last executing test programs: 4.015813681s ago: executing program 4 (id=1490): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x40004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0xf9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x6, 0x3, 0x1, 0x41, 0x8, 0xc85e, 0xffff, 0x401, [{0x7fffffff, 0x2, 0x0, 0x81e}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) r14 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r14, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_opts(r14, 0x0, 0x4, 0x0, &(0x7f0000000180)) (async) r15 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r15, 0x12, 0x4, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r15, 0x28000000000, 0x0, 0x7fffffffffffffff}) epoll_wait(r16, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0x8) 3.589339806s ago: executing program 4 (id=1494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x18) (async) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="06421d", 0x3}, {&(0x7f0000000680)="e90a6f0a13cfdc720325bcec1ef6aca8f6218420d2b03b26a44cdd77c1f67ad9ab74161f65d3241180ebbf660337cdfe45481e03282473b0d4868a82807d13840a6e497250363a1988a9361c2c2c359a9e08a5a0f6b8c6d3ea88f012c0a16077d50981ef735a2ec9d34f8d9ecf6e368e6e30264bae7a4c0eec8bfcff5f22e28a275447a262b0fb2357", 0x89}, {&(0x7f0000000740)="0919a23d5dc7fc20a366fa7d0ef77f4e1aff7ca08b32e8a845b73fcdab840200d048409b4a0c36d215c482dacbd13a0c06902195fe615e0b073213ea8231daddeddaa81fca7ccbfb0dd9a9268b3a3809c6937f3b69f2593ca4b05dbdbc3dc337bbbc377e56e3f9b8785d76c6ef0f0a8da506f3d49073e55efc79440914d018fd8d5feffd367306f990f793b58b59f0d2712aac130e803ca9ffbcfe443a91e466d7da407ed65cfefdf0e1eb5fca1acc0cb20415ea5dced0ed75a3d9c689dbf37df9c6517223", 0xc5}, {&(0x7f0000000340)="24667125985b9966bf670f14670e36cb13317487e5fcaf7b9486354f42fb222229fd891ba28caac10c5350419680fe0090ea21e1cab4c378384b9e23a4c25e95f7c6f2a76757e65c57c06d11fa9c6836b09e5d412c57086a585f29a5a662f9b4c32f7e480787031dd51a7d66ac8a01cc7ffd9b51a62b00fe7fbb0ca3a05b", 0x7e}], 0x4, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x17, 0x14, [@multicast1, @local, @remote, @multicast1, @loopback]}, @noop, @rr={0x7, 0x17, 0x22, [@rand_addr=0x64010100, @private=0xa010102, @multicast2, @private=0xa010100, @multicast2]}, @rr={0x7, 0x23, 0xdf, [@private=0xa010101, @local, @local, @private=0xa010100, @remote, @local, @broadcast, @empty]}, @lsrr={0x83, 0xf, 0xdf, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, @remote]}, @timestamp_addr={0x44, 0x3c, 0xb5, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@broadcast, 0x3}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x10}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@remote}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x1c}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x5b, [@rand_addr=0x64010101, @multicast2, @loopback, @local, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x1a0}}], 0x1, 0x40040000) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) unshare(0x68040200) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x38, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) (async) close(r6) 3.19942082s ago: executing program 1 (id=1497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0xc7dc, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c004) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r4, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8, 0x0, 0xfffffffffffffffc}, 0xf6) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) recvmmsg(r6, &(0x7f0000000480), 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r7, r7, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r13, 0x6, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 2.659915523s ago: executing program 2 (id=1500): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000001c0)=""/161, 0xa1, 0x0, &(0x7f0000000280)=""/141, 0x8d}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x50}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c40)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0x1, 0xf}}}, 0x24}}, 0x20040054) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400a005}, 0x8000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.524285325s ago: executing program 0 (id=1501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r1) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt(r1, 0x1, 0x8, &(0x7f00000008c0), 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x88885}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x7, 0xfffff034}, {0x6, 0x0, 0x7f}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r4], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r10 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r10, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 2.495453909s ago: executing program 1 (id=1502): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xfffffffffffff5ad, 0x7fff}) 2.309390763s ago: executing program 1 (id=1504): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b", 0x65}], 0x1, 0x8) write$cgroup_devices(r2, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) write(r0, 0x0, 0x0) 2.268798951s ago: executing program 2 (id=1505): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtfilter={0x94, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x0, 0x7}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}, @TCA_CHAIN={0x8, 0xb, 0xb30}, @filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x30f}, {0x4, 0x80000001, 0xa, 0x4, 0xb, 0x0, 0x2}}}]}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x400000}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4) shutdown(r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) getsockopt$inet6_opts(r6, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) 2.183732878s ago: executing program 3 (id=1507): r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept$inet(r0, 0x0, &(0x7f0000000080)) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), 0x4) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000002500010033bd7004fedbdf250900000c20000e801c"], 0x34}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) 2.017688747s ago: executing program 1 (id=1508): unshare(0x62040200) (async) mmap(&(0x7f000020a000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x4000) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x1, @bcast, @rose={'rose', 0x0}, 0x86, 'syz1\x00', @null, 0x7fffffff, 0x1a, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) (async) unshare(0x10000000) (async) r5 = gettid() (async) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, 0x0, 0x0) (async) close(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000080)=r5) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a010100573303"], 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0227e758b1644824773fcb0000000000c8e8fe21af9128d706ed5f93d967aeb8f6d589dd178065d05eb313393752de0246fb"], 0x10}}, 0x20000010) (async) unshare(0x68040200) mmap(&(0x7f00007b1000/0x2000)=nil, 0x2000, 0x3000009, 0x30, r7, 0xffffd000) 1.919628261s ago: executing program 3 (id=1509): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000"], 0x40}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000b952b2be3e360bcc28cc1b2917a9131eb73841aee5f64bc7b5ab388dc5ee827e5f4c6d4f7cb3d87f4ce0142023a278693c7ab30974840c4c0e92b406337bea2acaa09559ad5f104e84fdd4c2b8de9af2adfdc58a580f4017de8b79175f64e6aed34efdb343c7f07e31de2b71b3a08ffe9ab5f448c2112ddb00"/139, @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000040000b71ff5000000"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/220, 0xdc}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff0000050003000000000005000300010000000500030080000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.769176252s ago: executing program 4 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x1a, 0x6, 0x8, 0x51, @local, @private0, 0x1, 0xee89036aa2cc40bf, 0x5, 0x7ff}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000f1ffffff210000001400018008000100", @ANYRES32=r11, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.622022014s ago: executing program 0 (id=1511): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8120000180140003002a23d0d74600090009000600848003000add650005000200"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd70007318be62d66fbd4408000300", @ANYRES32=r5, @ANYBLOB="0c009900040000007500000008005700030000000500180104000000050019010b0000000800220190030000"], 0x48}, 0x1, 0x0, 0x0, 0x48005}, 0x5805) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="540ce5ff", @ANYRES16=r7, @ANYBLOB="010000000000fedbdf2503000000400001802c0004001400010002000000ac14140f00000000000000001400020002004e24e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x40000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="3f000000010003", 0x7) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0xe) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'ip6_vti0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 1.451698349s ago: executing program 3 (id=1512): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0xd0, 0xf0, 0x0, {0x390, 0x8f00}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x1, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x498e, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) syz_emit_ethernet(0x22c0, &(0x7f0000001cc0)={@link_local, @broadcast, @void, {@mpls_mc={0x8848, {[{0x9749, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "7dfc24", 0x2286, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x2}, @fragment={0x2b, 0x0, 0x5, 0x0, 0x0, 0x10, 0x68}, @fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x2, 0x68}, @srh={0x2, 0xa, 0x4, 0x5, 0x8, 0x8, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @rand_addr=' \x01\x00', @mcast1]}, @dstopts={0x3b, 0x206, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x5, [0x5]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x1000, "213cc9a4e2a9ed6addcb59ea4f2bc4ca54569ba49c3e4c6ba662fd173d227246e93d13c05065d0c78b191d43c6f1e9d4f5068f1362aadbcdab49b4b32c93b70c1c7b19af13b7105873ce7f23caaa5911476794bea395e6b81796a989764d1b12501f6a805471e526eb18c89407b17ee6b0a477539bd13b05499d9696c52a9b40074751645a09a8f6b3a3b809aaf541c0f8ad350e9bea2aaa1f4379cd59ed5763c87b7ac8f15ee0fe3bdcd7d39dbfc00983f3c7f159043c5c954d7cdfe0928feea8fedafb26c073860936066eea06857144b9ffc5470f30489274b7fc4ed074850e8f59fb86e8dc0604771c0fd63c2f93003be29bb4b38ce024c527f4562efecf8bb5ae7e3fa04ea059a23a778ac37c4f1223c849dffae3e3dec73f0c41fe40890d5ce6be56abdbb75a414ef898cb22603c6a979ef3fb8e75cb3f4153f6fd948fa29797e5f92fbeef299dbed79853dc137b9490a0c45fdec26619a84a6298b2fe7c5743191385c7df9e3a96aaf484292cf4ba6e0fe79407111eb56ba89bde6aef1d3200dbbebc299c666a1576b9600851048e746381406177c31ed9c6abc2f62326d69e4b440107208fd0fb90202439c8e55a34e5a10b6559266174762f24e0840a00efec4f1bd0b2a518f20ec98b3ee59657d6295e0c2645310345d8ce9ae239d7d718353498b353cfbde83f665dfbf5d8c77ca7ec66c1610137f9b47d0e01622d1bdaa41106a1482d52c2dba7dd31b75d50d5edbe7fb01314d2d00d53850be09ab88c109ea03ae204cf784d2a5728546ed294b858e968fb1d152f44f93b3f8c3e62712eebc34de83d366a1661febd1748b67989e0e9b1a4a8f67371eb7c95fe4f45397349b1cabc8dc003f7762762075417fcdf585ff16e419b52d4cc66cb136a087abf74b75c932a3cf9319985b360f5ad4562869a89d4e51b1d420a706d24cd1d3e871b9299d4464341a47004d33e8bbb9441e12bba1fb6385972dd3b3789e850da895686325172eff67b27ad0a902882548abe8a21194f3baeb83964cc462de7bc31320603d9e8e90cefcd0f5adae70ce6b3205f43d396498a412dbdc0c37052906e06cc65fd3ed80b96743d188455f50d34a84d633795a931a26d36ccd9b6384cfbad3206ba491b41ba13d8f6509a9a7ed420cfe8cd56bbccc71e9fdd37e4c7ce1ba034f06c723924058128cf40c820fe25e178a471ad642ac14560cd49cdf734b9292f8a0b46e26efd3568cba821188f186e2c95a883cccc45f5b7b170643bd6528a33174baf9093eaa0efc7077d01a66ebb032d28d26c8fef2f2e1455f78c933f914489b371a3f2b695e784e8b95ebd02e6f95400edee8ea43c23024f95ced5a7c6a90a585a4de34ef707682c43575fc21d5e975107dd97915a929d28c2285e1346e726878465b2671941b6d0d5a14b3e72947ec7f7c2b0b8b2c43381b085582ab5277fd2a391d9aa666686a61ea53831796c258b5eb24e3abb54c1238545e25d4f79ff084f87b8fa2eac1c62318c62aa08d47737bd8ff31055f512cd27b2d0b26dd422b78a3efb32241995b5fe616fba816296f1a46beea114828afd5ca2c50f2c83c0d1c3703fd29f76172b99a2e4f338da429fde16efc18240496660ad282db8a80e9978fc1af79c1d0b1f42f8f32e3cf22e3461ded58c25df7c066aee2f913108eb6a5e3d83f1eeec455d0c7115732943e932a9e415dd322be5d32df2d106b3b1b5e2c0f0e504cc9e2a576791ad2d07b8174bf3ac22afb4c21ad234be17d47a7af2c28d000f31170df392d6088ae4add0bc0ca2a2a7bdd8866683ee132866d00b68c40a396620bc8602be3d44c639556f47350bfd04b7e69df06ff6f92e8eb7abbd977a542e76e8c6e4eaa5dacfa1e771934f44fe40f15ffaf2494aedbd94b00bad6021ca7fc11fb0cff9d90e66f011b0a7b800158028f0e5dd05088ecf7686e65fd4c9af0262df2c07e0f269d76e5d8fba557bf412ad096b50cd64e59e91263e958bbb1fd1039a7991e300de8149fda176645544c338967954f0e7101494622c5fa16e86e356b5f41f442768141109d57a98ce89ffc851bb351354402b3fa2b44e2f1418e24a46fed306ebbc0b3f33495939af8d35dabc7d0e8f933de438611e03c7dc8796c29f7cc998d3db2cd2d8a7a2c52e1df03e5f2b63eb1f69471b2937832daf95593da45c6e20e2ac150f60250b56b298dda243bfd5988c12ec8de25fc7a283ee4bfbbe4eca34c756bb4ced4ffcc47511e6890985eea61303ee16880ef817b4f766593315cbc7eb952b30292fd2a522d18231855331807f32381b1890834a4adabfe68e778bfcab40c048e2ac71be8718eabdb6a14f8c25d5c626e75d980add33ef415925ce825ac68fa6669d76521aae2f27f8ad47b996d091ef1d1f5900a35176e8522b2f535157cb95f6f91e030d5c28f8d83ff17be7ec784094caa73d090e5b9e3e69e7ceb53834631ae5532c4604da658b8f6534b414eac3e841e3d235c984d2f8c79d5188876b202b8f5265a6b114bca21b823386036d5edbc3110103b10ede2ba4896f5d35dd715e12692d12c4738c6889309c12b3b3c9c01508cc47989daa416e173d2a3a40f345faabbb4ea59effbdd920fef2de2b35c7e0128ac58442fe96fc18c5af9de89be7441a9bba5cb43fdf9a99bada14fcfc3b91f3ddde89f13fb888116fc4466b8e8b5fc68f484f91a5847fe682f5d9cf78f4a044ec13b68fd2839a8bf567f576ae977aacdd091d254e3c4c6f1870185b40b113fe971d9a704fd7c8a721c7fcc1a29fc5d85a15237966cd303137e220cd527c56cde8b30fbe0724df20e4e5be5bd5d04f1f22321cbb640a8f374bb353ca5aa2af700e4c180774df1d726513365de7655ea63916f8011b4c4db784629c1bce4d8a31c0eb8a07c9b1c15fa99b9b157734555ce08a0279609a60b8ddb088758025ad427e45f50fb98a3c901c591df2e6121a4fb7597d7359274ffdaa7a0e73a11149c28743e5673d7c8771f4da1fb103dd69a540a7b6c3a22afae7372ff6b911d36b72ca301399589c4eba7b66f0235c2247e8a675bc2c35ff8e219e81b0d34eed5201497e934a50f44eb3add8b126bdc7f165bafefa3f985872419ef8550cffbd909261d46f76586408145bae9c48846f83b82168a0ccf6a2094926530018d93323102334d50a08dd592cdc78a269b0feee1455009ecd74a9746c45b9ace54333695afc56215d158ad812911243fa30f818018bbd7c3f002226d60836a4257b07be5e498a8de054467ba009db2d3212c86b8e3e1d1382e009a33d479613dbaa41db9365eee5a0b8ca822f6d16e4ec8f6579da89821f5a9b48ef70443043e1da28f6ec8480dd506b21c4a18532e62f9e3164af683957a10959febaf8f7477d8cc6ef6aa9f1b594ee46b36a446d0d6818233d98858ea39f01e2cceacd2f1ab9e4712a132f3f13666da417cb4bd9c2a41948990e50ef1d93082a144da58c03e6ed9dd97b2b3e41f8d6957038f03ce1f1f343d72b4cbe88af56f2fdc2ee6faa988316636097aa5adf847eb4780d6dbf8ea338fab25872c67b8e87c4db21b6471a5e5043da280b9071510f356ad33b305b7cbde047631a7b709a61faf182aa6d84ab44f6af1f262ecc17c9ca479d05f746c541df18746d04f3ae8478b3832aa97fae689654424edb1ba6bf29872305f1e9acf960fec581aa4aaa4801cee3c1e03f8e3ed68826a28a943ab8ba55837b8e2b4638ce2f027c82f89cb8d94903224db57c2962259bf2412153cbb8a856930dbeb1e123cff4ab6b162f4ffe911acce28d8dc666bbde7a9e5d2a3d72e943ea2200ccfec0e16cadb26d8dbda1c1465a4c63b6630a215135565a0f8f9c0927c43d06c457431a23e102e322d07ca768e7f6f2c45eb6a15c6057e14ba4ad7929df9306bbcbfe0ad653d690de129f52fabe410d7cf63a4330ebbc176fdd3b71b4d2dd04e24fb6fdd9224b28c9c451d36329472f180d50421bd390d3d4a275569f1ef2f1f42ffc1718bff2246f2012f09b9d1dd17ae851024d49770cd108b0542b2693597e9c7deb54e01b50c41b2c6f41d0ea341c16535d55e6dfbfd5835a93e027bc1137a7406246a3e18ab7608fc38c27a10a32059718b98f5dd63f1859e22431545f7de8b7a042af74212af609ff3e6a6fb7ff8d7488beda4c24e0b27f6ca7ffb871f307a0ef3efed539a51aaeb71987ccfc28c2eb45624afd1d8f525e27f42c89eb941a13735aa8d760b40e4a94006e42c9cdb3c1ec0cd976f02ad53ac114754f0f1601f73b30000059c3188e7aa843997778e5de2e4aeab94434f5ddeb2bbc635a5615048a334d7ec441842ae1fdb7b9caa2bccbe13c1a1a21bd39fd4210441a3a73f0399d00a482e7c6d26564c54ab77607589093c2729e76a22399205e5a2cc10a749ba97413c4069495e4d20b7340f1aac177a5f7e4516d60f98500aa712b67f2fc5db777d0577921d074dc3d4dab67552e575f887470f95381a82cc8846e664b121d0b85bd830c5bb8cbdc0cceb002c8133cf9ee1eca1be1547d2d0530531cb1608c3a0a6825f76ce280632e883f47afca8fc791c8930ff260703133a8b31335f7f2edc2e44299d6699b614941e10514f640ae659cc92a2c6cb7a0270e2df3aaf082b69877efa6402967558df703ddd57cbdd6b6ce5d2b973601d265ca44657639c74bdbfc584701d6b72345782019be613655c089a88e54dd8d52a63bbe7d22e5d6eec33efe3df13ae165290736de99299295fd5886ce8b744c8f4359517241066267e799037d88427693de9f68a8b744b8cb95312a34e3d00798a5e878234160bf51c8420d1a32b1cde829f2a14374423f798a08a42b1b972614fb303fa09752466f1e7a98df1a657244cae655e84f9d146a55fdca55140b0cf702a0282f9f45fe91d90a6e8f370ec4bffdf065703204bde121e928fa7ac676608aea9a77efef2cd56b73524a708123fc59d4b2e518cd0fab7d1fbb82b22f4bc0939da15fedcc96835dd9bef420356cf50b97c52d801f794091e49bd058c0960e544668f7e5756cfbd58c08034645ed1b5a32c76c28617e2995d91ae89a5ffdac50cf64b433d1d491fe97ea5c9c9e718ec1e8048b30e4d2e2c7392f28132cfbf6da79164ce09165c296feb14ae71aeef5d2dcd0c9572035ad52a1dd3773662ea25041fabebdbccfeb1914f66cb80eb1054f5eb31adf0d42fc6be263cb532ff3de2d432d1434aedf3f1e0def6bfe80fbeb5eb2a647f827e609e2bdf13b03b385d09ef6a85f5dea47897e1a035febf8de186a4392d2f117ebf6762b78cf89bc0e6f312857576d90bc35b1786249caeea3b4ae3652efa5464fb54adb6da6cc19aeec80c73bfef736d99568012c163a7d0c588e43a069722ac585a127f5a0499e6272265eb3768d0d5983a9b6dc07b2d823c497938e18c1743dfec4689bfb63b67720c30d45fd631a4f400ed773f15135c147ed32d478ab747f3a2dc8c216c9543e999ceedbaf7bb39a6b5ab7df70517a8189edde57ebc99d681b91f3294980e9ed54c0174247031f6b11a9aae9de0d2b8a731b705ab820f4118f75c2a24a49466057400ddcd500b6fc053a6920550535941de56322c73dc643dd97a4dc7bdf4a0f3f45b024e84e5b8ecda2e53b797e7947646f069e60a315b6dcbaa84fe72ff2908301e266d433b068b3388345aa8057a53861d26ccc99ac09473e56a37de0f0039fe4eed6e942ecb66d2fe3ba870c3e5d78d3d6b08a9b0ca02f933356412247740ef9b6723faf71bb9f9010b72cae0d5e6062"}]}, @dstopts={0x11, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x7, [0x7, 0x7, 0x100000001, 0x81]}}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x541}, @jumbo={0xc2, 0x4, 0x2}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x86, 0x0, [0x0, 0x3], "87836ba9814800eac493833e0bd7da427f258e8af48510275f1f3fe9bbd4213f45990cbad399c33f6a923381002b6f97fbb00358a388dadb49eec395cd3fe21c157a7c088308e06f801dafe0ac1c98a669c55c1c7301d0f0b11407f5e0f8e0e1b4fc46e176acd3969c4e99da7435d27c8ee7a07a79ec28542dc1a1fedcdc62518b35ce1028f5"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xff40], "8963569b6731ca08df41e9bd7c8f89bae33d7637809ff2cf1a7b4572dde8e40221b0c457a39583dfbd80262b7434983074ea94a4082fce8de194a32cf6849885f804ec0ac79804098b0681afa970a8e5d7a86928789de22cfd3a1053ac206a5e6e96b19f345da743955a26058ec854cc85e786f8c257d85db5e4b8ff52c50d17f7d0030a2eb2d8e976e993"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "e779a0c1bf1acd05926fad8221fff95f5d7d9b7394b18b585e2ada6b2037090122e5502e03769293fc5e4e553739eebd8afdfcdd7be73db7f154ce6f921b369e552566be5683cc30a8a0eb0e1b2112767484299ff6977f669a9d3783f67f030edcd9232bbe50c7997ec134cb8360c1b85fbc14be4fa0b410b360988ef5de62f5867ce9807ebef5964cfb6b4811c2d6baeb639c7ac5d3783e67c9bf84a4480a48ba0ff735d39c6225ce03dc173bef3a0ac5a876a7aa57a9bc353a13df0f0bfb78cb53f458a3e56f9282cc634a015c5275dc7684fc47a6745a5013e2d9d5843e472a515a4cc523213283d681ad5338549eda3c12fae6429e95ccc21fdd7286d22b78c309b5808ee903560bcb36da596e232b49af39ff67b4c47421ddb1c9a8877dca06fee4737f761edb9c36b24562b62e90acdad53e2bd6b2d2e5192277767e87ca44d095a1ba51cfea7355fade2917e6a1aec8ef9832cdbbf43e6e2bf038378cf37c07328065189c157b49531c9de8c96af94c24fbaf02dca073a12dab6515befe4132c092e63c03aa8dd4ce61716c4a9601f6d5a8d3ecb6384bd748aa634d0c89fc8b9214f0f497fca25cce8013c43f572ff18c531d33f46708043cf78d7ac36e1c43ded9756088fd1ef7906f98c6dfb5428a74f796b48a0ec73e4132e55e7326a0cd2891cb8531db763e560e6eb4b232bef5637b94b002c726037731ecbd4ca3c647d993eb4c2a9b4d71c84e1b6caad4e1ec825262bae73d665e775744b8ddbadde8e497a6ab4a1f9b266c791e740d6450ffc13b4cdc2b02939c8877527aadfe93b6098817144c9b660d6f938792739c8b990e891cd92cb39777de122d18fe604270880966375f2aa1c18f2aea9795098fef9ce30bbd76c7f0e66a8b259f0baeba274f9b8e42fe3aefc9d9669a22a0bcfb1eaea8d09d2e5879fc67e9980fc26ffdc04d59750495572459f36abcd9c190b39c812a93578f343426524e8422a0187a5ab0dd1bb7b1b69cd3879cb845da8083db927e8d8613e995adec6ed18e4d5c9fc30933ed2d01857a0f500309a04ad7c31b92fb090aecfb9afae39e18b66ec229f3c9ffddba7e06a33e3e676cf783f4196ef1313ca78164af2c81d44a9337fec83a8f67c2f53cb3a1b060d3aaba94533fda2f8a0b01fb5d0175fcf0b8659e5ebf9dc5e45d7e60018441f0c1ccf154ea108d9d4c26ade10fbb447ff666b20a36a5401a9c721f30377ece513881504447107c6fefbe2bac8007538b38b167629b0873631b59299813fda32ccd41532fb88990667a714015e354114050e521ede58c91bf69f99f87a1ad73db90007eb17037ed587f2630f8d3c54f4a2ba148cd3e98e51ce6422f6d0a7e8842f0364d8c99649f5660dff7572558c97fecb277441bb3446d78bb9130a0be630f5ddb1b244e52756cdc20a4654c5dc2bab351152a4762552f83efa0068f57697bf763570e9eb4b647e732d221860adf35cbe130659f38f7476691c5a5a05b409c199a29497a883d31261b4c0404f2e2e346321ee03521676bfb103cdc729c58836aa46b985d53221859945f468604fc73dc7e19941b31e921899851492f8184929a621186ec2228937d57595d9796f52696f15e0a212ff413169b094b47a773cda9acbeccb39ac9afaff8852c2caf861b7f47ef51c36e92187e8fbedb7cf1c3a5c7e258bd787e9b1adc4326521f188c8608a8ffdff4e1c0f6bfb6865b9a95557935c336525c2e34c927a4b8f75ef1e813678f42fb47c1b43be5a2de3147ee3130190f5333403a61ec3e15e9eaaa9c254da76d9d8b220f9fcfe1e0b5fb89a6502c768d12a6dde3e47fc2da7fd53ab6aab7ff19037089f86493629ee488bd5a917cee11bcb0e97aca76d5eca5ae3a4e48af6da8e785e83d91701f531cd27e1343e5ece67cf5a350b3627505fc38776d7ff79b21132dc1511d22f6141265e9c44363dfd3020dae8a221b5d311ab5f85b0258dc2e9a0f4e26b28f5573930dfe48f6c9d15085b149fb5f7f1e1797664dbca363850f4b1c8b505fad0c2e5887b16d9f47e7709cd961510cde3f2b71cd96c070b90c7aec8f63b899388dfc735ed1ee6ac50758ed46f07150afb5ea620762ee208d2b9d25d25ad0924f23513cccf4011db554babffa85d7282fac25b8c285582f81163afc38c0d1facbe6dd9d8a971d78b54e261f0ec30f671ef612d989c1d9f07bcebf5a513ec2ffcbc1f2478953c3f89aee4ca59dd5294fc47359f609e187d97e2f6556d7632de84331671d456c9e5da58a89cc36d75ea96e91c4b8682f41cdf6370110c458f8803652150b8c8fe0e9765af32fb1e177980555c8369970c9f90f451039a146a6d289ad22d6bb1139f71cf3057714988c58d8aaa17797ffe12b3cfcef31bad2b0675a8f5bf40903a53f0e08f1a7a870ae68b9416c74de8baee17bc60005b70b4b7296779074a04e1a520b1c1e00d8b28b4b168fe6590af4c71400b666630f76e484664bbe35aaaed6bbc93ae969d86c237f4147a87e697b7b1c9cfc430c826917efa6be6a0135b349fef7636ef874b75bebd60e0c30bca324a4805e4d0613ef830627d57c6d731e1652263f0411b77f728c276f7ae9a67a3bd6602a3048ec5e89643467528b3df812b8f28e82999612c51926581b52c7e292ec05132815ef45772d8b4e47c0420f7f6e448449a8eea73d784211d1ea46423998e88f5e63b8aa460bfba43951f3f30146e72101c0221c101ca87553d1110959e865c4db8a60522afd772bc773f6ab42c7172379e5d40b8613dc608c936b77829ddb301b1e68f98ed15fcd54d15ea2cf12c04ec80eb4422e67cfc792466dfb51732f39b62e4fff641ba08a23f35852eb90e5503b17ad0ad564a37ee2258266523a41d98506f529ccd18c709f2f30d61ac3040d991d6ed375f62fd12f3898f524030b7250fe5b2d509378d2816a01aa0de9abd94b93f6844033bc113783d0613fa47ec364d76c8811c1af79ac46dea798f12b1be92bcdc487b8105a201410962894ce2d8aba59670c90ff04f5a6e9e55a473a2b3237d8fead95239d27d0811bfffb3c03df9be6b1a7093935595b3e093bd4863535fb39e1f90b7f559a42327bcc80754c77d9244f05534e1093983daf67ff73ef911262befc988e3be42fa3377939fe19343d3ecd8bbd66f26c18234c60f9f7ce5fcc00e09293262704ed41289bde57d1876a545a14b714f19d4d57a7f36d6734b1cbc6db573dc54201bbf3397d278dd582f6ea5e7230f3fe72ec2928a6614232802d77a4928613f8e57dbbdeb7968905135028b9450b6ebf46cf87b348301f297229b0e77867235f2c8b5ec8bf0e9f113c5a09db09a77e7a47e132a61d08de672c3d439008530958f815c15ac434ee6f276c94e5b32d777b5c55c75a951ff83c25ff71b453e29e0b35b24a0e89dba6873146275b05d46b9f0b9bef986e263a4115961a593dcf79b41effd67ae09bffb77e225ac2462e73d1e1d83a4533bf0ef7e60debe9682cac6a625a7bcf9c6c129c048058d9eb87e7d5fb263e22a5bebd48c122e57b45cece38dcb25b5de449895632187747eb8e385f79f7e1436e83ff5991aa876577bd2d67c2af56b18f593142bf111df1d8ce698cb6f8673600954b06ba560271714e907f92de63acc581915d51e9270575f15467ca44208af078e45213c893572115d30005b4cbd8277869d657c228150219f1465384dd4a59a55fdb29e965df3fad2560a0ca4884e05ee1636e2267106194c3a88728ecdc1dc942878c953f0adce2ffa6b4f44bec5da091483a802cc248ccb51f76375d57f735b4f11b28ca688ec1e6a223dbfd2e3cece99e18821f2c1bed4926fafda76e6b0bb7e9e24be6e17b578893e5f26f62d901ec99b23f75f8796731a2104c3fd617d69744d4dc7f056f0e250fa67d423e1de2c29ce3a8d48c847f0328931bbc96316a7ebf516bfa71526ae4d3a2ac73aec4e4d07733b5f98cb9c6cdc000005fbdb00349c25522cf198a670a4dbc592fe070feae7f44f8248d2ed840fc97b52ac4a5bd50f12a52c9ba999b1958550c6cbb6948496cbc6822a70e3606714d5d5bbf458ead1ba11e9e7f52c85bf30247bd5a72e77ae1d21447d70f32ac974cc9f3efe622906291e5c6f996758da9264307a472a6ce56d8b54f85164aa246763ba8941c7cca0471eb68a5296c2be1aad5001c659746f14c2403d40f0d3c2e8455811a371a5316dc5c12277f2445413cbc576ba3597ade5576319a0ff2d3e5e9ac4c0482d13e119924f4c9da177366555a5ac8b2bd5ec98bfc3884dadaae31aa9615b0655823d733fd01115cfd3322276a959c323121fce1ac2e409fc63bc5abdcf1a76dd3dcb6851f9e61b965312f1a7cd0fb29c3a04d43adfbbba1713c0674fb7bd59e2d4770a229746a5cfd101daff3120e0d2f13820aa199b549d1fb92503750db3e68a2db1644cd9a653c9dc920a40feb1877d16c2cbe0f774ebc5412eb697dbef0bdee3538d586b9269fb13e76b075b9707780e24bb9ea3beaeadd57ed46cdf71d57f9e21e6b0c709ae94ba8fa4114cf0c865222c79a006bbe1ab37f66881f5ac2c47370dbb2034281346ddcf9cdda6179197ec238436c74bc43cdcc6a28987535e6e0077495810d7d0e9987d93599a9a5141a7992c5e63d959036ea9eb2b251fd67af79f15664c746c17dd20ca8c4519c4ef63b5953291cfea5232e20ced800a8e91a0448c88ea997285a21b71b3fcba8596c8ef5fa1718c9ea07427b5a53e7d2c108742ac2b26bcac680e383b63a99b760ca2a1876b6f8e95f25a4386c8a44798bee65ee0412ec202da49d3fc3e514bf0fe0d59110d1866132fc9eca7f61c0ee6239268efbd899de580a116b1a4aedbd9e3d322e5c62b492679c49f4a0741b76c168ab34157383d7044233645902373f67c4b54a41131ba6a15b98055501595dbaa1f340661953331a0db5c624e391413ca64585238913752dccbaa6ecbcc1840a7b0fa7ff3d02e949ecf40f71cd0b1b033cb8bcc41b975820540fc381c9b5256f198c64fa6b0fa9c172e1bf9ecf18e94458fc9ef42a73d482ef02288ec3fc6cf065d3976c7aa94144e75fea773a7c5a22c8707b79639e9b6a0d43ce0320c29de76a05b2e9c3f22f3d515d9dd52305a5308b937063478d4678f82b7998669ff1da38fe281a8812f61d814d0ecd09bc769a88d0121c45b2b25bf3507a316a52e79bc565f530728aec9262171b9b7b8b838eb07dd38ab7790b1b5e7e0de7efe81b040fe05ba2c6beb2a3844c3d07ae814a8a44724ccecabd55d297936ab435419fe242dbfa18dc7857446b7b3d15401ad12f27cdb250dd680f882df81f44e3d34f2f72de1a0bddb0b3276c426b1ba62d3804ecc7c8913b28edc6a1da3bdd68ea6214e55a24c935b581a3c84f51d750d63b7891e12665652a2a5d40d969dff991dd5cb534aea237aca8415ee9d003f03c15eab29e1704e037ec0e10518882ec6f623a293d06fc87e0ad35f2e77867acc5d7b761fdcb982759836627ef0f4f27216c55aa7ce9d42a8d4ec34b04d33eea03eee8169252523687b81a4ba11ce7ceb1a6909fd099a1c5dddb0c7caa6bbafc13ab542aba600c483b75f4d5de726f834d4d8b03da3f86f581408bfee2354781a749e62f2856129bb01ed847bdb8c74b270d39ef32775fbbeaeafa6fd6564fc9f45080b7d4ebcb9e3dab54e335fb9ed52f7c0a55b6c98aeabcc0199998136932a0728c61a03a7dc06f174f7060e3df371cefa1b021dd3c15122c30f905343d14a85126ca2f9c37e5"}, {0x8, 0x88be, 0x1, {{0x7, 0x1, 0x8, 0x0, 0x1, 0x2, 0x1, 0x9}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x4, 0x2, 0x0, 0x0, 0x2, 0x4}, 0x2, {0x0, 0x25, 0x2, 0x2, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x2, "ff7879c65172b49574287ed81f733d87133cfa38b7777a9ce6738182e55842df2491ce"}}}}}}}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x0, 0x0, {0x15, 0x4, 0x2, 0x5, 0x2, 0x66, 0x330, 0x2, 0x1, 0x81, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x19}, @rr={0x7, 0x23, 0xfd, [@dev={0xac, 0x14, 0x14, 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @local, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0x11, [@local, @rand_addr=0x64010101, @rand_addr=0x64010100]}]}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@lu, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.427843378s ago: executing program 2 (id=1513): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1cf8439017709fdfef5ea028a69dbd96a0abdde67b2f26394dd57ba2bdef369f627d597df084ce3fc7d03fb4f228ba9e1a133168"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x24}, 0xe6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.413811379s ago: executing program 3 (id=1514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@updsa={0x164, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x71, 0x14, {{'xcbc(aes)\x00'}, 0x128, 0x0, "000000000000000000000000000000003fe380589cc8d6d2287e1ad94098733cb609bf729c"}}]}, 0x164}}, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000007100), 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000074c0)={&(0x7f0000007300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x132, 0x132, 0xa, [@enum64={0x9, 0x5, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x8001, 0x3}, {0xe, 0x5, 0x3}, {0x4, 0xf6d, 0x5}, {0x5, 0x0, 0x2}, {0xe, 0x7, 0x1}]}, @union={0x2, 0x5, 0x0, 0x5, 0x1, 0xe, [{0xe, 0x3, 0x8}, {0xb, 0x0, 0xfffffffb}, {0x1, 0x1, 0x6}, {0xb, 0x5, 0xa}, {0xf, 0x5, 0x24a3}]}, @restrict={0x3}, @typedef={0x6}, @datasec={0x3, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x7f}, {0x5, 0x7f, 0x3}, {0x5, 0xb33e, 0x3}, {0x2, 0x2, 0x2}], "4799"}, @enum64={0x6, 0x4, 0x0, 0x13, 0x1, 0x8, [{0xe, 0x4, 0x9}, {0x3, 0x6000, 0x9}, {0xf, 0x9, 0x3}, {0xa, 0x6, 0x1ff}]}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x71, 0x5f, 0x2e, 0x30, 0x5f, 0x61, 0x2e, 0x61]}}, &(0x7f0000007480), 0x156, 0x0, 0x1, 0x8}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000007840)={0x1f, 0x17, &(0x7f0000007580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000007640)='syzkaller\x00', 0xffff9724, 0xae, &(0x7f0000007680)=""/174, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000007740)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000007780)={0x0, 0x5, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000077c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000007800)=[{0x0, 0x4, 0x81, 0x6}, {0x4, 0x3, 0xc, 0x6}], 0x10, 0xffff}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$pptp(0x18, 0x1, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x806000) readv(r8, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) sendfile(r9, r8, 0x0, 0xf03a0005) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000007900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6e5c00, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r15, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r15, 0x5760, 0x0) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9749, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000007a80)={0x20, 0x2a, &(0x7f0000007140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0xa, 0x4, 0x8, 0x0, 0x9}, @map_val={0x18, 0x8, 0x2, 0x0, r1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000072c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @netfilter, r3, 0x8, &(0x7f0000007500)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000007540)={0x2, 0x10, 0x7, 0xe}, 0x10, 0xffffffffffffffff, r4, 0x3, &(0x7f0000007a00)=[r5, r6, r13, r15, r16], &(0x7f0000007a40)=[{0x1, 0x4, 0xd, 0xa}, {0x1, 0x1, 0x1, 0x6}, {0x0, 0x3, 0xc, 0x5}], 0x10, 0x11b}, 0x94) 1.315980442s ago: executing program 0 (id=1515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\a', 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0x9) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r4, 0x90, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xf, @dev={0xfe, 0x80, '\x00', 0x26}, 0x4}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e22, 0xfffffff8, @empty, 0xfffffff8}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffa}, @in6={0xa, 0x4e21, 0xca3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}]}, &(0x7f0000000200)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) unshare(0x28000100) 1.311306286s ago: executing program 4 (id=1516): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540900000000000000b970008000ecb00000ff07000000459600ee0ded68d02c76b937e57c2573b47bf24e6a54134b09181f17ee76ff541dda831b530e8301b72fbf44b9fe33140afd2e3c9b98c08cb5dd4e5463a75b6266a5aefb5cec2375646e721d", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x4000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300000400000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.251306212s ago: executing program 0 (id=1517): r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x9, 0x200, 0x5, 0x4, 0x9, 0x5, 0x1}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1.223260387s ago: executing program 3 (id=1518): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@union={0x10, 0x2, 0x0, 0x5, 0x1, 0x2, [{0x2, 0x0, 0x8}, {0x6, 0x0, 0xa}]}, @float={0xf, 0x0, 0x0, 0x10, 0x10}, @volatile={0x2}, @union={0x1, 0x2, 0x0, 0x5, 0x0, 0x5, [{0x1, 0x2, 0x4}, {0x0, 0x3, 0x6}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/212, 0x8b, 0xd4, 0x0, 0x6}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 1.072534048s ago: executing program 4 (id=1519): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0x10c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8}, @coaddr={0x14, 0xe, @in=@local}]}, 0x10c}}, 0x0) 1.070264453s ago: executing program 0 (id=1520): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000100006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03887bafe4c6490ef65dd193", 0x0, 0xfffffff5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4000000}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="8000102e75", 0x5}, {&(0x7f0000000340)="ac52acdf", 0x4}], 0x2, &(0x7f0000000180)=ANY=[], 0x2}}], 0x1, 0x4000010) 1.008161114s ago: executing program 2 (id=1521): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 1.00777958s ago: executing program 3 (id=1522): socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0100fdf558a4590004000000000000346ca3b492a2fbcbe08dde16e7e03bdd174085d0ea693f0198930b1e54124c4c7d876a0610c3aa79da6dad67f409423cba64c8f4677877dc9400000000005a3b861f9afc89e1b56476b90ed16c44c42e3ca0ba4c0b85ddac0263ff9306"]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x4814) recvmmsg(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x4}, 0x101}], 0x1, 0x2001, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)='j\x00', 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 818.69203ms ago: executing program 4 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) unshare(0x400) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200400c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454ce, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x1843}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000140), 0x0, 0x0, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa01f}, 0x1c) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 630.724884ms ago: executing program 2 (id=1524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="09000200010005", 0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) pipe(&(0x7f0000000540)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x68, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x2}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r8 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000004c0)={@multicast2, @local, 0xffffffffffffffff, "fbb96963e8e514e8dd16c38fd5b213e9c5eed5c16a8ca6e5af5c11cb71cc1827", 0x2, 0x4, 0xb7f, 0xfffffffe}, 0x3c) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2c, 0x6, 0xc, {0x1, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x44}, @multicast2, 0x4e21, 0x4e21, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 0x2, 0xc62, [0x101, 0x8cb8]}, @usr_ip6_spec={@local, @private2, 0x4b4, 0x31, 0x5}, {0x0, @local, 0x9, 0x9, [0x2, 0xc10]}, 0x4, 0x6}}}) 199.880408ms ago: executing program 1 (id=1525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000040001901feffffff00000000017c0000040042800c00018006000600800a000004000280a77649dba83581c58e6b9116ed51dcafb2a731eb867df47606340e3b0e1245711ff8fdeab2976e0e0bef1c3debb78563577bbaf20ea736301ca5341917e5389424cafd9e00b0076d9a53daff4b55d0c006b6b7d0ea3975689abdbe58eab7b10eaea4d3f7b53b07cb623dc1f32f1925b3590b7f98e2c27e95785d844f2d13fa619219148db4593e936d3497d093798b8c7937783452a3f9a739c5cc894a0f5b3a"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x4) r8 = socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x128, &(0x7f0000000980)={@broadcast, @multicast, @void, {@ipv4={0x800, @dccp={{0xf, 0x4, 0x2, 0x3f, 0x11a, 0x6d, 0x0, 0x4, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0xd, "bd38f91f864432832bfcc4"}, @timestamp_addr={0x44, 0x14, 0xf4, 0x1, 0x3, [{@local, 0x7ff}, {@rand_addr=0x64010101, 0xfffffffa}]}, @noop, @ra={0x94, 0x4}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, "bee623", 0xff, "b91205"}, "c436469ee232d234710352cf0f122819e19cc7448efe175bdadbe5983607d0f363fe1ad16bdba9190a4518ac7fe534b259a8486c70a999df473310ded2efe2a95a20d41523e2890b9963c884668264c13ff5bb095de579006ace072dd8e5d0636cd0f99a618ee4e52c9e1bc4b4723307af9238b22d40f4a6864b8125c224ff78780474faa28c4930aaa7c8713b6be3690000ef78bb2412a472d5fc501a5bcbc9eeadc87aa1ed2ef697a15e7f25d2d0015907907aeed3a57074353eef4b591d89d8099251dbdec41f30641e861165"}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x53, &(0x7f00000002c0)={0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x902000, 0x1000, 0x0, 0x1}, 0x20) mmap(&(0x7f00007e2000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) socket(0x2a, 0x6, 0xffffbffe) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) 144.565097ms ago: executing program 0 (id=1526): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) (async) connect$unix(r2, 0x0, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000004c0)=0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x5, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r5, 0x2}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r5, 0x2}, &(0x7f0000000100)=0x8) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46381e8827c0060900000000001400a38009000100766c616e00000000040002000800000047e64000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 122.153019ms ago: executing program 2 (id=1527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create1(0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000740)="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", 0x1000, 0x80, &(0x7f00000004c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @local}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ca95deaa14d67204e271c124cbd30f04f82308442a65329670667d017314ae8392cb1b5bdae58b931de5e72f84bfad616cc8a93ee80d42f919877a1136f763794c1d65b12f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r2, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r4}, 0x18) r6 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="10eeffffffe8dccd97922ad9000100621a55e2530000000135339700000000007ecd56fc0000bfb572ce810600a323e89784612844872e40296a757cb9bfd4cbb19dd28dc0d2f7a8708f3da17aa154f094318d8ea9f95ed1ee3f283df087b147390114a898166cf29a24a596ea94fff4c5227b68847d9e5671faac6144032739a41b6f"], 0x3c}}, 0x0) listen(r1, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) kernel console output (not intermixed with test programs): started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 95.456216][ T6767] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.602458][ T6789] tipc: Enabled bearer , priority 0 [ 95.610772][ T6789] syzkaller0: entered promiscuous mode [ 95.616285][ T6789] syzkaller0: entered allmulticast mode [ 95.642079][ T6789] tipc: Resetting bearer [ 95.651297][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 95.660343][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 95.680610][ T6788] tipc: Resetting bearer [ 95.692780][ T6788] tipc: Disabling bearer [ 95.874548][ T6797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.891271][ T6797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.968139][ T6807] netlink: 'syz.2.235': attribute type 16 has an invalid length. [ 95.975993][ T6807] netlink: 'syz.2.235': attribute type 17 has an invalid length. [ 95.986572][ T6797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.999170][ T6797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.020912][ T6807] macsec0: left allmulticast mode [ 96.026580][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 96.038739][ T6807] IPv6: NLM_F_REPLACE set, but no existing node found! [ 96.066649][ T6797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.077590][ T6797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.146037][ T6797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.173615][ T6797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.258713][ T6817] xt_ecn: cannot match TCP bits for non-tcp packets [ 96.370021][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.381099][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.412757][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.433062][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.474129][ T6827] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 96.482727][ T60] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.491764][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.551270][ T6127] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.559780][ T6127] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.596585][ T6831] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 96.613556][ T6831] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 96.655677][ T6831] bond2: (slave vcan1): making interface the new active one [ 96.664185][ T6831] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 96.695511][ T6836] veth0: entered promiscuous mode [ 96.701309][ T6831] syzkaller1: entered promiscuous mode [ 96.706894][ T6831] syzkaller1: entered allmulticast mode [ 96.725197][ T6827] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 96.742133][ T6827] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 96.754371][ T6827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.769465][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 96.845146][ T6842] nbd: must specify an index to disconnect [ 97.240391][ T6857] geneve2: entered promiscuous mode [ 97.245660][ T6857] geneve2: entered allmulticast mode [ 97.485557][ T6887] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 97.732239][ T6910] tipc: Enabled bearer , priority 0 [ 97.747408][ T6910] syzkaller0: entered allmulticast mode [ 97.756098][ T6910] tipc: Resetting bearer [ 97.891238][ T6914] team0 (unregistering): Port device team_slave_0 removed [ 97.902125][ T6914] team0 (unregistering): Port device team_slave_1 removed [ 98.128964][ T6936] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.349923][ T6950] tipc: Enabled bearer , priority 0 [ 98.370614][ T6951] syzkaller0: entered promiscuous mode [ 98.389916][ T6951] syzkaller0: entered allmulticast mode [ 98.436122][ T6951] tipc: Resetting bearer [ 98.475411][ T6951] tipc: Disabling bearer [ 98.499873][ T6898] tipc: Disabling bearer [ 98.650864][ T6967] netlink: 'syz.2.278': attribute type 2 has an invalid length. [ 98.650970][ T6969] netlink: 'syz.0.277': attribute type 3 has an invalid length. [ 98.666457][ T6969] __nla_validate_parse: 2 callbacks suppressed [ 98.666472][ T6969] netlink: 666 bytes leftover after parsing attributes in process `syz.0.277'. [ 98.691219][ T6967] netlink: 'syz.2.278': attribute type 9 has an invalid length. [ 98.701803][ T6967] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.278'. [ 98.709011][ T6969] syz.0.277 uses old SIOCAX25GETINFO [ 98.802294][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.829233][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.849316][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.863014][ T6976] wg1 speed is unknown, defaulting to 1000 [ 99.115494][ T6971] infiniband syz2: set down [ 99.120910][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.141768][ T6971] infiniband syz2: added ip6_vti0 [ 99.197256][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.281'. [ 99.210054][ T6971] RDS/IB: syz2: added [ 99.226534][ T6971] smc: adding ib device syz2 with port count 1 [ 99.233338][ T6971] smc: ib device syz2 port 1 has no pnetid [ 99.242558][ T5926] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.251553][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.366209][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 99.386241][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 99.575543][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 99.584254][ T6993] netlink: 'syz.2.285': attribute type 6 has an invalid length. [ 99.767559][ T7001] syzkaller0: entered promiscuous mode [ 99.775091][ T7001] syzkaller0: entered allmulticast mode [ 99.782854][ T7000] tipc: Started in network mode [ 99.789099][ T7000] tipc: Node identity 7eb8109fcdfe, cluster identity 4711 [ 99.796419][ T7000] tipc: Enabled bearer , priority 0 [ 99.811914][ T7005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.286'. [ 99.860030][ T7000] tipc: Resetting bearer [ 99.889501][ T7000] tipc: Disabling bearer [ 99.904337][ T7007] tipc: Enabling of bearer rejected, failed to enable media [ 99.925260][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.336421][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'. [ 100.372736][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 100.391460][ T7024] netlink: 'syz.2.292': attribute type 14 has an invalid length. [ 100.401170][ T7024] netlink: 'syz.2.292': attribute type 13 has an invalid length. [ 100.422097][ T7026] netlink: 5876 bytes leftover after parsing attributes in process `syz.0.294'. [ 100.479226][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 100.948279][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 101.083044][ T7058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 101.243944][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 101.464316][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 101.698958][ T6971] ip6_vti0 speed is unknown, defaulting to 1000 [ 101.919975][ T7065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.014291][ T6997] wg1 speed is unknown, defaulting to 1000 [ 102.055436][ T7053] wg1 speed is unknown, defaulting to 1000 [ 102.171649][ T7070] ipt_ECN: cannot use operation on non-tcp rule [ 102.476987][ T7079] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 102.944889][ T7087] tipc: Enabled bearer , priority 0 [ 103.001727][ T7087] tipc: Disabling bearer [ 103.345968][ T7098] netlink: 'syz.0.316': attribute type 3 has an invalid length. [ 103.377965][ T7098] netlink: 3 bytes leftover after parsing attributes in process `syz.0.316'. [ 103.461556][ T7100] wg1 speed is unknown, defaulting to 1000 [ 103.520418][ T7100] ip6_vti0 speed is unknown, defaulting to 1000 [ 103.551307][ T7107] netlink: 'syz.2.313': attribute type 11 has an invalid length. [ 103.559679][ T7107] netlink: 'syz.2.313': attribute type 11 has an invalid length. [ 103.939229][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.185318][ T7134] __nla_validate_parse: 1 callbacks suppressed [ 104.185336][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.324'. [ 104.285945][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 104.396943][ T7142] bridge_slave_1: left allmulticast mode [ 104.409431][ T7142] bridge_slave_1: left promiscuous mode [ 104.422118][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.440413][ T7142] bridge_slave_0: left allmulticast mode [ 104.446275][ T7142] bridge_slave_0: left promiscuous mode [ 104.453771][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.586186][ T7151] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.670113][ T7145] wg1 speed is unknown, defaulting to 1000 [ 104.703541][ T7145] ip6_vti0 speed is unknown, defaulting to 1000 [ 104.714912][ T7140] wg1 speed is unknown, defaulting to 1000 [ 104.974553][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.332'. [ 105.169177][ T7140] ip6_vti0 speed is unknown, defaulting to 1000 [ 105.329928][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 105.421934][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 105.525633][ T7208] netlink: 168 bytes leftover after parsing attributes in process `syz.4.340'. [ 105.543467][ T7204] ip6tnl2: entered promiscuous mode [ 105.549059][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 105.558073][ T7204] ip6tnl2: entered allmulticast mode [ 105.575431][ T7204] team0: Device ip6tnl2 is of different type [ 106.112064][ T7216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.344'. [ 106.514086][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 106.642280][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 106.804727][ T7244] netlink: 'syz.4.351': attribute type 4 has an invalid length. [ 106.823947][ T7251] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 107.008541][ T7239] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 107.073593][ T7253] wg1 speed is unknown, defaulting to 1000 [ 107.117987][ T7253] ip6_vti0 speed is unknown, defaulting to 1000 [ 107.634905][ T7276] wg1 speed is unknown, defaulting to 1000 [ 107.658126][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.665548][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.699230][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.706988][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.048297][ T7298] wg1 speed is unknown, defaulting to 1000 [ 108.064076][ T7276] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.121253][ T7305] syzkaller0: entered promiscuous mode [ 108.127802][ T7305] syzkaller0: entered allmulticast mode [ 108.385047][ T7298] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.608511][ T7307] netlink: 'syz.2.364': attribute type 6 has an invalid length. [ 108.819815][ T7300] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 108.918053][ T9] IPVS: starting estimator thread 0... [ 108.927250][ T7326] IPVS: dh: FWM 3 0x00000003 - no destination available [ 109.008822][ T7323] wg1 speed is unknown, defaulting to 1000 [ 109.017100][ T7327] IPVS: using max 36 ests per chain, 86400 per kthread [ 109.152788][ T7331] bond0: entered promiscuous mode [ 109.160091][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.167236][ T7323] ip6_vti0 speed is unknown, defaulting to 1000 [ 109.828859][ T7346] openvswitch: netlink: IP tunnel dst address not specified [ 110.099323][ T7343] __nla_validate_parse: 5 callbacks suppressed [ 110.099340][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.374'. [ 110.330015][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 110.857232][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 110.876960][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 110.878197][ T7377] netlink: 6 bytes leftover after parsing attributes in process `syz.1.380'. [ 110.896912][ T7377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.917734][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 110.937474][ T7380] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 110.945146][ T7380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.382'. [ 110.959379][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 111.722433][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 112.181413][ T7416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.181630][ T7426] netlink: 14 bytes leftover after parsing attributes in process `syz.4.393'. [ 112.190276][ T7416] bond0: (slave bond1): Enslaving as an active interface with an up link [ 112.486321][ T7426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.509199][ T7426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.522971][ T7426] bond0 (unregistering): (slave bond1): Releasing backup interface [ 112.540712][ T7426] bond0 (unregistering): Released all slaves [ 112.925998][ T7451] pimreg3: entered allmulticast mode [ 112.959398][ T7439] wg1 speed is unknown, defaulting to 1000 [ 112.974071][ T7439] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.283256][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.291032][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.422929][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.438335][ T7463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.892510][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 113.904419][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.914712][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.989120][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.025282][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.189190][ T7508] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 114.198869][ T30] audit: type=1800 audit(1762808237.988:2): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.409" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 114.246924][ T7508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 114.273432][ T7508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 114.648053][ T7519] wg1 speed is unknown, defaulting to 1000 [ 114.702957][ T7519] ip6_vti0 speed is unknown, defaulting to 1000 [ 132.891153][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906614][ T7563] __nla_validate_parse: 1 callbacks suppressed [ 132.906630][ T7563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.414'. [ 132.952780][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.419'. [ 132.963310][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.419'. [ 132.983686][ T7563] netlink: 144 bytes leftover after parsing attributes in process `syz.0.414'. [ 132.994197][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'. [ 133.204220][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 133.219142][ T7583] veth0: entered promiscuous mode [ 133.231137][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 133.265343][ T7591] netlink: 'syz.4.426': attribute type 39 has an invalid length. [ 133.318578][ T7583] veth0 (unregistering): left promiscuous mode [ 133.913068][ T7641] tipc: Invalid UDP bearer configuration [ 133.913124][ T7641] tipc: Enabling of bearer rejected, failed to enable media [ 134.186525][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 134.244110][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.330194][ T7649] bond0: entered promiscuous mode [ 134.351661][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.620156][ T7675] netlink: 'syz.4.445': attribute type 1 has an invalid length. [ 134.689414][ T7675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.710222][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 134.773051][ T7684] veth1: entered promiscuous mode [ 134.883765][ T7685] tipc: Enabled bearer , priority 0 [ 134.913627][ T7687] syzkaller0: entered promiscuous mode [ 134.926876][ T7687] syzkaller0: entered allmulticast mode [ 134.995048][ T7703] ip6tnl1: entered allmulticast mode [ 135.017231][ T7708] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.450'. [ 135.100164][ T7685] tipc: Resetting bearer [ 135.133614][ T7682] tipc: Resetting bearer [ 135.231605][ T7682] tipc: Disabling bearer [ 135.368589][ T7725] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 135.414450][ T7725] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.628297][ T7740] No such timeout policy "syz1" [ 136.276314][ T7780] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 136.337634][ T7780] netlink: 'syz.0.470': attribute type 2 has an invalid length. [ 136.686410][ T7799] wg1 speed is unknown, defaulting to 1000 [ 136.720439][ T7799] ip6_vti0 speed is unknown, defaulting to 1000 [ 139.856786][ T7834] netlink: 'syz.1.484': attribute type 12 has an invalid length. [ 139.984125][ T7843] netlink: 'syz.2.488': attribute type 12 has an invalid length. [ 140.000245][ T7845] __nla_validate_parse: 4 callbacks suppressed [ 140.000265][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 140.014046][ T7843] netlink: 14 bytes leftover after parsing attributes in process `syz.2.488'. [ 140.070675][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 140.145708][ T7860] netlink: 'syz.2.488': attribute type 32 has an invalid length. [ 140.224236][ T7856] wg1 speed is unknown, defaulting to 1000 [ 140.251445][ T7864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.492'. [ 140.282027][ T7856] ip6_vti0 speed is unknown, defaulting to 1000 [ 140.337860][ T7871] tipc: Started in network mode [ 140.356993][ T7871] tipc: Node identity 5e71a256e40a, cluster identity 4711 [ 140.374453][ T7871] tipc: Enabled bearer , priority 0 [ 140.433800][ T7871] tipc: Disabling bearer [ 140.739756][ T7887] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 140.747154][ T5926] IPVS: starting estimator thread 0... [ 140.754031][ T7886] delete_channel: no stack [ 140.846948][ T7888] IPVS: using max 43 ests per chain, 103200 per kthread [ 140.919488][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 140.956939][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 140.978944][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 141.006864][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 141.013524][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.502'. [ 141.168268][ T7907] macsec1: entered allmulticast mode [ 141.173691][ T7907] dummy0: entered allmulticast mode [ 141.217491][ T7907] dummy0: left allmulticast mode [ 141.547412][ T7929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.580449][ T7926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.511'. [ 141.631448][ T7936] xt_hashlimit: size too large, truncated to 1048576 [ 144.523199][ T8091] netem: change failed [ 144.682137][ T8105] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.851880][ T8115] batadv1: entered promiscuous mode [ 144.872664][ T8117] xfrm0: entered promiscuous mode [ 144.881316][ T8117] xfrm0: entered allmulticast mode [ 144.911567][ T8122] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 144.936296][ T8122] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 145.220582][ T8136] __nla_validate_parse: 14 callbacks suppressed [ 145.220603][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 145.239807][ T8139] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 145.257123][ T8139] netlink: 119 bytes leftover after parsing attributes in process `syz.4.568'. [ 145.534991][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 145.557635][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 146.104907][ T8181] wg1 speed is unknown, defaulting to 1000 [ 146.120606][ T8181] ip6_vti0 speed is unknown, defaulting to 1000 [ 146.207857][ T8190] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 146.224872][ T8190] netlink: 2 bytes leftover after parsing attributes in process `syz.4.581'. [ 146.237157][ T8190] batadv_slave_1: entered promiscuous mode [ 146.282751][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.297721][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.317729][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.340124][ T8190] bridge0: port 3(batadv_slave_1) entered blocking state [ 146.367303][ T8190] bridge0: port 3(batadv_slave_1) entered disabled state [ 146.395338][ T8190] batadv_slave_1: entered allmulticast mode [ 146.781515][ T8213] netlink: 72 bytes leftover after parsing attributes in process `syz.3.590'. [ 147.559992][ T8226] wg1 speed is unknown, defaulting to 1000 [ 147.581007][ T8226] ip6_vti0 speed is unknown, defaulting to 1000 [ 148.672216][ T8285] openvswitch: netlink: Flow key attr not present in new flow. [ 148.724753][ T8287] bond1: option miimon: invalid value (18446744073709551607) [ 148.738858][ T8287] bond1: option miimon: allowed values 0 - 2147483647 [ 148.756599][ T8287] bond1 (unregistering): Released all slaves [ 148.887531][ T8296] netlink: 60 bytes leftover after parsing attributes in process `syz.3.610'. [ 148.904835][ T8296] netlink: 7 bytes leftover after parsing attributes in process `syz.3.610'. [ 148.951749][ T8296] netlink: 7 bytes leftover after parsing attributes in process `syz.3.610'. [ 148.983411][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 149.431403][ T8325] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 149.441684][ T8325] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 149.466496][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.473190][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.480800][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.622375][ T8320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 149.623358][ T8325] xt_TCPMSS: Only works on TCP SYN packets [ 149.708842][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.717103][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.725073][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.733008][ T8320] wg1 speed is unknown, defaulting to 1000 [ 149.773442][ T8320] wg1 speed is unknown, defaulting to 1000 [ 150.411434][ T8360] __nla_validate_parse: 1 callbacks suppressed [ 150.411453][ T8360] netlink: 210176 bytes leftover after parsing attributes in process `syz.4.629'. [ 150.604590][ T8368] syzkaller0: entered promiscuous mode [ 150.622992][ T8368] syzkaller0: entered allmulticast mode [ 151.170935][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 151.170935][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'. [ 151.185059][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 151.198160][ T8413] sctp: [Deprecated]: syz.3.643 (pid 8413) Use of int in maxseg socket option. [ 151.198160][ T8413] Use struct sctp_assoc_value instead [ 151.224304][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 151.489530][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 151.498649][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 151.803745][ T8446] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.946250][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 152.347999][ T8490] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.558722][ T8502] netlink: 'syz.3.671': attribute type 9 has an invalid length. [ 152.676566][ T8506] Can't find ip_set type hash:ip$mec [ 152.745197][ T8509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.673'. [ 153.742540][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 154.253926][ T8538] bridge_slave_1: left allmulticast mode [ 154.259793][ T8538] bridge_slave_1: left promiscuous mode [ 154.265651][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.276362][ T8538] bridge_slave_0: left allmulticast mode [ 154.282148][ T8538] bridge_slave_0: left promiscuous mode [ 154.288503][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.669822][ T8571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.852404][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.882660][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.938281][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.997377][ T8591] bond0: (slave rose0): Enslaving as an active interface with an up link [ 155.000995][ T8604] netlink: 'syz.4.698': attribute type 2 has an invalid length. [ 155.025305][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.086996][ T8595] ip6_vti0 speed is unknown, defaulting to 1000 [ 155.149336][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.219643][ T8612] netlink: 'syz.3.704': attribute type 3 has an invalid length. [ 155.241066][ T8614] xt_TCPMSS: Only works on TCP SYN packets [ 155.282332][ T8614] xt_TCPMSS: Only works on TCP SYN packets [ 155.311172][ T8614] xt_TCPMSS: Only works on TCP SYN packets [ 155.331905][ T8614] xt_TCPMSS: Only works on TCP SYN packets [ 155.368748][ T8614] xt_TCPMSS: Only works on TCP SYN packets [ 155.483685][ T8623] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 155.496972][ T8623] __nla_validate_parse: 12 callbacks suppressed [ 155.496989][ T8623] netlink: 2 bytes leftover after parsing attributes in process `syz.3.705'. [ 155.516968][ T8623] batadv_slave_1: entered promiscuous mode [ 155.524174][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.557168][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.587547][ T8623] bridge0: port 3(batadv_slave_1) entered blocking state [ 155.609630][ T8623] bridge0: port 3(batadv_slave_1) entered disabled state [ 155.624575][ T8623] batadv_slave_1: entered allmulticast mode [ 155.633448][ T8623] bridge0: port 3(batadv_slave_1) entered blocking state [ 155.640727][ T8623] bridge0: port 3(batadv_slave_1) entered forwarding state [ 155.650830][ T8594] ip6_vti0 speed is unknown, defaulting to 1000 [ 155.657420][ T8595] wg1 speed is unknown, defaulting to 1000 [ 156.138945][ T8653] macvtap1: entered promiscuous mode [ 156.144290][ T8653] veth1_to_hsr: entered promiscuous mode [ 156.150611][ T8658] netlink: 5 bytes leftover after parsing attributes in process `syz.4.713'. [ 156.159791][ T8653] macvtap1: entered allmulticast mode [ 156.165194][ T8653] veth1_to_hsr: entered allmulticast mode [ 156.174105][ T8658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.357245][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.716'. [ 156.367624][ T8666] netlink: 120 bytes leftover after parsing attributes in process `syz.2.716'. [ 156.431304][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 156.465219][ T8594] wg1 speed is unknown, defaulting to 1000 [ 156.472359][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 156.482915][ T8671] batadv_slave_1: left allmulticast mode [ 156.490680][ T8671] bridge0: port 3(batadv_slave_1) entered disabled state [ 156.511644][ T8671] bridge_slave_1: left allmulticast mode [ 156.556084][ T8671] bridge_slave_1: left promiscuous mode [ 156.563068][ T8671] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.583430][ T8671] bridge_slave_0: left allmulticast mode [ 156.589256][ T8671] bridge_slave_0: left promiscuous mode [ 156.595194][ T8671] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.713229][ T8656] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.938189][ T8692] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 156.983461][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 157.003707][ T8687] bridge_slave_0: left allmulticast mode [ 157.025308][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.067812][ T8687] bridge_slave_1: left allmulticast mode [ 157.073505][ T8687] bridge_slave_1: left promiscuous mode [ 157.087735][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.130830][ T8687] team0: Port device team_slave_0 removed [ 157.171536][ T8687] team0: Port device team_slave_1 removed [ 157.187712][ T8687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.195292][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.237340][ T8687] batadv_slave_1: left allmulticast mode [ 157.243217][ T8687] bridge0: port 3(batadv_slave_1) entered disabled state [ 157.256193][ T8687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.340730][ T8692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.361515][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 157.398128][ T8700] tipc: Enabled bearer , priority 0 [ 157.413468][ T8702] syzkaller0: entered promiscuous mode [ 157.421408][ T8702] syzkaller0: entered allmulticast mode [ 157.447015][ T8656] wg1 speed is unknown, defaulting to 1000 [ 157.451098][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 157.473893][ T8715] tipc: Resetting bearer [ 157.536630][ T8718] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 157.605193][ T8688] tipc: Resetting bearer [ 157.649579][ T8688] tipc: Disabling bearer [ 157.715647][ T8721] netlink: 356 bytes leftover after parsing attributes in process `syz.3.726'. [ 158.039580][ T8738] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 158.087778][ T8738] bond3 (unregistering): Released all slaves [ 158.998831][ T8760] syz.3.738 (8760) used greatest stack depth: 17800 bytes left [ 159.080871][ T8780] ip6_vti0 speed is unknown, defaulting to 1000 [ 159.087741][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.109165][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.126057][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.140883][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.260759][ T8791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.279556][ T8791] bond0: (slave bond3): Enslaving as an active interface with a down link [ 159.434838][ T8797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.445835][ T8797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.457491][ T8797] bond0 (unregistering): (slave bond3): Releasing backup interface [ 159.476340][ T8797] bond0 (unregistering): Released all slaves [ 159.502060][ T8780] wg1 speed is unknown, defaulting to 1000 [ 159.691092][ T8799] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 159.709825][ T8799] bond1 (unregistering): Released all slaves [ 159.985514][ T8826] netlink: 'syz.0.759': attribute type 1 has an invalid length. [ 160.234333][ T8833] bond1: (slave veth3): Enslaving as an active interface with a down link [ 160.394709][ T8848] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 160.457869][ T8850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.466874][ T8850] bond0: (slave bond3): making interface the new active one [ 160.474192][ T8850] bond3: entered promiscuous mode [ 160.483188][ T8850] bond0: (slave bond3): Enslaving as an active interface with an up link [ 160.486217][ T8856] block nbd0: not configured, cannot reconfigure [ 160.641771][ T8859] tipc: Enabled bearer , priority 0 [ 160.669577][ T8859] syzkaller0: entered promiscuous mode [ 160.678320][ T8859] syzkaller0: entered allmulticast mode [ 160.698350][ T8859] tipc: Resetting bearer [ 160.733414][ T8857] tipc: Resetting bearer [ 160.774880][ T8857] tipc: Disabling bearer [ 160.934602][ T8875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.047168][ T8893] __nla_validate_parse: 9 callbacks suppressed [ 161.047186][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.781'. [ 161.455310][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 161.467820][ T8926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.790'. [ 161.506951][ T8927] netlink: 64 bytes leftover after parsing attributes in process `syz.3.790'. [ 161.620079][ T8938] netlink: 68 bytes leftover after parsing attributes in process `syz.1.792'. [ 161.852533][ T8960] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.016839][ T8973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.799'. [ 162.030561][ T8973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.799'. [ 162.061995][ T8973] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 162.240126][ T8988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.805'. [ 162.261560][ T8988] nbd: must specify a device to reconfigure [ 162.281127][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 162.433962][ T5839] Bluetooth: hci4: link tx timeout [ 162.440088][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.450741][ T5839] Bluetooth: hci4: link tx timeout [ 162.455876][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.715931][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 162.875434][ T9024] netlink: 'syz.1.812': attribute type 9 has an invalid length. [ 162.958927][ T9025] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.160099][ T9037] dummy0: entered promiscuous mode [ 163.180833][ T9037] dummy0: left promiscuous mode [ 163.368458][ T9026] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.374915][ T9025] wg1 speed is unknown, defaulting to 1000 [ 163.498739][ T9052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.655689][ T9058] tipc: Enabled bearer , priority 0 [ 163.687787][ T9026] wg1 speed is unknown, defaulting to 1000 [ 163.711899][ T9058] syzkaller0: entered promiscuous mode [ 163.725463][ T9058] syzkaller0: entered allmulticast mode [ 163.781349][ T9067] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 163.861034][ T9073] tipc: Resetting bearer [ 163.893748][ T9071] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 163.934969][ T9062] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.941938][ T9057] tipc: Resetting bearer [ 163.959577][ T9057] tipc: Disabling bearer [ 163.974391][ T9074] syzkaller1: entered promiscuous mode [ 163.981994][ T9074] syzkaller1: entered allmulticast mode [ 164.318967][ T9062] wg1 speed is unknown, defaulting to 1000 [ 164.493235][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 165.430346][ T9135] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 165.438288][ T9132] syzkaller0: entered promiscuous mode [ 165.438312][ T9132] syzkaller0: entered allmulticast mode [ 165.442137][ T9129] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20004 [ 165.653638][ T1091] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 165.707965][ T9159] bond0: option lp_interval: invalid value (0) [ 165.714225][ T9159] bond0: option lp_interval: allowed values 1 - 2147483647 [ 165.723210][ T9159] bond0 (unregistering): Released all slaves [ 166.647056][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 166.754894][ T9186] xt_hashlimit: max too large, truncated to 1048576 [ 166.772372][ T9192] netlink: 'syz.2.862': attribute type 13 has an invalid length. [ 166.792724][ T9177] __nla_validate_parse: 7 callbacks suppressed [ 166.792744][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 166.828316][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 166.954204][ T9205] xt_CT: No such helper "pptp" [ 167.068308][ T9214] netlink: 'syz.4.867': attribute type 64 has an invalid length. [ 167.252869][ T9228] bond0: option fail_over_mac: invalid value (127) [ 167.262664][ T9228] bond0 (unregistering): Released all slaves [ 167.268187][ T9234] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 167.299683][ T9235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.873'. [ 167.310751][ T9231] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.313220][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 167.439763][ T9238] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 167.588376][ T9237] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.588398][ T9231] wg1 speed is unknown, defaulting to 1000 [ 167.826519][ T9243] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.832792][ T9237] wg1 speed is unknown, defaulting to 1000 [ 168.164072][ T9243] wg1 speed is unknown, defaulting to 1000 [ 168.164846][ T9254] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.472682][ T9254] wg1 speed is unknown, defaulting to 1000 [ 168.570113][ T9255] ip6_vti0 speed is unknown, defaulting to 1000 [ 169.079006][ T9266] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 169.086577][ T9255] wg1 speed is unknown, defaulting to 1000 [ 169.464789][ T9267] ip6_vti0 speed is unknown, defaulting to 1000 [ 170.174250][ T9267] wg1 speed is unknown, defaulting to 1000 [ 170.370472][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 170.762560][ T9328] FAULT_INJECTION: forcing a failure. [ 170.762560][ T9328] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.814382][ T9328] CPU: 0 UID: 0 PID: 9328 Comm: syz.2.894 Not tainted syzkaller #0 PREEMPT(full) [ 170.814407][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.814423][ T9328] Call Trace: [ 170.814431][ T9328] [ 170.814438][ T9328] dump_stack_lvl+0x189/0x250 [ 170.814467][ T9328] ? __pfx____ratelimit+0x10/0x10 [ 170.814491][ T9328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.814512][ T9328] ? __pfx__printk+0x10/0x10 [ 170.814530][ T9328] ? __might_fault+0xb0/0x130 [ 170.814562][ T9328] should_fail_ex+0x414/0x560 [ 170.814591][ T9328] _copy_from_user+0x2d/0xb0 [ 170.814614][ T9328] ___sys_sendmsg+0x158/0x2a0 [ 170.814636][ T9328] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.814692][ T9328] ? __fget_files+0x2a/0x420 [ 170.814707][ T9328] ? __fget_files+0x3a0/0x420 [ 170.814733][ T9328] __x64_sys_sendmsg+0x19b/0x260 [ 170.814756][ T9328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.814785][ T9328] ? __pfx_ksys_write+0x10/0x10 [ 170.814812][ T9328] ? do_syscall_64+0xbe/0xfa0 [ 170.814839][ T9328] do_syscall_64+0xfa/0xfa0 [ 170.814860][ T9328] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.814883][ T9328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.814900][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 170.814920][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.814937][ T9328] RIP: 0033:0x7f8bd2d8f6c9 [ 170.814960][ T9328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.814973][ T9328] RSP: 002b:00007f8bd3bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.814991][ T9328] RAX: ffffffffffffffda RBX: 00007f8bd2fe5fa0 RCX: 00007f8bd2d8f6c9 [ 170.815003][ T9328] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 170.815013][ T9328] RBP: 00007f8bd3bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.815023][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.815033][ T9328] R13: 00007f8bd2fe6038 R14: 00007f8bd2fe5fa0 R15: 00007fffff1fd6b8 [ 170.815063][ T9328] [ 171.421102][ T9341] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.549714][ T9356] FAULT_INJECTION: forcing a failure. [ 171.549714][ T9356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.563059][ T9356] CPU: 0 UID: 0 PID: 9356 Comm: syz.3.902 Not tainted syzkaller #0 PREEMPT(full) [ 171.563083][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.563093][ T9356] Call Trace: [ 171.563101][ T9356] [ 171.563109][ T9356] dump_stack_lvl+0x189/0x250 [ 171.563136][ T9356] ? __pfx____ratelimit+0x10/0x10 [ 171.563160][ T9356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.563210][ T9356] ? __pfx__printk+0x10/0x10 [ 171.563228][ T9356] ? __might_fault+0xb0/0x130 [ 171.563261][ T9356] should_fail_ex+0x414/0x560 [ 171.563299][ T9356] _copy_from_user+0x2d/0xb0 [ 171.563321][ T9356] ___sys_sendmsg+0x158/0x2a0 [ 171.563344][ T9356] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.563400][ T9356] ? __fget_files+0x2a/0x420 [ 171.563416][ T9356] ? __fget_files+0x3a0/0x420 [ 171.563442][ T9356] __x64_sys_sendmsg+0x19b/0x260 [ 171.563464][ T9356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.563493][ T9356] ? __pfx_ksys_write+0x10/0x10 [ 171.563519][ T9356] ? do_syscall_64+0xbe/0xfa0 [ 171.563544][ T9356] do_syscall_64+0xfa/0xfa0 [ 171.563566][ T9356] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.563588][ T9356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.563605][ T9356] ? clear_bhb_loop+0x60/0xb0 [ 171.563625][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.563642][ T9356] RIP: 0033:0x7fbb2338f6c9 [ 171.563657][ T9356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.563670][ T9356] RSP: 002b:00007fbb24197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.563689][ T9356] RAX: ffffffffffffffda RBX: 00007fbb235e5fa0 RCX: 00007fbb2338f6c9 [ 171.563701][ T9356] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 171.563712][ T9356] RBP: 00007fbb24197090 R08: 0000000000000000 R09: 0000000000000000 [ 171.563722][ T9356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.563732][ T9356] R13: 00007fbb235e6038 R14: 00007fbb235e5fa0 R15: 00007ffdff860a18 [ 171.563762][ T9356] [ 171.899752][ T9341] wg1 speed is unknown, defaulting to 1000 [ 172.022225][ T9372] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.030673][ T9377] FAULT_INJECTION: forcing a failure. [ 172.030673][ T9377] name failslab, interval 1, probability 0, space 0, times 1 [ 172.046028][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.2.908 Not tainted syzkaller #0 PREEMPT(full) [ 172.046052][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.046061][ T9377] Call Trace: [ 172.046068][ T9377] [ 172.046074][ T9377] dump_stack_lvl+0x189/0x250 [ 172.046101][ T9377] ? __pfx____ratelimit+0x10/0x10 [ 172.046124][ T9377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.046145][ T9377] ? __pfx__printk+0x10/0x10 [ 172.046168][ T9377] ? __pfx___might_resched+0x10/0x10 [ 172.046184][ T9377] ? fs_reclaim_acquire+0x7d/0x100 [ 172.046210][ T9377] should_fail_ex+0x414/0x560 [ 172.046237][ T9377] should_failslab+0xa8/0x100 [ 172.046254][ T9377] kmem_cache_alloc_node_noprof+0x77/0x710 [ 172.046276][ T9377] ? __alloc_skb+0x112/0x2d0 [ 172.046312][ T9377] __alloc_skb+0x112/0x2d0 [ 172.046332][ T9377] netlink_sendmsg+0x5c6/0xb30 [ 172.046361][ T9377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.046382][ T9377] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.046407][ T9377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.046424][ T9377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.046442][ T9377] __sock_sendmsg+0x21c/0x270 [ 172.046467][ T9377] ____sys_sendmsg+0x505/0x830 [ 172.046492][ T9377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.046518][ T9377] ? import_iovec+0x74/0xa0 [ 172.046540][ T9377] ___sys_sendmsg+0x21f/0x2a0 [ 172.046560][ T9377] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.046612][ T9377] ? __fget_files+0x2a/0x420 [ 172.046626][ T9377] ? __fget_files+0x3a0/0x420 [ 172.046656][ T9377] __x64_sys_sendmsg+0x19b/0x260 [ 172.046675][ T9377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.046700][ T9377] ? __pfx_ksys_write+0x10/0x10 [ 172.046721][ T9377] ? do_syscall_64+0xbe/0xfa0 [ 172.046741][ T9377] do_syscall_64+0xfa/0xfa0 [ 172.046757][ T9377] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.046774][ T9377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.046786][ T9377] ? clear_bhb_loop+0x60/0xb0 [ 172.046801][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.046813][ T9377] RIP: 0033:0x7f8bd2d8f6c9 [ 172.046825][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.046835][ T9377] RSP: 002b:00007f8bd3bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.046849][ T9377] RAX: ffffffffffffffda RBX: 00007f8bd2fe5fa0 RCX: 00007f8bd2d8f6c9 [ 172.046857][ T9377] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 172.046865][ T9377] RBP: 00007f8bd3bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.046872][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.046879][ T9377] R13: 00007f8bd2fe6038 R14: 00007f8bd2fe5fa0 R15: 00007fffff1fd6b8 [ 172.046901][ T9377] [ 172.817016][ T9395] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 173.072268][ T9410] FAULT_INJECTION: forcing a failure. [ 173.072268][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 173.108370][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.0.917 Not tainted syzkaller #0 PREEMPT(full) [ 173.108394][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.108403][ T9410] Call Trace: [ 173.108410][ T9410] [ 173.108417][ T9410] dump_stack_lvl+0x189/0x250 [ 173.108444][ T9410] ? __pfx____ratelimit+0x10/0x10 [ 173.108468][ T9410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.108490][ T9410] ? __pfx__printk+0x10/0x10 [ 173.108513][ T9410] ? __pfx___might_resched+0x10/0x10 [ 173.108530][ T9410] ? fs_reclaim_acquire+0x7d/0x100 [ 173.108559][ T9410] should_fail_ex+0x414/0x560 [ 173.108588][ T9410] should_failslab+0xa8/0x100 [ 173.108607][ T9410] kmem_cache_alloc_node_noprof+0x77/0x710 [ 173.108630][ T9410] ? __alloc_skb+0x112/0x2d0 [ 173.108646][ T9410] ? netlink_autobind+0xdb/0x300 [ 173.108668][ T9410] __alloc_skb+0x112/0x2d0 [ 173.108689][ T9410] netlink_sendmsg+0x5c6/0xb30 [ 173.108716][ T9410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.108737][ T9410] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.108763][ T9410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.108779][ T9410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.108798][ T9410] __sock_sendmsg+0x21c/0x270 [ 173.108824][ T9410] ____sys_sendmsg+0x505/0x830 [ 173.108847][ T9410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.108875][ T9410] ? import_iovec+0x74/0xa0 [ 173.108900][ T9410] ___sys_sendmsg+0x21f/0x2a0 [ 173.108921][ T9410] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.108973][ T9410] ? __fget_files+0x2a/0x420 [ 173.108988][ T9410] ? __fget_files+0x3a0/0x420 [ 173.109014][ T9410] __x64_sys_sendmsg+0x19b/0x260 [ 173.109035][ T9410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.109072][ T9410] ? do_syscall_64+0xbe/0xfa0 [ 173.109098][ T9410] do_syscall_64+0xfa/0xfa0 [ 173.109120][ T9410] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.109144][ T9410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.109167][ T9410] ? clear_bhb_loop+0x60/0xb0 [ 173.109187][ T9410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.109203][ T9410] RIP: 0033:0x7fedb198f6c9 [ 173.109219][ T9410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.109229][ T9410] RSP: 002b:00007fedb28f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.109248][ T9410] RAX: ffffffffffffffda RBX: 00007fedb1be5fa0 RCX: 00007fedb198f6c9 [ 173.109260][ T9410] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 173.109270][ T9410] RBP: 00007fedb28f5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.109280][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.109290][ T9410] R13: 00007fedb1be6038 R14: 00007fedb1be5fa0 R15: 00007ffec7c40b48 [ 173.109319][ T9410] [ 173.112899][ T9374] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.274753][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.919'. [ 173.598834][ T9374] wg1 speed is unknown, defaulting to 1000 [ 173.645693][ T9372] wg1 speed is unknown, defaulting to 1000 [ 173.759978][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 174.345631][ T9457] tipc: Enabling of bearer rejected, failed to enable media [ 174.386595][ T9459] FAULT_INJECTION: forcing a failure. [ 174.386595][ T9459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.416595][ T9459] CPU: 0 UID: 0 PID: 9459 Comm: syz.0.933 Not tainted syzkaller #0 PREEMPT(full) [ 174.416619][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.416627][ T9459] Call Trace: [ 174.416634][ T9459] [ 174.416641][ T9459] dump_stack_lvl+0x189/0x250 [ 174.416670][ T9459] ? __pfx____ratelimit+0x10/0x10 [ 174.416692][ T9459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.416713][ T9459] ? __pfx__printk+0x10/0x10 [ 174.416730][ T9459] ? __might_fault+0xb0/0x130 [ 174.416764][ T9459] should_fail_ex+0x414/0x560 [ 174.416793][ T9459] _copy_from_iter+0x1de/0x1790 [ 174.416819][ T9459] ? rcu_is_watching+0x15/0xb0 [ 174.416841][ T9459] ? kmalloc_reserve+0xbd/0x290 [ 174.416859][ T9459] ? __pfx__copy_from_iter+0x10/0x10 [ 174.416880][ T9459] ? __build_skb_around+0x262/0x3f0 [ 174.416900][ T9459] ? netlink_sendmsg+0x642/0xb30 [ 174.416916][ T9459] ? skb_put+0x11b/0x210 [ 174.416936][ T9459] netlink_sendmsg+0x6b2/0xb30 [ 174.416963][ T9459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.416984][ T9459] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.417009][ T9459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.417025][ T9459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.417044][ T9459] __sock_sendmsg+0x21c/0x270 [ 174.417079][ T9459] ____sys_sendmsg+0x505/0x830 [ 174.417104][ T9459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.417132][ T9459] ? import_iovec+0x74/0xa0 [ 174.417155][ T9459] ___sys_sendmsg+0x21f/0x2a0 [ 174.417177][ T9459] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.417230][ T9459] ? __fget_files+0x2a/0x420 [ 174.417245][ T9459] ? __fget_files+0x3a0/0x420 [ 174.417270][ T9459] __x64_sys_sendmsg+0x19b/0x260 [ 174.417292][ T9459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.417319][ T9459] ? __pfx_ksys_write+0x10/0x10 [ 174.417345][ T9459] ? do_syscall_64+0xbe/0xfa0 [ 174.417371][ T9459] do_syscall_64+0xfa/0xfa0 [ 174.417392][ T9459] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.417416][ T9459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.417432][ T9459] ? clear_bhb_loop+0x60/0xb0 [ 174.417452][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.417469][ T9459] RIP: 0033:0x7fedb198f6c9 [ 174.417484][ T9459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.417497][ T9459] RSP: 002b:00007fedb28f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.417516][ T9459] RAX: ffffffffffffffda RBX: 00007fedb1be5fa0 RCX: 00007fedb198f6c9 [ 174.417529][ T9459] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 174.417540][ T9459] RBP: 00007fedb28f5090 R08: 0000000000000000 R09: 0000000000000000 [ 174.417550][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.417560][ T9459] R13: 00007fedb1be6038 R14: 00007fedb1be5fa0 R15: 00007ffec7c40b48 [ 174.417590][ T9459] [ 174.841099][ T9463] sock: sock_timestamping_bind_phc: sock not bind to device [ 175.134037][ T9491] FAULT_INJECTION: forcing a failure. [ 175.134037][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.163615][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.0.943 Not tainted syzkaller #0 PREEMPT(full) [ 175.163640][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.163650][ T9491] Call Trace: [ 175.163658][ T9491] [ 175.163665][ T9491] dump_stack_lvl+0x189/0x250 [ 175.163692][ T9491] ? __pfx____ratelimit+0x10/0x10 [ 175.163715][ T9491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.163737][ T9491] ? __pfx__printk+0x10/0x10 [ 175.163768][ T9491] ? __might_fault+0xb0/0x130 [ 175.163809][ T9491] should_fail_ex+0x414/0x560 [ 175.163838][ T9491] _copy_from_iter+0x1de/0x1790 [ 175.163864][ T9491] ? rcu_is_watching+0x15/0xb0 [ 175.163886][ T9491] ? kmalloc_reserve+0xbd/0x290 [ 175.163904][ T9491] ? __pfx__copy_from_iter+0x10/0x10 [ 175.163924][ T9491] ? __build_skb_around+0x262/0x3f0 [ 175.163944][ T9491] ? netlink_sendmsg+0x642/0xb30 [ 175.163959][ T9491] ? skb_put+0x11b/0x210 [ 175.163979][ T9491] netlink_sendmsg+0x6b2/0xb30 [ 175.164006][ T9491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.164027][ T9491] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.164050][ T9491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.164066][ T9491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.164083][ T9491] __sock_sendmsg+0x21c/0x270 [ 175.164107][ T9491] ____sys_sendmsg+0x505/0x830 [ 175.164131][ T9491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.164158][ T9491] ? import_iovec+0x74/0xa0 [ 175.164182][ T9491] ___sys_sendmsg+0x21f/0x2a0 [ 175.164210][ T9491] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.164264][ T9491] ? __fget_files+0x2a/0x420 [ 175.164280][ T9491] ? __fget_files+0x3a0/0x420 [ 175.164306][ T9491] __x64_sys_sendmsg+0x19b/0x260 [ 175.164327][ T9491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.164355][ T9491] ? __pfx_ksys_write+0x10/0x10 [ 175.164381][ T9491] ? do_syscall_64+0xbe/0xfa0 [ 175.164407][ T9491] do_syscall_64+0xfa/0xfa0 [ 175.164429][ T9491] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.164451][ T9491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.164468][ T9491] ? clear_bhb_loop+0x60/0xb0 [ 175.164489][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.164505][ T9491] RIP: 0033:0x7fedb198f6c9 [ 175.164521][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.164534][ T9491] RSP: 002b:00007fedb28f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.164553][ T9491] RAX: ffffffffffffffda RBX: 00007fedb1be5fa0 RCX: 00007fedb198f6c9 [ 175.164565][ T9491] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 175.164575][ T9491] RBP: 00007fedb28f5090 R08: 0000000000000000 R09: 0000000000000000 [ 175.164586][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.164596][ T9491] R13: 00007fedb1be6038 R14: 00007fedb1be5fa0 R15: 00007ffec7c40b48 [ 175.164630][ T9491] [ 175.635663][ T9504] FAULT_INJECTION: forcing a failure. [ 175.635663][ T9504] name failslab, interval 1, probability 0, space 0, times 0 [ 175.700069][ T9504] CPU: 1 UID: 0 PID: 9504 Comm: syz.0.948 Not tainted syzkaller #0 PREEMPT(full) [ 175.700095][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.700105][ T9504] Call Trace: [ 175.700112][ T9504] [ 175.700120][ T9504] dump_stack_lvl+0x189/0x250 [ 175.700147][ T9504] ? __pfx____ratelimit+0x10/0x10 [ 175.700179][ T9504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.700201][ T9504] ? __pfx__printk+0x10/0x10 [ 175.700224][ T9504] ? __lock_acquire+0xab9/0xd20 [ 175.700248][ T9504] should_fail_ex+0x414/0x560 [ 175.700278][ T9504] should_failslab+0xa8/0x100 [ 175.700298][ T9504] kmem_cache_alloc_noprof+0x74/0x6e0 [ 175.700322][ T9504] ? skb_clone+0x212/0x3a0 [ 175.700347][ T9504] skb_clone+0x212/0x3a0 [ 175.700370][ T9504] __netlink_deliver_tap+0x404/0x850 [ 175.700402][ T9504] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.700421][ T9504] netlink_deliver_tap+0x19c/0x1b0 [ 175.700440][ T9504] netlink_unicast+0x7fa/0x9e0 [ 175.700473][ T9504] ? __pfx_netlink_unicast+0x10/0x10 [ 175.700499][ T9504] ? netlink_sendmsg+0x642/0xb30 [ 175.700515][ T9504] ? skb_put+0x11b/0x210 [ 175.700536][ T9504] netlink_sendmsg+0x805/0xb30 [ 175.700564][ T9504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.700585][ T9504] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.700611][ T9504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.700627][ T9504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.700646][ T9504] __sock_sendmsg+0x21c/0x270 [ 175.700672][ T9504] ____sys_sendmsg+0x505/0x830 [ 175.700697][ T9504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.700726][ T9504] ? import_iovec+0x74/0xa0 [ 175.700751][ T9504] ___sys_sendmsg+0x21f/0x2a0 [ 175.700773][ T9504] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.700834][ T9504] ? __fget_files+0x2a/0x420 [ 175.700850][ T9504] ? __fget_files+0x3a0/0x420 [ 175.700877][ T9504] __x64_sys_sendmsg+0x19b/0x260 [ 175.700899][ T9504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.700925][ T9504] ? __pfx_ksys_write+0x10/0x10 [ 175.700950][ T9504] ? do_syscall_64+0xbe/0xfa0 [ 175.700976][ T9504] do_syscall_64+0xfa/0xfa0 [ 175.700997][ T9504] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.701021][ T9504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.701037][ T9504] ? clear_bhb_loop+0x60/0xb0 [ 175.701059][ T9504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.701075][ T9504] RIP: 0033:0x7fedb198f6c9 [ 175.701091][ T9504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.701105][ T9504] RSP: 002b:00007fedb28f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.701123][ T9504] RAX: ffffffffffffffda RBX: 00007fedb1be5fa0 RCX: 00007fedb198f6c9 [ 175.701135][ T9504] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 175.701146][ T9504] RBP: 00007fedb28f5090 R08: 0000000000000000 R09: 0000000000000000 [ 175.701156][ T9504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.701171][ T9504] R13: 00007fedb1be6038 R14: 00007fedb1be5fa0 R15: 00007ffec7c40b48 [ 175.701202][ T9504] [ 175.794188][ T9499] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.079614][ T9519] x_tables: unsorted entry at hook 1 [ 176.101544][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 176.237424][ T30] audit: type=1804 audit(1762808300.028:3): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.955" name="/newroot/171/memory.events" dev="tmpfs" ino=889 res=1 errno=0 [ 176.304971][ T30] audit: type=1800 audit(1762808300.058:4): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.955" name="memory.events" dev="tmpfs" ino=889 res=0 errno=0 [ 176.619221][ T9499] wg1 speed is unknown, defaulting to 1000 [ 176.625795][ T9531] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.857563][ T9535] ip6_vti0 speed is unknown, defaulting to 1000 [ 176.871986][ T9531] wg1 speed is unknown, defaulting to 1000 [ 177.299390][ T9542] FAULT_INJECTION: forcing a failure. [ 177.299390][ T9542] name failslab, interval 1, probability 0, space 0, times 0 [ 177.322845][ T9542] CPU: 0 UID: 0 PID: 9542 Comm: syz.1.959 Not tainted syzkaller #0 PREEMPT(full) [ 177.322869][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.322878][ T9542] Call Trace: [ 177.322885][ T9542] [ 177.322891][ T9542] dump_stack_lvl+0x189/0x250 [ 177.322912][ T9542] ? __pfx____ratelimit+0x10/0x10 [ 177.322934][ T9542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.322954][ T9542] ? __pfx__printk+0x10/0x10 [ 177.322977][ T9542] ? __pfx___might_resched+0x10/0x10 [ 177.322993][ T9542] ? fs_reclaim_acquire+0x7d/0x100 [ 177.323033][ T9542] should_fail_ex+0x414/0x560 [ 177.323062][ T9542] should_failslab+0xa8/0x100 [ 177.323082][ T9542] __kmalloc_noprof+0xcb/0x7f0 [ 177.323103][ T9542] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 177.323134][ T9542] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 177.323163][ T9542] genl_family_rcv_msg_doit+0xb8/0x300 [ 177.323192][ T9542] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.323222][ T9542] ? apparmor_capable+0x137/0x1b0 [ 177.323244][ T9542] ? bpf_lsm_capable+0x9/0x20 [ 177.323263][ T9542] ? security_capable+0x7e/0x2e0 [ 177.323292][ T9542] genl_rcv_msg+0x60e/0x790 [ 177.323320][ T9542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.323339][ T9542] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.323358][ T9542] ? __pfx_nl80211_new_key+0x10/0x10 [ 177.323377][ T9542] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.323411][ T9542] netlink_rcv_skb+0x208/0x470 [ 177.323427][ T9542] ? __lock_acquire+0xab9/0xd20 [ 177.323444][ T9542] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.323466][ T9542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.323499][ T9542] ? down_read+0x1ad/0x2e0 [ 177.323517][ T9542] genl_rcv+0x28/0x40 [ 177.323534][ T9542] netlink_unicast+0x82f/0x9e0 [ 177.323562][ T9542] ? __pfx_netlink_unicast+0x10/0x10 [ 177.323586][ T9542] ? netlink_sendmsg+0x642/0xb30 [ 177.323601][ T9542] ? skb_put+0x11b/0x210 [ 177.323622][ T9542] netlink_sendmsg+0x805/0xb30 [ 177.323647][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.323666][ T9542] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.323689][ T9542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.323705][ T9542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.323723][ T9542] __sock_sendmsg+0x21c/0x270 [ 177.323749][ T9542] ____sys_sendmsg+0x505/0x830 [ 177.323772][ T9542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.323799][ T9542] ? import_iovec+0x74/0xa0 [ 177.323823][ T9542] ___sys_sendmsg+0x21f/0x2a0 [ 177.323844][ T9542] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.323901][ T9542] ? __fget_files+0x2a/0x420 [ 177.323917][ T9542] ? __fget_files+0x3a0/0x420 [ 177.323944][ T9542] __x64_sys_sendmsg+0x19b/0x260 [ 177.323966][ T9542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.323996][ T9542] ? __pfx_ksys_write+0x10/0x10 [ 177.324045][ T9542] ? do_syscall_64+0xbe/0xfa0 [ 177.324071][ T9542] do_syscall_64+0xfa/0xfa0 [ 177.324092][ T9542] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.324114][ T9542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.324130][ T9542] ? clear_bhb_loop+0x60/0xb0 [ 177.324151][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.324167][ T9542] RIP: 0033:0x7fc60938f6c9 [ 177.324183][ T9542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.324196][ T9542] RSP: 002b:00007fc60a24d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.324214][ T9542] RAX: ffffffffffffffda RBX: 00007fc6095e5fa0 RCX: 00007fc60938f6c9 [ 177.324225][ T9542] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 177.324234][ T9542] RBP: 00007fc60a24d090 R08: 0000000000000000 R09: 0000000000000000 [ 177.324243][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.324253][ T9542] R13: 00007fc6095e6038 R14: 00007fc6095e5fa0 R15: 00007fff56d669a8 [ 177.324281][ T9542] [ 177.706821][ T9535] wg1 speed is unknown, defaulting to 1000 [ 177.959658][ T9548] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 178.194153][ T9555] FAULT_INJECTION: forcing a failure. [ 178.194153][ T9555] name failslab, interval 1, probability 0, space 0, times 0 [ 178.220320][ T9555] CPU: 1 UID: 0 PID: 9555 Comm: syz.2.964 Not tainted syzkaller #0 PREEMPT(full) [ 178.220344][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.220353][ T9555] Call Trace: [ 178.220359][ T9555] [ 178.220367][ T9555] dump_stack_lvl+0x189/0x250 [ 178.220395][ T9555] ? __pfx____ratelimit+0x10/0x10 [ 178.220419][ T9555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.220440][ T9555] ? __pfx__printk+0x10/0x10 [ 178.220464][ T9555] ? __pfx___might_resched+0x10/0x10 [ 178.220481][ T9555] ? fs_reclaim_acquire+0x7d/0x100 [ 178.220510][ T9555] should_fail_ex+0x414/0x560 [ 178.220541][ T9555] should_failslab+0xa8/0x100 [ 178.220560][ T9555] __kvmalloc_node_noprof+0x158/0x910 [ 178.220586][ T9555] ? nf_tables_newset+0x1330/0x2540 [ 178.220609][ T9555] ? nft_set_lookup+0x128/0x150 [ 178.220630][ T9555] ? __pfx_nft_rhash_estimate+0xf/0x10 [ 178.220652][ T9555] nf_tables_newset+0x1330/0x2540 [ 178.220686][ T9555] ? __pfx_nf_tables_newset+0x10/0x10 [ 178.220730][ T9555] ? __nla_parse+0x40/0x60 [ 178.220760][ T9555] nfnetlink_rcv+0x11d9/0x2590 [ 178.220824][ T9555] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 178.220901][ T9555] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.220939][ T9555] netlink_unicast+0x82f/0x9e0 [ 178.220972][ T9555] ? __pfx_netlink_unicast+0x10/0x10 [ 178.220998][ T9555] ? netlink_sendmsg+0x642/0xb30 [ 178.221013][ T9555] ? skb_put+0x11b/0x210 [ 178.221035][ T9555] netlink_sendmsg+0x805/0xb30 [ 178.221063][ T9555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.221085][ T9555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.221111][ T9555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.221127][ T9555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.221146][ T9555] __sock_sendmsg+0x21c/0x270 [ 178.221173][ T9555] ____sys_sendmsg+0x505/0x830 [ 178.221198][ T9555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.221227][ T9555] ? import_iovec+0x74/0xa0 [ 178.221252][ T9555] ___sys_sendmsg+0x21f/0x2a0 [ 178.221274][ T9555] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.221335][ T9555] ? __fget_files+0x2a/0x420 [ 178.221351][ T9555] ? __fget_files+0x3a0/0x420 [ 178.221378][ T9555] __x64_sys_sendmsg+0x19b/0x260 [ 178.221400][ T9555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.221430][ T9555] ? __pfx_ksys_write+0x10/0x10 [ 178.221456][ T9555] ? do_syscall_64+0xbe/0xfa0 [ 178.221483][ T9555] do_syscall_64+0xfa/0xfa0 [ 178.221505][ T9555] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.221528][ T9555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.221545][ T9555] ? clear_bhb_loop+0x60/0xb0 [ 178.221566][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.221582][ T9555] RIP: 0033:0x7f8bd2d8f6c9 [ 178.221598][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.221611][ T9555] RSP: 002b:00007f8bd3bf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.221630][ T9555] RAX: ffffffffffffffda RBX: 00007f8bd2fe5fa0 RCX: 00007f8bd2d8f6c9 [ 178.221643][ T9555] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 178.221653][ T9555] RBP: 00007f8bd3bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.221664][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.221673][ T9555] R13: 00007f8bd2fe6038 R14: 00007f8bd2fe5fa0 R15: 00007fffff1fd6b8 [ 178.221705][ T9555] [ 178.686387][ T9549] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 178.715801][ T9549] batadv_slave_0: entered promiscuous mode [ 178.732381][ T9549] batadv_slave_0: left promiscuous mode [ 178.743907][ T9549] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 179.051952][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'. [ 179.133732][ T9567] netlink: 'syz.2.968': attribute type 25 has an invalid length. [ 179.336424][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'. [ 179.614521][ T9583] FAULT_INJECTION: forcing a failure. [ 179.614521][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 179.630028][ T9583] CPU: 1 UID: 0 PID: 9583 Comm: syz.4.973 Not tainted syzkaller #0 PREEMPT(full) [ 179.630052][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.630061][ T9583] Call Trace: [ 179.630068][ T9583] [ 179.630075][ T9583] dump_stack_lvl+0x189/0x250 [ 179.630101][ T9583] ? __pfx____ratelimit+0x10/0x10 [ 179.630123][ T9583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.630144][ T9583] ? __pfx__printk+0x10/0x10 [ 179.630167][ T9583] ? __pfx___might_resched+0x10/0x10 [ 179.630189][ T9583] should_fail_ex+0x414/0x560 [ 179.630217][ T9583] should_failslab+0xa8/0x100 [ 179.630236][ T9583] kmem_cache_alloc_node_noprof+0x77/0x710 [ 179.630260][ T9583] ? __alloc_skb+0x112/0x2d0 [ 179.630282][ T9583] __alloc_skb+0x112/0x2d0 [ 179.630301][ T9583] netlink_ack+0x146/0xa50 [ 179.630315][ T9583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.630333][ T9583] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 179.630352][ T9583] ? __pfx_nl80211_post_doit+0x10/0x10 [ 179.630387][ T9583] netlink_rcv_skb+0x28c/0x470 [ 179.630402][ T9583] ? __lock_acquire+0xab9/0xd20 [ 179.630420][ T9583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.630443][ T9583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.630480][ T9583] ? down_read+0x1ad/0x2e0 [ 179.630501][ T9583] genl_rcv+0x28/0x40 [ 179.630519][ T9583] netlink_unicast+0x82f/0x9e0 [ 179.630562][ T9583] ? __pfx_netlink_unicast+0x10/0x10 [ 179.630586][ T9583] ? netlink_sendmsg+0x642/0xb30 [ 179.630602][ T9583] ? skb_put+0x11b/0x210 [ 179.630629][ T9583] netlink_sendmsg+0x805/0xb30 [ 179.630656][ T9583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.630678][ T9583] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.630704][ T9583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.630720][ T9583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.630739][ T9583] __sock_sendmsg+0x21c/0x270 [ 179.630766][ T9583] ____sys_sendmsg+0x505/0x830 [ 179.630790][ T9583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.630824][ T9583] ? import_iovec+0x74/0xa0 [ 179.630849][ T9583] ___sys_sendmsg+0x21f/0x2a0 [ 179.630870][ T9583] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.630927][ T9583] ? __fget_files+0x2a/0x420 [ 179.630943][ T9583] ? __fget_files+0x3a0/0x420 [ 179.630970][ T9583] __x64_sys_sendmsg+0x19b/0x260 [ 179.630996][ T9583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.631026][ T9583] ? __pfx_ksys_write+0x10/0x10 [ 179.631053][ T9583] ? do_syscall_64+0xbe/0xfa0 [ 179.631080][ T9583] do_syscall_64+0xfa/0xfa0 [ 179.631102][ T9583] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.631125][ T9583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.631142][ T9583] ? clear_bhb_loop+0x60/0xb0 [ 179.631163][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.631178][ T9583] RIP: 0033:0x7f745138f6c9 [ 179.631192][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.631205][ T9583] RSP: 002b:00007f74522d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.631224][ T9583] RAX: ffffffffffffffda RBX: 00007f74515e5fa0 RCX: 00007f745138f6c9 [ 179.631236][ T9583] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 179.631246][ T9583] RBP: 00007f74522d1090 R08: 0000000000000000 R09: 0000000000000000 [ 179.631255][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.631266][ T9583] R13: 00007f74515e6038 R14: 00007f74515e5fa0 R15: 00007ffef4f53e68 [ 179.631297][ T9583] [ 180.351321][ T9595] FAULT_INJECTION: forcing a failure. [ 180.351321][ T9595] name failslab, interval 1, probability 0, space 0, times 0 [ 180.414088][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.1.977 Not tainted syzkaller #0 PREEMPT(full) [ 180.414112][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.414125][ T9595] Call Trace: [ 180.414132][ T9595] [ 180.414140][ T9595] dump_stack_lvl+0x189/0x250 [ 180.414178][ T9595] ? __pfx____ratelimit+0x10/0x10 [ 180.414201][ T9595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.414223][ T9595] ? __pfx__printk+0x10/0x10 [ 180.414247][ T9595] ? __pfx___might_resched+0x10/0x10 [ 180.414264][ T9595] ? fs_reclaim_acquire+0x7d/0x100 [ 180.414292][ T9595] should_fail_ex+0x414/0x560 [ 180.414322][ T9595] should_failslab+0xa8/0x100 [ 180.414342][ T9595] __kmalloc_noprof+0xcb/0x7f0 [ 180.414364][ T9595] ? nla_strdup+0x9d/0x140 [ 180.414379][ T9595] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 180.414408][ T9595] nla_strdup+0x9d/0x140 [ 180.414424][ T9595] ? __pfx_nft_rhash_estimate+0xf/0x10 [ 180.414445][ T9595] nf_tables_newset+0x136f/0x2540 [ 180.414480][ T9595] ? __pfx_nf_tables_newset+0x10/0x10 [ 180.414522][ T9595] ? __nla_parse+0x40/0x60 [ 180.414543][ T9595] nfnetlink_rcv+0x11d9/0x2590 [ 180.414603][ T9595] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.414678][ T9595] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.414714][ T9595] netlink_unicast+0x82f/0x9e0 [ 180.414748][ T9595] ? __pfx_netlink_unicast+0x10/0x10 [ 180.414780][ T9595] ? netlink_sendmsg+0x642/0xb30 [ 180.414796][ T9595] ? skb_put+0x11b/0x210 [ 180.414818][ T9595] netlink_sendmsg+0x805/0xb30 [ 180.414845][ T9595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.414867][ T9595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.414893][ T9595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.414910][ T9595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.414928][ T9595] __sock_sendmsg+0x21c/0x270 [ 180.414955][ T9595] ____sys_sendmsg+0x505/0x830 [ 180.414980][ T9595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.415009][ T9595] ? import_iovec+0x74/0xa0 [ 180.415034][ T9595] ___sys_sendmsg+0x21f/0x2a0 [ 180.415055][ T9595] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.415112][ T9595] ? __fget_files+0x2a/0x420 [ 180.415128][ T9595] ? __fget_files+0x3a0/0x420 [ 180.415154][ T9595] __x64_sys_sendmsg+0x19b/0x260 [ 180.415176][ T9595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.415205][ T9595] ? __pfx_ksys_write+0x10/0x10 [ 180.415231][ T9595] ? do_syscall_64+0xbe/0xfa0 [ 180.415258][ T9595] do_syscall_64+0xfa/0xfa0 [ 180.415278][ T9595] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.415301][ T9595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.415318][ T9595] ? clear_bhb_loop+0x60/0xb0 [ 180.415339][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.415355][ T9595] RIP: 0033:0x7fc60938f6c9 [ 180.415378][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.415391][ T9595] RSP: 002b:00007fc60a24d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.415417][ T9595] RAX: ffffffffffffffda RBX: 00007fc6095e5fa0 RCX: 00007fc60938f6c9 [ 180.415429][ T9595] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 180.415440][ T9595] RBP: 00007fc60a24d090 R08: 0000000000000000 R09: 0000000000000000 [ 180.415451][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.415461][ T9595] R13: 00007fc6095e6038 R14: 00007fc6095e5fa0 R15: 00007fff56d669a8 [ 180.415492][ T9595] [ 180.791250][ T9602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.973635][ T9616] tipc: Enabled bearer , priority 0 [ 180.981876][ T9616] syzkaller0: entered promiscuous mode [ 180.987505][ T9616] syzkaller0: entered allmulticast mode [ 181.049847][ T9616] tipc: Resetting bearer [ 181.077016][ T9613] tipc: Resetting bearer [ 181.102884][ T9613] tipc: Disabling bearer [ 181.172199][ T9627] FAULT_INJECTION: forcing a failure. [ 181.172199][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 181.215829][ T9627] CPU: 1 UID: 0 PID: 9627 Comm: syz.3.987 Not tainted syzkaller #0 PREEMPT(full) [ 181.215852][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.215862][ T9627] Call Trace: [ 181.215869][ T9627] [ 181.215877][ T9627] dump_stack_lvl+0x189/0x250 [ 181.215904][ T9627] ? __pfx____ratelimit+0x10/0x10 [ 181.215923][ T9627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.215944][ T9627] ? __pfx__printk+0x10/0x10 [ 181.215968][ T9627] ? __pfx___might_resched+0x10/0x10 [ 181.215991][ T9627] should_fail_ex+0x414/0x560 [ 181.216016][ T9627] should_failslab+0xa8/0x100 [ 181.216033][ T9627] kmem_cache_alloc_node_noprof+0x77/0x710 [ 181.216055][ T9627] ? __alloc_skb+0x112/0x2d0 [ 181.216077][ T9627] __alloc_skb+0x112/0x2d0 [ 181.216096][ T9627] netlink_ack+0x146/0xa50 [ 181.216111][ T9627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.216130][ T9627] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 181.216149][ T9627] ? __pfx_nl80211_post_doit+0x10/0x10 [ 181.216183][ T9627] netlink_rcv_skb+0x28c/0x470 [ 181.216199][ T9627] ? __lock_acquire+0xab9/0xd20 [ 181.216217][ T9627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.216239][ T9627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.216276][ T9627] ? down_read+0x1ad/0x2e0 [ 181.216297][ T9627] genl_rcv+0x28/0x40 [ 181.216316][ T9627] netlink_unicast+0x82f/0x9e0 [ 181.216349][ T9627] ? __pfx_netlink_unicast+0x10/0x10 [ 181.216382][ T9627] ? netlink_sendmsg+0x642/0xb30 [ 181.216398][ T9627] ? skb_put+0x11b/0x210 [ 181.216420][ T9627] netlink_sendmsg+0x805/0xb30 [ 181.216448][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.216470][ T9627] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.216495][ T9627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.216510][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.216528][ T9627] __sock_sendmsg+0x21c/0x270 [ 181.216551][ T9627] ____sys_sendmsg+0x505/0x830 [ 181.216575][ T9627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.216604][ T9627] ? import_iovec+0x74/0xa0 [ 181.216628][ T9627] ___sys_sendmsg+0x21f/0x2a0 [ 181.216653][ T9627] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.216701][ T9627] ? __fget_files+0x2a/0x420 [ 181.216716][ T9627] ? __fget_files+0x3a0/0x420 [ 181.216743][ T9627] __x64_sys_sendmsg+0x19b/0x260 [ 181.216765][ T9627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.216795][ T9627] ? __pfx_ksys_write+0x10/0x10 [ 181.216822][ T9627] ? do_syscall_64+0xbe/0xfa0 [ 181.216850][ T9627] do_syscall_64+0xfa/0xfa0 [ 181.216871][ T9627] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.216895][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.216912][ T9627] ? clear_bhb_loop+0x60/0xb0 [ 181.216933][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.216949][ T9627] RIP: 0033:0x7fbb2338f6c9 [ 181.216964][ T9627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.216978][ T9627] RSP: 002b:00007fbb24197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.216997][ T9627] RAX: ffffffffffffffda RBX: 00007fbb235e5fa0 RCX: 00007fbb2338f6c9 [ 181.217009][ T9627] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 181.217020][ T9627] RBP: 00007fbb24197090 R08: 0000000000000000 R09: 0000000000000000 [ 181.217031][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.217041][ T9627] R13: 00007fbb235e6038 R14: 00007fbb235e5fa0 R15: 00007ffdff860a18 [ 181.217073][ T9627] [ 181.625646][ T9636] FAULT_INJECTION: forcing a failure. [ 181.625646][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 181.638350][ T9636] CPU: 1 UID: 0 PID: 9636 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) [ 181.638373][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.638382][ T9636] Call Trace: [ 181.638388][ T9636] [ 181.638400][ T9636] dump_stack_lvl+0x189/0x250 [ 181.638426][ T9636] ? __pfx____ratelimit+0x10/0x10 [ 181.638448][ T9636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.638467][ T9636] ? __pfx__printk+0x10/0x10 [ 181.638489][ T9636] ? __pfx___might_resched+0x10/0x10 [ 181.638505][ T9636] ? fs_reclaim_acquire+0x7d/0x100 [ 181.638531][ T9636] should_fail_ex+0x414/0x560 [ 181.638558][ T9636] should_failslab+0xa8/0x100 [ 181.638575][ T9636] __kmalloc_noprof+0xcb/0x7f0 [ 181.638594][ T9636] ? nla_strdup+0x9d/0x140 [ 181.638607][ T9636] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 181.638631][ T9636] nla_strdup+0x9d/0x140 [ 181.638646][ T9636] ? __pfx_nft_rhash_estimate+0xf/0x10 [ 181.638664][ T9636] nf_tables_newset+0x136f/0x2540 [ 181.638696][ T9636] ? __pfx_nf_tables_newset+0x10/0x10 [ 181.638738][ T9636] ? __nla_parse+0x40/0x60 [ 181.638760][ T9636] nfnetlink_rcv+0x11d9/0x2590 [ 181.638818][ T9636] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 181.638858][ T9636] ? ref_tracker_free+0x63a/0x7d0 [ 181.638903][ T9636] ? __netlink_deliver_tap+0x807/0x850 [ 181.638921][ T9636] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.638956][ T9636] netlink_unicast+0x82f/0x9e0 [ 181.638989][ T9636] ? __pfx_netlink_unicast+0x10/0x10 [ 181.639015][ T9636] ? netlink_sendmsg+0x642/0xb30 [ 181.639030][ T9636] ? skb_put+0x11b/0x210 [ 181.639052][ T9636] netlink_sendmsg+0x805/0xb30 [ 181.639077][ T9636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.639098][ T9636] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.639123][ T9636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.639140][ T9636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.639157][ T9636] __sock_sendmsg+0x21c/0x270 [ 181.639183][ T9636] ____sys_sendmsg+0x505/0x830 [ 181.639207][ T9636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.639235][ T9636] ? import_iovec+0x74/0xa0 [ 181.639258][ T9636] ___sys_sendmsg+0x21f/0x2a0 [ 181.639276][ T9636] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.639328][ T9636] ? __fget_files+0x2a/0x420 [ 181.639341][ T9636] ? __fget_files+0x3a0/0x420 [ 181.639368][ T9636] __x64_sys_sendmsg+0x19b/0x260 [ 181.639391][ T9636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.639427][ T9636] ? __pfx_ksys_write+0x10/0x10 [ 181.639453][ T9636] ? do_syscall_64+0xbe/0xfa0 [ 181.639480][ T9636] do_syscall_64+0xfa/0xfa0 [ 181.639502][ T9636] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.639525][ T9636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.639542][ T9636] ? clear_bhb_loop+0x60/0xb0 [ 181.639562][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.639577][ T9636] RIP: 0033:0x7fedb198f6c9 [ 181.639593][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.639607][ T9636] RSP: 002b:00007fedb28f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.639625][ T9636] RAX: ffffffffffffffda RBX: 00007fedb1be5fa0 RCX: 00007fedb198f6c9 [ 181.639637][ T9636] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 181.639647][ T9636] RBP: 00007fedb28f5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.639657][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.639667][ T9636] R13: 00007fedb1be6038 R14: 00007fedb1be5fa0 R15: 00007ffec7c40b48 [ 181.639698][ T9636] [ 181.693163][ T9639] ip6_vti0 speed is unknown, defaulting to 1000 [ 182.133316][ T9654] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 182.183834][ T9659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.996'. [ 182.196982][ T9656] netlink: 'syz.4.995': attribute type 30 has an invalid length. [ 182.240362][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.995'. [ 182.448207][ T9656] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 182.514798][ T9656] bond4 (unregistering): Released all slaves [ 182.575313][ T9639] wg1 speed is unknown, defaulting to 1000 [ 182.847608][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'. [ 182.921751][ T9654] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 182.943761][ T9654] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 183.058843][ T9691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.224959][ T9696] FAULT_INJECTION: forcing a failure. [ 183.224959][ T9696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.265423][ T9696] CPU: 0 UID: 0 PID: 9696 Comm: syz.1.1004 Not tainted syzkaller #0 PREEMPT(full) [ 183.265450][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.265460][ T9696] Call Trace: [ 183.265468][ T9696] [ 183.265475][ T9696] dump_stack_lvl+0x189/0x250 [ 183.265504][ T9696] ? __pfx____ratelimit+0x10/0x10 [ 183.265528][ T9696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.265551][ T9696] ? __pfx__printk+0x10/0x10 [ 183.265580][ T9696] should_fail_ex+0x414/0x560 [ 183.265611][ T9696] _copy_to_user+0x31/0xb0 [ 183.265635][ T9696] simple_read_from_buffer+0xe1/0x170 [ 183.265664][ T9696] proc_fail_nth_read+0x1b3/0x220 [ 183.265690][ T9696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.265714][ T9696] ? rw_verify_area+0x2a6/0x4d0 [ 183.265736][ T9696] ? __lock_acquire+0xab9/0xd20 [ 183.265752][ T9696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.265774][ T9696] vfs_read+0x200/0xa30 [ 183.265796][ T9696] ? fdget_pos+0x247/0x320 [ 183.265817][ T9696] ? __pfx___mutex_lock+0x10/0x10 [ 183.265835][ T9696] ? __pfx_vfs_read+0x10/0x10 [ 183.265859][ T9696] ? __fget_files+0x2a/0x420 [ 183.265880][ T9696] ? __fget_files+0x3a0/0x420 [ 183.265895][ T9696] ? __fget_files+0x2a/0x420 [ 183.265921][ T9696] ksys_read+0x145/0x250 [ 183.265946][ T9696] ? __pfx_ksys_read+0x10/0x10 [ 183.265973][ T9696] ? do_syscall_64+0xbe/0xfa0 [ 183.266000][ T9696] do_syscall_64+0xfa/0xfa0 [ 183.266022][ T9696] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.266046][ T9696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.266064][ T9696] ? clear_bhb_loop+0x60/0xb0 [ 183.266086][ T9696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.266103][ T9696] RIP: 0033:0x7fc60938e0dc [ 183.266119][ T9696] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.266134][ T9696] RSP: 002b:00007fc60a24d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.266154][ T9696] RAX: ffffffffffffffda RBX: 00007fc6095e5fa0 RCX: 00007fc60938e0dc [ 183.266166][ T9696] RDX: 000000000000000f RSI: 00007fc60a24d0a0 RDI: 0000000000000004 [ 183.266176][ T9696] RBP: 00007fc60a24d090 R08: 0000000000000000 R09: 0000000000000000 [ 183.266186][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.266197][ T9696] R13: 00007fc6095e6038 R14: 00007fc6095e5fa0 R15: 00007fff56d669a8 [ 183.266228][ T9696] [ 183.521655][ T9700] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1007'. [ 183.547784][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 183.571988][ T9702] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 183.805957][ T9718] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.315532][ T9736] lec:lec_atm_close: lec0: Shut down! [ 184.384320][ T9718] wg1 speed is unknown, defaulting to 1000 [ 184.393063][ T9734] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.445302][ T9748] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1020'. [ 184.634013][ T9760] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 184.745228][ T9734] wg1 speed is unknown, defaulting to 1000 [ 184.746017][ T9740] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.906340][ T9773] netlink: 'syz.3.1025': attribute type 7 has an invalid length. [ 184.916364][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 185.125070][ T9776] macsec1: entered promiscuous mode [ 185.135674][ T9776] macsec1: entered allmulticast mode [ 185.289049][ T9740] wg1 speed is unknown, defaulting to 1000 [ 185.752073][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1032'. [ 185.989105][ T9799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1033'. [ 186.053919][ T9801] netlink: 'syz.3.1034': attribute type 11 has an invalid length. [ 186.065654][ T9801] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1034'. [ 186.081545][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1034'. [ 186.091202][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1034'. [ 186.257252][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 186.278028][ T9803] ªªªªªª: renamed from wg2 (while UP) [ 186.618814][ T9825] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 186.636579][ T9825] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1044'. [ 186.652452][ T9827] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1045'. [ 186.749745][ T9830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.944798][ T9846] bond0: entered promiscuous mode [ 186.950310][ T9846] bond_slave_0: entered promiscuous mode [ 186.956253][ T9846] bond_slave_1: entered promiscuous mode [ 186.962609][ T9846] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 186.963781][ T9850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.971782][ T9846] batadv0: entered promiscuous mode [ 186.985209][ T9846] debugfs: 'hsr1' already exists in 'hsr' [ 186.991596][ T9846] Cannot create hsr debugfs directory [ 186.997663][ T9846] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 187.009017][ T9846] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 187.021107][ T9846] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 187.029947][ T9846] bond0: left promiscuous mode [ 187.034800][ T9846] bond_slave_0: left promiscuous mode [ 187.041403][ T9846] bond_slave_1: left promiscuous mode [ 187.048922][ T9846] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 187.067081][ T9846] batadv0: left promiscuous mode [ 187.925528][ T9918] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 188.648867][ T9955] Bluetooth: MGMT ver 1.23 [ 188.676888][ T8386] IPVS: starting estimator thread 0... [ 188.709275][ T9955] ip6_vti0 speed is unknown, defaulting to 1000 [ 188.776793][ T9958] IPVS: using max 26 ests per chain, 62400 per kthread [ 188.875213][ T9964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.900353][ T9943] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 188.914978][ T9967] bond3: option min_links: invalid value (18446744073709547520) [ 188.929563][ T9943] netlink: 'syz.4.1077': attribute type 4 has an invalid length. [ 188.951377][ T9967] bond3: option min_links: allowed values 0 - 2147483647 [ 188.972388][ T9964] vlan2: entered promiscuous mode [ 189.007083][ T9964] team0: entered promiscuous mode [ 189.075235][ T9955] wg1 speed is unknown, defaulting to 1000 [ 189.501457][ T9991] __nla_validate_parse: 13 callbacks suppressed [ 189.501478][ T9991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1091'. [ 189.654999][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 189.666084][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 189.889532][ T9996] ip6_vti0 speed is unknown, defaulting to 1000 [ 190.004657][T10004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.187648][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1098'. [ 190.199705][ T9993] geneve2: entered promiscuous mode [ 190.277292][ T9996] wg1 speed is unknown, defaulting to 1000 [ 190.352414][ T9962] ip6_vti0 speed is unknown, defaulting to 1000 [ 190.503917][T10037] netlink: 'syz.4.1101': attribute type 9 has an invalid length. [ 190.559716][T10039] netlink: 'syz.4.1101': attribute type 9 has an invalid length. [ 190.559900][T10037] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1101'. [ 190.606377][T10039] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1101'. [ 190.624640][T10045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1105'. [ 190.668216][T10037] syzkaller0: entered promiscuous mode [ 190.681969][T10037] syzkaller0: entered allmulticast mode [ 190.837985][T10052] sctp: [Deprecated]: syz.2.1108 (pid 10052) Use of int in max_burst socket option deprecated. [ 190.837985][T10052] Use struct sctp_assoc_value instead [ 190.854608][T10053] sctp: [Deprecated]: syz.2.1108 (pid 10053) Use of int in max_burst socket option deprecated. [ 190.854608][T10053] Use struct sctp_assoc_value instead [ 190.877019][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 190.879868][ T9962] wg1 speed is unknown, defaulting to 1000 [ 191.421610][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 191.572403][T10083] IPv6: Can't replace route, no match found [ 191.840852][T10093] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.884049][T10101] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1121'. [ 192.196403][T10093] wg1 speed is unknown, defaulting to 1000 [ 192.421850][T10110] lo: entered allmulticast mode [ 192.439281][T10108] lo: left allmulticast mode [ 192.867452][T10131] bond3: entered promiscuous mode [ 192.873849][T10131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.950486][T10136] ip6tnl3: entered promiscuous mode [ 193.224644][T10157] : entered promiscuous mode [ 193.449777][T10185] netlink: 'syz.0.1148': attribute type 12 has an invalid length. [ 193.458089][T10185] netlink: 'syz.0.1148': attribute type 29 has an invalid length. [ 193.542018][T10192] syzkaller0: entered promiscuous mode [ 193.548222][T10192] syzkaller0: entered allmulticast mode [ 194.134658][T10236] FAULT_INJECTION: forcing a failure. [ 194.134658][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 194.149690][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz.4.1160 Not tainted syzkaller #0 PREEMPT(full) [ 194.149715][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.149726][T10236] Call Trace: [ 194.149734][T10236] [ 194.149741][T10236] dump_stack_lvl+0x189/0x250 [ 194.149768][T10236] ? __pfx____ratelimit+0x10/0x10 [ 194.149793][T10236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.149815][T10236] ? __pfx__printk+0x10/0x10 [ 194.149839][T10236] ? __pfx___might_resched+0x10/0x10 [ 194.149862][T10236] should_fail_ex+0x414/0x560 [ 194.149892][T10236] should_failslab+0xa8/0x100 [ 194.149912][T10236] __kmalloc_cache_noprof+0x6f/0x6f0 [ 194.149934][T10236] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.149957][T10236] ? __nft_trans_set_add+0x5e/0x710 [ 194.149980][T10236] ? __pfx_nft_rhash_key+0x10/0x10 [ 194.149998][T10236] ? __pfx_nft_rhash_obj+0x10/0x10 [ 194.150014][T10236] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 194.150037][T10236] __nft_trans_set_add+0x5e/0x710 [ 194.150067][T10236] nf_tables_newset+0x1d74/0x2540 [ 194.150102][T10236] ? __pfx_nf_tables_newset+0x10/0x10 [ 194.150144][T10236] ? __nla_parse+0x40/0x60 [ 194.150165][T10236] nfnetlink_rcv+0x11d9/0x2590 [ 194.150230][T10236] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.150302][T10236] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.150336][T10236] netlink_unicast+0x82f/0x9e0 [ 194.150367][T10236] ? __pfx_netlink_unicast+0x10/0x10 [ 194.150392][T10236] ? netlink_sendmsg+0x642/0xb30 [ 194.150407][T10236] ? skb_put+0x11b/0x210 [ 194.150427][T10236] netlink_sendmsg+0x805/0xb30 [ 194.150454][T10236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.150474][T10236] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.150499][T10236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.150516][T10236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.150535][T10236] __sock_sendmsg+0x21c/0x270 [ 194.150561][T10236] ____sys_sendmsg+0x505/0x830 [ 194.150587][T10236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.150616][T10236] ? import_iovec+0x74/0xa0 [ 194.150641][T10236] ___sys_sendmsg+0x21f/0x2a0 [ 194.150662][T10236] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.150717][T10236] ? __fget_files+0x2a/0x420 [ 194.150733][T10236] ? __fget_files+0x3a0/0x420 [ 194.150761][T10236] __x64_sys_sendmsg+0x19b/0x260 [ 194.150783][T10236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.150817][T10236] ? __pfx_ksys_write+0x10/0x10 [ 194.150843][T10236] ? do_syscall_64+0xbe/0xfa0 [ 194.150871][T10236] do_syscall_64+0xfa/0xfa0 [ 194.150892][T10236] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.150915][T10236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.150931][T10236] ? clear_bhb_loop+0x60/0xb0 [ 194.150952][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.150969][T10236] RIP: 0033:0x7f745138f6c9 [ 194.150985][T10236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.150999][T10236] RSP: 002b:00007f74522d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.151016][T10236] RAX: ffffffffffffffda RBX: 00007f74515e5fa0 RCX: 00007f745138f6c9 [ 194.151028][T10236] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 194.151037][T10236] RBP: 00007f74522d1090 R08: 0000000000000000 R09: 0000000000000000 [ 194.151047][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.151057][T10236] R13: 00007f74515e6038 R14: 00007f74515e5fa0 R15: 00007ffef4f53e68 [ 194.151086][T10236] [ 194.493364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.568858][T10245] __nla_validate_parse: 17 callbacks suppressed [ 194.568877][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 194.621150][T10245] bond4: entered promiscuous mode [ 194.626332][T10245] bond4: entered allmulticast mode [ 194.632565][T10245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.637402][T10248] netlink: 'syz.0.1164': attribute type 33 has an invalid length. [ 194.657116][T10248] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1164'. [ 194.740370][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 194.831354][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 194.946551][T10268] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 195.019061][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'. [ 195.035625][T10273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.052437][T10273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.068972][T10273] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.098352][T10275] netlink: 'syz.3.1170': attribute type 2 has an invalid length. [ 195.115700][T10280] FAULT_INJECTION: forcing a failure. [ 195.115700][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 195.150120][T10275] @„;: entered promiscuous mode [ 195.165998][T10280] CPU: 0 UID: 0 PID: 10280 Comm: syz.0.1173 Not tainted syzkaller #0 PREEMPT(full) [ 195.166025][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.166036][T10280] Call Trace: [ 195.166043][T10280] [ 195.166051][T10280] dump_stack_lvl+0x189/0x250 [ 195.166078][T10280] ? __pfx____ratelimit+0x10/0x10 [ 195.166103][T10280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.166124][T10280] ? __pfx__printk+0x10/0x10 [ 195.166147][T10280] ? __pfx___might_resched+0x10/0x10 [ 195.166171][T10280] should_fail_ex+0x414/0x560 [ 195.166201][T10280] should_failslab+0xa8/0x100 [ 195.166218][T10280] __kmalloc_cache_noprof+0x6f/0x6f0 [ 195.166239][T10280] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.166261][T10280] ? __nft_trans_set_add+0x5e/0x710 [ 195.166291][T10280] ? __pfx_nft_rhash_key+0x10/0x10 [ 195.166308][T10280] ? __pfx_nft_rhash_obj+0x10/0x10 [ 195.166325][T10280] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 195.166347][T10280] __nft_trans_set_add+0x5e/0x710 [ 195.166376][T10280] nf_tables_newset+0x1d74/0x2540 [ 195.166412][T10280] ? __pfx_nf_tables_newset+0x10/0x10 [ 195.166456][T10280] ? __nla_parse+0x40/0x60 [ 195.166478][T10280] nfnetlink_rcv+0x11d9/0x2590 [ 195.166537][T10280] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 195.166578][T10280] ? ref_tracker_free+0x63a/0x7d0 [ 195.166625][T10280] ? __netlink_deliver_tap+0x807/0x850 [ 195.166646][T10280] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.166677][T10280] netlink_unicast+0x82f/0x9e0 [ 195.166709][T10280] ? __pfx_netlink_unicast+0x10/0x10 [ 195.166734][T10280] ? netlink_sendmsg+0x642/0xb30 [ 195.166749][T10280] ? skb_put+0x11b/0x210 [ 195.166771][T10280] netlink_sendmsg+0x805/0xb30 [ 195.166798][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.166819][T10280] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.166845][T10280] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.166861][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.166880][T10280] __sock_sendmsg+0x21c/0x270 [ 195.166906][T10280] ____sys_sendmsg+0x505/0x830 [ 195.166931][T10280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.166959][T10280] ? import_iovec+0x74/0xa0 [ 195.166981][T10280] ___sys_sendmsg+0x21f/0x2a0 [ 195.167002][T10280] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.167057][T10280] ? __fget_files+0x2a/0x420 [ 195.167074][T10280] ? __fget_files+0x3a0/0x420 [ 195.167099][T10280] __x64_sys_sendmsg+0x19b/0x260 [ 195.167121][T10280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.167149][T10280] ? __pfx_ksys_write+0x10/0x10 [ 195.167176][T10280] ? do_syscall_64+0xbe/0xfa0 [ 195.167204][T10280] do_syscall_64+0xfa/0xfa0 [ 195.167226][T10280] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.167249][T10280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.167285][T10280] ? clear_bhb_loop+0x60/0xb0 [ 195.167310][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.167326][T10280] RIP: 0033:0x7fedb198f6c9 [ 195.167341][T10280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.167353][T10280] RSP: 002b:00007fedb28f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.167369][T10280] RAX: ffffffffffffffda RBX: 00007fedb1be5fa0 RCX: 00007fedb198f6c9 [ 195.167379][T10280] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 195.167390][T10280] RBP: 00007fedb28f5090 R08: 0000000000000000 R09: 0000000000000000 [ 195.167401][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.167416][T10280] R13: 00007fedb1be6038 R14: 00007fedb1be5fa0 R15: 00007ffec7c40b48 [ 195.167442][T10280] [ 195.554715][T10287] netlink: ct family unspecified [ 195.560215][T10287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.605295][T10286] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.150595][T10286] wg1 speed is unknown, defaulting to 1000 [ 196.524612][T10334] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1185'. [ 196.571841][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.572753][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 196.578271][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 197.008695][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 197.018880][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 197.030245][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 197.067393][T10354] bond4: option ad_select: invalid value (34) [ 197.075572][T10354] bond4 (unregistering): Released all slaves [ 197.285871][T10372] xt_cluster: node mask cannot exceed total number of nodes [ 197.299709][T10372] xt_cluster: node mask cannot exceed total number of nodes [ 197.307056][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 197.413021][T10384] netlink: 'syz.4.1200': attribute type 2 has an invalid length. [ 197.747106][ T6510] syzkaller0: tun_net_xmit 76 [ 197.750002][T10396] syzkaller0: create flow: hash 765829710 index 1 [ 197.758090][ T6510] syzkaller0: tun_net_xmit 48 [ 197.775534][ T5883] syzkaller0: tun_net_xmit 76 [ 197.815752][T10403] FAULT_INJECTION: forcing a failure. [ 197.815752][T10403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.831587][T10403] CPU: 1 UID: 0 PID: 10403 Comm: syz.4.1205 Not tainted syzkaller #0 PREEMPT(full) [ 197.831613][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.831623][T10403] Call Trace: [ 197.831629][T10403] [ 197.831635][T10403] dump_stack_lvl+0x189/0x250 [ 197.831657][T10403] ? __pfx____ratelimit+0x10/0x10 [ 197.831676][T10403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.831693][T10403] ? __pfx__printk+0x10/0x10 [ 197.831706][T10403] ? __might_fault+0xb0/0x130 [ 197.831733][T10403] should_fail_ex+0x414/0x560 [ 197.831756][T10403] _copy_from_user+0x2d/0xb0 [ 197.831773][T10403] kstrtouint_from_user+0xc4/0x170 [ 197.831790][T10403] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 197.831817][T10403] proc_fail_nth_write+0x88/0x200 [ 197.831834][T10403] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.831854][T10403] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 197.831871][T10403] vfs_write+0x27e/0xb30 [ 197.831896][T10403] ? __pfx_vfs_write+0x10/0x10 [ 197.831914][T10403] ? __fget_files+0x2a/0x420 [ 197.831931][T10403] ? __fget_files+0x3a0/0x420 [ 197.831942][T10403] ? __fget_files+0x2a/0x420 [ 197.831961][T10403] ksys_write+0x145/0x250 [ 197.831980][T10403] ? __pfx_ksys_write+0x10/0x10 [ 197.832000][T10403] ? do_syscall_64+0xbe/0xfa0 [ 197.832021][T10403] do_syscall_64+0xfa/0xfa0 [ 197.832054][T10403] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.832072][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.832085][T10403] ? clear_bhb_loop+0x60/0xb0 [ 197.832101][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.832113][T10403] RIP: 0033:0x7f745138e17f [ 197.832126][T10403] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 197.832137][T10403] RSP: 002b:00007f74522d1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 197.832153][T10403] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f745138e17f [ 197.832162][T10403] RDX: 0000000000000001 RSI: 00007f74522d10a0 RDI: 0000000000000004 [ 197.832171][T10403] RBP: 00007f74522d1090 R08: 0000000000000000 R09: 0000000000000000 [ 197.832179][T10403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 197.832187][T10403] R13: 00007f74515e6038 R14: 00007f74515e5fa0 R15: 00007ffef4f53e68 [ 197.832210][T10403] [ 198.097203][ T5883] syzkaller0: tun_net_xmit 76 [ 198.223585][T10408] netlink: 'syz.3.1208': attribute type 39 has an invalid length. [ 198.336977][ T5883] syzkaller0: tun_net_xmit 76 [ 198.447886][T10389] syzkaller0: delete flow: hash 765829710 index 1 [ 199.740431][T10433] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 199.750204][T10433] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 199.760378][T10433] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 199.773777][T10443] __nla_validate_parse: 5 callbacks suppressed [ 199.773794][T10443] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1216'. [ 199.922325][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 199.956066][T10450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.963370][T10450] IPv6: NLM_F_CREATE should be set when creating new route [ 200.140748][T10459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.162858][ T5827] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.176717][ T5827] syz2: Port: 1 Link ACTIVE [ 200.203537][ T5827] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.252045][T10473] xt_hashlimit: max too large, truncated to 1048576 [ 200.268657][T10478] netlink: 'syz.2.1229': attribute type 7 has an invalid length. [ 200.287080][T10478] netlink: 'syz.2.1229': attribute type 7 has an invalid length. [ 200.294057][T10475] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.296945][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.311478][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.320793][T10481] netlink: 'syz.2.1229': attribute type 7 has an invalid length. [ 200.321980][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.337788][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.347424][T10481] netlink: 'syz.2.1229': attribute type 7 has an invalid length. [ 200.360141][T10473] netlink: 'syz.3.1227': attribute type 11 has an invalid length. [ 200.368395][T10473] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1227'. [ 200.490158][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1231'. [ 200.504354][T10488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1231'. [ 200.513561][T10488] team0: No ports can be present during mode change [ 200.657886][T10475] wg1 speed is unknown, defaulting to 1000 [ 202.326996][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 203.908244][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 203.986803][T10519] ªªªªª: renamed from veth0 (while UP) [ 204.171541][T10527] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.187598][T10527] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.225046][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 204.311225][T10527] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.337053][T10527] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.356067][T10547] netlink: 'syz.4.1248': attribute type 10 has an invalid length. [ 204.379255][T10549] team0: Caught tx_queue_len zero misconfig [ 204.467287][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 204.559735][T10527] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.576143][T10527] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.624657][T10561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1251'. [ 204.667581][T10561] netem: change failed [ 204.685700][T10527] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.716169][T10527] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.857637][T10569] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 205.114267][T10572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.137727][T10572] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 205.191031][ T6510] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.201108][ T6510] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.239316][ T6510] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.256988][ T6510] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.297323][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 205.363107][ T6510] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.382046][ T6510] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.457775][T10587] veth7: entered promiscuous mode [ 205.498514][T10590] erspan0: entered allmulticast mode [ 205.517386][ T6510] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.535772][ T6510] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.567330][T10594] tipc: Enabled bearer , priority 10 [ 205.573818][T10595] tipc: Enabling of bearer rejected, already enabled [ 205.708440][T10606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 205.790950][T10607] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.830461][ T5827] IPVS: starting estimator thread 0... [ 205.839556][T10619] x_tables: unsorted entry at hook 1 [ 205.942081][T10618] IPVS: using max 30 ests per chain, 72000 per kthread [ 206.594005][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 206.632938][T10607] wg1 speed is unknown, defaulting to 1000 [ 206.639864][T10647] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 206.689472][ T5883] tipc: Node number set to 3128664662 [ 207.725121][T10671] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 208.109089][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 208.424062][T10711] sctp: [Deprecated]: syz.2.1293 (pid 10711) Use of int in maxseg socket option. [ 208.424062][T10711] Use struct sctp_assoc_value instead [ 208.873690][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 209.117458][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 209.143214][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 209.168964][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'. [ 209.188947][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 209.229426][T10736] pim6reg1: entered promiscuous mode [ 209.238271][T10736] pim6reg1: entered allmulticast mode [ 209.476264][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1301'. [ 209.845769][T10776] syzkaller0: entered promiscuous mode [ 209.854145][T10776] syzkaller0: entered allmulticast mode [ 210.368134][T10803] __nla_validate_parse: 2 callbacks suppressed [ 210.368152][T10803] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1319'. [ 210.866820][T10810] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1323'. [ 210.900993][T10813] netlink: 'syz.4.1324': attribute type 2 has an invalid length. [ 210.952469][T10813] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 211.081664][T10818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1326'. [ 211.308225][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 211.394831][T10823] netlink: 'syz.4.1328': attribute type 33 has an invalid length. [ 211.412796][T10823] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1328'. [ 211.498115][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 211.578094][T10823] ip6_vti0 speed is unknown, defaulting to 1000 [ 211.694489][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 211.705917][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 211.907417][T10860] bond6: option miimon: invalid value (18446744073709551607) [ 211.933351][T10860] bond6: option miimon: allowed values 0 - 2147483647 [ 211.968051][T10860] bond6 (unregistering): Released all slaves [ 211.994167][T10823] wg1 speed is unknown, defaulting to 1000 [ 212.001263][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1341'. [ 212.058025][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 212.131779][T10874] [†’Ì: entered promiscuous mode [ 212.142001][T10876] syzkaller0: entered allmulticast mode [ 212.321516][T10887] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 212.341773][T10887] Bluetooth: MGMT ver 1.23 [ 212.478246][T10895] openvswitch: netlink: Duplicate or invalid key (type 0). [ 212.485697][T10895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.747999][T10906] tipc: Enabled bearer , priority 0 [ 212.755585][T10906] syzkaller0: entered promiscuous mode [ 212.764124][T10906] syzkaller0: entered allmulticast mode [ 212.790748][T10906] tipc: Resetting bearer [ 212.803866][T10905] tipc: Resetting bearer [ 212.841980][T10912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.853799][T10905] tipc: Disabling bearer [ 212.943585][T10911] ip6_vti0 speed is unknown, defaulting to 1000 [ 213.253361][T10911] wg1 speed is unknown, defaulting to 1000 [ 213.277510][T10927] ip6_vti0 speed is unknown, defaulting to 1000 [ 213.674232][T10960] ªªªªªª: renamed from wg2 (while UP) [ 213.962553][T10927] wg1 speed is unknown, defaulting to 1000 [ 214.074075][T10975] netlink: 'syz.2.1372': attribute type 2 has an invalid length. [ 214.144114][T10980] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 214.408182][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 214.409486][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 214.717812][T11000] lo: Caught tx_queue_len zero misconfig [ 214.753121][T11000] bond0: Caught tx_queue_len zero misconfig [ 215.004006][T11016] ªªªªªª: renamed from wg2 [ 215.035706][T11015] netlink: 'syz.1.1382': attribute type 1 has an invalid length. [ 215.163016][T11023] tipc: Enabled bearer , priority 0 [ 215.170474][T11023] syzkaller0: entered promiscuous mode [ 215.175963][T11023] syzkaller0: entered allmulticast mode [ 215.248737][T11023] tipc: Resetting bearer [ 215.307138][T11022] tipc: Resetting bearer [ 215.334506][T11022] tipc: Disabling bearer [ 215.500757][T11045] __nla_validate_parse: 15 callbacks suppressed [ 215.500774][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1390'. [ 215.591232][T11057] netlink: 'syz.3.1394': attribute type 3 has an invalid length. [ 215.670859][T11063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1396'. [ 215.689256][T11063] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1396'. [ 215.896050][T11086] €Â: renamed from team0 (while UP) [ 216.058692][T11092] pim6reg1: entered promiscuous mode [ 216.064026][T11092] pim6reg1: entered allmulticast mode [ 216.284380][T11105] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.390266][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1409'. [ 217.811167][T11105] wg1 speed is unknown, defaulting to 1000 [ 218.088588][T11141] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 218.096384][T11141] netlink: 'syz.0.1418': attribute type 3 has an invalid length. [ 218.111943][T11141] netlink: 'syz.0.1418': attribute type 7 has an invalid length. [ 218.138621][T11141] netlink: 'syz.0.1418': attribute type 8 has an invalid length. [ 218.147432][T11141] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1418'. [ 218.157621][T11141] NCSI netlink: No device for ifindex 131092 [ 218.809049][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1429'. [ 218.850005][T11192] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1430'. [ 218.938943][T11200] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 218.951376][T11200] netlink: 'syz.2.1434': attribute type 2 has an invalid length. [ 219.042446][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 219.113118][T11209] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 219.120418][T11209] pim6reg1: linktype set to 805 [ 219.201366][T11212] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1437'. [ 219.218152][T11212] netlink: 'syz.3.1437': attribute type 9 has an invalid length. [ 219.234264][T11212] netlink: 'syz.3.1437': attribute type 5 has an invalid length. [ 219.304170][T11216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1438'. [ 219.363874][T11224] ip6tnl0: Caught tx_queue_len zero misconfig [ 220.425351][T11282] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.753382][T11292] IPVS: persistence engine module ip_vs_pe_ not found [ 220.869164][T11300] pimreg: entered allmulticast mode [ 221.069715][T11314] __nla_validate_parse: 4 callbacks suppressed [ 221.069731][T11314] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1464'. [ 221.229575][T11282] wg1 speed is unknown, defaulting to 1000 [ 221.358514][T11325] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.694067][T11338] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 221.708932][T11338] bond2 (unregistering): Released all slaves [ 221.812632][T11333] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.827528][T11325] wg1 speed is unknown, defaulting to 1000 [ 222.658817][T11392] veth1_to_bond: entered allmulticast mode [ 222.668640][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 222.955974][T11392] veth1_to_bond (unregistering): left allmulticast mode [ 223.041620][T11333] wg1 speed is unknown, defaulting to 1000 [ 223.474987][T11428] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1491'. [ 223.535087][T11428] block nbd0: not configured, cannot reconfigure [ 223.693855][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'. [ 223.819002][T11434] ip6_vti0 speed is unknown, defaulting to 1000 [ 224.046533][T11449] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1497'. [ 224.073383][T11449] 0ªX¹¦À: renamed from caif0 [ 224.099620][T11450] netlink: 'syz.1.1497': attribute type 13 has an invalid length. [ 224.132939][T11449] 0ªX¹¦À: entered allmulticast mode [ 224.155961][T11450] netlink: 'syz.1.1497': attribute type 17 has an invalid length. [ 224.176604][T11449] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 224.199096][T11453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1497'. [ 224.209986][T11434] wg1 speed is unknown, defaulting to 1000 [ 224.218393][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 224.250337][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 224.295903][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 224.319415][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 224.352490][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.362046][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.372037][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.536082][T11450] 0ªX¹¦À: left allmulticast mode [ 224.552001][T11450] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 224.845835][T11470] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.237551][T11490] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.497280][T11498] tipc: Enabled bearer , priority 0 [ 225.517624][T11498] syzkaller0: entered promiscuous mode [ 225.523147][T11498] syzkaller0: entered allmulticast mode [ 225.622103][T11490] wg1 speed is unknown, defaulting to 1000 [ 225.634332][T11497] tipc: Resetting bearer [ 225.679490][T11497] tipc: Disabling bearer [ 225.883845][T11509] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 226.720657][T11543] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 226.744575][T11543] bridge2: entered allmulticast mode [ 227.240701][T11549] slab net_namespace start ffff8880315c0000 pointer offset 4344 size 9280 [ 227.249785][T11549] list_del corruption. prev->next should be ffff88814d335208, but was ffff888030c9ad08. (prev=ffff8880315c10f8) [ 227.262045][T11549] ------------[ cut here ]------------ [ 227.267547][T11549] kernel BUG at lib/list_debug.c:64! [ 227.272886][T11549] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 227.279142][T11549] CPU: 0 UID: 0 PID: 11549 Comm: syz.0.1526 Not tainted syzkaller #0 PREEMPT(full) [ 227.288504][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.298599][T11549] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 227.305639][T11549] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 227.325231][T11549] RSP: 0018:ffffc90003657938 EFLAGS: 00010246 [ 227.331288][T11549] RAX: 000000000000006d RBX: ffff88814d335208 RCX: d0e4d36cba463800 [ 227.339249][T11549] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 227.347215][T11549] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 227.355182][T11549] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff110062b821f [ 227.363149][T11549] R13: dffffc0000000000 R14: ffff8880315c10f8 R15: ffff8880315c10f8 [ 227.371123][T11549] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 227.380053][T11549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.386634][T11549] CR2: 0000000000000000 CR3: 000000004ddf0000 CR4: 00000000003526f0 [ 227.394606][T11549] Call Trace: [ 227.397874][T11549] [ 227.400798][T11549] sctp_destroy_sock+0xb4/0x370 [ 227.405639][T11549] ? sk_common_release+0x69/0x310 [ 227.410650][T11549] ? __pfx_sctp_destroy_sock+0x10/0x10 [ 227.416088][T11549] sk_common_release+0x75/0x310 [ 227.420959][T11549] sctp_close+0x77e/0x900 [ 227.425287][T11549] ? __pfx_sctp_close+0x10/0x10 [ 227.430119][T11549] ? down_write+0x162/0x1f0 [ 227.434613][T11549] ? __pfx_down_write+0x10/0x10 [ 227.439444][T11549] ? ip_mc_drop_socket+0x25a/0x270 [ 227.444630][T11549] inet_release+0x144/0x190 [ 227.449114][T11549] sock_close+0xc3/0x240 [ 227.453359][T11549] ? __pfx_sock_close+0x10/0x10 [ 227.458193][T11549] __fput+0x44c/0xa70 [ 227.462161][T11549] task_work_run+0x1d4/0x260 [ 227.466740][T11549] ? __pfx_task_work_run+0x10/0x10 [ 227.471839][T11549] do_exit+0x6b5/0x2300 [ 227.475984][T11549] ? preempt_schedule+0xae/0xc0 [ 227.480828][T11549] ? preempt_schedule_common+0x83/0xd0 [ 227.486268][T11549] ? preempt_schedule+0xae/0xc0 [ 227.491100][T11549] ? __pfx_preempt_schedule+0x10/0x10 [ 227.496500][T11549] ? __pfx_do_exit+0x10/0x10 [ 227.501162][T11549] ? preempt_schedule_thunk+0x16/0x30 [ 227.506520][T11549] do_group_exit+0x21c/0x2d0 [ 227.511101][T11549] __x64_sys_exit_group+0x3f/0x40 [ 227.516115][T11549] x64_sys_call+0x21f7/0x2200 [ 227.520776][T11549] do_syscall_64+0xfa/0xfa0 [ 227.525266][T11549] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.530449][T11549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.536495][T11549] ? clear_bhb_loop+0x60/0xb0 [ 227.541155][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.547035][T11549] RIP: 0033:0x7fedb198f6c9 [ 227.551430][T11549] Code: Unable to access opcode bytes at 0x7fedb198f69f. [ 227.558431][T11549] RSP: 002b:00007ffec7c406b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 227.566827][T11549] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fedb198f6c9 [ 227.574791][T11549] RDX: 00007fedb1946b97 RSI: 0000000000000000 RDI: 000000000000000b [ 227.582742][T11549] RBP: 0000000000000003 R08: 00007ffec7c40b47 R09: 000000000000000b [ 227.590695][T11549] R10: 00007fedb1be5fa0 R11: 0000000000000246 R12: 00007fedb1be627c [ 227.598647][T11549] R13: 00007fedb1be6270 R14: 000000000000030d R15: 0000000000000005 [ 227.606609][T11549] [ 227.609609][T11549] Modules linked in: [ 227.613638][T11549] ---[ end trace 0000000000000000 ]--- [ 227.619113][T11549] RIP: 0010:__list_del_entry_valid_or_report+0x15a/0x190 [ 227.626164][T11549] Code: e8 6b 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 6c ee 92 fd 49 8b 17 48 c7 c7 00 0c bf 8b 48 89 de 4c 89 f9 e8 07 c4 94 fc 90 <0f> 0b 4c 89 f7 e8 3c 26 71 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 3d [ 227.645812][T11549] RSP: 0018:ffffc90003657938 EFLAGS: 00010246 [ 227.651946][T11549] RAX: 000000000000006d RBX: ffff88814d335208 RCX: d0e4d36cba463800 [ 227.659963][T11549] RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000 [ 227.667974][T11549] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 227.675956][T11549] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: 1ffff110062b821f [ 227.683968][T11549] R13: dffffc0000000000 R14: ffff8880315c10f8 R15: ffff8880315c10f8 [ 227.691977][T11549] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 227.700937][T11549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.707560][T11549] CR2: 0000000000000000 CR3: 000000004ddf0000 CR4: 00000000003526f0 [ 227.715550][T11549] Kernel panic - not syncing: Fatal exception in interrupt [ 227.723091][T11549] Kernel Offset: disabled [ 227.727407][T11549] Rebooting in 86400 seconds..