last executing test programs: 3m13.878307052s ago: executing program 1 (id=16306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xc, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000040000000000000000000085100000010000009500000000200000850000002c00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="a1d91744018911fa451e57edd6a6751ed93012a245c833d34ff777645d1f13de9e0b3cbb7a6b37114d79de2e1081a12db345408959bf62ede44354988adfc7a3e2809c5bda23965b2a612c4750b3b943134c45d2d339587f74c7f5fd878d406560337ca4db", 0x65}, {&(0x7f00000001c0)="fd34314cd43acd73ab841a3c5e808fcc17a7d74967db24221b14b107232757c75be78e7dd20c6fcf2c871f34ddca8105737836e1995ffba3398df39784fc04f6cdb0682ea38d4335d3", 0x49}, {&(0x7f0000000240)="7ca6366553bfecd75c2d7a25a17326d56dd77ae7ba05fee01cff0841f044f9c8e569af5d80c234a483c3b9c9033aaa39dc05643f1c20ff05dfe174e50bb29b4d13c948f1690403bf21e706fc5144726074f6f057fb154c8d1e98935ba5014765e549bc5a1c29734908ae63cb52cb70f7565a8b12e9706cab2ba6cbaa03de58f45c4a3756c56271ebbf4acd269c1a3dbc2912eb432670c2e23f587e29de3d41fc09da91437a190e0e6eefa05222e13c7e496ca45e8a29a79d364b65983c5d5aa78fa7ff2d724d7dab42938fdaa892298624634bbf8162e9a0ae0a3c1802e9857b63bb5d51b2bfdf61e4d2f02e4171b241", 0xf0}], 0x3}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="e1e90bc646d6157e7733c1d285a9f066c3935cfbc3bb71def6c7bb38f9000b9c3d92a76db42b96fac7e9464bdda740a5c8765a63f47ffaaa9329ddd1d78838747daf515bf484488ad5a2eec488f44ba6b39a7e4d9c4d652ad42f2968871265e608aac6b5f07019c3c3523531d7506fa867e2938fed7cc3ee8bc23cca36ac82720ff2a4b6d4211dd1815975b1bc844753697868e91e8edcb34faef871d895bf538482a20f51a0fc158dbd1f03f58143851ad4d762d207e4b4e30d7a82348381467c3ff456018e04bd492a04a37819d413c7", 0xd1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000004c0)="86502f02d5fa738076ae1e989e45609ef91788b3df062f159e15037b8644857aa5a8fc03ac31ef1308822ab025025f4ca52be740f793aa504bebdf45ecc10770f68fab04d2", 0x45}, {&(0x7f0000000640)="0319e2d0e9002332f404ed8efb31fda36a9715cd6b12850b27ceead299d5195aa636636bc46f0c3578747c01c42227d5cd0b7509967970f1dd18ed3d3974a993a4f9d19d8f5c803d60f065ccb4", 0x4d}, {&(0x7f0000000540)="cb0542792b9f36d957c56356c3910086a755c57774708988", 0x18}, {&(0x7f00000006c0)="c4b6da00fe456664284d0a97119b5b", 0xf}, {&(0x7f0000000700)="deafc4ba4c003de3380ab543dc7eb85cdfbf95a8e962214a5b678c4175f100d61b109317af6046f32bdadbd18e2864c2adb9ab88f42ee2fb6c761e4b1d7fae183c3bd7f90a5c5d5ea5459430ca76a0c5b73acbfea08c5bda9b4e3a303d91a2c1ed751eb6f038e5b7058df21e043226ab4a673b79a0be880acd91074bd29d34bda2d53de02694716f72e56abcb6100ded73bb2c891b1bcc556563df9045b7ac6e5d16cf9399d8877fac5ead9462851e3a209d362422dfc0ef1341ee1e843ac2d8daa19f098eddfab287df33843913b1f8ab53a05a6031ca9e9af9bdcf075e19f84acb5302125020206c45fe4fb2", 0xed}, {&(0x7f0000000800)="be3c93b085269cffade4063728aa0348fe64d6a0342bed1c98b04bab19a87fba530883f3e4b4884f491f12600a916e2875a283e7dd1b3a71b903cf6fd504de7d99099c55547996f3759eeace7545fd85df7e3a04fea6ea6743c0df97b3079e3cf5f08b86f27c35f31df8ca16d3dac841c1ccc8891ea382dd1d20690e079f64aaa6a2582c30726d69394b0932135a34b4af07b1667d4437a1dfe058c09779efaf4acfb9fe23477c8df1b86cbbecb9e60861f331daa8b3ba11b5035cf618f997b39d73b4e597145fcb052604559066324f2a34a5b84e", 0xd5}, {&(0x7f0000000900)="4e5fe61a05c43256822bed8ae8d4cabcb9f8d6c32f3ee6bd1af856ba3d301bcac1ccedc2bd965a4bf5ee35eb17dfbc32a6776ccc3a84c22def18e2ca13f1eb0c0ce25c7bb32a6f2670d432e1163dc1668d898e639957e2f464e6ad7dc58143e5cf877f02c5d7463fb48e6e882a5646daa7925b94d32bc8707d1fb1f11bcbee067cfd7539de3afbd886ddc4a16927f3f5ff555c3a7a21f47cebb9aad7872f606efdd33ba6948b36a7005775b1ec3feddd45aa62deff07757fba39ba078c77659943151d", 0xc3}], 0x7, &(0x7f0000000a80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xb3, 0x0, 0x0, [0x1]}, @rr={0x7, 0x7, 0x2d, [@multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x80}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000000b40)="77d6ded25555abb8b83981d52bc00b131e5a433da124b48cd43d2c5a78478272d60986802ea15d337a6a04b761c581cfc49e5f6891530bcf5158bfe2ca253c05aad4e0fe4dfb", 0x46}, {&(0x7f0000000bc0)="760249c80fdec1be10ef4946c10ec7774a4f8e4805400eaf8f1fdede8d578760dfcf910a089080d94a77b21fa6e20dbd2a0186ac10d03617b8cb9bea83359de4e282fa3c5c7ef8cc56438ca64a0076e3fadb47856fad8e8c0f7fa98d1033463803b3ac49843e53cc26b1a6e1141938e2de840f89568f0f81236adb372ee392dd58fdfc5fa8608e4b7fc88464f696df7dde83871c76a9bb409174c21a9d9cbc10facd3f6a0ab71074eae1ab76c9fe3b3aec65612781e8", 0xb6}, {&(0x7f0000000c80)="e505b062295862bc6bc18468cc2b8bae77bdb2ad164332a7e9cca4e5bf2f5b9be834f50de0a145ba468d4daa222a26901a3b848b97762d111da22a16ab19e3246a658f95a99c3684a8e9166fdd8bd8af972f5e331506a5e9cc8474b59ac69688cca9411c853d065e086a879ebf7d3ecb5ae1aacc50141eba2ac57f40f3a860957d1d2a8b721c927f58f09e", 0x8b}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="122bcd7200b6b21507f27681f8ff1085c3276edcb857bff4a166906ea56c8a6ad78d2eddc71a54a810c30f4d7f1bac5e5ee01f9587ebc257fdcb4f743800ff1d18bfee46d82f88deb912d9af7f9170a877b8e532ea", 0x55}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="593d1b5ea61e402418ffb4c2cda5bee10ebb505182ba138d50e37e1b799e136cf9bece5010a093dab5841370b71e961ec1abec787521a6ab5f6dd868c6c78f52372dadb33e2dd31b82bffe734881a1453d8f991e7c9d733a3cc1d7beffb3575045b0f11c4d46324e2a04a31a6de75af7ac4ee10437f26ad4d1c73f83cda35fa077e56de38b0714b1ec8d6e1866d4270bbb843405d129daa08f81dc333f48ac6151150565", 0xa4}], 0x7, &(0x7f0000002f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x87, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}, @empty, @broadcast, @remote, @multicast2, @local, @loopback, @remote, @loopback]}, @generic={0x8, 0x9, "b4bee69e06c0a4"}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x6, 0x6, "f0b98f66"}]}, @cipso={0x86, 0x67, 0x3, [{0x7, 0xc, "1964e74bd91ae8cf7566"}, {0x6, 0xf, "f7151ea0141554cfaba5115cdc"}, {0x7, 0x12, "7be7e6a678d32a3ad2542e3c042e6b2e"}, {0x6, 0x9, "561715c2d2389f"}, {0x0, 0xb, "f380c810b8cedfd9ef"}, {0x1, 0xb, "39c1fe0ebaa1d23f85"}, {0x0, 0x12, "141f3d4cb94f68769b3c7c61f192c7f5"}, {0x2, 0x3, '\b'}]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@loopback, 0x200}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xac, [@rand_addr=0x64010101]}, @noop, @timestamp_addr={0x44, 0x4, 0x40, 0x1, 0x3}, @end, @timestamp_prespec={0x44, 0x34, 0xf2, 0x3, 0x1, [{@private=0xa010101, 0x3}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010101, 0x200}, {@local, 0xf808}, {@broadcast, 0x8}, {@private=0xa010100, 0x7fffffff}]}, @timestamp={0x44, 0x1c, 0xd7, 0x0, 0x5, [0x5, 0xfffff1ae, 0x5f, 0xff, 0x40, 0x7]}, @cipso={0x86, 0x24, 0x1, [{0x0, 0xe, "89f1e2e019e04bb7a3792642"}, {0x2, 0x4, 'FZ'}, {0x5, 0xc, "36e88ff6bbbdc986c13d"}]}, @timestamp_prespec={0x44, 0x2c, 0xe0, 0x3, 0x9, [{@multicast2, 0x9e}, {@empty, 0x5}, {@multicast2, 0x897f}, {@local, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}], 0x1e0}}], 0x4, 0xc081) 3m13.694372827s ago: executing program 1 (id=16310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0xc4f) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x4}, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffffffffff4d, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT, @ANYRESOCT=r0, @ANYRES32=r6], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x34008844}, 0x40) 3m13.373361595s ago: executing program 1 (id=16314): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000480)=[{}], 0x1, 0x10000200) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0xfffc, 0xea5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b200c67360}) 3m13.09864246s ago: executing program 1 (id=16317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x900, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m12.977015196s ago: executing program 1 (id=16319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae1e020000008000a3a515817b3a61f7ff341de2517b68782d08c545bd755508fa75a55d810000007cdb5b5892b9b969013ac891abbd934147ef04b60bdeda2abafe1861a79f224dfbb398eab96146c87528fea055f06d3506ee55856779244155d3dcae7c6705171aa94264060680bdc56243b7e66267c88c1fc07ec5065c701c71e6babc413f1728f9c1bbfeee782e1d834d7fcc3b50"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3m12.070397374s ago: executing program 1 (id=16328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 2m57.08347133s ago: executing program 32 (id=16328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) connect$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 2m33.890122203s ago: executing program 5 (id=16617): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}, 0x1, 0x2000000}, 0x0) 2m33.510982146s ago: executing program 5 (id=16622): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x102, 0x2, 0x0, 0x0, 0x600}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.262456593s ago: executing program 5 (id=16623): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000006000000e70000000900000000100000", @ANYRES32, @ANYBLOB="fcffffff00e800001000bdc9489b2ddc2ee10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000000800"/28], 0x50) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private2, 0x200007ff, 0x1, 0x2, 0xf, 0x5}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="e00000000000000001"], 0xe0}}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000940)="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", &(0x7f0000000180), 0x2}, 0x20) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665626163386e58834274576b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x7ce5, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc2, &(0x7f00000002c0)=""/194, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000100)=r7, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa) 2m32.911026945s ago: executing program 5 (id=16628): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="1000000000000000b7020000144a5d60973847c239ab000000b70300000000000083000000bf0900000000000055090100000000009500000000000000180000000f00000000000000060000003f361000f0ffffff85100000feffffff18420000fbffffff00000000000000", @ANYRES32=r4, @ANYBLOB="0000000001000100bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x64, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x635e, 0xae5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x5, 0x4, 0x2, 0xd}, {0x3, 0x5, 0x9}, {0x1, 0x1, 0xe, 0x8}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="f991352249f04c5510d5dac74047fe1e3bf54b8fe2126de7b49363574158e9512dd0eb6db9b8a6aa25ae533a56c9f16afd342fbc6fea087bbc", @ANYRESHEX=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x235, 0x7fffffff, 0x7, 0x4, 0x8d, 0x1c, 0xa, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x8, 0x3f9a, 0x0, 0x800000000ffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m31.653071898s ago: executing program 5 (id=16635): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 2m31.032790661s ago: executing program 5 (id=16642): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000010205000000000000000000020000012c00018006000340000400000c00028005000a00100000001400018008000100ac1e00010800020064010101"], 0x40}, 0x1, 0x0, 0x0, 0x10048895}, 0x800) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000010205000000000000000000020000012c00018006000340000400000c00028005000a00100000001400018008000100ac1e00010800020064010101"], 0x40}, 0x1, 0x0, 0x0, 0x10048895}, 0x800) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000025000100fdffffff0000777105000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x400) (async) unshare(0x400) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) connect(r4, &(0x7f0000004040)=@pppoe={0x18, 0x0, {0x2, @random="ae2bc6f65398", 'veth1\x00'}}, 0x80) syz_genetlink_get_family_id$nl802154(0xffffffffffffffff, r3) 2m24.11561385s ago: executing program 2 (id=16713): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000100)=0x10001, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 8) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0) 2m23.657169954s ago: executing program 2 (id=16717): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x3}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 2m20.850020369s ago: executing program 2 (id=16728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) 2m20.711463657s ago: executing program 2 (id=16729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x80, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1c}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5a24}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x20, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044841}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xf, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94) 2m20.625789539s ago: executing program 2 (id=16730): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x29, 0x2, 0x5) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0x2, 0xffffffff00000001}) recvfrom$llc(r3, &(0x7f00000000c0)=""/59, 0x3b, 0x12161, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000180)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xb0, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a390281080a8da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d13", 0x0, 0xfe, 0x60000000}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000b0021e14d878fc10abc852856da3cbab6f09f813e4045dc6222239378a6c61ae7f6d86ede56b35de8294e60dd3d5c66a409327643053078c15e5d405c2bb1ef895a5ce9d1353dadb7145865caab817a30acdcf98ccb61869889ef045143b0ec2eaabe91008333c07ffc0f114f164ba15e6580de957031e5c84fb2327ff3f2a5", @ANYRES16=r7], 0x14}}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000f0ffff0700349b91114100000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$rds(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004}, 0x0) getsockopt(r8, 0x200000000114, 0x8, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) r10 = socket$igmp6(0xa, 0x3, 0x2) getpeername(r10, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 2m20.063840803s ago: executing program 2 (id=16733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) 2m15.848125632s ago: executing program 33 (id=16642): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000010205000000000000000000020000012c00018006000340000400000c00028005000a00100000001400018008000100ac1e00010800020064010101"], 0x40}, 0x1, 0x0, 0x0, 0x10048895}, 0x800) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000010205000000000000000000020000012c00018006000340000400000c00028005000a00100000001400018008000100ac1e00010800020064010101"], 0x40}, 0x1, 0x0, 0x0, 0x10048895}, 0x800) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000025000100fdffffff0000777105000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x400) (async) unshare(0x400) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) connect(r4, &(0x7f0000004040)=@pppoe={0x18, 0x0, {0x2, @random="ae2bc6f65398", 'veth1\x00'}}, 0x80) syz_genetlink_get_family_id$nl802154(0xffffffffffffffff, r3) 2m4.972793995s ago: executing program 34 (id=16733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) 1m16.871646368s ago: executing program 0 (id=17216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a7379"], 0x38}}, 0x0) 1m16.464497908s ago: executing program 0 (id=17223): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000002000)=ANY=[@ANYBLOB="1802000001000800000000000300000085000000410000001800000002000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1m15.689361264s ago: executing program 0 (id=17229): socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x60000000) 1m15.501512606s ago: executing program 0 (id=17233): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, 0x0, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) close(r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async) accept(r1, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r6, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32], 0x4c}}, 0x0) 1m14.698540138s ago: executing program 0 (id=17237): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000900)=0x52) close(0x4) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000940)={{r0}, "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"}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) 1m13.568810389s ago: executing program 0 (id=17245): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x1, 0x6, 0x1, 0x10001, 0x4, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000100000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c00078008000200010000000800040000010000080003000400000008000100150000000800020003000000090001"], 0x94}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_sync_fs\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000009500"/24], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000000540)=""/4088, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r5 = epoll_create1(0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64=r8, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xcc, 0x0, 0x800, 0x70bd25, 0x5, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x84}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffb}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50}, 0x40844) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000000140)={0x70002001}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 58.488875302s ago: executing program 35 (id=17245): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x1, 0x6, 0x1, 0x10001, 0x4, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000100000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c00078008000200010000000800040000010000080003000400000008000100150000000800020003000000090001"], 0x94}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_sync_fs\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000009500"/24], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000000540)=""/4088, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r5 = epoll_create1(0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000000)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64=r8, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xcc, 0x0, 0x800, 0x70bd25, 0x5, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x84}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffffb}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50}, 0x40844) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f0000000140)={0x70002001}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 3.706192799s ago: executing program 4 (id=17798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x5, 0x1, 0x1}, 0x10) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0), 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 3.613513781s ago: executing program 7 (id=17799): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r5, {0xfff3, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x4}, {0x6}, {0xfff2, 0xf}}}, 0x24}}, 0x20040054) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00\x00\x00', 0x3}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x3c, 0x3}}]}, 0x48}}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) socket(0x2, 0x80805, 0x0) close(0x3) socket$packet(0x11, 0x2, 0x300) 3.33271096s ago: executing program 8 (id=17802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) recvfrom$inet6(r2, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 2.281627654s ago: executing program 7 (id=17807): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000380)=""/174, 0x7f, 0xae, 0x1, 0x6}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r2, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9f00f0ffffffffffff559a85603b0080", 0x24}], 0x1) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x9, 0xd05, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000000000000040000000800000000edfddf58fef1c74e96edae4fa044fa7411ef1509650cbe3d22c3ec509e4329d33e7d62cd8bec24dc9c40c49450580f0777af06ddba01cd9a519bc8dec45a69389658c9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000fcff207b200000000000000ca00000000000009504000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2.281418568s ago: executing program 6 (id=17808): socket(0xa, 0x3, 0x3a) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 2.219736219s ago: executing program 6 (id=17809): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="327a09757647d0c5845058c19465b7e08cf56098374160a757817e9731c03b0a585513e53c8b422aefcd2ec44f634ba278ee72c19cefc764c39043e343d60fd1dd9585be15ed1543ca81b8e1589551cad86280732e48e1d902bb838d0f03e452bf4bc8bc1a4adeca59c240f0dc4c156e9bfd228424149bad42009744f61c47beb89ab8e01c959313f77e46f66a84169641bed37949c5b2f4d0a4c7296d6af713198837979688f4f7aeeb708d89196e710a0b8fa79d4a956de5755302c37c9907fce4fb1b5ae2791815d1d9d3a36cf51591475dd8", 0xd4}, {&(0x7f0000000240)="cb1bb15d090e0fa1fbc9df8a0ac234a4e1bd29ce68b42fc6a799374de23cf7d1090fce711966cb44776b66b3a6f17e4130d30213a41030cb81003dec76ea66537da9cc026e1efd7c6f720c604ef30897ce51852c40116e3921c155a01f862642f570de59d9fec00d0ed9df5c836c12ce59327ce82b3534c68b80542995cd0b856bf3f3f72ebc4ca0916d74fff530c6894e407bfbd6a60fbce80f17a2679bf02656", 0xa1}, {&(0x7f0000000300)="5874d9615f85d792d291c5b8b5bae60315171b163dde9ccf8bee73cc542714c3fb722d0ac5b461761b722350fd716eb506b6f9610932cf34708194db806db8ca5d6fbc4985c0781b85fe12ba318ba60a7b725b049523995268c79e8637fb64cc51b5fc5707b7ccf88408b0963d7d67a86c9bc6a004aa8fc3f0acd860030f9f60925c0709deb9fdb23b56a723826597f1ea7bcb392287faf141ec5c01e9a1f8627e008452bc0c172b1bd0f3778bf761885b4ba45e4f02f4af", 0xb8}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000004c0)="372a4d3a4076b143fe74bd089ef9df0111ba0cbed65ffa2135e5e0b0d4ea27dd7fdc2b15f9134cdc20e9aa343b07d73cb0f5e6d8627b22fb4880f4fbff0305ef894178007be637bcc75d4a5a6227376047a9f761b456ea470bdb34943ee679b8bff7f8b59c6c7d08421985942e5756f2689b99174c9ec8cfd5ccd6f5439241a40d289fcc33409db0dbfd9eb67c94c4b8c8d0a9b0d33d7729c6216cc7239e270324f70ca0b6b453b4091c9c0fa41cc96158a309435ccd826c9439139fa0f11c3cc380434c40b81210b27d54f232fba26d3f9789e0138134c7d20aa16c1d58654777d4c91d34c0", 0xe6}, {&(0x7f00000003c0)="a727592a731f263cb5d80b9d992245ac2562e2f7160052f32a5c37ed62213c9a1fc53ce642ad70567e285d354f7e29edad49d389eefea8e8249b8ab08d0530758c0dc31a5c82cb7d148c3d9de9dfb9ad122031b50221d1ff5b43010fb81fb8a407a18b3889efcd67677573e25799c3ad8fe3196a9ae51fd310781e1f5463b8b7457fd8", 0x83}], 0x7, &(0x7f00000017c0)=[{0xa0, 0x88, 0x5, "66d2eb3df576f618aeddca8521b5062350c4f7d9ea645563f7a4fae1e2dec92b89c49adaa74e1fe30b82a889ad058fc1ead8fe8821c29c205d908c1f327136e23b48e4197afcbc0344e5c8ce50f501f475f4f168db2fc01252e98c1210c6c72978949444183ae3cf1c72ef31fa612a646545058b57b7c84e91abc3e8d2c040f154ddcc7d0a8f125a824156b84a1cb4"}, {0x80, 0x111, 0x9, "8fe661c4f05566b2544f53dfd10ee39363782c11e19597f384352ffa7334c24605f71eeafd8a6284666ec46cff3904d6366ae9a702e2267452f12acf15033849f915b30e242197d5a52b6f26f7b5a2b5e9939a98376b978213499cf7dadfce4e7d1975999d98f553c2d83c1ec153"}, {0x98, 0x102, 0x0, "3f45a81dfe86174cc4fadfdaee97dbf720e1199ea62776e326c1120796c8da6c36ff74f5106af57f16e401da819419132df99d3bb44f68cf773b706d65579d5c31669720caceca6a3783a97f3ce8b11f1dcdafc0a2c5c82f102808d002b378cd462ca823274bd12c68a3b25adcc05b3161783c86c95d8d6482e9476ce7b563c59e243ab7b0eeb0"}], 0x1b8}, 0x1000c011) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.082128435s ago: executing program 8 (id=17811): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2d, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x78}, 0x1, 0x7}, 0x0) 2.01029616s ago: executing program 6 (id=17812): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000faff00000000ab180415b6000000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.009701127s ago: executing program 7 (id=17813): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000005e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 1.810156781s ago: executing program 8 (id=17815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000c000780050015001300000008001240000000000500050002000000050001000600000013000300686173683a6e65742c69666163650000efc1"], 0x60}}, 0x40000010) 1.7917451s ago: executing program 4 (id=17816): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0xc39}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}, 0x1, 0x100000000000000}, 0x20040054) 1.774859577s ago: executing program 7 (id=17817): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0xfe, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4, 0xd}}]}, 0x28}}, 0x0) 1.582351592s ago: executing program 8 (id=17818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0xf8ff, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.497444745s ago: executing program 4 (id=17819): socket(0xa, 0x3, 0x3a) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) 1.399350062s ago: executing program 7 (id=17821): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x8000008}, {{0x0, 0x0, 0x0}, 0x4004}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/181, 0xb5}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000001e00)=""/4130, 0x1022}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f0000001040)=""/243, 0xf3}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000b00)=""/75, 0x4b}, {&(0x7f00000008c0)=""/172, 0xac}], 0xa}, 0x9b3}, {{0x0, 0x0, 0x0}, 0x6130e429}], 0x4, 0x0, 0x0) 1.290511607s ago: executing program 4 (id=17822): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000062040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="0000e100000000000068", 0xa}], 0x2}, 0x0) 1.290309813s ago: executing program 8 (id=17823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x300, 0xe, 0x0, &(0x7f0000000680)="fc3afaa7172fc79c661ed500780d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.231737927s ago: executing program 7 (id=17824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x5, 0x1, 0x1}, 0x10) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0xe0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1.205998794s ago: executing program 3 (id=17825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x900, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) 1.052930189s ago: executing program 3 (id=17826): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$unix(0x1, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x25dfdbff, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0x2000, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x68}}, 0x10000000) 1.03815585s ago: executing program 4 (id=17827): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1f0, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x78}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x258}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @loopback, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80440d0}, 0x20000081) 1.021987358s ago: executing program 8 (id=17828): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000faff00000000ab180415b6000000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 768.640715ms ago: executing program 3 (id=17829): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 767.689108ms ago: executing program 6 (id=17830): r0 = socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={r2, 0xef, "0d7817a83b91afb997b78598b57489998169a755c805430b8195ddd0d20bb28165214137844fe3b05ec53ecec11ef15c49d1bbbd93483f3e3470f8ddc82c98633027fe93a6261b95d5f0993ad5b4c15116f2359b68693e12ced6d91147955f4e514bd09faf48dfe26809ce320a8d567ca9a631205a0bdb4299c04c2349679796642a6dd60572b9f4a6db13b70763396b1629499c71e9743d674ab05ec9760aa8cf0c601e018218884950f01701b2de04b75c3bc2eb7851806f56f2e503a4b58e7729cf5eb12e83f58078a637d13ed91dfe5be95b9380d286f8f736acbf8212721ef1de50f5db686505edb80b682b86"}, &(0x7f0000000200)=0xf7) sendto$inet(r1, &(0x7f00000000c0)="e3", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r1, 0xda8c) accept4(r1, &(0x7f0000000340)=@nfc, 0x0, 0x0) 620.778488ms ago: executing program 3 (id=17831): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0xe4, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 442.351579ms ago: executing program 3 (id=17832): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x5, 0x3, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}}, 0x4000001) 400.484834ms ago: executing program 3 (id=17833): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000001c0), 0x4) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'netpci0\x00', {0x2, 0x0, @dev}}) r1 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x4, @private0}, 0x1c) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/60, 0x3c}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)={[{0x2d, 'freezer'}, {0x2b, 'net_cls'}, {0x2d, 'rlimit'}, {0x2b, 'rdma'}, {0x0, 'cpu'}, {0x2b, 'freezer'}, {0x2b, 'net_cls'}]}, 0x37) 341.148272ms ago: executing program 6 (id=17834): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 843.509µs ago: executing program 4 (id=17835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000a0014000780050015001300000008001240000000000500050002000000050001000600000013000300686173683a6e65742c69666163650000efc1"], 0x60}}, 0x40000010) 0s ago: executing program 6 (id=17836): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffd}, 0x8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x67, @remote, 0x4e20, 0x3, 'ovf\x00', 0x10, 0x9, 0x37}, 0x2c) close(r1) kernel console output (not intermixed with test programs): 50:50:50:50 [ 2372.856616][T31513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16829'. [ 2373.232088][T31519] lo speed is unknown, defaulting to 1000 [ 2373.259827][T31519] lo speed is unknown, defaulting to 1000 [ 2373.851997][T31529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16834'. [ 2373.863785][T31529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16834'. [ 2374.785892][T31551] lo speed is unknown, defaulting to 1000 [ 2374.812698][T31551] lo speed is unknown, defaulting to 1000 [ 2374.893989][T29877] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2374.913634][T29877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2374.922751][T29877] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2374.932300][T29877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2374.940383][T29877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2375.161744][T31562] lo speed is unknown, defaulting to 1000 [ 2375.169788][T31562] lo speed is unknown, defaulting to 1000 [ 2375.466682][T31561] netlink: 'syz.6.16844': attribute type 6 has an invalid length. [ 2375.520411][T31574] FAULT_INJECTION: forcing a failure. [ 2375.520411][T31574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2375.544582][T31574] CPU: 1 UID: 0 PID: 31574 Comm: syz.0.16851 Not tainted syzkaller #0 PREEMPT(full) [ 2375.544615][T31574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2375.544630][T31574] Call Trace: [ 2375.544639][T31574] [ 2375.544649][T31574] dump_stack_lvl+0x189/0x250 [ 2375.544682][T31574] ? __pfx____ratelimit+0x10/0x10 [ 2375.544710][T31574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2375.544738][T31574] ? __pfx__printk+0x10/0x10 [ 2375.544771][T31574] ? __might_fault+0xb0/0x130 [ 2375.544817][T31574] should_fail_ex+0x414/0x560 [ 2375.544869][T31574] _copy_from_user+0x2d/0xb0 [ 2375.544901][T31574] bpf_prog_test_run_xdp+0xd05/0x1000 [ 2375.544950][T31574] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2375.544985][T31574] ? __fget_files+0x2a/0x420 [ 2375.545013][T31574] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2375.545042][T31574] bpf_prog_test_run+0x2c7/0x340 [ 2375.545081][T31574] __sys_bpf+0x581/0x870 [ 2375.545114][T31574] ? __pfx___sys_bpf+0x10/0x10 [ 2375.545160][T31574] ? ksys_write+0x22a/0x250 [ 2375.545194][T31574] ? __pfx_ksys_write+0x10/0x10 [ 2375.545222][T31574] ? rcu_is_watching+0x15/0xb0 [ 2375.545255][T31574] __x64_sys_bpf+0x7c/0x90 [ 2375.545283][T31574] do_syscall_64+0xfa/0x3b0 [ 2375.545310][T31574] ? lockdep_hardirqs_on+0x9c/0x150 [ 2375.545335][T31574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.545357][T31574] ? clear_bhb_loop+0x60/0xb0 [ 2375.545385][T31574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2375.545408][T31574] RIP: 0033:0x7fd62e18eba9 [ 2375.545428][T31574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2375.545448][T31574] RSP: 002b:00007fd62f059038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2375.545472][T31574] RAX: ffffffffffffffda RBX: 00007fd62e3d5fa0 RCX: 00007fd62e18eba9 [ 2375.545489][T31574] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 2375.545504][T31574] RBP: 00007fd62f059090 R08: 0000000000000000 R09: 0000000000000000 [ 2375.545519][T31574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2375.545533][T31574] R13: 00007fd62e3d6038 R14: 00007fd62e3d5fa0 R15: 00007ffca207f7b8 [ 2375.545570][T31574] [ 2376.119050][T31583] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.16855'. [ 2376.270949][T31562] chnl_net:caif_netlink_parms(): no params data found [ 2376.751694][T31592] lo speed is unknown, defaulting to 1000 [ 2376.791466][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2376.829578][T31609] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16865'. [ 2376.871880][T31608] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16865'. [ 2376.902498][T31592] lo speed is unknown, defaulting to 1000 [ 2376.956640][T31562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2376.970899][T31562] bridge0: port 1(bridge_slave_0) entered disabled state [ 2376.995796][T31562] bridge_slave_0: entered allmulticast mode [ 2377.004588][T31562] bridge_slave_0: entered promiscuous mode [ 2377.036833][ T522] Bluetooth: hci7: command tx timeout [ 2377.049245][T31562] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.060598][T31562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2377.069189][T31562] bridge_slave_1: entered allmulticast mode [ 2377.078310][T31562] bridge_slave_1: entered promiscuous mode [ 2377.320097][T31562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2377.330080][T31622] tipc: Enabling of bearer rejected, failed to enable media [ 2377.466327][T31562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2377.533444][T31632] FAULT_INJECTION: forcing a failure. [ 2377.533444][T31632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2377.561301][T31632] CPU: 1 UID: 0 PID: 31632 Comm: syz.3.16873 Not tainted syzkaller #0 PREEMPT(full) [ 2377.561334][T31632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2377.561348][T31632] Call Trace: [ 2377.561358][T31632] [ 2377.561369][T31632] dump_stack_lvl+0x189/0x250 [ 2377.561402][T31632] ? __pfx____ratelimit+0x10/0x10 [ 2377.561429][T31632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2377.561462][T31632] ? __pfx__printk+0x10/0x10 [ 2377.561495][T31632] ? __might_fault+0xb0/0x130 [ 2377.561541][T31632] should_fail_ex+0x414/0x560 [ 2377.561582][T31632] _copy_from_user+0x2d/0xb0 [ 2377.561614][T31632] bpf_prog_test_run_xdp+0xd05/0x1000 [ 2377.561663][T31632] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2377.561697][T31632] ? __fget_files+0x2a/0x420 [ 2377.561725][T31632] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2377.561754][T31632] bpf_prog_test_run+0x2c7/0x340 [ 2377.561792][T31632] __sys_bpf+0x581/0x870 [ 2377.561825][T31632] ? __pfx___sys_bpf+0x10/0x10 [ 2377.561871][T31632] ? ksys_write+0x22a/0x250 [ 2377.561906][T31632] ? __pfx_ksys_write+0x10/0x10 [ 2377.561933][T31632] ? rcu_is_watching+0x15/0xb0 [ 2377.561966][T31632] __x64_sys_bpf+0x7c/0x90 [ 2377.562002][T31632] do_syscall_64+0xfa/0x3b0 [ 2377.562029][T31632] ? lockdep_hardirqs_on+0x9c/0x150 [ 2377.562055][T31632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2377.562078][T31632] ? clear_bhb_loop+0x60/0xb0 [ 2377.562107][T31632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2377.562129][T31632] RIP: 0033:0x7f431738eba9 [ 2377.562150][T31632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2377.562169][T31632] RSP: 002b:00007f43155f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2377.562194][T31632] RAX: ffffffffffffffda RBX: 00007f43175d5fa0 RCX: 00007f431738eba9 [ 2377.562211][T31632] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 2377.562225][T31632] RBP: 00007f43155f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2377.562240][T31632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2377.562253][T31632] R13: 00007f43175d6038 R14: 00007f43175d5fa0 R15: 00007ffe4c8f19b8 [ 2377.562291][T31632] [ 2377.831004][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2377.978540][T31562] team0: Port device team_slave_0 added [ 2378.008826][T31630] lo speed is unknown, defaulting to 1000 [ 2378.017151][T31630] lo speed is unknown, defaulting to 1000 [ 2378.196747][T31562] team0: Port device team_slave_1 added [ 2378.871280][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2378.894362][T31562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2378.917855][T31562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2378.960240][T31562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2378.984675][T31562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2379.001654][T31562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2379.033730][T31562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2379.089376][T31665] netlink: 208 bytes leftover after parsing attributes in process `syz.0.16880'. [ 2379.118672][ T522] Bluetooth: hci7: command tx timeout [ 2379.137483][T31666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16879'. [ 2379.148999][T31666] netlink: 'syz.3.16879': attribute type 1 has an invalid length. [ 2379.380326][T31562] hsr_slave_0: entered promiscuous mode [ 2379.387857][T31562] hsr_slave_1: entered promiscuous mode [ 2379.396134][T31562] debugfs: 'hsr0' already exists in 'hsr' [ 2379.402289][T31562] Cannot create hsr debugfs directory [ 2379.505365][T31662] lo speed is unknown, defaulting to 1000 [ 2379.566973][T31662] lo speed is unknown, defaulting to 1000 [ 2379.789274][T31675] lo speed is unknown, defaulting to 1000 [ 2379.907788][T31675] lo speed is unknown, defaulting to 1000 [ 2379.911070][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2380.104841][T31685] netlink: 'syz.6.16885': attribute type 6 has an invalid length. [ 2380.657674][T31689] lo speed is unknown, defaulting to 1000 [ 2380.697343][T31689] lo speed is unknown, defaulting to 1000 [ 2380.786908][T31700] netlink: 'syz.0.16889': attribute type 6 has an invalid length. [ 2380.947661][T31562] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2380.951447][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2380.999608][T31562] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2381.031883][T31562] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2381.079690][T31706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16892'. [ 2381.090478][T31562] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2381.195579][ T522] Bluetooth: hci7: command tx timeout [ 2381.223756][T31706] veth1_to_bond: entered allmulticast mode [ 2381.230100][T31706] veth1_to_bond: entered promiscuous mode [ 2381.256721][T31705] veth1_to_bond: left promiscuous mode [ 2381.273542][T31705] veth1_to_bond: left allmulticast mode [ 2381.399960][T31711] lo speed is unknown, defaulting to 1000 [ 2381.461593][T31711] lo speed is unknown, defaulting to 1000 [ 2381.772824][T31562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2381.803045][T31562] 8021q: adding VLAN 0 to HW filter on device team0 [ 2381.868893][T30567] bridge0: port 1(bridge_slave_0) entered blocking state [ 2381.876216][T30567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2381.924422][T30567] bridge0: port 2(bridge_slave_1) entered blocking state [ 2381.931687][T30567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2381.990830][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2382.119747][T31725] netlink: 'syz.3.16893': attribute type 6 has an invalid length. [ 2382.303689][T31741] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.16901'. [ 2382.850149][T31751] lo speed is unknown, defaulting to 1000 [ 2382.900849][T31751] lo speed is unknown, defaulting to 1000 [ 2383.031334][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2383.049387][T31764] netlink: 'syz.0.16908': attribute type 11 has an invalid length. [ 2383.096389][T31767] netlink: 108 bytes leftover after parsing attributes in process `syz.0.16908'. [ 2383.158329][ T30] audit: type=1800 audit(1757881503.456:27): pid=31764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16908" name="memory.events" dev="tmpfs" ino=18086 res=0 errno=0 [ 2383.239481][T31769] netlink: 32 bytes leftover after parsing attributes in process `syz.6.16911'. [ 2383.258844][T31767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2383.278401][ T522] Bluetooth: hci7: command tx timeout [ 2383.291984][T31770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16911'. [ 2383.330900][ T8578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2383.338786][ T8578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2383.467766][T31562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2383.729570][T31751] netlink: 'syz.3.16904': attribute type 6 has an invalid length. [ 2384.070925][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2384.625878][T31810] FAULT_INJECTION: forcing a failure. [ 2384.625878][T31810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2384.661458][T31810] CPU: 1 UID: 0 PID: 31810 Comm: syz.3.16923 Not tainted syzkaller #0 PREEMPT(full) [ 2384.661489][T31810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2384.661504][T31810] Call Trace: [ 2384.661513][T31810] [ 2384.661523][T31810] dump_stack_lvl+0x189/0x250 [ 2384.661559][T31810] ? __pfx____ratelimit+0x10/0x10 [ 2384.661587][T31810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2384.661615][T31810] ? __pfx__printk+0x10/0x10 [ 2384.661660][T31810] should_fail_ex+0x414/0x560 [ 2384.661700][T31810] _copy_to_user+0x31/0xb0 [ 2384.661732][T31810] simple_read_from_buffer+0xe1/0x170 [ 2384.661770][T31810] proc_fail_nth_read+0x1b3/0x220 [ 2384.661799][T31810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2384.661828][T31810] ? rw_verify_area+0x2a6/0x4d0 [ 2384.661856][T31810] ? __lock_acquire+0xab9/0xd20 [ 2384.661886][T31810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2384.661913][T31810] vfs_read+0x200/0xa30 [ 2384.661942][T31810] ? fdget_pos+0x247/0x320 [ 2384.661968][T31810] ? __pfx___mutex_lock+0x10/0x10 [ 2384.661998][T31810] ? __pfx_vfs_read+0x10/0x10 [ 2384.662029][T31810] ? __fget_files+0x2a/0x420 [ 2384.662054][T31810] ? __fget_files+0x3a0/0x420 [ 2384.662073][T31810] ? __fget_files+0x2a/0x420 [ 2384.662102][T31810] ksys_read+0x145/0x250 [ 2384.662139][T31810] ? __fget_files+0x3a0/0x420 [ 2384.662160][T31810] ? __pfx_ksys_read+0x10/0x10 [ 2384.662195][T31810] ? do_syscall_64+0xbe/0x3b0 [ 2384.662228][T31810] do_syscall_64+0xfa/0x3b0 [ 2384.662253][T31810] ? lockdep_hardirqs_on+0x9c/0x150 [ 2384.662278][T31810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.662300][T31810] ? clear_bhb_loop+0x60/0xb0 [ 2384.662328][T31810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.662350][T31810] RIP: 0033:0x7f431738d5bc [ 2384.662370][T31810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2384.662390][T31810] RSP: 002b:00007f43155f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2384.662414][T31810] RAX: ffffffffffffffda RBX: 00007f43175d5fa0 RCX: 00007f431738d5bc [ 2384.662431][T31810] RDX: 000000000000000f RSI: 00007f43155f60a0 RDI: 0000000000000004 [ 2384.662445][T31810] RBP: 00007f43155f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2384.662459][T31810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.662473][T31810] R13: 00007f43175d6038 R14: 00007f43175d5fa0 R15: 00007ffe4c8f19b8 [ 2384.662509][T31810] [ 2385.027574][T31562] veth0_vlan: entered promiscuous mode [ 2385.042056][T31562] veth1_vlan: entered promiscuous mode [ 2385.111222][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2385.113731][T31562] veth0_macvtap: entered promiscuous mode [ 2385.216804][T31562] veth1_macvtap: entered promiscuous mode [ 2385.266111][T31562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2385.327131][T31562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2385.396913][T30573] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.423100][T30573] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.472240][T30573] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.494953][T30573] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2385.998769][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.084790][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2386.150814][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2386.693235][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16939'. [ 2386.693930][T30573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2386.723913][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16939'. [ 2386.751878][T30573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2387.191270][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2387.290132][T31876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16943'. [ 2387.415535][T31882] FAULT_INJECTION: forcing a failure. [ 2387.415535][T31882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.473703][T31884] netlink: 248 bytes leftover after parsing attributes in process `syz.7.16944'. [ 2387.509875][T31882] CPU: 0 UID: 0 PID: 31882 Comm: syz.4.16945 Not tainted syzkaller #0 PREEMPT(full) [ 2387.509910][T31882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2387.509924][T31882] Call Trace: [ 2387.509933][T31882] [ 2387.509944][T31882] dump_stack_lvl+0x189/0x250 [ 2387.509977][T31882] ? __pfx____ratelimit+0x10/0x10 [ 2387.510005][T31882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2387.510033][T31882] ? __pfx__printk+0x10/0x10 [ 2387.510080][T31882] should_fail_ex+0x414/0x560 [ 2387.510120][T31882] _copy_to_user+0x31/0xb0 [ 2387.510155][T31882] simple_read_from_buffer+0xe1/0x170 [ 2387.510207][T31882] proc_fail_nth_read+0x1b3/0x220 [ 2387.510237][T31882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2387.510268][T31882] ? rw_verify_area+0x2a6/0x4d0 [ 2387.510296][T31882] ? __lock_acquire+0xab9/0xd20 [ 2387.510327][T31882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2387.510355][T31882] vfs_read+0x200/0xa30 [ 2387.510384][T31882] ? fdget_pos+0x247/0x320 [ 2387.510410][T31882] ? __pfx___mutex_lock+0x10/0x10 [ 2387.510439][T31882] ? __pfx_vfs_read+0x10/0x10 [ 2387.510471][T31882] ? __fget_files+0x2a/0x420 [ 2387.510497][T31882] ? __fget_files+0x3a0/0x420 [ 2387.510516][T31882] ? __fget_files+0x2a/0x420 [ 2387.510548][T31882] ksys_read+0x145/0x250 [ 2387.510582][T31882] ? __pfx_ksys_read+0x10/0x10 [ 2387.510613][T31882] ? rcu_is_watching+0x15/0xb0 [ 2387.510640][T31882] ? do_syscall_64+0xbe/0x3b0 [ 2387.510671][T31882] do_syscall_64+0xfa/0x3b0 [ 2387.510695][T31882] ? lockdep_hardirqs_on+0x9c/0x150 [ 2387.510720][T31882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.510742][T31882] ? clear_bhb_loop+0x60/0xb0 [ 2387.510771][T31882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.510792][T31882] RIP: 0033:0x7fd59b98d5bc [ 2387.510812][T31882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2387.510831][T31882] RSP: 002b:00007fd59c8c4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2387.510855][T31882] RAX: ffffffffffffffda RBX: 00007fd59bbd6090 RCX: 00007fd59b98d5bc [ 2387.510872][T31882] RDX: 000000000000000f RSI: 00007fd59c8c40a0 RDI: 0000000000000003 [ 2387.510886][T31882] RBP: 00007fd59c8c4090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.510900][T31882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.510914][T31882] R13: 00007fd59bbd6128 R14: 00007fd59bbd6090 R15: 00007ffd85f3dea8 [ 2387.510948][T31882] [ 2388.225999][T31903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16949'. [ 2388.235308][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2388.594734][T31897] lo speed is unknown, defaulting to 1000 [ 2388.603758][T31897] lo speed is unknown, defaulting to 1000 [ 2389.079861][T31931] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.16957'. [ 2389.140517][T31931] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2389.175849][T31931] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2389.236510][T31936] lo speed is unknown, defaulting to 1000 [ 2389.247499][T31936] lo speed is unknown, defaulting to 1000 [ 2389.271261][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2389.715600][T31950] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16964'. [ 2389.785041][T31932] netlink: 'syz.4.16956': attribute type 6 has an invalid length. [ 2389.969190][T31956] netlink: 'syz.7.16966': attribute type 13 has an invalid length. [ 2390.310880][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2390.378443][T31957] lo speed is unknown, defaulting to 1000 [ 2390.422909][T31957] lo speed is unknown, defaulting to 1000 [ 2390.483269][T31964] lo speed is unknown, defaulting to 1000 [ 2390.548275][T31969] lo speed is unknown, defaulting to 1000 [ 2390.548287][T31964] lo speed is unknown, defaulting to 1000 [ 2390.745693][T31969] lo speed is unknown, defaulting to 1000 [ 2390.817210][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16973'. [ 2390.893615][T31982] netlink: 268 bytes leftover after parsing attributes in process `syz.7.16973'. [ 2391.220348][T31964] netlink: 'syz.6.16968': attribute type 6 has an invalid length. [ 2391.351329][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2391.441718][T31979] netlink: 'syz.0.16970': attribute type 6 has an invalid length. [ 2391.757582][T31995] lo speed is unknown, defaulting to 1000 [ 2391.892373][T32002] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16976'. [ 2392.212009][T31995] lo speed is unknown, defaulting to 1000 [ 2392.391042][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2392.777393][T32021] lo speed is unknown, defaulting to 1000 [ 2393.435657][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2393.521215][T32021] lo speed is unknown, defaulting to 1000 [ 2393.747800][T32041] lo speed is unknown, defaulting to 1000 [ 2394.006106][T32045] netlink: 'syz.3.16987': attribute type 6 has an invalid length. [ 2394.038864][T32041] lo speed is unknown, defaulting to 1000 [ 2394.041207][T32040] lo speed is unknown, defaulting to 1000 [ 2394.137057][T32040] lo speed is unknown, defaulting to 1000 [ 2394.470791][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2394.713937][T32058] netlink: 'syz.7.16992': attribute type 12 has an invalid length. [ 2395.430433][T32067] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16995'. [ 2395.511129][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2396.468636][T32105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17010'. [ 2396.550806][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2397.231376][T32105] hsr_slave_0: left promiscuous mode [ 2397.259330][T32105] hsr_slave_1: left promiscuous mode [ 2397.538522][T32110] lo speed is unknown, defaulting to 1000 [ 2397.587134][T32110] lo speed is unknown, defaulting to 1000 [ 2397.593551][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2397.696298][T32125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17017'. [ 2397.721981][T32126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17016'. [ 2397.831458][T32125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2397.843273][T32130] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'. [ 2397.860868][T32130] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17018'. [ 2397.928976][T32130] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17018'. [ 2397.990111][T32130] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17018'. [ 2398.151600][T32138] bond1: (slave batadv1): Opening slave failed [ 2398.441037][T32136] lo speed is unknown, defaulting to 1000 [ 2398.447888][T32142] netlink: 'syz.0.17019': attribute type 6 has an invalid length. [ 2398.471437][T32136] lo speed is unknown, defaulting to 1000 [ 2398.630951][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2399.123384][T32161] lo speed is unknown, defaulting to 1000 [ 2399.145741][T32161] lo speed is unknown, defaulting to 1000 [ 2399.505249][T32161] netlink: 'syz.3.17026': attribute type 6 has an invalid length. [ 2399.661237][T32178] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17030'. [ 2399.671231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2399.742486][T32177] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17032'. [ 2399.765071][T32177] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2399.858902][T32180] lo speed is unknown, defaulting to 1000 [ 2399.906551][T32180] lo speed is unknown, defaulting to 1000 [ 2400.434356][T32180] netlink: 'syz.0.17033': attribute type 6 has an invalid length. [ 2400.446674][T32196] lo speed is unknown, defaulting to 1000 [ 2400.462389][T32196] lo speed is unknown, defaulting to 1000 [ 2400.481813][T32201] sctp: [Deprecated]: syz.6.17039 (pid 32201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2400.481813][T32201] Use struct sctp_sack_info instead [ 2400.642845][T32203] lo speed is unknown, defaulting to 1000 [ 2400.666388][T32206] tipc: Enabled bearer , priority 0 [ 2400.702706][T32206] syzkaller0: entered promiscuous mode [ 2400.710790][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2400.720912][T32206] syzkaller0: entered allmulticast mode [ 2400.799734][T32203] lo speed is unknown, defaulting to 1000 [ 2400.973960][T32209] syzkaller0: mtu less than device minimum [ 2401.141999][T32197] netlink: 'syz.4.17038': attribute type 6 has an invalid length. [ 2401.187344][T32205] tipc: Resetting bearer [ 2401.219774][T32215] netlink: 224 bytes leftover after parsing attributes in process `syz.6.17041'. [ 2401.232434][T32205] tipc: Disabling bearer [ 2401.440988][T32215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17041'. [ 2401.626833][T32228] FAULT_INJECTION: forcing a failure. [ 2401.626833][T32228] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.654842][T32228] CPU: 1 UID: 0 PID: 32228 Comm: syz.4.17045 Not tainted syzkaller #0 PREEMPT(full) [ 2401.654883][T32228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2401.654898][T32228] Call Trace: [ 2401.654908][T32228] [ 2401.654919][T32228] dump_stack_lvl+0x189/0x250 [ 2401.654953][T32228] ? __pfx____ratelimit+0x10/0x10 [ 2401.654981][T32228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2401.655009][T32228] ? __pfx__printk+0x10/0x10 [ 2401.655049][T32228] ? __pfx___might_resched+0x10/0x10 [ 2401.655077][T32228] should_fail_ex+0x414/0x560 [ 2401.655118][T32228] should_failslab+0xa8/0x100 [ 2401.655155][T32228] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2401.655190][T32228] ? __alloc_skb+0x112/0x2d0 [ 2401.655222][T32228] __alloc_skb+0x112/0x2d0 [ 2401.655255][T32228] netlink_sendmsg+0x5c6/0xb30 [ 2401.655294][T32228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2401.655327][T32228] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2401.655352][T32228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2401.655377][T32228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2401.655407][T32228] __sock_sendmsg+0x219/0x270 [ 2401.655435][T32228] ____sys_sendmsg+0x505/0x830 [ 2401.655473][T32228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2401.655516][T32228] ? import_iovec+0x74/0xa0 [ 2401.655552][T32228] ___sys_sendmsg+0x21f/0x2a0 [ 2401.655586][T32228] ? __pfx____sys_sendmsg+0x10/0x10 [ 2401.655662][T32228] ? __fget_files+0x2a/0x420 [ 2401.655680][T32228] ? __fget_files+0x3a0/0x420 [ 2401.655714][T32228] __x64_sys_sendmsg+0x19b/0x260 [ 2401.655749][T32228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2401.655789][T32228] ? __pfx_ksys_write+0x10/0x10 [ 2401.655816][T32228] ? rcu_is_watching+0x15/0xb0 [ 2401.655855][T32228] ? do_syscall_64+0xbe/0x3b0 [ 2401.655888][T32228] do_syscall_64+0xfa/0x3b0 [ 2401.655914][T32228] ? lockdep_hardirqs_on+0x9c/0x150 [ 2401.655939][T32228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.655961][T32228] ? clear_bhb_loop+0x60/0xb0 [ 2401.655987][T32228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.656008][T32228] RIP: 0033:0x7fd59b98eba9 [ 2401.656029][T32228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2401.656048][T32228] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2401.656072][T32228] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2401.656087][T32228] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 2401.656101][T32228] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2401.656113][T32228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2401.656124][T32228] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2401.656154][T32228] [ 2401.927565][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2402.645181][T32244] lo speed is unknown, defaulting to 1000 [ 2402.663424][T32244] lo speed is unknown, defaulting to 1000 [ 2402.856306][T32253] tipc: Enabled bearer , priority 0 [ 2402.896292][T32253] syzkaller0: entered promiscuous mode [ 2402.918936][T32253] syzkaller0: entered allmulticast mode [ 2402.951241][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2403.015853][T32253] syzkaller0: mtu less than device minimum [ 2403.096965][T32252] tipc: Resetting bearer [ 2403.222213][T32252] tipc: Disabling bearer [ 2403.288431][T32244] netlink: 'syz.0.17052': attribute type 6 has an invalid length. [ 2403.320361][T32265] tun0: tun_chr_ioctl cmd 1074025675 [ 2403.348343][T32265] tun0: persist disabled [ 2403.602446][T32270] __nla_validate_parse: 1 callbacks suppressed [ 2403.602470][T32270] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17059'. [ 2403.866284][T32276] netlink: 'syz.3.17061': attribute type 7 has an invalid length. [ 2403.874943][T32276] netlink: 'syz.3.17061': attribute type 8 has an invalid length. [ 2403.894032][T32278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17063'. [ 2403.898451][T32276] netlink: 'syz.3.17061': attribute type 4 has an invalid length. [ 2403.952843][T32276] netlink: 204 bytes leftover after parsing attributes in process `syz.3.17061'. [ 2403.991183][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2404.569230][T32305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17069'. [ 2404.580425][T32304] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17070'. [ 2404.896437][T32312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17072'. [ 2404.970494][T32311] lo speed is unknown, defaulting to 1000 [ 2404.999978][T32311] lo speed is unknown, defaulting to 1000 [ 2405.030894][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2405.059633][T32318] netlink: 248 bytes leftover after parsing attributes in process `syz.0.17074'. [ 2405.079547][T32316] FAULT_INJECTION: forcing a failure. [ 2405.079547][T32316] name failslab, interval 1, probability 0, space 0, times 0 [ 2405.109043][T32316] CPU: 1 UID: 0 PID: 32316 Comm: syz.4.17075 Not tainted syzkaller #0 PREEMPT(full) [ 2405.109076][T32316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2405.109090][T32316] Call Trace: [ 2405.109100][T32316] [ 2405.109110][T32316] dump_stack_lvl+0x189/0x250 [ 2405.109143][T32316] ? __pfx____ratelimit+0x10/0x10 [ 2405.109171][T32316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2405.109198][T32316] ? __pfx__printk+0x10/0x10 [ 2405.109234][T32316] ? __pfx___might_resched+0x10/0x10 [ 2405.109256][T32316] ? fs_reclaim_acquire+0x7d/0x100 [ 2405.109283][T32316] should_fail_ex+0x414/0x560 [ 2405.109324][T32316] should_failslab+0xa8/0x100 [ 2405.109360][T32316] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 2405.109394][T32316] ? page_pool_create_percpu+0x76/0xbe0 [ 2405.109436][T32316] page_pool_create_percpu+0x76/0xbe0 [ 2405.109470][T32316] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 2405.109503][T32316] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 2405.109538][T32316] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 2405.109577][T32316] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2405.109613][T32316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2405.109655][T32316] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2405.109683][T32316] ? 0xffffffffa02057c0 [ 2405.109704][T32316] ? 0xffffffffa02057c0 [ 2405.109746][T32316] ? 0xffffffffa020188c [ 2405.109764][T32316] ? 0xffffffffa02018d8 [ 2405.109781][T32316] ? 0xffffffffa020190c [ 2405.109798][T32316] ? 0xffffffffa0201a7c [ 2405.109853][T32316] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2405.109893][T32316] ? _copy_from_user+0x94/0xb0 [ 2405.109925][T32316] ? bpf_test_init+0x133/0x170 [ 2405.109947][T32316] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2405.109977][T32316] bpf_prog_test_run_xdp+0x713/0x1000 [ 2405.110020][T32316] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2405.110051][T32316] ? __fget_files+0x2a/0x420 [ 2405.110078][T32316] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2405.110107][T32316] bpf_prog_test_run+0x2c7/0x340 [ 2405.110143][T32316] __sys_bpf+0x581/0x870 [ 2405.110177][T32316] ? __pfx___sys_bpf+0x10/0x10 [ 2405.110223][T32316] ? ksys_write+0x22a/0x250 [ 2405.110256][T32316] ? __pfx_ksys_write+0x10/0x10 [ 2405.110283][T32316] ? rcu_is_watching+0x15/0xb0 [ 2405.110315][T32316] __x64_sys_bpf+0x7c/0x90 [ 2405.110353][T32316] do_syscall_64+0xfa/0x3b0 [ 2405.110378][T32316] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.110403][T32316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.110424][T32316] ? clear_bhb_loop+0x60/0xb0 [ 2405.110451][T32316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.110471][T32316] RIP: 0033:0x7fd59b98eba9 [ 2405.110491][T32316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2405.110511][T32316] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2405.110533][T32316] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2405.110550][T32316] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2405.110564][T32316] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2405.110578][T32316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2405.110591][T32316] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2405.110626][T32316] [ 2405.935892][T32334] lo speed is unknown, defaulting to 1000 [ 2405.968049][T32334] lo speed is unknown, defaulting to 1000 [ 2406.071216][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2406.238324][T32343] tun1: tun_chr_ioctl cmd 1074025675 [ 2406.244158][T32343] tun1: persist disabled [ 2406.248781][T32343] FAULT_INJECTION: forcing a failure. [ 2406.248781][T32343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2406.288976][T32343] CPU: 0 UID: 0 PID: 32343 Comm: syz.0.17084 Not tainted syzkaller #0 PREEMPT(full) [ 2406.289009][T32343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2406.289023][T32343] Call Trace: [ 2406.289032][T32343] [ 2406.289042][T32343] dump_stack_lvl+0x189/0x250 [ 2406.289074][T32343] ? __pfx____ratelimit+0x10/0x10 [ 2406.289101][T32343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2406.289128][T32343] ? __pfx__printk+0x10/0x10 [ 2406.289176][T32343] should_fail_ex+0x414/0x560 [ 2406.289217][T32343] _copy_to_user+0x31/0xb0 [ 2406.289252][T32343] simple_read_from_buffer+0xe1/0x170 [ 2406.289291][T32343] proc_fail_nth_read+0x1b3/0x220 [ 2406.289322][T32343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2406.289352][T32343] ? rw_verify_area+0x2a6/0x4d0 [ 2406.289379][T32343] ? __lock_acquire+0xab9/0xd20 [ 2406.289411][T32343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2406.289439][T32343] vfs_read+0x200/0xa30 [ 2406.289468][T32343] ? fdget_pos+0x247/0x320 [ 2406.289495][T32343] ? __pfx___mutex_lock+0x10/0x10 [ 2406.289524][T32343] ? __pfx_vfs_read+0x10/0x10 [ 2406.289556][T32343] ? __fget_files+0x2a/0x420 [ 2406.289582][T32343] ? __fget_files+0x3a0/0x420 [ 2406.289601][T32343] ? __fget_files+0x2a/0x420 [ 2406.289633][T32343] ksys_read+0x145/0x250 [ 2406.289667][T32343] ? __pfx_ksys_read+0x10/0x10 [ 2406.289694][T32343] ? rcu_is_watching+0x15/0xb0 [ 2406.289732][T32343] ? do_syscall_64+0xbe/0x3b0 [ 2406.289765][T32343] do_syscall_64+0xfa/0x3b0 [ 2406.289791][T32343] ? lockdep_hardirqs_on+0x9c/0x150 [ 2406.289816][T32343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.289839][T32343] ? clear_bhb_loop+0x60/0xb0 [ 2406.289868][T32343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2406.289890][T32343] RIP: 0033:0x7fd62e18d5bc [ 2406.289910][T32343] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2406.289929][T32343] RSP: 002b:00007fd62f017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2406.289958][T32343] RAX: ffffffffffffffda RBX: 00007fd62e3d6180 RCX: 00007fd62e18d5bc [ 2406.289976][T32343] RDX: 000000000000000f RSI: 00007fd62f0170a0 RDI: 0000000000000004 [ 2406.289990][T32343] RBP: 00007fd62f017090 R08: 0000000000000000 R09: 0000000000000000 [ 2406.290004][T32343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2406.290017][T32343] R13: 00007fd62e3d6218 R14: 00007fd62e3d6180 R15: 00007ffca207f7b8 [ 2406.290055][T32343] [ 2406.592860][T32350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17086'. [ 2406.736460][T32311] netlink: 'syz.7.17073': attribute type 6 has an invalid length. [ 2406.737750][T28200] page_pool_release_retry() stalled pool shutdown: id 217, 3329 inflight 1211 sec [ 2407.110932][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2407.298330][T32359] lo speed is unknown, defaulting to 1000 [ 2407.540727][T32359] lo speed is unknown, defaulting to 1000 [ 2407.786477][T32370] netlink: 'syz.0.17088': attribute type 6 has an invalid length. [ 2408.151929][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2408.326216][T32396] lo speed is unknown, defaulting to 1000 [ 2408.334742][T32396] lo speed is unknown, defaulting to 1000 [ 2408.404688][T32395] IPVS: Scheduler module ip_vs_sip not found [ 2408.535251][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17098'. [ 2408.685116][T32409] FAULT_INJECTION: forcing a failure. [ 2408.685116][T32409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2408.731132][T32409] CPU: 1 UID: 0 PID: 32409 Comm: syz.6.17099 Not tainted syzkaller #0 PREEMPT(full) [ 2408.731164][T32409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2408.731178][T32409] Call Trace: [ 2408.731188][T32409] [ 2408.731198][T32409] dump_stack_lvl+0x189/0x250 [ 2408.731231][T32409] ? __pfx____ratelimit+0x10/0x10 [ 2408.731258][T32409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2408.731286][T32409] ? __pfx__printk+0x10/0x10 [ 2408.731318][T32409] ? __might_fault+0xb0/0x130 [ 2408.731364][T32409] should_fail_ex+0x414/0x560 [ 2408.731405][T32409] _copy_from_iter+0x1de/0x1790 [ 2408.731441][T32409] ? rcu_is_watching+0x15/0xb0 [ 2408.731467][T32409] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 2408.731500][T32409] ? __pfx__copy_from_iter+0x10/0x10 [ 2408.731530][T32409] ? __build_skb_around+0x257/0x3e0 [ 2408.731571][T32409] ? netlink_sendmsg+0x642/0xb30 [ 2408.731611][T32409] ? skb_put+0x11b/0x210 [ 2408.731645][T32409] netlink_sendmsg+0x6b2/0xb30 [ 2408.731683][T32409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2408.731713][T32409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2408.731744][T32409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2408.731768][T32409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2408.731797][T32409] __sock_sendmsg+0x219/0x270 [ 2408.731822][T32409] ____sys_sendmsg+0x52d/0x830 [ 2408.731859][T32409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2408.731901][T32409] ? import_iovec+0x74/0xa0 [ 2408.731936][T32409] ___sys_sendmsg+0x21f/0x2a0 [ 2408.731969][T32409] ? __pfx____sys_sendmsg+0x10/0x10 [ 2408.732042][T32409] ? __fget_files+0x2a/0x420 [ 2408.732061][T32409] ? __fget_files+0x3a0/0x420 [ 2408.732095][T32409] __sys_sendmmsg+0x227/0x430 [ 2408.732134][T32409] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2408.732161][T32409] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2408.732222][T32409] ? ksys_write+0x22a/0x250 [ 2408.732255][T32409] ? __pfx_ksys_write+0x10/0x10 [ 2408.732281][T32409] ? rcu_is_watching+0x15/0xb0 [ 2408.732312][T32409] __x64_sys_sendmmsg+0xa0/0xc0 [ 2408.732346][T32409] do_syscall_64+0xfa/0x3b0 [ 2408.732373][T32409] ? lockdep_hardirqs_on+0x9c/0x150 [ 2408.732399][T32409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.732421][T32409] ? clear_bhb_loop+0x60/0xb0 [ 2408.732449][T32409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2408.732472][T32409] RIP: 0033:0x7efe5958eba9 [ 2408.732492][T32409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2408.732512][T32409] RSP: 002b:00007efe5a3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2408.732536][T32409] RAX: ffffffffffffffda RBX: 00007efe597d5fa0 RCX: 00007efe5958eba9 [ 2408.732560][T32409] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 2408.732576][T32409] RBP: 00007efe5a3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 2408.732590][T32409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2408.732604][T32409] R13: 00007efe597d6038 R14: 00007efe597d5fa0 R15: 00007ffd46b386a8 [ 2408.732642][T32409] [ 2409.044426][T32411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17102'. [ 2409.181061][T32407] lo speed is unknown, defaulting to 1000 [ 2409.190497][T32407] lo speed is unknown, defaulting to 1000 [ 2409.191097][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2409.212043][T32414] netlink: 'syz.0.17102': attribute type 13 has an invalid length. [ 2409.267771][T32414] netlink: 'syz.0.17102': attribute type 17 has an invalid length. [ 2409.574549][T32418] netlink: 'syz.3.17101': attribute type 6 has an invalid length. [ 2409.657624][T32424] IPVS: Scheduler module ip_vs_sip not found [ 2409.813169][T32414] 1ªX¹¦À: left allmulticast mode [ 2409.818191][T32414] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 2409.981569][T32445] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17109'. [ 2409.992346][T32446] FAULT_INJECTION: forcing a failure. [ 2409.992346][T32446] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.019328][T32445] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17109'. [ 2410.041445][T32446] CPU: 1 UID: 0 PID: 32446 Comm: syz.4.17110 Not tainted syzkaller #0 PREEMPT(full) [ 2410.041477][T32446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2410.041492][T32446] Call Trace: [ 2410.041502][T32446] [ 2410.041512][T32446] dump_stack_lvl+0x189/0x250 [ 2410.041545][T32446] ? __pfx____ratelimit+0x10/0x10 [ 2410.041572][T32446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2410.041599][T32446] ? __pfx__printk+0x10/0x10 [ 2410.041649][T32446] ? __lock_acquire+0xab9/0xd20 [ 2410.041694][T32446] should_fail_ex+0x414/0x560 [ 2410.041734][T32446] should_failslab+0xa8/0x100 [ 2410.041771][T32446] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2410.041809][T32446] ? skb_clone+0x212/0x3a0 [ 2410.041848][T32446] skb_clone+0x212/0x3a0 [ 2410.041884][T32446] __netlink_deliver_tap+0x404/0x850 [ 2410.041927][T32446] ? netlink_deliver_tap+0x2e/0x1b0 [ 2410.041957][T32446] netlink_deliver_tap+0x19c/0x1b0 [ 2410.041986][T32446] netlink_unicast+0x7fa/0x9e0 [ 2410.042022][T32446] ? __pfx_netlink_unicast+0x10/0x10 [ 2410.042048][T32446] ? netlink_sendmsg+0x642/0xb30 [ 2410.042074][T32446] ? skb_put+0x11b/0x210 [ 2410.042106][T32446] netlink_sendmsg+0x805/0xb30 [ 2410.042147][T32446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2410.042196][T32446] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2410.042229][T32446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2410.042254][T32446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2410.042283][T32446] __sock_sendmsg+0x219/0x270 [ 2410.042310][T32446] ____sys_sendmsg+0x505/0x830 [ 2410.042349][T32446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2410.042392][T32446] ? import_iovec+0x74/0xa0 [ 2410.042427][T32446] ___sys_sendmsg+0x21f/0x2a0 [ 2410.042461][T32446] ? __pfx____sys_sendmsg+0x10/0x10 [ 2410.042538][T32446] ? __fget_files+0x2a/0x420 [ 2410.042557][T32446] ? __fget_files+0x3a0/0x420 [ 2410.042591][T32446] __x64_sys_sendmsg+0x19b/0x260 [ 2410.042626][T32446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2410.042669][T32446] ? __pfx_ksys_write+0x10/0x10 [ 2410.042696][T32446] ? rcu_is_watching+0x15/0xb0 [ 2410.042725][T32446] ? do_syscall_64+0xbe/0x3b0 [ 2410.042756][T32446] do_syscall_64+0xfa/0x3b0 [ 2410.042781][T32446] ? lockdep_hardirqs_on+0x9c/0x150 [ 2410.042806][T32446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.042829][T32446] ? clear_bhb_loop+0x60/0xb0 [ 2410.042857][T32446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.042879][T32446] RIP: 0033:0x7fd59b98eba9 [ 2410.042899][T32446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2410.042919][T32446] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2410.042943][T32446] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2410.042960][T32446] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 2410.042975][T32446] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2410.042989][T32446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.043003][T32446] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2410.043041][T32446] [ 2410.111078][T32422] lo speed is unknown, defaulting to 1000 [ 2410.179264][T32445] netlink: 36 bytes leftover after parsing attributes in process `syz.7.17109'. [ 2410.235391][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2410.428974][T32422] lo speed is unknown, defaulting to 1000 [ 2410.872857][T32456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17114'. [ 2410.887730][T32456] nbd: couldn't find a device at index -889192448 [ 2411.132442][T32467] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 2411.266845][T32468] lo speed is unknown, defaulting to 1000 [ 2411.273002][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2411.335539][T32468] lo speed is unknown, defaulting to 1000 [ 2411.532785][T32474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2411.569379][T32474] bond0: (slave bond2): Enslaving as an active interface with an up link [ 2411.814660][T32476] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 2411.843051][T32476] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 2411.906728][T32482] lo speed is unknown, defaulting to 1000 [ 2411.977426][T32482] lo speed is unknown, defaulting to 1000 [ 2412.311124][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2412.492464][T32521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17135'. [ 2412.704132][T32532] netlink: 'syz.3.17138': attribute type 1 has an invalid length. [ 2412.818655][T32538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17138'. [ 2412.882392][T32513] lo speed is unknown, defaulting to 1000 [ 2413.350850][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2413.451686][T32531] netlink: 'syz.6.17134': attribute type 6 has an invalid length. [ 2413.561153][T32513] lo speed is unknown, defaulting to 1000 [ 2413.690264][T32533] lo speed is unknown, defaulting to 1000 [ 2413.748247][T32533] lo speed is unknown, defaulting to 1000 [ 2414.015849][T32555] netlink: 'syz.7.17145': attribute type 13 has an invalid length. [ 2414.044126][T32557] netlink: 'syz.0.17146': attribute type 29 has an invalid length. [ 2414.056083][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17146'. [ 2414.343893][T32559] lo speed is unknown, defaulting to 1000 [ 2414.378656][T32555] lo speed is unknown, defaulting to 1000 [ 2414.391436][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2414.429821][T32563] lo speed is unknown, defaulting to 1000 [ 2414.439677][T32559] lo speed is unknown, defaulting to 1000 [ 2414.521588][T32555] lo speed is unknown, defaulting to 1000 [ 2414.555939][T32563] lo speed is unknown, defaulting to 1000 [ 2415.430835][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2415.531502][T32579] netlink: 'syz.4.17152': attribute type 1 has an invalid length. [ 2415.539391][T32579] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.17152'. [ 2415.653694][T32568] lo speed is unknown, defaulting to 1000 [ 2415.667455][T32568] lo speed is unknown, defaulting to 1000 [ 2415.700196][T32563] netlink: 'syz.0.17148': attribute type 6 has an invalid length. [ 2415.794479][T32581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17153'. [ 2416.472068][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2416.729259][T32605] lo speed is unknown, defaulting to 1000 [ 2416.739590][T32605] lo speed is unknown, defaulting to 1000 [ 2416.896630][T32601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17158'. [ 2417.206631][T32603] netlink: 'syz.7.17159': attribute type 6 has an invalid length. [ 2417.257654][T32613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17161'. [ 2417.510802][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2417.666269][T32627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17165'. [ 2417.849017][T32632] netlink: 'syz.7.17168': attribute type 29 has an invalid length. [ 2417.886563][T32632] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17168'. [ 2418.288663][T32644] netlink: 1042 bytes leftover after parsing attributes in process `syz.7.17172'. [ 2418.551166][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2418.725274][T32666] netlink: 'syz.6.17182': attribute type 1 has an invalid length. [ 2418.815668][T32673] FAULT_INJECTION: forcing a failure. [ 2418.815668][T32673] name failslab, interval 1, probability 0, space 0, times 0 [ 2418.896020][T32673] CPU: 0 UID: 0 PID: 32673 Comm: syz.4.17185 Not tainted syzkaller #0 PREEMPT(full) [ 2418.896054][T32673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2418.896068][T32673] Call Trace: [ 2418.896077][T32673] [ 2418.896087][T32673] dump_stack_lvl+0x189/0x250 [ 2418.896121][T32673] ? __pfx____ratelimit+0x10/0x10 [ 2418.896148][T32673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2418.896176][T32673] ? __pfx__printk+0x10/0x10 [ 2418.896214][T32673] ? __pfx___might_resched+0x10/0x10 [ 2418.896236][T32673] ? fs_reclaim_acquire+0x7d/0x100 [ 2418.896264][T32673] should_fail_ex+0x414/0x560 [ 2418.896305][T32673] should_failslab+0xa8/0x100 [ 2418.896341][T32673] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 2418.896371][T32673] ? __d_alloc+0x36/0x7a0 [ 2418.896400][T32673] __d_alloc+0x36/0x7a0 [ 2418.896431][T32673] d_alloc_parallel+0xe5/0x15e0 [ 2418.896473][T32673] ? __lock_acquire+0xab9/0xd20 [ 2418.896522][T32673] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2418.896555][T32673] ? __raw_spin_lock_init+0x45/0x100 [ 2418.896586][T32673] ? __init_waitqueue_head+0xa9/0x150 [ 2418.896621][T32673] __lookup_slow+0x116/0x3d0 [ 2418.896651][T32673] ? __pfx___lookup_slow+0x10/0x10 [ 2418.896691][T32673] ? d_lookup+0x8a/0xa0 [ 2418.896717][T32673] ? lookup_noperm+0x112/0x220 [ 2418.896749][T32673] simple_start_creating+0xfd/0x1e0 [ 2418.896772][T32673] ? __pfx_simple_start_creating+0x10/0x10 [ 2418.896809][T32673] start_creating+0x10f/0x180 [ 2418.896848][T32673] __debugfs_create_file+0x79/0x4f0 [ 2418.896890][T32673] debugfs_create_file_full+0x3f/0x60 [ 2418.896930][T32673] ref_tracker_dir_debugfs+0x14e/0x270 [ 2418.896954][T32673] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2418.897012][T32673] ? rcu_is_watching+0x15/0xb0 [ 2418.897034][T32673] ? alloc_netdev_mqs+0xa3/0x11b0 [ 2418.897076][T32673] ? __raw_spin_lock_init+0x45/0x100 [ 2418.897109][T32673] alloc_netdev_mqs+0x26f/0x11b0 [ 2418.897142][T32673] ? __pfx_macvlan_setup+0x10/0x10 [ 2418.897184][T32673] rtnl_create_link+0x31f/0xd10 [ 2418.897215][T32673] rtnl_newlink_create+0x25c/0xb00 [ 2418.897253][T32673] ? __lock_acquire+0xab9/0xd20 [ 2418.897293][T32673] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2418.897327][T32673] ? __pfx___mutex_lock+0x10/0x10 [ 2418.897365][T32673] ? full_name_hash+0xb0/0xe0 [ 2418.897400][T32673] rtnl_newlink+0x16d6/0x1c70 [ 2418.897430][T32673] ? netlink_sendmsg+0x805/0xb30 [ 2418.897474][T32673] ? __pfx_rtnl_newlink+0x10/0x10 [ 2418.897541][T32673] ? kasan_quarantine_put+0xdd/0x220 [ 2418.897570][T32673] ? lockdep_hardirqs_on+0x9c/0x150 [ 2418.897604][T32673] ? nlmon_xmit+0xb0/0x100 [ 2418.897629][T32673] ? kmem_cache_free+0x18f/0x400 [ 2418.897670][T32673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2418.897694][T32673] ? lockdep_hardirqs_on+0x9c/0x150 [ 2418.897722][T32673] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2418.897745][T32673] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2418.897773][T32673] ? __dev_queue_xmit+0x27b/0x3b50 [ 2418.897807][T32673] ? __dev_queue_xmit+0x27b/0x3b50 [ 2418.897838][T32673] ? __dev_queue_xmit+0x27b/0x3b50 [ 2418.897872][T32673] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2418.897913][T32673] ? __lock_acquire+0xab9/0xd20 [ 2418.897980][T32673] ? __pfx_rtnl_newlink+0x10/0x10 [ 2418.898006][T32673] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2418.898038][T32673] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2418.898063][T32673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2418.898087][T32673] ? ref_tracker_free+0x63a/0x7d0 [ 2418.898110][T32673] ? __asan_memcpy+0x40/0x70 [ 2418.898135][T32673] ? __pfx_ref_tracker_free+0x10/0x10 [ 2418.898172][T32673] netlink_rcv_skb+0x208/0x470 [ 2418.898202][T32673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2418.898230][T32673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2418.898273][T32673] ? netlink_deliver_tap+0x2e/0x1b0 [ 2418.898311][T32673] netlink_unicast+0x82c/0x9e0 [ 2418.898347][T32673] ? __pfx_netlink_unicast+0x10/0x10 [ 2418.898375][T32673] ? netlink_sendmsg+0x642/0xb30 [ 2418.898400][T32673] ? skb_put+0x11b/0x210 [ 2418.898434][T32673] netlink_sendmsg+0x805/0xb30 [ 2418.898474][T32673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2418.898513][T32673] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2418.898539][T32673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2418.898564][T32673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2418.898593][T32673] __sock_sendmsg+0x219/0x270 [ 2418.898621][T32673] ____sys_sendmsg+0x505/0x830 [ 2418.898659][T32673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2418.898702][T32673] ? import_iovec+0x74/0xa0 [ 2418.898738][T32673] ___sys_sendmsg+0x21f/0x2a0 [ 2418.898772][T32673] ? __pfx____sys_sendmsg+0x10/0x10 [ 2418.898848][T32673] ? __fget_files+0x2a/0x420 [ 2418.898868][T32673] ? __fget_files+0x3a0/0x420 [ 2418.898904][T32673] __x64_sys_sendmsg+0x19b/0x260 [ 2418.898939][T32673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2418.898981][T32673] ? __pfx_ksys_write+0x10/0x10 [ 2418.899019][T32673] ? do_syscall_64+0xbe/0x3b0 [ 2418.899051][T32673] do_syscall_64+0xfa/0x3b0 [ 2418.899076][T32673] ? lockdep_hardirqs_on+0x9c/0x150 [ 2418.899101][T32673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2418.899125][T32673] ? clear_bhb_loop+0x60/0xb0 [ 2418.899153][T32673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2418.899175][T32673] RIP: 0033:0x7fd59b98eba9 [ 2418.899195][T32673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2418.899216][T32673] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2418.899240][T32673] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2418.899258][T32673] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2418.899272][T32673] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2418.899286][T32673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2418.899298][T32673] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2418.899337][T32673] [ 2419.517614][T32680] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.17187'. [ 2419.590836][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2419.754563][T32689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17186'. [ 2420.533610][T30567] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2420.544364][T30567] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2420.606284][T30567] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2420.631172][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2420.640752][T30567] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2420.739731][T32698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17193'. [ 2420.779902][T32692] lo speed is unknown, defaulting to 1000 [ 2420.832057][T32692] lo speed is unknown, defaulting to 1000 [ 2420.979606][T32711] tipc: Enabling of bearer rejected, failed to enable media [ 2421.186783][T32721] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17203'. [ 2421.548665][T32733] netlink: 'syz.4.17209': attribute type 1 has an invalid length. [ 2421.577025][T32735] netlink: 'syz.7.17210': attribute type 4 has an invalid length. [ 2421.589914][T32733] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17209'. [ 2421.624871][T32733] netlink: 'syz.4.17209': attribute type 2 has an invalid length. [ 2421.631912][T32735] netlink: 'syz.7.17210': attribute type 4 has an invalid length. [ 2421.666883][T32733] netlink: 'syz.4.17209': attribute type 1 has an invalid length. [ 2421.670834][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2421.734318][T32740] netlink: 'syz.3.17212': attribute type 39 has an invalid length. [ 2421.759889][T32738] lo speed is unknown, defaulting to 1000 [ 2421.915986][T32738] lo speed is unknown, defaulting to 1000 [ 2422.228421][T32753] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2422.711135][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2423.521508][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17233'. [ 2423.750929][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2424.017286][ T323] lo speed is unknown, defaulting to 1000 [ 2424.077024][ T323] lo speed is unknown, defaulting to 1000 [ 2424.335638][ T347] netlink: 'syz.6.17238': attribute type 29 has an invalid length. [ 2424.344783][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17238'. [ 2424.457395][ T344] lo speed is unknown, defaulting to 1000 [ 2424.515016][ T344] lo speed is unknown, defaulting to 1000 [ 2424.522440][ T348] lo speed is unknown, defaulting to 1000 [ 2424.529509][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17239'. [ 2424.614577][ T348] lo speed is unknown, defaulting to 1000 [ 2424.791373][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2425.204369][ T356] netlink: 'syz.3.17236': attribute type 6 has an invalid length. [ 2425.600123][ T379] tipc: Enabling of bearer rejected, failed to enable media [ 2425.759429][ T383] vti0: entered promiscuous mode [ 2425.801407][ T385] netlink: 830 bytes leftover after parsing attributes in process `syz.3.17248'. [ 2425.821098][ T387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17249'. [ 2425.830793][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2426.871130][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2427.108072][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17258'. [ 2427.186982][ T411] lo speed is unknown, defaulting to 1000 [ 2427.196066][ T411] lo speed is unknown, defaulting to 1000 [ 2427.310396][ T420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17259'. [ 2427.628599][ T433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17263'. [ 2427.910845][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2428.126025][ T424] netlink: 'syz.6.17257': attribute type 6 has an invalid length. [ 2428.337966][ T436] lo speed is unknown, defaulting to 1000 [ 2428.633009][ T436] lo speed is unknown, defaulting to 1000 [ 2428.670459][ T448] tipc: Enabled bearer , priority 0 [ 2428.687054][ T449] syzkaller0: entered promiscuous mode [ 2428.709135][ T449] syzkaller0: entered allmulticast mode [ 2428.716758][ T452] tipc: Enabling of bearer rejected, failed to enable media [ 2428.819835][ T448] tipc: Resetting bearer [ 2428.889644][ T457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17268'. [ 2428.951210][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2429.027476][ T447] tipc: Resetting bearer [ 2429.058908][ T447] tipc: Disabling bearer [ 2429.087121][ T459] wg1: entered promiscuous mode [ 2429.104324][ T459] wg1: entered allmulticast mode [ 2429.362633][ T471] netlink: 'syz.3.17272': attribute type 32 has an invalid length. [ 2429.510419][ T477] netlink: 'syz.4.17275': attribute type 1 has an invalid length. [ 2429.536170][ T477] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.17275'. [ 2429.780632][ T484] FAULT_INJECTION: forcing a failure. [ 2429.780632][ T484] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.793556][ T484] CPU: 0 UID: 0 PID: 484 Comm: syz.4.17278 Not tainted syzkaller #0 PREEMPT(full) [ 2429.793587][ T484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2429.793602][ T484] Call Trace: [ 2429.793613][ T484] [ 2429.793623][ T484] dump_stack_lvl+0x189/0x250 [ 2429.793657][ T484] ? __pfx____ratelimit+0x10/0x10 [ 2429.793685][ T484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2429.793718][ T484] ? __pfx__printk+0x10/0x10 [ 2429.793758][ T484] ? __lock_acquire+0xab9/0xd20 [ 2429.793798][ T484] should_fail_ex+0x414/0x560 [ 2429.793839][ T484] should_failslab+0xa8/0x100 [ 2429.793875][ T484] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 2429.793911][ T484] ? pfn_valid+0x125/0x4d0 [ 2429.793940][ T484] ? pfn_valid+0x125/0x4d0 [ 2429.793965][ T484] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 2429.794002][ T484] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 2429.794045][ T484] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 2429.794087][ T484] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2429.794113][ T484] ? 0xffffffffa02057c0 [ 2429.794136][ T484] ? 0xffffffffa02057c0 [ 2429.794177][ T484] ? 0xffffffffa020188c [ 2429.794192][ T484] ? 0xffffffffa02018d8 [ 2429.794207][ T484] ? 0xffffffffa020190c [ 2429.794223][ T484] ? 0xffffffffa0201a70 [ 2429.794270][ T484] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2429.794306][ T484] ? _copy_from_user+0x94/0xb0 [ 2429.794334][ T484] ? bpf_test_init+0x133/0x170 [ 2429.794356][ T484] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2429.794385][ T484] bpf_prog_test_run_xdp+0x713/0x1000 [ 2429.794431][ T484] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2429.794465][ T484] ? __fget_files+0x2a/0x420 [ 2429.794491][ T484] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2429.794518][ T484] bpf_prog_test_run+0x2c7/0x340 [ 2429.794553][ T484] __sys_bpf+0x581/0x870 [ 2429.794584][ T484] ? __pfx___sys_bpf+0x10/0x10 [ 2429.794631][ T484] ? ksys_write+0x22a/0x250 [ 2429.794664][ T484] ? __pfx_ksys_write+0x10/0x10 [ 2429.794701][ T484] ? rcu_is_watching+0x15/0xb0 [ 2429.794733][ T484] __x64_sys_bpf+0x7c/0x90 [ 2429.794762][ T484] do_syscall_64+0xfa/0x3b0 [ 2429.794789][ T484] ? lockdep_hardirqs_on+0x9c/0x150 [ 2429.794815][ T484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2429.794838][ T484] ? clear_bhb_loop+0x60/0xb0 [ 2429.794866][ T484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2429.794888][ T484] RIP: 0033:0x7fd59b98eba9 [ 2429.794908][ T484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2429.794927][ T484] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2429.794952][ T484] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2429.794969][ T484] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2429.794984][ T484] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2429.794999][ T484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2429.795012][ T484] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2429.795050][ T484] [ 2429.990867][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2430.199399][ T488] lo speed is unknown, defaulting to 1000 [ 2430.209049][ T491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17279'. [ 2430.233444][ T488] lo speed is unknown, defaulting to 1000 [ 2430.257487][ T492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17282'. [ 2430.287708][ T493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17280'. [ 2430.518824][ T500] lo speed is unknown, defaulting to 1000 [ 2430.677579][ T509] netlink: 72 bytes leftover after parsing attributes in process `syz.6.17286'. [ 2430.724472][ T500] lo speed is unknown, defaulting to 1000 [ 2430.897944][ T512] netlink: 108 bytes leftover after parsing attributes in process `syz.7.17288'. [ 2430.927353][ T512] netlink: 108 bytes leftover after parsing attributes in process `syz.7.17288'. [ 2431.030889][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2431.493021][ T529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17293'. [ 2431.809218][ T537] tun0: tun_chr_ioctl cmd 1074025675 [ 2431.814940][ T537] tun0: persist enabled [ 2432.004433][ T543] FAULT_INJECTION: forcing a failure. [ 2432.004433][ T543] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.031112][ T543] CPU: 0 UID: 0 PID: 543 Comm: syz.4.17298 Not tainted syzkaller #0 PREEMPT(full) [ 2432.031145][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2432.031160][ T543] Call Trace: [ 2432.031170][ T543] [ 2432.031180][ T543] dump_stack_lvl+0x189/0x250 [ 2432.031213][ T543] ? __pfx____ratelimit+0x10/0x10 [ 2432.031241][ T543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2432.031269][ T543] ? __pfx__printk+0x10/0x10 [ 2432.031321][ T543] should_fail_ex+0x414/0x560 [ 2432.031389][ T543] should_failslab+0xa8/0x100 [ 2432.031430][ T543] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2432.031462][ T543] ? skb_clone+0x212/0x3a0 [ 2432.031501][ T543] skb_clone+0x212/0x3a0 [ 2432.031546][ T543] __netlink_deliver_tap+0x404/0x850 [ 2432.031590][ T543] ? netlink_deliver_tap+0x2e/0x1b0 [ 2432.031621][ T543] netlink_deliver_tap+0x19c/0x1b0 [ 2432.031650][ T543] netlink_sendskb+0x68/0x140 [ 2432.031678][ T543] netlink_unicast+0x397/0x9e0 [ 2432.031711][ T543] ? __pfx_netlink_unicast+0x10/0x10 [ 2432.031734][ T543] ? __alloc_skb+0x1bc/0x2d0 [ 2432.031769][ T543] nlmsg_notify+0x12e/0x1a0 [ 2432.031800][ T543] tc_modify_qdisc+0x1c04/0x20e0 [ 2432.031857][ T543] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 2432.031927][ T543] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 2432.031967][ T543] rtnetlink_rcv_msg+0x779/0xb70 [ 2432.031999][ T543] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2432.032025][ T543] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2432.032049][ T543] ? ref_tracker_free+0x63a/0x7d0 [ 2432.032072][ T543] ? __asan_memcpy+0x40/0x70 [ 2432.032099][ T543] ? __pfx_ref_tracker_free+0x10/0x10 [ 2432.032136][ T543] netlink_rcv_skb+0x208/0x470 [ 2432.032161][ T543] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2432.032187][ T543] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2432.032227][ T543] ? netlink_deliver_tap+0x2e/0x1b0 [ 2432.032266][ T543] netlink_unicast+0x82c/0x9e0 [ 2432.032313][ T543] ? __pfx_netlink_unicast+0x10/0x10 [ 2432.032337][ T543] ? netlink_sendmsg+0x642/0xb30 [ 2432.032363][ T543] ? skb_put+0x11b/0x210 [ 2432.032397][ T543] netlink_sendmsg+0x805/0xb30 [ 2432.032438][ T543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2432.032472][ T543] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2432.032497][ T543] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2432.032520][ T543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2432.032551][ T543] __sock_sendmsg+0x219/0x270 [ 2432.032575][ T543] ____sys_sendmsg+0x52d/0x830 [ 2432.032609][ T543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2432.032646][ T543] ? import_iovec+0x74/0xa0 [ 2432.032677][ T543] ___sys_sendmsg+0x21f/0x2a0 [ 2432.032707][ T543] ? __pfx____sys_sendmsg+0x10/0x10 [ 2432.032785][ T543] ? __might_fault+0xb0/0x130 [ 2432.032827][ T543] __sys_sendmmsg+0x227/0x430 [ 2432.032861][ T543] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2432.032885][ T543] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2432.032943][ T543] ? ksys_write+0x22a/0x250 [ 2432.032974][ T543] ? __pfx_ksys_write+0x10/0x10 [ 2432.032999][ T543] ? rcu_is_watching+0x15/0xb0 [ 2432.033028][ T543] __x64_sys_sendmmsg+0xa0/0xc0 [ 2432.033060][ T543] do_syscall_64+0xfa/0x3b0 [ 2432.033085][ T543] ? lockdep_hardirqs_on+0x9c/0x150 [ 2432.033109][ T543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2432.033130][ T543] ? clear_bhb_loop+0x60/0xb0 [ 2432.033160][ T543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2432.033182][ T543] RIP: 0033:0x7fd59b98eba9 [ 2432.033203][ T543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2432.033221][ T543] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2432.033245][ T543] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2432.033261][ T543] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 2432.033275][ T543] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2432.033290][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2432.033302][ T543] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2432.033339][ T543] [ 2432.070884][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2432.239595][ T544] lo speed is unknown, defaulting to 1000 [ 2432.519456][ T555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17301'. [ 2432.524931][ T544] lo speed is unknown, defaulting to 1000 [ 2432.536235][ T548] lo speed is unknown, defaulting to 1000 [ 2432.647435][ T548] lo speed is unknown, defaulting to 1000 [ 2433.110964][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2433.237610][ T557] netlink: 'syz.3.17299': attribute type 6 has an invalid length. [ 2433.249828][ T569] netlink: 'syz.4.17306': attribute type 4 has an invalid length. [ 2433.435946][ T573] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.17307'. [ 2433.486483][ T573] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 2433.551797][ T573] openvswitch: netlink: Message has 1 unknown bytes. [ 2433.759434][ T583] tun0: tun_chr_ioctl cmd 1074025675 [ 2433.801958][ T583] tun0: persist enabled [ 2434.157507][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2434.592626][ T603] lo speed is unknown, defaulting to 1000 [ 2434.629004][ T603] lo speed is unknown, defaulting to 1000 [ 2434.953421][ T615] __nla_validate_parse: 3 callbacks suppressed [ 2434.953442][ T615] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17320'. [ 2435.190782][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2435.264262][ T623] FAULT_INJECTION: forcing a failure. [ 2435.264262][ T623] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.276998][ T623] CPU: 0 UID: 0 PID: 623 Comm: syz.4.17323 Not tainted syzkaller #0 PREEMPT(full) [ 2435.277026][ T623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2435.277039][ T623] Call Trace: [ 2435.277048][ T623] [ 2435.277058][ T623] dump_stack_lvl+0x189/0x250 [ 2435.277088][ T623] ? __pfx____ratelimit+0x10/0x10 [ 2435.277112][ T623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2435.277135][ T623] ? __pfx__printk+0x10/0x10 [ 2435.277169][ T623] ? __lock_acquire+0xab9/0xd20 [ 2435.277203][ T623] should_fail_ex+0x414/0x560 [ 2435.277238][ T623] should_failslab+0xa8/0x100 [ 2435.277273][ T623] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 2435.277310][ T623] ? pfn_valid+0x125/0x4d0 [ 2435.277339][ T623] ? pfn_valid+0x125/0x4d0 [ 2435.277363][ T623] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 2435.277400][ T623] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 2435.277443][ T623] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 2435.277485][ T623] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2435.277516][ T623] ? 0xffffffffa02057c0 [ 2435.277535][ T623] ? 0xffffffffa02057c0 [ 2435.277571][ T623] ? 0xffffffffa020188c [ 2435.277586][ T623] ? 0xffffffffa02018d8 [ 2435.277601][ T623] ? 0xffffffffa020190c [ 2435.277616][ T623] ? 0xffffffffa02019e8 [ 2435.277658][ T623] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2435.277691][ T623] ? _copy_from_user+0x94/0xb0 [ 2435.277718][ T623] ? bpf_test_init+0x133/0x170 [ 2435.277738][ T623] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2435.277764][ T623] bpf_prog_test_run_xdp+0x713/0x1000 [ 2435.277805][ T623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2435.277834][ T623] ? __fget_files+0x2a/0x420 [ 2435.277858][ T623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2435.277882][ T623] bpf_prog_test_run+0x2c7/0x340 [ 2435.277915][ T623] __sys_bpf+0x581/0x870 [ 2435.277943][ T623] ? __pfx___sys_bpf+0x10/0x10 [ 2435.277983][ T623] ? ksys_write+0x22a/0x250 [ 2435.278012][ T623] ? __pfx_ksys_write+0x10/0x10 [ 2435.278035][ T623] ? rcu_is_watching+0x15/0xb0 [ 2435.278063][ T623] __x64_sys_bpf+0x7c/0x90 [ 2435.278087][ T623] do_syscall_64+0xfa/0x3b0 [ 2435.278110][ T623] ? lockdep_hardirqs_on+0x9c/0x150 [ 2435.278133][ T623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2435.278151][ T623] ? clear_bhb_loop+0x60/0xb0 [ 2435.278176][ T623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2435.278195][ T623] RIP: 0033:0x7fd59b98eba9 [ 2435.278213][ T623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2435.278230][ T623] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2435.278251][ T623] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2435.278270][ T623] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2435.278285][ T623] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2435.278299][ T623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2435.278313][ T623] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2435.278351][ T623] [ 2435.656928][ T628] netlink: 'syz.6.17325': attribute type 13 has an invalid length. [ 2435.665796][ T628] netlink: 'syz.6.17325': attribute type 17 has an invalid length. [ 2435.752046][ T628] xfrm0: entered promiscuous mode [ 2435.758481][ T628] xfrm0: entered allmulticast mode [ 2435.772047][ T628] openvswitch: netlink: IP tunnel dst address not specified [ 2435.800824][ T628] lo speed is unknown, defaulting to 1000 [ 2435.809537][ T628] lo speed is unknown, defaulting to 1000 [ 2435.904958][ T633] netlink: del zone limit has 4 unknown bytes [ 2436.230799][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2436.306168][ T653] netlink: 'syz.3.17334': attribute type 1 has an invalid length. [ 2436.333769][ T653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17334'. [ 2436.361796][ T653] netlink: 'syz.3.17334': attribute type 1 has an invalid length. [ 2436.369775][ T653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17334'. [ 2436.720518][ T664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17340'. [ 2436.770389][ T667] netlink: 'syz.4.17341': attribute type 3 has an invalid length. [ 2436.952101][ T677] tun1: tun_chr_ioctl cmd 1074025675 [ 2436.969597][ T677] tun1: persist enabled [ 2437.059432][ T679] lo speed is unknown, defaulting to 1000 [ 2437.073454][ T679] lo speed is unknown, defaulting to 1000 [ 2437.136837][ T673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17343'. [ 2437.184613][ T673] 8021q: VLANs not supported on ip_vti0 [ 2437.270789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2438.070297][ T714] lo speed is unknown, defaulting to 1000 [ 2438.102932][ T712] lo speed is unknown, defaulting to 1000 [ 2438.126317][ T712] lo speed is unknown, defaulting to 1000 [ 2438.310820][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2438.327749][ T714] lo speed is unknown, defaulting to 1000 [ 2438.719920][ T736] netlink: 1030 bytes leftover after parsing attributes in process `syz.7.17359'. [ 2438.845369][ T740] tun0: tun_chr_ioctl cmd 1074025675 [ 2438.870570][ T740] tun0: persist enabled [ 2438.938554][ T748] netlink: 'syz.3.17364': attribute type 3 has an invalid length. [ 2438.947688][ T748] netlink: 172168 bytes leftover after parsing attributes in process `syz.3.17364'. [ 2438.996691][ T745] lo speed is unknown, defaulting to 1000 [ 2439.028761][ T745] lo speed is unknown, defaulting to 1000 [ 2439.304154][ T758] netlink: 'syz.6.17368': attribute type 13 has an invalid length. [ 2439.331606][ T758] netlink: 'syz.6.17368': attribute type 17 has an invalid length. [ 2439.350862][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2439.634029][ T758] wg1: left promiscuous mode [ 2439.638743][ T758] wg1: left allmulticast mode [ 2439.814596][ T758] xfrm0: left promiscuous mode [ 2439.819463][ T758] xfrm0: left allmulticast mode [ 2440.080184][ T758] vti0: left promiscuous mode [ 2440.228885][ T759] lo speed is unknown, defaulting to 1000 [ 2440.238216][ T759] lo speed is unknown, defaulting to 1000 [ 2440.390815][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2440.703784][ T782] tun1: tun_chr_ioctl cmd 1074025675 [ 2440.722075][ T782] tun1: persist disabled [ 2440.899419][ T786] siw: device registration error -23 [ 2441.431350][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2441.449977][ T791] wg2: entered promiscuous mode [ 2441.455536][ T791] wg2: entered allmulticast mode [ 2441.529137][ T793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17379'. [ 2441.814120][ T5864] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2441.835692][ T5864] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2441.846596][ T5864] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2441.856689][ T5864] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2441.865024][ T5864] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2442.013381][ T797] lo speed is unknown, defaulting to 1000 [ 2442.036056][ T797] lo speed is unknown, defaulting to 1000 [ 2442.240532][ T808] FAULT_INJECTION: forcing a failure. [ 2442.240532][ T808] name failslab, interval 1, probability 0, space 0, times 0 [ 2442.292670][ T808] CPU: 1 UID: 0 PID: 808 Comm: syz.3.17383 Not tainted syzkaller #0 PREEMPT(full) [ 2442.292709][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2442.292723][ T808] Call Trace: [ 2442.292733][ T808] [ 2442.292744][ T808] dump_stack_lvl+0x189/0x250 [ 2442.292777][ T808] ? __pfx____ratelimit+0x10/0x10 [ 2442.292804][ T808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2442.292832][ T808] ? __pfx__printk+0x10/0x10 [ 2442.292871][ T808] ? __pfx___might_resched+0x10/0x10 [ 2442.292901][ T808] should_fail_ex+0x414/0x560 [ 2442.292943][ T808] should_failslab+0xa8/0x100 [ 2442.292978][ T808] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2442.293011][ T808] ? __alloc_skb+0x112/0x2d0 [ 2442.293036][ T808] ? __pfx_netlink_unicast+0x10/0x10 [ 2442.293066][ T808] __alloc_skb+0x112/0x2d0 [ 2442.293099][ T808] netlink_sendmsg+0x5c6/0xb30 [ 2442.293138][ T808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2442.293171][ T808] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2442.293198][ T808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2442.293223][ T808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2442.293253][ T808] __sock_sendmsg+0x219/0x270 [ 2442.293290][ T808] ____sys_sendmsg+0x52d/0x830 [ 2442.293329][ T808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2442.293372][ T808] ? import_iovec+0x74/0xa0 [ 2442.293407][ T808] ___sys_sendmsg+0x21f/0x2a0 [ 2442.293442][ T808] ? __pfx____sys_sendmsg+0x10/0x10 [ 2442.293528][ T808] ? __might_fault+0xb0/0x130 [ 2442.293564][ T808] __sys_sendmmsg+0x227/0x430 [ 2442.293602][ T808] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2442.293631][ T808] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2442.293701][ T808] ? ksys_write+0x22a/0x250 [ 2442.293735][ T808] ? __pfx_ksys_write+0x10/0x10 [ 2442.293761][ T808] ? rcu_is_watching+0x15/0xb0 [ 2442.293793][ T808] __x64_sys_sendmmsg+0xa0/0xc0 [ 2442.293827][ T808] do_syscall_64+0xfa/0x3b0 [ 2442.293854][ T808] ? lockdep_hardirqs_on+0x9c/0x150 [ 2442.293879][ T808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.293901][ T808] ? clear_bhb_loop+0x60/0xb0 [ 2442.293929][ T808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2442.293952][ T808] RIP: 0033:0x7f431738eba9 [ 2442.293971][ T808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2442.293991][ T808] RSP: 002b:00007f43155f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2442.294014][ T808] RAX: ffffffffffffffda RBX: 00007f43175d5fa0 RCX: 00007f431738eba9 [ 2442.294031][ T808] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000009 [ 2442.294047][ T808] RBP: 00007f43155f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2442.294063][ T808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2442.294076][ T808] R13: 00007f43175d6038 R14: 00007f43175d5fa0 R15: 00007ffe4c8f19b8 [ 2442.294114][ T808] [ 2442.579121][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2442.819926][ T797] chnl_net:caif_netlink_parms(): no params data found [ 2443.108867][ T827] tipc: Enabling of bearer rejected, failed to enable media [ 2443.139223][ T825] netlink: 'syz.7.17387': attribute type 2 has an invalid length. [ 2443.150127][ T797] bridge0: port 1(bridge_slave_0) entered blocking state [ 2443.185675][ T797] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.202189][ T825] netlink: 'syz.7.17387': attribute type 1 has an invalid length. [ 2443.227345][ T797] bridge_slave_0: entered allmulticast mode [ 2443.235263][ T825] netlink: 224 bytes leftover after parsing attributes in process `syz.7.17387'. [ 2443.274059][ T797] bridge_slave_0: entered promiscuous mode [ 2443.299351][ T797] bridge0: port 2(bridge_slave_1) entered blocking state [ 2443.313666][ T797] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.332947][ T797] bridge_slave_1: entered allmulticast mode [ 2443.357446][ T797] bridge_slave_1: entered promiscuous mode [ 2443.590816][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2443.640370][ T797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2443.765340][ T797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2443.795907][ T837] lo speed is unknown, defaulting to 1000 [ 2443.883794][ T855] netlink: 'syz.3.17395': attribute type 1 has an invalid length. [ 2443.901529][ T855] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.17395'. [ 2443.914215][ T522] Bluetooth: hci8: command tx timeout [ 2443.921969][ T837] lo speed is unknown, defaulting to 1000 [ 2443.945455][ T797] team0: Port device team_slave_0 added [ 2444.010378][ T797] team0: Port device team_slave_1 added [ 2444.134912][ T797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2444.155401][ T797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2444.198362][ T797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2444.252555][ T863] netlink: 224 bytes leftover after parsing attributes in process `syz.6.17397'. [ 2444.354015][ T861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17397'. [ 2444.427918][ T861] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17397'. [ 2444.448751][ T861] netlink: 'syz.6.17397': attribute type 4 has an invalid length. [ 2444.529055][ T797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2444.568376][ T797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2444.631834][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2444.659848][ T797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2445.259762][ T797] hsr_slave_0: entered promiscuous mode [ 2445.323060][ T797] hsr_slave_1: entered promiscuous mode [ 2445.329963][ T797] debugfs: 'hsr0' already exists in 'hsr' [ 2445.347258][ T797] Cannot create hsr debugfs directory [ 2445.670846][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2445.784665][ T883] IPVS: Scheduler module ip_vs_sip not found [ 2445.991631][ T522] Bluetooth: hci8: command tx timeout [ 2446.071944][ T900] tipc: Started in network mode [ 2446.077052][ T900] tipc: Node identity ac14140f, cluster identity 4711 [ 2446.087408][ T900] tipc: New replicast peer: 255.255.255.255 [ 2446.095250][ T900] tipc: Enabled bearer , priority 10 [ 2446.360039][ T797] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2446.466062][ T797] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2446.546243][ T797] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2446.584508][ T797] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2446.710848][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2446.977258][ T948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17421'. [ 2447.174570][ T797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2447.221727][T31835] tipc: Node number set to 2886997007 [ 2447.335700][ T797] 8021q: adding VLAN 0 to HW filter on device team0 [ 2447.385694][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2447.393062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2447.486899][ T553] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.494238][ T553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2447.665467][ T961] netlink: 830 bytes leftover after parsing attributes in process `syz.6.17428'. [ 2447.750870][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2448.071645][ T5864] Bluetooth: hci8: command tx timeout [ 2448.175185][ T954] lo speed is unknown, defaulting to 1000 [ 2448.248583][ T954] lo speed is unknown, defaulting to 1000 [ 2448.370229][T22819] IPVS: starting estimator thread 0... [ 2448.470895][ T980] IPVS: using max 29 ests per chain, 69600 per kthread [ 2448.486993][ T797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2448.791359][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2448.836431][ T986] IPVS: Scheduler module ip_vs_sip not found [ 2448.843935][ T993] netlink: 'syz.3.17436': attribute type 1 has an invalid length. [ 2448.867764][ T993] netlink: 'syz.3.17436': attribute type 1 has an invalid length. [ 2448.924196][ T993] netlink: 184 bytes leftover after parsing attributes in process `syz.3.17436'. [ 2449.273458][ T5864] Bluetooth: hci5: command 0x0406 tx timeout [ 2449.423586][ T1011] FAULT_INJECTION: forcing a failure. [ 2449.423586][ T1011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2449.473099][ T1011] CPU: 0 UID: 0 PID: 1011 Comm: syz.4.17440 Not tainted syzkaller #0 PREEMPT(full) [ 2449.473133][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2449.473147][ T1011] Call Trace: [ 2449.473157][ T1011] [ 2449.473167][ T1011] dump_stack_lvl+0x189/0x250 [ 2449.473201][ T1011] ? __pfx____ratelimit+0x10/0x10 [ 2449.473229][ T1011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2449.473258][ T1011] ? __pfx__printk+0x10/0x10 [ 2449.473305][ T1011] should_fail_ex+0x414/0x560 [ 2449.473347][ T1011] _copy_to_user+0x31/0xb0 [ 2449.473380][ T1011] simple_read_from_buffer+0xe1/0x170 [ 2449.473421][ T1011] proc_fail_nth_read+0x1b3/0x220 [ 2449.473474][ T1011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2449.473505][ T1011] ? rw_verify_area+0x2a6/0x4d0 [ 2449.473533][ T1011] ? __lock_acquire+0xab9/0xd20 [ 2449.473565][ T1011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2449.473593][ T1011] vfs_read+0x200/0xa30 [ 2449.473622][ T1011] ? fdget_pos+0x247/0x320 [ 2449.473648][ T1011] ? __pfx___mutex_lock+0x10/0x10 [ 2449.473678][ T1011] ? __pfx_vfs_read+0x10/0x10 [ 2449.473710][ T1011] ? __fget_files+0x2a/0x420 [ 2449.473735][ T1011] ? __fget_files+0x3a0/0x420 [ 2449.473755][ T1011] ? __fget_files+0x2a/0x420 [ 2449.473786][ T1011] ksys_read+0x145/0x250 [ 2449.473819][ T1011] ? __pfx_ksys_read+0x10/0x10 [ 2449.473846][ T1011] ? rcu_is_watching+0x15/0xb0 [ 2449.473876][ T1011] ? do_syscall_64+0xbe/0x3b0 [ 2449.473910][ T1011] do_syscall_64+0xfa/0x3b0 [ 2449.473936][ T1011] ? lockdep_hardirqs_on+0x9c/0x150 [ 2449.473962][ T1011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2449.473985][ T1011] ? clear_bhb_loop+0x60/0xb0 [ 2449.474014][ T1011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2449.474035][ T1011] RIP: 0033:0x7fd59b98d5bc [ 2449.474056][ T1011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2449.474075][ T1011] RSP: 002b:00007fd59c8e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2449.474098][ T1011] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98d5bc [ 2449.474115][ T1011] RDX: 000000000000000f RSI: 00007fd59c8e50a0 RDI: 0000000000000005 [ 2449.474133][ T1011] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2449.474148][ T1011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.474162][ T1011] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2449.474199][ T1011] [ 2449.830788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2449.967073][ T1021] macsec1: entered promiscuous mode [ 2450.014826][ T1021] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 2450.027809][ T1025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17443'. [ 2450.039665][ T797] veth0_vlan: entered promiscuous mode [ 2450.079847][ T797] veth1_vlan: entered promiscuous mode [ 2450.105040][ T1027] batadv2: entered allmulticast mode [ 2450.113275][ T1027] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2450.151564][ T522] Bluetooth: hci8: command tx timeout [ 2450.273730][ T797] veth0_macvtap: entered promiscuous mode [ 2450.326948][ T797] veth1_macvtap: entered promiscuous mode [ 2450.436831][ T797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2450.523760][ T797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2450.662605][ T1044] lo speed is unknown, defaulting to 1000 [ 2450.667773][T30573] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.692490][T30573] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.735477][T30573] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.778490][ T1044] lo speed is unknown, defaulting to 1000 [ 2450.809787][T30573] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2450.870996][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2451.130434][ T1072] netlink: 32 bytes leftover after parsing attributes in process `syz.7.17455'. [ 2451.221821][ T1070] lo speed is unknown, defaulting to 1000 [ 2451.468031][ T1070] lo speed is unknown, defaulting to 1000 [ 2451.857773][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17458'. [ 2451.910810][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2451.955188][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2451.968662][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.059252][ T1070] netlink: 'syz.3.17454': attribute type 6 has an invalid length. [ 2452.236453][ T1100] netlink: 'syz.7.17460': attribute type 29 has an invalid length. [ 2452.257722][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17460'. [ 2452.306524][ T8578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2452.339354][ T8578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.423378][ T1105] gretap1: entered allmulticast mode [ 2452.465157][ T1102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17461'. [ 2452.692572][ T1104] lo speed is unknown, defaulting to 1000 [ 2452.700261][ T1104] lo speed is unknown, defaulting to 1000 [ 2452.877855][ T1112] IPVS: Scheduler module ip_vs_sip not found [ 2452.951562][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2452.964135][ T1116] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17375'. [ 2453.248945][ T1125] netlink: 32 bytes leftover after parsing attributes in process `syz.8.17466'. [ 2453.658301][ T1134] lo speed is unknown, defaulting to 1000 [ 2453.679865][ T1134] lo speed is unknown, defaulting to 1000 [ 2453.709272][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17475'. [ 2453.765667][ T1147] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17476'. [ 2453.990778][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2454.407317][ T1149] netlink: 'syz.8.17472': attribute type 6 has an invalid length. [ 2454.506737][ T1165] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17482'. [ 2454.512886][ T1163] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:0 [ 2454.732163][ T1172] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 2454.856062][ T1176] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2455.030807][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2455.106922][ T1179] FAULT_INJECTION: forcing a failure. [ 2455.106922][ T1179] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.164479][ T1179] CPU: 1 UID: 0 PID: 1179 Comm: syz.6.17487 Not tainted syzkaller #0 PREEMPT(full) [ 2455.164513][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2455.164529][ T1179] Call Trace: [ 2455.164539][ T1179] [ 2455.164550][ T1179] dump_stack_lvl+0x189/0x250 [ 2455.164584][ T1179] ? __pfx____ratelimit+0x10/0x10 [ 2455.164612][ T1179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2455.164639][ T1179] ? __pfx__printk+0x10/0x10 [ 2455.164679][ T1179] ? __pfx___might_resched+0x10/0x10 [ 2455.164701][ T1179] ? fs_reclaim_acquire+0x7d/0x100 [ 2455.164728][ T1179] should_fail_ex+0x414/0x560 [ 2455.164769][ T1179] should_failslab+0xa8/0x100 [ 2455.164804][ T1179] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2455.164837][ T1179] ? __alloc_skb+0x112/0x2d0 [ 2455.164869][ T1179] __alloc_skb+0x112/0x2d0 [ 2455.164904][ T1179] netlink_ack+0x146/0xa50 [ 2455.164927][ T1179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2455.164970][ T1179] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 2455.165009][ T1179] netlink_rcv_skb+0x28c/0x470 [ 2455.165031][ T1179] ? rcu_is_watching+0x15/0xb0 [ 2455.165053][ T1179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2455.165161][ T1179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2455.165205][ T1179] ? netlink_deliver_tap+0x2e/0x1b0 [ 2455.165241][ T1179] netlink_unicast+0x82c/0x9e0 [ 2455.165275][ T1179] ? __pfx_netlink_unicast+0x10/0x10 [ 2455.165301][ T1179] ? netlink_sendmsg+0x642/0xb30 [ 2455.165325][ T1179] ? skb_put+0x11b/0x210 [ 2455.165357][ T1179] netlink_sendmsg+0x805/0xb30 [ 2455.165397][ T1179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2455.165428][ T1179] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2455.165454][ T1179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2455.165479][ T1179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2455.165507][ T1179] __sock_sendmsg+0x219/0x270 [ 2455.165534][ T1179] ____sys_sendmsg+0x505/0x830 [ 2455.165572][ T1179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2455.165615][ T1179] ? import_iovec+0x74/0xa0 [ 2455.165650][ T1179] ___sys_sendmsg+0x21f/0x2a0 [ 2455.165683][ T1179] ? __pfx____sys_sendmsg+0x10/0x10 [ 2455.165766][ T1179] ? __fget_files+0x2a/0x420 [ 2455.165784][ T1179] ? __fget_files+0x3a0/0x420 [ 2455.165817][ T1179] __x64_sys_sendmsg+0x19b/0x260 [ 2455.165852][ T1179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2455.165895][ T1179] ? __pfx_ksys_write+0x10/0x10 [ 2455.165921][ T1179] ? rcu_is_watching+0x15/0xb0 [ 2455.165949][ T1179] ? do_syscall_64+0xbe/0x3b0 [ 2455.165980][ T1179] do_syscall_64+0xfa/0x3b0 [ 2455.166004][ T1179] ? lockdep_hardirqs_on+0x9c/0x150 [ 2455.166031][ T1179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.166054][ T1179] ? clear_bhb_loop+0x60/0xb0 [ 2455.166082][ T1179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.166103][ T1179] RIP: 0033:0x7efe5958eba9 [ 2455.166125][ T1179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2455.166144][ T1179] RSP: 002b:00007efe5a3bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2455.166168][ T1179] RAX: ffffffffffffffda RBX: 00007efe597d5fa0 RCX: 00007efe5958eba9 [ 2455.166183][ T1179] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2455.166197][ T1179] RBP: 00007efe5a3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 2455.166210][ T1179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2455.166223][ T1179] R13: 00007efe597d6038 R14: 00007efe597d5fa0 R15: 00007ffd46b386a8 [ 2455.166259][ T1179] [ 2455.568602][ T1187] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17489'. [ 2455.588819][ T1170] lo speed is unknown, defaulting to 1000 [ 2455.597860][ T1170] lo speed is unknown, defaulting to 1000 [ 2455.629650][ T1189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17488'. [ 2455.736677][ T1193] netlink: 'syz.8.17490': attribute type 29 has an invalid length. [ 2455.745613][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17490'. [ 2456.070802][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2456.267630][ T1185] netlink: 'syz.3.17485': attribute type 6 has an invalid length. [ 2456.563300][ T1216] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2456.791977][ T522] Bluetooth: hci0: command tx timeout [ 2457.048284][ T1236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2457.110798][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2457.276319][ T1245] __nla_validate_parse: 2 callbacks suppressed [ 2457.276343][ T1245] netlink: 32 bytes leftover after parsing attributes in process `syz.8.17506'. [ 2457.975674][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17515'. [ 2458.150808][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2458.170399][ T1269] IPVS: Scheduler module ip_vs_sip not found [ 2458.594921][ T1298] FAULT_INJECTION: forcing a failure. [ 2458.594921][ T1298] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.644473][ T1298] CPU: 0 UID: 0 PID: 1298 Comm: syz.8.17523 Not tainted syzkaller #0 PREEMPT(full) [ 2458.644513][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2458.644527][ T1298] Call Trace: [ 2458.644536][ T1298] [ 2458.644547][ T1298] dump_stack_lvl+0x189/0x250 [ 2458.644580][ T1298] ? __pfx____ratelimit+0x10/0x10 [ 2458.644608][ T1298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2458.644636][ T1298] ? __pfx__printk+0x10/0x10 [ 2458.644665][ T1298] ? netlink_unicast+0x82c/0x9e0 [ 2458.644691][ T1298] ? ___sys_sendmsg+0x21f/0x2a0 [ 2458.644720][ T1298] ? do_syscall_64+0xfa/0x3b0 [ 2458.644761][ T1298] should_fail_ex+0x414/0x560 [ 2458.644802][ T1298] should_failslab+0xa8/0x100 [ 2458.644839][ T1298] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2458.644870][ T1298] ? skb_clone+0x212/0x3a0 [ 2458.644907][ T1298] skb_clone+0x212/0x3a0 [ 2458.644944][ T1298] __netlink_deliver_tap+0x404/0x850 [ 2458.644987][ T1298] ? netlink_deliver_tap+0x2e/0x1b0 [ 2458.645017][ T1298] netlink_deliver_tap+0x19c/0x1b0 [ 2458.645045][ T1298] netlink_sendskb+0x68/0x140 [ 2458.645072][ T1298] netlink_unicast+0x397/0x9e0 [ 2458.645093][ T1298] ? __asan_memcpy+0x40/0x70 [ 2458.645130][ T1298] ? __pfx_netlink_unicast+0x10/0x10 [ 2458.645166][ T1298] netlink_rcv_skb+0x28c/0x470 [ 2458.645196][ T1298] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2458.645226][ T1298] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2458.645268][ T1298] ? netlink_deliver_tap+0x2e/0x1b0 [ 2458.645306][ T1298] netlink_unicast+0x82c/0x9e0 [ 2458.645342][ T1298] ? __pfx_netlink_unicast+0x10/0x10 [ 2458.645369][ T1298] ? netlink_sendmsg+0x642/0xb30 [ 2458.645394][ T1298] ? skb_put+0x11b/0x210 [ 2458.645428][ T1298] netlink_sendmsg+0x805/0xb30 [ 2458.645468][ T1298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2458.645509][ T1298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2458.645535][ T1298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2458.645560][ T1298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2458.645589][ T1298] __sock_sendmsg+0x219/0x270 [ 2458.645617][ T1298] ____sys_sendmsg+0x505/0x830 [ 2458.645656][ T1298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2458.645700][ T1298] ? import_iovec+0x74/0xa0 [ 2458.645735][ T1298] ___sys_sendmsg+0x21f/0x2a0 [ 2458.645771][ T1298] ? __pfx____sys_sendmsg+0x10/0x10 [ 2458.645849][ T1298] ? __fget_files+0x2a/0x420 [ 2458.645869][ T1298] ? __fget_files+0x3a0/0x420 [ 2458.645903][ T1298] __x64_sys_sendmsg+0x19b/0x260 [ 2458.645939][ T1298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2458.645983][ T1298] ? __pfx_ksys_write+0x10/0x10 [ 2458.646012][ T1298] ? rcu_is_watching+0x15/0xb0 [ 2458.646042][ T1298] ? do_syscall_64+0xbe/0x3b0 [ 2458.646076][ T1298] do_syscall_64+0xfa/0x3b0 [ 2458.646102][ T1298] ? lockdep_hardirqs_on+0x9c/0x150 [ 2458.646128][ T1298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2458.646151][ T1298] ? clear_bhb_loop+0x60/0xb0 [ 2458.646180][ T1298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2458.646203][ T1298] RIP: 0033:0x7f99da58eba9 [ 2458.646223][ T1298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2458.646244][ T1298] RSP: 002b:00007f99db3e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2458.646268][ T1298] RAX: ffffffffffffffda RBX: 00007f99da7d5fa0 RCX: 00007f99da58eba9 [ 2458.646286][ T1298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2458.646301][ T1298] RBP: 00007f99db3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2458.646316][ T1298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.646330][ T1298] R13: 00007f99da7d6038 R14: 00007f99da7d5fa0 R15: 00007ffcb30b4278 [ 2458.646368][ T1298] [ 2459.190833][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2459.243856][ T1305] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17526'. [ 2460.230765][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2460.927149][ T1322] syzkaller0: entered promiscuous mode [ 2460.961630][ T1322] syzkaller0: entered allmulticast mode [ 2461.276484][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2461.752530][ T1366] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17541'. [ 2461.801929][ T1366] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17541'. [ 2461.932573][ T1365] lo speed is unknown, defaulting to 1000 [ 2462.049237][ T1365] lo speed is unknown, defaulting to 1000 [ 2462.050568][ T1367] lo speed is unknown, defaulting to 1000 [ 2462.167625][ T1367] lo speed is unknown, defaulting to 1000 [ 2462.310762][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2462.807428][ T1361] netlink: 'syz.4.17540': attribute type 6 has an invalid length. [ 2462.834297][ T1367] netlink: 'syz.3.17539': attribute type 6 has an invalid length. [ 2463.350817][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2463.599022][ T1398] netlink: 112 bytes leftover after parsing attributes in process `syz.4.17552'. [ 2463.839702][ T1407] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17557'. [ 2464.394220][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2464.458581][ T1416] lo speed is unknown, defaulting to 1000 [ 2464.475763][ T1416] lo speed is unknown, defaulting to 1000 [ 2464.546739][ T1422] ip6gre1: entered allmulticast mode [ 2465.052523][ T1436] netlink: 60 bytes leftover after parsing attributes in process `syz.8.17565'. [ 2465.085738][ T1437] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17566'. [ 2465.110295][ T1437] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17566'. [ 2465.156722][ T1434] IPVS: Error joining to the multicast group [ 2465.430788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2465.929600][ T1461] lo speed is unknown, defaulting to 1000 [ 2465.996539][ T1461] lo speed is unknown, defaulting to 1000 [ 2466.470789][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2466.718120][ T1482] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17576'. [ 2466.732826][ T1480] netlink: 'syz.4.17570': attribute type 6 has an invalid length. [ 2467.344363][ T1495] netlink: 'syz.6.17581': attribute type 1 has an invalid length. [ 2467.354486][ T1495] netlink: 236 bytes leftover after parsing attributes in process `syz.6.17581'. [ 2467.396550][ T1489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17579'. [ 2467.510826][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2467.513155][T22819] page_pool_release_retry() stalled pool shutdown: id 217, 3329 inflight 1272 sec [ 2467.554661][ T1498] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17582'. [ 2467.967350][ T1506] lo speed is unknown, defaulting to 1000 [ 2467.971577][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17584'. [ 2467.990504][ T1506] lo speed is unknown, defaulting to 1000 [ 2468.427482][ T1524] netlink: 'syz.6.17592': attribute type 1 has an invalid length. [ 2468.550788][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2469.214306][ T1530] netlink: 'syz.4.17594': attribute type 6 has an invalid length. [ 2469.302849][ T1533] lo speed is unknown, defaulting to 1000 [ 2469.319663][ T1533] lo speed is unknown, defaulting to 1000 [ 2469.570000][ T1552] lo speed is unknown, defaulting to 1000 [ 2469.579337][ T1552] lo speed is unknown, defaulting to 1000 [ 2469.591252][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2470.452507][ T1555] netlink: 'syz.3.17599': attribute type 6 has an invalid length. [ 2470.630782][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2470.997771][ T1574] netlink: 'syz.4.17605': attribute type 1 has an invalid length. [ 2471.019856][ T1574] __nla_validate_parse: 2 callbacks suppressed [ 2471.019877][ T1574] netlink: 216 bytes leftover after parsing attributes in process `syz.4.17605'. [ 2471.346057][ T1584] netlink: 'syz.4.17609': attribute type 23 has an invalid length. [ 2471.670783][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2471.897592][ T1602] tipc: Enabling of bearer rejected, failed to enable media [ 2472.134674][ T1607] lo speed is unknown, defaulting to 1000 [ 2472.144138][ T1613] netlink: 'syz.3.17618': attribute type 1 has an invalid length. [ 2472.156014][ T1613] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17618'. [ 2472.171802][ T1613] netlink: 'syz.3.17618': attribute type 1 has an invalid length. [ 2472.171834][ T1607] lo speed is unknown, defaulting to 1000 [ 2472.209478][ T1611] tipc: Enabling of bearer rejected, failed to enable media [ 2472.637337][ T1607] netlink: 'syz.4.17616': attribute type 6 has an invalid length. [ 2472.710776][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2472.839789][ T1630] netlink: 'syz.3.17622': attribute type 11 has an invalid length. [ 2473.445116][ T1655] tipc: Enabling of bearer rejected, failed to enable media [ 2473.498440][ T1660] netlink: 4436 bytes leftover after parsing attributes in process `syz.8.17635'. [ 2473.531283][ T1660] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 2473.629736][ T1667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17638'. [ 2473.750802][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2473.827830][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17641'. [ 2474.118593][ T1684] lo speed is unknown, defaulting to 1000 [ 2474.164016][ T1684] lo speed is unknown, defaulting to 1000 [ 2474.557737][ T1702] tipc: Enabling of bearer rejected, already enabled [ 2474.790990][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2474.866813][ T1684] netlink: 'syz.3.17645': attribute type 6 has an invalid length. [ 2475.432922][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17665'. [ 2475.465012][ T1732] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 2475.477544][ T1728] openvswitch: netlink: Flow key attr not present in new flow. [ 2475.655583][ T1734] IPVS: Scheduler module ip_vs_sip not found [ 2475.681737][ T1740] lo speed is unknown, defaulting to 1000 [ 2475.716814][ T1740] lo speed is unknown, defaulting to 1000 [ 2475.830832][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2475.985690][ T1747] lo speed is unknown, defaulting to 1000 [ 2475.996415][ T1751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17669'. [ 2476.010085][ T1747] lo speed is unknown, defaulting to 1000 [ 2476.870915][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2477.065384][ T1773] tipc: Enabling of bearer rejected, failed to enable media [ 2477.107034][ T1769] lo speed is unknown, defaulting to 1000 [ 2477.236258][ T1777] lo speed is unknown, defaulting to 1000 [ 2477.264194][ T1769] lo speed is unknown, defaulting to 1000 [ 2477.289317][ T1784] netlink: 14 bytes leftover after parsing attributes in process `syz.8.17680'. [ 2477.459305][ T1779] IPVS: Scheduler module ip_vs_sip not found [ 2477.564771][ T1777] lo speed is unknown, defaulting to 1000 [ 2477.912345][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2477.934318][ T1777] netlink: 'syz.4.17677': attribute type 6 has an invalid length. [ 2478.950995][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2479.149361][ T1824] netlink: 'syz.4.17693': attribute type 1 has an invalid length. [ 2479.189108][ T1824] netlink: 'syz.4.17693': attribute type 1 has an invalid length. [ 2479.232430][ T1824] netlink: 184 bytes leftover after parsing attributes in process `syz.4.17693'. [ 2479.452935][ T1823] IPVS: Scheduler module ip_vs_sip not found [ 2479.580299][ T1833] lo speed is unknown, defaulting to 1000 [ 2479.663354][ T1833] lo speed is unknown, defaulting to 1000 [ 2479.848397][ T1843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17699'. [ 2479.990963][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2480.039150][ T1840] syzkaller0: entered promiscuous mode [ 2480.050909][ T1840] syzkaller0: entered allmulticast mode [ 2480.442776][ T1844] netlink: 'syz.6.17695': attribute type 6 has an invalid length. [ 2480.709722][ T1866] netlink: 'syz.7.17704': attribute type 1 has an invalid length. [ 2480.722596][ T1866] netlink: 224 bytes leftover after parsing attributes in process `syz.7.17704'. [ 2480.999825][ T1874] netlink: 'syz.4.17706': attribute type 1 has an invalid length. [ 2481.024227][ T1874] netlink: 'syz.4.17706': attribute type 1 has an invalid length. [ 2481.030983][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2481.041887][ T1874] netlink: 184 bytes leftover after parsing attributes in process `syz.4.17706'. [ 2481.288593][ T1868] lo speed is unknown, defaulting to 1000 [ 2481.378109][ T1868] lo speed is unknown, defaulting to 1000 [ 2481.457618][ T1886] netlink: 'syz.6.17707': attribute type 1 has an invalid length. [ 2481.548927][ T1876] IPVS: Scheduler module ip_vs_sip not found [ 2481.702951][ T1879] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17707'. [ 2481.898254][ T1892] bond3: (slave gretap1): making interface the new active one [ 2481.923996][ T1892] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 2482.070903][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2482.649101][ T1919] lo speed is unknown, defaulting to 1000 [ 2482.659299][ T1916] lo speed is unknown, defaulting to 1000 [ 2482.676320][ T1919] lo speed is unknown, defaulting to 1000 [ 2482.699096][ T1916] lo speed is unknown, defaulting to 1000 [ 2482.883945][ T522] Bluetooth: hci8: command 0x0405 tx timeout [ 2483.110910][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2483.347659][ T1936] netlink: 'syz.8.17718': attribute type 6 has an invalid length. [ 2483.356080][ T1933] IPVS: Scheduler module ip_vs_sip not found [ 2483.458529][ T1935] netlink: 'syz.4.17717': attribute type 6 has an invalid length. [ 2484.093852][ T1959] lo speed is unknown, defaulting to 1000 [ 2484.150948][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2484.255351][ T1959] lo speed is unknown, defaulting to 1000 [ 2484.255369][ T1965] netlink: 'syz.4.17726': attribute type 29 has an invalid length. [ 2484.255392][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17726'. [ 2484.484289][ T1966] lo speed is unknown, defaulting to 1000 [ 2484.494063][ T1966] lo speed is unknown, defaulting to 1000 [ 2484.954753][ T522] Bluetooth: hci8: command 0x0405 tx timeout [ 2485.029422][ T1979] lo speed is unknown, defaulting to 1000 [ 2485.040034][ T1979] lo speed is unknown, defaulting to 1000 [ 2485.060558][ T1984] netlink: 'syz.6.17732': attribute type 7 has an invalid length. [ 2485.105381][ T1984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17732'. [ 2485.190795][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2485.677192][ T1988] netlink: 64 bytes leftover after parsing attributes in process `syz.6.17733'. [ 2486.230767][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2486.312707][ T1995] lo speed is unknown, defaulting to 1000 [ 2486.323950][ T1995] lo speed is unknown, defaulting to 1000 [ 2486.938513][ T2015] netlink: 'syz.4.17742': attribute type 29 has an invalid length. [ 2486.945684][ T2010] netlink: 'syz.8.17736': attribute type 6 has an invalid length. [ 2486.969968][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17742'. [ 2487.270785][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2487.526726][ T2022] lo speed is unknown, defaulting to 1000 [ 2487.535888][ T2022] lo speed is unknown, defaulting to 1000 [ 2487.716518][ T2034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17747'. [ 2487.773098][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17748'. [ 2487.877405][ T2026] netlink: 'syz.7.17744': attribute type 6 has an invalid length. [ 2488.310775][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2488.898524][ T2066] lo speed is unknown, defaulting to 1000 [ 2488.935102][ T2066] lo speed is unknown, defaulting to 1000 [ 2489.046819][ T2080] lo speed is unknown, defaulting to 1000 [ 2489.154354][ T2079] IPVS: Scheduler module ip_vs_sip not found [ 2489.187359][ T2080] lo speed is unknown, defaulting to 1000 [ 2489.350811][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2489.654163][ T2094] lo speed is unknown, defaulting to 1000 [ 2489.785974][ T2100] netlink: 'syz.4.17765': attribute type 5 has an invalid length. [ 2489.822958][ T2100] netlink: 'syz.4.17765': attribute type 10 has an invalid length. [ 2489.865483][ T2101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17763'. [ 2489.957858][ T2101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17763'. [ 2489.998601][ T2094] lo speed is unknown, defaulting to 1000 [ 2490.116951][ T2102] bond26: entered promiscuous mode [ 2490.138676][ T2102] 8021q: adding VLAN 0 to HW filter on device bond26 [ 2490.242606][ T522] Bluetooth: hci6: command 0x0406 tx timeout [ 2490.326604][ T2089] netlink: 'syz.7.17759': attribute type 6 has an invalid length. [ 2490.391196][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2490.696643][ T2113] Set syz1 is full, maxelem 65536 reached [ 2490.726342][ T2113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17769'. [ 2491.430782][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2491.527944][ T2141] lo speed is unknown, defaulting to 1000 [ 2491.575285][ T2141] lo speed is unknown, defaulting to 1000 [ 2491.713504][ T2146] netlink: 'syz.7.17779': attribute type 10 has an invalid length. [ 2491.766076][ T2140] lo speed is unknown, defaulting to 1000 [ 2492.270521][ T2146] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2492.379037][ T2140] lo speed is unknown, defaulting to 1000 [ 2492.431522][ T2150] netlink: 'syz.4.17775': attribute type 6 has an invalid length. [ 2492.470746][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2492.549561][ T2155] delete_channel: no stack [ 2492.594683][ T2167] netlink: 'syz.3.17776': attribute type 6 has an invalid length. [ 2492.779477][ T2169] lo speed is unknown, defaulting to 1000 [ 2492.897829][ T2169] lo speed is unknown, defaulting to 1000 [ 2492.922414][ T2171] lo speed is unknown, defaulting to 1000 [ 2492.924969][ T2177] FAULT_INJECTION: forcing a failure. [ 2492.924969][ T2177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2492.958847][ T2177] CPU: 1 UID: 0 PID: 2177 Comm: syz.8.17785 Not tainted syzkaller #0 PREEMPT(full) [ 2492.958882][ T2177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2492.958896][ T2177] Call Trace: [ 2492.958905][ T2177] [ 2492.958916][ T2177] dump_stack_lvl+0x189/0x250 [ 2492.958949][ T2177] ? __pfx____ratelimit+0x10/0x10 [ 2492.958976][ T2177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2492.958999][ T2177] ? __pfx__printk+0x10/0x10 [ 2492.959047][ T2177] should_fail_ex+0x414/0x560 [ 2492.959088][ T2177] _copy_from_user+0x2d/0xb0 [ 2492.959126][ T2177] bpf_test_init+0xf8/0x170 [ 2492.959158][ T2177] bpf_prog_test_run_xdp+0x37c/0x1000 [ 2492.959204][ T2177] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2492.959237][ T2177] ? __fget_files+0x2a/0x420 [ 2492.959264][ T2177] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2492.959293][ T2177] bpf_prog_test_run+0x2c7/0x340 [ 2492.959331][ T2177] __sys_bpf+0x581/0x870 [ 2492.959364][ T2177] ? __pfx___sys_bpf+0x10/0x10 [ 2492.959410][ T2177] ? ksys_write+0x22a/0x250 [ 2492.959443][ T2177] ? __pfx_ksys_write+0x10/0x10 [ 2492.959470][ T2177] ? rcu_is_watching+0x15/0xb0 [ 2492.959502][ T2177] __x64_sys_bpf+0x7c/0x90 [ 2492.959530][ T2177] do_syscall_64+0xfa/0x3b0 [ 2492.959556][ T2177] ? lockdep_hardirqs_on+0x9c/0x150 [ 2492.959582][ T2177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2492.959604][ T2177] ? clear_bhb_loop+0x60/0xb0 [ 2492.959632][ T2177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2492.959654][ T2177] RIP: 0033:0x7f99da58eba9 [ 2492.959673][ T2177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2492.959693][ T2177] RSP: 002b:00007f99db3e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2492.959716][ T2177] RAX: ffffffffffffffda RBX: 00007f99da7d5fa0 RCX: 00007f99da58eba9 [ 2492.959732][ T2177] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2492.959747][ T2177] RBP: 00007f99db3e1090 R08: 0000000000000000 R09: 0000000000000000 [ 2492.959761][ T2177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2492.959775][ T2177] R13: 00007f99da7d6038 R14: 00007f99da7d5fa0 R15: 00007ffcb30b4278 [ 2492.959812][ T2177] [ 2493.510855][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2493.815555][ T2171] lo speed is unknown, defaulting to 1000 [ 2493.925666][ T2179] netlink: 'syz.7.17784': attribute type 6 has an invalid length. [ 2494.035011][ T2193] netlink: 'syz.3.17790': attribute type 8 has an invalid length. [ 2494.137439][ T2195] FAULT_INJECTION: forcing a failure. [ 2494.137439][ T2195] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.169571][ T2195] CPU: 1 UID: 0 PID: 2195 Comm: syz.4.17791 Not tainted syzkaller #0 PREEMPT(full) [ 2494.169604][ T2195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2494.169618][ T2195] Call Trace: [ 2494.169628][ T2195] [ 2494.169638][ T2195] dump_stack_lvl+0x189/0x250 [ 2494.169671][ T2195] ? __pfx____ratelimit+0x10/0x10 [ 2494.169698][ T2195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2494.169725][ T2195] ? __pfx__printk+0x10/0x10 [ 2494.169764][ T2195] ? __lock_acquire+0xab9/0xd20 [ 2494.169810][ T2195] should_fail_ex+0x414/0x560 [ 2494.169851][ T2195] should_failslab+0xa8/0x100 [ 2494.169887][ T2195] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2494.169918][ T2195] ? skb_clone+0x212/0x3a0 [ 2494.169956][ T2195] skb_clone+0x212/0x3a0 [ 2494.169993][ T2195] __netlink_deliver_tap+0x404/0x850 [ 2494.170038][ T2195] ? netlink_deliver_tap+0x2e/0x1b0 [ 2494.170068][ T2195] netlink_deliver_tap+0x19c/0x1b0 [ 2494.170097][ T2195] netlink_unicast+0x7fa/0x9e0 [ 2494.170132][ T2195] ? __pfx_netlink_unicast+0x10/0x10 [ 2494.170159][ T2195] ? netlink_sendmsg+0x642/0xb30 [ 2494.170185][ T2195] ? skb_put+0x11b/0x210 [ 2494.170218][ T2195] netlink_sendmsg+0x805/0xb30 [ 2494.170257][ T2195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2494.170290][ T2195] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2494.170316][ T2195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2494.170342][ T2195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2494.170371][ T2195] __sock_sendmsg+0x219/0x270 [ 2494.170398][ T2195] ____sys_sendmsg+0x505/0x830 [ 2494.170437][ T2195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2494.170480][ T2195] ? import_iovec+0x74/0xa0 [ 2494.170514][ T2195] ___sys_sendmsg+0x21f/0x2a0 [ 2494.170553][ T2195] ? __pfx____sys_sendmsg+0x10/0x10 [ 2494.170622][ T2195] ? __fget_files+0x2a/0x420 [ 2494.170640][ T2195] ? __fget_files+0x3a0/0x420 [ 2494.170671][ T2195] __x64_sys_sendmsg+0x19b/0x260 [ 2494.170704][ T2195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2494.170741][ T2195] ? __pfx_ksys_write+0x10/0x10 [ 2494.170772][ T2195] ? rcu_is_watching+0x15/0xb0 [ 2494.170798][ T2195] ? do_syscall_64+0xbe/0x3b0 [ 2494.170827][ T2195] do_syscall_64+0xfa/0x3b0 [ 2494.170849][ T2195] ? lockdep_hardirqs_on+0x9c/0x150 [ 2494.170871][ T2195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.170890][ T2195] ? clear_bhb_loop+0x60/0xb0 [ 2494.170915][ T2195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.170934][ T2195] RIP: 0033:0x7fd59b98eba9 [ 2494.170952][ T2195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.170969][ T2195] RSP: 002b:00007fd59c8e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2494.170990][ T2195] RAX: ffffffffffffffda RBX: 00007fd59bbd5fa0 RCX: 00007fd59b98eba9 [ 2494.171005][ T2195] RDX: 0000000000000000 RSI: 0000200000005c80 RDI: 0000000000000003 [ 2494.171020][ T2195] RBP: 00007fd59c8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.171033][ T2195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.171044][ T2195] R13: 00007fd59bbd6038 R14: 00007fd59bbd5fa0 R15: 00007ffd85f3dea8 [ 2494.171077][ T2195] [ 2494.550876][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2495.102373][ T2208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17796'. [ 2495.590889][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2495.962290][ T2221] lo speed is unknown, defaulting to 1000 [ 2495.978946][ T2221] lo speed is unknown, defaulting to 1000 [ 2496.255563][ T2241] netlink: 332 bytes leftover after parsing attributes in process `syz.6.17804'. [ 2496.272084][ T2214] netlink: 'syz.4.17798': attribute type 6 has an invalid length. [ 2496.291627][ T2241] netlink: 104 bytes leftover after parsing attributes in process `syz.6.17804'. [ 2496.326630][ T2241] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17804'. [ 2496.345960][ T2244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17804'. [ 2496.367498][ T2243] netlink: 'syz.3.17805': attribute type 29 has an invalid length. [ 2496.385872][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17805'. [ 2496.627476][ T2247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17806'. [ 2496.630875][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2497.057321][ T2262] lo speed is unknown, defaulting to 1000 [ 2497.152585][ T2262] lo speed is unknown, defaulting to 1000 [ 2497.670853][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2497.680312][ T2283] netlink: 'syz.4.17822': attribute type 29 has an invalid length. [ 2497.712684][ T2283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17822'. [ 2497.935388][ T2288] lo speed is unknown, defaulting to 1000 [ 2497.943940][ T2288] lo speed is unknown, defaulting to 1000 [ 2498.199495][ T2303] lo speed is unknown, defaulting to 1000 [ 2498.209327][ T2303] lo speed is unknown, defaulting to 1000 [ 2498.710833][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2498.872474][ T2321] netlink: 'syz.7.17824': attribute type 6 has an invalid length. [ 2499.021282][ T2325] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20000 [ 2499.037607][ T31] INFO: task syz.5.16642:30886 blocked for more than 143 seconds. [ 2499.069202][ T31] Not tainted syzkaller #0 [ 2499.081467][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2499.112258][ T31] task:syz.5.16642 state:D stack:25928 pid:30886 tgid:30885 ppid:30201 task_flags:0x400140 flags:0x00004004 [ 2499.154908][ T31] Call Trace: [ 2499.166385][ T31] [ 2499.175954][ T31] __schedule+0x1798/0x4cc0 [ 2499.193274][ T31] ? __lock_acquire+0xab9/0xd20 [ 2499.203725][ T31] ? __lock_acquire+0xab9/0xd20 [ 2499.217393][ T31] ? __pfx___schedule+0x10/0x10 [ 2499.223449][ T31] ? schedule+0x91/0x360 [ 2499.227863][ T31] schedule+0x165/0x360 [ 2499.251873][ T31] schedule_preempt_disabled+0x13/0x30 [ 2499.261968][ T31] __mutex_lock+0x7e6/0x1350 [ 2499.272014][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2499.283709][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 2499.296963][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2499.308567][ T31] ? __nlmsg_put+0xef/0x1b0 [ 2499.321889][ T31] ? genlmsg_put+0x137/0x2e0 [ 2499.352424][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 2499.364803][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2499.377032][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 2499.398889][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 2499.417671][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2499.429215][ T31] genl_rcv_msg+0x60e/0x790 [ 2499.447136][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2499.466510][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 2499.481756][ T31] ? __asan_memcpy+0x40/0x70 [ 2499.486445][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 2499.493108][ T31] netlink_rcv_skb+0x208/0x470 [ 2499.497942][ T31] ? __lock_acquire+0xab9/0xd20 [ 2499.510155][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2499.520281][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2499.527153][ T31] ? down_read+0x1ad/0x2e0 [ 2499.532782][ T31] genl_rcv+0x28/0x40 [ 2499.536933][ T31] netlink_unicast+0x82c/0x9e0 [ 2499.542993][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2499.548431][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2499.556694][ T31] ? skb_put+0x11b/0x210 [ 2499.561805][ T31] netlink_sendmsg+0x805/0xb30 [ 2499.566789][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2499.611725][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2499.616760][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2499.622978][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2499.629329][ T31] __sock_sendmsg+0x219/0x270 [ 2499.650039][ T31] ____sys_sendmsg+0x505/0x830 [ 2499.660505][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2499.672524][ T31] ? import_iovec+0x74/0xa0 [ 2499.677137][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2499.701131][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2499.706504][ T31] ? __fget_files+0x2a/0x420 [ 2499.721481][ T31] ? __fget_files+0x3a0/0x420 [ 2499.726263][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 2499.741420][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2499.747009][ T31] ? rcu_is_watching+0x15/0xb0 [ 2499.752045][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2499.771422][ T31] ? do_syscall_64+0xbe/0x3b0 [ 2499.777180][ T31] do_syscall_64+0xfa/0x3b0 [ 2499.789518][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2499.797449][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2499.804650][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2499.809401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2499.816143][ T31] RIP: 0033:0x7fadf178eba9 [ 2499.822223][ T31] RSP: 002b:00007fadf266e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2499.832144][ T31] RAX: ffffffffffffffda RBX: 00007fadf19d5fa0 RCX: 00007fadf178eba9 [ 2499.840178][ T31] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 2499.849063][ T31] RBP: 00007fadf1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2499.858360][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2499.870211][ T31] R13: 00007fadf19d6038 R14: 00007fadf19d5fa0 R15: 00007fff2c6ae7a8 [ 2499.879171][ T31] [ 2499.883481][ T31] [ 2499.883481][ T31] Showing all locks held in the system: [ 2499.985797][ T31] 1 lock held by khungtaskd/31: [ 2499.999379][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2500.011728][ T31] 2 locks held by getty/5622: [ 2500.016932][ T31] #0: ffff88803340e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2500.027547][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2500.038683][ T31] 3 locks held by kworker/u9:2/5864: [ 2500.044785][ T31] #0: ffff8880271b6148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2500.057501][ T31] #1: ffffc9000413fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2500.080226][ T31] #2: ffff88807e070dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 2500.091708][ T31] 4 locks held by kworker/u8:10/8578: [ 2500.097169][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2500.109244][ T31] #1: ffffc90002e67bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2500.122765][ T31] #2: ffffffff8f52d370 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2500.133034][ T31] #3: ffffffff8f53a208 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 2500.143004][ T31] 3 locks held by kworker/0:9/24691: [ 2500.148425][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2500.162894][ T31] #1: ffffc90019d37bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2500.176429][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 2500.188182][ T31] 2 locks held by syz.1.16328/29800: [ 2500.195724][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2500.205019][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 2500.216435][ T31] 2 locks held by kworker/u8:13/30573: [ 2500.222912][ T31] 2 locks held by syz.5.16642/30886: [ 2500.228234][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2500.238700][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 2500.249986][ T31] 2 locks held by syz.2.16733/31155: [ 2500.256567][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2500.265888][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 2500.278946][ T31] 2 locks held by syz.0.17245/381: [ 2500.285252][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2500.293866][ T31] #1: ffffffff8e4189c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 2500.304354][ T31] 4 locks held by syz.8.17828/2303: [ 2500.309584][ T31] #0: ffff88808c654408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2500.320519][ T31] #1: ffffffff8f59de50 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 2500.333595][ T31] #2: ffff888095edf0d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 2500.345216][ T31] #3: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2500.357263][ T31] [ 2500.359661][ T31] ============================================= [ 2500.359661][ T31] [ 2500.380212][ T31] NMI backtrace for cpu 1 [ 2500.380235][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2500.380260][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2500.380274][ T31] Call Trace: [ 2500.380283][ T31] [ 2500.380294][ T31] dump_stack_lvl+0x189/0x250 [ 2500.380332][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2500.380359][ T31] ? __pfx__printk+0x10/0x10 [ 2500.380407][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2500.380446][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2500.380485][ T31] ? __pfx__printk+0x10/0x10 [ 2500.380531][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2500.380575][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2500.380613][ T31] watchdog+0xf93/0xfe0 [ 2500.380651][ T31] ? watchdog+0x1de/0xfe0 [ 2500.380690][ T31] kthread+0x70e/0x8a0 [ 2500.380722][ T31] ? __pfx_watchdog+0x10/0x10 [ 2500.380758][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.380787][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2500.380810][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2500.380834][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.380863][ T31] ret_from_fork+0x436/0x7d0 [ 2500.380889][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2500.380920][ T31] ? __switch_to_asm+0x39/0x70 [ 2500.380947][ T31] ? __switch_to_asm+0x33/0x70 [ 2500.380973][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.381001][ T31] ret_from_fork_asm+0x1a/0x30 [ 2500.381048][ T31] [ 2500.523646][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2500.529761][ C0] NMI backtrace for cpu 0 [ 2500.529781][ C0] CPU: 0 UID: 0 PID: 30573 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 2500.529803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2500.529817][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2500.529846][ C0] RIP: 0010:check_preemption_disabled+0x45/0x120 [ 2500.529875][ C0] Code: ce 25 07 65 8b 0d bb ce 25 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d 9b ce 25 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b <41> 5e 41 5f 5d e9 81 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 [ 2500.529893][ C0] RSP: 0018:ffffc9001c296a38 EFLAGS: 00000286 [ 2500.529908][ C0] RAX: 0000000000000000 RBX: ffffffff903fd001 RCX: 5ea2e8169ffab000 [ 2500.529923][ C0] RDX: ffffc9001c296b01 RSI: ffffffff8be33be0 RDI: ffffffff8be33ba0 [ 2500.529938][ C0] RBP: dffffc0000000000 R08: ffffc9001c296f30 R09: 0000000000000000 [ 2500.529952][ C0] R10: ffffc9001c296b98 R11: fffff52003852d75 R12: ffffc9001c296f40 [ 2500.529967][ C0] R13: ffffc9001c290000 R14: ffffc9001c296b48 R15: ffffffff8172d195 [ 2500.529982][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 2500.529998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2500.530012][ C0] CR2: 0000555581d635c8 CR3: 000000007735a000 CR4: 00000000003526f0 [ 2500.530030][ C0] Call Trace: [ 2500.530038][ C0] [ 2500.530047][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2500.530069][ C0] rcu_is_watching+0x15/0xb0 [ 2500.530090][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2500.530110][ C0] unwind_next_frame+0x1965/0x2390 [ 2500.530135][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2500.530157][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 2500.530188][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2500.530213][ C0] arch_stack_walk+0x11c/0x150 [ 2500.530247][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 2500.530272][ C0] stack_trace_save+0x9c/0xe0 [ 2500.530294][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2500.530324][ C0] kasan_save_track+0x3e/0x80 [ 2500.530348][ C0] ? kasan_save_track+0x3e/0x80 [ 2500.530370][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 2500.530395][ C0] ? __kmalloc_noprof+0x27a/0x4f0 [ 2500.530452][ C0] ? __kmalloc_noprof+0x421/0x4f0 [ 2500.530479][ C0] __kasan_kmalloc+0x93/0xb0 [ 2500.530507][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 2500.530531][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 2500.530555][ C0] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 2500.530587][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 2500.530624][ C0] ? _ieee802_11_parse_elems_full+0x44aa/0x4550 [ 2500.530651][ C0] ? arch_stack_walk+0x11c/0x150 [ 2500.530681][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b30 [ 2500.530708][ C0] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 2500.530754][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 2500.530802][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 2500.530830][ C0] ? __kmalloc_noprof+0x421/0x4f0 [ 2500.530878][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 2500.530906][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 2500.530946][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 2500.530987][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 2500.531022][ C0] ? sta_info_get+0x4f/0x2a0 [ 2500.531055][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 2500.531095][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 2500.531147][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 2500.531184][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2500.531226][ C0] ? __lock_acquire+0xab9/0xd20 [ 2500.531294][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 2500.531322][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 2500.531346][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2500.531366][ C0] process_scheduled_works+0xae1/0x17b0 [ 2500.531404][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2500.531434][ C0] worker_thread+0x8a0/0xda0 [ 2500.531471][ C0] kthread+0x70e/0x8a0 [ 2500.531498][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2500.531517][ C0] ? __pfx_kthread+0x10/0x10 [ 2500.531542][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2500.531561][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2500.531582][ C0] ? __pfx_kthread+0x10/0x10 [ 2500.531606][ C0] ret_from_fork+0x436/0x7d0 [ 2500.531627][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2500.531650][ C0] ? __switch_to_asm+0x39/0x70 [ 2500.531675][ C0] ? __switch_to_asm+0x33/0x70 [ 2500.531700][ C0] ? __pfx_kthread+0x10/0x10 [ 2500.531724][ C0] ret_from_fork_asm+0x1a/0x30 [ 2500.531760][ C0] [ 2500.619011][ T522] Bluetooth: hci7: command 0x0405 tx timeout [ 2500.717887][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2500.717916][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2500.717947][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2500.717964][ T31] Call Trace: [ 2500.717978][ T31] [ 2500.717992][ T31] dump_stack_lvl+0x99/0x250 [ 2500.718030][ T31] ? __asan_memcpy+0x40/0x70 [ 2500.718063][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2500.718095][ T31] ? __pfx__printk+0x10/0x10 [ 2500.718149][ T31] vpanic+0x281/0x750 [ 2500.718184][ T31] ? __pfx_vpanic+0x10/0x10 [ 2500.718214][ T31] ? preempt_schedule+0xae/0xc0 [ 2500.718258][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2500.718297][ T31] panic+0xb9/0xc0 [ 2500.718326][ T31] ? __pfx_panic+0x10/0x10 [ 2500.718358][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2500.718392][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2500.718437][ T31] watchdog+0xfd2/0xfe0 [ 2500.718480][ T31] ? watchdog+0x1de/0xfe0 [ 2500.718525][ T31] kthread+0x70e/0x8a0 [ 2500.718563][ T31] ? __pfx_watchdog+0x10/0x10 [ 2500.718598][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.718634][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2500.718661][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2500.718689][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.718724][ T31] ret_from_fork+0x436/0x7d0 [ 2500.718755][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2500.718791][ T31] ? __switch_to_asm+0x39/0x70 [ 2500.718823][ T31] ? __switch_to_asm+0x33/0x70 [ 2500.718856][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.718889][ T31] ret_from_fork_asm+0x1a/0x30 [ 2500.718947][ T31] [ 2500.722772][ T31] Kernel Offset: disabled