last executing test programs: 6m38.805143878s ago: executing program 3 (id=4009): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRESHEX=0x0, @ANYBLOB="000000001028000028001280090001007665746800000000180002801400010000000000", @ANYRESDEC], 0x48}}, 0x0) (async) close(r0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="088de2246c1dec2775460c759af7606cb5cc4080af7d2a6f0aeaf6a796f1c958bbe18c4cc31e47834e4156af869e3ac76498b8efc54ec55041f3505518e4ea43207d255959f81ea14ae13d9894293156d5511ec8a4f8f0cbac994638197bce1279406e2dd3867cb03eb00895132a376320c03e3db49a4a49c7033a99bbd329f1e84fb3015a3357d01ff84a3637de1822ea6d110eba484eab93e8802a5a3f137d84f136c0c41ad0432c4f68c68fddc692ff989372394a238600182b29a662d8074ef4e6a5ca2cb6b8", &(0x7f0000000180)=""/176, &(0x7f0000000280)="76c585100b3c9c2c8c5492753c5d57de4c477c64264809d52890cf5ddf39bb4ded09a943f66ed1cc6fb6b37471b3d1054d3ea93be61b09617ee7b02cb1469b6cad9961b93d3f0b712a3ea726a5de14e911eeedfa7dfaf8de46dfbc0df4fe219f9846b563740d1999c1d9719a587db5a3d74180398f3677edc660e7e9778873ffde260a26997c8e5cc5a17cccf1037a1cef0feaf56a1b00f619c5f7c539f11fbdf98736e971cdbfde28c72262949bfbb437cc42c7cc89b2724959ffaf8b66e494000b7a0a6511f9fe56362bd9eecf5e997a2ebca694d10d43115b17cfc17d0e75602128da550383df1646a849ea24fa74a78d7a0fc2", &(0x7f0000000580)="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", 0x7f, 0x1, 0x4}, 0x38) 6m38.531678319s ago: executing program 3 (id=4015): r0 = socket(0x2a, 0x2, 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x34}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6m38.388614819s ago: executing program 3 (id=4019): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="42210101"], 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000042c0000000e0a010200000000000000000100000009000200ffffff7f000000000900010073797a30"], 0xb8}}, 0x24004014) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltaction={0x68, 0x31, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f9f292e}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc040841}, 0x10001) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x3, 0x3}, {}, {}, {0x60}, {0x6}]}) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1000}) 6m38.084896817s ago: executing program 3 (id=4025): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000180071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5m43.41218867s ago: executing program 3 (id=4028): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000800fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5m43.411086687s ago: executing program 3 (id=4031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m43.409972381s ago: executing program 32 (id=4031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m31.384913466s ago: executing program 2 (id=5219): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x1}, 0x18) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60000800) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x200000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0xff80000}}}}}, 0x0) 3m31.264448671s ago: executing program 1 (id=5222): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0xa888) 3m31.170677002s ago: executing program 1 (id=5224): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r1, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x78, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x10001, [0x7fff, 0x791, 0xfffeffff]}}]}, 0x78}}, 0x5) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001040010000000000000000000000000a58000000090a0104000000000000000001000002080007400000000d08000640ffffff000900010073797a3000000000080005400000001c100011800a000100726564697200000008000340000000880800084000000000140000001000010000000000000000000184000a"], 0x80}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180), 0x4) (async) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) connect$unix(r5, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00'/17, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f00000001c0)=0x3) (async) ioctl(r7, 0x8b22, &(0x7f0000000040)) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000200)) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x4, 0x3ef4, 0x69}, 0x2c) 3m31.035883635s ago: executing program 4 (id=5225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xfffffffd, 0xfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 3m31.035531946s ago: executing program 2 (id=5226): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xfffbffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) (fail_nth: 12) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, 0x0, &(0x7f0000000040)) 3m30.923421969s ago: executing program 1 (id=5227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x30}, 0x18) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x75a4d987d4faa722, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002f40)={@cgroup, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002f00)=[0x0], 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002f80)={@map, 0xffffffffffffffff, 0x1c, 0x2006, 0xffffffffffffffff, @value, @void, @void, @void, r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) sendto(r6, &(0x7f0000000400)="14a033529f7b678b83f5c9c828a04e129f2ec938926e79bfa6e1c7f3810c9f5082e2aa219e728a008e1227a0e50f13fc25b0824eb0570c838cb5d7b8d50ce7faf76f5814f2a1d7202802ec78f51802662ba8a53bdbf09b09eb34e8737f79717d17b3bc86691e477f113875ec7e3b27ab72fb6fb7e5eac0348eaa1fde457867e53c6c803ad06084286cdc8f58842f806c5f41b900f1bfa0a6faeb9c4a1d53d51d9b6c8e765bf63805b2b0cfb0596f74f2b770be882e17d218261c22507c0c064b7d4accf19e8ccef62ef2b314ff8fa7723d4e5f8ced1cc989d72f32e40a0747e7c53a4eca67479cbc9c08429fb3fc3211", 0xf0, 0x4, &(0x7f0000000300)=@phonet={0x23, 0x3, 0x0, 0x1}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=0x1, r1, 0x17, 0x4, r2, @void, @value=r5, @void, @void, r3}, 0x20) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/15, 0xf}], 0x1}, 0x40010102) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x9}, 0x8) 3m30.907453198s ago: executing program 0 (id=5228): r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x103e, 0x107, 0x70bd2d, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x3400c084) 3m30.716412052s ago: executing program 0 (id=5229): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 3m30.715950838s ago: executing program 4 (id=5230): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000600)={0x0, 0xc4, "c4f7af5be7547a3d2897cd5d64d650ac36c0d61c3a95c967d3e27f5d18022b1f276a8cbda3eb8dd57d825de444b02f687bcdd2fa164844988fe3d8b9f24bb05d9e8702bff83b7fd42affb31888b074dd98d5e1c999e9eb32cf9a814599b8fd3e1fecff300db94d1477658284a9a6b8604d3bd89e2074c6614a063b7952d005712f593302049d6fc7ef44f1c986fbec9a4a76e1948b9339693bb4dfc950a234c71604c485b1a84fdd1da57454e62ea449a21c0dc661fc7e173fb40a5ee51ea15c8d0002a5"}, &(0x7f0000000100)=0xcc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r7, 0x0, 0x4}, 0x8) sendmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93f", 0x1f}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="010000b9da000300e8d48dc2cd08c94ae4927394b13813d05d281f18dc1abd31d09ec1473c0bd0cb9dcdefece0e128914a9808b6aec3234380e01594024f62fdfc0a6f6775cbaa5474998639f6905e76a8ba031d8d3c41412ab332f56428d8e04e42bc773681c584bf2b763c66f818f0c02be514c08e867da15d91cf0c609016c6b9ae473d8fe3559b943c89ff87aedcee8bb3e50ea8a8e07a8e43b00f209a00"/170], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m30.388833324s ago: executing program 4 (id=5233): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340)={0x1}, 0x8) close(r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0xf, @broadcast}]}}}]}, 0x3c}, 0x1, 0xff7f}, 0x0) 3m30.300828535s ago: executing program 1 (id=5234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x8, 0x8, 0x0, @private1, @mcast1, 0x10, 0x87a8, 0xffffffff, 0x3a86}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x505, {{0x7, 0x4, 0x3, 0x3a, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @broadcast, @broadcast, {[@noop, @rr={0x7, 0x7, 0xec, [@remote]}]}}}}}) r12 = socket$rds(0x15, 0x5, 0x0) getpeername(r12, &(0x7f0000000f00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f0000000f80)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x2, 0x9, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x7800, 0x20, 0x5, 0x20}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x67, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) r19 = socket$packet(0x11, 0x3, 0x300) r20 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r20, &(0x7f0000000000)="0b031200e0ff64000200475400f6a13bb10000", 0x13, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r21, 0x1, 0x3}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000900)={0x56c, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff801}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x0, 0x2, 0x9}, {0x5, 0x8, 0x0, 0xdc7}, {0xfff7, 0x4, 0x4, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x2b, 0x6, 0x8001}, {0x0, 0x5, 0x77, 0x400}, {0x9, 0xbe, 0xee, 0x1}, {0x2, 0x8, 0x3, 0xa}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x14}, 0x20040057) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) 3m30.255866527s ago: executing program 2 (id=5235): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0030002d00210000000000000000000400008008000c00"], 0x1c}], 0x1}, 0x0) 3m30.2553679s ago: executing program 4 (id=5236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x15c, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "3cadf0c3acda6bce0c2beefce9500e3464361f12cbaa939445f0e28bc7584c35d202b9c66f7704d3a57c67f441b1f6553c0dac6bd1ac2198315c86a5083ca25e979c390114c8faa10ccf3ab2fdf0f99f8fba4ac25b715719834c58204f702456615a2825d49d6d758dc25fcfe8b3e606b975fac6132723c4f3401865a124aa3e9edc4f7ee06f"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "4c5a7f775349220dd99166bc160719376acbc25595e057d80fb7b46fa8cb7622b543"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0xc4}, 0x20002041) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r8 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r8, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000640)="e39468c5e2f9bd9581ba2e2bf70dc405b543ba9a2ea5e9f1ea0f2e26c91b89b7b5b1c740c761cb89098970471d4baefb16800f29aed979bc67716d27fb2b283d2dc266c559780f24eca2b30adbfcc5e05241c6caf2994c2f4c75fb1780bf065312ae385dbd25095d3ab58b05d534928ca0fbb9af8088134d22b8d84bb9b0e8d392254b54c381b54e3ef2f261f905d92329543fba977342e526ff9289d8c28fe248253fac28abf573d1a03cdf058aecdba847f20a30e7afac3569a4446be144fd7d0b82ded480f5973fd4fc9acb21086173995bd051260e0b92c86e7a2cd2c8a545ed488dbe06c56bf20728160fe390ff96322889fc10153bfa92c11909b7d3bd0507aecc3d98ac6a4191c5deadd493160e921c3d5ff131c2c1b188bc8522a61d899e92c953e37259f4672adb4dc94db279b08715e36f2b7a21ddb6e22d8e7d4615d59323703dcab81069d61c4ad081eefde1b055c386ce9756b73637dda717c97e6afad5cd84e2ed5a29b85b25eaf104b833f1c02faf6b93e340961aedf7cc0e20d5b6883b5d396698ac5b21632971d52311e92a0ef4040340b2546da3e73bd4bd3a23b7c09f68c63632ef7ef478f87b824104ee26860297add6754ba8a01a0c12bef8293d3d53057025804581b0dbd9492a77e5c467eb5f0c891af84299318c8e96959c47bfee27e751e191046387bd22c7901adef425ad24438a6af61b170374", 0x201}], 0x1}}], 0x1, 0x4000040) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r10, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r11, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 3m30.195729438s ago: executing program 0 (id=5238): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809ef5300fff5dd00000010000100080c1000ff00000000000000", 0x58}], 0x1) 3m30.075857618s ago: executing program 2 (id=5239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x6c00, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) 3m30.075167176s ago: executing program 0 (id=5240): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 3m29.951534593s ago: executing program 0 (id=5241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c00}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x71}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) 3m29.861268255s ago: executing program 2 (id=5242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c8c4}, 0xc0) 3m29.815773508s ago: executing program 4 (id=5243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa6000000a6ffffff08000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) socket$nl_generic(0x10, 0x3, 0x10) 3m29.639478784s ago: executing program 1 (id=5244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="ceeb188652dfdace18728fa6babc0e8643f489b242e8ca2585d44f331b0b9c39fd7c920480c7e858bd6a7312052505e58a89fd250f0cf29543d7d8f776cbf680e87ebf127cf8f8e68f524f0a645cfda68efc828497a757fae415fb1e4a5983d336f84a42519c217813f2682aa77f93a5b15907b77cb2f9d43cef", 0x7a}, {&(0x7f00000001c0)="11f553b885ab5312558c1c565c590d417207e6788e0a81c6f805064eb76a6d22ae88039f715fb7b3f8ee199b845f63d525667d705a32ec1005efc3c12c07d580bf5bc47b6a4bbfe64ec737f1871df759e6c848461cb7f9c2f0aba4e4b599bd8f9c926818d9b7bf3924606a86372b40fa13e0206e7c5da24cfc9d91d0e81d526e457cea84d13e2c68e4db582327a51d3e518978738a67ab1c0dc8881dae0059b5312ab540d4a62f4e90f49b99c882", 0xae}, {&(0x7f0000000000)="203c6c501c0d6b0c4add22", 0xb}], 0x3, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0xc9}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x30}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/15, 0xf}], 0x1}, 0x40010102) 3m29.604591627s ago: executing program 0 (id=5245): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x8000000) 3m28.927760664s ago: executing program 33 (id=5245): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x8000000) 3m28.883596004s ago: executing program 1 (id=5247): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000480), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8943, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) unshare(0x22020600) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) read(r6, &(0x7f0000000080)=""/186, 0xba) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 3m28.413329204s ago: executing program 34 (id=5247): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000480), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8943, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) unshare(0x22020600) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) read(r6, &(0x7f0000000080)=""/186, 0xba) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000002c0)) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 3m28.392318286s ago: executing program 2 (id=5248): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 3m28.392081571s ago: executing program 35 (id=5248): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 3m28.384835781s ago: executing program 4 (id=5250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1407, 0x304, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4044000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x2, 0x6, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xdb, 0x8, "319bd2464caee4e078dda61b1a3818d43b0d0ace3c902125962fc46012d653109ccc0f6b2be6ee74a41abebcc9fcc12161197412cf6573417dda0cb6906080087f090526ed4f9c642113e6bfeed2c5f525cacc0700eadd09340d84187115b874740fcbf133d1f54847d67b8d1c7b15b0ef1ef4353683dba79d3ff2e52f1aad573e76076c1190e59f839d43c70d0b4431c3cbc191bdc5735dcbc80c5d7c1ab7f5302971d75cfa6b3324cfaea4094917ab3a91dc8c95daac8e992ac18c8e4692f0e5b0eb9ef9ce1ee68a79d9cfcbbee071410d53f2d44af8"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x9, 0xb, 0x3c, 0x101}]}, 0x10) close(r1) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa8, r5, 0x120, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004090}, 0x30004040) r8 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000880)={{0x3, @bcast}, [@null, @null, @remote, @bcast, @null, @default, @null, @default]}, &(0x7f0000000900)=0x48, 0x0) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000005800)=[{{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000001c00)=[{&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/245, 0xf5}, {&(0x7f0000001b80)=""/125, 0x7d}], 0x5, &(0x7f0000001c80)=""/188, 0xbc}, 0x1}, {{&(0x7f0000001d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)=""/124, 0x7c}], 0x1, &(0x7f0000001e80)=""/188, 0xbc}, 0x7ff}, {{&(0x7f0000001f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003000)=""/189, 0xbd}, 0x8}, {{&(0x7f00000030c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003140)=""/20, 0x14}, {&(0x7f0000003180)=""/169, 0xa9}], 0x2, &(0x7f0000003280)=""/219, 0xdb}, 0x4}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003380)=""/44, 0x2c}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000005440)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005780)=[{&(0x7f00000054c0)}, {&(0x7f0000005500)=""/46, 0x2e}, {&(0x7f0000005540)=""/241, 0xf1}, {&(0x7f0000005640)=""/13, 0xd}, {&(0x7f0000005680)=""/239, 0xef}], 0x5}, 0xfff}], 0x6, 0x120, &(0x7f00000059c0)={r9, r10+60000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000005a00)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005a80), r11) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f0000005bc0)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0xf5009f31f272fd82}, 0xc, &(0x7f0000005b80)={&(0x7f0000005ac0)={0xac, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb827}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xea}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}]}, 0xac}}, 0x20004040) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005fc0)={0x11, 0x23, &(0x7f0000005c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xd6}, {}, {}, [@call={0x85, 0x0, 0x0, 0xbc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000005d80)='syzkaller\x00', 0x0, 0x84, &(0x7f0000005dc0)=""/132, 0x41100, 0x4, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000005e80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000005ec0)={0x5, 0x2, 0x100, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000005f00)=[0xffffffffffffffff], &(0x7f0000005f40)=[{0x4, 0x4, 0xc, 0xb}, {0x4, 0x3, 0xd, 0x9}, {0x4, 0x5, 0xd, 0x4}, {0x3, 0x3, 0x5, 0x4}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x3, 0x3, 0x7}, {0x2, 0x4, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006080)={&(0x7f0000005c00)='ext4_es_find_extent_range_exit\x00', r14, 0x0, 0x6}, 0x18) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006100), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r15, &(0x7f00000061c0)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006180)={&(0x7f0000006140)={0x14, r16, 0x20, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) ioctl$SIOCPNGETOBJECT(r11, 0x89e0, &(0x7f0000006200)=0x616) recvmmsg(r11, &(0x7f0000006a00)=[{{&(0x7f0000006240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006300)=[{&(0x7f00000062c0)=""/58, 0x3a}], 0x1, &(0x7f0000006340)=""/50, 0x32}, 0x2}, {{&(0x7f0000006380)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000006500)=[{&(0x7f0000006400)=""/84, 0x54}, {&(0x7f0000006480)=""/120, 0x78}], 0x2, &(0x7f0000006540)=""/122, 0x7a}, 0x80000000}, {{&(0x7f00000065c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006640)=""/213, 0xd5}, {&(0x7f0000006740)=""/43, 0x2b}, {&(0x7f0000006780)=""/84, 0x54}, {&(0x7f0000006800)=""/156, 0x9c}, {&(0x7f00000068c0)=""/52, 0x34}], 0x5, &(0x7f0000006980)=""/88, 0x58}, 0x7f}], 0x3, 0x100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r17, 0x400448c8, &(0x7f0000006b40)={r12, r0, 0x633, 0x53, &(0x7f0000006ac0)="b06eb9f138fadfd0ad26473cdae4b4c1e5b33c76be07005527866b481ed724143bb47c1b6fbcc2b302bf9ecde7af954025fedb4095717f184f374e2b5838c7e792943f180f0feddca16ba0b3d67596016863fb", 0x10, 0xe2, 0x800, 0x0, 0x7, 0x1, 0xfffffffa, 'syz0\x00'}) 3m28.383426588s ago: executing program 36 (id=5250): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1407, 0x304, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4044000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x2, 0x6, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xdb, 0x8, "319bd2464caee4e078dda61b1a3818d43b0d0ace3c902125962fc46012d653109ccc0f6b2be6ee74a41abebcc9fcc12161197412cf6573417dda0cb6906080087f090526ed4f9c642113e6bfeed2c5f525cacc0700eadd09340d84187115b874740fcbf133d1f54847d67b8d1c7b15b0ef1ef4353683dba79d3ff2e52f1aad573e76076c1190e59f839d43c70d0b4431c3cbc191bdc5735dcbc80c5d7c1ab7f5302971d75cfa6b3324cfaea4094917ab3a91dc8c95daac8e992ac18c8e4692f0e5b0eb9ef9ce1ee68a79d9cfcbbee071410d53f2d44af8"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x9, 0xb, 0x3c, 0x101}]}, 0x10) close(r1) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa8, r5, 0x120, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004090}, 0x30004040) r8 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000880)={{0x3, @bcast}, [@null, @null, @remote, @bcast, @null, @default, @null, @default]}, &(0x7f0000000900)=0x48, 0x0) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000005800)=[{{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000001c00)=[{&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/245, 0xf5}, {&(0x7f0000001b80)=""/125, 0x7d}], 0x5, &(0x7f0000001c80)=""/188, 0xbc}, 0x1}, {{&(0x7f0000001d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)=""/124, 0x7c}], 0x1, &(0x7f0000001e80)=""/188, 0xbc}, 0x7ff}, {{&(0x7f0000001f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003000)=""/189, 0xbd}, 0x8}, {{&(0x7f00000030c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003140)=""/20, 0x14}, {&(0x7f0000003180)=""/169, 0xa9}], 0x2, &(0x7f0000003280)=""/219, 0xdb}, 0x4}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003380)=""/44, 0x2c}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000005440)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005780)=[{&(0x7f00000054c0)}, {&(0x7f0000005500)=""/46, 0x2e}, {&(0x7f0000005540)=""/241, 0xf1}, {&(0x7f0000005640)=""/13, 0xd}, {&(0x7f0000005680)=""/239, 0xef}], 0x5}, 0xfff}], 0x6, 0x120, &(0x7f00000059c0)={r9, r10+60000000}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000005a00)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005a80), r11) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f0000005bc0)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0xf5009f31f272fd82}, 0xc, &(0x7f0000005b80)={&(0x7f0000005ac0)={0xac, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb827}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xea}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}]}, 0xac}}, 0x20004040) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005fc0)={0x11, 0x23, &(0x7f0000005c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xd6}, {}, {}, [@call={0x85, 0x0, 0x0, 0xbc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf33}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000005d80)='syzkaller\x00', 0x0, 0x84, &(0x7f0000005dc0)=""/132, 0x41100, 0x4, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000005e80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000005ec0)={0x5, 0x2, 0x100, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000005f00)=[0xffffffffffffffff], &(0x7f0000005f40)=[{0x4, 0x4, 0xc, 0xb}, {0x4, 0x3, 0xd, 0x9}, {0x4, 0x5, 0xd, 0x4}, {0x3, 0x3, 0x5, 0x4}, {0x3, 0x2, 0xd, 0x1}, {0x2, 0x3, 0x3, 0x7}, {0x2, 0x4, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006080)={&(0x7f0000005c00)='ext4_es_find_extent_range_exit\x00', r14, 0x0, 0x6}, 0x18) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006100), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r15, &(0x7f00000061c0)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006180)={&(0x7f0000006140)={0x14, r16, 0x20, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) ioctl$SIOCPNGETOBJECT(r11, 0x89e0, &(0x7f0000006200)=0x616) recvmmsg(r11, &(0x7f0000006a00)=[{{&(0x7f0000006240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006300)=[{&(0x7f00000062c0)=""/58, 0x3a}], 0x1, &(0x7f0000006340)=""/50, 0x32}, 0x2}, {{&(0x7f0000006380)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000006500)=[{&(0x7f0000006400)=""/84, 0x54}, {&(0x7f0000006480)=""/120, 0x78}], 0x2, &(0x7f0000006540)=""/122, 0x7a}, 0x80000000}, {{&(0x7f00000065c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006640)=""/213, 0xd5}, {&(0x7f0000006740)=""/43, 0x2b}, {&(0x7f0000006780)=""/84, 0x54}, {&(0x7f0000006800)=""/156, 0x9c}, {&(0x7f00000068c0)=""/52, 0x34}], 0x5, &(0x7f0000006980)=""/88, 0x58}, 0x7f}], 0x3, 0x100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r17, 0x400448c8, &(0x7f0000006b40)={r12, r0, 0x633, 0x53, &(0x7f0000006ac0)="b06eb9f138fadfd0ad26473cdae4b4c1e5b33c76be07005527866b481ed724143bb47c1b6fbcc2b302bf9ecde7af954025fedb4095717f184f374e2b5838c7e792943f180f0feddca16ba0b3d67596016863fb", 0x10, 0xe2, 0x800, 0x0, 0x7, 0x1, 0xfffffffa, 'syz0\x00'}) 2.130801828s ago: executing program 8 (id=7742): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x90e}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4040804) 1.851787616s ago: executing program 8 (id=7745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 1.755669045s ago: executing program 8 (id=7748): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x26, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.631614519s ago: executing program 8 (id=7750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) shutdown(r2, 0x1) 1.530880549s ago: executing program 5 (id=7752): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r2, 0x1, 0xfe, 0x6, @multicast}, 0x14) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='I', 0x1}], 0x1) 1.449112371s ago: executing program 5 (id=7754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x470bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40) close(r3) 1.423622696s ago: executing program 6 (id=7755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) 1.233772923s ago: executing program 6 (id=7758): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010101}, 0xc) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r2, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1=0xe0000808}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}}}}}}}, 0x0) 1.210665362s ago: executing program 5 (id=7759): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60}]}) 1.147919599s ago: executing program 7 (id=7760): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df7", 0x34, 0x0, &(0x7f0000000040)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.052500967s ago: executing program 6 (id=7761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.036749379s ago: executing program 5 (id=7762): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 999.319044ms ago: executing program 7 (id=7763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 915.433097ms ago: executing program 6 (id=7764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x9, r0}, 0x38) 907.171142ms ago: executing program 9 (id=7765): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 803.140953ms ago: executing program 6 (id=7766): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000204850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8", 0x1}], 0x1}, 0x0) 802.959271ms ago: executing program 9 (id=7767): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)="17460081", 0x4}], 0x1}}], 0x1, 0x4004040) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 787.191205ms ago: executing program 9 (id=7768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x820}, 0x4) 698.499411ms ago: executing program 8 (id=7769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='qdisc_dequeue\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 698.086837ms ago: executing program 7 (id=7770): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000300)="a90500040000746400009e150451162300297564c6ca0069328af17086d1e1c3b4f9e08ae85559d5076071f24d1be6a473d2", 0x32}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="5825be57aff9352b356be67ca2746357d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) 635.772974ms ago: executing program 9 (id=7771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2580, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 624.223595ms ago: executing program 5 (id=7772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 558.074767ms ago: executing program 7 (id=7773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000003fffffff}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) 490.455104ms ago: executing program 8 (id=7774): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) 231.344691ms ago: executing program 7 (id=7775): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000980)=0xfffffffb, 0x4) 190.833835ms ago: executing program 6 (id=7776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) 174.849484ms ago: executing program 5 (id=7777): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) 143.603824ms ago: executing program 9 (id=7778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) 27.683715ms ago: executing program 7 (id=7779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) 0s ago: executing program 9 (id=7780): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47d0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) kernel console output (not intermixed with test programs): 25284] Call Trace: [ 700.899359][T25284] [ 700.899370][T25284] dump_stack_lvl+0x189/0x250 [ 700.899402][T25284] ? __pfx____ratelimit+0x10/0x10 [ 700.899426][T25284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.899451][T25284] ? __pfx__printk+0x10/0x10 [ 700.899497][T25284] should_fail_ex+0x414/0x560 [ 700.899536][T25284] _copy_to_user+0x31/0xb0 [ 700.899567][T25284] simple_read_from_buffer+0xe1/0x170 [ 700.899604][T25284] proc_fail_nth_read+0x1b3/0x220 [ 700.899633][T25284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 700.899661][T25284] ? rw_verify_area+0x2a6/0x4d0 [ 700.899687][T25284] ? __lock_acquire+0xab9/0xd20 [ 700.899716][T25284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 700.899742][T25284] vfs_read+0x200/0xa30 [ 700.899767][T25284] ? fdget_pos+0x247/0x320 [ 700.899791][T25284] ? __pfx___mutex_lock+0x10/0x10 [ 700.899817][T25284] ? __pfx_vfs_read+0x10/0x10 [ 700.899844][T25284] ? __fget_files+0x2a/0x420 [ 700.899869][T25284] ? __fget_files+0x3a0/0x420 [ 700.899887][T25284] ? __fget_files+0x2a/0x420 [ 700.899918][T25284] ksys_read+0x145/0x250 [ 700.899949][T25284] ? __pfx_ksys_read+0x10/0x10 [ 700.899972][T25284] ? rcu_is_watching+0x15/0xb0 [ 700.900002][T25284] ? do_syscall_64+0xbe/0x3b0 [ 700.900030][T25284] do_syscall_64+0xfa/0x3b0 [ 700.900051][T25284] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.900071][T25284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.900101][T25284] ? clear_bhb_loop+0x60/0xb0 [ 700.900128][T25284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.900148][T25284] RIP: 0033:0x7f6a9718d5bc [ 700.900168][T25284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 700.900187][T25284] RSP: 002b:00007f6a980d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 700.900211][T25284] RAX: ffffffffffffffda RBX: 00007f6a973d5fa0 RCX: 00007f6a9718d5bc [ 700.900226][T25284] RDX: 000000000000000f RSI: 00007f6a980d70a0 RDI: 0000000000000004 [ 700.900239][T25284] RBP: 00007f6a980d7090 R08: 0000000000000000 R09: 0000000000000000 [ 700.900252][T25284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 700.900265][T25284] R13: 00007f6a973d6038 R14: 00007f6a973d5fa0 R15: 00007ffdf13f0ce8 [ 700.900301][T25284] [ 701.266582][T25296] veth3: entered promiscuous mode [ 701.476823][T25314] openvswitch: netlink: Invalid VLAN frame [ 701.797643][T25328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6472'. [ 702.292665][T25342] veth5: entered promiscuous mode [ 702.470272][T25350] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.6481'. [ 702.661161][T25363] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6484'. [ 702.723458][T25366] FAULT_INJECTION: forcing a failure. [ 702.723458][T25366] name failslab, interval 1, probability 0, space 0, times 0 [ 702.747414][T25366] CPU: 0 UID: 0 PID: 25366 Comm: syz.5.6485 Not tainted syzkaller #0 PREEMPT(full) [ 702.747445][T25366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.747458][T25366] Call Trace: [ 702.747467][T25366] [ 702.747477][T25366] dump_stack_lvl+0x189/0x250 [ 702.747508][T25366] ? __pfx____ratelimit+0x10/0x10 [ 702.747532][T25366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.747557][T25366] ? __pfx__printk+0x10/0x10 [ 702.747590][T25366] ? __pfx___might_resched+0x10/0x10 [ 702.747610][T25366] ? fs_reclaim_acquire+0x7d/0x100 [ 702.747636][T25366] should_fail_ex+0x414/0x560 [ 702.747674][T25366] should_failslab+0xa8/0x100 [ 702.747705][T25366] __kmalloc_cache_noprof+0x70/0x3d0 [ 702.747734][T25366] ? rfkill_fop_open+0x198/0x820 [ 702.747763][T25366] rfkill_fop_open+0x198/0x820 [ 702.747801][T25366] ? __pfx_rfkill_fop_open+0x10/0x10 [ 702.747824][T25366] misc_open+0x2bc/0x330 [ 702.747857][T25366] chrdev_open+0x4cc/0x5e0 [ 702.747892][T25366] ? __pfx_chrdev_open+0x10/0x10 [ 702.747927][T25366] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 702.747965][T25366] ? __pfx_chrdev_open+0x10/0x10 [ 702.747992][T25366] do_dentry_open+0x953/0x13f0 [ 702.748031][T25366] vfs_open+0x3b/0x340 [ 702.748050][T25366] ? path_openat+0x2ecd/0x3830 [ 702.748080][T25366] path_openat+0x2ee5/0x3830 [ 702.748112][T25366] ? arch_stack_walk+0xfc/0x150 [ 702.748167][T25366] ? stack_depot_save_flags+0x40/0x860 [ 702.748217][T25366] ? __pfx_path_openat+0x10/0x10 [ 702.748239][T25366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.748289][T25366] do_filp_open+0x1fa/0x410 [ 702.748312][T25366] ? __lock_acquire+0xab9/0xd20 [ 702.748346][T25366] ? __pfx_do_filp_open+0x10/0x10 [ 702.748402][T25366] ? _raw_spin_unlock+0x28/0x50 [ 702.748432][T25366] ? alloc_fd+0x64c/0x6c0 [ 702.748477][T25366] do_sys_openat2+0x121/0x1c0 [ 702.748505][T25366] ? __pfx_do_sys_openat2+0x10/0x10 [ 702.748530][T25366] ? ksys_write+0x22a/0x250 [ 702.748561][T25366] ? __pfx_ksys_write+0x10/0x10 [ 702.748586][T25366] ? rcu_is_watching+0x15/0xb0 [ 702.748613][T25366] __x64_sys_openat+0x138/0x170 [ 702.748643][T25366] do_syscall_64+0xfa/0x3b0 [ 702.748665][T25366] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.748686][T25366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.748708][T25366] ? clear_bhb_loop+0x60/0xb0 [ 702.748735][T25366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.748755][T25366] RIP: 0033:0x7fe85958eba9 [ 702.748775][T25366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.748794][T25366] RSP: 002b:00007fe8577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 702.748820][T25366] RAX: ffffffffffffffda RBX: 00007fe8597d5fa0 RCX: 00007fe85958eba9 [ 702.748835][T25366] RDX: 0000000000000002 RSI: 0000200000004a00 RDI: ffffffffffffff9c [ 702.748850][T25366] RBP: 00007fe8577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 702.748862][T25366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 702.748875][T25366] R13: 00007fe8597d6038 R14: 00007fe8597d5fa0 R15: 00007ffc961a7d58 [ 702.748913][T25366] [ 703.400822][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 703.457515][T25383] veth3: entered promiscuous mode [ 703.800890][T25397] FAULT_INJECTION: forcing a failure. [ 703.800890][T25397] name failslab, interval 1, probability 0, space 0, times 0 [ 703.828846][T25397] CPU: 1 UID: 0 PID: 25397 Comm: syz.6.6497 Not tainted syzkaller #0 PREEMPT(full) [ 703.828886][T25397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.828900][T25397] Call Trace: [ 703.828909][T25397] [ 703.828918][T25397] dump_stack_lvl+0x189/0x250 [ 703.828948][T25397] ? __pfx____ratelimit+0x10/0x10 [ 703.828971][T25397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.828997][T25397] ? __pfx__printk+0x10/0x10 [ 703.829029][T25401] openvswitch: netlink: EtherType 50a is less than min 600 [ 703.829031][T25397] ? __pfx___might_resched+0x10/0x10 [ 703.829052][T25397] ? fs_reclaim_acquire+0x7d/0x100 [ 703.829076][T25397] should_fail_ex+0x414/0x560 [ 703.829106][T25397] should_failslab+0xa8/0x100 [ 703.829136][T25397] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 703.829162][T25397] ? __alloc_skb+0x112/0x2d0 [ 703.829188][T25397] __alloc_skb+0x112/0x2d0 [ 703.829212][T25397] netlink_ack+0x146/0xa50 [ 703.829229][T25397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.829252][T25397] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 703.829270][T25397] ? __pfx_nl802154_post_doit+0x10/0x10 [ 703.829304][T25397] netlink_rcv_skb+0x28c/0x470 [ 703.829321][T25397] ? __lock_acquire+0xab9/0xd20 [ 703.829348][T25397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 703.829374][T25397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 703.829415][T25397] ? down_read+0x1ad/0x2e0 [ 703.829440][T25397] genl_rcv+0x28/0x40 [ 703.829462][T25397] netlink_unicast+0x82f/0x9e0 [ 703.829499][T25397] ? __pfx_netlink_unicast+0x10/0x10 [ 703.829529][T25397] ? netlink_sendmsg+0x642/0xb30 [ 703.829547][T25397] ? skb_put+0x11b/0x210 [ 703.829572][T25397] netlink_sendmsg+0x805/0xb30 [ 703.829602][T25397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.829626][T25397] ? aa_sock_msg_perm+0xf1/0x1d0 [ 703.829647][T25397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 703.829667][T25397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.829689][T25397] __sock_sendmsg+0x21c/0x270 [ 703.829720][T25397] ____sys_sendmsg+0x505/0x830 [ 703.829750][T25397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.829784][T25397] ? import_iovec+0x74/0xa0 [ 703.829812][T25397] ___sys_sendmsg+0x21f/0x2a0 [ 703.829843][T25397] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.829917][T25397] ? __fget_files+0x2a/0x420 [ 703.829934][T25397] ? __fget_files+0x3a0/0x420 [ 703.829962][T25397] __x64_sys_sendmsg+0x19b/0x260 [ 703.829989][T25397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.830023][T25397] ? __pfx_ksys_write+0x10/0x10 [ 703.830044][T25397] ? rcu_is_watching+0x15/0xb0 [ 703.830069][T25397] ? do_syscall_64+0xbe/0x3b0 [ 703.830093][T25397] do_syscall_64+0xfa/0x3b0 [ 703.830112][T25397] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.830130][T25397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.830148][T25397] ? clear_bhb_loop+0x60/0xb0 [ 703.830172][T25397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.830189][T25397] RIP: 0033:0x7feb3398eba9 [ 703.830207][T25397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.830224][T25397] RSP: 002b:00007feb3487b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.830244][T25397] RAX: ffffffffffffffda RBX: 00007feb33bd5fa0 RCX: 00007feb3398eba9 [ 703.830258][T25397] RDX: 0000000034040800 RSI: 0000200000000580 RDI: 0000000000000005 [ 703.830271][T25397] RBP: 00007feb3487b090 R08: 0000000000000000 R09: 0000000000000000 [ 703.830284][T25397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.830296][T25397] R13: 00007feb33bd6038 R14: 00007feb33bd5fa0 R15: 00007ffde2bee3a8 [ 703.830328][T25397] [ 704.288304][T25408] netlink: 'syz.8.6502': attribute type 1 has an invalid length. [ 704.310132][T25408] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6502'. [ 704.559810][T25424] veth3: entered promiscuous mode [ 704.825693][T25433] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6508'. [ 704.898989][T25448] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.6516'. [ 704.912365][T25448] netlink: zone id is out of range [ 704.918020][T25448] netlink: zone id is out of range [ 704.924496][T25448] netlink: zone id is out of range [ 704.929726][T25448] netlink: zone id is out of range [ 704.935092][T25448] netlink: zone id is out of range [ 704.940323][T25448] netlink: get zone limit has 8 unknown bytes [ 705.029231][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6519'. [ 705.040435][T25454] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6519'. [ 705.208319][T25464] openvswitch: netlink: IP tunnel TTL not specified. [ 705.216489][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6522'. [ 705.226877][T25464] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 705.236231][T25464] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 705.275504][T25466] openvswitch: netlink: Invalid VLAN frame [ 705.520086][T25469] veth11: entered promiscuous mode [ 705.575312][T25478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.585956][T25477] veth0: entered promiscuous mode [ 705.596946][T25476] veth0: left promiscuous mode [ 705.608318][T25480] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6529'. [ 705.840548][T25484] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 705.843374][T25494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6531'. [ 705.860251][T25494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 705.867571][T25494] IPv6: NLM_F_CREATE should be set when creating new route [ 705.949059][T25500] FAULT_INJECTION: forcing a failure. [ 705.949059][T25500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.964144][T25500] CPU: 1 UID: 0 PID: 25500 Comm: syz.6.6536 Not tainted syzkaller #0 PREEMPT(full) [ 705.964173][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 705.964185][T25500] Call Trace: [ 705.964194][T25500] [ 705.964202][T25500] dump_stack_lvl+0x189/0x250 [ 705.964232][T25500] ? __pfx____ratelimit+0x10/0x10 [ 705.964254][T25500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.964278][T25500] ? __pfx__printk+0x10/0x10 [ 705.964321][T25500] should_fail_ex+0x414/0x560 [ 705.964359][T25500] _copy_to_user+0x31/0xb0 [ 705.964389][T25500] simple_read_from_buffer+0xe1/0x170 [ 705.964423][T25500] proc_fail_nth_read+0x1b3/0x220 [ 705.964452][T25500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.964479][T25500] ? rw_verify_area+0x2a6/0x4d0 [ 705.964504][T25500] ? __lock_acquire+0xab9/0xd20 [ 705.964532][T25500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.964559][T25500] vfs_read+0x200/0xa30 [ 705.964584][T25500] ? fdget_pos+0x247/0x320 [ 705.964608][T25500] ? __pfx___mutex_lock+0x10/0x10 [ 705.964632][T25500] ? __pfx_vfs_read+0x10/0x10 [ 705.964662][T25500] ? __fget_files+0x2a/0x420 [ 705.964685][T25500] ? __fget_files+0x3a0/0x420 [ 705.964703][T25500] ? __fget_files+0x2a/0x420 [ 705.964733][T25500] ksys_read+0x145/0x250 [ 705.964762][T25500] ? __pfx_ksys_read+0x10/0x10 [ 705.964790][T25500] ? rcu_is_watching+0x15/0xb0 [ 705.964812][T25500] ? trace_sys_enter+0x25/0x100 [ 705.964851][T25500] do_syscall_64+0xfa/0x3b0 [ 705.964881][T25500] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.964902][T25500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.964923][T25500] ? clear_bhb_loop+0x60/0xb0 [ 705.964950][T25500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.964970][T25500] RIP: 0033:0x7feb3398d5bc [ 705.964989][T25500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 705.965007][T25500] RSP: 002b:00007feb3487b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 705.965030][T25500] RAX: ffffffffffffffda RBX: 00007feb33bd5fa0 RCX: 00007feb3398d5bc [ 705.965045][T25500] RDX: 000000000000000f RSI: 00007feb3487b0a0 RDI: 0000000000000003 [ 705.965058][T25500] RBP: 00007feb3487b090 R08: 0000000000000000 R09: 0000000000000000 [ 705.965071][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.965084][T25500] R13: 00007feb33bd6038 R14: 00007feb33bd5fa0 R15: 00007ffde2bee3a8 [ 705.965119][T25500] [ 706.209676][T25497] tipc: Enabled bearer , priority 0 [ 706.222806][T25499] tipc: Enabling of bearer rejected, already enabled [ 706.238242][T25497] syzkaller0: entered promiscuous mode [ 706.244761][T25497] syzkaller0: entered allmulticast mode [ 706.314813][T25503] tipc: Resetting bearer [ 706.334647][T25496] tipc: Resetting bearer [ 706.353677][T25496] tipc: Disabling bearer [ 706.453468][T25507] veth0: entered promiscuous mode [ 706.501558][T25506] veth0: left promiscuous mode [ 706.620177][T25515] veth11: entered promiscuous mode [ 706.879728][T25534] netlink: 'syz.7.6549': attribute type 1 has an invalid length. [ 706.896590][T25534] netlink: 'syz.7.6549': attribute type 1 has an invalid length. [ 706.948632][T25536] macvlan0: entered allmulticast mode [ 706.965936][T25536] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 707.014479][T25540] netlink: 'syz.5.6552': attribute type 10 has an invalid length. [ 707.039541][T25540] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 707.323485][T25548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 707.345530][T25548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 707.392237][T25558] netlink: 'syz.8.6559': attribute type 4 has an invalid length. [ 707.417300][T25558] netlink: 'syz.8.6559': attribute type 6 has an invalid length. [ 707.536031][T25565] veth11: entered promiscuous mode [ 707.613329][T25570] macvlan2: entered allmulticast mode [ 707.626321][T25570] bond0: (slave macvlan2): Opening slave failed [ 707.898356][T25587] veth0: entered promiscuous mode [ 707.931165][T25586] veth0: left promiscuous mode [ 708.029873][T25595] netlink: 'syz.9.6573': attribute type 1 has an invalid length. [ 708.104500][T25600] __nla_validate_parse: 4 callbacks suppressed [ 708.104525][T25600] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6574'. [ 708.418000][T25614] veth5: entered promiscuous mode [ 708.598435][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6582'. [ 708.685006][T25628] veth0: entered promiscuous mode [ 708.731544][T25631] netlink: 'syz.6.6587': attribute type 29 has an invalid length. [ 708.742646][T25631] netlink: 'syz.6.6587': attribute type 29 has an invalid length. [ 708.757319][T25631] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6587'. [ 708.763913][T25627] veth0: left promiscuous mode [ 708.772597][T25626] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 708.786606][T25626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6586'. [ 708.796779][T25626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.804059][T25626] IPv6: NLM_F_CREATE should be set when creating new route [ 708.833079][T25633] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.6588'. [ 708.923676][T25639] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6590'. [ 708.952743][T25639] net_ratelimit: 20 callbacks suppressed [ 708.952766][T25639] netlink: zone id is out of range [ 708.981191][T25639] netlink: zone id is out of range [ 709.000952][T25639] netlink: zone id is out of range [ 709.019505][T25639] netlink: zone id is out of range [ 709.039768][T25639] netlink: zone id is out of range [ 709.057677][T25639] netlink: get zone limit has 8 unknown bytes [ 709.128450][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6596'. [ 709.154652][T25651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.213307][T25651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.264250][T25655] veth3: entered promiscuous mode [ 709.302848][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 709.456507][T25668] veth0: entered promiscuous mode [ 709.467981][T25665] veth0: left promiscuous mode [ 709.635780][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6606'. [ 709.653902][T25681] dvmrp0: entered allmulticast mode [ 709.703572][T25678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.757479][T25684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.767716][T25684] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 709.779825][T25684] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 713.231918][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 721.231982][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 723.956944][T25687] Bluetooth: hci3: command 0x0406 tx timeout [ 723.960015][T25686] Bluetooth: hci1: command 0x0406 tx timeout [ 723.964466][T25687] Bluetooth: hci2: command 0x0406 tx timeout [ 732.754411][T25696] netlink: 'syz.9.6611': attribute type 13 has an invalid length. [ 732.768504][T25696] veth0_macvtap: left promiscuous mode [ 732.782521][T25696] macvtap0: entered allmulticast mode [ 732.793748][T25696] macvtap0: refused to change device tx_queue_len [ 732.801054][T25690] netlink: 'syz.6.6607': attribute type 1 has an invalid length. [ 732.820747][T25690] netlink: 'syz.6.6607': attribute type 2 has an invalid length. [ 732.840190][ T73] tipc: Subscription rejected, illegal request [ 732.865079][T25695] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.6608'. [ 732.874600][T25695] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 732.884878][T25690] netlink: 1172 bytes leftover after parsing attributes in process `syz.6.6607'. [ 732.902039][T25695] openvswitch: netlink: Duplicate key (type 0). [ 733.316631][T25720] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 733.363634][T25721] openvswitch: netlink: Flow actions attr not present in new flow. [ 733.708036][T25739] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6624'. [ 733.731883][T25739] netlink: zone id is out of range [ 733.739566][T25741] dvmrp0: left allmulticast mode [ 733.742106][T25739] netlink: zone id is out of range [ 733.756559][T25739] netlink: zone id is out of range [ 733.762075][T25739] netlink: zone id is out of range [ 733.767419][T25739] netlink: zone id is out of range [ 733.773738][T25739] netlink: get zone limit has 8 unknown bytes [ 733.829332][T25744] dvmrp0: entered allmulticast mode [ 734.104522][T25757] can: request_module (can-proto-0) failed. [ 734.315925][T25769] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6636'. [ 734.373829][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6636'. [ 734.458452][T25780] dvmrp0: left allmulticast mode [ 734.549211][T25782] dvmrp0: entered allmulticast mode [ 734.861448][T25801] netlink: 'syz.9.6645': attribute type 16 has an invalid length. [ 734.882004][T25801] netlink: 'syz.9.6645': attribute type 17 has an invalid length. [ 734.910993][T25794] bridge_slave_0: default FDB implementation only supports local addresses [ 734.925971][T25805] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6649'. [ 734.952912][T25805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6649'. [ 735.111457][T25802] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6648'. [ 735.153374][T25802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6648'. [ 735.447435][T25833] dvmrp0: left allmulticast mode [ 735.579287][T25831] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 735.736864][T25843] dvmrp0: entered allmulticast mode [ 735.847760][T25856] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 735.852957][T25858] netlink: 'syz.6.6657': attribute type 1 has an invalid length. [ 735.919785][T25858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.051894][T25864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6660'. [ 736.145122][T25858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.183533][T25858] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 736.232921][T25858] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 736.386820][T25870] vlan3: entered allmulticast mode [ 736.392650][T25870] bridge2: port 1(vlan3) entered blocking state [ 736.399186][T25870] bridge2: port 1(vlan3) entered disabled state [ 736.409032][T25870] vlan3: entered promiscuous mode [ 736.511898][T25879] netlink: 'syz.7.6664': attribute type 16 has an invalid length. [ 736.530376][T25879] netlink: 'syz.7.6664': attribute type 17 has an invalid length. [ 736.690837][T25879] bond0: left promiscuous mode [ 736.697386][T25879] bond_slave_0: left promiscuous mode [ 736.746572][T25879] bond_slave_1: left promiscuous mode [ 736.768302][T25879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.237030][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 737.709504][T25943] Bluetooth: MGMT ver 1.23 [ 737.748564][T25944] tipc: Enabling of bearer rejected, media not registered [ 737.942196][T25952] __nla_validate_parse: 5 callbacks suppressed [ 737.942219][T25952] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6694'. [ 738.030861][T25958] netlink: 'syz.6.6697': attribute type 25 has an invalid length. [ 738.048095][T25958] netlink: 'syz.6.6697': attribute type 8 has an invalid length. [ 738.275818][T25974] net_ratelimit: 18 callbacks suppressed [ 738.275843][T25974] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 738.606636][T25987] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 738.760487][T25995] netlink: 'syz.6.6710': attribute type 1 has an invalid length. [ 738.788943][T25995] netlink: 'syz.6.6710': attribute type 1 has an invalid length. [ 738.797603][T25995] netlink: 216 bytes leftover after parsing attributes in process `syz.6.6710'. [ 738.807199][T25997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6712'. [ 738.847948][T26002] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 738.965356][T26005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6710'. [ 739.008931][T26007] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 739.200432][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6718'. [ 739.211231][T26017] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 739.227132][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6719'. [ 739.260640][T26017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.407353][T26030] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 739.431362][T26028] veth0: entered promiscuous mode [ 739.463463][T26026] veth0: left promiscuous mode [ 739.617289][T26042] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6728'. [ 739.628785][T26043] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6727'. [ 739.660418][T26045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.808416][T26049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6732'. [ 740.219658][ T5879] Bluetooth: hci4: link tx timeout [ 740.226898][ T5879] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 740.530475][T26078] veth3: entered promiscuous mode [ 740.611185][T26083] syzkaller1: entered promiscuous mode [ 740.628612][T26083] syzkaller1: entered allmulticast mode [ 740.788828][T26094] dvmrp0: left allmulticast mode [ 740.871217][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6746'. [ 740.901453][T26097] dvmrp0: entered allmulticast mode [ 740.971429][T26105] delete_channel: no stack [ 741.209339][T26112] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 741.715881][T26144] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 741.765198][T26146] netlink: 'syz.5.6769': attribute type 62 has an invalid length. [ 742.042101][T26164] sock: sock_set_timeout: `syz.9.6776' (pid 26164) tries to set negative timeout [ 742.271885][ T5879] Bluetooth: hci4: command 0x0405 tx timeout [ 742.816955][T26203] netlink: 'syz.6.6787': attribute type 5 has an invalid length. [ 743.150688][T26217] netlink: 'syz.9.6790': attribute type 1 has an invalid length. [ 743.204918][T26215] : entered promiscuous mode [ 743.213687][T26221] netlink: 'syz.9.6790': attribute type 16 has an invalid length. [ 743.461387][T26233] __nla_validate_parse: 11 callbacks suppressed [ 743.461411][T26233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6797'. [ 743.575110][T26244] netlink: 'syz.8.6798': attribute type 16 has an invalid length. [ 743.602856][T26248] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6802'. [ 743.612341][T26244] netlink: 'syz.8.6798': attribute type 17 has an invalid length. [ 743.690977][T26244] gretap0: left promiscuous mode [ 743.710628][T26244] net_ratelimit: 2 callbacks suppressed [ 743.710635][T26244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.888133][T26261] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6805'. [ 743.911797][T26261] netlink: 43 bytes leftover after parsing attributes in process `syz.8.6805'. [ 743.920890][T26261] netlink: 'syz.8.6805': attribute type 5 has an invalid length. [ 743.958369][T26261] netlink: 43 bytes leftover after parsing attributes in process `syz.8.6805'. [ 744.018081][T26267] netlink: 'syz.6.6808': attribute type 4 has an invalid length. [ 744.077629][T26267] netlink: 'syz.6.6808': attribute type 4 has an invalid length. [ 744.148750][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6811'. [ 744.197746][T26280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.343830][T26290] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 744.546271][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6818'. [ 744.628999][T26305] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6819'. [ 744.691238][T26310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6820'. [ 744.896595][T26320] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.6826'. [ 744.910554][T26320] netlink: zone id is out of range [ 744.920627][T26320] netlink: zone id is out of range [ 744.927845][T26320] netlink: zone id is out of range [ 744.948377][T26320] netlink: zone id is out of range [ 744.958251][T26320] netlink: zone id is out of range [ 744.969514][T26320] netlink: get zone limit has 8 unknown bytes [ 745.039656][T26328] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 745.220911][T26334] gtp2: entered promiscuous mode [ 745.235321][T26334] gtp2: entered allmulticast mode [ 745.407677][T26352] netlink: 'syz.5.6834': attribute type 16 has an invalid length. [ 745.431477][T26352] netlink: 'syz.5.6834': attribute type 17 has an invalid length. [ 745.474274][T26352] 0ªî{X¹¦: left allmulticast mode [ 745.501156][T26347] netlink: 'syz.9.6835': attribute type 1 has an invalid length. [ 745.573771][T26355] veth0: entered promiscuous mode [ 745.594600][T26354] veth0: left promiscuous mode [ 746.172364][T26394] 8021q: adding VLAN 0 to HW filter on device bond6 [ 746.219318][T26394] bond6: (slave geneve3): making interface the new active one [ 746.229058][T26394] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 746.245239][T26397] veth0: entered promiscuous mode [ 746.256879][T26396] veth0: left promiscuous mode [ 746.598215][T26411] macvlan2: entered allmulticast mode [ 746.604600][T26411] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 746.928068][T26427] veth0: entered promiscuous mode [ 746.958334][T26426] veth0: left promiscuous mode [ 747.290144][T26446] macvlan2: entered allmulticast mode [ 747.303249][T26446] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 747.598303][T26456] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.783768][T26458] bond7: entered promiscuous mode [ 747.789061][T26458] bond7: entered allmulticast mode [ 747.795140][T26458] 8021q: adding VLAN 0 to HW filter on device bond7 [ 747.977417][T26458] bond7 (unregistering): Released all slaves [ 748.058061][T26456] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.150223][T26456] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.265581][T26456] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.458777][T26492] netlink: 'syz.9.6884': attribute type 11 has an invalid length. [ 748.474244][T26492] __nla_validate_parse: 14 callbacks suppressed [ 748.474265][T26492] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6884'. [ 748.495038][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.541520][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.625625][T26497] veth13: entered promiscuous mode [ 748.658528][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.668939][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.773646][T26505] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6890'. [ 748.882494][T26511] net_ratelimit: 6 callbacks suppressed [ 748.882516][T26511] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 748.951479][T26518] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6894'. [ 749.214809][T26532] C: renamed from lo (while UP) [ 749.220968][T26533] validate_nla: 2 callbacks suppressed [ 749.220988][T26533] netlink: 'syz.8.6900': attribute type 8 has an invalid length. [ 749.247889][T26534] macvlan2: entered allmulticast mode [ 749.259461][T26534] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 749.530725][T26544] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 749.536769][T26538] veth13: entered promiscuous mode [ 750.020489][T26558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 750.047263][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6912'. [ 750.054464][T26571] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6915'. [ 750.106297][T26574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6918'. [ 750.132639][T26574] openvswitch: netlink: Flow actions attr not present in new flow. [ 750.186255][T26578] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 750.315179][T26585] netlink: 'syz.7.6921': attribute type 6 has an invalid length. [ 750.521317][T26594] veth13: entered promiscuous mode [ 750.617743][T26602] Bluetooth: MGMT ver 1.23 [ 750.629502][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6930'. [ 750.730284][T26604] netlink: 'syz.9.6931': attribute type 1 has an invalid length. [ 750.799152][T26604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.860791][T26610] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 750.949029][T26621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6934'. [ 750.979666][T26621] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 750.988848][T26621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.042009][T26629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6938'. [ 751.115704][T26634] macvlan0: entered allmulticast mode [ 751.122506][T26634] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 751.257071][T26643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6943'. [ 751.940780][T26656] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 751.957708][T26655] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 751.988397][T26655] netlink: 'syz.7.6948': attribute type 2 has an invalid length. [ 752.011865][T26655] netlink: 'syz.7.6948': attribute type 1 has an invalid length. [ 752.368269][T26677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.765081][T26686] syzkaller1: entered promiscuous mode [ 752.770859][T26686] syzkaller1: entered allmulticast mode [ 752.771595][T26697] netlink: 'syz.5.6962': attribute type 16 has an invalid length. [ 752.807690][T26697] netlink: 'syz.5.6962': attribute type 17 has an invalid length. [ 752.878089][T26697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.516140][T26727] bridge0: port 3(syz_tun) entered disabled state [ 753.555985][T26732] netlink: 'syz.6.6976': attribute type 16 has an invalid length. [ 753.612142][T26732] netlink: 'syz.6.6976': attribute type 17 has an invalid length. [ 753.628939][T26727] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.667584][T26727] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.827525][T26745] openvswitch: netlink: Missing valid actions attribute. [ 753.831362][T26732] bridge0: port 3(syz_tun) entered blocking state [ 753.841252][T26732] bridge0: port 3(syz_tun) entered forwarding state [ 754.273252][T26770] net_ratelimit: 2 callbacks suppressed [ 754.273276][T26770] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 754.433420][T26781] syzkaller1: entered promiscuous mode [ 754.439261][T26781] syzkaller1: entered allmulticast mode [ 754.503043][T26786] bridge0: port 3(syz_tun) entered disabled state [ 754.531528][T26787] netlink: 'syz.6.7001': attribute type 16 has an invalid length. [ 754.550976][T26788] tipc: Enabled bearer , priority 0 [ 754.554356][T26787] netlink: 'syz.6.7001': attribute type 17 has an invalid length. [ 754.562840][T26779] syzkaller0: entered promiscuous mode [ 754.571406][T26779] syzkaller0: entered allmulticast mode [ 754.644950][T26787] bridge0: port 3(syz_tun) entered blocking state [ 754.651716][T26787] bridge0: port 3(syz_tun) entered forwarding state [ 754.668935][T26787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.731190][T26795] tipc: Resetting bearer [ 754.782309][T26778] tipc: Resetting bearer [ 754.871185][T26778] tipc: Disabling bearer [ 754.948266][T26805] macvlan2: entered allmulticast mode [ 754.977770][T26805] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 754.987168][T26807] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 755.450803][T26834] netlink: 'syz.9.7017': attribute type 16 has an invalid length. [ 755.532154][T26834] netlink: 'syz.9.7017': attribute type 17 has an invalid length. [ 755.556592][T26844] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 755.619066][T26846] __nla_validate_parse: 5 callbacks suppressed [ 755.619089][T26846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7023'. [ 755.648956][T26848] netlink: 14 bytes leftover after parsing attributes in process `syz.8.7024'. [ 755.662304][T26834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 756.050043][T26873] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7031'. [ 756.088838][T26876] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7032'. [ 756.098784][T26876] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 756.152769][T26848] bond0 (unregistering): Released all slaves [ 756.279703][T26858] veth5: entered promiscuous mode [ 756.660499][T26901] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7037'. [ 756.709042][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7037'. [ 756.813736][T26909] macvlan2: entered allmulticast mode [ 756.830089][T26909] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 756.917710][T26911] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7043'. [ 756.941035][T26911] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 757.130708][T26924] netlink: 'syz.8.7047': attribute type 12 has an invalid length. [ 757.148352][T26924] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7047'. [ 757.210126][T26932] openvswitch: netlink: Message has 17 unknown bytes. [ 757.533549][T26945] macvlan0: entered allmulticast mode [ 757.573494][T26945] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 757.601298][T26949] netlink: 232 bytes leftover after parsing attributes in process `syz.9.7057'. [ 757.614453][T26946] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 757.660258][T26949] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7057'. [ 758.108389][T26977] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 758.578747][T27000] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 758.598302][T27000] 0ªî{X¹¦: entered allmulticast mode [ 758.605750][T27002] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 761.128165][T27052] __nla_validate_parse: 8 callbacks suppressed [ 761.128186][T27052] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7091'. [ 761.200875][T27047] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7092'. [ 761.228139][T27055] nbd: nbd9 already in use [ 761.236421][T27055] block nbd9: NBD_DISCONNECT [ 761.241330][T27055] block nbd9: Send disconnect failed -32 [ 761.257046][T27055] block nbd9: shutting down sockets [ 761.305002][T27056] veth5: entered promiscuous mode [ 761.386387][T27062] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7097'. [ 761.403964][T27062] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 761.418488][T27062] net_ratelimit: 3 callbacks suppressed [ 761.418509][T27062] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 761.505155][T27068] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 761.538891][T27070] openvswitch: netlink: Message has 24 unknown bytes. [ 761.700736][T27081] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 761.742642][T27081] CPU: 1 UID: 0 PID: 27081 Comm: syz.9.7103 Not tainted syzkaller #0 PREEMPT(full) [ 761.742676][T27081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 761.742691][T27081] Call Trace: [ 761.742700][T27081] [ 761.742710][T27081] dump_stack_lvl+0x189/0x250 [ 761.742750][T27081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.742779][T27081] ? __pfx__printk+0x10/0x10 [ 761.742818][T27081] ? kernfs_path_from_node+0x2f/0x290 [ 761.742843][T27081] ? kernfs_path_from_node+0x250/0x290 [ 761.742863][T27081] ? kernfs_path_from_node+0x2f/0x290 [ 761.742893][T27081] sysfs_warn_dup+0x8e/0xa0 [ 761.742918][T27081] sysfs_do_create_link_sd+0xc0/0x110 [ 761.742946][T27081] device_add_class_symlinks+0x1cf/0x240 [ 761.742978][T27081] device_add+0x475/0xb50 [ 761.743011][T27081] wiphy_register+0x1ba6/0x28d0 [ 761.743058][T27081] ? __pfx_wiphy_register+0x10/0x10 [ 761.743079][T27081] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 761.743117][T27081] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 761.743151][T27081] ieee80211_register_hw+0x3484/0x4100 [ 761.743199][T27081] ? ieee80211_register_hw+0x1481/0x4100 [ 761.743241][T27081] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 761.743274][T27081] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 761.743319][T27081] ? __hrtimer_setup+0x187/0x210 [ 761.743349][T27081] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 761.743376][T27081] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 761.743452][T27081] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 761.743482][T27081] ? trace_kmalloc+0x1f/0xd0 [ 761.743509][T27081] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 761.743540][T27081] ? kstrndup+0xbf/0x160 [ 761.743578][T27081] hwsim_new_radio_nl+0xea4/0x1b10 [ 761.743614][T27081] ? __pfx___nla_validate_parse+0x10/0x10 [ 761.743658][T27081] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 761.743709][T27081] ? __nla_parse+0x40/0x60 [ 761.743738][T27081] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 761.743782][T27081] genl_family_rcv_msg_doit+0x212/0x300 [ 761.743823][T27081] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 761.743873][T27081] ? bpf_lsm_capable+0x9/0x20 [ 761.743902][T27081] ? security_capable+0x7e/0x2e0 [ 761.743946][T27081] genl_rcv_msg+0x60e/0x790 [ 761.743986][T27081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.744016][T27081] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 761.744069][T27081] netlink_rcv_skb+0x208/0x470 [ 761.744089][T27081] ? __lock_acquire+0xab9/0xd20 [ 761.744123][T27081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.744155][T27081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.744206][T27081] ? down_read+0x1ad/0x2e0 [ 761.744236][T27081] genl_rcv+0x28/0x40 [ 761.744263][T27081] netlink_unicast+0x82f/0x9e0 [ 761.744311][T27081] ? __pfx_netlink_unicast+0x10/0x10 [ 761.744355][T27081] ? netlink_sendmsg+0x642/0xb30 [ 761.744378][T27081] ? skb_put+0x11b/0x210 [ 761.744410][T27081] netlink_sendmsg+0x805/0xb30 [ 761.744448][T27081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.744478][T27081] ? aa_sock_msg_perm+0xf1/0x1d0 [ 761.744505][T27081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 761.744529][T27081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.744555][T27081] __sock_sendmsg+0x21c/0x270 [ 761.744593][T27081] ____sys_sendmsg+0x505/0x830 [ 761.744630][T27081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.744672][T27081] ? import_iovec+0x74/0xa0 [ 761.744708][T27081] ___sys_sendmsg+0x21f/0x2a0 [ 761.744741][T27081] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.744823][T27081] ? __fget_files+0x2a/0x420 [ 761.744842][T27081] ? __fget_files+0x3a0/0x420 [ 761.744878][T27081] __x64_sys_sendmsg+0x19b/0x260 [ 761.744911][T27081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.744955][T27081] ? rcu_is_watching+0x15/0xb0 [ 761.744985][T27081] ? do_syscall_64+0xbe/0x3b0 [ 761.745016][T27081] do_syscall_64+0xfa/0x3b0 [ 761.745038][T27081] ? lockdep_hardirqs_on+0x9c/0x150 [ 761.745059][T27081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.745080][T27081] ? clear_bhb_loop+0x60/0xb0 [ 761.745107][T27081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.745128][T27081] RIP: 0033:0x7faf0158eba9 [ 761.745148][T27081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.745166][T27081] RSP: 002b:00007faf023e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.745189][T27081] RAX: ffffffffffffffda RBX: 00007faf017d5fa0 RCX: 00007faf0158eba9 [ 761.745206][T27081] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 761.745219][T27081] RBP: 00007faf01611e19 R08: 0000000000000000 R09: 0000000000000000 [ 761.745233][T27081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.745245][T27081] R13: 00007faf017d6038 R14: 00007faf017d5fa0 R15: 00007ffce5e57878 [ 761.745283][T27081] [ 762.291481][T27091] netlink: 'syz.5.7104': attribute type 16 has an invalid length. [ 762.320066][T27088] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7107'. [ 762.344228][T27091] netlink: 'syz.5.7104': attribute type 17 has an invalid length. [ 762.447762][T27088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7107'. [ 762.466116][T27091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.568361][T27094] bridge4: port 1(veth5) entered blocking state [ 762.585011][T27094] bridge4: port 1(veth5) entered disabled state [ 762.600134][T27094] veth5: entered allmulticast mode [ 762.608175][T27094] veth5: entered promiscuous mode [ 762.753795][T27104] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 763.374134][T27141] netlink: 'syz.5.7124': attribute type 16 has an invalid length. [ 763.417065][T27141] netlink: 'syz.5.7124': attribute type 17 has an invalid length. [ 763.438557][T27144] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7126'. [ 763.581823][T27141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.832423][T27160] netlink: 45 bytes leftover after parsing attributes in process `syz.9.7133'. [ 763.836628][T27158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7132'. [ 763.857334][T27165] netlink: 'syz.8.7134': attribute type 1 has an invalid length. [ 763.945605][T27165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.974120][T27166] openvswitch: netlink: Flow actions attr not present in new flow. [ 764.206387][T27171] veth7: entered promiscuous mode [ 764.259053][T27178] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 764.701614][T27210] netlink: 'syz.7.7146': attribute type 16 has an invalid length. [ 764.727299][T27210] netlink: 'syz.7.7146': attribute type 17 has an invalid length. [ 764.759142][T27210] 1ªî{X¹¦: left allmulticast mode [ 764.847126][T27216] FAULT_INJECTION: forcing a failure. [ 764.847126][T27216] name failslab, interval 1, probability 0, space 0, times 0 [ 764.860483][T27210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.885146][T27216] CPU: 1 UID: 0 PID: 27216 Comm: syz.5.7151 Not tainted syzkaller #0 PREEMPT(full) [ 764.885177][T27216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 764.885190][T27216] Call Trace: [ 764.885205][T27216] [ 764.885214][T27216] dump_stack_lvl+0x189/0x250 [ 764.885245][T27216] ? __pfx____ratelimit+0x10/0x10 [ 764.885267][T27216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.885292][T27216] ? __pfx__printk+0x10/0x10 [ 764.885328][T27216] ? __pfx___might_resched+0x10/0x10 [ 764.885355][T27216] should_fail_ex+0x414/0x560 [ 764.885400][T27216] should_failslab+0xa8/0x100 [ 764.885432][T27216] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 764.885463][T27216] ? __alloc_skb+0x112/0x2d0 [ 764.885491][T27216] __alloc_skb+0x112/0x2d0 [ 764.885520][T27216] netlink_sendmsg+0x5c6/0xb30 [ 764.885555][T27216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.885583][T27216] ? aa_sock_msg_perm+0xf1/0x1d0 [ 764.885607][T27216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.885630][T27216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.885653][T27216] __sock_sendmsg+0x21c/0x270 [ 764.885688][T27216] ____sys_sendmsg+0x505/0x830 [ 764.885721][T27216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.885759][T27216] ? import_iovec+0x74/0xa0 [ 764.885791][T27216] ___sys_sendmsg+0x21f/0x2a0 [ 764.885819][T27216] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.885890][T27216] ? __fget_files+0x2a/0x420 [ 764.885909][T27216] ? __fget_files+0x3a0/0x420 [ 764.885940][T27216] __x64_sys_sendmsg+0x19b/0x260 [ 764.885970][T27216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.886009][T27216] ? __pfx_ksys_write+0x10/0x10 [ 764.886033][T27216] ? rcu_is_watching+0x15/0xb0 [ 764.886061][T27216] ? do_syscall_64+0xbe/0x3b0 [ 764.886088][T27216] do_syscall_64+0xfa/0x3b0 [ 764.886109][T27216] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.886130][T27216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.886151][T27216] ? clear_bhb_loop+0x60/0xb0 [ 764.886176][T27216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.886198][T27216] RIP: 0033:0x7fe85958eba9 [ 764.886217][T27216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.886236][T27216] RSP: 002b:00007fe8577f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.886260][T27216] RAX: ffffffffffffffda RBX: 00007fe8597d5fa0 RCX: 00007fe85958eba9 [ 764.886276][T27216] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 764.886289][T27216] RBP: 00007fe8577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 764.886303][T27216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.886316][T27216] R13: 00007fe8597d6038 R14: 00007fe8597d5fa0 R15: 00007ffc961a7d58 [ 764.886352][T27216] [ 765.498844][T27232] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7155'. [ 765.524144][T27232] unsupported nlmsg_type 40 [ 765.535023][T27233] netlink: set zone limit has 8 unknown bytes [ 765.576482][T27236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7157'. [ 765.591004][T27233] syzkaller1: entered promiscuous mode [ 765.609530][T27233] syzkaller1: entered allmulticast mode [ 765.846662][T27245] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 765.985208][T27251] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 766.109920][T27259] FAULT_INJECTION: forcing a failure. [ 766.109920][T27259] name failslab, interval 1, probability 0, space 0, times 0 [ 766.134075][T27259] CPU: 0 UID: 0 PID: 27259 Comm: syz.9.7169 Not tainted syzkaller #0 PREEMPT(full) [ 766.134107][T27259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 766.134120][T27259] Call Trace: [ 766.134129][T27259] [ 766.134139][T27259] dump_stack_lvl+0x189/0x250 [ 766.134170][T27259] ? __pfx____ratelimit+0x10/0x10 [ 766.134193][T27259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.134218][T27259] ? __pfx__printk+0x10/0x10 [ 766.134255][T27259] ? __pfx___might_resched+0x10/0x10 [ 766.134283][T27259] should_fail_ex+0x414/0x560 [ 766.134320][T27259] should_failslab+0xa8/0x100 [ 766.134353][T27259] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 766.134382][T27259] ? __alloc_skb+0x112/0x2d0 [ 766.134411][T27259] __alloc_skb+0x112/0x2d0 [ 766.134439][T27259] netlink_sendmsg+0x5c6/0xb30 [ 766.134475][T27259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.134502][T27259] ? aa_sock_msg_perm+0xf1/0x1d0 [ 766.134526][T27259] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.134549][T27259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.134582][T27259] __sock_sendmsg+0x21c/0x270 [ 766.134618][T27259] ____sys_sendmsg+0x505/0x830 [ 766.134652][T27259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.134691][T27259] ? import_iovec+0x74/0xa0 [ 766.134722][T27259] ___sys_sendmsg+0x21f/0x2a0 [ 766.134752][T27259] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.134824][T27259] ? __fget_files+0x2a/0x420 [ 766.134841][T27259] ? __fget_files+0x3a0/0x420 [ 766.134873][T27259] __x64_sys_sendmsg+0x19b/0x260 [ 766.134903][T27259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.134947][T27259] ? __pfx_ksys_write+0x10/0x10 [ 766.134971][T27259] ? rcu_is_watching+0x15/0xb0 [ 766.134999][T27259] ? do_syscall_64+0xbe/0x3b0 [ 766.135027][T27259] do_syscall_64+0xfa/0x3b0 [ 766.135047][T27259] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.135068][T27259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.135089][T27259] ? clear_bhb_loop+0x60/0xb0 [ 766.135114][T27259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.135135][T27259] RIP: 0033:0x7faf0158eba9 [ 766.135154][T27259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.135173][T27259] RSP: 002b:00007faf023e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.135197][T27259] RAX: ffffffffffffffda RBX: 00007faf017d5fa0 RCX: 00007faf0158eba9 [ 766.135213][T27259] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 766.135227][T27259] RBP: 00007faf023e5090 R08: 0000000000000000 R09: 0000000000000000 [ 766.135240][T27259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.135253][T27259] R13: 00007faf017d6038 R14: 00007faf017d5fa0 R15: 00007ffce5e57878 [ 766.135290][T27259] [ 766.409775][T27253] netlink: 'syz.5.7166': attribute type 16 has an invalid length. [ 766.419899][T27253] netlink: 'syz.5.7166': attribute type 17 has an invalid length. [ 766.449540][T27253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.816251][T27276] netlink: 'syz.9.7177': attribute type 4 has an invalid length. [ 766.949346][T27289] FAULT_INJECTION: forcing a failure. [ 766.949346][T27289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.963831][T27289] CPU: 0 UID: 0 PID: 27289 Comm: syz.8.7181 Not tainted syzkaller #0 PREEMPT(full) [ 766.963862][T27289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 766.963874][T27289] Call Trace: [ 766.963883][T27289] [ 766.963892][T27289] dump_stack_lvl+0x189/0x250 [ 766.963922][T27289] ? __pfx____ratelimit+0x10/0x10 [ 766.963945][T27289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.963970][T27289] ? __pfx__printk+0x10/0x10 [ 766.963998][T27289] ? __might_fault+0xb0/0x130 [ 766.964037][T27289] should_fail_ex+0x414/0x560 [ 766.964073][T27289] _copy_from_iter+0x1de/0x1790 [ 766.964107][T27289] ? rcu_is_watching+0x15/0xb0 [ 766.964130][T27289] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 766.964159][T27289] ? __pfx__copy_from_iter+0x10/0x10 [ 766.964185][T27289] ? __build_skb_around+0x257/0x3e0 [ 766.964213][T27289] ? netlink_sendmsg+0x642/0xb30 [ 766.964231][T27289] ? skb_put+0x11b/0x210 [ 766.964258][T27289] netlink_sendmsg+0x6b2/0xb30 [ 766.964291][T27289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.964318][T27289] ? aa_sock_msg_perm+0xf1/0x1d0 [ 766.964342][T27289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.964365][T27289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.964388][T27289] __sock_sendmsg+0x21c/0x270 [ 766.964420][T27289] ____sys_sendmsg+0x505/0x830 [ 766.964452][T27289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.964489][T27289] ? import_iovec+0x74/0xa0 [ 766.964520][T27289] ___sys_sendmsg+0x21f/0x2a0 [ 766.964548][T27289] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.964625][T27289] ? __fget_files+0x2a/0x420 [ 766.964644][T27289] ? __fget_files+0x3a0/0x420 [ 766.964674][T27289] __x64_sys_sendmsg+0x19b/0x260 [ 766.964703][T27289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.964740][T27289] ? __pfx_ksys_write+0x10/0x10 [ 766.964765][T27289] ? rcu_is_watching+0x15/0xb0 [ 766.964791][T27289] ? do_syscall_64+0xbe/0x3b0 [ 766.964817][T27289] do_syscall_64+0xfa/0x3b0 [ 766.964836][T27289] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.964856][T27289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.964877][T27289] ? clear_bhb_loop+0x60/0xb0 [ 766.964902][T27289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.964922][T27289] RIP: 0033:0x7f5ea3f8eba9 [ 766.964941][T27289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.964959][T27289] RSP: 002b:00007f5ea4d39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.964983][T27289] RAX: ffffffffffffffda RBX: 00007f5ea41d5fa0 RCX: 00007f5ea3f8eba9 [ 766.964998][T27289] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 766.965011][T27289] RBP: 00007f5ea4d39090 R08: 0000000000000000 R09: 0000000000000000 [ 766.965024][T27289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.965036][T27289] R13: 00007f5ea41d6038 R14: 00007f5ea41d5fa0 R15: 00007ffc359d4e08 [ 766.965070][T27289] [ 767.311864][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 767.330106][T27294] FAULT_INJECTION: forcing a failure. [ 767.330106][T27294] name failslab, interval 1, probability 0, space 0, times 0 [ 767.347820][T27294] CPU: 0 UID: 0 PID: 27294 Comm: syz.9.7183 Not tainted syzkaller #0 PREEMPT(full) [ 767.347849][T27294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 767.347862][T27294] Call Trace: [ 767.347871][T27294] [ 767.347880][T27294] dump_stack_lvl+0x189/0x250 [ 767.347913][T27294] ? __pfx____ratelimit+0x10/0x10 [ 767.347936][T27294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.347961][T27294] ? __pfx__printk+0x10/0x10 [ 767.347998][T27294] ? __pfx___might_resched+0x10/0x10 [ 767.348024][T27294] should_fail_ex+0x414/0x560 [ 767.348071][T27294] should_failslab+0xa8/0x100 [ 767.348103][T27294] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 767.348131][T27294] ? __alloc_skb+0x112/0x2d0 [ 767.348161][T27294] __alloc_skb+0x112/0x2d0 [ 767.348189][T27294] netlink_sendmsg+0x5c6/0xb30 [ 767.348224][T27294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.348253][T27294] ? aa_sock_msg_perm+0xf1/0x1d0 [ 767.348276][T27294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 767.348298][T27294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.348330][T27294] __sock_sendmsg+0x21c/0x270 [ 767.348365][T27294] ____sys_sendmsg+0x505/0x830 [ 767.348399][T27294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.348438][T27294] ? import_iovec+0x74/0xa0 [ 767.348471][T27294] ___sys_sendmsg+0x21f/0x2a0 [ 767.348501][T27294] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.348580][T27294] ? __fget_files+0x2a/0x420 [ 767.348600][T27294] ? __fget_files+0x3a0/0x420 [ 767.348632][T27294] __x64_sys_sendmsg+0x19b/0x260 [ 767.348661][T27294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.348700][T27294] ? __pfx_ksys_write+0x10/0x10 [ 767.348726][T27294] ? rcu_is_watching+0x15/0xb0 [ 767.348753][T27294] ? do_syscall_64+0xbe/0x3b0 [ 767.348782][T27294] do_syscall_64+0xfa/0x3b0 [ 767.348803][T27294] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.348824][T27294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.348845][T27294] ? clear_bhb_loop+0x60/0xb0 [ 767.348872][T27294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.348892][T27294] RIP: 0033:0x7faf0158eba9 [ 767.348912][T27294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.348932][T27294] RSP: 002b:00007faf023e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.348955][T27294] RAX: ffffffffffffffda RBX: 00007faf017d5fa0 RCX: 00007faf0158eba9 [ 767.348971][T27294] RDX: 0000000004050884 RSI: 0000200000002080 RDI: 0000000000000005 [ 767.348985][T27294] RBP: 00007faf023e5090 R08: 0000000000000000 R09: 0000000000000000 [ 767.348998][T27294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.349011][T27294] R13: 00007faf017d6038 R14: 00007faf017d5fa0 R15: 00007ffce5e57878 [ 767.349047][T27294] [ 767.781168][T27303] sock: sock_set_timeout: `syz.8.7188' (pid 27303) tries to set negative timeout [ 768.002136][T27319] __nla_validate_parse: 2 callbacks suppressed [ 768.002159][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7191'. [ 768.097032][T27327] FAULT_INJECTION: forcing a failure. [ 768.097032][T27327] name failslab, interval 1, probability 0, space 0, times 0 [ 768.114969][T27327] CPU: 1 UID: 0 PID: 27327 Comm: syz.7.7194 Not tainted syzkaller #0 PREEMPT(full) [ 768.114996][T27327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.115007][T27327] Call Trace: [ 768.115014][T27327] [ 768.115024][T27327] dump_stack_lvl+0x189/0x250 [ 768.115055][T27327] ? __pfx____ratelimit+0x10/0x10 [ 768.115077][T27327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.115103][T27327] ? __pfx__printk+0x10/0x10 [ 768.115134][T27327] ? __lock_acquire+0xab9/0xd20 [ 768.115177][T27327] should_fail_ex+0x414/0x560 [ 768.115214][T27327] should_failslab+0xa8/0x100 [ 768.115246][T27327] kmem_cache_alloc_noprof+0x73/0x3c0 [ 768.115272][T27327] ? skb_clone+0x212/0x3a0 [ 768.115306][T27327] skb_clone+0x212/0x3a0 [ 768.115334][T27327] __netlink_deliver_tap+0x404/0x850 [ 768.115373][T27327] ? netlink_deliver_tap+0x2e/0x1b0 [ 768.115397][T27327] netlink_deliver_tap+0x19c/0x1b0 [ 768.115420][T27327] netlink_unicast+0x7fa/0x9e0 [ 768.115463][T27327] ? __pfx_netlink_unicast+0x10/0x10 [ 768.115496][T27327] ? netlink_sendmsg+0x642/0xb30 [ 768.115528][T27327] ? skb_put+0x11b/0x210 [ 768.115556][T27327] netlink_sendmsg+0x805/0xb30 [ 768.115589][T27327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.115615][T27327] ? aa_sock_msg_perm+0xf1/0x1d0 [ 768.115638][T27327] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.115661][T27327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.115683][T27327] __sock_sendmsg+0x21c/0x270 [ 768.115718][T27327] ____sys_sendmsg+0x505/0x830 [ 768.115752][T27327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.115790][T27327] ? import_iovec+0x74/0xa0 [ 768.115823][T27327] ___sys_sendmsg+0x21f/0x2a0 [ 768.115853][T27327] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.115926][T27327] ? __fget_files+0x2a/0x420 [ 768.115944][T27327] ? __fget_files+0x3a0/0x420 [ 768.115977][T27327] __x64_sys_sendmsg+0x19b/0x260 [ 768.116008][T27327] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.116047][T27327] ? __pfx_ksys_write+0x10/0x10 [ 768.116072][T27327] ? rcu_is_watching+0x15/0xb0 [ 768.116101][T27327] ? do_syscall_64+0xbe/0x3b0 [ 768.116129][T27327] do_syscall_64+0xfa/0x3b0 [ 768.116150][T27327] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.116171][T27327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.116192][T27327] ? clear_bhb_loop+0x60/0xb0 [ 768.116219][T27327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.116239][T27327] RIP: 0033:0x7f6a9718eba9 [ 768.116259][T27327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.116276][T27327] RSP: 002b:00007f6a980d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.116299][T27327] RAX: ffffffffffffffda RBX: 00007f6a973d5fa0 RCX: 00007f6a9718eba9 [ 768.116316][T27327] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 768.116329][T27327] RBP: 00007f6a980d7090 R08: 0000000000000000 R09: 0000000000000000 [ 768.116342][T27327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.116355][T27327] R13: 00007f6a973d6038 R14: 00007f6a973d5fa0 R15: 00007ffdf13f0ce8 [ 768.116392][T27327] [ 768.116555][T27327] openvswitch: netlink: IP tunnel TTL not specified. [ 768.162467][T27332] netlink: 'syz.9.7196': attribute type 17 has an invalid length. [ 768.240522][T27338] FAULT_INJECTION: forcing a failure. [ 768.240522][T27338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.296814][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7196'. [ 768.303450][T27338] CPU: 1 UID: 0 PID: 27338 Comm: syz.7.7197 Not tainted syzkaller #0 PREEMPT(full) [ 768.303475][T27338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.303487][T27338] Call Trace: [ 768.303495][T27338] [ 768.303503][T27338] dump_stack_lvl+0x189/0x250 [ 768.303537][T27338] ? __pfx____ratelimit+0x10/0x10 [ 768.303557][T27338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.303579][T27338] ? __pfx__printk+0x10/0x10 [ 768.303604][T27338] ? __might_fault+0xb0/0x130 [ 768.303641][T27338] should_fail_ex+0x414/0x560 [ 768.303673][T27338] _copy_from_iter+0x1de/0x1790 [ 768.303703][T27338] ? rcu_is_watching+0x15/0xb0 [ 768.303724][T27338] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 768.303752][T27338] ? __pfx__copy_from_iter+0x10/0x10 [ 768.303775][T27338] ? __build_skb_around+0x257/0x3e0 [ 768.303800][T27338] ? netlink_sendmsg+0x642/0xb30 [ 768.303818][T27338] ? skb_put+0x11b/0x210 [ 768.303843][T27338] netlink_sendmsg+0x6b2/0xb30 [ 768.303873][T27338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.303897][T27338] ? aa_sock_msg_perm+0xf1/0x1d0 [ 768.303918][T27338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.303939][T27338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.303960][T27338] __sock_sendmsg+0x21c/0x270 [ 768.303991][T27338] ____sys_sendmsg+0x505/0x830 [ 768.304021][T27338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.304054][T27338] ? import_iovec+0x74/0xa0 [ 768.304082][T27338] ___sys_sendmsg+0x21f/0x2a0 [ 768.304107][T27338] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.304170][T27338] ? __fget_files+0x2a/0x420 [ 768.304185][T27338] ? __fget_files+0x3a0/0x420 [ 768.304213][T27338] __x64_sys_sendmsg+0x19b/0x260 [ 768.304239][T27338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.304273][T27338] ? __pfx_ksys_write+0x10/0x10 [ 768.304295][T27338] ? rcu_is_watching+0x15/0xb0 [ 768.304319][T27338] ? do_syscall_64+0xbe/0x3b0 [ 768.304344][T27338] do_syscall_64+0xfa/0x3b0 [ 768.304362][T27338] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.304380][T27338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.304398][T27338] ? clear_bhb_loop+0x60/0xb0 [ 768.304421][T27338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.304439][T27338] RIP: 0033:0x7f6a9718eba9 [ 768.304460][T27338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.304477][T27338] RSP: 002b:00007f6a980d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.304498][T27338] RAX: ffffffffffffffda RBX: 00007f6a973d5fa0 RCX: 00007f6a9718eba9 [ 768.304519][T27338] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 768.304531][T27338] RBP: 00007f6a980d7090 R08: 0000000000000000 R09: 0000000000000000 [ 768.304543][T27338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.304554][T27338] R13: 00007f6a973d6038 R14: 00007f6a973d5fa0 R15: 00007ffdf13f0ce8 [ 768.304585][T27338] [ 768.758720][T27332] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7196'. [ 768.809861][T27323] veth5: entered promiscuous mode [ 768.859675][T27332] gretap0: entered promiscuous mode [ 768.884964][T27332] gretap0: left promiscuous mode [ 768.983080][T27332] netlink: 'syz.9.7196': attribute type 17 has an invalid length. [ 768.996073][T27348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7201'. [ 769.005619][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7196'. [ 769.026798][T27332] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7196'. [ 769.044558][T27348] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 769.053295][T27348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.068237][T27332] gretap0: entered promiscuous mode [ 769.093243][T27332] gretap0: left promiscuous mode [ 769.100278][T27353] sock: sock_set_timeout: `syz.8.7202' (pid 27353) tries to set negative timeout [ 769.299768][T27365] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7204'. [ 769.314868][T27356] bridge0: port 3(syz_tun) entered disabled state [ 769.446848][T27356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.545880][ T3018] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.569259][ T3018] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.680555][T27381] FAULT_INJECTION: forcing a failure. [ 769.680555][T27381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.718646][T27381] CPU: 1 UID: 0 PID: 27381 Comm: syz.8.7208 Not tainted syzkaller #0 PREEMPT(full) [ 769.718677][T27381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 769.718688][T27381] Call Trace: [ 769.718696][T27381] [ 769.718706][T27381] dump_stack_lvl+0x189/0x250 [ 769.718736][T27381] ? __pfx____ratelimit+0x10/0x10 [ 769.718758][T27381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.718782][T27381] ? __pfx__printk+0x10/0x10 [ 769.718811][T27381] ? __might_fault+0xb0/0x130 [ 769.718850][T27381] should_fail_ex+0x414/0x560 [ 769.718888][T27381] _copy_from_iter+0x1de/0x1790 [ 769.718921][T27381] ? rcu_is_watching+0x15/0xb0 [ 769.718945][T27381] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 769.718974][T27381] ? __pfx__copy_from_iter+0x10/0x10 [ 769.719001][T27381] ? __build_skb_around+0x257/0x3e0 [ 769.719026][T27381] ? netlink_sendmsg+0x642/0xb30 [ 769.719046][T27381] ? skb_put+0x11b/0x210 [ 769.719075][T27381] netlink_sendmsg+0x6b2/0xb30 [ 769.719110][T27381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.719136][T27381] ? aa_sock_msg_perm+0xf1/0x1d0 [ 769.719162][T27381] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.719185][T27381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.719209][T27381] __sock_sendmsg+0x21c/0x270 [ 769.719241][T27381] ____sys_sendmsg+0x505/0x830 [ 769.719276][T27381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.719313][T27381] ? import_iovec+0x74/0xa0 [ 769.719347][T27381] ___sys_sendmsg+0x21f/0x2a0 [ 769.719383][T27381] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.719446][T27381] ? __fget_files+0x2a/0x420 [ 769.719463][T27381] ? __fget_files+0x3a0/0x420 [ 769.719501][T27381] __x64_sys_sendmsg+0x19b/0x260 [ 769.719530][T27381] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 769.719565][T27381] ? __pfx_ksys_write+0x10/0x10 [ 769.719590][T27381] ? rcu_is_watching+0x15/0xb0 [ 769.719615][T27381] ? do_syscall_64+0xbe/0x3b0 [ 769.719641][T27381] do_syscall_64+0xfa/0x3b0 [ 769.719661][T27381] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.719682][T27381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.719703][T27381] ? clear_bhb_loop+0x60/0xb0 [ 769.719729][T27381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.719749][T27381] RIP: 0033:0x7f5ea3f8eba9 [ 769.719770][T27381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.719789][T27381] RSP: 002b:00007f5ea4d39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.719813][T27381] RAX: ffffffffffffffda RBX: 00007f5ea41d5fa0 RCX: 00007f5ea3f8eba9 [ 769.719828][T27381] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 769.719842][T27381] RBP: 00007f5ea4d39090 R08: 0000000000000000 R09: 0000000000000000 [ 769.719855][T27381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.719868][T27381] R13: 00007f5ea41d6038 R14: 00007f5ea41d5fa0 R15: 00007ffc359d4e08 [ 769.719904][T27381] [ 770.009598][ T3018] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.030951][T27392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.060750][ T36] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.154821][T27396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7212'. [ 770.244368][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7213'. [ 770.253757][T27398] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 770.261362][T27398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.445571][T27402] sock: sock_set_timeout: `syz.8.7215' (pid 27402) tries to set negative timeout [ 770.469912][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7216'. [ 770.676221][T27424] FAULT_INJECTION: forcing a failure. [ 770.676221][T27424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 770.780081][T27424] CPU: 0 UID: 0 PID: 27424 Comm: syz.8.7220 Not tainted syzkaller #0 PREEMPT(full) [ 770.780110][T27424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 770.780123][T27424] Call Trace: [ 770.780132][T27424] [ 770.780141][T27424] dump_stack_lvl+0x189/0x250 [ 770.780171][T27424] ? __pfx____ratelimit+0x10/0x10 [ 770.780192][T27424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.780216][T27424] ? __pfx__printk+0x10/0x10 [ 770.780246][T27424] ? fs_reclaim_acquire+0x7d/0x100 [ 770.780277][T27424] should_fail_ex+0x414/0x560 [ 770.780312][T27424] prepare_alloc_pages+0x213/0x610 [ 770.780341][T27424] __alloc_frozen_pages_noprof+0x123/0x370 [ 770.780367][T27424] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 770.780401][T27424] ? policy_nodemask+0x27c/0x720 [ 770.780426][T27424] ? __lock_acquire+0xab9/0xd20 [ 770.780461][T27424] alloc_pages_mpol+0x232/0x4a0 [ 770.780497][T27424] vma_alloc_folio_noprof+0xe4/0x200 [ 770.780529][T27424] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 770.780583][T27424] folio_prealloc+0x30/0x180 [ 770.780614][T27424] __handle_mm_fault+0x2ab9/0x5440 [ 770.780661][T27424] ? __pfx___handle_mm_fault+0x10/0x10 [ 770.780712][T27424] ? find_vma+0xe7/0x160 [ 770.780736][T27424] ? __pfx_find_vma+0x10/0x10 [ 770.780766][T27424] handle_mm_fault+0x40a/0x8e0 [ 770.780805][T27424] do_user_addr_fault+0x764/0x1390 [ 770.780856][T27424] exc_page_fault+0x76/0xf0 [ 770.780880][T27424] asm_exc_page_fault+0x26/0x30 [ 770.780899][T27424] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 770.780927][T27424] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 770.780945][T27424] RSP: 0018:ffffc9000f0cf4d8 EFLAGS: 00050202 [ 770.780965][T27424] RAX: ffffffff84c5f901 RBX: ffff888051346000 RCX: 00000000000005d4 [ 770.780980][T27424] RDX: 0000000000000000 RSI: ffff8880513468c0 RDI: 0000200000006000 [ 770.780994][T27424] RBP: ffffc9000f0cf650 R08: ffff888051346e93 R09: 1ffff1100a268dd2 [ 770.781009][T27424] R10: dffffc0000000000 R11: ffffed100a268dd3 R12: 1ffff92001e19f9f [ 770.781025][T27424] R13: 0000200000005740 R14: ffffc9000f0cfd08 R15: 0000000000000e94 [ 770.781049][T27424] ? _copy_to_iter+0x1c1/0x1790 [ 770.781082][T27424] _copy_to_iter+0x24f/0x1790 [ 770.781109][T27424] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 770.781141][T27424] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.781166][T27424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 770.781198][T27424] ? __pfx__copy_to_iter+0x10/0x10 [ 770.781235][T27424] ? __skb_try_recv_from_queue+0x58f/0x730 [ 770.781270][T27424] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 770.781305][T27424] __skb_datagram_iter+0xf8/0x990 [ 770.781334][T27424] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 770.781372][T27424] skb_copy_datagram_iter+0xc5/0x230 [ 770.781404][T27424] netlink_recvmsg+0x2ab/0xa30 [ 770.781439][T27424] ? __pfx_netlink_recvmsg+0x10/0x10 [ 770.781466][T27424] ? __lock_acquire+0xab9/0xd20 [ 770.781492][T27424] ? aa_sock_msg_perm+0xf1/0x1d0 [ 770.781515][T27424] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 770.781536][T27424] ? security_socket_recvmsg+0x7e/0x2e0 [ 770.781567][T27424] ? __pfx_netlink_recvmsg+0x10/0x10 [ 770.781590][T27424] sock_recvmsg+0x22c/0x270 [ 770.781632][T27424] ____sys_recvmsg+0x1c9/0x460 [ 770.781668][T27424] ? __pfx_____sys_recvmsg+0x10/0x10 [ 770.781712][T27424] ? import_iovec+0x74/0xa0 [ 770.781742][T27424] ___sys_recvmsg+0x1b5/0x510 [ 770.781775][T27424] ? __pfx____sys_recvmsg+0x10/0x10 [ 770.781835][T27424] ? __fget_files+0x3a0/0x420 [ 770.781870][T27424] do_recvmmsg+0x307/0x770 [ 770.781910][T27424] ? __pfx_do_recvmmsg+0x10/0x10 [ 770.781951][T27424] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 770.781997][T27424] __x64_sys_recvmmsg+0x190/0x240 [ 770.782029][T27424] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 770.782055][T27424] ? rcu_is_watching+0x15/0xb0 [ 770.782084][T27424] ? do_syscall_64+0xbe/0x3b0 [ 770.782113][T27424] do_syscall_64+0xfa/0x3b0 [ 770.782134][T27424] ? lockdep_hardirqs_on+0x9c/0x150 [ 770.782154][T27424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.782175][T27424] ? clear_bhb_loop+0x60/0xb0 [ 770.782203][T27424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.782223][T27424] RIP: 0033:0x7f5ea3f8eba9 [ 770.782242][T27424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.782259][T27424] RSP: 002b:00007f5ea4d39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 770.782279][T27424] RAX: ffffffffffffffda RBX: 00007f5ea41d5fa0 RCX: 00007f5ea3f8eba9 [ 770.782293][T27424] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 770.782306][T27424] RBP: 00007f5ea4d39090 R08: 0000000000000000 R09: 0000000000000000 [ 770.782318][T27424] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 770.782330][T27424] R13: 00007f5ea41d6038 R14: 00007f5ea41d5fa0 R15: 00007ffc359d4e08 [ 770.782367][T27424] [ 770.839700][T27430] FAULT_INJECTION: forcing a failure. [ 770.839700][T27430] name failslab, interval 1, probability 0, space 0, times 0 [ 771.303052][T27430] CPU: 1 UID: 0 PID: 27430 Comm: syz.6.7223 Not tainted syzkaller #0 PREEMPT(full) [ 771.303082][T27430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.303094][T27430] Call Trace: [ 771.303101][T27430] [ 771.303109][T27430] dump_stack_lvl+0x189/0x250 [ 771.303135][T27430] ? __pfx____ratelimit+0x10/0x10 [ 771.303153][T27430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.303177][T27430] ? __pfx__printk+0x10/0x10 [ 771.303207][T27430] ? __pfx___might_resched+0x10/0x10 [ 771.303221][T27430] ? fs_reclaim_acquire+0x7d/0x100 [ 771.303242][T27430] should_fail_ex+0x414/0x560 [ 771.303276][T27430] should_failslab+0xa8/0x100 [ 771.303311][T27430] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 771.303334][T27430] ? __alloc_skb+0x112/0x2d0 [ 771.303363][T27430] __alloc_skb+0x112/0x2d0 [ 771.303392][T27430] netlink_ack+0x146/0xa50 [ 771.303410][T27430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.303449][T27430] netlink_rcv_skb+0x28c/0x470 [ 771.303465][T27430] ? __lock_acquire+0xab9/0xd20 [ 771.303490][T27430] ? __pfx_genl_rcv_msg+0x10/0x10 [ 771.303513][T27430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.303552][T27430] ? down_read+0x1ad/0x2e0 [ 771.303576][T27430] genl_rcv+0x28/0x40 [ 771.303596][T27430] netlink_unicast+0x82f/0x9e0 [ 771.303632][T27430] ? __pfx_netlink_unicast+0x10/0x10 [ 771.303660][T27430] ? netlink_sendmsg+0x642/0xb30 [ 771.303677][T27430] ? skb_put+0x11b/0x210 [ 771.303702][T27430] netlink_sendmsg+0x805/0xb30 [ 771.303732][T27430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.303756][T27430] ? aa_sock_msg_perm+0xf1/0x1d0 [ 771.303777][T27430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.303796][T27430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.303817][T27430] __sock_sendmsg+0x21c/0x270 [ 771.303848][T27430] ____sys_sendmsg+0x505/0x830 [ 771.303880][T27430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.303914][T27430] ? import_iovec+0x74/0xa0 [ 771.303945][T27430] ___sys_sendmsg+0x21f/0x2a0 [ 771.303971][T27430] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.304036][T27430] ? __fget_files+0x2a/0x420 [ 771.304050][T27430] ? __fget_files+0x3a0/0x420 [ 771.304077][T27430] __x64_sys_sendmsg+0x19b/0x260 [ 771.304102][T27430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.304136][T27430] ? __pfx_ksys_write+0x10/0x10 [ 771.304158][T27430] ? rcu_is_watching+0x15/0xb0 [ 771.304182][T27430] ? do_syscall_64+0xbe/0x3b0 [ 771.304206][T27430] do_syscall_64+0xfa/0x3b0 [ 771.304223][T27430] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.304241][T27430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.304258][T27430] ? clear_bhb_loop+0x60/0xb0 [ 771.304281][T27430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.304308][T27430] RIP: 0033:0x7feb3398eba9 [ 771.304326][T27430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.304342][T27430] RSP: 002b:00007feb3487b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.304364][T27430] RAX: ffffffffffffffda RBX: 00007feb33bd5fa0 RCX: 00007feb3398eba9 [ 771.304379][T27430] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 771.304392][T27430] RBP: 00007feb3487b090 R08: 0000000000000000 R09: 0000000000000000 [ 771.304403][T27430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.304413][T27430] R13: 00007feb33bd6038 R14: 00007feb33bd5fa0 R15: 00007ffde2bee3a8 [ 771.304444][T27430] [ 771.751468][T27441] sit0: entered promiscuous mode [ 771.795136][T27441] sit0: entered allmulticast mode [ 771.848409][T27451] net_ratelimit: 1 callbacks suppressed [ 771.848431][T27451] openvswitch: netlink: IPv6 tunnel dst address is zero [ 771.964914][T27457] sock: sock_set_timeout: `syz.6.7230' (pid 27457) tries to set negative timeout [ 772.144583][T27470] openvswitch: netlink: IP tunnel TTL not specified. [ 772.459795][T27488] netlink: 'syz.7.7242': attribute type 2 has an invalid length. [ 772.474458][T27488] netlink: 'syz.7.7242': attribute type 1 has an invalid length. [ 772.994690][T27500] sock: sock_set_timeout: `syz.7.7245' (pid 27500) tries to set negative timeout [ 773.016556][T27503] sctp: [Deprecated]: syz.8.7249 (pid 27503) Use of int in max_burst socket option. [ 773.016556][T27503] Use struct sctp_assoc_value instead [ 773.110003][T27503] netlink: 'syz.8.7249': attribute type 23 has an invalid length. [ 773.190070][T27506] netlink: 'syz.5.7250': attribute type 1 has an invalid length. [ 773.269698][T27506] __nla_validate_parse: 4 callbacks suppressed [ 773.269722][T27506] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7250'. [ 773.315167][T27516] netlink: 'syz.7.7253': attribute type 16 has an invalid length. [ 773.351028][T27516] netlink: 'syz.7.7253': attribute type 17 has an invalid length. [ 773.509808][T27516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.577602][T27529] macvlan0: entered allmulticast mode [ 773.610544][T27529] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 773.675197][T27537] xt_l2tp: invalid flags combination: 0 [ 773.691954][T27532] nbd1: detected capacity change from 0 to 127 [ 773.719482][T27539] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 773.733382][ T5874] block nbd1: Receive control failed (result -32) [ 773.771578][T27541] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7261'. [ 773.781007][T27541] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7261'. [ 773.997570][T27553] sock: sock_set_timeout: `syz.9.7263' (pid 27553) tries to set negative timeout [ 774.052726][T27556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7267'. [ 774.084817][T27556] netlink: 272 bytes leftover after parsing attributes in process `syz.5.7267'. [ 774.144173][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7267'. [ 774.188411][T27569] netlink: 'syz.8.7269': attribute type 16 has an invalid length. [ 774.276624][T27569] netlink: 'syz.8.7269': attribute type 17 has an invalid length. [ 774.366480][T27569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.420531][T27583] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 774.719465][T27602] sock: sock_set_timeout: `syz.8.7283' (pid 27602) tries to set negative timeout [ 775.111065][T27624] netlink: 244 bytes leftover after parsing attributes in process `syz.5.7291'. [ 775.586086][T27651] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.7301'. [ 775.601053][T27656] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7303'. [ 775.978163][T27673] netlink: 'syz.5.7309': attribute type 4 has an invalid length. [ 776.026531][T27676] FAULT_INJECTION: forcing a failure. [ 776.026531][T27676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.052053][T27676] CPU: 1 UID: 0 PID: 27676 Comm: syz.8.7308 Not tainted syzkaller #0 PREEMPT(full) [ 776.052084][T27676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.052097][T27676] Call Trace: [ 776.052106][T27676] [ 776.052115][T27676] dump_stack_lvl+0x189/0x250 [ 776.052146][T27676] ? __pfx____ratelimit+0x10/0x10 [ 776.052169][T27676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.052194][T27676] ? __pfx__printk+0x10/0x10 [ 776.052247][T27676] should_fail_ex+0x414/0x560 [ 776.052284][T27676] _copy_to_user+0x31/0xb0 [ 776.052315][T27676] simple_read_from_buffer+0xe1/0x170 [ 776.052351][T27676] proc_fail_nth_read+0x1b3/0x220 [ 776.052379][T27676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 776.052406][T27676] ? rw_verify_area+0x2a6/0x4d0 [ 776.052430][T27676] ? __lock_acquire+0xab9/0xd20 [ 776.052458][T27676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 776.052482][T27676] vfs_read+0x200/0xa30 [ 776.052506][T27676] ? fdget_pos+0x247/0x320 [ 776.052530][T27676] ? __pfx___mutex_lock+0x10/0x10 [ 776.052554][T27676] ? __pfx_vfs_read+0x10/0x10 [ 776.052582][T27676] ? __fget_files+0x2a/0x420 [ 776.052606][T27676] ? __fget_files+0x3a0/0x420 [ 776.052623][T27676] ? __fget_files+0x2a/0x420 [ 776.052652][T27676] ksys_read+0x145/0x250 [ 776.052683][T27676] ? __pfx_ksys_read+0x10/0x10 [ 776.052705][T27676] ? rcu_is_watching+0x15/0xb0 [ 776.052734][T27676] ? do_syscall_64+0xbe/0x3b0 [ 776.052761][T27676] do_syscall_64+0xfa/0x3b0 [ 776.052782][T27676] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.052803][T27676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.052825][T27676] ? clear_bhb_loop+0x60/0xb0 [ 776.052850][T27676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.052868][T27676] RIP: 0033:0x7f5ea3f8d5bc [ 776.052887][T27676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 776.052905][T27676] RSP: 002b:00007f5ea4d39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 776.052927][T27676] RAX: ffffffffffffffda RBX: 00007f5ea41d5fa0 RCX: 00007f5ea3f8d5bc [ 776.052942][T27676] RDX: 000000000000000f RSI: 00007f5ea4d390a0 RDI: 0000000000000003 [ 776.052955][T27676] RBP: 00007f5ea4d39090 R08: 0000000000000000 R09: 0000000000000000 [ 776.052968][T27676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.052980][T27676] R13: 00007f5ea41d6038 R14: 00007f5ea41d5fa0 R15: 00007ffc359d4e08 [ 776.053017][T27676] [ 776.475433][T27693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7314'. [ 776.809510][T27709] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 776.968380][T27719] net_ratelimit: 3 callbacks suppressed [ 776.968403][T27719] openvswitch: netlink: IPv6 tunnel dst address is zero [ 777.325291][T27736] syz_tun: entered allmulticast mode [ 777.367082][T27733] syz_tun: left allmulticast mode [ 777.738248][T27756] openvswitch: netlink: IPv6 tunnel dst address is zero [ 777.937440][T27772] team0: vlans aren't supported yet for dev_uc|mc_add() [ 777.972886][T27772] xt_time: unknown flags 0xf4 [ 778.117273][T27782] bond0: entered promiscuous mode [ 778.124214][T27783] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 778.157311][T27782] batadv0: entered promiscuous mode [ 778.173629][T27782] batadv0: left promiscuous mode [ 778.186491][T27782] bond0: left promiscuous mode [ 778.370509][T27791] FAULT_INJECTION: forcing a failure. [ 778.370509][T27791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.404429][T27791] CPU: 1 UID: 0 PID: 27791 Comm: syz.5.7350 Not tainted syzkaller #0 PREEMPT(full) [ 778.404461][T27791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.404472][T27791] Call Trace: [ 778.404481][T27791] [ 778.404491][T27791] dump_stack_lvl+0x189/0x250 [ 778.404522][T27791] ? __pfx____ratelimit+0x10/0x10 [ 778.404545][T27791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.404570][T27791] ? __pfx__printk+0x10/0x10 [ 778.404600][T27791] ? __might_fault+0xb0/0x130 [ 778.404642][T27791] should_fail_ex+0x414/0x560 [ 778.404677][T27791] _copy_from_user+0x2d/0xb0 [ 778.404705][T27791] ___sys_sendmsg+0x158/0x2a0 [ 778.404734][T27791] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.404803][T27791] ? __fget_files+0x2a/0x420 [ 778.404823][T27791] ? __fget_files+0x3a0/0x420 [ 778.404855][T27791] __x64_sys_sendmsg+0x19b/0x260 [ 778.404883][T27791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.404919][T27791] ? __pfx_ksys_write+0x10/0x10 [ 778.404943][T27791] ? rcu_is_watching+0x15/0xb0 [ 778.404971][T27791] ? do_syscall_64+0xbe/0x3b0 [ 778.404998][T27791] do_syscall_64+0xfa/0x3b0 [ 778.405017][T27791] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.405037][T27791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.405056][T27791] ? clear_bhb_loop+0x60/0xb0 [ 778.405081][T27791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.405100][T27791] RIP: 0033:0x7fe85958eba9 [ 778.405118][T27791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.405136][T27791] RSP: 002b:00007fe8577f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.405159][T27791] RAX: ffffffffffffffda RBX: 00007fe8597d5fa0 RCX: 00007fe85958eba9 [ 778.405173][T27791] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 778.405187][T27791] RBP: 00007fe8577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 778.405199][T27791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.405211][T27791] R13: 00007fe8597d6038 R14: 00007fe8597d5fa0 R15: 00007ffc961a7d58 [ 778.405256][T27791] [ 778.630707][T27800] openvswitch: netlink: IPv6 tunnel dst address is zero [ 778.858737][T27813] __nla_validate_parse: 2 callbacks suppressed [ 778.858757][T27813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7355'. [ 778.925375][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7355'. [ 779.259167][T27841] FAULT_INJECTION: forcing a failure. [ 779.259167][T27841] name failslab, interval 1, probability 0, space 0, times 0 [ 779.297687][T27841] CPU: 0 UID: 0 PID: 27841 Comm: syz.8.7367 Not tainted syzkaller #0 PREEMPT(full) [ 779.297718][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 779.297731][T27841] Call Trace: [ 779.297740][T27841] [ 779.297748][T27841] dump_stack_lvl+0x189/0x250 [ 779.297779][T27841] ? __pfx____ratelimit+0x10/0x10 [ 779.297802][T27841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.297826][T27841] ? __pfx__printk+0x10/0x10 [ 779.297862][T27841] ? __pfx___might_resched+0x10/0x10 [ 779.297889][T27841] should_fail_ex+0x414/0x560 [ 779.297926][T27841] should_failslab+0xa8/0x100 [ 779.297958][T27841] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 779.297987][T27841] ? __alloc_skb+0x112/0x2d0 [ 779.298015][T27841] __alloc_skb+0x112/0x2d0 [ 779.298043][T27841] netlink_sendmsg+0x5c6/0xb30 [ 779.298076][T27841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.298103][T27841] ? aa_sock_msg_perm+0xf1/0x1d0 [ 779.298127][T27841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.298148][T27841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.298171][T27841] __sock_sendmsg+0x21c/0x270 [ 779.298207][T27841] ____sys_sendmsg+0x505/0x830 [ 779.298239][T27841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.298287][T27841] ? import_iovec+0x74/0xa0 [ 779.298319][T27841] ___sys_sendmsg+0x21f/0x2a0 [ 779.298348][T27841] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.298416][T27841] ? __fget_files+0x2a/0x420 [ 779.298435][T27841] ? __fget_files+0x3a0/0x420 [ 779.298467][T27841] __x64_sys_sendmsg+0x19b/0x260 [ 779.298497][T27841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.298534][T27841] ? __pfx_ksys_write+0x10/0x10 [ 779.298559][T27841] ? rcu_is_watching+0x15/0xb0 [ 779.298587][T27841] ? do_syscall_64+0xbe/0x3b0 [ 779.298615][T27841] do_syscall_64+0xfa/0x3b0 [ 779.298636][T27841] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.298656][T27841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.298683][T27841] ? clear_bhb_loop+0x60/0xb0 [ 779.298708][T27841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.298729][T27841] RIP: 0033:0x7f5ea3f8eba9 [ 779.298749][T27841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.298768][T27841] RSP: 002b:00007f5ea4d39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.298791][T27841] RAX: ffffffffffffffda RBX: 00007f5ea41d5fa0 RCX: 00007f5ea3f8eba9 [ 779.298807][T27841] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 779.298821][T27841] RBP: 00007f5ea4d39090 R08: 0000000000000000 R09: 0000000000000000 [ 779.298834][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.298847][T27841] R13: 00007f5ea41d6038 R14: 00007f5ea41d5fa0 R15: 00007ffc359d4e08 [ 779.298880][T27841] [ 779.538734][T27854] openvswitch: netlink: Key type 528 is out of range max 32 [ 779.605446][T27861] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 779.619036][T27865] netlink: 'syz.6.7370': attribute type 33 has an invalid length. [ 779.729745][T27871] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7376'. [ 779.780962][T27875] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 780.297599][T27904] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 780.481767][T27917] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7392'. [ 780.590471][T27922] tipc: Enabled bearer , priority 0 [ 780.650356][T27922] syzkaller0: entered promiscuous mode [ 780.656526][T27922] syzkaller0: entered allmulticast mode [ 780.680525][T27922] tipc: Resetting bearer [ 780.703900][T27922] tipc: Disabling bearer [ 780.986271][T27898] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 781.147047][T27942] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 781.182408][T27941] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 781.299220][T27948] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7401'. [ 781.310357][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7401'. [ 781.372614][T27950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7403'. [ 781.419771][T27950] netlink: 'syz.6.7403': attribute type 10 has an invalid length. [ 781.466877][T27956] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7405'. [ 781.659581][T27964] veth13: entered promiscuous mode [ 781.777720][T27975] openvswitch: netlink: IPv6 tunnel dst address is zero [ 781.921392][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7413'. [ 781.957353][T27981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7413'. [ 782.119606][T27991] netlink: 'syz.9.7418': attribute type 12 has an invalid length. [ 782.167746][T27995] netlink: zone id is out of range [ 782.173474][T27995] netlink: zone id is out of range [ 782.178784][T27995] netlink: zone id is out of range [ 782.199098][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 782.206332][T27995] netlink: zone id is out of range [ 782.212262][T27995] netlink: zone id is out of range [ 782.218448][T27995] netlink: get zone limit has 8 unknown bytes [ 782.238989][T27999] netlink: 'syz.8.7420': attribute type 11 has an invalid length. [ 782.466344][T28009] veth5: entered promiscuous mode [ 782.515606][T28017] netlink: 'syz.8.7424': attribute type 16 has an invalid length. [ 782.525023][T28017] netlink: 'syz.8.7424': attribute type 17 has an invalid length. [ 782.632986][T28021] FAULT_INJECTION: forcing a failure. [ 782.632986][T28021] name failslab, interval 1, probability 0, space 0, times 0 [ 782.650609][T28021] CPU: 1 UID: 0 PID: 28021 Comm: syz.5.7428 Not tainted syzkaller #0 PREEMPT(full) [ 782.650640][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 782.650653][T28021] Call Trace: [ 782.650662][T28021] [ 782.650672][T28021] dump_stack_lvl+0x189/0x250 [ 782.650703][T28021] ? __pfx____ratelimit+0x10/0x10 [ 782.650726][T28021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.650752][T28021] ? __pfx__printk+0x10/0x10 [ 782.650789][T28021] ? __pfx___might_resched+0x10/0x10 [ 782.650817][T28021] should_fail_ex+0x414/0x560 [ 782.650856][T28021] should_failslab+0xa8/0x100 [ 782.650888][T28021] __kmalloc_noprof+0xcb/0x4f0 [ 782.650916][T28021] ? sock_kmalloc+0xd6/0x160 [ 782.650951][T28021] sock_kmalloc+0xd6/0x160 [ 782.650983][T28021] alg_setkey+0x55/0x190 [ 782.651009][T28021] ? alg_setsockopt+0x3c5/0x4a0 [ 782.651041][T28021] alg_setsockopt+0x3da/0x4a0 [ 782.651070][T28021] ? __pfx_alg_setsockopt+0x10/0x10 [ 782.651101][T28021] do_sock_setsockopt+0x179/0x1b0 [ 782.651132][T28021] __x64_sys_setsockopt+0x13f/0x1b0 [ 782.651164][T28021] do_syscall_64+0xfa/0x3b0 [ 782.651189][T28021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.651210][T28021] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 782.651231][T28021] ? clear_bhb_loop+0x60/0xb0 [ 782.651258][T28021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.651278][T28021] RIP: 0033:0x7fe85958eba9 [ 782.651298][T28021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.651315][T28021] RSP: 002b:00007fe8577f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 782.651337][T28021] RAX: ffffffffffffffda RBX: 00007fe8597d5fa0 RCX: 00007fe85958eba9 [ 782.651352][T28021] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 782.651364][T28021] RBP: 00007fe8577f6090 R08: 0000000000000011 R09: 0000000000000000 [ 782.651378][T28021] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 782.651401][T28021] R13: 00007fe8597d6038 R14: 00007fe8597d5fa0 R15: 00007ffc961a7d58 [ 782.651438][T28021] [ 782.876913][T28017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.034442][T28033] netlink: zone id is out of range [ 783.039802][T28033] netlink: zone id is out of range [ 783.045134][T28033] netlink: zone id is out of range [ 783.164459][T28039] veth0: entered promiscuous mode [ 783.205209][T28038] veth0: left promiscuous mode [ 783.448501][T28050] veth5: entered promiscuous mode [ 783.479295][T28057] netlink: 'syz.7.7443': attribute type 16 has an invalid length. [ 783.521872][T28057] netlink: 'syz.7.7443': attribute type 17 has an invalid length. [ 783.955402][T28076] veth0: entered promiscuous mode [ 783.982475][T28073] veth0: left promiscuous mode [ 784.026428][T28084] __nla_validate_parse: 8 callbacks suppressed [ 784.026451][T28084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7457'. [ 784.112446][T28078] bridge_slave_1: entered promiscuous mode [ 784.118401][T28078] bridge_slave_1: entered allmulticast mode [ 784.222680][T28092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7461'. [ 784.240088][T28093] veth5: entered promiscuous mode [ 784.273119][T28094] netlink: 'syz.9.7460': attribute type 1 has an invalid length. [ 784.306927][T28094] netlink: 224 bytes leftover after parsing attributes in process `syz.9.7460'. [ 784.320479][T28096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7462'. [ 784.465068][T28105] netlink: 'syz.6.7464': attribute type 29 has an invalid length. [ 784.475575][T28105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7464'. [ 784.546694][T28109] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.7466'. [ 784.589812][T28114] veth0: entered promiscuous mode [ 784.665784][T28112] veth0: left promiscuous mode [ 785.137778][T28139] veth5: entered promiscuous mode [ 785.447450][T28157] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.7483'. [ 785.508974][T28159] veth0: entered promiscuous mode [ 785.526509][T28158] veth0: left promiscuous mode [ 785.610948][T28167] netlink: 'syz.6.7486': attribute type 2 has an invalid length. [ 785.672827][T28170] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7488'. [ 786.017813][T28182] veth9: entered promiscuous mode [ 786.139652][T28196] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7497'. [ 786.256399][T28198] veth0: entered promiscuous mode [ 786.270204][T28197] veth0: left promiscuous mode [ 786.292360][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7499'. [ 786.497528][T28211] FAULT_INJECTION: forcing a failure. [ 786.497528][T28211] name failslab, interval 1, probability 0, space 0, times 0 [ 786.531476][T28211] CPU: 0 UID: 0 PID: 28211 Comm: syz.9.7503 Not tainted syzkaller #0 PREEMPT(full) [ 786.531505][T28211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 786.531517][T28211] Call Trace: [ 786.531526][T28211] [ 786.531535][T28211] dump_stack_lvl+0x189/0x250 [ 786.531566][T28211] ? __pfx____ratelimit+0x10/0x10 [ 786.531589][T28211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.531613][T28211] ? __pfx__printk+0x10/0x10 [ 786.531642][T28211] ? genl_rcv+0x28/0x40 [ 786.531669][T28211] ? ____sys_sendmsg+0x505/0x830 [ 786.531699][T28211] ? __x64_sys_sendmsg+0x19b/0x260 [ 786.531738][T28211] should_fail_ex+0x414/0x560 [ 786.531775][T28211] should_failslab+0xa8/0x100 [ 786.531807][T28211] kmem_cache_alloc_noprof+0x73/0x3c0 [ 786.531834][T28211] ? skb_clone+0x212/0x3a0 [ 786.531866][T28211] skb_clone+0x212/0x3a0 [ 786.531897][T28211] __netlink_deliver_tap+0x404/0x850 [ 786.531936][T28211] ? netlink_deliver_tap+0x2e/0x1b0 [ 786.531960][T28211] netlink_deliver_tap+0x19c/0x1b0 [ 786.531985][T28211] netlink_sendskb+0x68/0x140 [ 786.532020][T28211] netlink_unicast+0x397/0x9e0 [ 786.532048][T28211] ? __asan_memcpy+0x40/0x70 [ 786.532082][T28211] ? __pfx_netlink_unicast+0x10/0x10 [ 786.532126][T28211] netlink_rcv_skb+0x28c/0x470 [ 786.532145][T28211] ? __lock_acquire+0xab9/0xd20 [ 786.532176][T28211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 786.532205][T28211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 786.532252][T28211] ? down_read+0x1ad/0x2e0 [ 786.532279][T28211] genl_rcv+0x28/0x40 [ 786.532304][T28211] netlink_unicast+0x82f/0x9e0 [ 786.532354][T28211] ? __pfx_netlink_unicast+0x10/0x10 [ 786.532388][T28211] ? netlink_sendmsg+0x642/0xb30 [ 786.532407][T28211] ? skb_put+0x11b/0x210 [ 786.532435][T28211] netlink_sendmsg+0x805/0xb30 [ 786.532470][T28211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.532497][T28211] ? aa_sock_msg_perm+0xf1/0x1d0 [ 786.532521][T28211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 786.532542][T28211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.532566][T28211] __sock_sendmsg+0x21c/0x270 [ 786.532602][T28211] ____sys_sendmsg+0x505/0x830 [ 786.532636][T28211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.532675][T28211] ? import_iovec+0x74/0xa0 [ 786.532708][T28211] ___sys_sendmsg+0x21f/0x2a0 [ 786.532738][T28211] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.532812][T28211] ? __fget_files+0x2a/0x420 [ 786.532829][T28211] ? __fget_files+0x3a0/0x420 [ 786.532862][T28211] __x64_sys_sendmsg+0x19b/0x260 [ 786.532892][T28211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 786.532935][T28211] ? rcu_is_watching+0x15/0xb0 [ 786.532957][T28211] ? trace_sys_enter+0x25/0x100 [ 786.532995][T28211] do_syscall_64+0xfa/0x3b0 [ 786.533016][T28211] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.533037][T28211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.533057][T28211] ? clear_bhb_loop+0x60/0xb0 [ 786.533082][T28211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.533102][T28211] RIP: 0033:0x7faf0158eba9 [ 786.533121][T28211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.533139][T28211] RSP: 002b:00007faf023e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.533162][T28211] RAX: ffffffffffffffda RBX: 00007faf017d5fa0 RCX: 00007faf0158eba9 [ 786.533177][T28211] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 786.533191][T28211] RBP: 00007faf023e5090 R08: 0000000000000000 R09: 0000000000000000 [ 786.533204][T28211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.533217][T28211] R13: 00007faf017d6038 R14: 00007faf017d5fa0 R15: 00007ffce5e57878 [ 786.533254][T28211] [ 787.004319][T28218] netlink: 'syz.9.7505': attribute type 1 has an invalid length. [ 787.247067][T28229] net_ratelimit: 34 callbacks suppressed [ 787.247089][T28229] netlink: zone id is out of range [ 787.265202][T28229] netlink: zone id is out of range [ 787.270367][T28229] netlink: zone id is out of range [ 787.275836][T28229] netlink: zone id is out of range [ 787.280978][T28229] netlink: zone id is out of range [ 787.287845][T28229] netlink: get zone limit has 8 unknown bytes [ 787.323599][T28232] veth13: entered promiscuous mode [ 787.378829][T28231] veth0: entered promiscuous mode [ 787.411129][T28230] veth0: left promiscuous mode [ 787.568180][T28251] openvswitch: netlink: IPv6 tunnel dst address is zero [ 787.643641][ T6670] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 787.797980][T28264] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 787.979342][T28272] netlink: zone id is out of range [ 787.985991][T28272] netlink: zone id is out of range [ 788.186240][T28279] veth0: entered promiscuous mode [ 788.203005][T28278] veth0: left promiscuous mode [ 788.373514][T28281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.380974][T28281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.406820][T28281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.427517][T28281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.824548][T28307] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 789.815588][T28305] batadv0: left promiscuous mode [ 789.820803][T28305] batadv0: left allmulticast mode [ 789.847878][T28305] wg2: left promiscuous mode [ 789.855385][T28305] wg2: left allmulticast mode [ 789.883103][T28305] bridge_slave_1: left promiscuous mode [ 789.888946][T28305] bridge_slave_1: left allmulticast mode [ 790.043659][T28305] gtp0: left promiscuous mode [ 790.061588][T28305] gtp0: left allmulticast mode [ 790.074615][T28305] macvlan2: left allmulticast mode [ 790.093257][T28305] bond3: left promiscuous mode [ 790.108556][T28305] veth9: left promiscuous mode [ 790.122654][T28305] gtp1: left promiscuous mode [ 790.127399][T28305] gtp1: left allmulticast mode [ 790.146377][T28305] gtp2: left promiscuous mode [ 790.151235][T28305] gtp2: left allmulticast mode [ 790.173802][T28328] veth0: entered promiscuous mode [ 790.203496][T28332] veth0: entered promiscuous mode [ 790.208822][T28332] veth0: left promiscuous mode [ 790.261911][ T36] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.309962][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.337571][ T36] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.366333][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.375589][T28328] veth0: left promiscuous mode [ 790.426181][ T36] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.471772][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.493824][T28363] netlink: 'syz.6.7544': attribute type 4 has an invalid length. [ 790.501331][ T36] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.501601][T28363] __nla_validate_parse: 8 callbacks suppressed [ 790.501707][T28363] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7544'. [ 790.532975][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.629106][T28372] netlink: 'syz.8.7549': attribute type 1 has an invalid length. [ 790.645698][T28373] netlink: 'syz.8.7549': attribute type 1 has an invalid length. [ 790.661419][T28372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7549'. [ 790.688871][T28373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7549'. [ 790.701036][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7548'. [ 790.745579][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7548'. [ 790.781543][T28381] netlink: 'syz.6.7551': attribute type 16 has an invalid length. [ 790.790308][T28381] netlink: 'syz.6.7551': attribute type 17 has an invalid length. [ 790.872585][T28381] bridge0: port 3(syz_tun) entered blocking state [ 790.879259][T28381] bridge0: port 3(syz_tun) entered forwarding state [ 790.897074][T28381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.916766][T28381] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.981600][T28388] veth0: entered promiscuous mode [ 790.993302][T28387] veth0: left promiscuous mode [ 791.013153][T28396] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7556'. [ 791.357033][T28415] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7562'. [ 791.726418][T28433] netlink: 'syz.8.7569': attribute type 16 has an invalid length. [ 791.740544][T28433] netlink: 'syz.8.7569': attribute type 17 has an invalid length. [ 791.835402][T28439] veth0: entered promiscuous mode [ 791.955882][T28442] tipc: Enabled bearer , priority 0 [ 792.037357][T28442] syzkaller0: entered promiscuous mode [ 792.074737][T28442] syzkaller0: entered allmulticast mode [ 792.085181][T28442] tipc: Resetting bearer [ 792.111350][T28438] veth0: left promiscuous mode [ 792.131314][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7573'. [ 792.159423][T28441] tipc: Resetting bearer [ 793.002668][T28346] tipc: Node number set to 1979634018 [ 794.034354][T28441] tipc: Disabling bearer [ 794.335575][T28475] netlink: 'syz.9.7583': attribute type 16 has an invalid length. [ 794.362065][T28475] netlink: 'syz.9.7583': attribute type 17 has an invalid length. [ 794.396740][T28474] syzkaller1: entered promiscuous mode [ 794.402579][T28474] syzkaller1: entered allmulticast mode [ 794.454453][T28475] sit0: left promiscuous mode [ 794.463337][T28475] sit0: left allmulticast mode [ 794.481068][T28475] net_ratelimit: 12 callbacks suppressed [ 794.481082][T28475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.574063][T28484] veth0: entered promiscuous mode [ 794.585344][T28483] veth0: left promiscuous mode [ 794.639137][T28489] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7589'. [ 794.674528][T28491] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7593'. [ 794.831937][T28502] veth0: entered promiscuous mode [ 794.842140][T28501] veth0: left promiscuous mode [ 795.308902][T28533] openvswitch: netlink: IP tunnel TTL not specified. [ 795.435080][T28535] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 795.832566][T28562] __nla_validate_parse: 36 callbacks suppressed [ 795.832591][T28562] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7619'. [ 796.402634][T28576] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 796.462817][T28581] FAULT_INJECTION: forcing a failure. [ 796.462817][T28581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.533245][T28581] CPU: 1 UID: 0 PID: 28581 Comm: syz.7.7626 Not tainted syzkaller #0 PREEMPT(full) [ 796.533275][T28581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 796.533289][T28581] Call Trace: [ 796.533298][T28581] [ 796.533309][T28581] dump_stack_lvl+0x189/0x250 [ 796.533340][T28581] ? __pfx____ratelimit+0x10/0x10 [ 796.533364][T28581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.533390][T28581] ? __pfx__printk+0x10/0x10 [ 796.533420][T28581] ? __might_fault+0xb0/0x130 [ 796.533463][T28581] should_fail_ex+0x414/0x560 [ 796.533500][T28581] _copy_from_user+0x2d/0xb0 [ 796.533529][T28581] sock_copy_user_timeval+0x230/0x3c0 [ 796.533555][T28581] ? __pfx_sock_copy_user_timeval+0x10/0x10 [ 796.533595][T28581] sock_set_timeout+0xa8/0x2c0 [ 796.533623][T28581] ? __pfx_sock_set_timeout+0x10/0x10 [ 796.533660][T28581] sk_setsockopt+0xbd8/0x2dc0 [ 796.533684][T28581] ? __pfx___might_resched+0x10/0x10 [ 796.533715][T28581] ? __pfx_sk_setsockopt+0x10/0x10 [ 796.533737][T28581] ? __lock_acquire+0xab9/0xd20 [ 796.533774][T28581] ? aa_sk_perm+0x81e/0x950 [ 796.533813][T28581] ? __pfx_aa_sk_perm+0x10/0x10 [ 796.533849][T28581] ? __fget_files+0x2a/0x420 [ 796.533866][T28581] ? aa_sock_opt_perm+0xff/0x1b0 [ 796.533892][T28581] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 796.533922][T28581] do_sock_setsockopt+0x11b/0x1b0 [ 796.533954][T28581] __x64_sys_setsockopt+0x13f/0x1b0 [ 796.533987][T28581] do_syscall_64+0xfa/0x3b0 [ 796.534008][T28581] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.534037][T28581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.534059][T28581] ? clear_bhb_loop+0x60/0xb0 [ 796.534085][T28581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.534106][T28581] RIP: 0033:0x7f6a9718eba9 [ 796.534126][T28581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.534144][T28581] RSP: 002b:00007f6a980b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 796.534167][T28581] RAX: ffffffffffffffda RBX: 00007f6a973d6090 RCX: 00007f6a9718eba9 [ 796.534182][T28581] RDX: 0000000000000014 RSI: 0000000000000001 RDI: 0000000000000005 [ 796.534195][T28581] RBP: 00007f6a980b6090 R08: 0000000000000050 R09: 0000000000000000 [ 796.534208][T28581] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 796.534221][T28581] R13: 00007f6a973d6128 R14: 00007f6a973d6090 R15: 00007ffdf13f0ce8 [ 796.534257][T28581] [ 796.945535][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 796.956260][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 796.971203][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 796.984636][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 796.993442][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.064193][T28598] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7631'. [ 797.073724][T28596] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 797.221518][T28607] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7634'. [ 797.865391][T28593] chnl_net:caif_netlink_parms(): no params data found [ 798.236586][ T6670] dvmrp0 (unregistering): left allmulticast mode [ 798.303421][ T6670] bond6 (unregistering): (slave geneve3): Releasing active interface [ 798.704183][ T6670] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 798.716102][ T6670] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 798.727993][ T6670] bond0 (unregistering): Released all slaves [ 798.758404][ T6670] bond1 (unregistering): Released all slaves [ 798.893989][ T6670] bond2 (unregistering): Released all slaves [ 799.020888][ T6670] bond3 (unregistering): Released all slaves [ 799.074875][ T5879] Bluetooth: hci0: command tx timeout [ 799.151454][ T6670] bond4 (unregistering): Released all slaves [ 799.273221][ T6670] bond5 (unregistering): Released all slaves [ 799.396229][ T6670] bond6 (unregistering): Released all slaves [ 799.412428][T28637] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.427155][T28639] veth0: entered promiscuous mode [ 799.506477][ T6670] tipc: Disabling bearer [ 799.540211][ T6670] tipc: Left network mode [ 799.591197][T28639] veth0: left promiscuous mode [ 799.649689][T28637] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.810164][T28637] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.829809][T28669] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 799.977552][T28593] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.995687][T28593] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.003828][T28679] netlink: 1196 bytes leftover after parsing attributes in process `syz.6.7656'. [ 800.007574][T28593] bridge_slave_0: entered allmulticast mode [ 800.032448][T28593] bridge_slave_0: entered promiscuous mode [ 800.054856][T28637] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.092687][T28593] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.131853][T28593] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.144441][T28593] bridge_slave_1: entered allmulticast mode [ 800.164990][T28593] bridge_slave_1: entered promiscuous mode [ 800.247344][T28689] tc_dump_action: action bad kind [ 800.331304][T28593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.398658][T28593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.493804][T28696] netlink: 'syz.6.7662': attribute type 39 has an invalid length. [ 800.539274][T28593] team0: Port device team_slave_0 added [ 800.580491][ T49] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.633291][T28593] team0: Port device team_slave_1 added [ 800.642763][ T49] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.766683][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.777763][T28704] openvswitch: netlink: IPv6 tunnel dst address is zero [ 800.805388][T28702] netlink: 'syz.8.7664': attribute type 2 has an invalid length. [ 800.878477][T28593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.894200][T28593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.934276][T28593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.960633][ T49] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.992193][T28593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.999282][T28593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.033563][T28593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.147778][T28715] netlink: 'syz.7.7670': attribute type 10 has an invalid length. [ 801.156234][ T5879] Bluetooth: hci0: command tx timeout [ 801.177207][T28715] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7670'. [ 801.245808][T28715] team0: Port device geneve0 added [ 801.267301][T28593] hsr_slave_0: entered promiscuous mode [ 801.283110][T28593] hsr_slave_1: entered promiscuous mode [ 801.302909][T28593] debugfs: 'hsr0' already exists in 'hsr' [ 801.332003][T28593] Cannot create hsr debugfs directory [ 801.405861][T28728] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 801.503050][T28730] sctp: [Deprecated]: syz.6.7676 (pid 28730) Use of int in maxseg socket option. [ 801.503050][T28730] Use struct sctp_assoc_value instead [ 801.579098][T28730] openvswitch: netlink: IPv6 tunnel dst address is zero [ 801.612999][T28734] sock: sock_timestamping_bind_phc: sock not bind to device [ 801.708672][T28740] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7680'. [ 801.806045][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7681'. [ 801.834553][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7681'. [ 801.852469][T28742] vlan2: entered allmulticast mode [ 801.881947][T28742] hsr0: entered allmulticast mode [ 801.887059][T28742] hsr_slave_0: entered allmulticast mode [ 801.903040][T28742] hsr_slave_1: entered allmulticast mode [ 802.157219][ T6670] hsr_slave_0: left promiscuous mode [ 802.173765][ T6670] hsr_slave_1: left promiscuous mode [ 802.334131][ T6670] pim6reg (unregistering): left allmulticast mode [ 803.232158][ T5879] Bluetooth: hci0: command tx timeout [ 803.247849][T28773] Bluetooth: MGMT ver 1.23 [ 803.292991][T28773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7690'. [ 803.303683][T28773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7690'. [ 803.311212][T28774] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 803.687351][T28789] openvswitch: netlink: Key type 253 is out of range max 32 [ 804.195824][ T6670] IPVS: stop unused estimator thread 0... [ 804.205370][T28813] openvswitch: netlink: IPv6 tunnel dst address is zero [ 804.420580][T28817] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 804.455859][T28828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7709'. [ 804.535854][T28593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.556092][T28593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 804.579676][T28593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 804.615898][T28593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 804.755299][T28844] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7713'. [ 804.839339][T28593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.905803][T28850] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7716'. [ 804.906168][T28593] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.958255][T22476] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.965576][T22476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.997343][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.004612][ T6670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.316902][ T5879] Bluetooth: hci0: command tx timeout [ 805.657409][T28593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.887912][T28879] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7724'. [ 806.102970][T28890] netlink: 'syz.8.7728': attribute type 10 has an invalid length. [ 806.418694][T28902] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7733'. [ 806.447295][T28593] veth0_vlan: entered promiscuous mode [ 806.484488][T28593] veth1_vlan: entered promiscuous mode [ 806.585075][T28593] veth0_macvtap: entered promiscuous mode [ 806.622559][T28593] veth1_macvtap: entered promiscuous mode [ 806.684216][T28593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.725805][T28593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.767520][ T3018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.787345][ T3018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.810309][ T3018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.830046][ T3018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.103825][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.132155][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.230765][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.260049][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.493788][T28940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7749'. [ 807.698018][T28951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7754'. [ 808.237507][T28974] bridge2: entered promiscuous mode [ 808.788838][T28993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7772'. [ 809.079978][T28343] IPVS: starting estimator thread 0... [ 809.110874][T29006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.118259][T29006] IPv6: NLM_F_CREATE should be set when creating new route [ 809.125875][T29006] IPv6: NLM_F_CREATE should be set when creating new route [ 809.141501][T29006] ------------[ cut here ]------------ [ 809.147721][T29006] WARNING: CPU: 1 PID: 29006 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 809.158324][T29006] Modules linked in: [ 809.162958][T29006] CPU: 1 UID: 0 PID: 29006 Comm: syz.6.7776 Not tainted syzkaller #0 PREEMPT(full) [ 809.172643][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 809.182810][T29006] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 809.188659][T29006] Code: fa be 02 00 00 00 eb 0a e8 85 e1 a7 fa be 01 00 00 00 4c 89 f7 e8 98 8b b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 69 e1 a7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 809.209270][T29006] RSP: 0018:ffffc9000b6e7008 EFLAGS: 00010287 [ 809.215556][T29006] RAX: ffffffff8717dd97 RBX: 0000000000000002 RCX: 0000000000080000 [ 809.224964][T29006] RDX: ffffc9001104b000 RSI: 000000000000617c RDI: 000000000000617d [ 809.235929][T29006] RBP: dffffc0000000000 R08: ffff888069f75c2f R09: 1ffff1100d3eeb85 [ 809.244899][T29006] R10: dffffc0000000000 R11: ffffed100d3eeb86 R12: ffff888032c2a000 [ 809.252029][T29010] IPVS: using max 27 ests per chain, 64800 per kthread [ 809.252966][T29006] R13: ffffc9000b6e7180 R14: 0000000000000001 R15: ffffc9000b6e7198 [ 809.268152][T29006] FS: 00007feb3487b6c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 809.277366][T29006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.284213][T29006] CR2: 000055557c2ec588 CR3: 000000007e7ae000 CR4: 00000000003526f0 [ 809.292532][T29006] Call Trace: [ 809.295847][T29006] [ 809.298871][T29006] notifier_call_chain+0x1b3/0x3e0 [ 809.304184][T29006] ? atomic_notifier_call_chain+0x26/0x180 [ 809.310035][T29006] atomic_notifier_call_chain+0xda/0x180 [ 809.316200][T29006] call_fib_notifiers+0x31/0x60 [ 809.321109][T29006] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 809.328942][T29006] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 809.336968][T29006] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 809.342360][T29006] inet6_rtm_newroute+0x12f5/0x18c0 [ 809.347734][T29006] ? nlmon_xmit+0xb0/0x100 [ 809.352509][T29006] ? kmem_cache_free+0x18f/0x400 [ 809.357498][T29006] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 809.363190][T29006] ? __local_bh_enable_ip+0x12d/0x1c0 [ 809.368622][T29006] ? __dev_queue_xmit+0x27b/0x3b50 [ 809.373833][T29006] ? __dev_queue_xmit+0x1d79/0x3b50 [ 809.379113][T29006] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 809.385111][T29006] rtnetlink_rcv_msg+0x7cc/0xb70 [ 809.390092][T29006] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 809.395472][T29006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.400957][T29006] ? ref_tracker_free+0x63a/0x7d0 [ 809.406068][T29006] ? __asan_memcpy+0x40/0x70 [ 809.410779][T29006] ? __pfx_ref_tracker_free+0x10/0x10 [ 809.416473][T29006] netlink_rcv_skb+0x208/0x470 [ 809.421458][T29006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.428315][T29006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 809.434738][T29006] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.439989][T29006] netlink_unicast+0x82f/0x9e0 [ 809.445121][T29006] ? __pfx_netlink_unicast+0x10/0x10 [ 809.450704][T29006] ? netlink_sendmsg+0x642/0xb30 [ 809.455767][T29006] ? skb_put+0x11b/0x210 [ 809.460070][T29006] netlink_sendmsg+0x805/0xb30 [ 809.464974][T29006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.470393][T29006] ? aa_sock_msg_perm+0xf1/0x1d0 [ 809.475866][T29006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.481210][T29006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.486707][T29006] __sock_sendmsg+0x21c/0x270 [ 809.491439][T29006] ____sys_sendmsg+0x505/0x830 [ 809.496329][T29006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.501964][T29006] ? import_iovec+0x74/0xa0 [ 809.506604][T29006] ___sys_sendmsg+0x21f/0x2a0 [ 809.511325][T29006] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.516679][T29006] ? __fget_files+0x2a/0x420 [ 809.521297][T29006] ? __fget_files+0x3a0/0x420 [ 809.526075][T29006] __x64_sys_sendmsg+0x19b/0x260 [ 809.532303][T29006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.539014][T29006] ? rcu_is_watching+0x15/0xb0 [ 809.543886][T29006] ? do_syscall_64+0xbe/0x3b0 [ 809.548909][T29006] do_syscall_64+0xfa/0x3b0 [ 809.553527][T29006] ? lockdep_hardirqs_on+0x9c/0x150 [ 809.558765][T29006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.565172][T29006] ? clear_bhb_loop+0x60/0xb0 [ 809.569894][T29006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.575996][T29006] RIP: 0033:0x7feb3398eba9 [ 809.580439][T29006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.600980][T29006] RSP: 002b:00007feb3487b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.609589][T29006] RAX: ffffffffffffffda RBX: 00007feb33bd5fa0 RCX: 00007feb3398eba9 [ 809.617655][T29006] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 809.625953][T29006] RBP: 00007feb33a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 809.635302][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.644340][T29006] R13: 00007feb33bd6038 R14: 00007feb33bd5fa0 R15: 00007ffde2bee3a8 [ 809.652686][T29006] [ 809.655745][T29006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 809.663065][T29006] CPU: 1 UID: 0 PID: 29006 Comm: syz.6.7776 Not tainted syzkaller #0 PREEMPT(full) [ 809.672644][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 809.682816][T29006] Call Trace: [ 809.686127][T29006] [ 809.689085][T29006] dump_stack_lvl+0x99/0x250 [ 809.693682][T29006] ? __asan_memcpy+0x40/0x70 [ 809.698275][T29006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 809.703490][T29006] ? __pfx__printk+0x10/0x10 [ 809.708117][T29006] vpanic+0x281/0x750 [ 809.712111][T29006] ? __pfx__printk+0x10/0x10 [ 809.716710][T29006] ? __pfx_vpanic+0x10/0x10 [ 809.721215][T29006] ? is_bpf_text_address+0x26/0x2b0 [ 809.726426][T29006] panic+0xb9/0xc0 [ 809.730343][T29006] ? __pfx_panic+0x10/0x10 [ 809.734794][T29006] __warn+0x31b/0x4b0 [ 809.738790][T29006] ? nsim_fib_event_nb+0xed8/0x1080 [ 809.744107][T29006] ? nsim_fib_event_nb+0xed8/0x1080 [ 809.749315][T29006] report_bug+0x2be/0x4f0 [ 809.753648][T29006] ? nsim_fib_event_nb+0xed8/0x1080 [ 809.758863][T29006] ? nsim_fib_event_nb+0xed8/0x1080 [ 809.764072][T29006] ? nsim_fib_event_nb+0xeda/0x1080 [ 809.769370][T29006] handle_bug+0x84/0x160 [ 809.773622][T29006] exc_invalid_op+0x1a/0x50 [ 809.778133][T29006] asm_exc_invalid_op+0x1a/0x20 [ 809.782987][T29006] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 809.788809][T29006] Code: fa be 02 00 00 00 eb 0a e8 85 e1 a7 fa be 01 00 00 00 4c 89 f7 e8 98 8b b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 69 e1 a7 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 809.808510][T29006] RSP: 0018:ffffc9000b6e7008 EFLAGS: 00010287 [ 809.814650][T29006] RAX: ffffffff8717dd97 RBX: 0000000000000002 RCX: 0000000000080000 [ 809.822722][T29006] RDX: ffffc9001104b000 RSI: 000000000000617c RDI: 000000000000617d [ 809.830699][T29006] RBP: dffffc0000000000 R08: ffff888069f75c2f R09: 1ffff1100d3eeb85 [ 809.838761][T29006] R10: dffffc0000000000 R11: ffffed100d3eeb86 R12: ffff888032c2a000 [ 809.846739][T29006] R13: ffffc9000b6e7180 R14: 0000000000000001 R15: ffffc9000b6e7198 [ 809.854725][T29006] ? nsim_fib_event_nb+0xed7/0x1080 [ 809.859950][T29006] ? nsim_fib_event_nb+0xed7/0x1080 [ 809.865166][T29006] notifier_call_chain+0x1b3/0x3e0 [ 809.870293][T29006] ? atomic_notifier_call_chain+0x26/0x180 [ 809.876106][T29006] atomic_notifier_call_chain+0xda/0x180 [ 809.881751][T29006] call_fib_notifiers+0x31/0x60 [ 809.886629][T29006] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 809.893062][T29006] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 809.900188][T29006] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 809.905485][T29006] inet6_rtm_newroute+0x12f5/0x18c0 [ 809.910695][T29006] ? nlmon_xmit+0xb0/0x100 [ 809.915121][T29006] ? kmem_cache_free+0x18f/0x400 [ 809.920246][T29006] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 809.925802][T29006] ? __local_bh_enable_ip+0x12d/0x1c0 [ 809.931193][T29006] ? __dev_queue_xmit+0x27b/0x3b50 [ 809.936318][T29006] ? __dev_queue_xmit+0x1d79/0x3b50 [ 809.941561][T29006] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 809.947118][T29006] rtnetlink_rcv_msg+0x7cc/0xb70 [ 809.952071][T29006] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 809.957189][T29006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.962649][T29006] ? ref_tracker_free+0x63a/0x7d0 [ 809.967681][T29006] ? __asan_memcpy+0x40/0x70 [ 809.972279][T29006] ? __pfx_ref_tracker_free+0x10/0x10 [ 809.977665][T29006] netlink_rcv_skb+0x208/0x470 [ 809.982437][T29006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 809.987905][T29006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 809.993214][T29006] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.998429][T29006] netlink_unicast+0x82f/0x9e0 [ 810.003213][T29006] ? __pfx_netlink_unicast+0x10/0x10 [ 810.008513][T29006] ? netlink_sendmsg+0x642/0xb30 [ 810.013456][T29006] ? skb_put+0x11b/0x210 [ 810.017711][T29006] netlink_sendmsg+0x805/0xb30 [ 810.022491][T29006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.027872][T29006] ? aa_sock_msg_perm+0xf1/0x1d0 [ 810.032932][T29006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.038309][T29006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.043777][T29006] __sock_sendmsg+0x21c/0x270 [ 810.048564][T29006] ____sys_sendmsg+0x505/0x830 [ 810.053444][T29006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.058836][T29006] ? import_iovec+0x74/0xa0 [ 810.063357][T29006] ___sys_sendmsg+0x21f/0x2a0 [ 810.068057][T29006] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.073384][T29006] ? __fget_files+0x2a/0x420 [ 810.077975][T29006] ? __fget_files+0x3a0/0x420 [ 810.082674][T29006] __x64_sys_sendmsg+0x19b/0x260 [ 810.087626][T29006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.093102][T29006] ? rcu_is_watching+0x15/0xb0 [ 810.097880][T29006] ? do_syscall_64+0xbe/0x3b0 [ 810.102751][T29006] do_syscall_64+0xfa/0x3b0 [ 810.107257][T29006] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.112459][T29006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.118618][T29006] ? clear_bhb_loop+0x60/0xb0 [ 810.123314][T29006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.129212][T29006] RIP: 0033:0x7feb3398eba9 [ 810.133633][T29006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.153421][T29006] RSP: 002b:00007feb3487b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.161936][T29006] RAX: ffffffffffffffda RBX: 00007feb33bd5fa0 RCX: 00007feb3398eba9 [ 810.169917][T29006] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 810.177892][T29006] RBP: 00007feb33a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 810.185877][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.193860][T29006] R13: 00007feb33bd6038 R14: 00007feb33bd5fa0 R15: 00007ffde2bee3a8 [ 810.201867][T29006] [ 810.205224][T29006] Kernel Offset: disabled [ 810.209550][T29006] Rebooting in 86400 seconds..