mode [ 352.507035][T15880] syzkaller0: entered allmulticast mode [ 352.555053][T15880] tipc: Resetting bearer [ 352.564216][T15879] tipc: Resetting bearer [ 352.602756][ T5884] Bluetooth: hci4: command tx timeout [ 352.611261][T15879] tipc: Disabling bearer [ 352.620111][T15889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2816'. [ 352.645742][T15889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2816'. [ 352.660081][T15889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2816'. [ 352.821601][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2818'. [ 352.976296][T15640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.048313][T15640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.094674][T15640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.125173][T15903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2823'. [ 353.170571][T15640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.457476][T15640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.473772][T15929] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 353.516921][T15640] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.536728][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.543953][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.580029][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.587285][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.727160][T15953] tipc: Enabling of bearer rejected, failed to enable media [ 357.330039][T15980] lo speed is unknown, defaulting to 1000 [ 357.363016][T15986] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 357.371053][T15986] netlink: 'syz.2.2845': attribute type 1 has an invalid length. [ 357.394005][T15640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.433594][T15980] lo speed is unknown, defaulting to 1000 [ 357.638823][T15999] __nla_validate_parse: 4 callbacks suppressed [ 357.638846][T15999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'. [ 357.693435][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2847'. [ 357.949026][T16017] FAULT_INJECTION: forcing a failure. [ 357.949026][T16017] name failslab, interval 1, probability 0, space 0, times 0 [ 357.972055][T16017] CPU: 0 UID: 0 PID: 16017 Comm: syz.2.2852 Not tainted syzkaller #0 PREEMPT(full) [ 357.972086][T16017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.972098][T16017] Call Trace: [ 357.972107][T16017] [ 357.972116][T16017] dump_stack_lvl+0x189/0x250 [ 357.972147][T16017] ? __pfx____ratelimit+0x10/0x10 [ 357.972168][T16017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.972192][T16017] ? __pfx__printk+0x10/0x10 [ 357.972228][T16017] ? __pfx___might_resched+0x10/0x10 [ 357.972255][T16017] ? fs_reclaim_acquire+0x7d/0x100 [ 357.972281][T16017] should_fail_ex+0x414/0x560 [ 357.972315][T16017] should_failslab+0xa8/0x100 [ 357.972345][T16017] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 357.972372][T16017] ? __d_alloc+0x36/0x7a0 [ 357.972399][T16017] __d_alloc+0x36/0x7a0 [ 357.972428][T16017] d_alloc_parallel+0xe5/0x15e0 [ 357.972469][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.972503][T16017] ? __pfx_d_alloc_parallel+0x10/0x10 [ 357.972533][T16017] ? __raw_spin_lock_init+0x45/0x100 [ 357.972558][T16017] ? __init_waitqueue_head+0xa9/0x150 [ 357.972586][T16017] __lookup_slow+0x116/0x3d0 [ 357.972612][T16017] ? __pfx___lookup_slow+0x10/0x10 [ 357.972647][T16017] ? d_lookup+0x8a/0xa0 [ 357.972668][T16017] ? lookup_noperm+0x112/0x220 [ 357.972694][T16017] simple_start_creating+0xfd/0x1e0 [ 357.972713][T16017] ? __pfx_simple_start_creating+0x10/0x10 [ 357.972746][T16017] start_creating+0x10f/0x180 [ 357.972776][T16017] __debugfs_create_file+0x79/0x4f0 [ 357.972810][T16017] debugfs_create_file_full+0x3f/0x60 [ 357.972843][T16017] ref_tracker_dir_debugfs+0x14e/0x270 [ 357.972871][T16017] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 357.972934][T16017] ? rcu_is_watching+0x15/0xb0 [ 357.972952][T16017] ? alloc_netdev_mqs+0xa3/0x11b0 [ 357.972984][T16017] ? __raw_spin_lock_init+0x45/0x100 [ 357.973011][T16017] alloc_netdev_mqs+0x26f/0x11b0 [ 357.973035][T16017] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 357.973067][T16017] rtnl_create_link+0x31f/0xd10 [ 357.973103][T16017] rtnl_newlink_create+0x25c/0xb00 [ 357.973130][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.973163][T16017] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 357.973190][T16017] ? __pfx___mutex_lock+0x10/0x10 [ 357.973217][T16017] ? full_name_hash+0x92/0xe0 [ 357.973254][T16017] rtnl_newlink+0x16d6/0x1c70 [ 357.973297][T16017] ? __pfx_rtnl_newlink+0x10/0x10 [ 357.973341][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.973385][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.973438][T16017] ? is_bpf_text_address+0x26/0x2b0 [ 357.973474][T16017] ? is_bpf_text_address+0x292/0x2b0 [ 357.973498][T16017] ? is_bpf_text_address+0x26/0x2b0 [ 357.973536][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.973597][T16017] ? __pfx_rtnl_newlink+0x10/0x10 [ 357.973615][T16017] rtnetlink_rcv_msg+0x7cc/0xb70 [ 357.973632][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.973662][T16017] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 357.973679][T16017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.973721][T16017] netlink_rcv_skb+0x208/0x470 [ 357.973738][T16017] ? __lock_acquire+0xab9/0xd20 [ 357.973763][T16017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.973785][T16017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.973819][T16017] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.973849][T16017] netlink_unicast+0x82f/0x9e0 [ 357.973888][T16017] ? __pfx_netlink_unicast+0x10/0x10 [ 357.973919][T16017] ? netlink_sendmsg+0x642/0xb30 [ 357.973936][T16017] ? skb_put+0x11b/0x210 [ 357.973963][T16017] netlink_sendmsg+0x805/0xb30 [ 357.973997][T16017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.974022][T16017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 357.974045][T16017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.974065][T16017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.974087][T16017] __sock_sendmsg+0x21c/0x270 [ 357.974120][T16017] ____sys_sendmsg+0x52d/0x830 [ 357.974152][T16017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.974188][T16017] ? import_iovec+0x74/0xa0 [ 357.974216][T16017] ___sys_sendmsg+0x21f/0x2a0 [ 357.974253][T16017] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.974344][T16017] ? __might_fault+0xb0/0x130 [ 357.974376][T16017] __sys_sendmmsg+0x227/0x430 [ 357.974408][T16017] ? __pfx___sys_sendmmsg+0x10/0x10 [ 357.974428][T16017] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 357.974486][T16017] ? ksys_write+0x22a/0x250 [ 357.974514][T16017] ? __pfx_ksys_write+0x10/0x10 [ 357.974536][T16017] ? rcu_is_watching+0x15/0xb0 [ 357.974564][T16017] __x64_sys_sendmmsg+0xa0/0xc0 [ 357.974590][T16017] do_syscall_64+0xfa/0x3b0 [ 357.974609][T16017] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.974628][T16017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.974646][T16017] ? clear_bhb_loop+0x60/0xb0 [ 357.974669][T16017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.974687][T16017] RIP: 0033:0x7fd87378ebe9 [ 357.974706][T16017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.974722][T16017] RSP: 002b:00007fd8745e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.974744][T16017] RAX: ffffffffffffffda RBX: 00007fd8739c5fa0 RCX: 00007fd87378ebe9 [ 357.974758][T16017] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 357.974770][T16017] RBP: 00007fd8745e8090 R08: 0000000000000000 R09: 0000000000000000 [ 357.974782][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.974794][T16017] R13: 00007fd8739c6038 R14: 00007fd8739c5fa0 R15: 00007ffef84d90d8 [ 357.974829][T16017] [ 358.869641][T16026] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 358.904160][T16026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.839869][T16064] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2863'. [ 359.869523][T15640] veth0_vlan: entered promiscuous mode [ 359.916621][T15640] veth1_vlan: entered promiscuous mode [ 360.038291][T16072] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 360.107061][T15640] veth0_macvtap: entered promiscuous mode [ 360.135652][T15640] veth1_macvtap: entered promiscuous mode [ 360.206641][T15640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.254629][T15640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.277418][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'. [ 360.285591][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.316590][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.358097][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.383907][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.466891][T16092] netlink: 'syz.0.2872': attribute type 6 has an invalid length. [ 360.619627][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.645555][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.739276][T10413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.758423][T10413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.873815][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2876'. [ 360.883583][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2876'. [ 360.921949][T16103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2876'. [ 361.663635][T16130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.678765][T16129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.715923][T16129] batadv0: entered promiscuous mode [ 361.777536][T16128] batadv0: left promiscuous mode [ 361.866421][ T30] audit: type=1800 audit(1757343801.450:9): pid=16137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2889" name="blkio.bfq.time_recursive" dev="tmpfs" ino=33 res=0 errno=0 [ 362.077741][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.101595][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.110199][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.119603][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.151292][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.383287][T16155] netlink: 'syz.3.2895': attribute type 3 has an invalid length. [ 362.383662][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2893'. [ 362.712766][T16146] lo speed is unknown, defaulting to 1000 [ 362.812674][T16146] lo speed is unknown, defaulting to 1000 [ 363.603104][T10415] veth0_to_bond: left allmulticast mode [ 363.630043][T10415] veth0_to_bond: left promiscuous mode [ 363.651150][T10415] bridge4: port 2(veth0_to_bond) entered disabled state [ 363.674666][T10415] veth15: left allmulticast mode [ 363.679762][T10415] veth15: left promiscuous mode [ 363.714072][T10415] bridge4: port 1(veth15) entered disabled state [ 364.073158][T16137] syz.4.2889: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 364.093274][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.4.2889 Not tainted syzkaller #0 PREEMPT(full) [ 364.093305][T16137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.093317][T16137] Call Trace: [ 364.093325][T16137] [ 364.093333][T16137] dump_stack_lvl+0x189/0x250 [ 364.093366][T16137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.093389][T16137] ? __pfx__printk+0x10/0x10 [ 364.093416][T16137] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 364.093439][T16137] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 364.093464][T16137] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 364.093490][T16137] warn_alloc+0x214/0x310 [ 364.093527][T16137] ? __pfx_warn_alloc+0x10/0x10 [ 364.093568][T16137] ? __get_vm_area_node+0x28f/0x300 [ 364.093595][T16137] ? hash_netport4_resize+0x235/0x1b60 [ 364.093622][T16137] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 364.093683][T16137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 364.093715][T16137] ? rcu_is_watching+0x15/0xb0 [ 364.093735][T16137] ? hash_netport4_resize+0x235/0x1b60 [ 364.093755][T16137] ? hash_netport4_resize+0x235/0x1b60 [ 364.093775][T16137] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 364.093804][T16137] ? hash_netport4_resize+0x235/0x1b60 [ 364.093838][T16137] hash_netport4_resize+0x235/0x1b60 [ 364.093861][T16137] ? hash_netport4_uadt+0xc97/0xf30 [ 364.093893][T16137] ? __pfx_hash_netport4_add+0x10/0x10 [ 364.093917][T16137] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 364.093955][T16137] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 364.093990][T16137] call_ad+0x44b/0xb00 [ 364.094031][T16137] ? __pfx_call_ad+0x10/0x10 [ 364.094076][T16137] ? __nla_parse+0x40/0x60 [ 364.094100][T16137] ip_set_ad+0x791/0x930 [ 364.094139][T16137] ? __pfx_ip_set_ad+0x10/0x10 [ 364.094231][T16137] nfnetlink_rcv_msg+0xb4a/0x1130 [ 364.094263][T16137] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 364.094314][T16137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 364.094340][T16137] ? kasan_save_free_info+0x46/0x50 [ 364.094423][T16137] netlink_rcv_skb+0x208/0x470 [ 364.094445][T16137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 364.094475][T16137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.094511][T16137] ? bpf_lsm_capable+0x9/0x20 [ 364.094537][T16137] ? security_capable+0x7e/0x2e0 [ 364.094576][T16137] nfnetlink_rcv+0x26a/0x2520 [ 364.094607][T16137] ? __dev_queue_xmit+0x1d79/0x3b50 [ 364.094640][T16137] ? __dev_queue_xmit+0x27b/0x3b50 [ 364.094669][T16137] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 364.094693][T16137] ? __pfx___dev_queue_xmit+0x10/0x10 [ 364.094737][T16137] ? ref_tracker_free+0x63a/0x7d0 [ 364.094765][T16137] ? __asan_memcpy+0x40/0x70 [ 364.094787][T16137] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.094836][T16137] ? skb_clone+0x246/0x3a0 [ 364.094863][T16137] ? __netlink_deliver_tap+0x807/0x850 [ 364.094880][T16137] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.094908][T16137] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.094939][T16137] netlink_unicast+0x82f/0x9e0 [ 364.094979][T16137] ? __pfx_netlink_unicast+0x10/0x10 [ 364.095008][T16137] ? netlink_sendmsg+0x642/0xb30 [ 364.095025][T16137] ? skb_put+0x11b/0x210 [ 364.095049][T16137] netlink_sendmsg+0x805/0xb30 [ 364.095079][T16137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.095101][T16137] ? aa_sock_msg_perm+0xf1/0x1d0 [ 364.095123][T16137] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.095143][T16137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.095164][T16137] __sock_sendmsg+0x21c/0x270 [ 364.095205][T16137] ____sys_sendmsg+0x505/0x830 [ 364.095237][T16137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.095273][T16137] ? import_iovec+0x74/0xa0 [ 364.095302][T16137] ___sys_sendmsg+0x21f/0x2a0 [ 364.095328][T16137] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.095399][T16137] ? __fget_files+0x2a/0x420 [ 364.095416][T16137] ? __fget_files+0x3a0/0x420 [ 364.095447][T16137] __x64_sys_sendmsg+0x19b/0x260 [ 364.095475][T16137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.095512][T16137] ? rcu_is_watching+0x15/0xb0 [ 364.095540][T16137] ? do_syscall_64+0xbe/0x3b0 [ 364.095567][T16137] do_syscall_64+0xfa/0x3b0 [ 364.095587][T16137] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.095608][T16137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.095627][T16137] ? clear_bhb_loop+0x60/0xb0 [ 364.095652][T16137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.095670][T16137] RIP: 0033:0x7f4eb4d8ebe9 [ 364.095689][T16137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.095706][T16137] RSP: 002b:00007f4eb5c6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.095730][T16137] RAX: ffffffffffffffda RBX: 00007f4eb4fc5fa0 RCX: 00007f4eb4d8ebe9 [ 364.095745][T16137] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 364.095758][T16137] RBP: 00007f4eb4e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 364.095771][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.095782][T16137] R13: 00007f4eb4fc6038 R14: 00007f4eb4fc5fa0 R15: 00007ffd3f3c6e08 [ 364.095819][T16137] [ 364.104038][T10415] batman_adv: batadv0: Removing interface: ip6gretap1 [ 364.112358][T16137] Mem-Info: [ 364.286136][ T5876] Bluetooth: hci0: command tx timeout [ 364.290990][T16137] active_anon:3774 inactive_anon:0 isolated_anon:0 [ 364.290990][T16137] active_file:3467 inactive_file:39964 isolated_file:0 [ 364.290990][T16137] unevictable:768 dirty:222 writeback:0 [ 364.290990][T16137] slab_reclaimable:12498 slab_unreclaimable:192432 [ 364.290990][T16137] mapped:35385 shmem:1360 pagetables:954 [ 364.290990][T16137] sec_pagetables:0 bounce:0 [ 364.290990][T16137] kernel_misc_reclaimable:0 [ 364.290990][T16137] free:1227699 free_pcp:14116 free_cma:0 [ 364.673398][T16137] Node 0 active_anon:15096kB inactive_anon:0kB active_file:13868kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141540kB dirty:888kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13072kB pagetables:3660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.705962][T16137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.739401][T16137] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.768831][T16137] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 364.775160][T16137] Node 0 DMA32 free:1011332kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15052kB inactive_anon:0kB active_file:13868kB inactive_file:158072kB unevictable:1536kB writepending:884kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:33072kB local_pcp:16708kB free_cma:0kB [ 364.809310][T16137] lowmem_reserve[]: 0 0 1 1 1 [ 364.814861][T16137] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 364.847001][T16137] lowmem_reserve[]: 0 0 0 0 0 [ 364.852247][T16137] Node 1 Normal free:3896092kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18148kB local_pcp:10756kB free_cma:0kB [ 364.887500][T16137] lowmem_reserve[]: 0 0 0 0 0 [ 364.917544][T16137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 364.944335][T16137] Node 0 DMA32: 960*4kB (UME) 521*8kB (ME) 220*16kB (ME) 81*32kB (ME) 70*64kB (UM) 48*128kB (UM) 87*256kB (UM) 37*512kB (UME) 15*1024kB (UME) 8*2048kB (UM) 223*4096kB (UM) = 1011112kB [ 364.963308][T16137] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 364.975883][T16137] Node 1 Normal: 191*4kB (UE) 44*8kB (UME) 44*16kB (UME) 88*32kB (UME) 26*64kB (UME) 9*128kB (UME) 2*256kB (M) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3896092kB [ 364.994860][T16137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.030582][T16137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.048483][T16137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.069725][T16137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.089946][T16137] 44788 total pagecache pages [ 365.094929][T16137] 0 pages in swap cache [ 365.099227][T16137] Free swap = 124996kB [ 365.110034][T16137] Total swap = 124996kB [ 365.114523][T16137] 2097051 pages RAM [ 365.118640][T16137] 0 pages HighMem/MovableOnly [ 365.119072][T10415] bond8 (unregistering): (slave gretap1): Releasing active interface [ 365.129367][T16137] 425673 pages reserved [ 365.136642][T16137] 0 pages cma reserved [ 365.358930][T10415] dvmrp0 (unregistering): left allmulticast mode [ 365.514849][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 365.956771][T10415]  (unregistering): Released all slaves [ 366.077870][T10415] bond1 (unregistering): Released all slaves [ 366.214174][T10415] bond0 (unregistering): Released all slaves [ 366.334739][T10415] bond2 (unregistering): Released all slaves [ 366.350214][T10415] bond3 (unregistering): Released all slaves [ 366.360746][ T5876] Bluetooth: hci0: command tx timeout [ 366.366255][T10415] bond4 (unregistering): Released all slaves [ 366.488730][T10415] bond5 (unregistering): Released all slaves [ 366.503888][T10415] bond6 (unregistering): Released all slaves [ 366.626009][T10415] bond7 (unregistering): (slave batadv2): Releasing active interface [ 366.636565][T10415] bond7 (unregistering): Released all slaves [ 366.751000][T10415] bond8 (unregistering): Released all slaves [ 366.849793][T16146] chnl_net:caif_netlink_parms(): no params data found [ 367.071791][T10415] : left promiscuous mode [ 367.192322][T10415] : left promiscuous mode [ 367.377364][T10415] tipc: Left network mode [ 367.385643][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.408973][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.422991][T16146] bridge_slave_0: entered allmulticast mode [ 367.443838][T16146] bridge_slave_0: entered promiscuous mode [ 367.544600][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.553814][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.562885][T16146] bridge_slave_1: entered allmulticast mode [ 367.574792][T16146] bridge_slave_1: entered promiscuous mode [ 367.835558][T16251] netlink: 'syz.3.2920': attribute type 2 has an invalid length. [ 367.920175][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.947885][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.988071][T16260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2923'. [ 368.174131][T16253] lo speed is unknown, defaulting to 1000 [ 368.193876][T16146] team0: Port device team_slave_0 added [ 368.200378][T16253] lo speed is unknown, defaulting to 1000 [ 368.229410][T16146] team0: Port device team_slave_1 added [ 368.303955][T10415] hsr_slave_0: left promiscuous mode [ 368.435159][T10415] pim6reg (unregistering): left allmulticast mode [ 368.441219][ T5876] Bluetooth: hci0: command tx timeout [ 368.593965][T16273] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2924'. [ 370.130156][T16279] netlink: 'syz.0.2926': attribute type 29 has an invalid length. [ 370.187923][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.219093][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.276995][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.314856][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.334878][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.379712][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.476710][T16303] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 370.485536][T16303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.522902][ T5876] Bluetooth: hci0: command tx timeout [ 370.586497][T16302] netlink: 'syz.0.2933': attribute type 12 has an invalid length. [ 370.626182][T16310] netlink: 'syz.3.2934': attribute type 13 has an invalid length. [ 370.720934][T16310] netlink: 'syz.3.2934': attribute type 17 has an invalid length. [ 370.866423][T16146] hsr_slave_0: entered promiscuous mode [ 370.898662][T16146] hsr_slave_1: entered promiscuous mode [ 370.908697][T16146] debugfs: 'hsr0' already exists in 'hsr' [ 370.915944][T16146] Cannot create hsr debugfs directory [ 371.135780][T16324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.206661][T16310] 0X: left allmulticast mode [ 371.246304][T16310] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 371.253719][T16324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.316357][ T7766] lo speed is unknown, defaulting to 1000 [ 371.328459][ T7766] syz2: Port: 1 Link ACTIVE [ 371.394599][T16333] netlink: 'syz.4.2938': attribute type 13 has an invalid length. [ 371.407698][T16333] netlink: 'syz.4.2938': attribute type 17 has an invalid length. [ 371.416382][T16325] lo speed is unknown, defaulting to 1000 [ 371.496843][T16333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.531345][T16325] lo speed is unknown, defaulting to 1000 [ 371.533708][T10415] IPVS: stop unused estimator thread 0... [ 371.701687][T16336] lo speed is unknown, defaulting to 1000 [ 371.738879][T16336] lo speed is unknown, defaulting to 1000 [ 372.261816][T16357] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2946'. [ 372.281933][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 372.514096][T16361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.722825][T16370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2950'. [ 372.914049][T16146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.942414][T16146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.970294][T16146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.011865][T16146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.157619][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2953'. [ 373.350887][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.428506][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.472923][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.480193][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.594589][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.601960][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.640342][T16406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2958'. [ 373.692074][T16411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2958'. [ 373.714869][T16406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2958'. [ 373.734678][T16406] netlink: 'syz.4.2958': attribute type 4 has an invalid length. [ 373.760250][T16410] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 373.795345][T16412] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 374.213496][T16414] lo speed is unknown, defaulting to 1000 [ 374.246667][T16414] lo speed is unknown, defaulting to 1000 [ 374.326698][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 374.632783][T16442] bridge_slave_0: left allmulticast mode [ 374.638842][T16442] bridge_slave_0: left promiscuous mode [ 374.687310][T16442] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.708931][T16442] bridge_slave_1: left allmulticast mode [ 374.715346][T16442] bridge_slave_1: left promiscuous mode [ 374.721763][T16442] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.761871][T16442] bond0: (slave bond_slave_0): Releasing backup interface [ 374.798269][T16442] bond0: (slave bond_slave_1): Releasing backup interface [ 374.833827][T16442] team0: Failed to send options change via netlink (err -105) [ 374.844207][T16442] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 374.854894][T16442] team0: Port device team_slave_0 removed [ 374.879996][T16442] team0: Failed to send options change via netlink (err -105) [ 374.897537][T16442] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 374.915464][T16442] team0: Port device team_slave_1 removed [ 374.926961][T16442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.935159][T16442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.947189][T16442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.957971][T16442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.087409][T16454] team0: Failed to send options change via netlink (err -105) [ 375.116964][T16454] team0: Mode changed to "activebackup" [ 375.412610][T16146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.714602][T16146] veth0_vlan: entered promiscuous mode [ 375.738801][T16146] veth1_vlan: entered promiscuous mode [ 375.786503][T16491] vlan0: entered promiscuous mode [ 375.802218][T16491] syz_tun: entered promiscuous mode [ 375.882182][T16496] FAULT_INJECTION: forcing a failure. [ 375.882182][T16496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.922707][T16146] veth0_macvtap: entered promiscuous mode [ 375.933128][T16496] CPU: 1 UID: 0 PID: 16496 Comm: syz.0.2985 Not tainted syzkaller #0 PREEMPT(full) [ 375.933157][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.933170][T16496] Call Trace: [ 375.933178][T16496] [ 375.933186][T16496] dump_stack_lvl+0x189/0x250 [ 375.933214][T16496] ? __pfx____ratelimit+0x10/0x10 [ 375.933235][T16496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.933258][T16496] ? __pfx__printk+0x10/0x10 [ 375.933284][T16496] ? __might_fault+0xb0/0x130 [ 375.933324][T16496] should_fail_ex+0x414/0x560 [ 375.933356][T16496] _copy_from_user+0x2d/0xb0 [ 375.933380][T16496] __sys_bpf+0x1ed/0x870 [ 375.933407][T16496] ? __pfx___sys_bpf+0x10/0x10 [ 375.933447][T16496] ? ksys_write+0x22a/0x250 [ 375.933476][T16496] ? __pfx_ksys_write+0x10/0x10 [ 375.933497][T16496] ? rcu_is_watching+0x15/0xb0 [ 375.933525][T16496] __x64_sys_bpf+0x7c/0x90 [ 375.933549][T16496] do_syscall_64+0xfa/0x3b0 [ 375.933569][T16496] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.933587][T16496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.933606][T16496] ? clear_bhb_loop+0x60/0xb0 [ 375.933644][T16496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.933662][T16496] RIP: 0033:0x7fb19318ebe9 [ 375.933680][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.933696][T16496] RSP: 002b:00007fb193f2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.933718][T16496] RAX: ffffffffffffffda RBX: 00007fb1933c5fa0 RCX: 00007fb19318ebe9 [ 375.933732][T16496] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 375.933744][T16496] RBP: 00007fb193f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 375.933756][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.933766][T16496] R13: 00007fb1933c6038 R14: 00007fb1933c5fa0 R15: 00007ffea77ffc18 [ 375.933797][T16496] [ 375.963333][T16146] veth1_macvtap: entered promiscuous mode [ 376.141037][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 376.174717][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 376.215957][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.239130][T16505] netlink: 'syz.3.2987': attribute type 18 has an invalid length. [ 376.294163][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.337706][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.357306][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.400953][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.409776][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.727829][T16523] lo speed is unknown, defaulting to 1000 [ 376.791990][T16523] lo speed is unknown, defaulting to 1000 [ 376.886951][T16525] lo speed is unknown, defaulting to 1000 [ 376.974209][T16525] lo speed is unknown, defaulting to 1000 [ 376.980073][T10414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.009098][T10414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.095609][T16522] lo speed is unknown, defaulting to 1000 [ 377.316745][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.345504][T16522] lo speed is unknown, defaulting to 1000 [ 377.354221][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.456892][T16553] __nla_validate_parse: 1 callbacks suppressed [ 377.456912][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 377.539110][T16553] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 377.664029][T16549] lo speed is unknown, defaulting to 1000 [ 377.730104][T16560] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3001'. [ 377.768812][T16549] lo speed is unknown, defaulting to 1000 [ 378.047747][ T30] audit: type=1107 audit(1757343817.630:10): pid=16568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='i%@0 ݞqj [ 378.047747][ T30] {HĤ$$[!' [ 378.128777][T16569] tap0: tun_chr_ioctl cmd 1074025678 [ 378.163790][T16569] tap0: group set to 0 [ 378.543159][ T5876] block nbd1: Receive control failed (result -104) [ 379.321710][T16601] netlink: 'syz.1.3015': attribute type 12 has an invalid length. [ 379.516511][T16604] FAULT_INJECTION: forcing a failure. [ 379.516511][T16604] name failslab, interval 1, probability 0, space 0, times 0 [ 379.590798][T16604] CPU: 0 UID: 0 PID: 16604 Comm: syz.4.3016 Not tainted syzkaller #0 PREEMPT(full) [ 379.590829][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.590841][T16604] Call Trace: [ 379.590848][T16604] [ 379.590857][T16604] dump_stack_lvl+0x189/0x250 [ 379.590886][T16604] ? __pfx____ratelimit+0x10/0x10 [ 379.590906][T16604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.590929][T16604] ? __pfx__printk+0x10/0x10 [ 379.590962][T16604] ? __pfx___might_resched+0x10/0x10 [ 379.590987][T16604] should_fail_ex+0x414/0x560 [ 379.591019][T16604] should_failslab+0xa8/0x100 [ 379.591053][T16604] __kmalloc_noprof+0xcb/0x4f0 [ 379.591078][T16604] ? sk_prot_alloc+0xe7/0x220 [ 379.591104][T16604] sk_prot_alloc+0xe7/0x220 [ 379.591123][T16604] ? sk_alloc+0x24/0x370 [ 379.591146][T16604] sk_alloc+0x3a/0x370 [ 379.591173][T16604] ? bpf_ctx_init+0x167/0x1d0 [ 379.591195][T16604] bpf_prog_test_run_skb+0x2ed/0x1560 [ 379.591214][T16604] ? __fget_files+0x2a/0x420 [ 379.591248][T16604] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 379.591269][T16604] bpf_prog_test_run+0x2c7/0x340 [ 379.591301][T16604] __sys_bpf+0x581/0x870 [ 379.591328][T16604] ? __pfx___sys_bpf+0x10/0x10 [ 379.591368][T16604] ? ksys_write+0x22a/0x250 [ 379.591396][T16604] ? __pfx_ksys_write+0x10/0x10 [ 379.591417][T16604] ? rcu_is_watching+0x15/0xb0 [ 379.591446][T16604] __x64_sys_bpf+0x7c/0x90 [ 379.591469][T16604] do_syscall_64+0xfa/0x3b0 [ 379.591494][T16604] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.591514][T16604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.591534][T16604] ? clear_bhb_loop+0x60/0xb0 [ 379.591558][T16604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.591576][T16604] RIP: 0033:0x7f4eb4d8ebe9 [ 379.591593][T16604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.591610][T16604] RSP: 002b:00007f4eb5c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.591631][T16604] RAX: ffffffffffffffda RBX: 00007f4eb4fc5fa0 RCX: 00007f4eb4d8ebe9 [ 379.591645][T16604] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 379.591657][T16604] RBP: 00007f4eb5c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.591668][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.591679][T16604] R13: 00007f4eb4fc6038 R14: 00007f4eb4fc5fa0 R15: 00007ffd3f3c6e08 [ 379.591713][T16604] [ 380.000762][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 380.048344][ T5884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.075551][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.085845][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.095781][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.106680][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.197198][T16613] lo speed is unknown, defaulting to 1000 [ 380.209400][T16613] lo speed is unknown, defaulting to 1000 [ 380.537925][T16630] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 380.558910][T16630] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3023'. [ 380.918889][T16613] chnl_net:caif_netlink_parms(): no params data found [ 380.956065][T16643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3022'. [ 381.441641][T16653] netlink: 'syz.2.3027': attribute type 21 has an invalid length. [ 381.551744][T16653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3027'. [ 381.592426][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 381.668323][T16662] netlink: 'syz.4.3029': attribute type 1 has an invalid length. [ 381.678353][T16664] netlink: 'syz.4.3029': attribute type 1 has an invalid length. [ 381.699926][T16662] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 381.705213][T16613] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.742532][T16613] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.749809][T16613] bridge_slave_0: entered allmulticast mode [ 381.775103][T16613] bridge_slave_0: entered promiscuous mode [ 381.794319][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.811363][T16613] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.818724][T16613] bridge_slave_1: entered allmulticast mode [ 381.843164][T16613] bridge_slave_1: entered promiscuous mode [ 381.924018][T16664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.997930][T16668] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3030'. [ 382.045301][T16668] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3030'. [ 382.200914][ T5876] Bluetooth: hci1: command tx timeout [ 382.226311][T16668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.291078][T16668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.320342][T16613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.364800][T16613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.429416][T16676] rdma_rxe: rxe_newlink: failed to add lo [ 382.601924][T16613] team0: Port device team_slave_0 added [ 382.655107][T16613] team0: Port device team_slave_1 added [ 382.876150][T16613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.910388][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.974018][T16613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.996039][T16613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.010997][T16613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.053136][T16613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.356899][T16707] netlink: 'syz.1.3041': attribute type 1 has an invalid length. [ 383.964756][T16715] openvswitch: netlink: Key type 52 is out of range max 32 [ 384.062503][T16709] gretap1: entered promiscuous mode [ 384.188926][T16613] hsr_slave_0: entered promiscuous mode [ 384.217264][T16613] hsr_slave_1: entered promiscuous mode [ 384.241547][T16613] debugfs: 'hsr0' already exists in 'hsr' [ 384.257990][T16613] Cannot create hsr debugfs directory [ 384.282903][ T5876] Bluetooth: hci1: command tx timeout [ 384.928884][T16613] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 384.965106][T16613] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.069014][T16613] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 386.088916][T16613] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.153514][ T2979] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.187838][ T2979] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.306608][ T2979] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.349282][T16613] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 386.369773][ T5876] Bluetooth: hci1: command tx timeout [ 386.381067][T16613] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.450775][ T2979] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.494960][T16753] lo speed is unknown, defaulting to 1000 [ 386.514939][T16613] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 386.541171][T16613] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 386.571306][T16753] lo speed is unknown, defaulting to 1000 [ 386.610790][T16768] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 386.822499][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'. [ 387.040197][T16779] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3055'. [ 387.208174][T16613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 387.293279][T16781] bond1: entered promiscuous mode [ 387.298463][T16781] bond1: entered allmulticast mode [ 387.304327][T16781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.361927][T16782] pimreg: entered allmulticast mode [ 387.367886][T16613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 387.401047][T16767] infiniband syz0: set down [ 387.414103][T16613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 387.421590][T16767] infiniband syz0: added veth1_to_hsr [ 387.440008][T16767] syz0: rxe_create_cq: returned err = -12 [ 387.458416][T16613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.468233][T16767] infiniband syz0: Couldn't create ib_mad CQ [ 387.483529][T16767] infiniband syz0: Couldn't open port 1 [ 387.689094][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'. [ 387.703876][T16767] RDS/IB: syz0: added [ 387.724615][T16767] smc: adding ib device syz0 with port count 1 [ 387.732408][T16767] smc: ib device syz0 port 1 has no pnetid [ 387.841066][T16613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.906951][T16613] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.938608][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.945878][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.998228][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.005467][T10413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.451921][ T5876] Bluetooth: hci1: command tx timeout [ 388.685877][T16613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.821848][T16613] veth0_vlan: entered promiscuous mode [ 388.858806][T16613] veth1_vlan: entered promiscuous mode [ 388.974121][T16613] veth0_macvtap: entered promiscuous mode [ 388.998269][T16613] veth1_macvtap: entered promiscuous mode [ 389.044013][T16812] netlink: 'syz.1.3062': attribute type 287 has an invalid length. [ 389.092222][T16613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.134717][T16613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.188867][ T2979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.207894][ T2979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.232897][ T2979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.261851][ T2979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.509730][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.533917][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.601682][T10413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.635746][T10413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.967575][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 390.209772][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3070'. [ 390.239557][T16833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3070'. [ 390.342321][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'. [ 390.356860][T16838] netlink: 'syz.1.3069': attribute type 3 has an invalid length. [ 390.419140][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'. [ 390.935648][T16850] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3075'. [ 391.010946][T16850] netem: invalid attributes len -16 [ 391.016279][T16850] netem: change failed [ 391.259747][T16855] netlink: 'syz.1.3069': attribute type 2 has an invalid length. [ 391.309211][ T7759] IPVS: starting estimator thread 0... [ 391.318552][T16854] tipc: Failed to remove unknown binding: 66,1,1/0:3042400908/3042400910 [ 391.331650][T16859] netlink: 'syz.0.3077': attribute type 10 has an invalid length. [ 391.374012][T16854] tipc: Failed to remove unknown binding: 66,1,1/0:3042400908/3042400910 [ 391.412637][T16854] tipc: Failed to remove unknown binding: 66,1,1/0:3042400908/3042400910 [ 391.430981][T16858] IPVS: using max 24 ests per chain, 57600 per kthread [ 391.463347][T16854] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3076'. [ 391.973758][T16870] syzkaller1: entered promiscuous mode [ 392.005610][T16870] syzkaller1: entered allmulticast mode [ 392.970115][T16836] lo speed is unknown, defaulting to 1000 [ 392.987431][T16877] lo speed is unknown, defaulting to 1000 [ 394.562688][ T5884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.572739][ T5884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.584853][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.608566][ T5884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.623650][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.625217][T16905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 394.748382][T16898] tipc: Started in network mode [ 394.760219][T16898] tipc: Node identity 4a6b0d71d175, cluster identity 4711 [ 394.772082][T16898] tipc: Enabled bearer , priority 0 [ 394.905825][T16897] tipc: Resetting bearer [ 394.935316][T16901] lo speed is unknown, defaulting to 1000 [ 394.991476][T16899] syzkaller0: entered promiscuous mode [ 394.997009][T16899] syzkaller0: entered allmulticast mode [ 395.046561][T16895] tipc: Resetting bearer [ 395.112789][T16895] tipc: Disabling bearer [ 395.239639][T16909] lo speed is unknown, defaulting to 1000 [ 395.712950][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 396.211903][T16928] netlink: 'syz.0.3090': attribute type 6 has an invalid length. [ 396.760727][ T5876] Bluetooth: hci2: command tx timeout [ 397.066584][T16901] chnl_net:caif_netlink_parms(): no params data found [ 397.136900][T16952] lo speed is unknown, defaulting to 1000 [ 397.934044][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.950793][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.958139][T16901] bridge_slave_0: entered allmulticast mode [ 397.982129][T16901] bridge_slave_0: entered promiscuous mode [ 398.027347][T16961] lo speed is unknown, defaulting to 1000 [ 398.064952][T16901] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.073014][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.080231][T16901] bridge_slave_1: entered allmulticast mode [ 398.102376][T16901] bridge_slave_1: entered promiscuous mode [ 398.240889][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'. [ 398.257648][T16901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.347528][T16976] ipvlan2: entered promiscuous mode [ 398.395949][T16901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.561505][T16901] team0: Port device team_slave_0 added [ 398.576135][T16901] team0: Port device team_slave_1 added [ 398.841888][ T5876] Bluetooth: hci2: command tx timeout [ 398.962932][T16901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.971779][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.999694][T16901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.102343][T16901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.121851][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.156642][T16901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.309858][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 399.379431][T16901] hsr_slave_0: entered promiscuous mode [ 399.393539][T16901] hsr_slave_1: entered promiscuous mode [ 399.412651][T16901] debugfs: 'hsr0' already exists in 'hsr' [ 399.433325][T16901] Cannot create hsr debugfs directory [ 399.487733][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3107'. [ 399.984169][T17010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3111'. [ 400.578657][T17040] IPVS: Unknown mcast interface: veth0_virt_wifi [ 400.723074][T16901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.817279][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 400.821108][T16901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.868750][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 400.895091][T17046] macvlan0: entered promiscuous mode [ 400.900893][T17046] macvlan0: entered allmulticast mode [ 400.906301][T17046] veth1_vlan: entered allmulticast mode [ 400.920632][ T5876] Bluetooth: hci2: command tx timeout [ 400.932344][T17050] veth1_vlan: left allmulticast mode [ 400.948982][T16901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.007254][T16901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.283181][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 401.395856][T16901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.492583][T16901] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.533110][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.540467][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.642703][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.650068][T10416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.077490][T17091] netlink: 'syz.3.3132': attribute type 1 has an invalid length. [ 402.109659][T17091] netlink: 'syz.3.3132': attribute type 1 has an invalid length. [ 402.145083][T17091] openvswitch: netlink: IP tunnel dst address not specified [ 402.156656][T17091] lo: entered allmulticast mode [ 402.165565][T17089] lo speed is unknown, defaulting to 1000 [ 402.181446][T17091] lo: left allmulticast mode [ 402.424709][T17099] tipc: Enabled bearer , priority 0 [ 402.573505][T17103] tipc: Disabling bearer [ 402.863256][T17119] netlink: 'syz.3.3140': attribute type 1 has an invalid length. [ 402.987700][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'. [ 402.995379][T17122] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3141'. [ 403.000986][ T5876] Bluetooth: hci2: command tx timeout [ 403.065410][T17123] erspan0: entered promiscuous mode [ 403.071201][T17123] macvtap1: entered promiscuous mode [ 403.076854][T17123] macvtap1: entered allmulticast mode [ 403.088052][T17123] erspan0: entered allmulticast mode [ 403.107879][T16901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.418312][T16901] veth0_vlan: entered promiscuous mode [ 403.490328][T16901] veth1_vlan: entered promiscuous mode [ 403.613531][T16901] veth0_macvtap: entered promiscuous mode [ 403.666075][T16901] veth1_macvtap: entered promiscuous mode [ 403.784020][T17147] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3148'. [ 403.832503][T16901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.898067][T17154] bridge1: entered promiscuous mode [ 403.939320][T17154] bridge1: entered allmulticast mode [ 404.039566][T16901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.105045][T10415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.115085][T10415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.127980][T10415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.138885][T10415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.210417][T17161] tipc: Started in network mode [ 404.216409][T17161] tipc: Node identity 7274a31e2448, cluster identity 4711 [ 404.228352][T17161] tipc: Enabled bearer , priority 0 [ 404.247026][T17161] syzkaller0: entered promiscuous mode [ 404.254899][T17161] syzkaller0: entered allmulticast mode [ 404.371957][T17161] tipc: Resetting bearer [ 404.385420][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.399132][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'. [ 404.399397][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.421967][T17160] tipc: Resetting bearer [ 404.439552][T17160] tipc: Disabling bearer [ 404.462994][T17167] lo speed is unknown, defaulting to 1000 [ 404.463012][T17165] netlink: 'syz.1.3154': attribute type 29 has an invalid length. [ 404.579355][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.591609][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.692333][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3156'. [ 404.785135][T17175] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 404.856767][T17172] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3155'. [ 405.174993][T17188] netlink: 'syz.0.3157': attribute type 2 has an invalid length. [ 405.468460][T17204] netlink: 'syz.3.3162': attribute type 2 has an invalid length. [ 405.476856][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'. [ 405.476881][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'. [ 405.476905][T17202] netlink: 'syz.2.3163': attribute type 6 has an invalid length. [ 405.907639][T17224] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 405.973191][T17228] netlink: 'syz.4.3170': attribute type 1 has an invalid length. [ 406.028512][T17228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.066495][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3172'. [ 406.135929][T17224] can: request_module (can-proto-0) failed. [ 406.310179][T17247] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.429946][T17244] lo speed is unknown, defaulting to 1000 [ 407.086966][T17277] netlink: 'syz.1.3184': attribute type 1 has an invalid length. [ 407.104919][T17276] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 409.080882][ T5876] Bluetooth: hci0: command tx timeout [ 409.303679][T17277] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 409.304365][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3185'. [ 409.323718][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3185'. [ 409.412359][T17289] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 409.451246][T17299] netlink: 'syz.3.3189': attribute type 1 has an invalid length. [ 409.557257][T17299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.613317][T17288] lo speed is unknown, defaulting to 1000 [ 409.803919][T17315] pim6reg1: entered promiscuous mode [ 409.809475][T17315] pim6reg1: entered allmulticast mode [ 410.553544][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 410.830095][T17345] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.3196'. [ 411.319817][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 411.543267][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 411.564244][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'. [ 411.591008][T17367] netlink: 'syz.4.3203': attribute type 18 has an invalid length. [ 411.771077][ T30] audit: type=1800 audit(1757343851.270:11): pid=17369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3204" name="blkio.bfq.time_recursive" dev="tmpfs" ino=299 res=0 errno=0 [ 411.827005][T17371] netlink: 'syz.4.3206': attribute type 10 has an invalid length. [ 411.879761][T17371] team0: Port device dummy0 added [ 411.880215][T17379] netlink: 'syz.4.3206': attribute type 10 has an invalid length. [ 412.020147][T17379] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 412.066436][T17383] FAULT_INJECTION: forcing a failure. [ 412.066436][T17383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.083100][T17383] CPU: 0 UID: 0 PID: 17383 Comm: syz.3.3209 Not tainted syzkaller #0 PREEMPT(full) [ 412.083130][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.083141][T17383] Call Trace: [ 412.083150][T17383] [ 412.083158][T17383] dump_stack_lvl+0x189/0x250 [ 412.083187][T17383] ? __pfx____ratelimit+0x10/0x10 [ 412.083220][T17383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.083243][T17383] ? __pfx__printk+0x10/0x10 [ 412.083285][T17383] should_fail_ex+0x414/0x560 [ 412.083317][T17383] _copy_to_user+0x31/0xb0 [ 412.083343][T17383] bpf_test_finish+0x24e/0x700 [ 412.083374][T17383] ? __pfx_bpf_test_finish+0x10/0x10 [ 412.083400][T17383] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 412.083425][T17383] bpf_prog_test_run_skb+0xed5/0x1560 [ 412.083464][T17383] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 412.083484][T17383] bpf_prog_test_run+0x2c7/0x340 [ 412.083525][T17383] __sys_bpf+0x581/0x870 [ 412.083552][T17383] ? __pfx___sys_bpf+0x10/0x10 [ 412.083593][T17383] ? ksys_write+0x22a/0x250 [ 412.083622][T17383] ? __pfx_ksys_write+0x10/0x10 [ 412.083657][T17383] __x64_sys_bpf+0x7c/0x90 [ 412.083681][T17383] do_syscall_64+0xfa/0x3b0 [ 412.083704][T17383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.083722][T17383] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.083741][T17383] ? clear_bhb_loop+0x60/0xb0 [ 412.083762][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.083781][T17383] RIP: 0033:0x7f8671b8ebe9 [ 412.083797][T17383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.083813][T17383] RSP: 002b:00007f8672ad6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.083835][T17383] RAX: ffffffffffffffda RBX: 00007f8671dc5fa0 RCX: 00007f8671b8ebe9 [ 412.083849][T17383] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 412.083861][T17383] RBP: 00007f8672ad6090 R08: 0000000000000000 R09: 0000000000000000 [ 412.083873][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.083884][T17383] R13: 00007f8671dc6038 R14: 00007f8671dc5fa0 R15: 00007fffca905768 [ 412.083918][T17383] [ 412.090823][T17379] team0: Failed to send options change via netlink (err -105) [ 412.325737][T17379] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 412.335714][T17379] team0: Port device dummy0 removed [ 412.347609][T17379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 412.402344][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 412.434661][T17394] lo speed is unknown, defaulting to 1000 [ 412.504269][T17400] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3839 [ 412.519918][T17400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3212'. [ 412.981205][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 413.276245][T17428] FAULT_INJECTION: forcing a failure. [ 413.276245][T17428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.309281][T17428] CPU: 1 UID: 0 PID: 17428 Comm: syz.4.3221 Not tainted syzkaller #0 PREEMPT(full) [ 413.309311][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.309323][T17428] Call Trace: [ 413.309330][T17428] [ 413.309338][T17428] dump_stack_lvl+0x189/0x250 [ 413.309365][T17428] ? __pfx____ratelimit+0x10/0x10 [ 413.309386][T17428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.309409][T17428] ? __pfx__printk+0x10/0x10 [ 413.309450][T17428] should_fail_ex+0x414/0x560 [ 413.309482][T17428] _copy_to_user+0x31/0xb0 [ 413.309507][T17428] bpf_test_finish+0x56f/0x700 [ 413.309625][T17428] ? __pfx_bpf_test_finish+0x10/0x10 [ 413.309651][T17428] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 413.309676][T17428] bpf_prog_test_run_skb+0xed5/0x1560 [ 413.309716][T17428] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 413.309736][T17428] bpf_prog_test_run+0x2c7/0x340 [ 413.309768][T17428] __sys_bpf+0x581/0x870 [ 413.309793][T17428] ? __pfx___sys_bpf+0x10/0x10 [ 413.309834][T17428] ? ksys_write+0x22a/0x250 [ 413.309863][T17428] ? __pfx_ksys_write+0x10/0x10 [ 413.309884][T17428] ? rcu_is_watching+0x15/0xb0 [ 413.309913][T17428] __x64_sys_bpf+0x7c/0x90 [ 413.309937][T17428] do_syscall_64+0xfa/0x3b0 [ 413.309956][T17428] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.309976][T17428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.309995][T17428] ? clear_bhb_loop+0x60/0xb0 [ 413.310019][T17428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.310037][T17428] RIP: 0033:0x7f4eb4d8ebe9 [ 413.310055][T17428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.310070][T17428] RSP: 002b:00007f4eb5c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.310092][T17428] RAX: ffffffffffffffda RBX: 00007f4eb4fc5fa0 RCX: 00007f4eb4d8ebe9 [ 413.310105][T17428] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 413.310118][T17428] RBP: 00007f4eb5c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 413.310130][T17428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.310141][T17428] R13: 00007f4eb4fc6038 R14: 00007f4eb4fc5fa0 R15: 00007ffd3f3c6e08 [ 413.310176][T17428] [ 413.953389][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'. [ 414.087347][T17450] lo speed is unknown, defaulting to 1000 [ 414.453389][T17466] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3232'. [ 414.486007][T17466] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:0 [ 414.664388][T17472] Bluetooth: MGMT ver 1.23 [ 414.751440][T17475] netlink: 'syz.1.3235': attribute type 3 has an invalid length. [ 414.785398][T17476] macvtap1: entered promiscuous mode [ 414.816826][T17476] team0: entered promiscuous mode [ 414.834187][T17476] macvtap1: entered allmulticast mode [ 414.848975][T17476] team0: entered allmulticast mode [ 414.855119][T17481] netlink: 'syz.1.3235': attribute type 10 has an invalid length. [ 414.860991][T17476] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 414.895468][T17477] team0: left allmulticast mode [ 414.902047][T17477] team0: left promiscuous mode [ 414.951567][T17482] FAULT_INJECTION: forcing a failure. [ 414.951567][T17482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.971418][T17482] CPU: 1 UID: 0 PID: 17482 Comm: syz.0.3238 Not tainted syzkaller #0 PREEMPT(full) [ 414.971448][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.971459][T17482] Call Trace: [ 414.971467][T17482] [ 414.971477][T17482] dump_stack_lvl+0x189/0x250 [ 414.971515][T17482] ? __pfx____ratelimit+0x10/0x10 [ 414.971537][T17482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.971560][T17482] ? __pfx__printk+0x10/0x10 [ 414.971608][T17482] should_fail_ex+0x414/0x560 [ 414.971641][T17482] _copy_to_user+0x31/0xb0 [ 414.971666][T17482] simple_read_from_buffer+0xe1/0x170 [ 414.971699][T17482] proc_fail_nth_read+0x1b3/0x220 [ 414.971723][T17482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.971746][T17482] ? rw_verify_area+0x2a6/0x4d0 [ 414.971767][T17482] ? __lock_acquire+0xab9/0xd20 [ 414.971790][T17482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.971812][T17482] vfs_read+0x200/0xa30 [ 414.971834][T17482] ? fdget_pos+0x247/0x320 [ 414.971856][T17482] ? __pfx___mutex_lock+0x10/0x10 [ 414.971879][T17482] ? __pfx_vfs_read+0x10/0x10 [ 414.971905][T17482] ? __fget_files+0x2a/0x420 [ 414.971927][T17482] ? __fget_files+0x3a0/0x420 [ 414.971943][T17482] ? __fget_files+0x2a/0x420 [ 414.971971][T17482] ksys_read+0x145/0x250 [ 414.972000][T17482] ? __pfx_ksys_read+0x10/0x10 [ 414.972020][T17482] ? rcu_is_watching+0x15/0xb0 [ 414.972046][T17482] ? do_syscall_64+0xbe/0x3b0 [ 414.972072][T17482] do_syscall_64+0xfa/0x3b0 [ 414.972091][T17482] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.972110][T17482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.972129][T17482] ? clear_bhb_loop+0x60/0xb0 [ 414.972152][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.972170][T17482] RIP: 0033:0x7fb19318d5fc [ 414.972189][T17482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 414.972205][T17482] RSP: 002b:00007fb193f2b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.972225][T17482] RAX: ffffffffffffffda RBX: 00007fb1933c5fa0 RCX: 00007fb19318d5fc [ 414.972236][T17482] RDX: 000000000000000f RSI: 00007fb193f2b0a0 RDI: 0000000000000004 [ 414.972245][T17482] RBP: 00007fb193f2b090 R08: 0000000000000000 R09: 0000000000000000 [ 414.972254][T17482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.972264][T17482] R13: 00007fb1933c6038 R14: 00007fb1933c5fa0 R15: 00007ffea77ffc18 [ 414.972295][T17482] [ 415.267506][T17481] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 415.277110][T17481] team0: Failed to send options change via netlink (err -105) [ 415.284819][T17481] team0: Port device netdevsim0 added [ 415.335290][T17479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.829266][T17516] __nla_validate_parse: 22 callbacks suppressed [ 415.829287][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 415.986044][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 416.021350][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'. [ 416.621131][T17540] tipc: Enabled bearer , priority 0 [ 416.699871][T17548] syzkaller0: entered promiscuous mode [ 416.709969][T17559] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 416.729059][T17548] syzkaller0: entered allmulticast mode [ 416.735440][T17559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3258'. [ 416.767355][T17539] tipc: Resetting bearer [ 416.827601][T17534] tipc: Resetting bearer [ 416.895176][T17534] tipc: Disabling bearer [ 416.998670][T17570] tipc: Started in network mode [ 417.020946][T17570] tipc: Node identity 9a7414efa163, cluster identity 4711 [ 417.028383][T17570] tipc: Enabled bearer , priority 0 [ 417.043609][T17570] syzkaller0: entered promiscuous mode [ 417.052025][T17570] syzkaller0: entered allmulticast mode [ 417.067544][T17569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3261'. [ 417.243648][T17570] tipc: Resetting bearer [ 417.305907][T17576] ipvlan2: entered promiscuous mode [ 417.320983][ C1] ================================================================== [ 417.329106][ C1] BUG: KASAN: slab-out-of-bounds in xfrm_state_find+0x2cf2/0x5400 [ 417.336949][ C1] Read of size 1 at addr ffff88806d1d0330 by task syz.2.3266/17579 [ 417.344956][ C1] [ 417.347319][ C1] CPU: 1 UID: 0 PID: 17579 Comm: syz.2.3266 Not tainted syzkaller #0 PREEMPT(full) [ 417.347348][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.347360][ C1] Call Trace: [ 417.347368][ C1] [ 417.347377][ C1] dump_stack_lvl+0x189/0x250 [ 417.347404][ C1] ? __kasan_check_byte+0x12/0x40 [ 417.347432][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.347451][ C1] ? lock_release+0x4b/0x3e0 [ 417.347478][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 417.347503][ C1] print_report+0xca/0x240 [ 417.347521][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 417.347541][ C1] kasan_report+0x118/0x150 [ 417.347566][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 417.347589][ C1] xfrm_state_find+0x2cf2/0x5400 [ 417.347608][ C1] ? check_noncircular+0xe0/0x160 [ 417.347631][ C1] ? validate_chain+0x897/0x2140 [ 417.347655][ C1] ? xfrm_state_find+0x1da/0x5400 [ 417.347687][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 417.347717][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 417.347755][ C1] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 417.347783][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 417.347811][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 417.347836][ C1] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 417.347878][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 417.347904][ C1] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 417.347931][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 417.347955][ C1] ? dst_cache_get+0x10e/0x5b0 [ 417.347982][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 417.348009][ C1] tipc_udp_xmit+0x1c3/0xb60 [ 417.348030][ C1] ? tipc_udp_xmit+0xa4/0xb60 [ 417.348051][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 417.348075][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 417.348099][ C1] ? __asan_memcpy+0x40/0x70 [ 417.348121][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 417.348151][ C1] tipc_udp_send_msg+0x27f/0x3f0 [ 417.348177][ C1] tipc_bearer_xmit_skb+0x2b0/0x400 [ 417.348199][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 417.348218][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 417.348244][ C1] tipc_disc_timeout+0x580/0x6d0 [ 417.348266][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 417.348294][ C1] call_timer_fn+0x17e/0x5f0 [ 417.348319][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 417.348337][ C1] ? call_timer_fn+0xbe/0x5f0 [ 417.348359][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 417.348386][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.348411][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.348427][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 417.348443][ C1] __run_timer_base+0x61a/0x860 [ 417.348463][ C1] ? ktime_get+0x3e/0x1f0 [ 417.348486][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 417.348505][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 417.348535][ C1] run_timer_softirq+0xb7/0x180 [ 417.348559][ C1] handle_softirqs+0x283/0x870 [ 417.348579][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 417.348599][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 417.348621][ C1] __irq_exit_rcu+0xca/0x1f0 [ 417.348639][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 417.348661][ C1] irq_exit_rcu+0x9/0x30 [ 417.348676][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 417.348707][ C1] [ 417.348713][ C1] [ 417.348720][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.348739][ C1] RIP: 0010:free_pages_and_swap_cache+0x10c/0x520 [ 417.348761][ C1] Code: 8d 44 24 60 48 83 c0 08 48 89 44 24 38 49 63 cf 48 8b 44 24 28 48 89 4c 24 30 48 8d 1c c8 49 89 dc 49 c1 ec 03 43 80 3c 2c 00 <74> 08 48 89 df e8 ea bd 08 00 4c 8b 2b 4c 89 e8 48 83 e0 fc 48 89 [ 417.348778][ C1] RSP: 0018:ffffc900043ef2e0 EFLAGS: 00000246 [ 417.348795][ C1] RAX: ffff888068d2f010 RBX: ffff888068d2f030 RCX: 0000000000000004 [ 417.348810][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001f [ 417.348821][ C1] RBP: ffffc900043ef568 R08: ffffea0001757c07 R09: 1ffffd40002eaf80 [ 417.348834][ C1] R10: dffffc0000000000 R11: fffff940002eaf81 R12: 1ffff1100d1a5e06 [ 417.348848][ C1] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000004 [ 417.348871][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 417.348915][ C1] ? tlb_table_flush+0x145/0x410 [ 417.348935][ C1] tlb_flush_mmu+0x3a0/0x680 [ 417.348953][ C1] ? unmap_page_range+0x3b0e/0x4370 [ 417.348974][ C1] unmap_page_range+0x3b31/0x4370 [ 417.348993][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 417.349040][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 417.349062][ C1] ? mas_find+0xb0e/0xd30 [ 417.349079][ C1] ? unmap_vmas+0x144/0x580 [ 417.349098][ C1] unmap_vmas+0x399/0x580 [ 417.349120][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 417.349151][ C1] exit_mmap+0x248/0xb50 [ 417.349176][ C1] ? uprobe_clear_state+0x20f/0x290 [ 417.349197][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 417.349219][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 417.349246][ C1] ? __pfx_exit_aio+0x10/0x10 [ 417.349278][ C1] ? uprobe_clear_state+0x274/0x290 [ 417.349300][ C1] __mmput+0x118/0x420 [ 417.349319][ C1] exit_mm+0x1da/0x2c0 [ 417.349344][ C1] ? __pfx_exit_mm+0x10/0x10 [ 417.349368][ C1] ? rcu_is_watching+0x15/0xb0 [ 417.349388][ C1] do_exit+0x648/0x2300 [ 417.349414][ C1] ? preempt_schedule_common+0x83/0xd0 [ 417.349432][ C1] ? preempt_schedule+0xae/0xc0 [ 417.349448][ C1] ? __pfx_do_exit+0x10/0x10 [ 417.349473][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 417.349495][ C1] do_group_exit+0x21c/0x2d0 [ 417.349519][ C1] __x64_sys_exit_group+0x3f/0x40 [ 417.349542][ C1] x64_sys_call+0x21f7/0x2200 [ 417.349565][ C1] do_syscall_64+0xfa/0x3b0 [ 417.349583][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.349601][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.349618][ C1] ? clear_bhb_loop+0x60/0xb0 [ 417.349638][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.349654][ C1] RIP: 0033:0x7fdda358ebe9 [ 417.349670][ C1] Code: Unable to access opcode bytes at 0x7fdda358ebbf. [ 417.349687][ C1] RSP: 002b:00007ffdd58590c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 417.349708][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdda358ebe9 [ 417.349721][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.349731][ C1] RBP: 00007ffdd585912c R08: 0000000cd58591bf R09: 00000000000927c0 [ 417.349743][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000013 [ 417.349755][ C1] R13: 00000000000927c0 R14: 0000000000065d26 R15: 00007ffdd5859180 [ 417.349775][ C1] [ 417.349783][ C1] [ 417.977696][ C1] Allocated by task 15640: [ 417.982112][ C1] kasan_save_track+0x3e/0x80 [ 417.986793][ C1] __kasan_kmalloc+0x93/0xb0 [ 417.991816][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 417.997197][ C1] __ipv6_dev_mc_inc+0x44f/0xa50 [ 418.002227][ C1] ipv6_add_dev+0xe54/0x1370 [ 418.006818][ C1] addrconf_notify+0x794/0x1010 [ 418.011678][ C1] notifier_call_chain+0x1b3/0x3e0 [ 418.016800][ C1] register_netdevice+0x1608/0x1ae0 [ 418.022098][ C1] macsec_newlink+0x6be/0x11b0 [ 418.026864][ C1] rtnl_newlink_create+0x30d/0xb00 [ 418.032071][ C1] rtnl_newlink+0x16d6/0x1c70 [ 418.036832][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 418.041766][ C1] netlink_rcv_skb+0x208/0x470 [ 418.046536][ C1] netlink_unicast+0x82f/0x9e0 [ 418.051304][ C1] netlink_sendmsg+0x805/0xb30 [ 418.056064][ C1] __sock_sendmsg+0x21c/0x270 [ 418.060915][ C1] __sys_sendto+0x3bd/0x520 [ 418.065510][ C1] __x64_sys_sendto+0xde/0x100 [ 418.070271][ C1] do_syscall_64+0xfa/0x3b0 [ 418.074773][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.080667][ C1] [ 418.082997][ C1] The buggy address belongs to the object at ffff88806d1d0000 [ 418.082997][ C1] which belongs to the cache kmalloc-512 of size 512 [ 418.097221][ C1] The buggy address is located 528 bytes to the right of [ 418.097221][ C1] allocated 288-byte region [ffff88806d1d0000, ffff88806d1d0120) [ 418.111891][ C1] [ 418.114216][ C1] The buggy address belongs to the physical page: [ 418.120623][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806d1d3400 pfn:0x6d1d0 [ 418.130871][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 418.139368][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 418.148034][ C1] page_type: f5(slab) [ 418.152018][ C1] raw: 00fff00000000240 ffff88801a441c80 ffffea0001b15810 ffffea0001547a10 [ 418.160684][ C1] raw: ffff88806d1d3400 0000000000100005 00000000f5000000 0000000000000000 [ 418.169261][ C1] head: 00fff00000000240 ffff88801a441c80 ffffea0001b15810 ffffea0001547a10 [ 418.177932][ C1] head: ffff88806d1d3400 0000000000100005 00000000f5000000 0000000000000000 [ 418.186600][ C1] head: 00fff00000000002 ffffea0001b47401 00000000ffffffff 00000000ffffffff [ 418.195268][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 418.204024][ C1] page dumped because: kasan: bad access detected [ 418.210526][ C1] page_owner tracks the page as allocated [ 418.216247][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11734, tgid 11732 (syz.3.1449), ts 246638426123, free_ts 230654394460 [ 418.237794][ C1] post_alloc_hook+0x240/0x2a0 [ 418.242659][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 418.248206][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 418.254005][ C1] alloc_pages_mpol+0x232/0x4a0 [ 418.258866][ C1] allocate_slab+0x8a/0x370 [ 418.263377][ C1] ___slab_alloc+0xbeb/0x1420 [ 418.268165][ C1] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 418.274604][ C1] kmemdup_noprof+0x2b/0x70 [ 418.279126][ C1] cache_create_net+0x2f/0x260 [ 418.283897][ C1] gss_svc_init_net+0x58/0x570 [ 418.288688][ C1] ops_init+0x35c/0x5c0 [ 418.292937][ C1] setup_net+0x10c/0x320 [ 418.297173][ C1] copy_net_ns+0x31b/0x4d0 [ 418.301582][ C1] create_new_namespaces+0x3f3/0x720 [ 418.306866][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 418.312583][ C1] ksys_unshare+0x4c8/0x8c0 [ 418.317099][ C1] page last free pid 11034 tgid 11025 stack trace: [ 418.323821][ C1] __free_frozen_pages+0xbc4/0xd30 [ 418.328938][ C1] __slab_free+0x303/0x3c0 [ 418.333377][ C1] qlist_free_all+0x97/0x140 [ 418.337972][ C1] kasan_quarantine_reduce+0x148/0x160 [ 418.343532][ C1] __kasan_slab_alloc+0x22/0x80 [ 418.348410][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 418.354309][ C1] __alloc_skb+0x112/0x2d0 [ 418.358743][ C1] alloc_skb_with_frags+0xca/0x890 [ 418.363853][ C1] sock_alloc_send_pskb+0x857/0x990 [ 418.369055][ C1] llc_ui_sendmsg+0x477/0xdd0 [ 418.373734][ C1] __sock_sendmsg+0x21c/0x270 [ 418.378416][ C1] ____sys_sendmsg+0x52d/0x830 [ 418.383185][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 418.387866][ C1] __sys_sendmmsg+0x227/0x430 [ 418.392554][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 418.397423][ C1] do_syscall_64+0xfa/0x3b0 [ 418.401932][ C1] [ 418.404364][ C1] Memory state around the buggy address: [ 418.410010][ C1] ffff88806d1d0200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 418.418079][ C1] ffff88806d1d0280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 418.426163][ C1] >ffff88806d1d0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 418.434223][ C1] ^ [ 418.439849][ C1] ffff88806d1d0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 418.447992][ C1] ffff88806d1d0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 418.456054][ C1] ================================================================== [ 418.464314][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 418.471625][ C1] CPU: 1 UID: 0 PID: 17579 Comm: syz.2.3266 Not tainted syzkaller #0 PREEMPT(full) [ 418.481019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.491097][ C1] Call Trace: [ 418.494379][ C1] [ 418.497228][ C1] dump_stack_lvl+0x99/0x250 [ 418.501823][ C1] ? __asan_memcpy+0x40/0x70 [ 418.506489][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.511695][ C1] ? __pfx__printk+0x10/0x10 [ 418.516391][ C1] vpanic+0x281/0x750 [ 418.520381][ C1] ? __pfx_vpanic+0x10/0x10 [ 418.524897][ C1] ? irqentry_exit+0x74/0x90 [ 418.529587][ C1] panic+0xb9/0xc0 [ 418.533312][ C1] ? __pfx_panic+0x10/0x10 [ 418.537728][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 418.543629][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 418.549531][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 418.554653][ C1] check_panic_on_warn+0x89/0xb0 [ 418.559688][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 418.564818][ C1] end_report+0x78/0x160 [ 418.569154][ C1] kasan_report+0x129/0x150 [ 418.573661][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 418.578776][ C1] xfrm_state_find+0x2cf2/0x5400 [ 418.583803][ C1] ? check_noncircular+0xe0/0x160 [ 418.588829][ C1] ? validate_chain+0x897/0x2140 [ 418.593858][ C1] ? xfrm_state_find+0x1da/0x5400 [ 418.598884][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 418.604462][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 418.610640][ C1] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 418.616624][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 418.623389][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 418.629294][ C1] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 418.635291][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 418.640754][ C1] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 418.646574][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 418.652395][ C1] ? dst_cache_get+0x10e/0x5b0 [ 418.657168][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 418.662024][ C1] tipc_udp_xmit+0x1c3/0xb60 [ 418.666640][ C1] ? tipc_udp_xmit+0xa4/0xb60 [ 418.671402][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 418.676532][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 418.681732][ C1] ? __asan_memcpy+0x40/0x70 [ 418.686321][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 418.691530][ C1] tipc_udp_send_msg+0x27f/0x3f0 [ 418.696523][ C1] tipc_bearer_xmit_skb+0x2b0/0x400 [ 418.701722][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 418.707005][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 418.712814][ C1] tipc_disc_timeout+0x580/0x6d0 [ 418.717847][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 418.723384][ C1] call_timer_fn+0x17e/0x5f0 [ 418.728119][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 418.733676][ C1] ? call_timer_fn+0xbe/0x5f0 [ 418.738357][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 418.743474][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.748679][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.753878][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 418.759425][ C1] __run_timer_base+0x61a/0x860 [ 418.764279][ C1] ? ktime_get+0x3e/0x1f0 [ 418.768715][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 418.774092][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 418.780434][ C1] run_timer_softirq+0xb7/0x180 [ 418.785384][ C1] handle_softirqs+0x283/0x870 [ 418.790199][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 418.794964][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 418.800253][ C1] __irq_exit_rcu+0xca/0x1f0 [ 418.804842][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 418.810080][ C1] irq_exit_rcu+0x9/0x30 [ 418.814329][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 418.819968][ C1] [ 418.822902][ C1] [ 418.825834][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 418.831811][ C1] RIP: 0010:free_pages_and_swap_cache+0x10c/0x520 [ 418.838230][ C1] Code: 8d 44 24 60 48 83 c0 08 48 89 44 24 38 49 63 cf 48 8b 44 24 28 48 89 4c 24 30 48 8d 1c c8 49 89 dc 49 c1 ec 03 43 80 3c 2c 00 <74> 08 48 89 df e8 ea bd 08 00 4c 8b 2b 4c 89 e8 48 83 e0 fc 48 89 [ 418.857836][ C1] RSP: 0018:ffffc900043ef2e0 EFLAGS: 00000246 [ 418.863907][ C1] RAX: ffff888068d2f010 RBX: ffff888068d2f030 RCX: 0000000000000004 [ 418.871966][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001f [ 418.879977][ C1] RBP: ffffc900043ef568 R08: ffffea0001757c07 R09: 1ffffd40002eaf80 [ 418.888208][ C1] R10: dffffc0000000000 R11: fffff940002eaf81 R12: 1ffff1100d1a5e06 [ 418.896183][ C1] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000004 [ 418.904186][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 418.910486][ C1] ? tlb_table_flush+0x145/0x410 [ 418.915452][ C1] tlb_flush_mmu+0x3a0/0x680 [ 418.920124][ C1] ? unmap_page_range+0x3b0e/0x4370 [ 418.925419][ C1] unmap_page_range+0x3b31/0x4370 [ 418.930489][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 418.935795][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 418.941167][ C1] ? mas_find+0xb0e/0xd30 [ 418.945600][ C1] ? unmap_vmas+0x144/0x580 [ 418.950200][ C1] unmap_vmas+0x399/0x580 [ 418.954620][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 418.959569][ C1] exit_mmap+0x248/0xb50 [ 418.963815][ C1] ? uprobe_clear_state+0x20f/0x290 [ 418.969017][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 418.973793][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 418.979548][ C1] ? __pfx_exit_aio+0x10/0x10 [ 418.984263][ C1] ? uprobe_clear_state+0x274/0x290 [ 418.989493][ C1] __mmput+0x118/0x420 [ 418.993572][ C1] exit_mm+0x1da/0x2c0 [ 418.997648][ C1] ? __pfx_exit_mm+0x10/0x10 [ 419.002280][ C1] ? rcu_is_watching+0x15/0xb0 [ 419.007057][ C1] do_exit+0x648/0x2300 [ 419.011216][ C1] ? preempt_schedule_common+0x83/0xd0 [ 419.016761][ C1] ? preempt_schedule+0xae/0xc0 [ 419.021619][ C1] ? __pfx_do_exit+0x10/0x10 [ 419.026212][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 419.031588][ C1] do_group_exit+0x21c/0x2d0 [ 419.036185][ C1] __x64_sys_exit_group+0x3f/0x40 [ 419.041213][ C1] x64_sys_call+0x21f7/0x2200 [ 419.045898][ C1] do_syscall_64+0xfa/0x3b0 [ 419.050399][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.055600][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.061669][ C1] ? clear_bhb_loop+0x60/0xb0 [ 419.066355][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.072333][ C1] RIP: 0033:0x7fdda358ebe9 [ 419.076745][ C1] Code: Unable to access opcode bytes at 0x7fdda358ebbf. [ 419.083764][ C1] RSP: 002b:00007ffdd58590c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 419.092283][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdda358ebe9 [ 419.100255][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 419.108235][ C1] RBP: 00007ffdd585912c R08: 0000000cd58591bf R09: 00000000000927c0 [ 419.116208][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000013 [ 419.124190][ C1] R13: 00000000000927c0 R14: 0000000000065d26 R15: 00007ffdd5859180 [ 419.132172][ C1] [ 419.135492][ C1] Kernel Offset: disabled [ 419.139815][ C1] Rebooting in 86400 seconds..