last executing test programs: 6.110390301s ago: executing program 3 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='mem_connect\x00', r4, 0x0, 0x1000000002}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1d}, {&(0x7f0000000400)='gH', 0x2}], 0x2}, 0x40080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000002060102000000000000000000fffffffd00020073797a31000000000c0007800800120000000000050005000a00000005000400000000000d0003006c6973743a736574000000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 5.437884402s ago: executing program 3 (id=1700): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000048001000800000001"], 0x48) 5.319937189s ago: executing program 3 (id=1701): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x0, 0x2000000}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x18}, 0x0) 5.146348883s ago: executing program 3 (id=1704): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20080c40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180200008a329beaeda4fffa505cca1000bf95040000000000", @ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0500000002"], 0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf2516000000abd103e99c4f28d772b923dafaf88442d7125ac18e67cbf137e69e99369e3eff072d19be804cd6814735", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000580)={{r6}, "16d94622201e37a61af02167b33fcafd116381782a0bab0ff1cfb4b14425e5f49e6fca631c2a70ec8e19e2e0c4911a30d11cb535a983fd200f59e2a897a9af756176634e1bfeb077a737ac72ce7f45653e7e232bd501e6078e564f1d4b39dc7de9f0e3437fa97ae192998ced19b6818c1903331b68433ab9fa79de4b9b4c09e7a10ce71826b7a89f2dc9effc1cd2fd29d04fcfa09153a9cd480efe0b69465b0150aa0a016bc62fa5c505d6474901a7b7e2dde5e614621b9dccc1daf48c3cd01f8f347e8ebb88681adab7d4fc7e0236a6bb8ab5d094df3fde030b5508c2b040f9b48f9231531f1891d6d7405e90045bf5cad44085814e6d00539b6a31afcf11c47d92933878725aa877888baf47ae8bec843440a2f4ca8ec12a0ac0f672ae4012430d2f3c49d0d2b650cf6dbb976d8d4c07cbf3f54567cde53cb3ce316b2e6a22fa29165809a52ffd6ea9e0579fba1f960ae94d528d06c66d3b57b387c3999110532b87e184841a63f3d929f0867c724bc272631fd105a0eb6cb2932f77023b6002eeff2842fc1210e0db8507b5c6b50bf542c0b8b70566ba1040b1a088a253d27d4d226064c8c5037c00951b88cb5197dd1625aaec51a9fc2ad18a1602f75c17537161fdce157ec8b92cd8f111784810a6c747c65dd295790ef52b1661d7ce411e7bd7165d38459e58bc3532cc38054dd62ae455505da3f25349936797d633893a33476e0113d719eca988f59d40d153c83ee05746b3023b11675111e89e8058674214743ad5aa5f076dbcdb6c2024430543ebc261c7a3cf8a863c413cad7bd8f8fb9b12440c9f81c19ac60fc9fc792f3a28ecf50a0a680577f586090cb50a356f510c6d70c4ace05e5cbe66c78d96a373d4a3b2ed30940b32a88b6d166c7110ba8dd57f4941f22e054f9358c192330d7cb724a9ac3f1d2269c2831db0643b16815990dcb6687d0df1bcb37f1fcd089150a078f8614ad0535acc1de05565493b88c05aa45367333b95b6bea4cc8483751a878dc94008cf79429878743e1a5fe91c8ee06e7e0671c243fdf247e95f009e91ee1b686906058ead56c79f78273956f8e12c4f1b800268f82991dd693f8d1566201a5bd01cb1a3dbc79e15316d5f618747cd9be0afcddcf2e563cf141f443ce31d13a85479b4ad6a5c757f8cad1ad8d297753ee1795879a7cbe5cc4597a345ad39811c60b10cf31d2ccb75dedbc1f6c1cd60656864b3e08e02a4ceb897a28f6aaff30038fe86d7eb1e53311507a0dab0a310ed82bfe6e5daa06323daa4b879dcad831be716272ee1d380ff872bb42d3693102d4edb3d8bcc4a1a23d7cffb46ffceab1ee37cd5b865a4447719b0de5bbdd882fc7c7baec32d83bda45dc7b00cadebdf2caaf3529fed29e636a608e486641aafcfc55319af54c79f2d3bf325552cdd479773e4c08203f59d7aea3d327eebb44e80312f0a828e4272506bc9be166c1e8b18a0c57c2d3a833f93d4c556e187c71ee8714fe56ad0b3b9af8e7a7d0629cf0e2a6e7629dcd21dfcc5a6e36063b7ba3370e19a180c6aa08e41b791fbf003b7ecc59c856babc33a327da37920de78f4a7823038caf99ca62169b6b02e8934a225a7186a9fc447df148d6d38f009d17e242ed6e25e8d44a8f9bf52394aa51e9c6571b4268f706b17e29fd1557cb17577c0c7278798e9c8a7e24afb005aef5522891b38b7e1b480535426d8e2056a970c3c1ce2905d3314230b0b04b0535230618b6f2c1187e16cb9f0d310cfd86b99836b286d9c2157ee8181a8c9d915613e89c35b0fe3758371d8e550927609a6aebdbafd00f1f2b13fb775bc48f2cf831e64acb0cb0183644eab23c7b5b40546d7c7c2df7fd40012e3f9270c17583b716815915ef040c827034828f7c9ed639a94093d8c31e0396cd9c465e625a781f152d3239d76e628c562323f0769f1e8f3d22f0708469eed64d555189bbc318f86ff924f789fe1dca5c13abb52d61611b5d1013e0656e64792aaabaf29acb274d327e52778a88a90c9e9b927856c6c111d3d93db47eb0da0363b51e32737759a29ebf6942078347ab515941dc125bdf61cbdb687f17feb986fb725220cbd7a716f1a8b0d741a6867495167542013a58a04f5414e0d2f12f66281d0dccb77c848b4191d9f523f95ca032b6f8008d37e074bf54eb712374c6e42cd8cfcbd208dbd097559db9d7ad5aa5756842e8e6d274e8c5ba060292b79c5b1e70b4f818f66c1b232b7f36dd2d174ee3bca2fce14fcdfa08b17e457b20aef1defa37663ebef439078dba1b170f1623d61773f4f2357256da5a15354cd8168b608d582aad1280754115e47a7cdc3cc28e715e9ec611312174e1d7ac0c7854bac597aea4acd541c3a85df2cac7c7fc219afa771560c0c162c8e5b550812c096fa6978fbde17675c15d42a5977cc57b964716ece87a15753131d9279c459432e175b36fdd37154472bbfe35da05b1fb0e04fccb28f45ae8443ee3ebae35679f6abf14b27a6595d4ba8a15bb30334be8362796370ae20f37abe2cd9e4c6d9d87f93ab0db97b082e6d5c6e7e6aefc91901ef9521b2d49f25f85515b175be2dd809bf7a6290333ec1797fede6108c3ab35a316bd8de605168d15b369de06109f429626fbd72f9a8295e1d294f73f43a288d61f5d4f309daf595f14d32d9a1a262a3a2f4d7338842f2da44d152511f5651e5b7622c9c385ed66fdf1cd43dc67cced5b0210f2101449c847a2ce07c6b008fad4ff58272b33731efb144c26b5e8cb5ec9bde158d96fd8efe69ffb1f9ccef3a86f92ca87f65cfff5b2f44db329f16babb8eb9890a8ab831de53a66c0b19a535e8ef521789d4e98309182dfde9b486a3b15a8bfff55e41b982ac2816b7626ee642e06518d094136b7b883b7ca29e10d4f4beb35d8ba723bb1c65b4c0fa5cfb538d9427c8cedf38ff4b2a13f66fe9da6189b815b72e704f119512e12325902795215a27cf82a3d8c9c66fc03cf43f9f3116dc0147a355289a1deb78d5ef20f7d4f854d2efc54677af75536ce061ab40a96a5aedf191139798fe0b4b28cf54774db9f9262365a1af907e36e5327b7d981b02cdc2b1ae2c9e2089a1970f411098f0bd117a51de36fe243d109211372e75f0ac9cf26ce65da27bc1678de673db4feff24e121d64b0ee23fca40b5306c64d58f18fceae52508dd7546c8d8c830062e2e2a3a4a3756b9dcb482d71212dd29ef1e1426a3c61562906be8ef75aaa653448bd6102fc55026b58e510077e1fc92305e0ab5860f7e8fc6f804fb394f46ef6c939652c81e42dff76cf39f82d8453a0296be9cb259c4033802a0a0d7196cb098a41d884c747731ed35484509b067c0a1d4013a54e76dc01247167ca743f29fd22938f4071f5c448a35849c45c9cc9f87668a3628c6bce75e40ce4d1d6d02bc44199007c9fc631398fed14bcc0e6fd2c800c345cb656a462280f6c1df5bfb631f34d6da5a1120094707bbf3f77714b05c2532cceed4a865f5c41665f050572570351a271e675c152386c0e996688163ef291e72546a5a7a2c967cef65c725c17330f53bc6be6b126fdb77041cb53ffce389203b3c6a4ba082246740ded8d2e624b40d7c4dcef998818b7035162b8361b21e49b778f93539169c1e5c2004a0e04aaff0c54d8c6c7e7579fc52be6340a29b258f3ee370c9d5edeca75a603472a888818bd0154f985c43d985808f6251d6ebbe5cdd87a26892ca07f7d9a08fd75634cfda52c76e389487cacade36c134ffdf2e146edcc19197f65080d0abfb9971d860a906b316ba4cdc00e1fdb40c0ab8c4dfaaeb8aa101542cfa1ce37e2510e924edb3304df592f6d2897d0a811345ee747cf4eb548f73a9ab25bf3942f986820fd17251c9433c135d5afae47c0b1461bc15e3e9402fa0c595143b73769bb0063f8ecb80a8be7553721ff4d0072da0b781a00d2056a9785d1af9e4e8082dbebef8b490d5491fca3de4532d885451c031e0fe83343ab3a9214498044e9c53e08260d6ff7b9dc4081768d0ecc38c8c79866f539cebba728539f3cc42d51afe696ed0b55fd9664a2aa68a60b3b97d4d5e51b6acb82f963ab238b83cc8fb2b25c5a652c1de7ca2d7c91e112b187fbbad1207a44f85606245edff9c9cc5f42d7db091937580ec8d2f9188f4e9e003b8e1259c08870d5b508729e24f8cb1c90720cca36ce267e75ff1d2fe99753f2693e5f5b2bd36181827abb5b53df906244e73b32817ad710c0ab0c3fddf3fb1f4f30f890de88a079b18862a9a542ba818518eb7587b4c1dade5a33339b466600781e67e881702c486e612f4a7d468d1c42bf280cfec588a573176a2cf54c6fdec6f2cee0ae43b818fa9e185cff20ac91de8bb7730670b25919b96c8dcb81581aab72db7dfab8f4953d5f83e34ade5c0429ab25dfcb7648f539a2584f5057ac05f8a4aeb5ce800f09c33b1fabccae1b1929240238315c41905fe9fc333b43861df26be9777b49c794775d810efba3f8738746c8d6ca79514d2ecdeb4636998ef74576e204bb722a4745d46f57f65ac4450382b99be2d945712aaf8e36dbbc50d413b68f7b861b9cfef89c884acf6914eefa67b3c2a829798ef8650404d7008d73ce5737382462c0c4dcd9c48ca5e60006de09c81517e9180cab1d2d2f6ab46195c246c378c381627984ef7076023d159ee3ca2cfa365ca33027c8909c731517352e771e0f53ce143eee6a5205df5040040d5e5aeeddc668d5ac2e604e31aecef4518fd1d33564af465b13c5c5de0f38908366723f75e770ff2025b4ba044a2c5c7704b69ef9cc484e60d1272affefa52d88d3909e41188d649bbfdefdf0fe87a15f45272048198f853b997c117dbc8770e231730f85eb418171b7dff79b0970303c4fdf2fcb04470cf457208b82fac6e0a62c0dcf10116fc0abe87ed8fe02955b19d967d405ae5c3ed4d5d21abaa84c03866f10f5a7a403662c752e6a5d80f110a8cc882e06a17f80b25644fecda360d04baa6150707d718996d5f254db44e63b95f162899d88becd141dbb522835d1f207ce10f947e900d879a21e590d562f7fdc422558cd98de26abe323e47c03775b1d69aaa08a2aded5e9faaa30f8db70903405ef39767e401a5e0ed70690eb30540c3d055987f73e8da08f47610c440fb1aeeb4ef3afa12fdf604f70320192666f1c9f10b4648271bc65cafe1c776fcd6c2056b33fe1f9308802b31bdd1e9d8f652c16b92d91fa72a93ea8264792d5d632e2beae6ec87a807ee0f49a29d6f70e99dc612eaba514f981ae4ca671e22f00be8455e1db501f1a32fbcb934b87191cbe801c129931473ebc28d1080e5d40c53e6e6fe78c3f6f387bc3ad83290e55f4785771a253a758eead4d9e9d7b975c9aa5472daf1cc29ac4b65d062de8ae9f89eabd4e8c4562e3f9e97da254970f7809e4a997499715e3e8f97502edeec322452ae69005ce814627d68cafe8fbe4097746b354a2ce034befbaaeae865016f8e14f99fc1a07228f8aeb378b3e41bbf281f29acfb5c8daea71c37d10054a9e21e3f37bdbe5855053d257a8f1ece34718c895e63baf648278c05f27b7cfdd6cb773dacb7a4591054acfdcb763014d8ced91e1f5fde9ee914040cebc046d0556cb65599854fd23553979a0a494ae9f730254869e92002877ee625952d677a661885d889115f422f3de83b5f2dac984490eba7b04a73d5ab2c1cd7a55a4e285cae4b0a86fe27f6c7780f0a932a2a41f337e8630c836a06e57ef64e2056e291f765d3d41d254fdbf2d325a70"}) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x541b, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) 3.914771036s ago: executing program 4 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b708, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0x300, 0x70bd27, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {0x0, 0x6}, {0x7, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4044880) 3.256074346s ago: executing program 4 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48581, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c0000003e000701feffffff00000000017c000004004280040001801000dbf9ed9804288673f9ffe902e2fb"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6}, 0x28) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000440)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x4, 0x7, 0x200, 0x4, 0x4b, 0x8}}) (async) unshare(0x22020400) unshare(0x2c060000) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) (rerun: 32) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async, rerun: 32) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008883}, 0x20000000) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0xffff, 0x5}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xfe}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x2c}}, 0x4048000) 2.358047737s ago: executing program 4 (id=1730): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_icmp(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x27}) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@broadcast, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\b\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x504, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, [@fragment={0x2f, 0x0, 0xf7, 0x1, 0x0, 0x8, 0x67}]}}}}}}}, 0x0) 2.230957772s ago: executing program 1 (id=1733): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0x7, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.889520645s ago: executing program 1 (id=1734): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f00000005c0), 0x7, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1, 0x1}, {0x1}}], 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x40049) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="d0f476ed0cb635172c3669cabfb1cadc65e80760729702dd7b6a897d2420b405a68bf2173ec652fa86a58160eac245af2e966ac426d0347e569290d1af54427a1c102ef2393389fa925d9939b66d0d554c2347a1730231e8b6c7f776eb07820c18833176beeffa5c2aacdc07d4b107dd2e52377b24fd1e6aa05eda6ae12ee4e06ce3cad58f5e52574eaa3632c17a59f4ba351833c9b05697fc11d55c7d3ceb403ad0af9e61f2be1a55a77529c2bbedca4420986c863902a4a2d2d2cc824700acf06a43bbe8"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x500}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x0) 1.66377221s ago: executing program 0 (id=1736): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000072e628c98282f1db6c92b5dc7805c5446a0579cdc03446a6202517dd4b9e38bb324559c99464e4c6766b905f476102e9dad0ba9055f2afe299fcdd9c7c0219dff920f6ea5f0c27256dcbfecd85f8e1823810f6f90278876f698a1ae926b36cc0bbac5412e25654eb2ad5fcede960e0a55cece5be032068906d7ad0e91a417a2b333f2e39b6c50094c08464b31743567c209bb7aea04da78e3400a78f4957309946d3404c6bd479daef8f91f3f228", @ANYRES16, @ANYBLOB="08042dbd7000ffdbdf250900000014000180060004004e23000008000b00736970"], 0x28}}, 0x4005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4040040) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) 1.505609359s ago: executing program 1 (id=1737): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000070000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r5, 0x89e3, &(0x7f0000000040)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={r9, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x829, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x800, 0x93, &(0x7f0000000300)=""/147, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x9}, 0x10, 0x0, r6, 0x1, 0x0, &(0x7f0000000440)=[{0x4, 0x4, 0x8}], 0x10, 0x6}, 0x94) 1.453568158s ago: executing program 0 (id=1738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001a00010028bd70000002000002202000ff0000070002000008000300", @ANYRES32=r3, @ANYBLOB="080019"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0xea5bc50b6599d77e) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0xfffffffffffffff5, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x0, 0x4, 0x5}]}, 0xfffffd6a}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 1.453045577s ago: executing program 2 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8ca7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x14, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1f00, 0x3032, 0xffffffffffffffff, 0x0) 1.284156995s ago: executing program 1 (id=1740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x40000010}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000000)={0xa, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.206018236s ago: executing program 2 (id=1741): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @dev={0xac, 0x14, 0x14, 0x39}}, @echo_reply={0xe0, 0x0, 0x0, 0x66, 0xb00}}}}}, 0x0) 1.205502094s ago: executing program 0 (id=1742): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, 0x1401, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}}, 0x40) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r11 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r11, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)='\b', 0x1}, {0x0}], 0x2}, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 1.040296733s ago: executing program 4 (id=1743): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.015313872s ago: executing program 2 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)=ANY=[@ANYBLOB="1c000020010401020000000000000000000000020500010001000000"], 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) 968.619636ms ago: executing program 1 (id=1745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x4000000, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 836.773051ms ago: executing program 2 (id=1746): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'vlan0\x00', {'ip6gretap0\x00'}, 0x2891}) r1 = socket$pppoe(0x18, 0x1, 0x0) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x1000, "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"}, &(0x7f00000010c0)=0x1008) socketpair(0x22, 0x3, 0x6, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_dgram(r5, &(0x7f0000001140)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f0000004540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004500)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x25d0, 0xc, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2570, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "8fef7a7b66944fc9fcbe4fef06ca8c51b12bbc60b742949db48b3a0e63b58457cac11d51ecf627210f9785dd155ed1448852f3e64d46dc101fde82f3c7a14e9aa1d2521791005b326ff855ccc3397e39ffcc5537bde8988a418a60472447e2f9fe98f5c9d169dfb27d5dbfb4c19aa61bdd6d39e26da5f881f7bf8af771bee1af2696a5c6dd4da1711c8dd1a694a3535ea5287079c23f729e3f2af583e7ffd9808e501041df00"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x2398, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2164, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "fa16a226bd01b75f6821ecec17e8fe3a3865f64bff9bf9b94e2723371b17429fc1eacb87470c712ee99206314a9d856e99bfcbacd3e5e8dffddbaaee5e73b424a288469a08f376dccbd88485dc1e8574ee95f8be08f1b71ecd24ecde253d1c664eab258cdcc2e7ef3846060f8dab4aa85a423b90"}, @NFTA_DATA_VALUE={0x51, 0x1, "96098b485865884cd6dff86778b7649374befa103544679e2e63d36b0e528ffda609638843cab58cee3fb422ec9c9e271899caa934c94c83c788806d6882d73245fb8f75c598bbfd0709ab978e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x15, 0x1, "402c18b425e5b58bde5be96d842695447a"}, @NFTA_DATA_VERDICT={0x74, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x5f, 0x1, "0a8e2924b1e2aed94cb764e1dad2f54f6e2402b46e13162143bf8c94fc32b59d664ba5f7a9621079743dd94602e92d448f90e9dce88c228c9afa1f59cd06bf8939f21b29d265321ae1a0e2bea1751d760264ea2de6596d59e988b9"}]}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "858171b7ec61cc8fae6364bb478e93e282c600693ca81af61dd101bb47ed08b99d293a7eb9f578b62ebb69475d95d1293e3586f872248bd609d8edc9eaf2e242e91d3b2571c9f207a2c23faa932c94015892ef94a04bb8551a"}, @NFTA_DATA_VALUE={0x17, 0x1, "71ab733fe7f83fc1075231e44325f0945d9245"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x202, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xae8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xad4, 0x3, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "6eec021c37f44eee2476a31625198655093bff4e9b4f6399e18b3c3a543ba7941a0b0daed7d371314719151da9e57c0e0ef5cddaa945eccd72ec8a3e3e48ac04a3716a70271934d1e744ea254fe1a4eac36e0e2c8559e0a9d551c4b5850c57242e0190f2b77fea7458184b2bb5c3858d17490a657f22ee8b1ea9596911abb59a6df22c899ceea6b91753246c10add2696e2e2bf177d23eb2c17e57f055"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xdc, 0x1, "e9be2b45f947a0d98b2655a6d2da482ed4084a95b34e48a2bdb2b75c0bff8643393736ce4032c5d4259aa48bc584800ac2dadda3afec41157f6af79b2d8c6a2ca0e06b247a7b7612636b776846fa9df0e63c76352048c1b0f2aec733f6b5fe5eeb9a803c852673b14688e31fee39b096db2c2f403f5f98404b81f22e090596c02fb2b57b6fdb341ab8a6e21687c59d5b24295cff3be40bedd801fd709de8f080fa07ede3d12ddd4d4f5bc785ed20ee3c4ffbb596998ec99c298576605d6a9c069a6aae56fb08aceff403926179bb8274f98ce4481aa145e1"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xfe, 0x6, 0x1, 0x0, "98b58b58a68375a3c44aa7af58710e7604e205436d70f97cdba49b5078d4c93208ff75ee255c934eb2b445f61eb4c613ed45cb4b3a5278ff7a3b0f12b2f211dbb020e3d2d828d312afc0037d91d6a40391a39cc7fb01b16a35ebedc98d0faa8e2d96b054d62eae42c7385b7e8ead80fc175ee7d6b7cf6d84bd7b22472d2b79c5015c76dbc5fd0e32fa2e299d1453b6a7315c7326ab88cc7550f079359af971b0a22f3fc090607ef90c235caa0f2a2c48487683b866b337372af68c12c0fb7203a6c7fe89a3468e6a06e857b9bcb227c13fedd5a494707744de02f0fee88697e13b3bc0c8290d01c05731080f71030087c19d6145b29582133c53"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x818, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "4c682a3eea4631d26573c27f418b52e7109f9329e2c98718c57feccdf8de2c7bbbe7b4c2577e888adfcc65361b2a90be1eed6a50e7dceaceabe7baddd72c103798cd7e52417d48bb849e44e3654093e48216e1a3f83692e397d9d2a8a0c1710c10e8f34dd0d2e637c0b7ec57c56bb7ca306a837dd64f97a291d35ae3a035a8279537b74fa25cba4559d09977b731702e7fadc39d61c21ab2e24eed62625ea802c98d8ea4295c26b1dea8d9731be7c6fa50f32c014244d499c72da47cc6cb06c7a106b2ca6e1b27bff5d9a43ebd56f7e4092bc5665af4ddcb23bfe5bc1c16"}]}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "d10df8defb1d87079ae4eb7883e10b146cc03b71840989845d43564bc7916dc2f11f98b5930770d2a412775f9d045aee8da703fff1e837f4c4769b2a84fbc9724a80b25e5b6c32b654d3b011e7dc37ef5c4d8682a5e0237ecc29a72e93815eaa4441563058f26c30f7a8bbc55eb8f323c25352eeea24fb09487b2310b866af079842744f96cba216e0db96d2f4ec974dbc3e66036896a5d2d263a5d06d9e4b9d07859d3ac8afd1ec4db810"}, @NFTA_DATA_VALUE={0x51, 0x1, "b0afefa696e09451c4957472260312a24076fc97cadf8e071302fb12b6f9689efc4c98a4faba9366f29c20116653aed4450eebc1a60113a213258215d8f278308fdc905281a8a68a91bb6c8d98"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_DATA={0x36c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8f, 0x1, "fc95fcf2af5b300bf23cc9f4e39e9d6fbf85993abb4e96d28163586c218c8f28201621063810be3a0989b3482c27e3a46ea0fd546c38dd509a11567161c08350c23a13114d4e99a921e068bfd199d8e1bb7bb391e35ec430823415453fe74fc09643781264abc15b9a18bc0a3c382649877883cb42b88a0a3f67797f77f3a31538154cf8a7376acf506f79"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "7e06a4b956b6378eb2eb10f2c6358f37a779fae717a31288b067383a75ffa297437b199e2e02e13fb9c3e1bf7b01be37eab855df29330094eddbe74ff4818d664eefac11e8f071e4f4a7ee04eaa531744049597bec76a699c6e75b8e8b64b1b747c98ad228e6c5d15647d968d5f955d6b52a54e346a41429fd364958e22545f1212580a0712330cb4a5d8575a40b18060932d7340cfffd46e0a9"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xca, 0x1, "e705f28f87cbbc93e5e4ec04c1a0ab510840002a19e5f257d0d04225d27c3d79691c0ca9e7b8ee77f09141d5abbf95d3155ee3f1218c23a042d97902523c4790a248732ff10a73bb22ad074166e640d24356a73410027d3c579e196ac657d76aa6f18001d3929ac255d91cc7f13ac08c28f7abe54f0e26fd81e2293cdfecd3e2a1bb809fb26132b33d18600ed6754da3a8fc720b3fdb2c6eba80105b74545198a7406de0d23ea8a9c9c96312f43d5203a204487cfe16dad6e09a6323066d1bb10b8142421ec8"}, @NFTA_DATA_VALUE={0xaa, 0x1, "c6e0e0dba007d85867554a1eee39d4c0c3f05ff6bd6a8798f358f60764842895c200542220047ef16845861c738816508c2b44cecd7a208458633fe919c167e1d436292bd9f953402831ed9dfca5b585dca35b27059a245eee4967266c16102975931380f27c80b86b42520634facd7afbf5470e57e0a19c7c2bcb8b1ac1506ca667745ddd9af0ab9ac15ae335006c954a7879843ca390fe1f53cf526cc7782d0943755ad256"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x7, 0x1, "4f04e4"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1317}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x40, 0x7, 0x1, 0x0, "37de570e3f661d8ae166e0c19cdba39d9275b19da6f67b462d3097f1e328456c63de8e26864583f679e7eb02ca9bb804550b0ae8b2a4b31545c48ecf"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6d0169fb76a135d}}}, 0x3284}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000004580), r5) r6 = accept4$llc(r5, &(0x7f00000045c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000004600)=0x10, 0x80000) bind$llc(r6, &(0x7f0000004640)={0x1a, 0x30a, 0x7, 0x1, 0x8, 0x1, @link_local}, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000004680), &(0x7f00000046c0)=0x30) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000004700)={r3, @in={{0x2, 0x4e21, @local}}, 0x40, 0x0, 0x7, 0x1, 0x29, 0x20080000}, 0x9c) ioctl$SIOCNRDECOBS(r4, 0x89e2) sendto$isdn(r5, &(0x7f00000047c0)={0x52, 0x7fffffff, "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"}, 0x106, 0x8011, &(0x7f0000004900)={0x22, 0xa, 0x0, 0x9, 0x80}, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000004940)=0x60, 0x8) connect$qrtr(r0, &(0x7f0000004980)={0x2a, 0x4}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000049c0)={0x0, 0x0}, 0x8) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004a00)=r7, 0x4) ppoll(&(0x7f0000004a40)=[{r8, 0x2000}, {r6, 0x108}], 0x2, &(0x7f0000004a80), &(0x7f0000004ac0)={[0xc6d]}, 0x8) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004b00)={0xffffffffffffffff, r4, 0xb, 0x0, @void}, 0x10) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000004b40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1000, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$rfkill(0xffffffffffffffff, &(0x7f0000004bc0)={0x5, 0x3, 0x0, 0x1}, 0x8) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000004c00)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000004cc0)={'syztnl1\x00', &(0x7f0000004c40)={'sit0\x00', 0x0, 0x40, 0x20, 0x1, 0x0, {{0xb, 0x4, 0x3, 0x0, 0x2c, 0x64, 0x0, 0x6d, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0x12, "1321e3d7860843e06fdbf40353d20fff"}, @end]}}}}}) bind$packet(r5, &(0x7f0000004d00)={0x11, 0x1a, r10, 0x1, 0x7, 0x6, @broadcast}, 0x14) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004e80)={0x6, 0x17, &(0x7f0000004d40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x3e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @ldst={0x0, 0x1, 0x0, 0x9, 0x4, 0x2, 0xfffffffffffffffc}], &(0x7f0000004e00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004e40)={0x0, 0x9, 0x5, 0x90c6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004f40)={r11, r10, 0x25, 0x19, @void}, 0x10) 762.645482ms ago: executing program 4 (id=1747): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={r3, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="54200000f9fc846f7be7b955b9bc22ef2450fbdc9f4095686c8054e9edae87975ffb9325cebea8b91564feb9d8c9f587b3ec750a1e536872bef9ef9d4abe52a6112ab1805737958aee6cf1751719f0d9d0ba6afb3238701536e544bb82cb17168bb7917380c69e53c20fd8c45718030756890665f51b8e44140145cefadbf15bf519e2630c32df25d597"], 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x1}, 0x8) write(r0, &(0x7f0000000000)="260000002200470154daf151af565d78276fdd2482dcf5c3e8ff06dde9010172b7e5c72e6cb6", 0x26) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40002000, 0x0) pipe(&(0x7f0000000140)) 744.983078ms ago: executing program 1 (id=1748): unshare(0x6a040000) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001080)='cdg\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x80) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0xe}, 0x94) socket$alg(0x26, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0", 0x2f) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @empty}, @private1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x3, 0x4b6, 0x200, 0xc00, 0xa8, 0x400a9, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c001780"], 0x138}}, 0x0) shutdown(r2, 0x1) 642.947142ms ago: executing program 3 (id=1749): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000072e628c98282f1db6c92b5dc7805c5446a0579cdc03446a6202517dd4b9e38bb324559c99464e4c6766b905f476102e9dad0ba9055f2afe299fcdd9c7c0219dff920f6ea5f0c27256dcbfecd85f8e1823810f6f90278876f698a1ae926b36cc0bbac5412e25654eb2ad5fcede960e0a55cece5be032068906d7ad0e91a417a2b333f2e39b6c50094c08464b31743567c209bb7aea04da78e3400a78f4957309946d3404c6bd479daef8f91f3f228", @ANYRES16, @ANYBLOB="08042dbd7000ffdbdf250900000014000180060004004e23000008000b00736970"], 0x28}}, 0x4005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x4040040) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) 537.752509ms ago: executing program 4 (id=1750): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x1) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc04", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$netlink(0x10, 0x3, 0x8) 518.459692ms ago: executing program 0 (id=1751): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000070014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 401.11726ms ago: executing program 2 (id=1752): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000940)={0x0, 'netdevsim0\x00', {0x4}, 0x1}) 394.144918ms ago: executing program 3 (id=1753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x7, 0x0, 0x9}, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)={0xc0000002}) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESOCT=r3, @ANYRES64=r1, @ANYRESDEC], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff1085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x0, 0x23, 0x0, &(0x7f0000000140)=""/35, 0x3, 0x0, 0x57, 0x72, &(0x7f0000000340)="4eae0c2d50456a3ba9a98842232adbd9d338b4a97ffebcadf57cdc53c998322c30557db46cf655fbc174c61e251071ce626ad1cca354d9635a7ad555d290cf7f34352b17659587536ca7163926103069e5bf8bcbeb445a", &(0x7f0000000400)="4185ff22eed96fcf97b705fbf0c3fbb7de46911d28898644bd0910d378ec7034593fa53033c93dab7e771fe6772db2b7b59d4d1c3b81bbf9db803e9d0521737d3cef0a7113c58f4dfd8ae1daaa15e9ae1957f694e7c8b110ff211ca8ca84ec04002b449feefc108f17de3c8390251fd9cb01", 0x1, 0x0, 0x32}, 0x50) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa400004}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x99a296586bc168ea) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000001020102000000000000215e8b2ac26900000a0000078648eaac4978eb0a"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x2}, 0x6) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) write(0xffffffffffffffff, &(0x7f0000000000)="05000000", 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xff9f0007}, {0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20}, {0x0, 0x2}, {0x6, 0x9}]}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xffe9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) close(r0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000900)={0x7, {{0xa, 0x4e24, 0xadec, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}, {{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) 198.068281ms ago: executing program 0 (id=1754): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x1008, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 33.859237ms ago: executing program 0 (id=1755): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd27, 0x25dfdc02, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x41, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) listen(r1, 0xd1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$NL80211_CMD_SET_KEY(r1, 0x0, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="254148047bf89cc2a6256b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0xd4}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r3, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x246}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2db}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x63a}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 2 (id=1756): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000180), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x4}}, 0x1c}}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): 3][ T9360] ? __fget_files+0x3a0/0x420 [ 239.442123][ T9360] __x64_sys_sendmsg+0x19b/0x260 [ 239.442149][ T9360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.442183][ T9360] ? __pfx_ksys_write+0x10/0x10 [ 239.442205][ T9360] ? rcu_is_watching+0x15/0xb0 [ 239.442230][ T9360] ? do_syscall_64+0xbe/0x3b0 [ 239.442264][ T9360] do_syscall_64+0xfa/0x3b0 [ 239.442282][ T9360] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.442309][ T9360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.442328][ T9360] ? clear_bhb_loop+0x60/0xb0 [ 239.442359][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.442377][ T9360] RIP: 0033:0x7f4d0a18ebe9 [ 239.442396][ T9360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.442412][ T9360] RSP: 002b:00007f4d0af97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.442434][ T9360] RAX: ffffffffffffffda RBX: 00007f4d0a3c5fa0 RCX: 00007f4d0a18ebe9 [ 239.442448][ T9360] RDX: 0000000000040880 RSI: 0000200000000280 RDI: 0000000000000003 [ 239.442460][ T9360] RBP: 00007f4d0af97090 R08: 0000000000000000 R09: 0000000000000000 [ 239.442471][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.442482][ T9360] R13: 00007f4d0a3c6038 R14: 00007f4d0a3c5fa0 R15: 00007ffcab9784c8 [ 239.442516][ T9360] [ 239.811417][ T9362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1071'. [ 241.768206][ T9327] lo speed is unknown, defaulting to 1000 [ 241.775766][ T9371] syz_tun: entered allmulticast mode [ 241.782723][ T9371] syz_tun: left allmulticast mode [ 242.194826][ T9390] vxcan1 speed is unknown, defaulting to 1000 [ 242.207866][ T9396] __nla_validate_parse: 1 callbacks suppressed [ 242.207886][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 242.437569][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 242.526912][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 242.796567][ T9390] lo speed is unknown, defaulting to 1000 [ 243.152556][ T9414] netlink: 'syz.0.1084': attribute type 83 has an invalid length. [ 243.333653][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 243.680610][ T9438] Bluetooth: MGMT ver 1.23 [ 243.734343][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 245.042976][ T9464] syzkaller1: entered promiscuous mode [ 245.072634][ T9464] syzkaller1: entered allmulticast mode [ 245.161009][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 245.760358][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 245.783332][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 245.941068][ T9488] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 246.041738][ T9491] sctp: [Deprecated]: syz.4.1108 (pid 9491) Use of int in maxseg socket option. [ 246.041738][ T9491] Use struct sctp_assoc_value instead [ 246.365254][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 246.607928][ T9510] netlink: 'syz.3.1115': attribute type 6 has an invalid length. [ 246.742827][ T9510] netlink: 'syz.3.1115': attribute type 12 has an invalid length. [ 246.764806][ T9510] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1115'. [ 246.847541][ T9522] FAULT_INJECTION: forcing a failure. [ 246.847541][ T9522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.869604][ T9522] CPU: 0 UID: 0 PID: 9522 Comm: syz.4.1120 Not tainted syzkaller #0 PREEMPT(full) [ 246.869635][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.869646][ T9522] Call Trace: [ 246.869653][ T9522] [ 246.869661][ T9522] dump_stack_lvl+0x189/0x250 [ 246.869689][ T9522] ? __pfx____ratelimit+0x10/0x10 [ 246.869709][ T9522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.869731][ T9522] ? __pfx__printk+0x10/0x10 [ 246.869769][ T9522] should_fail_ex+0x414/0x560 [ 246.869800][ T9522] _copy_to_user+0x31/0xb0 [ 246.869825][ T9522] hidp_sock_ioctl+0x3e2/0x560 [ 246.869847][ T9522] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 246.869916][ T9522] ? do_vfs_ioctl+0xbe8/0x1430 [ 246.869964][ T9522] sock_do_ioctl+0xd9/0x300 [ 246.869994][ T9522] ? __pfx_sock_do_ioctl+0x10/0x10 [ 246.870017][ T9522] ? __lock_acquire+0xab9/0xd20 [ 246.870061][ T9522] sock_ioctl+0x576/0x790 [ 246.870088][ T9522] ? __pfx_sock_ioctl+0x10/0x10 [ 246.870113][ T9522] ? __fget_files+0x2a/0x420 [ 246.870129][ T9522] ? __fget_files+0x3a0/0x420 [ 246.870144][ T9522] ? __fget_files+0x2a/0x420 [ 246.870164][ T9522] ? bpf_lsm_file_ioctl+0x9/0x20 [ 246.870188][ T9522] ? __pfx_sock_ioctl+0x10/0x10 [ 246.870211][ T9522] __se_sys_ioctl+0xf9/0x170 [ 246.870236][ T9522] do_syscall_64+0xfa/0x3b0 [ 246.870256][ T9522] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.870275][ T9522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.870293][ T9522] ? clear_bhb_loop+0x60/0xb0 [ 246.870316][ T9522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.870334][ T9522] RIP: 0033:0x7fbd3058ebe9 [ 246.870352][ T9522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.870369][ T9522] RSP: 002b:00007fbd3137b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.870391][ T9522] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058ebe9 [ 246.870405][ T9522] RDX: 0000200000000c80 RSI: 00000000800448d2 RDI: 0000000000000004 [ 246.870417][ T9522] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 246.870429][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.870440][ T9522] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 246.870472][ T9522] [ 247.280574][ T9530] FAULT_INJECTION: forcing a failure. [ 247.280574][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 247.299260][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.3.1123 Not tainted syzkaller #0 PREEMPT(full) [ 247.299289][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.299300][ T9530] Call Trace: [ 247.299308][ T9530] [ 247.299316][ T9530] dump_stack_lvl+0x189/0x250 [ 247.299344][ T9530] ? __pfx____ratelimit+0x10/0x10 [ 247.299364][ T9530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.299385][ T9530] ? __pfx__printk+0x10/0x10 [ 247.299416][ T9530] ? __pfx___might_resched+0x10/0x10 [ 247.299431][ T9530] ? fs_reclaim_acquire+0x7d/0x100 [ 247.299461][ T9530] should_fail_ex+0x414/0x560 [ 247.299492][ T9530] should_failslab+0xa8/0x100 [ 247.299521][ T9530] __kmalloc_noprof+0xcb/0x4f0 [ 247.299542][ T9530] ? kfree+0x4d/0x440 [ 247.299562][ T9530] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 247.299586][ T9530] tomoyo_realpath_from_path+0xe3/0x5d0 [ 247.299607][ T9530] ? tomoyo_domain+0xd9/0x130 [ 247.299631][ T9530] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 247.299657][ T9530] tomoyo_path_number_perm+0x1e8/0x5a0 [ 247.299686][ T9530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.299730][ T9530] ? __lock_acquire+0xab9/0xd20 [ 247.299780][ T9530] ? __fget_files+0x2a/0x420 [ 247.299817][ T9530] ? __fget_files+0x2a/0x420 [ 247.299831][ T9530] ? __fget_files+0x3a0/0x420 [ 247.299847][ T9530] ? __fget_files+0x2a/0x420 [ 247.299868][ T9530] security_file_ioctl+0xcb/0x2d0 [ 247.299895][ T9530] __se_sys_ioctl+0x47/0x170 [ 247.299921][ T9530] do_syscall_64+0xfa/0x3b0 [ 247.299941][ T9530] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.299958][ T9530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.299975][ T9530] ? clear_bhb_loop+0x60/0xb0 [ 247.299997][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.300015][ T9530] RIP: 0033:0x7f30a378ebe9 [ 247.300033][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.300049][ T9530] RSP: 002b:00007f30a45ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.300071][ T9530] RAX: ffffffffffffffda RBX: 00007f30a39c5fa0 RCX: 00007f30a378ebe9 [ 247.300084][ T9530] RDX: 0000200000000040 RSI: 0000000000008b19 RDI: 0000000000000004 [ 247.300097][ T9530] RBP: 00007f30a45ad090 R08: 0000000000000000 R09: 0000000000000000 [ 247.300107][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.300117][ T9530] R13: 00007f30a39c6038 R14: 00007f30a39c5fa0 R15: 00007ffc955e77d8 [ 247.300151][ T9530] [ 247.300159][ T9530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.487561][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 247.623996][ T9539] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 247.881558][ T9546] bridge0: port 3(syz_tun) entered blocking state [ 247.888704][ T9546] bridge0: port 3(syz_tun) entered disabled state [ 247.897271][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 247.897276][ T9546] syz_tun: entered allmulticast mode [ 247.934044][ T9546] syz_tun: entered promiscuous mode [ 247.973144][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1127'. [ 248.022357][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1127'. [ 248.056164][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1127'. [ 248.071717][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1127'. [ 248.150533][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1128'. [ 248.210556][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 248.228706][ T9560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1128'. [ 248.271781][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1128'. [ 248.285214][ T9568] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 248.308388][ T9569] netlink: 'syz.3.1131': attribute type 13 has an invalid length. [ 248.349170][ T9569] netlink: 'syz.3.1131': attribute type 17 has an invalid length. [ 248.462895][ T9568] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 248.823701][ T9569] dummy0: left promiscuous mode [ 248.828656][ T9569] dummy0: left allmulticast mode [ 248.842129][ T9569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.867257][ T9585] tun0: tun_chr_ioctl cmd 2147767520 [ 249.786974][ T9615] team0: Device sit3 is of different type [ 249.994709][ T9618] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 250.045121][ T9627] FAULT_INJECTION: forcing a failure. [ 250.045121][ T9627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.064706][ T9627] CPU: 1 UID: 0 PID: 9627 Comm: syz.0.1152 Not tainted syzkaller #0 PREEMPT(full) [ 250.064733][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.064745][ T9627] Call Trace: [ 250.064752][ T9627] [ 250.064761][ T9627] dump_stack_lvl+0x189/0x250 [ 250.064789][ T9627] ? __pfx____ratelimit+0x10/0x10 [ 250.064809][ T9627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.064831][ T9627] ? __pfx__printk+0x10/0x10 [ 250.064857][ T9627] ? __might_fault+0xb0/0x130 [ 250.064895][ T9627] should_fail_ex+0x414/0x560 [ 250.064925][ T9627] _copy_from_iter+0x1de/0x1790 [ 250.064954][ T9627] ? rcu_is_watching+0x15/0xb0 [ 250.064985][ T9627] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 250.065012][ T9627] ? __pfx__copy_from_iter+0x10/0x10 [ 250.065034][ T9627] ? __build_skb_around+0x257/0x3e0 [ 250.065058][ T9627] ? netlink_sendmsg+0x642/0xb30 [ 250.065075][ T9627] ? skb_put+0x11b/0x210 [ 250.065099][ T9627] netlink_sendmsg+0x6b2/0xb30 [ 250.065130][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.065153][ T9627] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.065174][ T9627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.065194][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.065214][ T9627] __sock_sendmsg+0x219/0x270 [ 250.065243][ T9627] ____sys_sendmsg+0x505/0x830 [ 250.065272][ T9627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.065305][ T9627] ? import_iovec+0x74/0xa0 [ 250.065332][ T9627] ___sys_sendmsg+0x21f/0x2a0 [ 250.065355][ T9627] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.065417][ T9627] ? __fget_files+0x2a/0x420 [ 250.065433][ T9627] ? __fget_files+0x3a0/0x420 [ 250.065461][ T9627] __x64_sys_sendmsg+0x19b/0x260 [ 250.065485][ T9627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.065517][ T9627] ? __pfx_ksys_write+0x10/0x10 [ 250.065537][ T9627] ? rcu_is_watching+0x15/0xb0 [ 250.065561][ T9627] ? do_syscall_64+0xbe/0x3b0 [ 250.065585][ T9627] do_syscall_64+0xfa/0x3b0 [ 250.065604][ T9627] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.065622][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.065640][ T9627] ? clear_bhb_loop+0x60/0xb0 [ 250.065662][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.065680][ T9627] RIP: 0033:0x7fb3a8b8ebe9 [ 250.065698][ T9627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.065715][ T9627] RSP: 002b:00007fb3a6df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.065737][ T9627] RAX: ffffffffffffffda RBX: 00007fb3a8dc6090 RCX: 00007fb3a8b8ebe9 [ 250.065751][ T9627] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000005 [ 250.065770][ T9627] RBP: 00007fb3a6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.065781][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.065793][ T9627] R13: 00007fb3a8dc6128 R14: 00007fb3a8dc6090 R15: 00007fff071243f8 [ 250.065825][ T9627] [ 250.458517][ T9632] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 250.586804][ T9636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.643047][ T9634] vxcan1 speed is unknown, defaulting to 1000 [ 250.877258][ T9649] xfrm1: entered allmulticast mode [ 251.125626][ T9663] netlink: 'syz.2.1164': attribute type 10 has an invalid length. [ 251.202208][ T9661] netlink: 'syz.2.1164': attribute type 10 has an invalid length. [ 251.324147][ T9663] bond0: (slave dummy0): Releasing backup interface [ 251.397231][ T9663] dummy0: entered promiscuous mode [ 251.423318][ T9663] team0: Port device dummy0 added [ 251.477971][ T9661] dummy0: left promiscuous mode [ 251.550896][ T9661] team0: Port device dummy0 removed [ 251.604660][ T9661] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 251.668032][ T9634] lo speed is unknown, defaulting to 1000 [ 251.769347][ T9681] syzkaller1: entered promiscuous mode [ 251.792177][ T9681] syzkaller1: entered allmulticast mode [ 251.983821][ T9688] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 252.105249][ T9691] FAULT_INJECTION: forcing a failure. [ 252.105249][ T9691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.134662][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.4.1170 Not tainted syzkaller #0 PREEMPT(full) [ 252.134691][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.134702][ T9691] Call Trace: [ 252.134710][ T9691] [ 252.134717][ T9691] dump_stack_lvl+0x189/0x250 [ 252.134747][ T9691] ? __pfx____ratelimit+0x10/0x10 [ 252.134768][ T9691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.134789][ T9691] ? __pfx__printk+0x10/0x10 [ 252.134829][ T9691] should_fail_ex+0x414/0x560 [ 252.134860][ T9691] _copy_to_user+0x31/0xb0 [ 252.134885][ T9691] simple_read_from_buffer+0xe1/0x170 [ 252.134918][ T9691] proc_fail_nth_read+0x1b3/0x220 [ 252.134944][ T9691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.134970][ T9691] ? rw_verify_area+0x2a6/0x4d0 [ 252.134993][ T9691] ? __lock_acquire+0xab9/0xd20 [ 252.135018][ T9691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.135041][ T9691] vfs_read+0x1fd/0xa30 [ 252.135063][ T9691] ? fdget_pos+0x247/0x320 [ 252.135085][ T9691] ? __pfx___mutex_lock+0x10/0x10 [ 252.135107][ T9691] ? __pfx_vfs_read+0x10/0x10 [ 252.135131][ T9691] ? __fget_files+0x2a/0x420 [ 252.135163][ T9691] ? __fget_files+0x3a0/0x420 [ 252.135177][ T9691] ? __fget_files+0x2a/0x420 [ 252.135203][ T9691] ksys_read+0x145/0x250 [ 252.135231][ T9691] ? __pfx_ksys_read+0x10/0x10 [ 252.135250][ T9691] ? rcu_is_watching+0x15/0xb0 [ 252.135274][ T9691] ? do_syscall_64+0xbe/0x3b0 [ 252.135297][ T9691] do_syscall_64+0xfa/0x3b0 [ 252.135321][ T9691] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.135340][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.135365][ T9691] ? clear_bhb_loop+0x60/0xb0 [ 252.135388][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.135407][ T9691] RIP: 0033:0x7fbd3058d5fc [ 252.135425][ T9691] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.135442][ T9691] RSP: 002b:00007fbd3137b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.135463][ T9691] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058d5fc [ 252.135477][ T9691] RDX: 000000000000000f RSI: 00007fbd3137b0a0 RDI: 0000000000000005 [ 252.135488][ T9691] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 252.135500][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.135511][ T9691] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 252.135545][ T9691] [ 252.990804][ T9707] __nla_validate_parse: 9 callbacks suppressed [ 252.990824][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 253.270039][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 253.503927][ T9710] vxcan1 speed is unknown, defaulting to 1000 [ 254.543892][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 254.752912][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 254.870963][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 255.231538][ T9717] vxcan1 speed is unknown, defaulting to 1000 [ 255.242808][ T9710] lo speed is unknown, defaulting to 1000 [ 255.472427][ T9776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1195'. [ 255.509632][ T9776] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1195'. [ 255.897996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058991][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 256.283084][ T9814] netlink: 'syz.1.1199': attribute type 13 has an invalid length. [ 256.323149][ T9814] netlink: 'syz.1.1199': attribute type 17 has an invalid length. [ 256.445366][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 256.937203][ T9814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.986509][ T9717] lo speed is unknown, defaulting to 1000 [ 257.124742][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 258.157096][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 258.345331][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 258.485768][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 258.797990][ T9877] smc: net device bond0 applied user defined pnetid SYZ2 [ 258.807227][ T9880] smc: net device bond0 erased user defined pnetid SYZ2 [ 258.815512][ T9880] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 259.131383][ T9897] netlink: 'syz.4.1223': attribute type 2 has an invalid length. [ 259.491216][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 259.510012][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 259.519017][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'. [ 259.603310][ T9904] netlink: 'syz.4.1226': attribute type 14 has an invalid length. [ 259.737807][ T2991] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.759886][ T2991] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.771973][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 259.793843][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'. [ 259.807349][ T2991] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.846084][ T2991] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.863525][ T9904] netlink: 'syz.4.1226': attribute type 14 has an invalid length. [ 260.103220][ T9922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1233'. [ 260.492933][ T9942] FAULT_INJECTION: forcing a failure. [ 260.492933][ T9942] name failslab, interval 1, probability 0, space 0, times 0 [ 260.541068][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.0.1239 Not tainted syzkaller #0 PREEMPT(full) [ 260.541105][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.541118][ T9942] Call Trace: [ 260.541126][ T9942] [ 260.541135][ T9942] dump_stack_lvl+0x189/0x250 [ 260.541165][ T9942] ? __pfx____ratelimit+0x10/0x10 [ 260.541184][ T9942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.541204][ T9942] ? __pfx__printk+0x10/0x10 [ 260.541238][ T9942] ? __pfx___might_resched+0x10/0x10 [ 260.541262][ T9942] should_fail_ex+0x414/0x560 [ 260.541292][ T9942] should_failslab+0xa8/0x100 [ 260.541322][ T9942] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 260.541348][ T9942] ? netlink_sendmsg+0x805/0xb30 [ 260.541364][ T9942] ? __alloc_skb+0x112/0x2d0 [ 260.541381][ T9942] ? ____sys_sendmsg+0x505/0x830 [ 260.541406][ T9942] __alloc_skb+0x112/0x2d0 [ 260.541429][ T9942] tipc_nl_compat_doit+0x15d/0x5f0 [ 260.541464][ T9942] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 260.541500][ T9942] ? apparmor_capable+0x137/0x1b0 [ 260.541527][ T9942] ? bpf_lsm_capable+0x9/0x20 [ 260.541552][ T9942] ? security_capable+0x7e/0x2e0 [ 260.541589][ T9942] tipc_nl_compat_recv+0x83c/0xbe0 [ 260.541620][ T9942] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 260.541644][ T9942] ? __mutex_trylock_common+0x153/0x260 [ 260.541668][ T9942] ? __pfx___mutex_trylock_common+0x10/0x10 [ 260.541686][ T9942] ? __local_bh_enable_ip+0x12d/0x1c0 [ 260.541702][ T9942] ? __pfx___tipc_nl_bearer_disable+0x10/0x10 [ 260.541722][ T9942] ? __pfx_tipc_nl_compat_bearer_disable+0x10/0x10 [ 260.541758][ T9942] ? trace_contention_end+0x39/0x120 [ 260.541786][ T9942] genl_family_rcv_msg_doit+0x212/0x300 [ 260.541812][ T9942] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 260.541855][ T9942] genl_rcv_msg+0x60e/0x790 [ 260.541880][ T9942] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.541897][ T9942] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 260.541919][ T9942] ? __asan_memcpy+0x40/0x70 [ 260.541934][ T9942] ? __pfx_ref_tracker_free+0x10/0x10 [ 260.541962][ T9942] netlink_rcv_skb+0x205/0x470 [ 260.541975][ T9942] ? __lock_acquire+0xab9/0xd20 [ 260.541995][ T9942] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.542015][ T9942] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.542047][ T9942] ? down_read+0x1ad/0x2e0 [ 260.542067][ T9942] genl_rcv+0x28/0x40 [ 260.542127][ T9942] netlink_unicast+0x82f/0x9e0 [ 260.542157][ T9942] ? __pfx_netlink_unicast+0x10/0x10 [ 260.542180][ T9942] ? netlink_sendmsg+0x642/0xb30 [ 260.542193][ T9942] ? skb_put+0x11b/0x210 [ 260.542211][ T9942] netlink_sendmsg+0x805/0xb30 [ 260.542236][ T9942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.542254][ T9942] ? aa_sock_msg_perm+0xf1/0x1d0 [ 260.542269][ T9942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.542285][ T9942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.542300][ T9942] __sock_sendmsg+0x219/0x270 [ 260.542323][ T9942] ____sys_sendmsg+0x505/0x830 [ 260.542346][ T9942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.542372][ T9942] ? import_iovec+0x74/0xa0 [ 260.542392][ T9942] ___sys_sendmsg+0x21f/0x2a0 [ 260.542411][ T9942] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.542463][ T9942] ? __fget_files+0x2a/0x420 [ 260.542475][ T9942] ? __fget_files+0x3a0/0x420 [ 260.542498][ T9942] __x64_sys_sendmsg+0x19b/0x260 [ 260.542518][ T9942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.542544][ T9942] ? __pfx_ksys_write+0x10/0x10 [ 260.542561][ T9942] ? rcu_is_watching+0x15/0xb0 [ 260.542581][ T9942] ? do_syscall_64+0xbe/0x3b0 [ 260.542600][ T9942] do_syscall_64+0xfa/0x3b0 [ 260.542614][ T9942] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.542628][ T9942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.542642][ T9942] ? clear_bhb_loop+0x60/0xb0 [ 260.542660][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.542674][ T9942] RIP: 0033:0x7fb3a8b8ebe9 [ 260.542688][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.542701][ T9942] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.542718][ T9942] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 260.542729][ T9942] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 260.542738][ T9942] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 260.542747][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.542756][ T9942] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 260.542782][ T9942] [ 261.013416][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'. [ 261.512579][ T9965] netlink: 'syz.0.1246': attribute type 13 has an invalid length. [ 261.548645][ T9959] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 261.556299][ T9965] netlink: 'syz.0.1246': attribute type 17 has an invalid length. [ 262.026305][ T9983] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 262.041907][ T9965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.128894][T10017] syzkaller0: entered promiscuous mode [ 263.142236][T10017] syzkaller0: entered allmulticast mode [ 263.315775][T10029] FAULT_INJECTION: forcing a failure. [ 263.315775][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.330026][T10029] CPU: 0 UID: 0 PID: 10029 Comm: syz.4.1268 Not tainted syzkaller #0 PREEMPT(full) [ 263.330052][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.330064][T10029] Call Trace: [ 263.330072][T10029] [ 263.330080][T10029] dump_stack_lvl+0x189/0x250 [ 263.330108][T10029] ? __pfx____ratelimit+0x10/0x10 [ 263.330128][T10029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.330149][T10029] ? __pfx__printk+0x10/0x10 [ 263.330175][T10029] ? __might_fault+0xb0/0x130 [ 263.330213][T10029] should_fail_ex+0x414/0x560 [ 263.330242][T10029] _copy_from_user+0x2d/0xb0 [ 263.330265][T10029] __sys_bpf+0x1ed/0x870 [ 263.330293][T10029] ? __pfx___sys_bpf+0x10/0x10 [ 263.330330][T10029] ? ksys_write+0x22a/0x250 [ 263.330358][T10029] ? __pfx_ksys_write+0x10/0x10 [ 263.330377][T10029] ? rcu_is_watching+0x15/0xb0 [ 263.330404][T10029] __x64_sys_bpf+0x7c/0x90 [ 263.330427][T10029] do_syscall_64+0xfa/0x3b0 [ 263.330446][T10029] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.330463][T10029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.330482][T10029] ? clear_bhb_loop+0x60/0xb0 [ 263.330504][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.330522][T10029] RIP: 0033:0x7fbd3058ebe9 [ 263.330538][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.330553][T10029] RSP: 002b:00007fbd3137b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.330573][T10029] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058ebe9 [ 263.330587][T10029] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 263.330599][T10029] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 263.330610][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.330621][T10029] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 263.330652][T10029] [ 263.538820][T10031] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 265.051686][T10031] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 265.062755][T10031] team0: Port device netdevsim0 added [ 265.087965][T10035] openvswitch: netlink: IPv4 tunnel dst address is zero [ 265.389753][T10042] vxcan1 speed is unknown, defaulting to 1000 [ 265.750776][T10042] lo speed is unknown, defaulting to 1000 [ 266.040183][T10076] bond0: entered promiscuous mode [ 266.065522][T10076] bond_slave_0: entered promiscuous mode [ 266.076368][T10081] netlink: 'syz.0.1280': attribute type 3 has an invalid length. [ 266.095131][T10081] __nla_validate_parse: 2 callbacks suppressed [ 266.095151][T10081] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1280'. [ 266.114001][T10076] bond_slave_1: entered promiscuous mode [ 266.136153][T10076] batadv0: entered promiscuous mode [ 266.148127][T10076] debugfs: 'hsr1' already exists in 'hsr' [ 266.154665][T10076] Cannot create hsr debugfs directory [ 266.161437][T10076] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 266.307317][T10087] FAULT_INJECTION: forcing a failure. [ 266.307317][T10087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.326669][T10087] CPU: 1 UID: 0 PID: 10087 Comm: syz.4.1282 Not tainted syzkaller #0 PREEMPT(full) [ 266.326698][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.326709][T10087] Call Trace: [ 266.326717][T10087] [ 266.326725][T10087] dump_stack_lvl+0x189/0x250 [ 266.326754][T10087] ? __pfx____ratelimit+0x10/0x10 [ 266.326775][T10087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.326798][T10087] ? __pfx__printk+0x10/0x10 [ 266.326841][T10087] should_fail_ex+0x414/0x560 [ 266.326873][T10087] _copy_to_user+0x31/0xb0 [ 266.326899][T10087] simple_read_from_buffer+0xe1/0x170 [ 266.326933][T10087] proc_fail_nth_read+0x1b3/0x220 [ 266.326960][T10087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.326986][T10087] ? rw_verify_area+0x2a6/0x4d0 [ 266.327009][T10087] ? __lock_acquire+0xab9/0xd20 [ 266.327049][T10087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.327073][T10087] vfs_read+0x1fd/0xa30 [ 266.327097][T10087] ? fdget_pos+0x247/0x320 [ 266.327121][T10087] ? __pfx___mutex_lock+0x10/0x10 [ 266.327143][T10087] ? __pfx_vfs_read+0x10/0x10 [ 266.327171][T10087] ? __fget_files+0x2a/0x420 [ 266.327193][T10087] ? __fget_files+0x3a0/0x420 [ 266.327209][T10087] ? __fget_files+0x2a/0x420 [ 266.327237][T10087] ksys_read+0x145/0x250 [ 266.327266][T10087] ? __pfx_ksys_read+0x10/0x10 [ 266.327287][T10087] ? rcu_is_watching+0x15/0xb0 [ 266.327313][T10087] ? do_syscall_64+0xbe/0x3b0 [ 266.327339][T10087] do_syscall_64+0xfa/0x3b0 [ 266.327362][T10087] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.327382][T10087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.327400][T10087] ? clear_bhb_loop+0x60/0xb0 [ 266.327425][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.327443][T10087] RIP: 0033:0x7fbd3058d5fc [ 266.327462][T10087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.327478][T10087] RSP: 002b:00007fbd3137b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.327500][T10087] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058d5fc [ 266.327514][T10087] RDX: 000000000000000f RSI: 00007fbd3137b0a0 RDI: 0000000000000007 [ 266.327525][T10087] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 266.327537][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.327548][T10087] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 266.327583][T10087] [ 267.202233][T10103] bridge_slave_0: left allmulticast mode [ 267.226156][T10103] bridge_slave_0: left promiscuous mode [ 267.240896][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 267.252772][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.295079][T10108] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 267.358270][T10103] bridge_slave_1: left allmulticast mode [ 267.372165][T10103] bridge_slave_1: left promiscuous mode [ 267.395558][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.451713][T10103] bond0: (slave bond_slave_0): Releasing backup interface [ 267.471989][T10103] bond_slave_0: left promiscuous mode [ 267.505466][T10103] bond0: (slave bond_slave_1): Releasing backup interface [ 267.528808][T10103] bond_slave_1: left promiscuous mode [ 267.585091][T10103] team0: Port device team_slave_0 removed [ 267.602282][T10103] team0: Port device team_slave_1 removed [ 267.612769][T10103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.628399][T10103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.645676][T10103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.653555][T10103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.678970][T10103] bond1: (slave gretap1): Releasing active interface [ 267.694025][T10103] bond2: (slave ip6gretap1): Releasing backup interface [ 267.726627][ T5958] vxcan1 speed is unknown, defaulting to 1000 [ 267.760060][T10108] bond0: (slave wlan1): Opening slave failed [ 267.980951][T10130] FAULT_INJECTION: forcing a failure. [ 267.980951][T10130] name failslab, interval 1, probability 0, space 0, times 0 [ 268.024638][T10130] CPU: 1 UID: 0 PID: 10130 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) [ 268.024665][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.024677][T10130] Call Trace: [ 268.024685][T10130] [ 268.024695][T10130] dump_stack_lvl+0x189/0x250 [ 268.024821][T10130] ? __pfx____ratelimit+0x10/0x10 [ 268.024842][T10130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.024864][T10130] ? __pfx__printk+0x10/0x10 [ 268.024896][T10130] ? __pfx___might_resched+0x10/0x10 [ 268.024920][T10130] should_fail_ex+0x414/0x560 [ 268.024957][T10130] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 268.024982][T10130] should_failslab+0xa8/0x100 [ 268.025008][T10130] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 268.025032][T10130] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 268.025057][T10130] ? alloc_inode+0x67/0x1b0 [ 268.025080][T10130] ? __pfx_simple_start_creating+0x10/0x10 [ 268.025101][T10130] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 268.025126][T10130] alloc_inode+0x67/0x1b0 [ 268.025154][T10130] new_inode+0x22/0x170 [ 268.025185][T10130] __debugfs_create_file+0x14d/0x4f0 [ 268.025219][T10130] debugfs_create_file_full+0x3f/0x60 [ 268.025251][T10130] ref_tracker_dir_debugfs+0x14e/0x270 [ 268.025280][T10130] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 268.025336][T10130] ? rcu_is_watching+0x15/0xb0 [ 268.025354][T10130] ? alloc_netdev_mqs+0xa3/0x11b0 [ 268.025381][T10130] ? __raw_spin_lock_init+0x45/0x100 [ 268.025403][T10130] alloc_netdev_mqs+0x26f/0x11b0 [ 268.025424][T10130] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 268.025460][T10130] __ip_tunnel_create+0x349/0x560 [ 268.025493][T10130] ? __pfx___ip_tunnel_create+0x10/0x10 [ 268.025519][T10130] ? bpf_lsm_capable+0x9/0x20 [ 268.025553][T10130] ip_tunnel_ctl+0x4dd/0xc30 [ 268.025587][T10130] vif_add+0x335/0x1420 [ 268.025620][T10130] ? __lock_acquire+0xab9/0xd20 [ 268.025647][T10130] ? __pfx_vif_add+0x10/0x10 [ 268.025709][T10130] ip_mroute_setsockopt+0xe12/0xf60 [ 268.025750][T10130] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 268.025784][T10130] ? vfs_write+0x956/0xb30 [ 268.025817][T10130] do_ip_setsockopt+0xf11/0x2d00 [ 268.025848][T10130] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 268.025877][T10130] ? aa_sk_perm+0x81e/0x950 [ 268.025909][T10130] ? __pfx_aa_sk_perm+0x10/0x10 [ 268.025938][T10130] ? __fget_files+0x2a/0x420 [ 268.025952][T10130] ? aa_sock_opt_perm+0xff/0x1b0 [ 268.025973][T10130] ip_setsockopt+0x66/0x110 [ 268.025995][T10130] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 268.026025][T10130] do_sock_setsockopt+0x17c/0x1b0 [ 268.026052][T10130] __x64_sys_setsockopt+0x13f/0x1b0 [ 268.026087][T10130] do_syscall_64+0xfa/0x3b0 [ 268.026106][T10130] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.026125][T10130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.026144][T10130] ? clear_bhb_loop+0x60/0xb0 [ 268.026167][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.026185][T10130] RIP: 0033:0x7fbd3058ebe9 [ 268.026204][T10130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.026220][T10130] RSP: 002b:00007fbd3137b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 268.026243][T10130] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058ebe9 [ 268.026257][T10130] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 268.026269][T10130] RBP: 00007fbd3137b090 R08: 0000000000000010 R09: 0000000000000000 [ 268.026279][T10130] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.026290][T10130] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 268.026324][T10130] [ 268.026361][T10130] debugfs: out of free dentries, can not create file 'netdev@ffff888031a48610' [ 268.260161][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 268.274722][T10130] dvmrp8: entered allmulticast mode [ 268.406915][T10125] dvmrp8: left allmulticast mode [ 268.955319][T10154] netlink: zone id is out of range [ 268.961015][T10154] netlink: zone id is out of range [ 268.966192][T10154] netlink: zone id is out of range [ 268.994059][T10154] netlink: zone id is out of range [ 269.029169][T10154] netlink: zone id is out of range [ 269.055049][T10154] netlink: zone id is out of range [ 269.076892][T10154] netlink: zone id is out of range [ 269.102729][T10154] netlink: zone id is out of range [ 269.123214][T10157] netlink: 'syz.2.1300': attribute type 13 has an invalid length. [ 269.129776][T10154] netlink: zone id is out of range [ 269.144834][T10157] netlink: 'syz.2.1300': attribute type 17 has an invalid length. [ 269.154158][T10154] netlink: zone id is out of range [ 269.714973][T10181] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1305'. [ 269.756135][T10181] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1305'. [ 269.777768][T10181] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1305'. [ 270.254930][T10196] vxcan1 speed is unknown, defaulting to 1000 [ 270.602709][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1312'. [ 270.616699][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1312'. [ 270.633208][T10211] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1310'. [ 271.125425][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 271.153561][T10201] vxcan1 speed is unknown, defaulting to 1000 [ 271.159564][T10196] lo speed is unknown, defaulting to 1000 [ 271.424107][T10224] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 271.535746][T10227] netlink: 'syz.0.1317': attribute type 13 has an invalid length. [ 271.569630][T10227] netlink: 'syz.0.1317': attribute type 17 has an invalid length. [ 271.641976][T10224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.414672][T10201] lo speed is unknown, defaulting to 1000 [ 272.543890][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 272.707822][T10205] siw: device registration error -23 [ 272.758383][T10246] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 273.057863][T10249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 273.087385][T10249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1324'. [ 273.197193][T10249] geneve2: entered promiscuous mode [ 273.400426][T10261] FAULT_INJECTION: forcing a failure. [ 273.400426][T10261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.415022][T10261] CPU: 0 UID: 0 PID: 10261 Comm: syz.0.1327 Not tainted syzkaller #0 PREEMPT(full) [ 273.415050][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.415061][T10261] Call Trace: [ 273.415070][T10261] [ 273.415079][T10261] dump_stack_lvl+0x189/0x250 [ 273.415108][T10261] ? __pfx____ratelimit+0x10/0x10 [ 273.415129][T10261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.415151][T10261] ? __pfx__printk+0x10/0x10 [ 273.415195][T10261] should_fail_ex+0x414/0x560 [ 273.415227][T10261] _copy_from_user+0x2d/0xb0 [ 273.415251][T10261] bpf_test_init+0xf8/0x170 [ 273.415275][T10261] bpf_prog_test_run_skb+0x1e9/0x1560 [ 273.415293][T10261] ? __fget_files+0x2a/0x420 [ 273.415314][T10261] ? __fget_files+0x2a/0x420 [ 273.415348][T10261] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 273.415368][T10261] bpf_prog_test_run+0x2c7/0x340 [ 273.415399][T10261] __sys_bpf+0x581/0x870 [ 273.415425][T10261] ? __pfx___sys_bpf+0x10/0x10 [ 273.415466][T10261] ? ksys_write+0x22a/0x250 [ 273.415495][T10261] ? __pfx_ksys_write+0x10/0x10 [ 273.415516][T10261] ? rcu_is_watching+0x15/0xb0 [ 273.415544][T10261] __x64_sys_bpf+0x7c/0x90 [ 273.415568][T10261] do_syscall_64+0xfa/0x3b0 [ 273.415587][T10261] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.415606][T10261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.415625][T10261] ? clear_bhb_loop+0x60/0xb0 [ 273.415649][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.415675][T10261] RIP: 0033:0x7fb3a8b8ebe9 [ 273.415693][T10261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.415710][T10261] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.415734][T10261] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 273.415747][T10261] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 273.415760][T10261] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 273.415777][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.415789][T10261] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 273.415823][T10261] [ 273.916037][T10269] netlink: 'syz.0.1329': attribute type 13 has an invalid length. [ 273.953332][T10269] netlink: 'syz.0.1329': attribute type 17 has an invalid length. [ 274.011845][T10269] net_ratelimit: 21 callbacks suppressed [ 274.011859][T10269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.738243][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 275.101646][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 275.118880][T10297] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1340'. [ 275.240492][T10297] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 275.264819][T10297] gretap3: entered promiscuous mode [ 275.293354][T10297] gretap3: entered allmulticast mode [ 275.453404][T10314] FAULT_INJECTION: forcing a failure. [ 275.453404][T10314] name failslab, interval 1, probability 0, space 0, times 0 [ 275.491796][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.0.1346 Not tainted syzkaller #0 PREEMPT(full) [ 275.491826][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.491837][T10314] Call Trace: [ 275.491844][T10314] [ 275.491852][T10314] dump_stack_lvl+0x189/0x250 [ 275.491880][T10314] ? __pfx____ratelimit+0x10/0x10 [ 275.491899][T10314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.491919][T10314] ? __pfx__printk+0x10/0x10 [ 275.491945][T10314] ? __lock_acquire+0xab9/0xd20 [ 275.491986][T10314] should_fail_ex+0x414/0x560 [ 275.492019][T10314] should_failslab+0xa8/0x100 [ 275.492048][T10314] __kmalloc_cache_noprof+0x70/0x3d0 [ 275.492073][T10314] ? __tipc_nl_bearer_enable+0xab3/0x13f0 [ 275.492101][T10314] __tipc_nl_bearer_enable+0xab3/0x13f0 [ 275.492135][T10314] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 275.492153][T10314] ? __mutex_lock+0x335/0x1350 [ 275.492190][T10314] ? tipc_nl_bearer_enable+0x17/0x40 [ 275.492215][T10314] ? __pfx___mutex_lock+0x10/0x10 [ 275.492244][T10314] ? __nla_parse+0x40/0x60 [ 275.492276][T10314] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 275.492301][T10314] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 275.492332][T10314] tipc_nl_bearer_enable+0x22/0x40 [ 275.492354][T10314] genl_family_rcv_msg_doit+0x212/0x300 [ 275.492385][T10314] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.492439][T10314] genl_rcv_msg+0x60e/0x790 [ 275.492473][T10314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.492497][T10314] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 275.492520][T10314] ? __asan_memcpy+0x40/0x70 [ 275.492541][T10314] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.492575][T10314] netlink_rcv_skb+0x205/0x470 [ 275.492590][T10314] ? __lock_acquire+0xab9/0xd20 [ 275.492615][T10314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.492639][T10314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.492693][T10314] ? down_read+0x1ad/0x2e0 [ 275.492719][T10314] genl_rcv+0x28/0x40 [ 275.492741][T10314] netlink_unicast+0x82f/0x9e0 [ 275.492781][T10314] ? __pfx_netlink_unicast+0x10/0x10 [ 275.492810][T10314] ? netlink_sendmsg+0x642/0xb30 [ 275.492827][T10314] ? skb_put+0x11b/0x210 [ 275.492852][T10314] netlink_sendmsg+0x805/0xb30 [ 275.492882][T10314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.492905][T10314] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.492926][T10314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.492947][T10314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.492967][T10314] __sock_sendmsg+0x219/0x270 [ 275.493008][T10314] ____sys_sendmsg+0x505/0x830 [ 275.493039][T10314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.493074][T10314] ? import_iovec+0x74/0xa0 [ 275.493103][T10314] ___sys_sendmsg+0x21f/0x2a0 [ 275.493129][T10314] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.493199][T10314] ? __fget_files+0x2a/0x420 [ 275.493216][T10314] ? __fget_files+0x3a0/0x420 [ 275.493245][T10314] __x64_sys_sendmsg+0x19b/0x260 [ 275.493271][T10314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.493307][T10314] ? __pfx_ksys_write+0x10/0x10 [ 275.493329][T10314] ? rcu_is_watching+0x15/0xb0 [ 275.493356][T10314] ? do_syscall_64+0xbe/0x3b0 [ 275.493382][T10314] do_syscall_64+0xfa/0x3b0 [ 275.493400][T10314] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.493419][T10314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.493438][T10314] ? clear_bhb_loop+0x60/0xb0 [ 275.493463][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.493481][T10314] RIP: 0033:0x7fb3a8b8ebe9 [ 275.493501][T10314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.493517][T10314] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.493540][T10314] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 275.493554][T10314] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 275.493566][T10314] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 275.493577][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.493588][T10314] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 275.493623][T10314] [ 276.247908][T10329] syzkaller0: entered promiscuous mode [ 276.253879][T10329] syzkaller0: entered allmulticast mode [ 276.287653][T10333] team_slave_0: entered promiscuous mode [ 276.293443][T10333] team_slave_1: entered promiscuous mode [ 276.305007][T10333] vlan4: entered promiscuous mode [ 276.310269][T10333] team0: entered promiscuous mode [ 277.222316][T10375] FAULT_INJECTION: forcing a failure. [ 277.222316][T10375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.244292][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.2.1366 Not tainted syzkaller #0 PREEMPT(full) [ 277.244322][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.244333][T10375] Call Trace: [ 277.244342][T10375] [ 277.244350][T10375] dump_stack_lvl+0x189/0x250 [ 277.244379][T10375] ? __pfx____ratelimit+0x10/0x10 [ 277.244399][T10375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.244422][T10375] ? __pfx__printk+0x10/0x10 [ 277.244455][T10375] ? __might_fault+0xb0/0x130 [ 277.244490][T10375] should_fail_ex+0x414/0x560 [ 277.244521][T10375] _copy_from_iter+0x1de/0x1790 [ 277.244558][T10375] ? rcu_is_watching+0x15/0xb0 [ 277.244579][T10375] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 277.244607][T10375] ? __pfx__copy_from_iter+0x10/0x10 [ 277.244628][T10375] ? __build_skb_around+0x257/0x3e0 [ 277.244649][T10375] ? netlink_sendmsg+0x642/0xb30 [ 277.244663][T10375] ? skb_put+0x11b/0x210 [ 277.244683][T10375] netlink_sendmsg+0x6b2/0xb30 [ 277.244708][T10375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.244728][T10375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.244748][T10375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.244768][T10375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.244789][T10375] __sock_sendmsg+0x219/0x270 [ 277.244820][T10375] ____sys_sendmsg+0x505/0x830 [ 277.244849][T10375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.244891][T10375] ? import_iovec+0x74/0xa0 [ 277.244918][T10375] ___sys_sendmsg+0x21f/0x2a0 [ 277.244944][T10375] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.245010][T10375] ? __fget_files+0x2a/0x420 [ 277.245027][T10375] ? __fget_files+0x3a0/0x420 [ 277.245057][T10375] __x64_sys_sendmsg+0x19b/0x260 [ 277.245081][T10375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.245114][T10375] ? __pfx_ksys_write+0x10/0x10 [ 277.245136][T10375] ? rcu_is_watching+0x15/0xb0 [ 277.245161][T10375] ? do_syscall_64+0xbe/0x3b0 [ 277.245187][T10375] do_syscall_64+0xfa/0x3b0 [ 277.245205][T10375] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.245223][T10375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.245242][T10375] ? clear_bhb_loop+0x60/0xb0 [ 277.245266][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.245284][T10375] RIP: 0033:0x7f4d0a18ebe9 [ 277.245301][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.245317][T10375] RSP: 002b:00007f4d0af97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.245340][T10375] RAX: ffffffffffffffda RBX: 00007f4d0a3c5fa0 RCX: 00007f4d0a18ebe9 [ 277.245353][T10375] RDX: 000000000000c094 RSI: 0000200000000040 RDI: 0000000000000003 [ 277.245366][T10375] RBP: 00007f4d0af97090 R08: 0000000000000000 R09: 0000000000000000 [ 277.245377][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.245389][T10375] R13: 00007f4d0a3c6038 R14: 00007f4d0a3c5fa0 R15: 00007ffcab9784c8 [ 277.245422][T10375] [ 277.961093][T10388] FAULT_INJECTION: forcing a failure. [ 277.961093][T10388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.081817][T10388] CPU: 0 UID: 0 PID: 10388 Comm: syz.4.1371 Not tainted syzkaller #0 PREEMPT(full) [ 278.081845][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.081856][T10388] Call Trace: [ 278.081866][T10388] [ 278.081875][T10388] dump_stack_lvl+0x189/0x250 [ 278.081925][T10388] ? __pfx____ratelimit+0x10/0x10 [ 278.081944][T10388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.081967][T10388] ? __pfx__printk+0x10/0x10 [ 278.081993][T10388] ? __might_fault+0xb0/0x130 [ 278.082033][T10388] should_fail_ex+0x414/0x560 [ 278.082065][T10388] _copy_from_user+0x2d/0xb0 [ 278.082088][T10388] kstrtouint_from_user+0xc4/0x170 [ 278.082121][T10388] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 278.082171][T10388] proc_fail_nth_write+0x88/0x200 [ 278.082193][T10388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 278.082222][T10388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 278.082245][T10388] vfs_write+0x27e/0xb30 [ 278.082281][T10388] ? __pfx_vfs_write+0x10/0x10 [ 278.082308][T10388] ? __fget_files+0x2a/0x420 [ 278.082331][T10388] ? __fget_files+0x3a0/0x420 [ 278.082346][T10388] ? __fget_files+0x2a/0x420 [ 278.082373][T10388] ksys_write+0x145/0x250 [ 278.082401][T10388] ? __pfx_ksys_write+0x10/0x10 [ 278.082422][T10388] ? rcu_is_watching+0x15/0xb0 [ 278.082447][T10388] ? do_syscall_64+0xbe/0x3b0 [ 278.082473][T10388] do_syscall_64+0xfa/0x3b0 [ 278.082492][T10388] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.082511][T10388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.082529][T10388] ? clear_bhb_loop+0x60/0xb0 [ 278.082552][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.082571][T10388] RIP: 0033:0x7fbd3058d69f [ 278.082589][T10388] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 278.082605][T10388] RSP: 002b:00007fbd3137b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 278.082626][T10388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd3058d69f [ 278.082638][T10388] RDX: 0000000000000001 RSI: 00007fbd3137b0a0 RDI: 0000000000000004 [ 278.082649][T10388] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 278.082660][T10388] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 278.082672][T10388] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 278.082706][T10388] [ 278.781964][T10408] tipc: Enabled bearer , priority 0 [ 278.796002][T10408] syzkaller0: entered promiscuous mode [ 278.823343][T10408] syzkaller0: entered allmulticast mode [ 278.939968][T10408] tipc: Resetting bearer [ 278.964566][T10407] tipc: Resetting bearer [ 279.066159][T10407] tipc: Disabling bearer [ 279.115997][T10421] FAULT_INJECTION: forcing a failure. [ 279.115997][T10421] name failslab, interval 1, probability 0, space 0, times 0 [ 279.142353][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'. [ 279.151958][T10426] openvswitch: netlink: Flow key attr not present in new flow. [ 279.170263][T10421] CPU: 0 UID: 0 PID: 10421 Comm: syz.2.1384 Not tainted syzkaller #0 PREEMPT(full) [ 279.170292][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.170304][T10421] Call Trace: [ 279.170312][T10421] [ 279.170321][T10421] dump_stack_lvl+0x189/0x250 [ 279.170349][T10421] ? __pfx____ratelimit+0x10/0x10 [ 279.170369][T10421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.170393][T10421] ? __pfx__printk+0x10/0x10 [ 279.170428][T10421] ? __pfx___might_resched+0x10/0x10 [ 279.170446][T10421] ? fs_reclaim_acquire+0x7d/0x100 [ 279.170481][T10421] should_fail_ex+0x414/0x560 [ 279.170514][T10421] should_failslab+0xa8/0x100 [ 279.170542][T10421] kmem_cache_alloc_noprof+0x73/0x3c0 [ 279.170565][T10421] ? security_inode_alloc+0x39/0x330 [ 279.170590][T10421] security_inode_alloc+0x39/0x330 [ 279.170610][T10421] inode_init_always_gfp+0x9ed/0xdc0 [ 279.170644][T10421] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 279.170674][T10421] alloc_inode+0x82/0x1b0 [ 279.170704][T10421] new_inode+0x22/0x170 [ 279.170735][T10421] __debugfs_create_file+0x14d/0x4f0 [ 279.170769][T10421] debugfs_create_file_full+0x3f/0x60 [ 279.170802][T10421] ref_tracker_dir_debugfs+0x14e/0x270 [ 279.170831][T10421] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 279.170899][T10421] ? rcu_is_watching+0x15/0xb0 [ 279.170917][T10421] ? alloc_netdev_mqs+0xa3/0x11b0 [ 279.170949][T10421] ? __raw_spin_lock_init+0x45/0x100 [ 279.170976][T10421] alloc_netdev_mqs+0x26f/0x11b0 [ 279.171000][T10421] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 279.171029][T10421] ip6_tnl_locate+0x658/0x810 [ 279.171068][T10421] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 279.171093][T10421] ? ip6_tnl_siocdevprivate+0x60c/0xad0 [ 279.171121][T10421] ip6_tnl_siocdevprivate+0x630/0xad0 [ 279.171152][T10421] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 279.171199][T10421] ? full_name_hash+0x92/0xe0 [ 279.171225][T10421] ? netdev_name_node_lookup+0xdf/0x120 [ 279.171256][T10421] dev_ifsioc+0xb54/0xf00 [ 279.171287][T10421] dev_ioctl+0x84c/0x1150 [ 279.171312][T10421] sock_ioctl+0x719/0x790 [ 279.171341][T10421] ? __pfx_sock_ioctl+0x10/0x10 [ 279.171369][T10421] ? __fget_files+0x3a0/0x420 [ 279.171385][T10421] ? __fget_files+0x2a/0x420 [ 279.171407][T10421] ? bpf_lsm_file_ioctl+0x9/0x20 [ 279.171431][T10421] ? __pfx_sock_ioctl+0x10/0x10 [ 279.171456][T10421] __se_sys_ioctl+0xf9/0x170 [ 279.171484][T10421] do_syscall_64+0xfa/0x3b0 [ 279.171503][T10421] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.171522][T10421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.171541][T10421] ? clear_bhb_loop+0x60/0xb0 [ 279.171566][T10421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.171585][T10421] RIP: 0033:0x7f4d0a18ebe9 [ 279.171603][T10421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.171619][T10421] RSP: 002b:00007f4d0af97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.171639][T10421] RAX: ffffffffffffffda RBX: 00007f4d0a3c5fa0 RCX: 00007f4d0a18ebe9 [ 279.171652][T10421] RDX: 0000200000000040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 279.171664][T10421] RBP: 00007f4d0af97090 R08: 0000000000000000 R09: 0000000000000000 [ 279.171675][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.171686][T10421] R13: 00007f4d0a3c6038 R14: 00007f4d0a3c5fa0 R15: 00007ffcab9784c8 [ 279.171718][T10421] [ 279.171797][T10421] debugfs: out of free dentries, can not create file 'netdev@ffff8880795e8610' [ 279.331406][T10423] can: request_module (can-proto-0) failed. [ 279.585119][T10436] syzkaller1: entered promiscuous mode [ 279.594472][T10436] syzkaller1: entered allmulticast mode [ 279.699655][T10434] syzkaller1: left promiscuous mode [ 279.705088][T10434] syzkaller1: left allmulticast mode [ 279.803005][T10448] openvswitch: netlink: IP tunnel dst address not specified [ 279.832349][T10442] can: request_module (can-proto-0) failed. [ 279.960155][T10452] netlink: 'syz.1.1391': attribute type 3 has an invalid length. [ 279.979325][T10452] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1391'. [ 280.184576][T10459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1393'. [ 281.268220][T10478] FAULT_INJECTION: forcing a failure. [ 281.268220][T10478] name failslab, interval 1, probability 0, space 0, times 0 [ 281.281639][T10478] CPU: 0 UID: 0 PID: 10478 Comm: syz.0.1399 Not tainted syzkaller #0 PREEMPT(full) [ 281.281668][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.281679][T10478] Call Trace: [ 281.281687][T10478] [ 281.281695][T10478] dump_stack_lvl+0x189/0x250 [ 281.281725][T10478] ? __pfx____ratelimit+0x10/0x10 [ 281.281746][T10478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.281769][T10478] ? __pfx__printk+0x10/0x10 [ 281.281804][T10478] ? __pfx___might_resched+0x10/0x10 [ 281.281821][T10478] ? fs_reclaim_acquire+0x7d/0x100 [ 281.281864][T10478] should_fail_ex+0x414/0x560 [ 281.281892][T10478] ? alloc_netdev_mqs+0xa3/0x11b0 [ 281.281915][T10478] should_failslab+0xa8/0x100 [ 281.281944][T10478] __kvmalloc_node_noprof+0x161/0x5f0 [ 281.281972][T10478] ? alloc_netdev_mqs+0xa3/0x11b0 [ 281.281994][T10478] ? snprintf+0xda/0x120 [ 281.282025][T10478] alloc_netdev_mqs+0xa3/0x11b0 [ 281.282047][T10478] ? __pfx_vlan_setup+0x10/0x10 [ 281.282077][T10478] rtnl_create_link+0x31f/0xd10 [ 281.282111][T10478] rtnl_newlink_create+0x25c/0xb00 [ 281.282140][T10478] ? __lock_acquire+0xab9/0xd20 [ 281.282173][T10478] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 281.282200][T10478] ? __pfx___mutex_lock+0x10/0x10 [ 281.282245][T10478] ? ns_capable+0x8a/0xf0 [ 281.282270][T10478] rtnl_newlink+0x16d6/0x1c70 [ 281.282290][T10478] ? netlink_sendmsg+0x805/0xb30 [ 281.282325][T10478] ? __pfx_rtnl_newlink+0x10/0x10 [ 281.282374][T10478] ? kasan_quarantine_put+0xdd/0x220 [ 281.282397][T10478] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.282424][T10478] ? nlmon_xmit+0xb0/0x100 [ 281.282442][T10478] ? kmem_cache_free+0x18f/0x400 [ 281.282476][T10478] ? __local_bh_enable_ip+0x12d/0x1c0 [ 281.282495][T10478] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.282515][T10478] ? __local_bh_enable_ip+0x12d/0x1c0 [ 281.282534][T10478] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 281.282559][T10478] ? __dev_queue_xmit+0x27b/0x3b50 [ 281.282583][T10478] ? __dev_queue_xmit+0x27b/0x3b50 [ 281.282604][T10478] ? __dev_queue_xmit+0x27b/0x3b50 [ 281.282628][T10478] ? __dev_queue_xmit+0x1d79/0x3b50 [ 281.282659][T10478] ? __lock_acquire+0xab9/0xd20 [ 281.282717][T10478] ? __pfx_rtnl_newlink+0x10/0x10 [ 281.282736][T10478] rtnetlink_rcv_msg+0x7cc/0xb70 [ 281.282760][T10478] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 281.282778][T10478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.282794][T10478] ? ref_tracker_free+0x63a/0x7d0 [ 281.282821][T10478] ? __asan_memcpy+0x40/0x70 [ 281.282853][T10478] ? __pfx_ref_tracker_free+0x10/0x10 [ 281.282894][T10478] netlink_rcv_skb+0x205/0x470 [ 281.282915][T10478] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.282936][T10478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.282968][T10478] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.282996][T10478] netlink_unicast+0x82f/0x9e0 [ 281.283035][T10478] ? __pfx_netlink_unicast+0x10/0x10 [ 281.283066][T10478] ? netlink_sendmsg+0x642/0xb30 [ 281.283082][T10478] ? skb_put+0x11b/0x210 [ 281.283108][T10478] netlink_sendmsg+0x805/0xb30 [ 281.283139][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.283163][T10478] ? aa_sock_msg_perm+0xf1/0x1d0 [ 281.283185][T10478] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.283205][T10478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.283226][T10478] __sock_sendmsg+0x219/0x270 [ 281.283275][T10478] ____sys_sendmsg+0x505/0x830 [ 281.283324][T10478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.283366][T10478] ? import_iovec+0x74/0xa0 [ 281.283409][T10478] ___sys_sendmsg+0x21f/0x2a0 [ 281.283435][T10478] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.283511][T10478] ? __fget_files+0x2a/0x420 [ 281.283534][T10478] ? __fget_files+0x3a0/0x420 [ 281.283578][T10478] __x64_sys_sendmsg+0x19b/0x260 [ 281.283603][T10478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.283646][T10478] ? __pfx_ksys_write+0x10/0x10 [ 281.283674][T10478] ? rcu_is_watching+0x15/0xb0 [ 281.283700][T10478] ? do_syscall_64+0xbe/0x3b0 [ 281.283726][T10478] do_syscall_64+0xfa/0x3b0 [ 281.283757][T10478] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.283785][T10478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.283820][T10478] ? clear_bhb_loop+0x60/0xb0 [ 281.283864][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.283893][T10478] RIP: 0033:0x7fb3a8b8ebe9 [ 281.283917][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.283934][T10478] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.283969][T10478] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 281.283984][T10478] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 281.284007][T10478] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 281.284026][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.284043][T10478] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 281.284087][T10478] [ 282.026877][T10480] FAULT_INJECTION: forcing a failure. [ 282.026877][T10480] name failslab, interval 1, probability 0, space 0, times 0 [ 282.040048][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.4.1402 Not tainted syzkaller #0 PREEMPT(full) [ 282.040074][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.040085][T10480] Call Trace: [ 282.040093][T10480] [ 282.040100][T10480] dump_stack_lvl+0x189/0x250 [ 282.040128][T10480] ? __pfx____ratelimit+0x10/0x10 [ 282.040147][T10480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.040170][T10480] ? __pfx__printk+0x10/0x10 [ 282.040200][T10480] ? __pfx___might_resched+0x10/0x10 [ 282.040219][T10480] ? fs_reclaim_acquire+0x7d/0x100 [ 282.040254][T10480] should_fail_ex+0x414/0x560 [ 282.040286][T10480] should_failslab+0xa8/0x100 [ 282.040315][T10480] __kmalloc_cache_noprof+0x70/0x3d0 [ 282.040338][T10480] ? nsim_bpf+0x6f2/0xd40 [ 282.040369][T10480] nsim_bpf+0x6f2/0xd40 [ 282.040401][T10480] bpf_map_offload_map_alloc+0x4ba/0x840 [ 282.040434][T10480] ? __pfx_bpf_map_offload_map_alloc+0x10/0x10 [ 282.040463][T10480] ? __might_fault+0xb0/0x130 [ 282.040492][T10480] ? htab_map_alloc_check+0x368/0x440 [ 282.040521][T10480] map_create+0xaa0/0x14d0 [ 282.040552][T10480] ? security_bpf+0x7e/0x300 [ 282.040589][T10480] __sys_bpf+0x60f/0x870 [ 282.040617][T10480] ? __pfx___sys_bpf+0x10/0x10 [ 282.040659][T10480] ? ksys_write+0x22a/0x250 [ 282.040687][T10480] ? __pfx_ksys_write+0x10/0x10 [ 282.040708][T10480] ? rcu_is_watching+0x15/0xb0 [ 282.040737][T10480] __x64_sys_bpf+0x7c/0x90 [ 282.040761][T10480] do_syscall_64+0xfa/0x3b0 [ 282.040780][T10480] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.040799][T10480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.040817][T10480] ? clear_bhb_loop+0x60/0xb0 [ 282.040840][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.040857][T10480] RIP: 0033:0x7fbd3058ebe9 [ 282.040875][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.040891][T10480] RSP: 002b:00007fbd3137b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.040911][T10480] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058ebe9 [ 282.040925][T10480] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 282.040937][T10480] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 282.040949][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.040960][T10480] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 282.040994][T10480] [ 282.348839][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 282.420164][T10483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 282.635709][T10501] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 282.990461][T10514] FAULT_INJECTION: forcing a failure. [ 282.990461][T10514] name failslab, interval 1, probability 0, space 0, times 0 [ 283.030693][T10514] CPU: 0 UID: 0 PID: 10514 Comm: syz.1.1412 Not tainted syzkaller #0 PREEMPT(full) [ 283.030721][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.030733][T10514] Call Trace: [ 283.030741][T10514] [ 283.030749][T10514] dump_stack_lvl+0x189/0x250 [ 283.030776][T10514] ? __pfx____ratelimit+0x10/0x10 [ 283.030796][T10514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.030817][T10514] ? __pfx__printk+0x10/0x10 [ 283.030869][T10514] should_fail_ex+0x414/0x560 [ 283.030901][T10514] should_failslab+0xa8/0x100 [ 283.030929][T10514] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 283.030956][T10514] ? __alloc_skb+0x112/0x2d0 [ 283.030981][T10514] __alloc_skb+0x112/0x2d0 [ 283.031004][T10514] create_monitor_ctrl_event+0x38/0x480 [ 283.031026][T10514] ? skb_put+0x11b/0x210 [ 283.031051][T10514] mgmt_cmd_status+0x1cb/0x4c0 [ 283.031080][T10514] hci_mgmt_cmd+0x8ba/0xef0 [ 283.031119][T10514] hci_sock_sendmsg+0x6ca/0xef0 [ 283.031150][T10514] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 283.031173][T10514] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.031195][T10514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.031216][T10514] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 283.031239][T10514] __sock_sendmsg+0x219/0x270 [ 283.031270][T10514] sock_write_iter+0x258/0x330 [ 283.031298][T10514] ? __pfx_sock_write_iter+0x10/0x10 [ 283.031336][T10514] ? bpf_lsm_file_permission+0x9/0x20 [ 283.031357][T10514] ? security_file_permission+0x75/0x290 [ 283.031393][T10514] vfs_write+0x5c6/0xb30 [ 283.031424][T10514] ? __pfx_sock_write_iter+0x10/0x10 [ 283.031450][T10514] ? __pfx_vfs_write+0x10/0x10 [ 283.031488][T10514] ? __fget_files+0x2a/0x420 [ 283.031517][T10514] ksys_write+0x145/0x250 [ 283.031546][T10514] ? __pfx_ksys_write+0x10/0x10 [ 283.031567][T10514] ? rcu_is_watching+0x15/0xb0 [ 283.031592][T10514] ? do_syscall_64+0xbe/0x3b0 [ 283.031617][T10514] do_syscall_64+0xfa/0x3b0 [ 283.031635][T10514] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.031654][T10514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031672][T10514] ? clear_bhb_loop+0x60/0xb0 [ 283.031696][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.031715][T10514] RIP: 0033:0x7fd83538ebe9 [ 283.031734][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.031750][T10514] RSP: 002b:00007fd8362ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.031772][T10514] RAX: ffffffffffffffda RBX: 00007fd8355c5fa0 RCX: 00007fd83538ebe9 [ 283.031785][T10514] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 283.031797][T10514] RBP: 00007fd8362ba090 R08: 0000000000000000 R09: 0000000000000000 [ 283.031809][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.031820][T10514] R13: 00007fd8355c6038 R14: 00007fd8355c5fa0 R15: 00007ffcfc26b538 [ 283.031859][T10514] [ 283.908622][T10532] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.917515][ T5983] IPVS: starting estimator thread 0... [ 283.999665][T10538] team0: No ports can be present during mode change [ 284.029602][T10540] IPVS: using max 26 ests per chain, 62400 per kthread [ 284.997786][T10577] bond0: (slave dummy0): Releasing backup interface [ 285.034534][T10585] netlink: 'syz.1.1432': attribute type 10 has an invalid length. [ 285.038263][T10577] bridge_slave_0: left allmulticast mode [ 285.061672][T10577] bridge_slave_0: left promiscuous mode [ 285.067520][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.103739][T10577] bridge_slave_1: left allmulticast mode [ 285.113866][T10577] bridge_slave_1: left promiscuous mode [ 285.113881][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1434'. [ 285.137847][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.158277][T10577] bond0: (slave bond_slave_0): Releasing backup interface [ 285.178564][T10577] bond0: (slave bond_slave_1): Releasing backup interface [ 285.233118][T10577] team0: Port device team_slave_0 removed [ 285.275629][T10577] team0: Port device team_slave_1 removed [ 285.291368][T10577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.299001][T10577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.315967][T10577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.327077][T10577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.348878][T10577] bond0: (slave netdevsim0): Releasing backup interface [ 285.409213][T10585] bond0: (slave wlan1): Opening slave failed [ 285.489981][T10590] vlan4: entered promiscuous mode [ 285.687137][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 285.844554][T10612] FAULT_INJECTION: forcing a failure. [ 285.844554][T10612] name failslab, interval 1, probability 0, space 0, times 0 [ 285.884346][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.2.1445 Not tainted syzkaller #0 PREEMPT(full) [ 285.884374][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.884385][T10612] Call Trace: [ 285.884393][T10612] [ 285.884401][T10612] dump_stack_lvl+0x189/0x250 [ 285.884430][T10612] ? __pfx____ratelimit+0x10/0x10 [ 285.884451][T10612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.884506][T10612] ? __pfx__printk+0x10/0x10 [ 285.884541][T10612] ? __pfx___might_resched+0x10/0x10 [ 285.884559][T10612] ? fs_reclaim_acquire+0x7d/0x100 [ 285.884592][T10612] should_fail_ex+0x414/0x560 [ 285.884625][T10612] should_failslab+0xa8/0x100 [ 285.884653][T10612] __kmalloc_noprof+0xcb/0x4f0 [ 285.884677][T10612] ? kfree+0x4d/0x440 [ 285.884696][T10612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 285.884722][T10612] tomoyo_realpath_from_path+0xe3/0x5d0 [ 285.884744][T10612] ? tomoyo_domain+0xd9/0x130 [ 285.884772][T10612] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 285.884798][T10612] tomoyo_path_number_perm+0x1e8/0x5a0 [ 285.884838][T10612] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.884886][T10612] ? __lock_acquire+0xab9/0xd20 [ 285.884939][T10612] ? __fget_files+0x2a/0x420 [ 285.884960][T10612] ? __fget_files+0x2a/0x420 [ 285.884976][T10612] ? __fget_files+0x3a0/0x420 [ 285.884991][T10612] ? __fget_files+0x2a/0x420 [ 285.885013][T10612] security_file_ioctl+0xcb/0x2d0 [ 285.885041][T10612] __se_sys_ioctl+0x47/0x170 [ 285.885069][T10612] do_syscall_64+0xfa/0x3b0 [ 285.885088][T10612] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.885107][T10612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.885126][T10612] ? clear_bhb_loop+0x60/0xb0 [ 285.885150][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.885168][T10612] RIP: 0033:0x7f4d0a18ebe9 [ 285.885187][T10612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.885203][T10612] RSP: 002b:00007f4d0af97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.885224][T10612] RAX: ffffffffffffffda RBX: 00007f4d0a3c5fa0 RCX: 00007f4d0a18ebe9 [ 285.885239][T10612] RDX: 0000200000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 285.885251][T10612] RBP: 00007f4d0af97090 R08: 0000000000000000 R09: 0000000000000000 [ 285.885262][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.885274][T10612] R13: 00007f4d0a3c6038 R14: 00007f4d0a3c5fa0 R15: 00007ffcab9784c8 [ 285.885308][T10612] [ 285.885316][T10612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.447504][T10630] FAULT_INJECTION: forcing a failure. [ 286.447504][T10630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.461064][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.0.1452 Not tainted syzkaller #0 PREEMPT(full) [ 286.461093][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.461104][T10630] Call Trace: [ 286.461112][T10630] [ 286.461120][T10630] dump_stack_lvl+0x189/0x250 [ 286.461148][T10630] ? __pfx____ratelimit+0x10/0x10 [ 286.461171][T10630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.461195][T10630] ? __pfx__printk+0x10/0x10 [ 286.461223][T10630] ? __might_fault+0xb0/0x130 [ 286.461262][T10630] should_fail_ex+0x414/0x560 [ 286.461293][T10630] _copy_from_user+0x2d/0xb0 [ 286.461317][T10630] ___sys_sendmsg+0x158/0x2a0 [ 286.461344][T10630] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.461411][T10630] ? __fget_files+0x2a/0x420 [ 286.461429][T10630] ? __fget_files+0x3a0/0x420 [ 286.461460][T10630] __sys_sendmmsg+0x227/0x430 [ 286.461491][T10630] ? __pfx___sys_sendmmsg+0x10/0x10 [ 286.461512][T10630] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 286.461565][T10630] ? ksys_write+0x22a/0x250 [ 286.461595][T10630] ? __pfx_ksys_write+0x10/0x10 [ 286.461617][T10630] ? rcu_is_watching+0x15/0xb0 [ 286.461647][T10630] __x64_sys_sendmmsg+0xa0/0xc0 [ 286.461673][T10630] do_syscall_64+0xfa/0x3b0 [ 286.461697][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.461716][T10630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.461736][T10630] ? clear_bhb_loop+0x60/0xb0 [ 286.461760][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.461779][T10630] RIP: 0033:0x7fb3a8b8ebe9 [ 286.461798][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.461824][T10630] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.461846][T10630] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 286.461860][T10630] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 286.461872][T10630] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 286.461883][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.461895][T10630] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 286.461928][T10630] [ 286.935731][ T5973] IPVS: starting estimator thread 0... [ 286.981585][T10634] pim6reg1: entered promiscuous mode [ 287.006713][T10634] pim6reg1: entered allmulticast mode [ 287.050011][T10637] IPVS: using max 24 ests per chain, 57600 per kthread [ 287.070523][T10642] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1457'. [ 287.095700][T10642] FAULT_INJECTION: forcing a failure. [ 287.095700][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 287.142500][T10642] CPU: 0 UID: 0 PID: 10642 Comm: syz.4.1457 Not tainted syzkaller #0 PREEMPT(full) [ 287.142540][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.142551][T10642] Call Trace: [ 287.142559][T10642] [ 287.142568][T10642] dump_stack_lvl+0x189/0x250 [ 287.142596][T10642] ? __pfx____ratelimit+0x10/0x10 [ 287.142616][T10642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.142638][T10642] ? __pfx__printk+0x10/0x10 [ 287.142659][T10642] ? xfrm_netlink_rcv+0x79/0x90 [ 287.142684][T10642] ? ____sys_sendmsg+0x505/0x830 [ 287.142704][T10642] ? __x64_sys_sendmsg+0x19b/0x260 [ 287.142737][T10642] should_fail_ex+0x414/0x560 [ 287.142767][T10642] should_failslab+0xa8/0x100 [ 287.142796][T10642] kmem_cache_alloc_noprof+0x73/0x3c0 [ 287.142818][T10642] ? skb_clone+0x212/0x3a0 [ 287.142855][T10642] skb_clone+0x212/0x3a0 [ 287.142883][T10642] __netlink_deliver_tap+0x404/0x850 [ 287.142932][T10642] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.142955][T10642] netlink_deliver_tap+0x19c/0x1b0 [ 287.142975][T10642] netlink_sendskb+0x68/0x140 [ 287.143005][T10642] netlink_unicast+0x397/0x9e0 [ 287.143030][T10642] ? __asan_memcpy+0x40/0x70 [ 287.143061][T10642] ? __pfx_netlink_unicast+0x10/0x10 [ 287.143100][T10642] netlink_rcv_skb+0x28c/0x470 [ 287.143120][T10642] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 287.143148][T10642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.143183][T10642] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.143202][T10642] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.143223][T10642] xfrm_netlink_rcv+0x79/0x90 [ 287.143248][T10642] netlink_unicast+0x82f/0x9e0 [ 287.143283][T10642] ? __pfx_netlink_unicast+0x10/0x10 [ 287.143312][T10642] ? netlink_sendmsg+0x642/0xb30 [ 287.143328][T10642] ? skb_put+0x11b/0x210 [ 287.143352][T10642] netlink_sendmsg+0x805/0xb30 [ 287.143381][T10642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.143404][T10642] ? aa_sock_msg_perm+0xf1/0x1d0 [ 287.143425][T10642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.143446][T10642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.143467][T10642] __sock_sendmsg+0x219/0x270 [ 287.143497][T10642] ____sys_sendmsg+0x505/0x830 [ 287.143530][T10642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.143561][T10642] ? import_iovec+0x74/0xa0 [ 287.143587][T10642] ___sys_sendmsg+0x21f/0x2a0 [ 287.143610][T10642] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.143673][T10642] ? __fget_files+0x2a/0x420 [ 287.143689][T10642] ? __fget_files+0x3a0/0x420 [ 287.143729][T10642] __x64_sys_sendmsg+0x19b/0x260 [ 287.143761][T10642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.143795][T10642] ? __pfx_ksys_write+0x10/0x10 [ 287.143818][T10642] ? rcu_is_watching+0x15/0xb0 [ 287.143852][T10642] ? do_syscall_64+0xbe/0x3b0 [ 287.143878][T10642] do_syscall_64+0xfa/0x3b0 [ 287.143896][T10642] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.143915][T10642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.143933][T10642] ? clear_bhb_loop+0x60/0xb0 [ 287.143957][T10642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.143974][T10642] RIP: 0033:0x7fbd3058ebe9 [ 287.143992][T10642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.144008][T10642] RSP: 002b:00007fbd3137b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.144029][T10642] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058ebe9 [ 287.144042][T10642] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 287.144053][T10642] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 287.144065][T10642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.144076][T10642] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 287.144109][T10642] [ 287.685203][T10652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1461'. [ 288.084645][T10665] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1466'. [ 288.264701][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1468'. [ 288.306265][T10674] openvswitch: netlink: Flow key attr not present in new flow. [ 288.351626][T10669] can: request_module (can-proto-0) failed. [ 288.787997][T10689] tipc: Enabling of bearer rejected, already enabled [ 288.977659][T10696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1478'. [ 289.271227][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 289.282122][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 289.287866][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1482'. [ 289.309235][T10709] openvswitch: netlink: Flow key attr not present in new flow. [ 289.334492][T10703] can: request_module (can-proto-0) failed. [ 290.770957][T10751] netlink: 'syz.2.1495': attribute type 13 has an invalid length. [ 290.809955][T10751] netlink: 'syz.2.1495': attribute type 17 has an invalid length. [ 290.851164][T10755] FAULT_INJECTION: forcing a failure. [ 290.851164][T10755] name failslab, interval 1, probability 0, space 0, times 0 [ 290.912790][T10751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.936914][T10755] CPU: 1 UID: 0 PID: 10755 Comm: syz.1.1498 Not tainted syzkaller #0 PREEMPT(full) [ 290.936940][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.936950][T10755] Call Trace: [ 290.936957][T10755] [ 290.936965][T10755] dump_stack_lvl+0x189/0x250 [ 290.936990][T10755] ? __pfx____ratelimit+0x10/0x10 [ 290.937008][T10755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.937027][T10755] ? __pfx__printk+0x10/0x10 [ 290.937056][T10755] ? __pfx___might_resched+0x10/0x10 [ 290.937078][T10755] should_fail_ex+0x414/0x560 [ 290.937108][T10755] should_failslab+0xa8/0x100 [ 290.937135][T10755] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 290.937160][T10755] ? __alloc_skb+0x112/0x2d0 [ 290.937184][T10755] __alloc_skb+0x112/0x2d0 [ 290.937207][T10755] netlink_sendmsg+0x5c6/0xb30 [ 290.937237][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.937261][T10755] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.937281][T10755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.937301][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.937322][T10755] __sock_sendmsg+0x219/0x270 [ 290.937352][T10755] ____sys_sendmsg+0x505/0x830 [ 290.937381][T10755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.937413][T10755] ? import_iovec+0x74/0xa0 [ 290.937440][T10755] ___sys_sendmsg+0x21f/0x2a0 [ 290.937465][T10755] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.937528][T10755] ? __fget_files+0x2a/0x420 [ 290.937544][T10755] ? __fget_files+0x3a0/0x420 [ 290.937582][T10755] __x64_sys_sendmsg+0x19b/0x260 [ 290.937607][T10755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.937639][T10755] ? __pfx_ksys_write+0x10/0x10 [ 290.937660][T10755] ? rcu_is_watching+0x15/0xb0 [ 290.937684][T10755] ? do_syscall_64+0xbe/0x3b0 [ 290.937706][T10755] do_syscall_64+0xfa/0x3b0 [ 290.937724][T10755] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.937740][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.937758][T10755] ? clear_bhb_loop+0x60/0xb0 [ 290.937780][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.937797][T10755] RIP: 0033:0x7fd83538ebe9 [ 290.937814][T10755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.937830][T10755] RSP: 002b:00007fd8362ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.937851][T10755] RAX: ffffffffffffffda RBX: 00007fd8355c5fa0 RCX: 00007fd83538ebe9 [ 290.937864][T10755] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000005 [ 290.937876][T10755] RBP: 00007fd8362ba090 R08: 0000000000000000 R09: 0000000000000000 [ 290.937887][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.937898][T10755] R13: 00007fd8355c6038 R14: 00007fd8355c5fa0 R15: 00007ffcfc26b538 [ 290.937929][T10755] [ 291.270992][T10760] __nla_validate_parse: 2 callbacks suppressed [ 291.271015][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1497'. [ 291.628849][T10781] trusted_key: syz.1.1502 sent an empty control message without MSG_MORE. [ 292.323217][ T12] tipc: Subscription rejected, illegal request [ 292.353933][T10770] vxcan1 speed is unknown, defaulting to 1000 [ 292.540200][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 292.565723][ T5882] IPVS: starting estimator thread 0... [ 292.574956][T10810] FAULT_INJECTION: forcing a failure. [ 292.574956][T10810] name failslab, interval 1, probability 0, space 0, times 0 [ 292.588165][T10810] CPU: 1 UID: 0 PID: 10810 Comm: syz.3.1510 Not tainted syzkaller #0 PREEMPT(full) [ 292.588193][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.588204][T10810] Call Trace: [ 292.588213][T10810] [ 292.588222][T10810] dump_stack_lvl+0x189/0x250 [ 292.588251][T10810] ? __pfx____ratelimit+0x10/0x10 [ 292.588272][T10810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.588296][T10810] ? __pfx__printk+0x10/0x10 [ 292.588339][T10810] should_fail_ex+0x414/0x560 [ 292.588372][T10810] should_failslab+0xa8/0x100 [ 292.588402][T10810] __kmalloc_cache_noprof+0x70/0x3d0 [ 292.588428][T10810] ? ip_vs_lblc_schedule+0xcaa/0x12e0 [ 292.588462][T10810] ip_vs_lblc_schedule+0xcaa/0x12e0 [ 292.588507][T10810] ip_vs_schedule+0xbad/0x1c80 [ 292.588567][T10810] ? __pfx_ip_vs_schedule+0x10/0x10 [ 292.588603][T10810] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 292.588642][T10810] ? ip_vs_conn_in_get_proto+0x363/0x4d0 [ 292.588668][T10810] ? ip_vs_service_find+0xd44/0xf00 [ 292.588692][T10810] ? __pfx_ip_vs_conn_in_get_proto+0x10/0x10 [ 292.588715][T10810] ? ip_vs_fill_iph_skb_off+0x30a/0x7b0 [ 292.588740][T10810] udp_conn_schedule+0x332/0x710 [ 292.588773][T10810] ? __pfx_udp_conn_schedule+0x10/0x10 [ 292.588812][T10810] ip_vs_in_hook+0xc09/0x1be0 [ 292.588855][T10810] ? ip_vs_out_hook+0x9b5/0xef0 [ 292.588882][T10810] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 292.588938][T10810] ? nf_hook+0x9d/0x380 [ 292.588961][T10810] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 292.588991][T10810] nf_hook_slow+0xc5/0x220 [ 292.589025][T10810] nf_hook+0x217/0x380 [ 292.589051][T10810] ? nf_hook+0x9d/0x380 [ 292.589071][T10810] ? __pfx_nf_hook+0x10/0x10 [ 292.589094][T10810] ? __pfx_dst_output+0x10/0x10 [ 292.589123][T10810] ? ip_fast_csum+0x1ee/0x2b0 [ 292.589145][T10810] __ip_local_out+0x4db/0x600 [ 292.589165][T10810] ? __pfx_dst_output+0x10/0x10 [ 292.589191][T10810] ip_send_skb+0x4a/0x100 [ 292.589216][T10810] udp_send_skb+0xaf1/0x14c0 [ 292.589260][T10810] udp_sendmsg+0x195a/0x2170 [ 292.589302][T10810] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 292.589328][T10810] ? __pfx_udp_sendmsg+0x10/0x10 [ 292.589369][T10810] ? get_random_u32+0x155/0x940 [ 292.589403][T10810] ? register_lock_class+0x51/0x320 [ 292.589425][T10810] ? get_random_u32+0x155/0x940 [ 292.589451][T10810] ? __lock_acquire+0xab9/0xd20 [ 292.589488][T10810] udpv6_sendmsg+0xbf0/0x24b0 [ 292.589534][T10810] ? udp_lib_get_port+0x164b/0x1b10 [ 292.589573][T10810] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 292.589606][T10810] ? __lock_acquire+0xab9/0xd20 [ 292.589651][T10810] ? __local_bh_enable_ip+0x12d/0x1c0 [ 292.589670][T10810] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 292.589697][T10810] ? inet_send_prepare+0x1b9/0x270 [ 292.589726][T10810] ? inet_send_prepare+0x1b9/0x270 [ 292.589756][T10810] ? inet6_sendmsg+0xe4/0x120 [ 292.589781][T10810] __sock_sendmsg+0xe5/0x270 [ 292.589811][T10810] ____sys_sendmsg+0x505/0x830 [ 292.589840][T10810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.589874][T10810] ? import_iovec+0x74/0xa0 [ 292.589901][T10810] ___sys_sendmsg+0x21f/0x2a0 [ 292.589926][T10810] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.589992][T10810] ? __fget_files+0x2a/0x420 [ 292.590007][T10810] ? __fget_files+0x3a0/0x420 [ 292.590037][T10810] __x64_sys_sendmsg+0x19b/0x260 [ 292.590063][T10810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.590097][T10810] ? __pfx_ksys_write+0x10/0x10 [ 292.590120][T10810] ? rcu_is_watching+0x15/0xb0 [ 292.590145][T10810] ? do_syscall_64+0xbe/0x3b0 [ 292.590171][T10810] do_syscall_64+0xfa/0x3b0 [ 292.590188][T10810] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.590205][T10810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.590223][T10810] ? clear_bhb_loop+0x60/0xb0 [ 292.590247][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.590264][T10810] RIP: 0033:0x7f30a378ebe9 [ 292.590282][T10810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.590299][T10810] RSP: 002b:00007f30a45ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.590318][T10810] RAX: ffffffffffffffda RBX: 00007f30a39c5fa0 RCX: 00007f30a378ebe9 [ 292.590329][T10810] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 292.590339][T10810] RBP: 00007f30a45ad090 R08: 0000000000000000 R09: 0000000000000000 [ 292.590348][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.590357][T10810] R13: 00007f30a39c6038 R14: 00007f30a39c5fa0 R15: 00007ffc955e77d8 [ 292.590382][T10810] [ 293.238198][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 293.279244][T10811] IPVS: using max 23 ests per chain, 55200 per kthread [ 293.291085][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 293.501812][T10823] netlink: 'syz.3.1514': attribute type 1 has an invalid length. [ 293.520834][T10823] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1514'. [ 293.537187][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 293.586746][T10825] smc: net device bond0 applied user defined pnetid SYZ2 [ 293.612025][T10825] smc: net device bond0 erased user defined pnetid SYZ2 [ 293.644105][T10770] lo speed is unknown, defaulting to 1000 [ 293.792562][T10831] vxcan1 speed is unknown, defaulting to 1000 [ 293.989476][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 294.027395][T10845] tipc: Started in network mode [ 294.038935][T10845] tipc: Node identity 7f000001, cluster identity 4711 [ 294.076790][T10845] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.112170][T10845] tipc: Enabled bearer , priority 10 [ 294.186549][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 294.200898][T10845] FAULT_INJECTION: forcing a failure. [ 294.200898][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 294.213871][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.230005][T10845] CPU: 0 UID: 0 PID: 10845 Comm: syz.2.1521 Not tainted syzkaller #0 PREEMPT(full) [ 294.230032][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.230044][T10845] Call Trace: [ 294.230052][T10845] [ 294.230060][T10845] dump_stack_lvl+0x189/0x250 [ 294.230089][T10845] ? __pfx____ratelimit+0x10/0x10 [ 294.230110][T10845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.230133][T10845] ? __pfx__printk+0x10/0x10 [ 294.230167][T10845] ? __pfx___might_resched+0x10/0x10 [ 294.230192][T10845] should_fail_ex+0x414/0x560 [ 294.230224][T10845] should_failslab+0xa8/0x100 [ 294.230253][T10845] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 294.230280][T10845] ? __alloc_skb+0x112/0x2d0 [ 294.230305][T10845] __alloc_skb+0x112/0x2d0 [ 294.230329][T10845] netlink_sendmsg+0x5c6/0xb30 [ 294.230361][T10845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.230386][T10845] ? aa_sock_msg_perm+0xf1/0x1d0 [ 294.230408][T10845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.230429][T10845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.230447][T10845] __sock_sendmsg+0x219/0x270 [ 294.230479][T10845] ____sys_sendmsg+0x505/0x830 [ 294.230509][T10845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.230542][T10845] ? import_iovec+0x74/0xa0 [ 294.230570][T10845] ___sys_sendmsg+0x21f/0x2a0 [ 294.230595][T10845] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.230660][T10845] ? __fget_files+0x2a/0x420 [ 294.230677][T10845] ? __fget_files+0x3a0/0x420 [ 294.230715][T10845] __x64_sys_sendmsg+0x19b/0x260 [ 294.230741][T10845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.230776][T10845] ? __pfx_ksys_write+0x10/0x10 [ 294.230798][T10845] ? rcu_is_watching+0x15/0xb0 [ 294.230824][T10845] ? do_syscall_64+0xbe/0x3b0 [ 294.230849][T10845] do_syscall_64+0xfa/0x3b0 [ 294.230867][T10845] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.230885][T10845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.230904][T10845] ? clear_bhb_loop+0x60/0xb0 [ 294.230928][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.230945][T10845] RIP: 0033:0x7f4d0a18ebe9 [ 294.230963][T10845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.230979][T10845] RSP: 002b:00007f4d0af97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.231001][T10845] RAX: ffffffffffffffda RBX: 00007f4d0a3c5fa0 RCX: 00007f4d0a18ebe9 [ 294.231015][T10845] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000b [ 294.231027][T10845] RBP: 00007f4d0af97090 R08: 0000000000000000 R09: 0000000000000000 [ 294.231039][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.231051][T10845] R13: 00007f4d0a3c6038 R14: 00007f4d0a3c5fa0 R15: 00007ffcab9784c8 [ 294.231085][T10845] [ 294.505229][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.548521][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 294.639142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.704239][T10831] lo speed is unknown, defaulting to 1000 [ 294.756356][T10856] netlink: 'syz.4.1525': attribute type 13 has an invalid length. [ 294.768272][T10856] netlink: 'syz.4.1525': attribute type 17 has an invalid length. [ 294.779114][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.919209][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.013295][T10856] bridge0: port 3(syz_tun) entered blocking state [ 295.019988][T10856] bridge0: port 3(syz_tun) entered forwarding state [ 295.026976][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.034230][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.041873][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.049115][T10856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.069218][ T5934] tipc: Node number set to 2130706433 [ 295.124583][T10856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.209152][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.268383][T10869] FAULT_INJECTION: forcing a failure. [ 295.268383][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.311458][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.3.1528 Not tainted syzkaller #0 PREEMPT(full) [ 295.311487][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.311501][T10869] Call Trace: [ 295.311508][T10869] [ 295.311517][T10869] dump_stack_lvl+0x189/0x250 [ 295.311546][T10869] ? __pfx____ratelimit+0x10/0x10 [ 295.311566][T10869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.311588][T10869] ? __pfx__printk+0x10/0x10 [ 295.311629][T10869] should_fail_ex+0x414/0x560 [ 295.311659][T10869] _copy_to_user+0x31/0xb0 [ 295.311683][T10869] bpf_test_finish+0x24e/0x700 [ 295.311720][T10869] ? __pfx_bpf_test_finish+0x10/0x10 [ 295.311746][T10869] ? slab_build_skb+0x273/0x3e0 [ 295.311770][T10869] bpf_prog_test_run_skb+0xed5/0x1560 [ 295.311808][T10869] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 295.311827][T10869] bpf_prog_test_run+0x2c7/0x340 [ 295.311858][T10869] __sys_bpf+0x581/0x870 [ 295.311885][T10869] ? __pfx___sys_bpf+0x10/0x10 [ 295.311925][T10869] ? ksys_write+0x22a/0x250 [ 295.311952][T10869] ? __pfx_ksys_write+0x10/0x10 [ 295.311972][T10869] ? rcu_is_watching+0x15/0xb0 [ 295.312000][T10869] __x64_sys_bpf+0x7c/0x90 [ 295.312023][T10869] do_syscall_64+0xfa/0x3b0 [ 295.312042][T10869] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.312061][T10869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.312079][T10869] ? clear_bhb_loop+0x60/0xb0 [ 295.312103][T10869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.312121][T10869] RIP: 0033:0x7f30a378ebe9 [ 295.312138][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.312152][T10869] RSP: 002b:00007f30a45ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.312173][T10869] RAX: ffffffffffffffda RBX: 00007f30a39c5fa0 RCX: 00007f30a378ebe9 [ 295.312187][T10869] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 295.312199][T10869] RBP: 00007f30a45ad090 R08: 0000000000000000 R09: 0000000000000000 [ 295.312210][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.312221][T10869] R13: 00007f30a39c6038 R14: 00007f30a39c5fa0 R15: 00007ffc955e77d8 [ 295.312255][T10869] [ 295.479123][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.002218][T10883] netlink: 'syz.4.1532': attribute type 13 has an invalid length. [ 296.010316][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.032944][T10883] netlink: 'syz.4.1532': attribute type 17 has an invalid length. [ 296.374913][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 296.623626][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'. [ 296.649201][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 297.711737][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 297.780904][T10927] FAULT_INJECTION: forcing a failure. [ 297.780904][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 297.831054][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.4.1548 Not tainted syzkaller #0 PREEMPT(full) [ 297.831083][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.831095][T10927] Call Trace: [ 297.831103][T10927] [ 297.831112][T10927] dump_stack_lvl+0x189/0x250 [ 297.831141][T10927] ? __pfx____ratelimit+0x10/0x10 [ 297.831162][T10927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.831185][T10927] ? __pfx__printk+0x10/0x10 [ 297.831215][T10927] ? __lock_acquire+0xab9/0xd20 [ 297.831254][T10927] should_fail_ex+0x414/0x560 [ 297.831287][T10927] should_failslab+0xa8/0x100 [ 297.831317][T10927] kmem_cache_alloc_noprof+0x73/0x3c0 [ 297.831342][T10927] ? skb_clone+0x212/0x3a0 [ 297.831372][T10927] skb_clone+0x212/0x3a0 [ 297.831400][T10927] __netlink_deliver_tap+0x404/0x850 [ 297.831441][T10927] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.831464][T10927] netlink_deliver_tap+0x19c/0x1b0 [ 297.831486][T10927] netlink_unicast+0x7fa/0x9e0 [ 297.831525][T10927] ? __pfx_netlink_unicast+0x10/0x10 [ 297.831555][T10927] ? netlink_sendmsg+0x642/0xb30 [ 297.831573][T10927] ? skb_put+0x11b/0x210 [ 297.831598][T10927] netlink_sendmsg+0x805/0xb30 [ 297.831630][T10927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.831655][T10927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.831687][T10927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.831708][T10927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.831730][T10927] __sock_sendmsg+0x219/0x270 [ 297.831761][T10927] ____sys_sendmsg+0x505/0x830 [ 297.831791][T10927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.831824][T10927] ? import_iovec+0x74/0xa0 [ 297.831853][T10927] ___sys_sendmsg+0x21f/0x2a0 [ 297.831879][T10927] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.831967][T10927] ? __fget_files+0x2a/0x420 [ 297.831983][T10927] ? __fget_files+0x3a0/0x420 [ 297.832014][T10927] __x64_sys_sendmsg+0x19b/0x260 [ 297.832041][T10927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.832076][T10927] ? __pfx_ksys_write+0x10/0x10 [ 297.832098][T10927] ? rcu_is_watching+0x15/0xb0 [ 297.832125][T10927] ? do_syscall_64+0xbe/0x3b0 [ 297.832151][T10927] do_syscall_64+0xfa/0x3b0 [ 297.832170][T10927] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.832189][T10927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.832208][T10927] ? clear_bhb_loop+0x60/0xb0 [ 297.832233][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.832251][T10927] RIP: 0033:0x7fbd3058ebe9 [ 297.832269][T10927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.832286][T10927] RSP: 002b:00007fbd3137b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.832308][T10927] RAX: ffffffffffffffda RBX: 00007fbd307c5fa0 RCX: 00007fbd3058ebe9 [ 297.832322][T10927] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000008 [ 297.832335][T10927] RBP: 00007fbd3137b090 R08: 0000000000000000 R09: 0000000000000000 [ 297.832347][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.832358][T10927] R13: 00007fbd307c6038 R14: 00007fbd307c5fa0 R15: 00007ffd96978888 [ 297.832392][T10927] [ 298.356825][T10942] netlink: 'syz.2.1553': attribute type 1 has an invalid length. [ 298.433157][T10948] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1553'. [ 298.478713][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 298.497231][T10950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1557'. [ 298.930053][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 299.161577][T10977] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1565'. [ 299.209095][ C0] net_ratelimit: 3 callbacks suppressed [ 299.209115][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.440997][T10987] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 299.457137][T10986] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1570'. [ 300.249113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.473503][T11022] vxcan1 speed is unknown, defaulting to 1000 [ 301.234589][T11062] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 301.265901][T11062] team0: Device ipvlan1 failed to register rx_handler [ 301.289168][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.570320][T11074] __nla_validate_parse: 3 callbacks suppressed [ 301.570340][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 301.851807][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1601'. [ 301.890256][T11083] netlink: 'syz.2.1601': attribute type 1 has an invalid length. [ 301.908358][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 302.078475][T11022] lo speed is unknown, defaulting to 1000 [ 302.248570][T11089] FAULT_INJECTION: forcing a failure. [ 302.248570][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 302.314795][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.0.1604 Not tainted syzkaller #0 PREEMPT(full) [ 302.314821][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.314831][T11089] Call Trace: [ 302.314839][T11089] [ 302.314847][T11089] dump_stack_lvl+0x189/0x250 [ 302.314876][T11089] ? __pfx____ratelimit+0x10/0x10 [ 302.314895][T11089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.314914][T11089] ? __pfx__printk+0x10/0x10 [ 302.314943][T11089] ? __pfx___might_resched+0x10/0x10 [ 302.314961][T11089] ? fs_reclaim_acquire+0x7d/0x100 [ 302.314995][T11089] should_fail_ex+0x414/0x560 [ 302.315025][T11089] should_failslab+0xa8/0x100 [ 302.315051][T11089] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 302.315078][T11089] ? __alloc_skb+0x112/0x2d0 [ 302.315102][T11089] __alloc_skb+0x112/0x2d0 [ 302.315126][T11089] netlink_ack+0x146/0xa50 [ 302.315142][T11089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.315184][T11089] netlink_rcv_skb+0x28c/0x470 [ 302.315200][T11089] ? __lock_acquire+0xab9/0xd20 [ 302.315224][T11089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.315247][T11089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.315286][T11089] ? down_read+0x1ad/0x2e0 [ 302.315312][T11089] genl_rcv+0x28/0x40 [ 302.315331][T11089] netlink_unicast+0x82f/0x9e0 [ 302.315369][T11089] ? __pfx_netlink_unicast+0x10/0x10 [ 302.315397][T11089] ? netlink_sendmsg+0x642/0xb30 [ 302.315411][T11089] ? skb_put+0x11b/0x210 [ 302.315435][T11089] netlink_sendmsg+0x805/0xb30 [ 302.315467][T11089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.315492][T11089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 302.315511][T11089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.315529][T11089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.315548][T11089] __sock_sendmsg+0x219/0x270 [ 302.315578][T11089] ____sys_sendmsg+0x505/0x830 [ 302.315606][T11089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.315648][T11089] ? import_iovec+0x74/0xa0 [ 302.315675][T11089] ___sys_sendmsg+0x21f/0x2a0 [ 302.315699][T11089] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.315765][T11089] ? __fget_files+0x2a/0x420 [ 302.315781][T11089] ? __fget_files+0x3a0/0x420 [ 302.315810][T11089] __x64_sys_sendmsg+0x19b/0x260 [ 302.315839][T11089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.315873][T11089] ? __pfx_ksys_write+0x10/0x10 [ 302.315895][T11089] ? rcu_is_watching+0x15/0xb0 [ 302.315919][T11089] ? do_syscall_64+0xbe/0x3b0 [ 302.315944][T11089] do_syscall_64+0xfa/0x3b0 [ 302.315962][T11089] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.315979][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.315996][T11089] ? clear_bhb_loop+0x60/0xb0 [ 302.316018][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.316036][T11089] RIP: 0033:0x7fb3a8b8ebe9 [ 302.316054][T11089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.316067][T11089] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.316088][T11089] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 302.316101][T11089] RDX: 0000000000004080 RSI: 0000200000000440 RDI: 0000000000000005 [ 302.316113][T11089] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 302.316124][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.316133][T11089] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 302.316165][T11089] [ 302.379113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.867786][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 302.917515][T11101] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 302.947121][T11101] netlink: 'syz.2.1609': attribute type 1 has an invalid length. [ 302.985140][T11101] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1609'. [ 303.288703][T11118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1614'. [ 303.449122][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.788984][T11135] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1616'. [ 304.058957][T11141] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 304.098930][T11141] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 304.412064][T11150] dummy0: entered promiscuous mode [ 304.428189][T11150] vlan2: entered promiscuous mode [ 304.454302][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'. [ 304.489283][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.557923][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 305.173540][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1637'. [ 305.504210][T11191] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001 [ 305.529147][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.629516][T11179] syzkaller0: entered promiscuous mode [ 305.639199][T11179] syzkaller0: entered allmulticast mode [ 305.656632][T11196] tipc: Enabling of bearer rejected, failed to enable media [ 305.723692][T11199] bond0: entered promiscuous mode [ 305.731180][T11199] ip6gretap0: entered promiscuous mode [ 305.742983][T11199] debugfs: 'hsr1' already exists in 'hsr' [ 305.767630][T11199] Cannot create hsr debugfs directory [ 305.788523][T11199] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 306.579213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.609221][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.803686][T11233] gretap2: entered promiscuous mode [ 308.083895][T11243] __nla_validate_parse: 2 callbacks suppressed [ 308.083916][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 308.131131][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 308.218820][T11243] team0: entered promiscuous mode [ 308.248391][T11243] bridge0: entered promiscuous mode [ 308.271033][T11243] hsr2: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 308.294193][T11243] hsr2: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 308.296896][T11246] IPVS: Scheduler module ip_vs_sip not found [ 308.649139][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.260788][T11293] FAULT_INJECTION: forcing a failure. [ 309.260788][T11293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.274054][T11293] CPU: 1 UID: 0 PID: 11293 Comm: syz.1.1666 Not tainted syzkaller #0 PREEMPT(full) [ 309.274080][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.274091][T11293] Call Trace: [ 309.274099][T11293] [ 309.274106][T11293] dump_stack_lvl+0x189/0x250 [ 309.274135][T11293] ? __pfx____ratelimit+0x10/0x10 [ 309.274156][T11293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.274178][T11293] ? __pfx__printk+0x10/0x10 [ 309.274204][T11293] ? __might_fault+0xb0/0x130 [ 309.274242][T11293] should_fail_ex+0x414/0x560 [ 309.274272][T11293] _copy_from_user+0x2d/0xb0 [ 309.274304][T11293] core_sys_select+0x604/0xa20 [ 309.274345][T11293] ? __pfx_core_sys_select+0x10/0x10 [ 309.274401][T11293] ? __pfx_set_user_sigmask+0x10/0x10 [ 309.274434][T11293] __se_sys_pselect6+0x27a/0x300 [ 309.274468][T11293] ? __pfx___se_sys_pselect6+0x10/0x10 [ 309.274494][T11293] ? __pfx_ksys_write+0x10/0x10 [ 309.274516][T11293] ? rcu_is_watching+0x15/0xb0 [ 309.274539][T11293] ? __x64_sys_pselect6+0x21/0xf0 [ 309.274569][T11293] do_syscall_64+0xfa/0x3b0 [ 309.274587][T11293] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.274605][T11293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.274624][T11293] ? clear_bhb_loop+0x60/0xb0 [ 309.274648][T11293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.274666][T11293] RIP: 0033:0x7fd83538ebe9 [ 309.274684][T11293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.274700][T11293] RSP: 002b:00007fd836299038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 309.274722][T11293] RAX: ffffffffffffffda RBX: 00007fd8355c6090 RCX: 00007fd83538ebe9 [ 309.274735][T11293] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 309.274748][T11293] RBP: 00007fd836299090 R08: 0000000000000000 R09: 0000000000000000 [ 309.274759][T11293] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 309.274771][T11293] R13: 00007fd8355c6128 R14: 00007fd8355c6090 R15: 00007ffcfc26b538 [ 309.274804][T11293] [ 309.689358][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.131214][T11330] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1681'. [ 310.725489][T11349] FAULT_INJECTION: forcing a failure. [ 310.725489][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 310.739263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.777805][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 310.780045][T11349] CPU: 1 UID: 0 PID: 11349 Comm: syz.2.1686 Not tainted syzkaller #0 PREEMPT(full) [ 310.780070][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.780081][T11349] Call Trace: [ 310.780088][T11349] [ 310.780095][T11349] dump_stack_lvl+0x189/0x250 [ 310.780122][T11349] ? __pfx____ratelimit+0x10/0x10 [ 310.780140][T11349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.780160][T11349] ? __pfx__printk+0x10/0x10 [ 310.780189][T11349] ? __pfx___might_resched+0x10/0x10 [ 310.780210][T11349] should_fail_ex+0x414/0x560 [ 310.780238][T11349] should_failslab+0xa8/0x100 [ 310.780263][T11349] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 310.780286][T11349] ? __alloc_skb+0x112/0x2d0 [ 310.780318][T11349] __alloc_skb+0x112/0x2d0 [ 310.780339][T11349] netlink_sendmsg+0x5c6/0xb30 [ 310.780368][T11349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.780389][T11349] ? aa_sock_msg_perm+0xf1/0x1d0 [ 310.780408][T11349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.780426][T11349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.780444][T11349] __sock_sendmsg+0x219/0x270 [ 310.780471][T11349] sock_write_iter+0x258/0x330 [ 310.780495][T11349] ? __pfx_sock_write_iter+0x10/0x10 [ 310.780540][T11349] do_iter_readv_writev+0x61c/0x8b0 [ 310.780569][T11349] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 310.780590][T11349] ? common_file_perm+0x1b5/0x230 [ 310.780610][T11349] ? bpf_lsm_file_permission+0x9/0x20 [ 310.780628][T11349] ? security_file_permission+0x75/0x290 [ 310.780651][T11349] ? rw_verify_area+0x255/0x4d0 [ 310.780676][T11349] vfs_writev+0x31a/0x960 [ 310.780697][T11349] ? __lock_acquire+0xab9/0xd20 [ 310.780722][T11349] ? __pfx_vfs_writev+0x10/0x10 [ 310.780753][T11349] ? __fget_files+0x2a/0x420 [ 310.780773][T11349] ? __fget_files+0x3a0/0x420 [ 310.780786][T11349] ? __fget_files+0x2a/0x420 [ 310.780809][T11349] do_writev+0x14d/0x2d0 [ 310.780829][T11349] ? __pfx_do_writev+0x10/0x10 [ 310.780843][T11349] ? rcu_is_watching+0x15/0xb0 [ 310.780865][T11349] ? do_syscall_64+0xbe/0x3b0 [ 310.780887][T11349] do_syscall_64+0xfa/0x3b0 [ 310.780903][T11349] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.780919][T11349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.780936][T11349] ? clear_bhb_loop+0x60/0xb0 [ 310.780957][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.780972][T11349] RIP: 0033:0x7f4d0a18ebe9 [ 310.780989][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.781003][T11349] RSP: 002b:00007f4d0af97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 310.781024][T11349] RAX: ffffffffffffffda RBX: 00007f4d0a3c5fa0 RCX: 00007f4d0a18ebe9 [ 310.781036][T11349] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 310.781047][T11349] RBP: 00007f4d0af97090 R08: 0000000000000000 R09: 0000000000000000 [ 310.781057][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.781073][T11349] R13: 00007f4d0a3c6038 R14: 00007f4d0a3c5fa0 R15: 00007ffcab9784c8 [ 310.781102][T11349] [ 311.007979][T11362] FAULT_INJECTION: forcing a failure. [ 311.007979][T11362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.113149][T11362] CPU: 0 UID: 0 PID: 11362 Comm: syz.4.1692 Not tainted syzkaller #0 PREEMPT(full) [ 311.113178][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.113189][T11362] Call Trace: [ 311.113197][T11362] [ 311.113205][T11362] dump_stack_lvl+0x189/0x250 [ 311.113235][T11362] ? __pfx____ratelimit+0x10/0x10 [ 311.113255][T11362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.113286][T11362] ? __pfx__printk+0x10/0x10 [ 311.113313][T11362] ? __might_fault+0xb0/0x130 [ 311.113351][T11362] should_fail_ex+0x414/0x560 [ 311.113383][T11362] _copy_from_user+0x2d/0xb0 [ 311.113406][T11362] ___sys_sendmsg+0x158/0x2a0 [ 311.113433][T11362] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.113499][T11362] ? __fget_files+0x2a/0x420 [ 311.113515][T11362] ? __fget_files+0x3a0/0x420 [ 311.113543][T11362] __x64_sys_sendmsg+0x19b/0x260 [ 311.113569][T11362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.113603][T11362] ? __pfx_ksys_write+0x10/0x10 [ 311.113625][T11362] ? rcu_is_watching+0x15/0xb0 [ 311.113650][T11362] ? do_syscall_64+0xbe/0x3b0 [ 311.113675][T11362] do_syscall_64+0xfa/0x3b0 [ 311.113694][T11362] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.113713][T11362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.113732][T11362] ? clear_bhb_loop+0x60/0xb0 [ 311.113755][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.113773][T11362] RIP: 0033:0x7fbd3058ebe9 [ 311.113791][T11362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.113806][T11362] RSP: 002b:00007fbd3135a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.113828][T11362] RAX: ffffffffffffffda RBX: 00007fbd307c6090 RCX: 00007fbd3058ebe9 [ 311.113841][T11362] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 311.113853][T11362] RBP: 00007fbd3135a090 R08: 0000000000000000 R09: 0000000000000000 [ 311.113865][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.113877][T11362] R13: 00007fbd307c6128 R14: 00007fbd307c6090 R15: 00007ffd96978888 [ 311.113910][T11362] [ 311.323957][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 311.339290][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 311.348257][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 311.375402][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 311.413972][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 311.448065][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 311.765364][T11380] netlink: 'syz.1.1697': attribute type 1 has an invalid length. [ 311.779198][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.978275][T11388] gtp1: entered promiscuous mode [ 311.983956][T11388] gtp1: entered allmulticast mode [ 312.385298][T11403] smc: net device bond0 applied user defined pnetid SYZ2 [ 312.393804][T11403] smc: net device bond0 erased user defined pnetid SYZ2 [ 312.609943][T11403] vxcan1 speed is unknown, defaulting to 1000 [ 312.612456][T11410] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 312.809339][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.143322][T11432] geneve2: entered promiscuous mode [ 313.191654][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.227051][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.269808][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.329407][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 313.640010][T11448] __nla_validate_parse: 52 callbacks suppressed [ 313.640032][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'. [ 313.770847][ T30] audit: type=1800 audit(1756849647.381:2): pid=11440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1713" name="cgroup.controllers" dev="tmpfs" ino=1740 res=0 errno=0 [ 313.848237][T11403] lo speed is unknown, defaulting to 1000 [ 313.854170][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.890485][ C1] vcan0: j1939_session_tx_dat: 0xffff8880559e1800: queue data error: -100 [ 314.057535][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1720'. [ 314.081487][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 314.289706][T11461] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.438736][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 314.510075][T11468] veth1_macvtap: left promiscuous mode [ 314.514870][T11471] netlink: 'syz.2.1724': attribute type 8 has an invalid length. [ 314.523694][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 314.561869][T11473] vcan0: tx drop: invalid da for name 0x0000000000000800 [ 314.627290][T11471] bond0: entered promiscuous mode [ 314.632937][T11471] dummy0: entered promiscuous mode [ 314.642830][T11471] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 314.654370][T11471] debugfs: 'hsr2' already exists in 'hsr' [ 314.669530][T11471] Cannot create hsr debugfs directory [ 314.675037][T11471] hsr2: entered promiscuous mode [ 314.790511][T11479] FAULT_INJECTION: forcing a failure. [ 314.790511][T11479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.814995][T11479] CPU: 0 UID: 0 PID: 11479 Comm: syz.0.1727 Not tainted syzkaller #0 PREEMPT(full) [ 314.815024][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.815036][T11479] Call Trace: [ 314.815043][T11479] [ 314.815051][T11479] dump_stack_lvl+0x189/0x250 [ 314.815081][T11479] ? __pfx____ratelimit+0x10/0x10 [ 314.815101][T11479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.815124][T11479] ? __pfx__printk+0x10/0x10 [ 314.815151][T11479] ? __might_fault+0xb0/0x130 [ 314.815188][T11479] should_fail_ex+0x414/0x560 [ 314.815220][T11479] _copy_from_user+0x2d/0xb0 [ 314.815253][T11479] ___sys_recvmsg+0x12e/0x510 [ 314.815285][T11479] ? __pfx____sys_recvmsg+0x10/0x10 [ 314.815337][T11479] ? __fget_files+0x3a0/0x420 [ 314.815367][T11479] __x64_sys_recvmsg+0x198/0x260 [ 314.815394][T11479] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 314.815427][T11479] ? __pfx_ksys_write+0x10/0x10 [ 314.815450][T11479] ? rcu_is_watching+0x15/0xb0 [ 314.815474][T11479] ? do_syscall_64+0xbe/0x3b0 [ 314.815497][T11479] do_syscall_64+0xfa/0x3b0 [ 314.815515][T11479] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.815534][T11479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.815552][T11479] ? clear_bhb_loop+0x60/0xb0 [ 314.815575][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.815593][T11479] RIP: 0033:0x7fb3a8b8ebe9 [ 314.815611][T11479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.815627][T11479] RSP: 002b:00007fb3a9926038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 314.815649][T11479] RAX: ffffffffffffffda RBX: 00007fb3a8dc5fa0 RCX: 00007fb3a8b8ebe9 [ 314.815663][T11479] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 314.815674][T11479] RBP: 00007fb3a9926090 R08: 0000000000000000 R09: 0000000000000000 [ 314.815684][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.815695][T11479] R13: 00007fb3a8dc6038 R14: 00007fb3a8dc5fa0 R15: 00007fff071243f8 [ 314.815728][T11479] [ 315.020031][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.165879][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1731'. [ 315.756235][T11498] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 316.070655][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 316.089102][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.600980][T11530] tipc: Enabling of bearer rejected, already enabled [ 316.947771][T11540] vxcan1 speed is unknown, defaulting to 1000 [ 317.012875][T11550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1751'. [ 317.040105][T11549] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1748'. [ 317.129135][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.303327][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.609301][ C0] [ 317.611677][ C0] ================================ [ 317.616864][ C0] WARNING: inconsistent lock state [ 317.622059][ C0] syzkaller #0 Not tainted [ 317.626466][ C0] -------------------------------- [ 317.631570][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 317.638585][ C0] udevd/5231 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 317.644474][ C0] ffff8880560680a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 317.652922][ C0] {SOFTIRQ-ON-W} state was registered at: [ 317.658632][ C0] lock_acquire+0x120/0x360 [ 317.663231][ C0] _raw_spin_lock+0x2e/0x40 [ 317.667827][ C0] tcf_vlan_init+0x973/0xdc0 [ 317.672501][ C0] tcf_action_init_1+0x463/0x6d0 [ 317.677523][ C0] tcf_action_init+0x2cf/0xab0 [ 317.682371][ C0] tc_ctl_action+0x430/0xbd0 [ 317.687050][ C0] rtnetlink_rcv_msg+0x77c/0xb70 [ 317.692071][ C0] netlink_rcv_skb+0x205/0x470 [ 317.696917][ C0] netlink_unicast+0x82f/0x9e0 [ 317.701768][ C0] netlink_sendmsg+0x805/0xb30 [ 317.706611][ C0] __sock_sendmsg+0x219/0x270 [ 317.711384][ C0] ____sys_sendmsg+0x505/0x830 [ 317.716260][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 317.721027][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 317.726055][ C0] do_syscall_64+0xfa/0x3b0 [ 317.730658][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.736636][ C0] irq event stamp: 6193708 [ 317.741046][ C0] hardirqs last enabled at (6193708): [] _raw_spin_unlock_irq+0x23/0x50 [ 317.751025][ C0] hardirqs last disabled at (6193707): [] _raw_spin_lock_irq+0x7d/0xf0 [ 317.760920][ C0] softirqs last enabled at (6188356): [] __irq_exit_rcu+0xca/0x1f0 [ 317.770461][ C0] softirqs last disabled at (6193705): [] __irq_exit_rcu+0xca/0x1f0 [ 317.780091][ C0] [ 317.780091][ C0] other info that might help us debug this: [ 317.788141][ C0] Possible unsafe locking scenario: [ 317.788141][ C0] [ 317.795583][ C0] CPU0 [ 317.798858][ C0] ---- [ 317.802184][ C0] lock(&p->tcfa_lock); [ 317.806436][ C0] [ 317.809887][ C0] lock(&p->tcfa_lock); [ 317.814299][ C0] [ 317.814299][ C0] *** DEADLOCK *** [ 317.814299][ C0] [ 317.822440][ C0] 2 locks held by udevd/5231: [ 317.827110][ C0] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kernfs_root+0x1c/0x230 [ 317.836159][ C0] #1: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 317.845497][ C0] [ 317.845497][ C0] stack backtrace: [ 317.851379][ C0] CPU: 0 UID: 0 PID: 5231 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 317.851396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.851405][ C0] Call Trace: [ 317.851411][ C0] [ 317.851417][ C0] dump_stack_lvl+0x189/0x250 [ 317.851436][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.851451][ C0] ? __pfx__printk+0x10/0x10 [ 317.851471][ C0] ? print_lock_name+0xde/0x100 [ 317.851490][ C0] print_usage_bug+0x297/0x2e0 [ 317.851504][ C0] valid_state+0xc3/0xf0 [ 317.851517][ C0] mark_lock_irq+0x36/0x390 [ 317.851530][ C0] ? __kernel_text_address+0xd/0x40 [ 317.851548][ C0] ? unwind_get_return_address+0x4d/0x90 [ 317.851566][ C0] mark_lock+0x11b/0x190 [ 317.851579][ C0] __lock_acquire+0x680/0xd20 [ 317.851600][ C0] ? est_timer+0xd4/0x9f0 [ 317.851618][ C0] lock_acquire+0x120/0x360 [ 317.851636][ C0] ? est_timer+0xd4/0x9f0 [ 317.851656][ C0] ? lockdep_unlock+0x89/0x120 [ 317.851674][ C0] _raw_spin_lock+0x2e/0x40 [ 317.851693][ C0] ? est_timer+0xd4/0x9f0 [ 317.851711][ C0] est_timer+0xd4/0x9f0 [ 317.851730][ C0] ? call_timer_fn+0xbe/0x5f0 [ 317.851749][ C0] ? call_timer_fn+0xbe/0x5f0 [ 317.851766][ C0] ? __pfx_est_timer+0x10/0x10 [ 317.851788][ C0] call_timer_fn+0x17e/0x5f0 [ 317.851805][ C0] ? __pfx_est_timer+0x10/0x10 [ 317.851823][ C0] ? call_timer_fn+0xbe/0x5f0 [ 317.851841][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 317.851862][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.851881][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.851894][ C0] ? __pfx_est_timer+0x10/0x10 [ 317.851913][ C0] __run_timer_base+0x61a/0x860 [ 317.851929][ C0] ? ktime_get+0x3e/0x1f0 [ 317.851947][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 317.851963][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 317.851984][ C0] run_timer_softirq+0xb7/0x180 [ 317.852001][ C0] handle_softirqs+0x283/0x870 [ 317.852016][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 317.852031][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 317.852046][ C0] __irq_exit_rcu+0xca/0x1f0 [ 317.852059][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 317.852074][ C0] irq_exit_rcu+0x9/0x30 [ 317.852086][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 317.852107][ C0] [ 317.852111][ C0] [ 317.852117][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.852131][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 317.852151][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 44 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 317.852163][ C0] RSP: 0018:ffffc90003067960 EFLAGS: 00000206 [ 317.852176][ C0] RAX: 3bb2a08a741c8900 RBX: 0000000000000000 RCX: 3bb2a08a741c8900 [ 317.852186][ C0] RDX: 0000000000000001 RSI: ffffffff8dba89e1 RDI: ffffffff8be33800 [ 317.852196][ C0] RBP: ffffffff825d1e1c R08: 0000000000000000 R09: ffffffff825d1e1c [ 317.852206][ C0] R10: ffff88801bea6aa0 R11: ffffffff825d3190 R12: 0000000000000002 [ 317.852222][ C0] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 317.852232][ C0] ? kernfs_root+0x1c/0x230 [ 317.852245][ C0] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 317.852260][ C0] ? kernfs_root+0x1c/0x230 [ 317.852277][ C0] ? step_into+0x435/0xf30 [ 317.852290][ C0] ? kernfs_root+0x1c/0x230 [ 317.852303][ C0] kernfs_root+0x38/0x230 [ 317.852316][ C0] ? kernfs_root+0x1c/0x230 [ 317.852329][ C0] kernfs_iop_permission+0x6c/0x430 [ 317.852343][ C0] ? __pfx_step_into+0x10/0x10 [ 317.852356][ C0] inode_permission+0x285/0x470 [ 317.852369][ C0] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 317.852385][ C0] link_path_walk+0x232/0xea0 [ 317.852403][ C0] path_lookupat+0x97/0x430 [ 317.852419][ C0] filename_lookup+0x212/0x570 [ 317.852432][ C0] ? __lock_acquire+0xab9/0xd20 [ 317.852452][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 317.852473][ C0] ? strncpy_from_user+0x150/0x290 [ 317.852492][ C0] ? getname_flags+0x1e5/0x540 [ 317.852505][ C0] do_readlinkat+0xd9/0x500 [ 317.852521][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 317.852539][ C0] __x64_sys_readlink+0x7f/0x90 [ 317.852554][ C0] do_syscall_64+0xfa/0x3b0 [ 317.852569][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.852582][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.852595][ C0] ? clear_bhb_loop+0x60/0xb0 [ 317.852637][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.852650][ C0] RIP: 0033:0x7ff306b153a7 [ 317.852663][ C0] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 317.852674][ C0] RSP: 002b:00007ffe6cbd4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 317.852688][ C0] RAX: ffffffffffffffda RBX: 00007ffe6cbd4530 RCX: 00007ff306b153a7 [ 317.852698][ C0] RDX: 0000000000000400 RSI: 00007ffe6cbd4060 RDI: 00007ffe6cbd4530 [ 317.852708][ C0] RBP: 00007ffe6cbd4060 R08: 00005596e2299524 R09: 0000000000000001 [ 317.852717][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 317.852726][ C0] R13: 00000000000000fe R14: 00005596dc451be0 R15: 00007ffe6cbd5030 [ 317.852740][ C0] [ 318.359667][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.426016][T11570] vxcan1 speed is unknown, defaulting to 1000 [ 318.426085][T11540] lo speed is unknown, defaulting to 1000 [ 318.615110][T11570] lo speed is unknown, defaulting to 1000 [ 318.615136][T11551] vxcan1 speed is unknown, defaulting to 1000 [ 318.734199][T11551] lo speed is unknown, defaulting to 1000 [ 319.379111][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.409569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.449102][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.489146][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.529148][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.569123][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.609193][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.649216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available