last executing test programs: 3.730312864s ago: executing program 0 (id=13640): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\\\a\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x26}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000077000000020000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x8001, 0x56a7, 0x1, 0x3}, 0x14) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.336611192s ago: executing program 0 (id=13643): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000032000000000000000000fb00"/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$kcm(0x2, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2200000062c198edf524f6000000000000b63c8e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={r3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000070"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000340)={0x24, @short={0x2, 0x0, 0x996c95886db9c073}}, 0x14) 3.11605303s ago: executing program 2 (id=13644): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r1, 0x89f2, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x1d}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff73}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0xc000) 2.960145548s ago: executing program 0 (id=13646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4bfef664bc50943e, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000118040000000000000000020000001800018014000180080001000000000008000200ac141400260002800c0002800500010000000000140001"], 0x50}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fcf9b00bc7be3134e8f6ae586cd0aa3d2ea5c5a56cad23aa4027df4d04003f353b5070ede3a9346b522ed0c66b86b72aed50e0745f2df8238fd0207bf08b0312cbecf6", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004000280"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @netrom, @bcast, @remote, @netrom, @remote, @netrom, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) recvfrom$netrom(r2, &(0x7f0000000300)=""/67, 0x43, 0x20, &(0x7f0000000380)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x2, @dev}, 0x10) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x800, 0x7fffffffffffffff, 0x0, 0x1}, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r4, 0x58, &(0x7f0000000540)}, 0x10) 2.894910566s ago: executing program 3 (id=13647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (fail_nth: 2) 2.486744387s ago: executing program 3 (id=13648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) (fail_nth: 8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff73}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0xc000) 1.911020029s ago: executing program 3 (id=13652): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562d84d8c033ed7a80fae0090f000000000500a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 1.728848504s ago: executing program 2 (id=13654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x94, 0x1, 0x9, 0xb4601cd9502b947f, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x41c}}, @NFCTH_TUPLE={0x58}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xffff}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x3, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001000000"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x4, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x18}}], 0x1, 0x40c0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x3ff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000007c0)={0x6, 'veth0_to_hsr\x00', {0xffff}, 0x1}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xa3, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0xd, 0x1, {0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x180, r6, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) 1.590636122s ago: executing program 4 (id=13655): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x4004040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.565397742s ago: executing program 3 (id=13656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd27, 0x9, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb305000100"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 1.342923941s ago: executing program 4 (id=13657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000012c0)={0x20, r1, 0x1, 0x0, 0x3, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0xffffffffffffffef}, 0x0) 1.218826701s ago: executing program 4 (id=13658): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x18) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x7ffffffd, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0xfff, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x1, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x6, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="850b0000040000008510000008000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, r0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r9, r10, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r11, r9, 0x4, r9}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r7, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000001c80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.117237246s ago: executing program 3 (id=13660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000180)=@assoc_value, &(0x7f0000000140)=0x3f) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x7a52, @local, 0x4}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) sendmmsg(r4, &(0x7f0000009a80)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x4, @private2, 0x9, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x850) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r6, 0xffffffffffffff29, "3a5185d45c6c5e65ba31bc1a62305ae01d64474fb85293cdb06be7259d362e5a8836798feaf26557c74890e66fad71df8850c6b4ace7d3fa6b18635372103cf1a99f35b44372cd18db2e3c2c59ead96787d4457e6697e4edaff8922b136f724a357c1a6b830e9ba6d51620b4b6bef9f25ab6a13accdfcd0e93bc"}, &(0x7f0000000100)=0x82) 1.059632635s ago: executing program 1 (id=13661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, 0x0, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 1.044478167s ago: executing program 4 (id=13662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1e00}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) socket$kcm(0xf, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000017c0)={0x0, r9, "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", "21480d65e38a4513516a4c1459d5c6752911d2be1dbba6e0795eddb686d2b3944feaaba2383aa0d4293a538a0e22ab4dedd48fe22c7c148ef1f5a8e6598c27dad6fd270a6a0973ceef9acbb5048e7c032dc11ccd9ec49c9b8734af666ce24c2b82efe022bf08e779c4b0f6bde0fe078f8f463f2bc1450a22a5022dbaa8632056fc7be50d4ee113ba538f9df5641e20fe089e431460e14d1a690d97d49b056dbc2fbe8859d76b801fdac837ea3b63c2368428b4c04bb24b2af417e00ad31fd4f5827304b2e172f122b4b8c4d2b01c679a6a57dcb53edd2ac14f7c8fa47699c6eee04b252e0a4aef9fa9cfcc15d995061903f07ed4949ac4794a22aed5a16625ab7bd2cb0b0b043f6f2ea5a395f05c8d2402d3f72a6415f22a0bc87ef9152527eb3608f2ed4acf5adb2042e8c8f2a219577b7beb6a328b82ff858928b0d4f715c1f9ad51d62a8eba1b44359705e763becd1c984d7c63eb388388a4e54d32d566b55da62d61fc1a07ccc251987f92cb2aa2852f29b5112fb575feeb1f4d85195d2ac20c380b838f6ea73e0a6bcb9a565301e97622ce2114d95c590253d234827510da1e1929c1b27659b16b8beb414512665556142538871642329340a044944e7bc86e77ee58788c35d8706bb83e1b7a6bf4176e30ee2ab8f3745a11bbd0113784879c37eb2a2ab72fb929cc035cdc190a6455c7b38d803ed7d8bff83b29f0e80d4fa5aa2bc6819dec2d9384b20dfa27c258f7bf10a8cd42513f0c13cfa85fd0aa97fbd15c72d491f67aa5f397488905dbb117ff81e1f18ae55defcffe71e6049942ec4f1eaf36cfe1ee9b9a746f9f9e6966af4dbb6d05a1a510b40728ff67f4e01629fd3006a8fe8aedd5b93e23f84b90c730654a1ca2fa802b9f081e5145607a8d31d262f0b203deb052752e6f30664aff51ee6487971d5f9de7f1c558c13129fe10818cd894e3c9f725b85761b186a3d1f6ecb8ed5e4efd8d61d1f7cd8e7194553579d42d1f00daf22850209f4b24dec108993933629a3137062b141c5e7176e6d924bd1202e40c83124f76d9f00f3f22cbb097cc7845203d50fe6809ca9849c8ecaf9f1e0da0189f0fa9349feb266d360365f6dd11ab92040d9e58d1e1efaa365da9a0839af0f60a03dec3eb0ff93a0174b10f3a9c96e072094a69300e78e527d7460acbd19033b42a04a99378ff078ac1c0e3b974b01a049d703cdb954a1a3b31ba58bfad75cf4ab349f7858c8cf6b40e536146f8d20a536ccfcf644ae48298b91daf1a767d1ac31368fbc16b9cdcf5799b04ed72b18868d8034a2585f15ff7502719f242b3629534ecd828178e4dc14b8de47711176c6edc72eb2dc766e44aff58e8d2f52a104f26e064c3f831f7c47eeb8a03e295ffc51275d639fc76e6eaf9131cc8a20ad93ba3d1c56a6f605aed08a846d2eb5f3e0fd6e584f94e01ea5d3cf4724a42d2f78bc83b40ae1b30ed9fdd12e8263450d2ace0afeec9ee67efdbaef2bd6e6a47830370c6dc734c4ce3c1a58d98cb3c8d65511cbfafd5239381d6395fdc3af1cc4f0a3f0da6454a19dd3bef8ad38b09a968f3ac662d997c854ead34ec87645661ddae894f7e360258a311fb42632602ffb4db5d83f256553724f2856bc636d7ee4cb04603175869269599983affa1a45bdb099312d9e1c504dfc844984b3bbd54a023024c73e9c4ee580f440b951e93e7c3169d5dec401df7a576bf7c938c769c0541271b96e479572e14af4a748acd7555b0584531aa2472be2897e0db3c07c145513b40e406a0467537d95e9bb4e502a7c02c682a869c985e6b6e9581dab5b55663c72e463580f2d3e04af5e1d1984060585dc009cf1fb0852318b13f08270f42fafd014f39edcc29f774e72520099b7e892e84e23be4c233bde6629f9ab0481177a09298a0e563b64c87d02b54801209a009a71670dd93e1caeb8ea8e12b2249779de10519c0e9bb51132bca980fe965eb4ce1216026ac8e00bb9cc6fd16f809b8ba216f02508f3998a395a563cdb86155faaf3425d14f4d6ce0a206d032d810050e3ca651e0cd8ea1892851bfebd7583d943e270834de2a8ac99dcb42946331776094e279cc14abb4ca21c28c5e80f07210f77fe0c8fbf0e7325e64eb08e839691853069d46006838c39bce4eee90291e5486666af8003dc55ff250dd674798dbad04914115e95aaaf8520d92f2222332d6b25b0e9c643cd23832c8d6fba98f8638c18302001675040fa3b5229d26d55470d33b4bafd3b7230b91afc82be2d7225bf3ef529c3fb03c652c358bf9ee57e85c258ce7a1cfc1f340fa1b6e26779ed1dc4a5631a1cb32bedcd3b5dc31fecf29278baaf381b0c56943d19934e093ecd5b129546dad0a6e348e5367028b7b49267769f69296d16672f87fcf972f1cc3a162a0f57f3eae8b3cf7b32d0f7a9acbbd6b3cd623d62f7bc38d108da820c886e18d13752a60d8f026cd2cc3cd42483f8ffa52ea38b0f106311f90589a7bab303775284fe9075e95882232000947e3f1cc7cf135cca226c9add00fd78ba28eb32c6ac7702a58510f82d0f411e4c52b5d35389a44ae38ba601a278bde832ff8644b4e6c96d466ca79eb1dadbd954c5159e7cc6a6ba775be3e0ce5ebe0bce3e277109555dadb91240b9081a74595cad2a2038b85798beafaaa1ed1e607eb4050521f16a35b0cd975af0be921cbb4ae86cffb91e51975e227ef4b701cdbdcec73f8cc2b76c597bfaaa8395169f2a2d05e1d1b5994653930e1c755972dee174b9cf2eab81009dbf64d1ded4323d350aa38bdcd497911d212207876cb9f945832c312689e7056960c92808eee58a99d9185b4d2c3af749bd6efd9abc39329dac64c01f9b06a553bc8e98aa9c6c5f32553dd002ae7aa4e213955cb752a280332e158e800092242159a30c752d622cec263fbcb486b92d0a40983dbd81f9c37a547f7a2bec91b1311c3e46f2b3bea173d041f6a7542cd4d5fcf56b2ab4a8199c57d86bb713bd307b2a8ddf702a8b339ce4c0d01cc96fbbfd3dbcfe96a83d185addd62ae50081cc78f7545a5a271df79fa0d648328d271b2f7711547e83db1f7c75d3d0d08bc15e8198c572cffef253e7802c1c869a066c2746b77cdb3cb01311d85a781790f49e60178e01d2d82ccb9e806a2844f1045f7abaab7405de85e92fac7480999179faab39e45df544a807cc65601ec3af44863d746d2fcc460888d89307e5b66fb181c22a5452367fe2b95b55510727962a6fdeb0d2e5b8228965c2242177e63cbdc2a8dcfc492c22957387dcdac15543ddf45194515f4556363caef8be9dd595ce0bc317df9a9a805e36979ee87869d10b453c303c9158ebb948493e83556e09d92b755bd64dfd4dd4b8ae1a96f533763709fa9d8718bc8117f3edc5c003a6c9406261824eb51ba5f95b64ad83b97e7ea4dcbff4ad55fcc2e5062a8f271afd195684518c2ea016596fa464418b625d97228bc5dd8ca6411eacfe2225b7ad15ebe7a42539976084e5b1096fbf028aa0cff89d5d1fb23ffee1489b7f93858c29bf36b51d0205ac2297eb312408197439b7f31158dda8d904f70255d683a4fce18b1b9e02382ee0c4d2e532b5de84e9ab5fa60514d036d9aba95ed43e15248fa2b896c82f3382a1c9ea6fce6065bffe4c8dcddae3cad483b5d61bdb06b40e015b3c4947652acc5a4e3ae0c005c753fbba008d07c932056a56d3b2fbd30c6f080370765f01cac8d73db53afb9d870e9603d8bebb3f0aa88d90afde07d6c3992705c59a5863adaa0c461eae042a1d72849a5fe64ab309bffc37156963afe417af96103fd5e8fe3b9009bb6468d67c75ce6f19fe3c8156f74954ce630c0c4cad32860ad7ada643bcfcd0cc5249d2f2f5d46685a7d4d1e2383e08b20e0bd745e9e78b329c6184a17a1c670cd8d83c55dbc81940ca562c2e6684200db767a707e8f9f00b0674ba1e5068c7f75af9e602903b86e7e732d4b9b4fa2d74e5f71b00469c7a9fee161ca2d209a1c874ed54984d7980b7080172caa798804fd38f7ad4f6499fc6787904c818c9d85dedd84076d2d1a09fc286cbd24a98a056c3b9530dbd0a5b7b825f321d844bda498d1e412403869e2de0451fd4a08109c71b0d2fbefee4d2b19b57883b53c4a0261355e4a184ee6ad3b9fbfcb4fcff627c4b5cfcd8bb481a686bb96282945a7c954c0102985c8170a1657c16258f947bc2f3bd9769c1d3c8484573885794e48739771116a331d0a8bd04d24b3d6c697df8c0301f92f6ac9db6f81957209743d4020d72b96aff6866300f5c66220776df4c1303575370d8d16fd52bd24ace8cdd9fb21ba9326a46912286dc5246b4918774f58d1fadafb6177e9c1c7c7c1a39efde8e55b61d8af75c632d3b35ded2d0faea63f480ea246728b76c25137866da307b8107978449300182e7c156bda12dc0eab3c46be573b45ccc2dc4ceeab30f6b85897987e7f7585a0180a72f68f73fe5291dbb2365a3b63f24f60f78a2767a6b69857b72dfbd4b62a09c8f125cbf09aacc012a09e2a2d02ab41b1f16c91f3b3a534c412440d46558a77024fb67eceb2e3f811f0d61905ff1f6f06736defcbd49b6ce9134960fc5bc76f3747e20e5358465414dd4bfca47964315787ff549a2882bfcea5d822790fc8401bb13171cde594d75bd56d10a85789615f84a91b2112243b4f98fdd11eff2df9c5672d984234b30abbe685664e04168d03d201f33955dd9bec8701572164bcf437dfea4aa22ebfdea659ba0051629f8d4a1dcaffb39edd3c2904a5ca23da7e31d884389fc96d7e7d3280f807e493b180791dfa72679252bd4a9c6fc10fa9c440f027e73e4e074518c9489ce7461e848279d4a017298f86a16624360df346d473668ca203b06ba4ef9005069294d01eb29a1573b26976788a44190dcb4536fed4ad6e16151bf81fe0caf5ed15b3fd0eaf6a2428fb3c724ab5dc23300f82e8de23c103bd750067464c3ee40338ad28747ce7bbfc1e5855ba7bb25ff69ae251b503f122d6cf4bc2ec378f9b308da31f9583d643da7619963954e8855a3528b26de022c1dca363dd426014c5341b0ea28384314ae07ce1b6cc251b2619a271dad563b2b6a9c88b18e1e19ce6b76b21fdd33d8aa9e85f88e24f96093c08b086b4629453ac3e416ca85f0e719f3cb35839d8d0eefd31206ca368a038c6a69d70f6bc1e469d89438adee1aa8f45776a2287938507b7e98adc4cf02b742a214b5d0d515735d7c2cd26d835c5e975c77d7f7ebc96c49d130fa6b724b469084a9992adfe9bc705ef868f7721b4d00370491112f8db209c1a470bd451b7794874639b5315182160b39bf98f042668137e6c7275373e1b4b2b241cb7009d036ce0d7efd8313c6e0d87edb80516cd1c518a239c8e9367f55db3ca82f0"}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) 1.004198774s ago: executing program 1 (id=13663): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50) socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r2, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x118, 0x4a, 0xdf, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) socket(0x840000000002, 0x3, 0x100) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 868.75207ms ago: executing program 1 (id=13664): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x5, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 631.129564ms ago: executing program 1 (id=13665): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x24, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x8000, 0x3}, [@IFLA_PORT_SELF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x40000f0) 513.523539ms ago: executing program 2 (id=13666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000100017800400020004000600040002000c00178004000200040006001c001780040004000b0003"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) unshare(0x2000100) 487.380349ms ago: executing program 4 (id=13667): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200081, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @remote}, 0x1c) 418.848634ms ago: executing program 2 (id=13668): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff00000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa0b2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3aef) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 399.737935ms ago: executing program 0 (id=13669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1e00}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac1414000000000000000000020001000000000000000000000000200300050000000000020000000000000000000000000000008d32854a743ce8ea4edd2d289986ada259bf5f6b53cd0b3d9771822095d2e4a075352a378e61ce1b6b63cd438eff43a021a229be298df3fa8e7ba9d8c7df3337fc6cfd1607be5ba2fc51d5c9e6168573f3af08124a05"], 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38b1}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x2b, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x0, 0x4}, &(0x7f0000000500)=0x18) socket$kcm(0xf, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000017c0)={0x0, r8, "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", "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"}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) 321.30738ms ago: executing program 1 (id=13670): r0 = socket(0x1d, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x6e4ec31f63395e91, 0x0, 0x0) 320.265088ms ago: executing program 4 (id=13671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000cbfdd5fd9f3a98756fba587524d3"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x204, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe36d}, {0x6, 0x11, 0xe5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6f00}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x58a2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xac}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a00110000060a0b04000000000000000002000000d4100480240001800b000100736f636b6574000014000280080002400000000308000140000000029c1001800a0001006d617463680000008c1002800a00010073746174650000000b000100726563656e7400005b000300240de55c7e19ba2d0bda197b61b75aabe0fd70b0ca4560ab2d0e8be38a624695253dfa6cae8799305bda20cf62b6ed9bc1ca5801aed8faacc5e04170c1c59b912dca41565911a6497e1e2de3ede03d056202fa53366947000800024000000000080002400000000004100300237a7f1371d167825283c76bea4a6935cf874876782d54ffb7c7c0551f89e8346def38843bf25a9c896ee3dd20184bd8e2103b725c8c120a90e9dc253aa1faf928de44aaafa7871de19b3bfc9beae44b2cf63b027f358363d769fbabd235e851182c2f2a2a8832891d5594fd6ab0006e49e3dc77e7aeefcc7f00b3ee600e935ffc91e359aebf3266ae56ed3f0284ed1fb960a2e4d77d006ed6d084e4aa3fae17452253ddd30ba894d0e97f27c8827fc72eb89c8677fb79edd412e0999e7c1d1c3437bba1876cf039620c2620506e884a3209d69bafd2095d9121f42dadc3562032f96d6b130e320d26dd5882a3d3e948202d89cb9f70a78922993a430730fabe6dae9b45dc4a9b8e7dcd9ea35c46afdaa8ea2928eec7985cffaa0d51bae69a8de7cc3638fa4f85431f7e5c78d8d77949f134719b2df72bc5b1fedf1cf2d03af0dd7cbcfd624f5c8309d2e0800f3d5f420a9c7ef09a747efbfcdd20a7d1d9672a0a319e56cbf15679d7f1533beb654b02e85d4fb1873ab3c2d023b5795afbfb60f01c40b919484f988ab1593196f63bf0a13f5ea20ca122709ff045733dfe0341b9a6c14d7e09af703848ed7d6ed5b622deafeb219b4e8039a85c976f851053b67d9fa15b70341eaaaf1467cbd5ddf5557d83930e291655c8a902263f67dac5c7c2ec7da95d5042df89e84501130a416fdb5f0547858e6fea67d2be55f3549e2fa8cc5b985682fb0acfb7bf783e74de81589d097566acac527c188f68fb5ef488d555af096a5f885ef891d8d7931140ab33304b5466de3d658025e15f732c0de391cb801c3a9d7817a19d4689451b67e7a12a394eee8b3fcd88f6b050bbc4fd83bc8ab0f0c101f6d17ec3490af13a0e37b153a716831ff10e40974773c5d499b8f221e28ba3e1d73d30b401d692a6d4dd702c8e9c462c53df8266d794d391f063cfe5e90e4994be040cdaece15d21492f37f4a84182026d86da33f3c0b35727ce4f0ed916aacdd89d8e3c590220867e9d9a5a16880960019daa6203c8da683df1e661dc41ce5b7d031e974129c354f97f2865d055265dbf18b00ecdef41c12186912e3dd8532e2340d3e7f986d8721ccde74552d294d070d01cb0515ef45c9012b9143f91e156e60f5ea338dfd683a82792acf05edc73bc1a7fecbe859aea3272a4a19c5e6299eb6342d9a885335d742e111b971f8de2269b"], 0x1128}}, 0x20000000) r9 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0) sendmmsg$inet6(r9, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{0x0}], 0x1}}], 0x1, 0xc0000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1ff, 0x8}, &(0x7f0000000280)=0x8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x11c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0x1, 0x80000001]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x1, 0x8]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x20080000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xbc, 0x21, 0x1, 0x70bd2a, 0x4, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@empty, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xbc}}, 0x0) 233.29866ms ago: executing program 2 (id=13672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1f00, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@private=0xa010100, {0x4, 0x4, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) 224.064821ms ago: executing program 1 (id=13673): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x70}}, 0x4004040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 168.797469ms ago: executing program 0 (id=13674): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50) socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r2, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x118, 0x4a, 0xdf, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) socket(0x840000000002, 0x3, 0x100) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 118.889832ms ago: executing program 3 (id=13675): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0xfffffffffffffe2b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @random="c31439ae8cba", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@empty}, {@dev}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) 53.057906ms ago: executing program 2 (id=13676): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x23, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0x1, 0x1, 0xffffffffffffffff, 0x10}, @ringbuf_output, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}]}, &(0x7f0000000300)='syzkaller\x00', 0xfffff801, 0x4f, &(0x7f0000000340)=""/79, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xb, 0x63, 0xfffffff8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x5, 0x10, 0xa}], 0x10, 0x8d}, 0x94) (async, rerun: 32) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r4 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140), 0x4) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r5, @ANYBLOB="1000"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50) (async) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)=0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 32) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x1224, 0x39, 0x107, 0x70bd26, 0xfffffffe, {0x1, 0x7c}, [@generic="689da0154b3ce41cec0d5a27d19793b1d85914280aa20a29b759fa3198567d5ced4026e3beabadd5a791529177906c7409c29139ff1a68b0e7f97e372bb28b580b2aaa8639d8172e9e20fa6ce7287eaab0b7a6444e", @generic="15d1281b8e7872f3c5b113ee9e54d02e362514241981b87ea8c2b7cc7686960fbb44948c4321b5e9a9545fafe750ec12289c3d9743bffdfe006ae825dc220f3a1620f9c0a2425decd7de2dfc94353cd1c182121bfcb7a0c5dd78e4068ded17be3534e1f4fbb72fb39adb46b459028e4bbfe5f9bfb6f5692a31cbb7bcbcdb10e18c159fc8cecad301fe5e09fae1c729d01cf341ce1f6cf8d32c77b1ee09d04e4d316fefbcda6ac5fe34b06fbeb921622d34471ff160f3c29abe2d45877e5b680e46867ec6150a8558e8e896ed7d291c7d4c4cae44e1671945434d3a156cdc", @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0xd}, @nested={0x10cc, 0x8, 0x0, 0x1, [@nested={0x10c7, 0x48, 0x0, 0x1, [@typed={0x37, 0xa6, 0x0, 0x0, @binary="ad8782b688137dbed5ee524131c84f616c58f8bb50f3f6eb7393376ee2dfaa6986c9554e045e99adb3fe0e4fd7f5a3c563304a"}, @nested={0xbe6, 0xc4, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @uid=r1}, @nested={0xa85, 0x57, 0x0, 0x1, [@nested={0x160, 0x11c, 0x0, 0x1, [@generic="917b04076fc59d6a4b5d43030f6a0c700b3441ab3d56a558", @typed={0x50, 0x3d, 0x0, 0x0, @binary="536db7e862b547988db62e464c5dc2c8b820adc49880fff0a1b16fd23ba66bc4ff327eb74426b5696b251173c5f695f48b5ad9b5d4fdda049d725da1f36282c738f4772bae05f2471c567513"}, @generic="d5bfb6ed096c96b1d78524a4f132be9c88e65d91d4cbba1858f36413", @nested={0xd7, 0x9b, 0x0, 0x1, [@nested={0x4, 0x53}, @typed={0xc, 0xf7, 0x0, 0x0, @u64=0x14}, @generic="5bcb6b02a8d813d5c14b56a2e4ce41ff6058021bdc391ff19a545cff01c306259c402f84b844052ca56e29ec88d8736f1f9dc85a77a8a9a743b4d1843db052bf35cf3eca1f0047a5fd1bd0543c0c3fb29ef1bda5073d4063395727794510c11d715e69dce99b6a5472850fd1aae868a2badb2a84d223bd419dadf000b67a2cbf73cb5df31da38a63dae0c7e70a4c32d0809b7f46394ee5154fab92cee1a2670af4a1d0106161c17c283409331f3940e832a341248f939b5c160a4854ca936b", @nested={0x4, 0x46}]}]}, @generic="2116a6e25f5e7368a86ebda68ebd86d03fc8a6636c22fb283651cb3903d57132ffc9cea76a860ba60b245b090d748c4b31796a392ee5459c5f477b7a0cc15abc7cf77cc1f36e16caa69f310bc8cabc77f15bfef19949ac6defa84e63a91bfd2c11fc144e8a7380fc6744292a975f49fdd64e7b0407e7f0c818", @generic="c8f34f17e112520c0d4491cb0234697d80c8473ef10c7249660fbe94ea10613dff9500539b87779c94e4dcc05f543d1bac3075546386e935e11d4a0ff23eac8f57127484e7a6c90fae4f29bca61dde48c6c59215", @generic="16f829ccfd15f577c66f95573efbd28f2d257c53354b4010372a956e4cd2acff3f820e01125e91c39c7dbb403b14e587fd64e0af9119a27f758654a94503a9cbfea181787c150bb1866a0ae6869ab0a39688dc4b21a3e6b2aa50e1e30474157793ecc82b1ab2c05db31f9d2cb19748e63087166653c96db7f267e7864d858393226e6c208a9fbc5c2bc4b86f0922523781c3148af1beac6ec0c14f63984f760ff022da2b3a49aaf01d8349763553f658871298a0c250f38b7c5c9f7034c34247f9de0bc7b468bda8b9ed5733605c56e32103e81c3a388ad20aedff52d3c9b6e02838157c592c1d68c177c928272911569278c2c55e4f5b29", @nested={0x567, 0x11a, 0x0, 0x1, [@generic="3edc3f9f5053768346219a3cbd0d02d423b1d68fdf22db2834cffe34fd0ada2bc6008352b91865ba518d8ad51267a031de35", @generic="0741dc215e1d87c16c737762980f4ffcbc73637ed49dc650b4e936a0adfc1299c7c6af562ac5ac2fbfaa80164e5b190d8871c1fbe5b75c922c973cade89405ead63087087be6fa55bdd0d9d513c316c2f194c212cfc59cd9a54e6fe459bb723f327cca7d0fb4783fd57d60d477155ff35b2c630bee004b21cbc483f618e0c5d1ad20505122698426e72b35d0f0f2c086c907930c3f1d47590fce9b5985c0fbd4e97f34e3241a5338897eb125ee5f5da650fb8c30160d6fe4b235c9bf05dbd16af2cc367a40924c2e0b61fd4b787d212524e9920f61dfa07185e8a3766f6ebe92e7e0f46183f08e536bbe6fc33f39db407c", @nested={0x43f, 0x145, 0x0, 0x1, [@generic="f581a4c2ac5314fb37cc3fb45529ce32902095fa5d409efbd89392c18e460907f995b71d3bd42fb157e12b63031b4aabc6a7843843500936c52b93f7803896df8570b3fb3348d0363cad3c5a3956bfb8b9704fcd0be640751f150e3284c8b557a247711dfbd2555870d3785fa713525c1c4b926247efb829d096f32f8bc011167704b0d3a22c64c15ea3906d9f476ba60484b82f8cae6368f6d263b80c8e98c0f3edfba3c4c1714f4cdabfeafa9e4497e24504b61898098a7f27316713f53554da60b0eae097d8b453ec841449fc1a3fe56b1a5eae", @nested={0x11a, 0xc5, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x4, 0xb4}, @generic="7b1d03e3eb7bd3cba93c94e6943fa9b51aa947859cf42f52401b921788a2e8088792a6f5885303d2d0027d36edc0c36633cc0bbd7093385023500aca20607cb4a173b7ea1af125b642787f0a5de8413bf561b37954110c629a9ec8a660472fb063c86628902927e14eb263a846299cc5ccca835b7ce97fed21e8a3184f18f4fab21153818e57225a1b7816fe64f0c7ccfe92e149d16f8e5216d85cb2ee7f6683b2f9f7ed6da00a72cca1c4e7b345f268949c418ca595660b3012", @typed={0x14, 0xc9, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="7d4302bb5002740678516e8fe8d419188c44ac8e8e0ddc5c57ca843a97dc85ea14f3c950844aab099b7806c4d2b5da1d", @typed={0x8, 0xc9, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x5d, 0x0, 0x0, @pid=r9}]}, @typed={0x8, 0x57, 0x0, 0x0, @fd=r6}, @nested={0x13c, 0x24, 0x0, 0x1, [@typed={0x4, 0x38}, @typed={0x4, 0x30}, @typed={0x8, 0xa8, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x115, 0x0, 0x0, @uid=r8}, @generic="4f13c2c9d390fabeb5a231ee5331442c58c4e21c6ecfcef4ba127ea2cec5555bec0953a12f85965295daee6fef36a3c1946ce2ea795c32396169e723accec2cd677979b64bf49af4a933bca9fae3f3fa351160158656329e00d3584dcdff58e8443d98043f3cc736", @generic="dc6fb1a444bb5b0d254b05dc5210a69b4fbc11bf014aa2664c14b8ab0683e17a4f7e9ed66fbc7c0378936ba4437fa6173f2ea0126c106ee09643a65177593c67d8494452ad9c48c5f189d3b5d9cd9e970da4b12e90c0a2ed703d6658f1041e634c4855752491271d7555e918e17dc9f92298050f55312cba80199a82ac4b5941641cfca5dad614c98da3263f69336cbe93c88f48c18f456180aa0e438fa91befab0bde728fcae9b28b7034d72a6e186b9717e45a", @nested={0x4, 0xb6}]}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r10}, @nested={0xe6, 0xc6, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x8f}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @generic="75501ab7baa4a0801f9b6ebffb0d2de34b19d3cdfcce0380c969bb0b097e255c181a0a589c0879065176c11edd4967cb75bdddb236d358dd4debf494d870a7f6965cccc5846b35e67fcf88b9269dd30bbcee5bdad87dd21c8c0378c0d2c2ae9b98ec30603f7417d70b0fa318b72e37cd7ee14735bf933962e33e2d8446858441726b9c3399f25d4649aedea82c001c5892ad27120069a81a91ebbbe8536942b624108b2307ad9b1fdf12e669149fd09f4ecbe7f7d5a6fe69d6282562998c5690af1d"]}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0xfff}, @generic="0d40888279119f7e60befcec7f9a"]}]}, @nested={0x1f4, 0x25, 0x0, 0x1, [@nested={0x1ef, 0xc9, 0x0, 0x1, [@generic="5588c7d51d9159e72bd9093fea6825eea64c305cc6f1f34337d88387d8aa8ea44841ce2d382e1446f3caf4fb515465884d22f630dc9234420e8422cd7026a8e9469a8952b56da6025bed972e69eaf45ec1b867380a1c140ff0eef5", @generic="9523ec9084f7fcb445fff7683db84d4cda90d1eb14a03109ed15acab4b107a2dfed6685e7508565787030c742c8da2331d5e390b699a96d4346b73122ad6c1fafe8c5b071d7d5c8d1f75235634c0c8506ee18fb16e98d67fb4baca2892fc6cf50e772b6c75af2355220a4ce41e7cfe3dbb5386acafd91acbdc95615aebcb872fb65393e4b3f789ace7a889e221dd27045b8a1ca23545a40aeda2ab609c6c5ab35fa2f2f89aa25bd167f098e4f887791318262b467a885be699edf46bf75099f936c0472c0d2b31af7127275cf2d7bf61293fc937", @nested={0x4, 0xd}, @nested={0x4, 0xf9}, @typed={0xa9, 0x6c, 0x0, 0x0, @binary="34bf17aa78d9563812bccd38a0efd298d5302625cbf1fd097174de8425f69204e62cca603779f12fcbbaa315c4a97d94c58bfe7ead4a061ba60159ac5914176f718e11bc2a19975437f0020edeceb6f986d1c53138217f01c708dff16810c4de3ac225aee73450b7b4a8a676c02d5b5972dd2a5f2031dad27b0590575a1280377775d2c5f54940391853c5e527e5142facd146c79a22bf1a2372cb32e0dee91074fea77950"}, @typed={0x8, 0x10d, 0x0, 0x0, @u32=0x7f0000}]}]}]}, @generic="8d30ee18dcf84c96d2f3a6df17fdfc7d7ec145fd854aea05c2ae8ae90e9f2a10c4ee784350f4d74d5c7bfa6a19f413facbf9ee85019bc16504f9ce3ea85f92518e1e4319866e37269897019a4c1b9345f1bb1e1a121b78afb6c3c9a5c90d7f08a4e5370fc67bd8671707d356d233db2ba43537ae50cc8543307b2617fb2f75c9f724e20a0b24e5e0ccf4c40298468a8a9a609a5f4ae1d7f4098d72c12416894b7d1d1bfaaf2abf03078a369c0bdc5ef2307b454ba15207", @generic="428b988ce4247230ecfca050a6fe72f8f59750c148bb568e2ce9bc22499b23b59cf290c1783b206ef40cdbbfd23444f21239743c7612e59a715e97a54aa8066b705b39007e902fd4262de63496cb232cc2b37d50e66aad31f55249", @nested={0x3d, 0xe8, 0x0, 0x1, [@generic="1ca1729e030a191ff2babfbb3c081b18ff947c5224536ab7075471b1023dbe91e81ef9a22a3b772389e5ff4e4befc238d4", @typed={0x4, 0xc8}, @nested={0x4, 0x72}]}]}, @generic="957a746f397cf435ecc7915cc057cfbc0d2cdbc2454d0ca3ea896b44abed405b445b2d7feac35108068ed0e8a711892d61c91986968e4a93f27d79ecbe26d729e5e58b71acdc927db8c8becd7b99730e4e99bfbf2d1addc24026c47d671cfa2214404aed6bc1696068327fd132f1fcbca7756a33cfe9", @generic="f3d02f68eec6c88ba73c725153a84fc5ef7dfebc0a5fb20498b35f989abfe77dc26747440f5c31088fab66fcde0a153835fde360a5fe9741579048bc594c654970c8fe5423f17bf5afb9af3b8e735640a8f01d266528f1d328e17c65de3beefb3ac1b08de74e8f3cd8eaf1000938896341e5dfa65069c39cb11d91b41e6d2f6bec7911e140c85343b3c89f85e916a1ed6066eee47b5136b9e56f4cbc95f7ee9f06bba5568b51bd410ec79d274947dbe292e8fd953a0b8474caca65a5835b52a353a9642e99cca74874e492354d521439bb8af8f4620b0f38ac6064d8c3e365d38afb9af820cfabbd9f6644025d9503d93c563a465e", @nested={0x338, 0x7, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0x7fff}, @typed={0x7a, 0x6c, 0x0, 0x0, @binary="58dddeecd0cbdbf1ed86a4fda6eabab4e4f50173154e4b6cb740492ea8df51656ed600ad89f7459fb7332b81fe79d9e4e00ee857da32403a7591e688d16f8be47f81868fb5e566300b0099506ace2c256c4aab49353b3f41bcbc74bd220c80bc2336fb3ce092cc4953825f15e6d8768a7de0665bd45c"}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0xf2}]}, @nested={0xbd, 0xf0, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x12e}, @typed={0x8, 0xd3, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x4d}, @generic="42b7daf90a07942d344a6611dfc158cc95f6de52c349dede8b67b2857e10811fc711313297e5fd2aacdd22d6be966f951e4433818e7b5558e271a6b0c37e4b6111411e9bd63fdbda810bb9917564da376b49ea1e8393f1318c9c073a01234b198b7f733e93349673a2ff4691c3c7b1f088ca50305ffda0f8a35cd5aae7ea0c7fdade9fcab618fd86e39ab1f97faecbd448b7eabeaa9bd23d44b5bb007b6e1eb38c"]}, @typed={0x8, 0xac, 0x0, 0x0, @u32=0x9a}, @nested={0x1c9, 0x14d, 0x0, 0x1, [@generic="6fcb2acc9867c103d0ee6e873953628b2635e7da5b953ac55bc101f416edc5f1e9586d725fa18701adfd41a7aeb33243faac169c6dec626228309cfc9b257b081def8966f256e9e30652f0e9cd36170dcda5e72d8d8bb9556f6bd0859658157752729ed061d267843e4bdcf6293049c8d820415dec8bb5b4b62d400d8aa4caed29287419858fda9ace57044ee284be3ace4acb0f3ff26672ab5a3c8f69e0b2c3c2ed008f2c1d41b8b2ce386cfa25a1a05584ee70dbe1b18c32e0e6c37237f96ae04985eafa9b5672564fff12dbddcc40cdab9e0a1fa3e23bcc6053a5e2f24494853a44d2684cacd774d7", @nested={0x4, 0x26}, @generic="325a046a3f7ae244726a8042245bec33d97195d10f9bb5753afba02e21900663faf6dd58bc1d4bf7d35dc211dffecd5689c1ade48eacf181899ad666432a534836e35de50b0657ec81404b3d3aa17f3928984c8a8dbfdda875bcc5b46dc5c96543c61927238ad8661cd1764d232c9bd185a9a8a282cef788b684b6436dc92d8ebc75a1eeebc8d95986e38555206ee3950c89ac44dac827748e69309a28f458c8a126c4e336d60ebb5fc96f8d83e938fc6e06d88e87f57bc0731b8e82f66d7ee18b9690599f1e7fa4b12274", @nested={0x4, 0x40}, @typed={0x8, 0x11d, 0x0, 0x0, @uid=r1}]}]}]}]}]}, 0x1224}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) (async, rerun: 32) r11 = socket$isdn(0x22, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f0000000040)={0x6, 'netdevsim0\x00', {0x3a55}, 0x9}) 0s ago: executing program 0 (id=13677): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (fail_nth: 13) kernel console output (not intermixed with test programs): ][T18590] ____sys_recvmsg+0x1c9/0x460 [ 2109.920702][T18590] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2109.920751][T18590] ? import_iovec+0x74/0xa0 [ 2109.920782][T18590] ___sys_recvmsg+0x1b5/0x510 [ 2109.920817][T18590] ? __pfx____sys_recvmsg+0x10/0x10 [ 2109.920884][T18590] ? __fget_files+0x3a0/0x420 [ 2109.920919][T18590] do_recvmmsg+0x307/0x770 [ 2109.920960][T18590] ? __pfx_do_recvmmsg+0x10/0x10 [ 2109.921004][T18590] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2109.921053][T18590] __x64_sys_recvmmsg+0x190/0x240 [ 2109.921086][T18590] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2109.921114][T18590] ? rcu_is_watching+0x15/0xb0 [ 2109.921144][T18590] ? do_syscall_64+0xbe/0x3b0 [ 2109.921174][T18590] do_syscall_64+0xfa/0x3b0 [ 2109.921198][T18590] ? lockdep_hardirqs_on+0x9c/0x150 [ 2109.921222][T18590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2109.921244][T18590] ? clear_bhb_loop+0x60/0xb0 [ 2109.921272][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2109.921295][T18590] RIP: 0033:0x7f109538ebe9 [ 2109.921315][T18590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2109.921336][T18590] RSP: 002b:00007f10935f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2109.921362][T18590] RAX: ffffffffffffffda RBX: 00007f10955c5fa0 RCX: 00007f109538ebe9 [ 2109.921379][T18590] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 2109.921393][T18590] RBP: 00007f10935f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2109.921408][T18590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.921422][T18590] R13: 00007f10955c6038 R14: 00007f10955c5fa0 R15: 00007ffca0537e88 [ 2109.921460][T18590] [ 2110.227779][T18575] lo speed is unknown, defaulting to 1000 [ 2110.253519][T18575] lo speed is unknown, defaulting to 1000 [ 2110.380375][T18602] __nla_validate_parse: 14 callbacks suppressed [ 2110.380397][T18602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12616'. [ 2110.426283][T18602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12616'. [ 2110.808469][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12619'. [ 2110.869793][T18617] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2111.021631][T18625] netlink: 'syz.0.12622': attribute type 8 has an invalid length. [ 2111.024077][T18623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12623'. [ 2111.117309][T18627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2111.341993][T18633] netlink: 'syz.2.12627': attribute type 2 has an invalid length. [ 2111.392122][T18631] bridge17: entered allmulticast mode [ 2111.451752][T18639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2111.732703][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12632'. [ 2111.940141][T18655] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2112.385147][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12641'. [ 2112.394355][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12641'. [ 2112.537889][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12643'. [ 2112.545948][T18684] netlink: 'syz.3.12644': attribute type 2 has an invalid length. [ 2112.607190][T18684] sit0: left promiscuous mode [ 2112.627926][T18684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2113.178274][T18706] lo speed is unknown, defaulting to 1000 [ 2113.195436][T18706] lo speed is unknown, defaulting to 1000 [ 2113.220364][T18706] lo speed is unknown, defaulting to 1000 [ 2113.703926][T18726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12654'. [ 2113.735674][T18712] lo speed is unknown, defaulting to 1000 [ 2113.737071][T18722] tipc: Resetting bearer [ 2113.769563][T18722] tipc: Resetting bearer [ 2113.798114][T18722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2113.924559][ T6249] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2113.937169][ T6249] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2113.949643][ T6362] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2114.005006][T18712] lo speed is unknown, defaulting to 1000 [ 2114.011340][ T6362] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2114.201635][T18732] batman_adv: batadv0: Interface deactivated: dummy0 [ 2114.447480][ T7500] lo speed is unknown, defaulting to 1000 [ 2114.449894][T18712] lo speed is unknown, defaulting to 1000 [ 2114.469661][ T7500] syz1: Port: 1 Link DOWN [ 2114.484286][T18748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12663'. [ 2114.710925][ T6362] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2115.642131][T18777] __nla_validate_parse: 3 callbacks suppressed [ 2115.642151][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12671'. [ 2115.677435][T18774] tipc: Enabled bearer , priority 0 [ 2115.686136][T18774] syzkaller0: entered promiscuous mode [ 2115.695094][T18774] syzkaller0: entered allmulticast mode [ 2115.762760][T18774] tipc: Resetting bearer [ 2115.778607][T18773] tipc: Resetting bearer [ 2115.825765][T18773] tipc: Disabling bearer [ 2115.866383][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12674'. [ 2116.045504][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12675'. [ 2116.079857][T18787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12675'. [ 2116.171707][T18791] bridge18: entered allmulticast mode [ 2116.322442][T18798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12679'. [ 2116.575770][T18811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12683'. [ 2116.663592][T18813] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12687'. [ 2116.783499][T18817] bridge17: left allmulticast mode [ 2116.833428][T18817] bridge18: left allmulticast mode [ 2117.074905][T18826] netlink: 'syz.3.12692': attribute type 1 has an invalid length. [ 2117.233023][T18832] bridge0: entered allmulticast mode [ 2117.472662][T18845] ip_vti0: Master is either lo or non-ether device [ 2117.647928][T18848] lo speed is unknown, defaulting to 1000 [ 2117.671599][T18855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12701'. [ 2117.680455][T18848] lo speed is unknown, defaulting to 1000 [ 2117.691068][T18855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2117.717469][T18848] lo speed is unknown, defaulting to 1000 [ 2117.973593][T18870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12705'. [ 2118.149422][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2118.277852][T18880] FAULT_INJECTION: forcing a failure. [ 2118.277852][T18880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2118.300549][T18880] CPU: 1 UID: 0 PID: 18880 Comm: syz.4.12709 Not tainted syzkaller #0 PREEMPT(full) [ 2118.300579][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2118.300593][T18880] Call Trace: [ 2118.300601][T18880] [ 2118.300611][T18880] dump_stack_lvl+0x189/0x250 [ 2118.300640][T18880] ? __pfx____ratelimit+0x10/0x10 [ 2118.300663][T18880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2118.300688][T18880] ? __pfx__printk+0x10/0x10 [ 2118.300717][T18880] ? __might_fault+0xb0/0x130 [ 2118.300759][T18880] should_fail_ex+0x414/0x560 [ 2118.300793][T18880] _copy_from_user+0x2d/0xb0 [ 2118.300819][T18880] __sys_sendto+0x25c/0x520 [ 2118.300853][T18880] ? __pfx___sys_sendto+0x10/0x10 [ 2118.300871][T18880] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2118.300906][T18880] ? __fget_files+0x3a0/0x420 [ 2118.300933][T18880] ? ksys_write+0x22a/0x250 [ 2118.300962][T18880] ? __pfx_ksys_write+0x10/0x10 [ 2118.300986][T18880] ? rcu_is_watching+0x15/0xb0 [ 2118.301011][T18880] __x64_sys_sendto+0xde/0x100 [ 2118.301042][T18880] do_syscall_64+0xfa/0x3b0 [ 2118.301064][T18880] ? lockdep_hardirqs_on+0x9c/0x150 [ 2118.301086][T18880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.301107][T18880] ? clear_bhb_loop+0x60/0xb0 [ 2118.301131][T18880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2118.301151][T18880] RIP: 0033:0x7f679c18ebe9 [ 2118.301169][T18880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2118.301187][T18880] RSP: 002b:00007f679d00e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2118.301210][T18880] RAX: ffffffffffffffda RBX: 00007f679c3c5fa0 RCX: 00007f679c18ebe9 [ 2118.301226][T18880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2118.301238][T18880] RBP: 00007f679d00e090 R08: 0000200000000280 R09: 000000000000001c [ 2118.301252][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2118.301265][T18880] R13: 00007f679c3c6038 R14: 00007f679c3c5fa0 R15: 00007fff199ed1b8 [ 2118.301299][T18880] [ 2118.935970][T18891] bridge17: entered allmulticast mode [ 2118.976684][T18899] netlink: 'syz.3.12716': attribute type 2 has an invalid length. [ 2119.180732][T18901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2119.451346][T18915] tipc: Enabled bearer , priority 0 [ 2119.467733][T18915] syzkaller0: entered promiscuous mode [ 2119.475034][T18915] syzkaller0: entered allmulticast mode [ 2119.482222][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12723'. [ 2119.537378][T18915] tipc: Resetting bearer [ 2119.585738][T18914] tipc: Resetting bearer [ 2119.637901][T18914] tipc: Disabling bearer [ 2119.836702][T18928] lo speed is unknown, defaulting to 1000 [ 2119.901083][T18928] lo speed is unknown, defaulting to 1000 [ 2119.908710][T18928] lo speed is unknown, defaulting to 1000 [ 2120.348075][T18955] bridge11: entered allmulticast mode [ 2120.761140][T18966] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12738'. [ 2120.963800][T18971] tipc: Enabled bearer , priority 0 [ 2121.005079][T18971] syzkaller0: entered promiscuous mode [ 2121.036442][T18971] syzkaller0: entered allmulticast mode [ 2121.129135][T18971] tipc: Resetting bearer [ 2121.157900][T18970] tipc: Resetting bearer [ 2121.217805][T18978] netlink: 'syz.3.12741': attribute type 2 has an invalid length. [ 2121.246922][T18970] tipc: Disabling bearer [ 2121.316581][T18979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2121.461678][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12743'. [ 2121.491226][T18986] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12742'. [ 2121.505871][T18984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12743'. [ 2121.523912][T18986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2121.531204][T18986] IPv6: NLM_F_CREATE should be set when creating new route [ 2121.538525][T18986] IPv6: NLM_F_CREATE should be set when creating new route [ 2121.610785][T18989] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12744'. [ 2121.988076][T19009] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12752'. [ 2122.002420][T19009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12752'. [ 2122.014903][T19009] netlink: 277 bytes leftover after parsing attributes in process `syz.0.12752'. [ 2122.257797][T19012] netlink: 'syz.0.12753': attribute type 2 has an invalid length. [ 2122.372811][T19012] 8021q: adding VLAN 0 to HW filter on device team0 [ 2122.384311][T19012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2122.700835][T19024] lo speed is unknown, defaulting to 1000 [ 2122.708691][T19024] lo speed is unknown, defaulting to 1000 [ 2122.815068][T19024] lo speed is unknown, defaulting to 1000 [ 2123.116016][T19046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12763'. [ 2123.179048][T19051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12764'. [ 2123.471648][T19063] netlink: 'syz.3.12770': attribute type 8 has an invalid length. [ 2123.697339][T17910] lo speed is unknown, defaulting to 1000 [ 2123.705170][T17910] syz0: Port: 1 Link DOWN [ 2123.719599][T16650] lo speed is unknown, defaulting to 1000 [ 2123.941747][T19083] netlink: 'syz.3.12778': attribute type 8 has an invalid length. [ 2124.249664][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.257552][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.620272][T19095] lo speed is unknown, defaulting to 1000 [ 2124.644782][T19095] lo speed is unknown, defaulting to 1000 [ 2124.725076][T19095] lo speed is unknown, defaulting to 1000 [ 2125.153588][T19118] tipc: New replicast peer: 255.255.255.255 [ 2125.164968][T19118] tipc: Enabled bearer , priority 10 [ 2125.590551][T19119] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2125.781394][T19131] macsec2: entered allmulticast mode [ 2125.795885][T19131] ip6gretap0: entered allmulticast mode [ 2125.817498][T19131] ip6gretap0: left allmulticast mode [ 2126.391626][T19143] __nla_validate_parse: 6 callbacks suppressed [ 2126.391645][T19143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12799'. [ 2126.478110][ T8441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2126.491119][ T8441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2126.514539][T19151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12800'. [ 2126.577781][T19147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12800'. [ 2126.629429][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2126.791610][T19156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12803'. [ 2126.813554][T19156] nbd: device at index 64 is going down [ 2126.831232][T19153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12802'. [ 2126.861491][T19162] FAULT_INJECTION: forcing a failure. [ 2126.861491][T19162] name failslab, interval 1, probability 0, space 0, times 0 [ 2126.929431][T19162] CPU: 0 UID: 0 PID: 19162 Comm: syz.2.12805 Not tainted syzkaller #0 PREEMPT(full) [ 2126.929462][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2126.929476][T19162] Call Trace: [ 2126.929485][T19162] [ 2126.929496][T19162] dump_stack_lvl+0x189/0x250 [ 2126.929527][T19162] ? __pfx____ratelimit+0x10/0x10 [ 2126.929550][T19162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2126.929575][T19162] ? __pfx__printk+0x10/0x10 [ 2126.929620][T19162] should_fail_ex+0x414/0x560 [ 2126.929655][T19162] should_failslab+0xa8/0x100 [ 2126.929687][T19162] __kmalloc_cache_noprof+0x70/0x3d0 [ 2126.929716][T19162] ? sctp_add_bind_addr+0x8c/0x370 [ 2126.929742][T19162] sctp_add_bind_addr+0x8c/0x370 [ 2126.929768][T19162] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2126.929793][T19162] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2126.929813][T19162] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2126.929849][T19162] ? sctp_v6_is_any+0x64/0x80 [ 2126.929872][T19162] ? sctp_copy_one_addr+0x93/0x360 [ 2126.929898][T19162] sctp_bind_addr_copy+0xb3/0x3c0 [ 2126.929920][T19162] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2126.929953][T19162] sctp_connect_new_asoc+0x2e0/0x690 [ 2126.929979][T19162] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2126.929998][T19162] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2126.930023][T19162] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2126.930043][T19162] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2126.930071][T19162] sctp_sendmsg+0x155c/0x2810 [ 2126.930103][T19162] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2126.930126][T19162] ? aa_sk_perm+0x81e/0x950 [ 2126.930158][T19162] ? __pfx_aa_sk_perm+0x10/0x10 [ 2126.930186][T19162] ? sock_rps_record_flow+0x19/0x410 [ 2126.930215][T19162] ? inet_sendmsg+0x2f4/0x370 [ 2126.930243][T19162] __sock_sendmsg+0x19c/0x270 [ 2126.930271][T19162] __sys_sendto+0x3bd/0x520 [ 2126.930292][T19162] ? __pfx___sys_sendto+0x10/0x10 [ 2126.930316][T19162] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2126.930348][T19162] ? __fget_files+0x3a0/0x420 [ 2126.930385][T19162] ? ksys_write+0x22a/0x250 [ 2126.930409][T19162] ? __pfx_ksys_write+0x10/0x10 [ 2126.930429][T19162] ? rcu_is_watching+0x15/0xb0 [ 2126.930451][T19162] __x64_sys_sendto+0xde/0x100 [ 2126.930472][T19162] do_syscall_64+0xfa/0x3b0 [ 2126.930489][T19162] ? lockdep_hardirqs_on+0x9c/0x150 [ 2126.930506][T19162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.930523][T19162] ? clear_bhb_loop+0x60/0xb0 [ 2126.930543][T19162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2126.930558][T19162] RIP: 0033:0x7f157018ebe9 [ 2126.930574][T19162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2126.930588][T19162] RSP: 002b:00007f1570fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2126.930606][T19162] RAX: ffffffffffffffda RBX: 00007f15703c5fa0 RCX: 00007f157018ebe9 [ 2126.930619][T19162] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 2126.930632][T19162] RBP: 00007f1570fcf090 R08: 000020000005ffe4 R09: 000000000000001c [ 2126.930646][T19162] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 2126.930658][T19162] R13: 00007f15703c6038 R14: 00007f15703c5fa0 R15: 00007ffce11074b8 [ 2126.930685][T19162] [ 2127.570679][T19183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12812'. [ 2127.743199][T19166] bridge17: left allmulticast mode [ 2127.758989][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12810'. [ 2127.769370][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12810'. [ 2127.947823][T19194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12813'. [ 2128.055218][T19196] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2128.124541][T19203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12818'. [ 2129.068370][T19233] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2129.442273][T19253] netlink: 'syz.2.12837': attribute type 7 has an invalid length. [ 2129.469750][T19253] netlink: 'syz.2.12837': attribute type 8 has an invalid length. [ 2129.493100][T19256] netlink: 'syz.1.12838': attribute type 2 has an invalid length. [ 2129.655394][T19260] 8021q: adding VLAN 0 to HW filter on device à [ 2129.672288][T19262] netlink: 'syz.0.12839': attribute type 2 has an invalid length. [ 2129.716065][T19260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2129.741422][T19187] lo speed is unknown, defaulting to 1000 [ 2129.747539][T19187] syz2: Port: 1 Link ACTIVE [ 2129.767797][T19267] A link change request failed with some changes committed already. Interface »»»»»»×[SRëåW may have been left with an inconsistent configuration, please check. [ 2129.886161][T19271] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2130.098340][T19281] netlink: 'syz.2.12848': attribute type 15 has an invalid length. [ 2130.135158][T19281] openvswitch: netlink: Flow actions attr not present in new flow. [ 2130.146448][T19285] netlink: 'syz.4.12849': attribute type 8 has an invalid length. [ 2130.494842][T19302] bridge10: entered allmulticast mode [ 2130.602560][T19307] macsec0: entered promiscuous mode [ 2130.608224][T19307] macsec0: entered allmulticast mode [ 2130.617784][T19307] batadv0: entered allmulticast mode [ 2130.881538][T19316] netlink: 'syz.4.12858': attribute type 2 has an invalid length. [ 2130.982447][T19316] 8021q: adding VLAN 0 to HW filter on device team0 [ 2131.010897][T19316] tipc: Resetting bearer [ 2131.027245][T19316] tipc: Resetting bearer [ 2131.073885][T19316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2131.143935][T19322] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2131.283115][T19335] netlink: 'syz.1.12863': attribute type 1 has an invalid length. [ 2131.573636][T19349] bridge13: entered allmulticast mode [ 2131.622004][T19352] __nla_validate_parse: 15 callbacks suppressed [ 2131.622028][T19352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12869'. [ 2131.980759][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12872'. [ 2132.087386][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12873'. [ 2132.603197][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12875'. [ 2132.879615][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12880'. [ 2133.061389][T19391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12882'. [ 2133.138591][T19399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12883'. [ 2133.149963][T19398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12881'. [ 2133.168541][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12884'. [ 2133.645775][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12889'. [ 2133.721863][T19419] FAULT_INJECTION: forcing a failure. [ 2133.721863][T19419] name failslab, interval 1, probability 0, space 0, times 0 [ 2133.773770][T19419] CPU: 0 UID: 0 PID: 19419 Comm: syz.4.12892 Not tainted syzkaller #0 PREEMPT(full) [ 2133.773800][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2133.773814][T19419] Call Trace: [ 2133.773823][T19419] [ 2133.773832][T19419] dump_stack_lvl+0x189/0x250 [ 2133.773862][T19419] ? __pfx____ratelimit+0x10/0x10 [ 2133.773886][T19419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.773911][T19419] ? __pfx__printk+0x10/0x10 [ 2133.773938][T19419] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2133.773978][T19419] should_fail_ex+0x414/0x560 [ 2133.774013][T19419] should_failslab+0xa8/0x100 [ 2133.774046][T19419] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2133.774073][T19419] ? skb_clone+0x212/0x3a0 [ 2133.774105][T19419] skb_clone+0x212/0x3a0 [ 2133.774134][T19419] __netlink_deliver_tap+0x404/0x850 [ 2133.774172][T19419] ? netlink_deliver_tap+0x2e/0x1b0 [ 2133.774196][T19419] netlink_deliver_tap+0x19c/0x1b0 [ 2133.774220][T19419] netlink_dump+0x92b/0xe90 [ 2133.774255][T19419] ? __pfx_netlink_dump+0x10/0x10 [ 2133.774273][T19419] ? __netlink_lookup+0x752/0x810 [ 2133.774314][T19419] ? netlink_lookup+0x30/0x200 [ 2133.774333][T19419] ? netlink_lookup+0x30/0x200 [ 2133.774350][T19419] ? netlink_lookup+0x30/0x200 [ 2133.774376][T19419] __netlink_dump_start+0x5cb/0x7e0 [ 2133.774408][T19419] rtnetlink_rcv_msg+0x9eb/0xb70 [ 2133.774430][T19419] ? __pfx_ipmr_rtm_dumplink+0x10/0x10 [ 2133.774461][T19419] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2133.774481][T19419] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2133.774499][T19419] ? ref_tracker_free+0x63a/0x7d0 [ 2133.774527][T19419] ? __pfx_rtnl_dumpit+0x10/0x10 [ 2133.774547][T19419] ? __pfx_ipmr_rtm_dumplink+0x10/0x10 [ 2133.774591][T19419] netlink_rcv_skb+0x205/0x470 [ 2133.774614][T19419] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2133.774645][T19419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2133.774680][T19419] ? netlink_deliver_tap+0x2e/0x1b0 [ 2133.774711][T19419] netlink_unicast+0x82f/0x9e0 [ 2133.774753][T19419] ? __pfx_netlink_unicast+0x10/0x10 [ 2133.774787][T19419] ? netlink_sendmsg+0x642/0xb30 [ 2133.774806][T19419] ? skb_put+0x11b/0x210 [ 2133.774834][T19419] netlink_sendmsg+0x805/0xb30 [ 2133.774867][T19419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2133.774893][T19419] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2133.774916][T19419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2133.774938][T19419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2133.774962][T19419] __sock_sendmsg+0x21c/0x270 [ 2133.774995][T19419] ____sys_sendmsg+0x505/0x830 [ 2133.775027][T19419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2133.775064][T19419] ? import_iovec+0x74/0xa0 [ 2133.775093][T19419] ___sys_sendmsg+0x21f/0x2a0 [ 2133.775122][T19419] ? __pfx____sys_sendmsg+0x10/0x10 [ 2133.775189][T19419] ? __fget_files+0x2a/0x420 [ 2133.775207][T19419] ? __fget_files+0x3a0/0x420 [ 2133.775238][T19419] __x64_sys_sendmsg+0x19b/0x260 [ 2133.775267][T19419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2133.775303][T19419] ? __pfx_ksys_write+0x10/0x10 [ 2133.775328][T19419] ? rcu_is_watching+0x15/0xb0 [ 2133.775355][T19419] ? do_syscall_64+0xbe/0x3b0 [ 2133.775383][T19419] do_syscall_64+0xfa/0x3b0 [ 2133.775405][T19419] ? lockdep_hardirqs_on+0x9c/0x150 [ 2133.775426][T19419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.775447][T19419] ? clear_bhb_loop+0x60/0xb0 [ 2133.775472][T19419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.775492][T19419] RIP: 0033:0x7f679c18ebe9 [ 2133.775511][T19419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2133.775529][T19419] RSP: 002b:00007f679d00e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2133.775551][T19419] RAX: ffffffffffffffda RBX: 00007f679c3c5fa0 RCX: 00007f679c18ebe9 [ 2133.775566][T19419] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2133.775579][T19419] RBP: 00007f679d00e090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.775592][T19419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.775650][T19419] R13: 00007f679c3c6038 R14: 00007f679c3c5fa0 R15: 00007fff199ed1b8 [ 2133.775686][T19419] [ 2134.204253][T19424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2134.278246][T19425] xt_limit: Overflow, try lower: 271964/0 [ 2134.482952][T19437] FAULT_INJECTION: forcing a failure. [ 2134.482952][T19437] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.499535][T19437] CPU: 0 UID: 0 PID: 19437 Comm: syz.1.12901 Not tainted syzkaller #0 PREEMPT(full) [ 2134.499574][T19437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2134.499589][T19437] Call Trace: [ 2134.499598][T19437] [ 2134.499608][T19437] dump_stack_lvl+0x189/0x250 [ 2134.499638][T19437] ? __pfx____ratelimit+0x10/0x10 [ 2134.499662][T19437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2134.499687][T19437] ? __pfx__printk+0x10/0x10 [ 2134.499720][T19437] ? __pfx___might_resched+0x10/0x10 [ 2134.499740][T19437] ? fs_reclaim_acquire+0x7d/0x100 [ 2134.499766][T19437] should_fail_ex+0x414/0x560 [ 2134.499798][T19437] should_failslab+0xa8/0x100 [ 2134.499832][T19437] __kmalloc_noprof+0xcb/0x4f0 [ 2134.499858][T19437] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2134.499878][T19437] ? sock_kmalloc+0xd6/0x160 [ 2134.499909][T19437] sock_kmalloc+0xd6/0x160 [ 2134.499937][T19437] hash_recvmsg+0x1d4/0x840 [ 2134.499972][T19437] ? __pfx_hash_recvmsg+0x10/0x10 [ 2134.499999][T19437] sock_recvmsg_nosec+0x183/0x1c0 [ 2134.500034][T19437] ____sys_recvmsg+0x3aa/0x460 [ 2134.500070][T19437] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2134.500127][T19437] ? import_iovec+0x74/0xa0 [ 2134.500156][T19437] ___sys_recvmsg+0x1b5/0x510 [ 2134.500187][T19437] ? __pfx____sys_recvmsg+0x10/0x10 [ 2134.500245][T19437] ? __might_fault+0xb0/0x130 [ 2134.500278][T19437] do_recvmmsg+0x307/0x770 [ 2134.500312][T19437] ? __pfx_do_recvmmsg+0x10/0x10 [ 2134.500352][T19437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2134.500397][T19437] __x64_sys_recvmmsg+0x190/0x240 [ 2134.500427][T19437] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2134.500451][T19437] ? rcu_is_watching+0x15/0xb0 [ 2134.500478][T19437] ? do_syscall_64+0xbe/0x3b0 [ 2134.500506][T19437] do_syscall_64+0xfa/0x3b0 [ 2134.500528][T19437] ? lockdep_hardirqs_on+0x9c/0x150 [ 2134.500557][T19437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.500577][T19437] ? clear_bhb_loop+0x60/0xb0 [ 2134.500603][T19437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.500623][T19437] RIP: 0033:0x7f4a2f18ebe9 [ 2134.500642][T19437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2134.500659][T19437] RSP: 002b:00007f4a2ff58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2134.500681][T19437] RAX: ffffffffffffffda RBX: 00007f4a2f3c5fa0 RCX: 00007f4a2f18ebe9 [ 2134.500696][T19437] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 2134.500710][T19437] RBP: 00007f4a2ff58090 R08: 0000000000000000 R09: 0000000000000000 [ 2134.500723][T19437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2134.500735][T19437] R13: 00007f4a2f3c6038 R14: 00007f4a2f3c5fa0 R15: 00007ffdc129f578 [ 2134.500770][T19437] [ 2135.043418][T19449] delete_channel: no stack [ 2135.443402][T19468] lo speed is unknown, defaulting to 1000 [ 2135.504866][T19468] lo speed is unknown, defaulting to 1000 [ 2135.541403][T19468] lo speed is unknown, defaulting to 1000 [ 2135.902067][T19489] netlink: 'syz.1.12918': attribute type 2 has an invalid length. [ 2135.938707][T19489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2136.120351][T19495] FAULT_INJECTION: forcing a failure. [ 2136.120351][T19495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.152583][T19495] CPU: 1 UID: 0 PID: 19495 Comm: syz.0.12920 Not tainted syzkaller #0 PREEMPT(full) [ 2136.152614][T19495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2136.152627][T19495] Call Trace: [ 2136.152636][T19495] [ 2136.152646][T19495] dump_stack_lvl+0x189/0x250 [ 2136.152675][T19495] ? __pfx____ratelimit+0x10/0x10 [ 2136.152698][T19495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2136.152723][T19495] ? __pfx__printk+0x10/0x10 [ 2136.152752][T19495] ? __might_fault+0xb0/0x130 [ 2136.152793][T19495] should_fail_ex+0x414/0x560 [ 2136.152826][T19495] _copy_from_user+0x2d/0xb0 [ 2136.152852][T19495] __sys_sendto+0x25c/0x520 [ 2136.152878][T19495] ? __pfx___sys_sendto+0x10/0x10 [ 2136.152896][T19495] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2136.152933][T19495] ? __fget_files+0x3a0/0x420 [ 2136.152983][T19495] ? ksys_write+0x22a/0x250 [ 2136.153014][T19495] ? __pfx_ksys_write+0x10/0x10 [ 2136.153040][T19495] ? rcu_is_watching+0x15/0xb0 [ 2136.153068][T19495] __x64_sys_sendto+0xde/0x100 [ 2136.153095][T19495] do_syscall_64+0xfa/0x3b0 [ 2136.153118][T19495] ? lockdep_hardirqs_on+0x9c/0x150 [ 2136.153140][T19495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2136.153161][T19495] ? clear_bhb_loop+0x60/0xb0 [ 2136.153187][T19495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2136.153207][T19495] RIP: 0033:0x7f109538ebe9 [ 2136.153226][T19495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2136.153245][T19495] RSP: 002b:00007f10935f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2136.153268][T19495] RAX: ffffffffffffffda RBX: 00007f10955c5fa0 RCX: 00007f109538ebe9 [ 2136.153284][T19495] RDX: 000000000000003a RSI: 0000200000000080 RDI: 0000000000000003 [ 2136.153298][T19495] RBP: 00007f10935f6090 R08: 0000200000000440 R09: 0000000000000014 [ 2136.153313][T19495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2136.153326][T19495] R13: 00007f10955c6038 R14: 00007f10955c5fa0 R15: 00007ffca0537e88 [ 2136.153361][T19495] [ 2136.560034][T19514] netlink: 'syz.3.12927': attribute type 5 has an invalid length. [ 2136.632439][T19520] __nla_validate_parse: 10 callbacks suppressed [ 2136.632460][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12928'. [ 2136.728426][T19522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12929'. [ 2136.993836][T19531] netlink: 'syz.3.12932': attribute type 2 has an invalid length. [ 2137.021292][T19531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2137.043617][T17650] lo speed is unknown, defaulting to 1000 [ 2137.055070][T17650] syz0: Port: 1 Link ACTIVE [ 2137.064826][T19533] delete_channel: no stack [ 2137.069303][T17908] lo speed is unknown, defaulting to 1000 [ 2137.423281][T19548] bridge14: entered allmulticast mode [ 2137.461172][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12939'. [ 2137.821839][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12943'. [ 2137.841435][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12943'. [ 2137.851855][T19561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12942'. [ 2138.206279][T19573] netlink: 'syz.3.12946': attribute type 2 has an invalid length. [ 2138.235420][T19573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2138.412730][T19585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12951'. [ 2138.453683][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12951'. [ 2138.501005][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12952'. [ 2138.642919][T19600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12955'. [ 2138.952421][T19609] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2139.241262][T19589] lo speed is unknown, defaulting to 1000 [ 2139.261959][T19589] lo speed is unknown, defaulting to 1000 [ 2139.304686][T19589] lo speed is unknown, defaulting to 1000 [ 2139.349188][T19620] FAULT_INJECTION: forcing a failure. [ 2139.349188][T19620] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.363390][T19619] FAULT_INJECTION: forcing a failure. [ 2139.363390][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.398658][T19620] CPU: 0 UID: 0 PID: 19620 Comm: syz.0.12962 Not tainted syzkaller #0 PREEMPT(full) [ 2139.398688][T19620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2139.398701][T19620] Call Trace: [ 2139.398710][T19620] [ 2139.398720][T19620] dump_stack_lvl+0x189/0x250 [ 2139.398749][T19620] ? __pfx____ratelimit+0x10/0x10 [ 2139.398772][T19620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2139.398797][T19620] ? __pfx__printk+0x10/0x10 [ 2139.398833][T19620] ? __pfx___might_resched+0x10/0x10 [ 2139.398875][T19620] should_fail_ex+0x414/0x560 [ 2139.398927][T19620] should_failslab+0xa8/0x100 [ 2139.398962][T19620] __kmalloc_noprof+0xcb/0x4f0 [ 2139.398990][T19620] ? __kasan_kmalloc+0x93/0xb0 [ 2139.399016][T19620] ? nla_strdup+0x9d/0x140 [ 2139.399041][T19620] nla_strdup+0x9d/0x140 [ 2139.399064][T19620] nf_tables_newtable+0x491/0x1890 [ 2139.399090][T19620] ? nfnetlink_subsys_unregister+0x192/0x1b0 [ 2139.399145][T19620] nfnetlink_rcv+0x1132/0x2520 [ 2139.399215][T19620] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2139.399265][T19620] ? ref_tracker_free+0x63a/0x7d0 [ 2139.399329][T19620] ? __netlink_deliver_tap+0x807/0x850 [ 2139.399352][T19620] ? netlink_deliver_tap+0x2e/0x1b0 [ 2139.399395][T19620] netlink_unicast+0x82f/0x9e0 [ 2139.399437][T19620] ? __pfx_netlink_unicast+0x10/0x10 [ 2139.399471][T19620] ? netlink_sendmsg+0x642/0xb30 [ 2139.399491][T19620] ? skb_put+0x11b/0x210 [ 2139.399519][T19620] netlink_sendmsg+0x805/0xb30 [ 2139.399553][T19620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2139.399580][T19620] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2139.399602][T19620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2139.399625][T19620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2139.399649][T19620] __sock_sendmsg+0x21c/0x270 [ 2139.399685][T19620] ____sys_sendmsg+0x505/0x830 [ 2139.399718][T19620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2139.399754][T19620] ? import_iovec+0x74/0xa0 [ 2139.399783][T19620] ___sys_sendmsg+0x21f/0x2a0 [ 2139.399812][T19620] ? __pfx____sys_sendmsg+0x10/0x10 [ 2139.399888][T19620] ? __fget_files+0x2a/0x420 [ 2139.399907][T19620] ? __fget_files+0x3a0/0x420 [ 2139.399938][T19620] __x64_sys_sendmsg+0x19b/0x260 [ 2139.399967][T19620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2139.400005][T19620] ? __pfx_ksys_write+0x10/0x10 [ 2139.400031][T19620] ? rcu_is_watching+0x15/0xb0 [ 2139.400059][T19620] ? do_syscall_64+0xbe/0x3b0 [ 2139.400089][T19620] do_syscall_64+0xfa/0x3b0 [ 2139.400124][T19620] ? lockdep_hardirqs_on+0x9c/0x150 [ 2139.400145][T19620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.400166][T19620] ? clear_bhb_loop+0x60/0xb0 [ 2139.400191][T19620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.400211][T19620] RIP: 0033:0x7f109538ebe9 [ 2139.400230][T19620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2139.400259][T19620] RSP: 002b:00007f10935f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2139.400279][T19620] RAX: ffffffffffffffda RBX: 00007f10955c5fa0 RCX: 00007f109538ebe9 [ 2139.400293][T19620] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2139.400305][T19620] RBP: 00007f10935f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.400317][T19620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.400329][T19620] R13: 00007f10955c6038 R14: 00007f10955c5fa0 R15: 00007ffca0537e88 [ 2139.400361][T19620] [ 2139.460419][T19619] CPU: 1 UID: 0 PID: 19619 Comm: syz.2.12960 Not tainted syzkaller #0 PREEMPT(full) [ 2139.460450][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2139.460465][T19619] Call Trace: [ 2139.460474][T19619] [ 2139.460485][T19619] dump_stack_lvl+0x189/0x250 [ 2139.460519][T19619] ? __pfx____ratelimit+0x10/0x10 [ 2139.460544][T19619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2139.460570][T19619] ? __pfx__printk+0x10/0x10 [ 2139.460609][T19619] ? __pfx___might_resched+0x10/0x10 [ 2139.460635][T19619] should_fail_ex+0x414/0x560 [ 2139.460672][T19619] should_failslab+0xa8/0x100 [ 2139.460707][T19619] __kmalloc_cache_noprof+0x70/0x3d0 [ 2139.460736][T19619] ? nsim_nexthop_event_nb+0x9e/0x13f0 [ 2139.460767][T19619] nsim_nexthop_event_nb+0x9e/0x13f0 [ 2139.460796][T19619] ? blocking_notifier_call_chain+0x54/0x90 [ 2139.460832][T19619] notifier_call_chain+0x1b3/0x3e0 [ 2139.460865][T19619] blocking_notifier_call_chain+0x6a/0x90 [ 2139.460892][T19619] call_nexthop_notifiers+0x17f/0x240 [ 2139.460925][T19619] ? __pfx_call_nexthop_notifiers+0x10/0x10 [ 2139.460971][T19619] rtm_new_nexthop+0x6086/0x7eb0 [ 2139.461022][T19619] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 2139.461055][T19619] ? is_bpf_text_address+0x26/0x2b0 [ 2139.461117][T19619] ? __lock_acquire+0xab9/0xd20 [ 2139.461173][T19619] ? is_bpf_text_address+0x26/0x2b0 [ 2139.461226][T19619] ? __lock_acquire+0xab9/0xd20 [ 2139.461290][T19619] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 2139.461317][T19619] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2139.461340][T19619] ? __lock_acquire+0xab9/0xd20 [ 2139.461373][T19619] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2139.461395][T19619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2139.461438][T19619] netlink_rcv_skb+0x205/0x470 [ 2139.461459][T19619] ? __lock_acquire+0xab9/0xd20 [ 2139.461491][T19619] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2139.461515][T19619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2139.461552][T19619] ? netlink_deliver_tap+0x2e/0x1b0 [ 2139.461586][T19619] netlink_unicast+0x82f/0x9e0 [ 2139.461629][T19619] ? __pfx_netlink_unicast+0x10/0x10 [ 2139.461665][T19619] ? netlink_sendmsg+0x642/0xb30 [ 2139.461689][T19619] ? skb_put+0x11b/0x210 [ 2139.461716][T19619] netlink_sendmsg+0x805/0xb30 [ 2139.461752][T19619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2139.461781][T19619] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2139.461822][T19619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2139.461861][T19619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2139.461887][T19619] __sock_sendmsg+0x21c/0x270 [ 2139.461923][T19619] ____sys_sendmsg+0x505/0x830 [ 2139.461957][T19619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2139.461994][T19619] ? import_iovec+0x74/0xa0 [ 2139.462026][T19619] ___sys_sendmsg+0x21f/0x2a0 [ 2139.462061][T19619] ? __pfx____sys_sendmsg+0x10/0x10 [ 2139.462133][T19619] ? __fget_files+0x2a/0x420 [ 2139.462152][T19619] ? __fget_files+0x3a0/0x420 [ 2139.462183][T19619] __x64_sys_sendmsg+0x19b/0x260 [ 2139.462214][T19619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2139.462253][T19619] ? __pfx_ksys_write+0x10/0x10 [ 2139.462279][T19619] ? rcu_is_watching+0x15/0xb0 [ 2139.462308][T19619] ? do_syscall_64+0xbe/0x3b0 [ 2139.462337][T19619] do_syscall_64+0xfa/0x3b0 [ 2139.462359][T19619] ? lockdep_hardirqs_on+0x9c/0x150 [ 2139.462382][T19619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.462404][T19619] ? clear_bhb_loop+0x60/0xb0 [ 2139.462431][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2139.462453][T19619] RIP: 0033:0x7f157018ebe9 [ 2139.462472][T19619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2139.462490][T19619] RSP: 002b:00007f1570fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2139.462514][T19619] RAX: ffffffffffffffda RBX: 00007f15703c5fa0 RCX: 00007f157018ebe9 [ 2139.462530][T19619] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 2139.462544][T19619] RBP: 00007f1570fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 2139.462559][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.462569][T19619] R13: 00007f15703c6038 R14: 00007f15703c5fa0 R15: 00007ffce11074b8 [ 2139.462607][T19619] [ 2140.402582][T19629] netlink: 'syz.2.12964': attribute type 2 has an invalid length. [ 2140.594109][T19632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2140.631651][T19632] 8021q: adding VLAN 0 to HW filter on device team0 [ 2140.640123][T19632] batman_adv: batadv0: Interface activated: dummy0 [ 2140.646691][T19632] batadv0: mtu less than device minimum [ 2140.654346][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.666389][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.678295][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.690325][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.702254][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.714194][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.726263][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.738340][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.750364][T19632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2140.797921][T17910] lo speed is unknown, defaulting to 1000 [ 2140.857506][T17910] syz1: Port: 1 Link ACTIVE [ 2142.532296][T19701] __nla_validate_parse: 4 callbacks suppressed [ 2142.532317][T19701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12985'. [ 2142.559568][T19701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12985'. [ 2142.571908][T19700] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12989'. [ 2142.646955][T19703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12988'. [ 2142.706052][T19705] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12987'. [ 2142.862387][T19711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12990'. [ 2143.031198][T19713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12993'. [ 2143.045652][T19713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12993'. [ 2143.086635][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12993'. [ 2143.108833][T19725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12996'. [ 2143.120043][T19718] lo speed is unknown, defaulting to 1000 [ 2143.131492][T19718] lo speed is unknown, defaulting to 1000 [ 2143.178099][T19718] lo speed is unknown, defaulting to 1000 [ 2143.330027][T19733] netlink: 'syz.1.13000': attribute type 8 has an invalid length. [ 2144.106229][T19742] bridge13: left allmulticast mode [ 2144.133190][T19742] bridge14: left allmulticast mode [ 2144.171597][T29995] lo speed is unknown, defaulting to 1000 [ 2144.197730][T29995] syz2: Port: 1 Link DOWN [ 2144.487457][T19773] netlink: 'syz.4.13013': attribute type 8 has an invalid length. [ 2145.083041][T19786] tipc: Resetting bearer [ 2145.115719][T19786] batadv0: left allmulticast mode [ 2145.128609][T19786] macsec0: left promiscuous mode [ 2145.134120][T19786] macsec0: left allmulticast mode [ 2145.402537][T19810] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2145.764741][T19816] netlink: 'syz.1.13020': attribute type 2 has an invalid length. [ 2145.852647][T19816] net_ratelimit: 11 callbacks suppressed [ 2145.852672][T19816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2145.922471][T17910] lo speed is unknown, defaulting to 1000 [ 2145.935976][T17910] syz2: Port: 1 Link ACTIVE [ 2146.693089][T19842] bridge19: entered allmulticast mode [ 2147.072153][T19858] team0: Device is already in use. [ 2147.105212][T19858] tipc: Enabled bearer , priority 0 [ 2147.118413][T19858] syzkaller0: entered promiscuous mode [ 2147.127075][T19858] syzkaller0: entered allmulticast mode [ 2147.197015][T19858] tipc: Resetting bearer [ 2147.263454][T19857] tipc: Resetting bearer [ 2147.338284][T19857] tipc: Disabling bearer [ 2147.567556][T19873] lo speed is unknown, defaulting to 1000 [ 2147.584839][T19873] lo speed is unknown, defaulting to 1000 [ 2147.599696][T19873] lo speed is unknown, defaulting to 1000 [ 2148.201211][T19897] __nla_validate_parse: 15 callbacks suppressed [ 2148.201232][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13045'. [ 2148.431050][T19903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13048'. [ 2148.446430][T19903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2148.453811][T19903] IPv6: NLM_F_CREATE should be set when creating new route [ 2148.461216][T19903] IPv6: NLM_F_CREATE should be set when creating new route [ 2148.569507][T19880] lo speed is unknown, defaulting to 1000 [ 2148.586825][T19880] lo speed is unknown, defaulting to 1000 [ 2148.625075][T19880] lo speed is unknown, defaulting to 1000 [ 2148.958720][T19917] bridge0: entered allmulticast mode [ 2149.275432][T19933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13057'. [ 2149.664026][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13058'. [ 2149.673659][T19943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2149.680965][T19943] IPv6: NLM_F_CREATE should be set when creating new route [ 2149.688279][T19943] IPv6: NLM_F_CREATE should be set when creating new route [ 2149.766291][T19943] FAULT_INJECTION: forcing a failure. [ 2149.766291][T19943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2149.789984][T19943] CPU: 0 UID: 0 PID: 19943 Comm: syz.3.13058 Not tainted syzkaller #0 PREEMPT(full) [ 2149.790027][T19943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2149.790050][T19943] Call Trace: [ 2149.790059][T19943] [ 2149.790069][T19943] dump_stack_lvl+0x189/0x250 [ 2149.790100][T19943] ? __pfx____ratelimit+0x10/0x10 [ 2149.790134][T19943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.790161][T19943] ? __pfx__printk+0x10/0x10 [ 2149.790205][T19943] should_fail_ex+0x414/0x560 [ 2149.790240][T19943] _copy_to_user+0x31/0xb0 [ 2149.790268][T19943] simple_read_from_buffer+0xe1/0x170 [ 2149.790304][T19943] proc_fail_nth_read+0x1b3/0x220 [ 2149.790333][T19943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2149.790361][T19943] ? rw_verify_area+0x2a6/0x4d0 [ 2149.790385][T19943] ? __lock_acquire+0xab9/0xd20 [ 2149.790414][T19943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2149.790440][T19943] vfs_read+0x200/0xa30 [ 2149.790466][T19943] ? fdget_pos+0x247/0x320 [ 2149.790491][T19943] ? __pfx___mutex_lock+0x10/0x10 [ 2149.790515][T19943] ? __pfx_vfs_read+0x10/0x10 [ 2149.790545][T19943] ? __fget_files+0x2a/0x420 [ 2149.790568][T19943] ? __fget_files+0x3a0/0x420 [ 2149.790589][T19943] ? __fget_files+0x2a/0x420 [ 2149.790618][T19943] ksys_read+0x145/0x250 [ 2149.790649][T19943] ? __pfx_ksys_read+0x10/0x10 [ 2149.790674][T19943] ? rcu_is_watching+0x15/0xb0 [ 2149.790703][T19943] ? do_syscall_64+0xbe/0x3b0 [ 2149.790731][T19943] do_syscall_64+0xfa/0x3b0 [ 2149.790754][T19943] ? lockdep_hardirqs_on+0x9c/0x150 [ 2149.790775][T19943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.790797][T19943] ? clear_bhb_loop+0x60/0xb0 [ 2149.790823][T19943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.790843][T19943] RIP: 0033:0x7f75e178d5fc [ 2149.790863][T19943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2149.790881][T19943] RSP: 002b:00007f75e2548030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2149.790904][T19943] RAX: ffffffffffffffda RBX: 00007f75e19c6090 RCX: 00007f75e178d5fc [ 2149.790919][T19943] RDX: 000000000000000f RSI: 00007f75e25480a0 RDI: 0000000000000008 [ 2149.790933][T19943] RBP: 00007f75e2548090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.790946][T19943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.790958][T19943] R13: 00007f75e19c6128 R14: 00007f75e19c6090 R15: 00007ffdc26485c8 [ 2149.790993][T19943] [ 2150.220770][T19949] netlink: 'syz.1.13059': attribute type 8 has an invalid length. [ 2150.407881][T17910] lo speed is unknown, defaulting to 1000 [ 2150.428143][T17910] syz2: Port: 1 Link DOWN [ 2150.766696][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13064'. [ 2150.976564][T19975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13068'. [ 2151.454531][T19991] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13074'. [ 2151.955979][T20006] lo speed is unknown, defaulting to 1000 [ 2151.968312][T20006] lo speed is unknown, defaulting to 1000 [ 2151.980679][T20006] lo speed is unknown, defaulting to 1000 [ 2152.428200][T20019] netlink: 'syz.0.13078': attribute type 2 has an invalid length. [ 2152.495189][T20022] A link change request failed with some changes committed already. Interface »»»»»»×[SRëåW may have been left with an inconsistent configuration, please check. [ 2152.529959][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13080'. [ 2152.540016][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13080'. [ 2152.814087][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13082'. [ 2152.957045][T20039] netlink: 'syz.4.13086': attribute type 39 has an invalid length. [ 2153.549789][T20063] lo speed is unknown, defaulting to 1000 [ 2153.557824][T20063] lo speed is unknown, defaulting to 1000 [ 2153.578685][T20063] lo speed is unknown, defaulting to 1000 [ 2153.581923][T20065] lo speed is unknown, defaulting to 1000 [ 2153.646294][T20065] lo speed is unknown, defaulting to 1000 [ 2153.733015][T20070] bridge12: entered allmulticast mode [ 2154.160553][T20084] __nla_validate_parse: 3 callbacks suppressed [ 2154.160574][T20084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13095'. [ 2154.304846][T20065] lo speed is unknown, defaulting to 1000 [ 2154.372009][T20094] FAULT_INJECTION: forcing a failure. [ 2154.372009][T20094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2154.414112][T20095] netlink: 'syz.0.13097': attribute type 7 has an invalid length. [ 2154.448056][T20094] CPU: 1 UID: 0 PID: 20094 Comm: syz.3.13098 Not tainted syzkaller #0 PREEMPT(full) [ 2154.448087][T20094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2154.448101][T20094] Call Trace: [ 2154.448110][T20094] [ 2154.448120][T20094] dump_stack_lvl+0x189/0x250 [ 2154.448151][T20094] ? __pfx____ratelimit+0x10/0x10 [ 2154.448175][T20094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2154.448201][T20094] ? __pfx__printk+0x10/0x10 [ 2154.448246][T20094] should_fail_ex+0x414/0x560 [ 2154.448281][T20094] _copy_to_user+0x31/0xb0 [ 2154.448310][T20094] simple_read_from_buffer+0xe1/0x170 [ 2154.448347][T20094] proc_fail_nth_read+0x1b3/0x220 [ 2154.448376][T20094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2154.448412][T20094] ? rw_verify_area+0x2a6/0x4d0 [ 2154.448438][T20094] ? __lock_acquire+0xab9/0xd20 [ 2154.448468][T20094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2154.448495][T20094] vfs_read+0x200/0xa30 [ 2154.448521][T20094] ? fdget_pos+0x247/0x320 [ 2154.448546][T20094] ? __pfx___mutex_lock+0x10/0x10 [ 2154.448571][T20094] ? __pfx_vfs_read+0x10/0x10 [ 2154.448600][T20094] ? __fget_files+0x2a/0x420 [ 2154.448625][T20094] ? __fget_files+0x3a0/0x420 [ 2154.448642][T20094] ? __fget_files+0x2a/0x420 [ 2154.448672][T20094] ksys_read+0x145/0x250 [ 2154.448703][T20094] ? __pfx_ksys_read+0x10/0x10 [ 2154.448728][T20094] ? rcu_is_watching+0x15/0xb0 [ 2154.448756][T20094] ? do_syscall_64+0xbe/0x3b0 [ 2154.448784][T20094] do_syscall_64+0xfa/0x3b0 [ 2154.448806][T20094] ? lockdep_hardirqs_on+0x9c/0x150 [ 2154.448828][T20094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.448849][T20094] ? clear_bhb_loop+0x60/0xb0 [ 2154.448876][T20094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.448896][T20094] RIP: 0033:0x7f75e178d5fc [ 2154.448915][T20094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2154.448933][T20094] RSP: 002b:00007f75e2569030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2154.448956][T20094] RAX: ffffffffffffffda RBX: 00007f75e19c5fa0 RCX: 00007f75e178d5fc [ 2154.448972][T20094] RDX: 000000000000000f RSI: 00007f75e25690a0 RDI: 0000000000000007 [ 2154.448985][T20094] RBP: 00007f75e2569090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.448998][T20094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2154.449011][T20094] R13: 00007f75e19c6038 R14: 00007f75e19c5fa0 R15: 00007ffdc26485c8 [ 2154.449046][T20094] [ 2154.896082][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13101'. [ 2154.963811][T20106] FAULT_INJECTION: forcing a failure. [ 2154.963811][T20106] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.978183][T20106] CPU: 1 UID: 0 PID: 20106 Comm: syz.3.13103 Not tainted syzkaller #0 PREEMPT(full) [ 2154.978213][T20106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2154.978226][T20106] Call Trace: [ 2154.978235][T20106] [ 2154.978244][T20106] dump_stack_lvl+0x189/0x250 [ 2154.978275][T20106] ? __pfx____ratelimit+0x10/0x10 [ 2154.978298][T20106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2154.978323][T20106] ? __pfx__printk+0x10/0x10 [ 2154.978357][T20106] ? __pfx___might_resched+0x10/0x10 [ 2154.978376][T20106] ? fs_reclaim_acquire+0x7d/0x100 [ 2154.978411][T20106] should_fail_ex+0x414/0x560 [ 2154.978446][T20106] should_failslab+0xa8/0x100 [ 2154.978478][T20106] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2154.978505][T20106] ? alloc_empty_file+0x55/0x1d0 [ 2154.978532][T20106] alloc_empty_file+0x55/0x1d0 [ 2154.978556][T20106] alloc_file_pseudo+0x13d/0x210 [ 2154.978583][T20106] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2154.978622][T20106] anon_inode_getfd+0xca/0x1b0 [ 2154.978648][T20106] btf_new_fd+0x9a5/0xc90 [ 2154.978671][T20106] ? apparmor_capable+0x137/0x1b0 [ 2154.978708][T20106] ? __pfx_btf_new_fd+0x10/0x10 [ 2154.978733][T20106] ? bpf_token_put+0x143/0x160 [ 2154.978762][T20106] ? bpf_btf_load+0x126/0x190 [ 2154.978796][T20106] __sys_bpf+0x406/0x870 [ 2154.978827][T20106] ? __pfx___sys_bpf+0x10/0x10 [ 2154.978875][T20106] ? ksys_write+0x22a/0x250 [ 2154.978906][T20106] ? __pfx_ksys_write+0x10/0x10 [ 2154.978943][T20106] __x64_sys_bpf+0x7c/0x90 [ 2154.978969][T20106] do_syscall_64+0xfa/0x3b0 [ 2154.978993][T20106] ? lockdep_hardirqs_on+0x9c/0x150 [ 2154.979014][T20106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.979035][T20106] ? clear_bhb_loop+0x60/0xb0 [ 2154.979061][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.979082][T20106] RIP: 0033:0x7f75e178ebe9 [ 2154.979101][T20106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2154.979120][T20106] RSP: 002b:00007f75e2569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2154.979143][T20106] RAX: ffffffffffffffda RBX: 00007f75e19c5fa0 RCX: 00007f75e178ebe9 [ 2154.979159][T20106] RDX: 0000000000000028 RSI: 0000200000000b00 RDI: 0000000000000012 [ 2154.979178][T20106] RBP: 00007f75e2569090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.979190][T20106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.979202][T20106] R13: 00007f75e19c6038 R14: 00007f75e19c5fa0 R15: 00007ffdc26485c8 [ 2154.979237][T20106] [ 2155.273639][T20104] bridge0: entered allmulticast mode [ 2155.426425][T20111] netlink: 27 bytes leftover after parsing attributes in process `syz.3.13105'. [ 2155.520682][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13106'. [ 2155.930864][T20121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13108'. [ 2156.260979][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13113'. [ 2156.286904][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13113'. [ 2156.402909][T20138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13114'. [ 2156.417501][T20138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13114'. [ 2156.957441][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13120'. [ 2157.345343][T20151] bridge0: left allmulticast mode [ 2158.241768][T20214] lo speed is unknown, defaulting to 1000 [ 2158.327892][T20214] lo speed is unknown, defaulting to 1000 [ 2158.390899][T20214] lo speed is unknown, defaulting to 1000 [ 2158.831500][T20220] lo speed is unknown, defaulting to 1000 [ 2159.189941][T20220] lo speed is unknown, defaulting to 1000 [ 2159.211056][T20249] __nla_validate_parse: 6 callbacks suppressed [ 2159.211077][T20249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13139'. [ 2159.243539][T20249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2159.307320][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13139'. [ 2159.636040][T20220] lo speed is unknown, defaulting to 1000 [ 2159.781494][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13146'. [ 2159.809683][T20276] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13148'. [ 2160.049067][T20283] bridge0: entered allmulticast mode [ 2160.424849][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.446671][T20296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13155'. [ 2160.456191][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.551710][T20294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13155'. [ 2160.945720][T20305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13159'. [ 2160.980253][T20305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13159'. [ 2161.069723][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13160'. [ 2161.107391][T20311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13162'. [ 2161.129094][T20309] nbd: device at index 64 is going down [ 2161.198035][T20311] netlink: 'syz.2.13162': attribute type 4 has an invalid length. [ 2162.027123][T20318] lo speed is unknown, defaulting to 1000 [ 2162.096411][T20318] lo speed is unknown, defaulting to 1000 [ 2162.096459][T20344] lo speed is unknown, defaulting to 1000 [ 2162.119809][T20344] lo speed is unknown, defaulting to 1000 [ 2162.126256][T20318] lo speed is unknown, defaulting to 1000 [ 2162.518892][T20357] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 2162.815863][T20361] bridge19: entered allmulticast mode [ 2162.834292][T20344] lo speed is unknown, defaulting to 1000 [ 2163.430812][T20377] netlink: 'syz.3.13178': attribute type 2 has an invalid length. [ 2163.446291][T20377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2164.498464][T20403] __nla_validate_parse: 3 callbacks suppressed [ 2164.498486][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13186'. [ 2164.542217][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13186'. [ 2164.648649][T20409] bridge20: entered allmulticast mode [ 2164.694681][T20416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13193'. [ 2165.088346][T20430] netlink: 27 bytes leftover after parsing attributes in process `syz.3.13196'. [ 2165.145616][T31520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2165.166107][T31520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2165.199967][T20436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13197'. [ 2165.236817][T20433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13197'. [ 2165.387066][T20443] lo speed is unknown, defaulting to 1000 [ 2165.397189][T20443] lo speed is unknown, defaulting to 1000 [ 2165.416522][T20443] lo speed is unknown, defaulting to 1000 [ 2165.696353][T20455] bridge21: entered allmulticast mode [ 2165.804765][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13204'. [ 2166.466156][T20478] tipc: Enabling of bearer rejected, already enabled [ 2166.495609][T20478] syzkaller0: entered promiscuous mode [ 2166.510927][T20478] syzkaller0: entered allmulticast mode [ 2166.535596][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13208'. [ 2166.580874][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13208'. [ 2166.651661][T20478] FAULT_INJECTION: forcing a failure. [ 2166.651661][T20478] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.677990][T20478] CPU: 1 UID: 0 PID: 20478 Comm: syz.1.13207 Not tainted syzkaller #0 PREEMPT(full) [ 2166.678019][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2166.678030][T20478] Call Trace: [ 2166.678039][T20478] [ 2166.678047][T20478] dump_stack_lvl+0x189/0x250 [ 2166.678076][T20478] ? __pfx____ratelimit+0x10/0x10 [ 2166.678098][T20478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2166.678123][T20478] ? __pfx__printk+0x10/0x10 [ 2166.678157][T20478] ? __pfx___might_resched+0x10/0x10 [ 2166.678175][T20478] ? fs_reclaim_acquire+0x7d/0x100 [ 2166.678199][T20478] should_fail_ex+0x414/0x560 [ 2166.678231][T20478] should_failslab+0xa8/0x100 [ 2166.678262][T20478] __kmalloc_noprof+0xcb/0x4f0 [ 2166.678296][T20478] ? kfree+0x4d/0x440 [ 2166.678317][T20478] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2166.678345][T20478] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2166.678368][T20478] ? tomoyo_domain+0xd9/0x130 [ 2166.678393][T20478] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2166.678419][T20478] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2166.678451][T20478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2166.678499][T20478] ? __lock_acquire+0xab9/0xd20 [ 2166.678552][T20478] ? __fget_files+0x2a/0x420 [ 2166.678574][T20478] ? __fget_files+0x2a/0x420 [ 2166.678590][T20478] ? __fget_files+0x3a0/0x420 [ 2166.678607][T20478] ? __fget_files+0x2a/0x420 [ 2166.678629][T20478] security_file_ioctl+0xcb/0x2d0 [ 2166.678658][T20478] __se_sys_ioctl+0x47/0x170 [ 2166.678685][T20478] do_syscall_64+0xfa/0x3b0 [ 2166.678708][T20478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2166.678726][T20478] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2166.678743][T20478] ? clear_bhb_loop+0x60/0xb0 [ 2166.678770][T20478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2166.678788][T20478] RIP: 0033:0x7f4a2f18ebe9 [ 2166.678805][T20478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2166.678823][T20478] RSP: 002b:00007f4a2ff58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2166.678845][T20478] RAX: ffffffffffffffda RBX: 00007f4a2f3c5fa0 RCX: 00007f4a2f18ebe9 [ 2166.678861][T20478] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 2166.678874][T20478] RBP: 00007f4a2ff58090 R08: 0000000000000000 R09: 0000000000000000 [ 2166.678887][T20478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.678899][T20478] R13: 00007f4a2f3c6038 R14: 00007f4a2f3c5fa0 R15: 00007ffdc129f578 [ 2166.678952][T20478] [ 2166.689718][T20478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2167.119726][T20497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13211'. [ 2169.550150][T20571] __nla_validate_parse: 6 callbacks suppressed [ 2169.550170][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13235'. [ 2169.574706][T20571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13235'. [ 2169.608943][T20565] lo speed is unknown, defaulting to 1000 [ 2169.609039][T20573] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 2169.633971][T20575] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 2169.642807][T20564] lo speed is unknown, defaulting to 1000 [ 2169.658663][T20565] lo speed is unknown, defaulting to 1000 [ 2169.658729][T20575] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 2169.672428][T20573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13236'. [ 2169.673442][T20564] lo speed is unknown, defaulting to 1000 [ 2169.708975][T20565] lo speed is unknown, defaulting to 1000 [ 2169.831312][T20575] netlink: 'syz.1.13236': attribute type 13 has an invalid length. [ 2169.839662][T20575] netlink: 'syz.1.13236': attribute type 17 has an invalid length. [ 2169.876690][T20573] lo speed is unknown, defaulting to 1000 [ 2169.925356][T20573] lo speed is unknown, defaulting to 1000 [ 2170.020601][T20575] 8021q: adding VLAN 0 to HW filter on device à [ 2170.054646][T20583] FAULT_INJECTION: forcing a failure. [ 2170.054646][T20583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2170.076965][T20575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2170.103897][T20585] netlink: 'syz.0.13240': attribute type 1 has an invalid length. [ 2170.112079][T18314] lo speed is unknown, defaulting to 1000 [ 2170.129397][T18314] syz2: Port: 1 Link ACTIVE [ 2170.155737][T20583] CPU: 0 UID: 0 PID: 20583 Comm: syz.3.13239 Not tainted syzkaller #0 PREEMPT(full) [ 2170.155769][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2170.155782][T20583] Call Trace: [ 2170.155792][T20583] [ 2170.155802][T20583] dump_stack_lvl+0x189/0x250 [ 2170.155834][T20583] ? __pfx____ratelimit+0x10/0x10 [ 2170.155857][T20583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2170.155883][T20583] ? __pfx__printk+0x10/0x10 [ 2170.155914][T20583] ? __might_fault+0xb0/0x130 [ 2170.155965][T20583] should_fail_ex+0x414/0x560 [ 2170.156000][T20583] _copy_from_user+0x2d/0xb0 [ 2170.156027][T20583] ipv6_flowlabel_opt+0x11a/0x23a0 [ 2170.156060][T20583] ? __lock_acquire+0xab9/0xd20 [ 2170.156096][T20583] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 2170.156122][T20583] ? register_lock_class+0x51/0x320 [ 2170.156159][T20583] ? __lock_acquire+0xab9/0xd20 [ 2170.156202][T20583] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2170.156223][T20583] ? lockdep_hardirqs_on+0x9c/0x150 [ 2170.156247][T20583] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2170.156284][T20583] do_ipv6_setsockopt+0xdb0/0x2eb0 [ 2170.156318][T20583] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2170.156348][T20583] ? aa_label_sk_perm+0x4cd/0x630 [ 2170.156378][T20583] ? get_pid_task+0x20/0x1f0 [ 2170.156414][T20583] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2170.156460][T20583] ? vfs_write+0x956/0xb30 [ 2170.156495][T20583] ? __pfx___might_resched+0x10/0x10 [ 2170.156526][T20583] ? __lock_acquire+0xab9/0xd20 [ 2170.156568][T20583] ipv6_setsockopt+0x59/0x170 [ 2170.156593][T20583] rawv6_setsockopt+0x23b/0x5b0 [ 2170.156621][T20583] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 2170.156640][T20583] ? aa_sock_opt_perm+0xff/0x1b0 [ 2170.156664][T20583] ? sock_common_setsockopt+0x36/0xc0 [ 2170.156696][T20583] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2170.156732][T20583] do_sock_setsockopt+0x179/0x1b0 [ 2170.156763][T20583] __x64_sys_setsockopt+0x13f/0x1b0 [ 2170.156794][T20583] do_syscall_64+0xfa/0x3b0 [ 2170.156817][T20583] ? lockdep_hardirqs_on+0x9c/0x150 [ 2170.156839][T20583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.156860][T20583] ? clear_bhb_loop+0x60/0xb0 [ 2170.156886][T20583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.156908][T20583] RIP: 0033:0x7f75e178ebe9 [ 2170.156926][T20583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2170.156952][T20583] RSP: 002b:00007f75e2548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2170.156975][T20583] RAX: ffffffffffffffda RBX: 00007f75e19c6090 RCX: 00007f75e178ebe9 [ 2170.156991][T20583] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000008 [ 2170.157004][T20583] RBP: 00007f75e2548090 R08: 0000000000000022 R09: 0000000000000000 [ 2170.157018][T20583] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2170.157032][T20583] R13: 00007f75e19c6128 R14: 00007f75e19c6090 R15: 00007ffdc26485c8 [ 2170.157065][T20583] [ 2170.561233][T20564] lo speed is unknown, defaulting to 1000 [ 2170.890954][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13244'. [ 2170.900783][T20596] netlink: 'syz.3.13244': attribute type 30 has an invalid length. [ 2170.920334][T20596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13244'. [ 2170.929602][T20596] netlink: 'syz.3.13244': attribute type 30 has an invalid length. [ 2171.085439][T20573] lo speed is unknown, defaulting to 1000 [ 2171.276872][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13247'. [ 2171.288673][T20603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13247'. [ 2171.421969][T20608] bridge11: entered allmulticast mode [ 2171.449855][T20588] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2171.997514][T20616] bridge19: left allmulticast mode [ 2172.040079][T20616] bridge20: left allmulticast mode [ 2172.086123][T20616] bridge21: left allmulticast mode [ 2172.150704][T20618] veth0_to_bridge: entered promiscuous mode [ 2172.330229][T20618] netlink: 'syz.1.13252': attribute type 4 has an invalid length. [ 2172.338094][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13252'. [ 2172.400950][T20617] veth0_to_bridge: left promiscuous mode [ 2172.737574][T20637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13260'. [ 2172.739358][T20633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13258'. [ 2172.922752][T20642] netlink: 'syz.1.13263': attribute type 1 has an invalid length. [ 2172.971141][T20648] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2172.988517][T20642] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2173.017747][T20652] netlink: 'syz.4.13264': attribute type 8 has an invalid length. [ 2173.055642][T20649] bond5: (slave gretap2): making interface the new active one [ 2173.068765][T20649] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 2173.202545][T20654] bridge19: left allmulticast mode [ 2173.326760][T20659] bridge0: entered allmulticast mode [ 2174.154517][T20682] netlink: 'syz.4.13273': attribute type 11 has an invalid length. [ 2174.658500][T20696] bridge0: entered allmulticast mode [ 2174.784664][T20694] lo speed is unknown, defaulting to 1000 [ 2174.811934][T20709] __nla_validate_parse: 6 callbacks suppressed [ 2174.811956][T20709] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13284'. [ 2174.830349][T20694] lo speed is unknown, defaulting to 1000 [ 2174.838232][T20694] lo speed is unknown, defaulting to 1000 [ 2174.942009][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13286'. [ 2175.269416][T20723] netlink: 'syz.0.13288': attribute type 1 has an invalid length. [ 2175.294941][T20723] netlink: 'syz.0.13288': attribute type 1 has an invalid length. [ 2175.337809][T20719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13287'. [ 2175.591975][T20728] netlink: 'syz.0.13288': attribute type 1 has an invalid length. [ 2175.724940][T20728] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2175.817286][T20723] bond11: (slave wlan0): Enslaving as an active interface with a down link [ 2175.849070][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13289'. [ 2176.164013][T20749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13294'. [ 2176.175492][T20749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13294'. [ 2176.184997][T20749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13294'. [ 2176.194753][T20749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13294'. [ 2176.571514][T20759] netlink: 27 bytes leftover after parsing attributes in process `syz.1.13298'. [ 2176.657256][T20760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13299'. [ 2176.737869][T20769] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2178.174443][T20805] lo speed is unknown, defaulting to 1000 [ 2178.282851][T20805] lo speed is unknown, defaulting to 1000 [ 2178.392468][T20805] lo speed is unknown, defaulting to 1000 [ 2178.706469][T20836] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2178.841008][T20828] lo speed is unknown, defaulting to 1000 [ 2178.871538][T20840] netlink: 'syz.1.13322': attribute type 26 has an invalid length. [ 2178.909310][T20828] lo speed is unknown, defaulting to 1000 [ 2179.087699][T20828] lo speed is unknown, defaulting to 1000 [ 2179.367222][T20840] lo speed is unknown, defaulting to 1000 [ 2179.390981][T20840] lo speed is unknown, defaulting to 1000 [ 2179.502029][T20840] lo speed is unknown, defaulting to 1000 [ 2179.916706][T20857] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2179.924105][T20867] __nla_validate_parse: 8 callbacks suppressed [ 2179.924126][T20867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13329'. [ 2179.967314][T20867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13329'. [ 2180.492671][T20873] lo speed is unknown, defaulting to 1000 [ 2180.525927][T20883] FAULT_INJECTION: forcing a failure. [ 2180.525927][T20883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.563783][T20873] lo speed is unknown, defaulting to 1000 [ 2180.586162][T20883] CPU: 1 UID: 0 PID: 20883 Comm: syz.1.13333 Not tainted syzkaller #0 PREEMPT(full) [ 2180.586189][T20883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2180.586202][T20883] Call Trace: [ 2180.586210][T20883] [ 2180.586219][T20883] dump_stack_lvl+0x189/0x250 [ 2180.586246][T20883] ? __pfx____ratelimit+0x10/0x10 [ 2180.586266][T20883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2180.586287][T20883] ? __pfx__printk+0x10/0x10 [ 2180.586326][T20883] should_fail_ex+0x414/0x560 [ 2180.586357][T20883] _copy_to_user+0x31/0xb0 [ 2180.586383][T20883] simple_read_from_buffer+0xe1/0x170 [ 2180.586416][T20883] proc_fail_nth_read+0x1b3/0x220 [ 2180.586441][T20883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2180.586466][T20883] ? rw_verify_area+0x2a6/0x4d0 [ 2180.586489][T20883] ? __lock_acquire+0xab9/0xd20 [ 2180.586515][T20883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2180.586538][T20883] vfs_read+0x200/0xa30 [ 2180.586562][T20883] ? fdget_pos+0x247/0x320 [ 2180.586583][T20883] ? __pfx___mutex_lock+0x10/0x10 [ 2180.586605][T20883] ? __pfx_vfs_read+0x10/0x10 [ 2180.586632][T20883] ? __fget_files+0x2a/0x420 [ 2180.586654][T20883] ? __fget_files+0x3a0/0x420 [ 2180.586670][T20883] ? __fget_files+0x2a/0x420 [ 2180.586696][T20883] ksys_read+0x145/0x250 [ 2180.586723][T20883] ? __pfx_ksys_read+0x10/0x10 [ 2180.586742][T20883] ? rcu_is_watching+0x15/0xb0 [ 2180.586766][T20883] ? do_syscall_64+0xbe/0x3b0 [ 2180.586792][T20883] do_syscall_64+0xfa/0x3b0 [ 2180.586812][T20883] ? lockdep_hardirqs_on+0x9c/0x150 [ 2180.586831][T20883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.586868][T20883] ? clear_bhb_loop+0x60/0xb0 [ 2180.586893][T20883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2180.586912][T20883] RIP: 0033:0x7f4a2f18d5fc [ 2180.586931][T20883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2180.586950][T20883] RSP: 002b:00007f4a2ff37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2180.586980][T20883] RAX: ffffffffffffffda RBX: 00007f4a2f3c6090 RCX: 00007f4a2f18d5fc [ 2180.586996][T20883] RDX: 000000000000000f RSI: 00007f4a2ff370a0 RDI: 0000000000000004 [ 2180.587009][T20883] RBP: 00007f4a2ff37090 R08: 0000000000000000 R09: 0000000000000000 [ 2180.587021][T20883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2180.587034][T20883] R13: 00007f4a2f3c6128 R14: 00007f4a2f3c6090 R15: 00007ffdc129f578 [ 2180.587068][T20883] [ 2180.865448][T20873] lo speed is unknown, defaulting to 1000 [ 2181.570743][T20908] netlink: 'syz.0.13342': attribute type 1 has an invalid length. [ 2181.783294][T20908] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2181.805216][T20911] bond12: (slave gretap4): making interface the new active one [ 2181.814572][T20911] bond12: (slave gretap4): Enslaving as an active interface with an up link [ 2181.924401][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13343'. [ 2182.169111][T20923] bridge15: entered allmulticast mode [ 2182.394719][T20925] bridge12: entered allmulticast mode [ 2182.541257][T20922] lo speed is unknown, defaulting to 1000 [ 2182.549022][T20922] lo speed is unknown, defaulting to 1000 [ 2182.627093][T20931] lo speed is unknown, defaulting to 1000 [ 2182.635373][T20922] lo speed is unknown, defaulting to 1000 [ 2182.738453][T20931] lo speed is unknown, defaulting to 1000 [ 2182.880554][T20947] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13350'. [ 2183.408475][T20931] lo speed is unknown, defaulting to 1000 [ 2184.216981][T20977] netlink: 'syz.1.13360': attribute type 8 has an invalid length. [ 2184.815756][T20979] tipc: Resetting bearer [ 2184.824973][T20979] syzkaller0: left promiscuous mode [ 2184.835330][T20979] syzkaller0: left allmulticast mode [ 2184.866320][T20979] bridge0: left allmulticast mode [ 2184.881414][T20979] bridge15: left allmulticast mode [ 2184.888431][T20985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13362'. [ 2184.900884][T18314] lo speed is unknown, defaulting to 1000 [ 2184.906655][T18314] syz2: Port: 1 Link DOWN [ 2184.988584][T20059] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2185.292188][ T1141] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2185.310658][ T1141] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2185.328693][T20991] FAULT_INJECTION: forcing a failure. [ 2185.328693][T20991] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.331668][ T1141] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2185.354684][T20991] CPU: 1 UID: 0 PID: 20991 Comm: syz.0.13365 Not tainted syzkaller #0 PREEMPT(full) [ 2185.354712][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2185.354726][T20991] Call Trace: [ 2185.354734][T20991] [ 2185.354744][T20991] dump_stack_lvl+0x189/0x250 [ 2185.354773][T20991] ? __pfx____ratelimit+0x10/0x10 [ 2185.354796][T20991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2185.354820][T20991] ? __pfx__printk+0x10/0x10 [ 2185.354855][T20991] ? __pfx___might_resched+0x10/0x10 [ 2185.354880][T20991] should_fail_ex+0x414/0x560 [ 2185.354912][T20991] should_failslab+0xa8/0x100 [ 2185.354944][T20991] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2185.354972][T20991] ? __alloc_skb+0x112/0x2d0 [ 2185.354998][T20991] __alloc_skb+0x112/0x2d0 [ 2185.355024][T20991] netlink_sendmsg+0x5c6/0xb30 [ 2185.355057][T20991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2185.355083][T20991] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2185.355105][T20991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2185.355127][T20991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2185.355150][T20991] __sock_sendmsg+0x21c/0x270 [ 2185.355184][T20991] ____sys_sendmsg+0x52d/0x830 [ 2185.355215][T20991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2185.355250][T20991] ? import_iovec+0x74/0xa0 [ 2185.355279][T20991] ___sys_sendmsg+0x21f/0x2a0 [ 2185.355307][T20991] ? __pfx____sys_sendmsg+0x10/0x10 [ 2185.355373][T20991] ? __fget_files+0x2a/0x420 [ 2185.355390][T20991] ? __fget_files+0x3a0/0x420 [ 2185.355421][T20991] __sys_sendmmsg+0x227/0x430 [ 2185.355453][T20991] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2185.355475][T20991] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2185.355528][T20991] ? ksys_write+0x22a/0x250 [ 2185.355565][T20991] ? __pfx_ksys_write+0x10/0x10 [ 2185.355600][T20991] __x64_sys_sendmmsg+0xa0/0xc0 [ 2185.355627][T20991] do_syscall_64+0xfa/0x3b0 [ 2185.355649][T20991] ? lockdep_hardirqs_on+0x9c/0x150 [ 2185.355669][T20991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.355690][T20991] ? clear_bhb_loop+0x60/0xb0 [ 2185.355715][T20991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.355735][T20991] RIP: 0033:0x7f109538ebe9 [ 2185.355754][T20991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2185.355772][T20991] RSP: 002b:00007f10935f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2185.355795][T20991] RAX: ffffffffffffffda RBX: 00007f10955c5fa0 RCX: 00007f109538ebe9 [ 2185.355811][T20991] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2185.355826][T20991] RBP: 00007f10935f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.355839][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.355852][T20991] R13: 00007f10955c6038 R14: 00007f10955c5fa0 R15: 00007ffca0537e88 [ 2185.355886][T20991] [ 2185.881341][T21001] bridge16: entered allmulticast mode [ 2185.888382][T20993] lo speed is unknown, defaulting to 1000 [ 2185.917695][T20993] lo speed is unknown, defaulting to 1000 [ 2185.942080][T20993] lo speed is unknown, defaulting to 1000 [ 2186.181490][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13371'. [ 2186.207969][T21012] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13372'. [ 2186.208278][T21006] lo speed is unknown, defaulting to 1000 [ 2186.230882][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13371'. [ 2186.304936][T21006] lo speed is unknown, defaulting to 1000 [ 2186.594054][T21006] lo speed is unknown, defaulting to 1000 [ 2186.835868][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13376'. [ 2187.533735][T21048] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13382'. [ 2187.580896][T21050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13383'. [ 2187.834135][T21056] netlink: 8376 bytes leftover after parsing attributes in process `syz.1.13384'. [ 2188.034521][T21062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13387'. [ 2188.045171][T21058] netlink: 'syz.3.13385': attribute type 1 has an invalid length. [ 2188.075286][T21062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13387'. [ 2188.172096][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13385'. [ 2188.185981][T21061] bridge13: entered allmulticast mode [ 2188.217019][T21070] FAULT_INJECTION: forcing a failure. [ 2188.217019][T21070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2188.232805][T21070] CPU: 0 UID: 0 PID: 21070 Comm: syz.1.13389 Not tainted syzkaller #0 PREEMPT(full) [ 2188.232835][T21070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2188.232849][T21070] Call Trace: [ 2188.232858][T21070] [ 2188.232867][T21070] dump_stack_lvl+0x189/0x250 [ 2188.232898][T21070] ? __pfx____ratelimit+0x10/0x10 [ 2188.232920][T21070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2188.232946][T21070] ? __pfx__printk+0x10/0x10 [ 2188.232988][T21070] should_fail_ex+0x414/0x560 [ 2188.233022][T21070] _copy_to_user+0x31/0xb0 [ 2188.233050][T21070] simple_read_from_buffer+0xe1/0x170 [ 2188.233085][T21070] proc_fail_nth_read+0x1b3/0x220 [ 2188.233112][T21070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2188.233139][T21070] ? rw_verify_area+0x2a6/0x4d0 [ 2188.233163][T21070] ? __lock_acquire+0xab9/0xd20 [ 2188.233192][T21070] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2188.233218][T21070] vfs_read+0x200/0xa30 [ 2188.233243][T21070] ? fdget_pos+0x247/0x320 [ 2188.233267][T21070] ? __pfx___mutex_lock+0x10/0x10 [ 2188.233292][T21070] ? __pfx_vfs_read+0x10/0x10 [ 2188.233321][T21070] ? __fget_files+0x2a/0x420 [ 2188.233344][T21070] ? __fget_files+0x3a0/0x420 [ 2188.233361][T21070] ? __fget_files+0x2a/0x420 [ 2188.233389][T21070] ksys_read+0x145/0x250 [ 2188.233420][T21070] ? __pfx_ksys_read+0x10/0x10 [ 2188.233444][T21070] ? rcu_is_watching+0x15/0xb0 [ 2188.233471][T21070] ? do_syscall_64+0xbe/0x3b0 [ 2188.233499][T21070] do_syscall_64+0xfa/0x3b0 [ 2188.233527][T21070] ? lockdep_hardirqs_on+0x9c/0x150 [ 2188.233549][T21070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.233569][T21070] ? clear_bhb_loop+0x60/0xb0 [ 2188.233594][T21070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.233614][T21070] RIP: 0033:0x7f4a2f18d5fc [ 2188.233633][T21070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2188.233651][T21070] RSP: 002b:00007f4a2ff58030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2188.233673][T21070] RAX: ffffffffffffffda RBX: 00007f4a2f3c5fa0 RCX: 00007f4a2f18d5fc [ 2188.233688][T21070] RDX: 000000000000000f RSI: 00007f4a2ff580a0 RDI: 0000000000000008 [ 2188.233701][T21070] RBP: 00007f4a2ff58090 R08: 0000000000000000 R09: 0000000000000000 [ 2188.233714][T21070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.233727][T21070] R13: 00007f4a2f3c6038 R14: 00007f4a2f3c5fa0 R15: 00007ffdc129f578 [ 2188.233761][T21070] [ 2188.590835][T21058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2188.825938][T21083] netlink: 'syz.1.13392': attribute type 8 has an invalid length. [ 2188.904692][T21087] bridge16: left allmulticast mode [ 2189.087809][T21091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2189.247418][T21106] ÿ: renamed from bond_slave_0 [ 2189.485823][T21115] bridge0: entered allmulticast mode [ 2189.549896][T21113] lo speed is unknown, defaulting to 1000 [ 2189.557845][T21113] lo speed is unknown, defaulting to 1000 [ 2189.566115][T21113] lo speed is unknown, defaulting to 1000 [ 2190.730693][T21141] sctp: [Deprecated]: syz.4.13412 (pid 21141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2190.730693][T21141] Use struct sctp_sack_info instead [ 2190.826404][T21139] lo speed is unknown, defaulting to 1000 [ 2190.923179][T21139] lo speed is unknown, defaulting to 1000 [ 2190.935661][T21146] FAULT_INJECTION: forcing a failure. [ 2190.935661][T21146] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.950303][T21149] tipc: Enabling of bearer rejected, already enabled [ 2190.978593][T21146] CPU: 0 UID: 0 PID: 21146 Comm: syz.4.13415 Not tainted syzkaller #0 PREEMPT(full) [ 2190.978624][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2190.978639][T21146] Call Trace: [ 2190.978648][T21146] [ 2190.978658][T21146] dump_stack_lvl+0x189/0x250 [ 2190.978688][T21146] ? __pfx____ratelimit+0x10/0x10 [ 2190.978710][T21146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2190.978735][T21146] ? __pfx__printk+0x10/0x10 [ 2190.978769][T21146] ? __pfx___might_resched+0x10/0x10 [ 2190.978791][T21146] ? fs_reclaim_acquire+0x7d/0x100 [ 2190.978817][T21146] should_fail_ex+0x414/0x560 [ 2190.978850][T21146] should_failslab+0xa8/0x100 [ 2190.978883][T21146] __kmalloc_noprof+0xcb/0x4f0 [ 2190.978912][T21146] ? tomoyo_encode+0x28b/0x550 [ 2190.978939][T21146] tomoyo_encode+0x28b/0x550 [ 2190.978967][T21146] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2190.979003][T21146] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2190.979045][T21146] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2190.979079][T21146] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2190.979114][T21146] ? sb_end_write+0xe9/0x1c0 [ 2190.979137][T21146] ? vfs_write+0x956/0xb30 [ 2190.979208][T21146] ? ksys_write+0x1e1/0x250 [ 2190.979245][T21146] security_file_ioctl+0xcb/0x2d0 [ 2190.979277][T21146] __se_sys_ioctl+0x47/0x170 [ 2190.979306][T21146] do_syscall_64+0xfa/0x3b0 [ 2190.979329][T21146] ? lockdep_hardirqs_on+0x9c/0x150 [ 2190.979351][T21146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.979373][T21146] ? clear_bhb_loop+0x60/0xb0 [ 2190.979399][T21146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.979419][T21146] RIP: 0033:0x7f679c18ebe9 [ 2190.979438][T21146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.979456][T21146] RSP: 002b:00007f679d00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2190.979479][T21146] RAX: ffffffffffffffda RBX: 00007f679c3c5fa0 RCX: 00007f679c18ebe9 [ 2190.979494][T21146] RDX: 0000000000000000 RSI: 000000004010744d RDI: 0000000000000003 [ 2190.979506][T21146] RBP: 00007f679d00e090 R08: 0000000000000000 R09: 0000000000000000 [ 2190.979519][T21146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2190.979531][T21146] R13: 00007f679c3c6038 R14: 00007f679c3c5fa0 R15: 00007fff199ed1b8 [ 2190.979565][T21146] [ 2191.209914][T21139] lo speed is unknown, defaulting to 1000 [ 2191.269607][T21146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2191.542952][T21159] __nla_validate_parse: 8 callbacks suppressed [ 2191.542981][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13417'. [ 2191.962195][T21169] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.13420'. [ 2192.101935][T21171] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 2192.132076][T21171] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 2192.201282][T21171] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2192.371295][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13424'. [ 2192.577006][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13425'. [ 2192.601539][T21190] bridge20: entered allmulticast mode [ 2192.813347][T21197] netlink: 'syz.1.13427': attribute type 21 has an invalid length. [ 2192.822503][T21197] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13427'. [ 2192.908626][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13428'. [ 2193.113552][T21209] FAULT_INJECTION: forcing a failure. [ 2193.113552][T21209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2193.136468][T21209] CPU: 0 UID: 0 PID: 21209 Comm: syz.3.13431 Not tainted syzkaller #0 PREEMPT(full) [ 2193.136501][T21209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2193.136515][T21209] Call Trace: [ 2193.136524][T21209] [ 2193.136535][T21209] dump_stack_lvl+0x189/0x250 [ 2193.136567][T21209] ? __pfx____ratelimit+0x10/0x10 [ 2193.136591][T21209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2193.136617][T21209] ? __pfx__printk+0x10/0x10 [ 2193.136648][T21209] ? __might_fault+0xb0/0x130 [ 2193.136691][T21209] should_fail_ex+0x414/0x560 [ 2193.136726][T21209] _copy_from_user+0x2d/0xb0 [ 2193.136753][T21209] ____sys_sendmsg+0x2fe/0x830 [ 2193.136785][T21209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2193.136946][T21209] ? import_iovec+0x74/0xa0 [ 2193.136987][T21209] ___sys_sendmsg+0x21f/0x2a0 [ 2193.137023][T21209] ? __pfx____sys_sendmsg+0x10/0x10 [ 2193.137119][T21209] ? vfs_write+0x956/0xb30 [ 2193.137156][T21209] __sys_sendmmsg+0x227/0x430 [ 2193.137187][T21209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2193.137221][T21209] ? kmem_cache_free+0x18f/0x400 [ 2193.137264][T21209] ? ksys_write+0x1e1/0x250 [ 2193.137292][T21209] ? __pfx_ksys_write+0x10/0x10 [ 2193.137316][T21209] ? rcu_is_watching+0x15/0xb0 [ 2193.137345][T21209] __x64_sys_sendmmsg+0xa0/0xc0 [ 2193.137373][T21209] do_syscall_64+0xfa/0x3b0 [ 2193.137395][T21209] ? lockdep_hardirqs_on+0x9c/0x150 [ 2193.137416][T21209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2193.137435][T21209] ? clear_bhb_loop+0x60/0xb0 [ 2193.137461][T21209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2193.137481][T21209] RIP: 0033:0x7f75e178ebe9 [ 2193.137500][T21209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2193.137519][T21209] RSP: 002b:00007f75e2569038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2193.137540][T21209] RAX: ffffffffffffffda RBX: 00007f75e19c5fa0 RCX: 00007f75e178ebe9 [ 2193.137556][T21209] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000007 [ 2193.137571][T21209] RBP: 00007f75e2569090 R08: 0000000000000000 R09: 0000000000000000 [ 2193.137584][T21209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2193.137597][T21209] R13: 00007f75e19c6038 R14: 00007f75e19c5fa0 R15: 00007ffdc26485c8 [ 2193.137630][T21209] [ 2193.586637][T21217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13435'. [ 2193.616556][T21217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13435'. [ 2193.653083][T21210] batman_adv: batadv0: Interface deactivated: dummy0 [ 2193.671685][T21221] netlink: 27 bytes leftover after parsing attributes in process `syz.0.13436'. [ 2193.852355][T21210] bridge11: left allmulticast mode [ 2193.914016][T21210] bridge12: left allmulticast mode [ 2194.061932][T21210] bridge13: left allmulticast mode [ 2194.126393][T20169] lo speed is unknown, defaulting to 1000 [ 2194.136877][T20169] syz1: Port: 1 Link DOWN [ 2194.181812][T21236] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20002 [ 2194.226611][T21236] sctp: [Deprecated]: syz.4.13438 (pid 21236) Use of int in maxseg socket option. [ 2194.226611][T21236] Use struct sctp_assoc_value instead [ 2194.408295][T21249] FAULT_INJECTION: forcing a failure. [ 2194.408295][T21249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.461249][T21249] CPU: 0 UID: 0 PID: 21249 Comm: syz.0.13444 Not tainted syzkaller #0 PREEMPT(full) [ 2194.461281][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2194.461295][T21249] Call Trace: [ 2194.461304][T21249] [ 2194.461313][T21249] dump_stack_lvl+0x189/0x250 [ 2194.461344][T21249] ? __pfx____ratelimit+0x10/0x10 [ 2194.461368][T21249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2194.461393][T21249] ? __pfx__printk+0x10/0x10 [ 2194.461437][T21249] should_fail_ex+0x414/0x560 [ 2194.461472][T21249] _copy_to_user+0x31/0xb0 [ 2194.461500][T21249] simple_read_from_buffer+0xe1/0x170 [ 2194.461538][T21249] proc_fail_nth_read+0x1b3/0x220 [ 2194.461566][T21249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2194.461594][T21249] ? rw_verify_area+0x2a6/0x4d0 [ 2194.461619][T21249] ? __lock_acquire+0xab9/0xd20 [ 2194.461647][T21249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2194.461675][T21249] vfs_read+0x200/0xa30 [ 2194.461700][T21249] ? fdget_pos+0x247/0x320 [ 2194.461725][T21249] ? __pfx___mutex_lock+0x10/0x10 [ 2194.461749][T21249] ? __pfx_vfs_read+0x10/0x10 [ 2194.461779][T21249] ? __fget_files+0x2a/0x420 [ 2194.461803][T21249] ? __fget_files+0x3a0/0x420 [ 2194.461820][T21249] ? __fget_files+0x2a/0x420 [ 2194.461850][T21249] ksys_read+0x145/0x250 [ 2194.461876][T21249] ? __fget_files+0x3a0/0x420 [ 2194.461895][T21249] ? __pfx_ksys_read+0x10/0x10 [ 2194.461936][T21249] ? do_syscall_64+0xbe/0x3b0 [ 2194.461964][T21249] do_syscall_64+0xfa/0x3b0 [ 2194.461986][T21249] ? lockdep_hardirqs_on+0x9c/0x150 [ 2194.462008][T21249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.462028][T21249] ? clear_bhb_loop+0x60/0xb0 [ 2194.462054][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.462074][T21249] RIP: 0033:0x7f109538d5fc [ 2194.462096][T21249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2194.462114][T21249] RSP: 002b:00007f10935f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2194.462136][T21249] RAX: ffffffffffffffda RBX: 00007f10955c5fa0 RCX: 00007f109538d5fc [ 2194.462163][T21249] RDX: 000000000000000f RSI: 00007f10935f60a0 RDI: 0000000000000005 [ 2194.462176][T21249] RBP: 00007f10935f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2194.462188][T21249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2194.462201][T21249] R13: 00007f10955c6038 R14: 00007f10955c5fa0 R15: 00007ffca0537e88 [ 2194.462235][T21249] [ 2194.489409][T21251] delete_channel: no stack [ 2194.600803][T21257] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13447'. [ 2195.124930][T21277] delete_channel: no stack [ 2195.351734][T21287] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2195.380823][T21287] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 2195.403874][T21289] netlink: 'syz.1.13457': attribute type 3 has an invalid length. [ 2195.412421][T21287] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 2195.423102][T21289] netlink: 'syz.1.13457': attribute type 1 has an invalid length. [ 2195.748097][ T8442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2195.776877][ T8442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2195.963255][T21312] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 2196.296703][T21322] xfrm1: entered allmulticast mode [ 2196.551180][T21328] __nla_validate_parse: 9 callbacks suppressed [ 2196.551201][T21328] netlink: 240 bytes leftover after parsing attributes in process `syz.2.13469'. [ 2196.658084][T21325] IPVS: stopping master sync thread 9428 ... [ 2196.854418][T21336] bridge0: entered allmulticast mode [ 2196.861535][T21340] FAULT_INJECTION: forcing a failure. [ 2196.861535][T21340] name failslab, interval 1, probability 0, space 0, times 0 [ 2196.884572][T21340] CPU: 1 UID: 0 PID: 21340 Comm: syz.2.13474 Not tainted syzkaller #0 PREEMPT(full) [ 2196.884602][T21340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2196.884616][T21340] Call Trace: [ 2196.884625][T21340] [ 2196.884634][T21340] dump_stack_lvl+0x189/0x250 [ 2196.884664][T21340] ? __pfx____ratelimit+0x10/0x10 [ 2196.884686][T21340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2196.884717][T21340] ? __pfx__printk+0x10/0x10 [ 2196.884752][T21340] ? __pfx___might_resched+0x10/0x10 [ 2196.884799][T21340] should_fail_ex+0x414/0x560 [ 2196.884833][T21340] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 2196.884853][T21340] should_failslab+0xa8/0x100 [ 2196.884887][T21340] __kvmalloc_node_noprof+0x161/0x5f0 [ 2196.884917][T21340] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 2196.884946][T21340] bpf_test_run_xdp_live+0x18e/0x1b10 [ 2196.884977][T21340] ? stack_trace_save+0x9c/0xe0 [ 2196.885006][T21340] ? stack_depot_save_flags+0x40/0x860 [ 2196.885046][T21340] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 2196.885068][T21340] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 2196.885087][T21340] ? bpf_prog_test_run+0x2c7/0x340 [ 2196.885114][T21340] ? __sys_bpf+0x581/0x870 [ 2196.885138][T21340] ? __x64_sys_bpf+0x7c/0x90 [ 2196.885186][T21340] ? __lock_acquire+0xab9/0xd20 [ 2196.885230][T21340] ? __might_fault+0xb0/0x130 [ 2196.885270][T21340] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 2196.885302][T21340] ? _copy_from_user+0x94/0xb0 [ 2196.885327][T21340] ? bpf_test_init+0x133/0x170 [ 2196.885345][T21340] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2196.885371][T21340] bpf_prog_test_run_xdp+0x713/0x1000 [ 2196.885412][T21340] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2196.885440][T21340] ? __fget_files+0x2a/0x420 [ 2196.885466][T21340] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2196.885489][T21340] bpf_prog_test_run+0x2c7/0x340 [ 2196.885523][T21340] __sys_bpf+0x581/0x870 [ 2196.885554][T21340] ? __pfx___sys_bpf+0x10/0x10 [ 2196.885597][T21340] ? ksys_write+0x22a/0x250 [ 2196.885627][T21340] ? __pfx_ksys_write+0x10/0x10 [ 2196.885652][T21340] ? rcu_is_watching+0x15/0xb0 [ 2196.885683][T21340] __x64_sys_bpf+0x7c/0x90 [ 2196.885717][T21340] do_syscall_64+0xfa/0x3b0 [ 2196.885740][T21340] ? lockdep_hardirqs_on+0x9c/0x150 [ 2196.885762][T21340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.885783][T21340] ? clear_bhb_loop+0x60/0xb0 [ 2196.885810][T21340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2196.885831][T21340] RIP: 0033:0x7f157018ebe9 [ 2196.885850][T21340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2196.885869][T21340] RSP: 002b:00007f1570fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2196.885892][T21340] RAX: ffffffffffffffda RBX: 00007f15703c5fa0 RCX: 00007f157018ebe9 [ 2196.885908][T21340] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 2196.885922][T21340] RBP: 00007f1570fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 2196.885935][T21340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2196.885949][T21340] R13: 00007f15703c6038 R14: 00007f15703c5fa0 R15: 00007ffce11074b8 [ 2196.885984][T21340] [ 2197.358274][T21349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13476'. [ 2197.401434][T21349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13476'. [ 2197.434779][T21347] netlink: zone id is out of range [ 2197.441888][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13475'. [ 2197.455500][T21347] netlink: zone id is out of range [ 2197.461797][T21347] netlink: zone id is out of range [ 2197.473038][T21351] netlink: 'syz.0.13475': attribute type 13 has an invalid length. [ 2197.499634][T21347] netlink: zone id is out of range [ 2197.505179][T21347] netlink: zone id is out of range [ 2197.513107][T21347] netlink: zone id is out of range [ 2197.522164][T21347] netlink: zone id is out of range [ 2197.548101][T21347] netlink: zone id is out of range [ 2197.567870][T21347] netlink: zone id is out of range [ 2197.574971][T21347] netlink: zone id is out of range [ 2197.762965][T21365] netlink: 'syz.3.13482': attribute type 11 has an invalid length. [ 2198.017577][T21376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13485'. [ 2198.064529][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13488'. [ 2198.117209][T21383] netlink: 27 bytes leftover after parsing attributes in process `syz.1.13487'. [ 2198.131342][T21382] ip_vti0: Master is either lo or non-ether device [ 2198.286587][T21390] FAULT_INJECTION: forcing a failure. [ 2198.286587][T21390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2198.319616][T21390] CPU: 0 UID: 0 PID: 21390 Comm: syz.2.13490 Not tainted syzkaller #0 PREEMPT(full) [ 2198.319647][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2198.319661][T21390] Call Trace: [ 2198.319670][T21390] [ 2198.319680][T21390] dump_stack_lvl+0x189/0x250 [ 2198.319710][T21390] ? __pfx____ratelimit+0x10/0x10 [ 2198.319733][T21390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2198.319757][T21390] ? __pfx__printk+0x10/0x10 [ 2198.319786][T21390] ? __might_fault+0xb0/0x130 [ 2198.319828][T21390] should_fail_ex+0x414/0x560 [ 2198.319863][T21390] _copy_from_user+0x2d/0xb0 [ 2198.319889][T21390] ___sys_sendmsg+0x158/0x2a0 [ 2198.319918][T21390] ? __pfx____sys_sendmsg+0x10/0x10 [ 2198.319982][T21390] ? __fget_files+0x2a/0x420 [ 2198.320000][T21390] ? __fget_files+0x3a0/0x420 [ 2198.320031][T21390] __x64_sys_sendmsg+0x19b/0x260 [ 2198.320060][T21390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2198.320098][T21390] ? __pfx_ksys_write+0x10/0x10 [ 2198.320140][T21390] ? rcu_is_watching+0x15/0xb0 [ 2198.320166][T21390] ? do_syscall_64+0xbe/0x3b0 [ 2198.320194][T21390] do_syscall_64+0xfa/0x3b0 [ 2198.320235][T21390] ? lockdep_hardirqs_on+0x9c/0x150 [ 2198.320256][T21390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.320278][T21390] ? clear_bhb_loop+0x60/0xb0 [ 2198.320326][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.320346][T21390] RIP: 0033:0x7f157018ebe9 [ 2198.320372][T21390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2198.320392][T21390] RSP: 002b:00007f1570fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2198.320414][T21390] RAX: ffffffffffffffda RBX: 00007f15703c5fa0 RCX: 00007f157018ebe9 [ 2198.320430][T21390] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 2198.320445][T21390] RBP: 00007f1570fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 2198.320458][T21390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2198.320471][T21390] R13: 00007f15703c6038 R14: 00007f15703c5fa0 R15: 00007ffce11074b8 [ 2198.320507][T21390] [ 2198.621248][T21396] netlink: 'syz.1.13493': attribute type 1 has an invalid length. [ 2198.661236][T21404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13494'. [ 2198.720596][T21405] netlink: 34 bytes leftover after parsing attributes in process `syz.3.13492'. [ 2198.771629][T21409] FAULT_INJECTION: forcing a failure. [ 2198.771629][T21409] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.810154][T21409] CPU: 1 UID: 0 PID: 21409 Comm: syz.2.13496 Not tainted syzkaller #0 PREEMPT(full) [ 2198.810185][T21409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2198.810199][T21409] Call Trace: [ 2198.810208][T21409] [ 2198.810219][T21409] dump_stack_lvl+0x189/0x250 [ 2198.810250][T21409] ? __pfx____ratelimit+0x10/0x10 [ 2198.810275][T21409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2198.810300][T21409] ? __pfx__printk+0x10/0x10 [ 2198.810338][T21409] ? __pfx___might_resched+0x10/0x10 [ 2198.810364][T21409] should_fail_ex+0x414/0x560 [ 2198.810399][T21409] should_failslab+0xa8/0x100 [ 2198.810431][T21409] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2198.810474][T21409] ? __alloc_skb+0x112/0x2d0 [ 2198.810506][T21409] __alloc_skb+0x112/0x2d0 [ 2198.810532][T21409] netlink_dump+0x1b7/0xe90 [ 2198.810567][T21409] ? __pfx_netlink_dump+0x10/0x10 [ 2198.810608][T21409] ? kmem_cache_free+0x18f/0x400 [ 2198.810642][T21409] netlink_recvmsg+0x676/0xa30 [ 2198.810674][T21409] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2198.810702][T21409] ? __lock_acquire+0xab9/0xd20 [ 2198.810729][T21409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2198.810751][T21409] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2198.810776][T21409] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2198.810799][T21409] sock_recvmsg_nosec+0x183/0x1c0 [ 2198.810834][T21409] ____sys_recvmsg+0x3aa/0x460 [ 2198.810871][T21409] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2198.810915][T21409] ? import_iovec+0x74/0xa0 [ 2198.810945][T21409] ___sys_recvmsg+0x1b5/0x510 [ 2198.810977][T21409] ? __pfx____sys_recvmsg+0x10/0x10 [ 2198.811039][T21409] ? __might_fault+0xb0/0x130 [ 2198.811072][T21409] do_recvmmsg+0x307/0x770 [ 2198.811108][T21409] ? __pfx_do_recvmmsg+0x10/0x10 [ 2198.811152][T21409] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2198.811197][T21409] __x64_sys_recvmmsg+0x190/0x240 [ 2198.811227][T21409] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2198.811250][T21409] ? rcu_is_watching+0x15/0xb0 [ 2198.811278][T21409] ? do_syscall_64+0xbe/0x3b0 [ 2198.811306][T21409] do_syscall_64+0xfa/0x3b0 [ 2198.811327][T21409] ? lockdep_hardirqs_on+0x9c/0x150 [ 2198.811349][T21409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.811369][T21409] ? clear_bhb_loop+0x60/0xb0 [ 2198.811394][T21409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2198.811414][T21409] RIP: 0033:0x7f157018ebe9 [ 2198.811444][T21409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2198.811461][T21409] RSP: 002b:00007f1570fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2198.811481][T21409] RAX: ffffffffffffffda RBX: 00007f15703c5fa0 RCX: 00007f157018ebe9 [ 2198.811504][T21409] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 2198.811516][T21409] RBP: 00007f1570fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 2198.811528][T21409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2198.811539][T21409] R13: 00007f15703c6038 R14: 00007f15703c5fa0 R15: 00007ffce11074b8 [ 2198.811571][T21409] [ 2199.504418][T21428] lo speed is unknown, defaulting to 1000 [ 2199.542894][T21428] lo speed is unknown, defaulting to 1000 [ 2199.551302][T21428] lo speed is unknown, defaulting to 1000 [ 2199.657678][T21440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13504'. [ 2200.304893][T21458] netlink: 'syz.0.13508': attribute type 1 has an invalid length. [ 2201.918944][T21484] lo speed is unknown, defaulting to 1000 [ 2201.964487][T21484] lo speed is unknown, defaulting to 1000 [ 2202.031423][T21484] lo speed is unknown, defaulting to 1000 [ 2202.458601][T21520] __nla_validate_parse: 6 callbacks suppressed [ 2202.458621][T21520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13527'. [ 2202.650751][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13528'. [ 2202.838134][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13529'. [ 2203.784768][T21548] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2203.855556][ T8438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2203.865909][ T8438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2203.877360][T21556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13533'. [ 2203.889929][T21548] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2203.920977][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13535'. [ 2203.961622][T21558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13535'. [ 2203.998835][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13536'. [ 2204.137501][T21548] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2204.290923][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13539'. [ 2204.313939][T21548] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2204.345776][T21569] netlink: 240 bytes leftover after parsing attributes in process `syz.1.13539'. [ 2204.438837][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13540'. [ 2204.632257][ T8438] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2204.641860][ T8438] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2204.669680][ T8438] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2204.736506][ T8438] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2204.981774][T21584] xfrm1: left allmulticast mode [ 2205.682936][T31520] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 2206.290232][T21640] netlink: 'syz.4.13562': attribute type 2 has an invalid length. [ 2206.317087][T21640] net_ratelimit: 3 callbacks suppressed [ 2206.317112][T21640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2207.478189][T21687] __nla_validate_parse: 12 callbacks suppressed [ 2207.478226][T21687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13579'. [ 2207.513328][T21687] gtp1: entered promiscuous mode [ 2207.518354][T21687] gtp1: entered allmulticast mode [ 2207.585827][T21689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13579'. [ 2207.610354][T21689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13579'. [ 2208.010806][T21702] macsec1: entered promiscuous mode [ 2208.016085][T21702] batadv0: entered promiscuous mode [ 2208.023652][T21702] macsec1: entered allmulticast mode [ 2208.050190][T21704] netlink: 'syz.0.13585': attribute type 1 has an invalid length. [ 2208.067311][T21703] lo speed is unknown, defaulting to 1000 [ 2208.075035][T21704] netlink: 244 bytes leftover after parsing attributes in process `syz.0.13585'. [ 2208.125262][T21703] lo speed is unknown, defaulting to 1000 [ 2208.216353][T21703] lo speed is unknown, defaulting to 1000 [ 2208.328962][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13589'. [ 2208.459313][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13589'. [ 2208.835847][T21745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13589'. [ 2209.345372][T21761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13596'. [ 2209.355040][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13596'. [ 2209.420653][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13596'. [ 2209.990372][T21777] netlink: 'syz.4.13601': attribute type 1 has an invalid length. [ 2210.388686][T21790] netlink: 'syz.3.13606': attribute type 1 has an invalid length. [ 2210.411880][T21792] FAULT_INJECTION: forcing a failure. [ 2210.411880][T21792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.465279][T21792] CPU: 0 UID: 0 PID: 21792 Comm: syz.4.13604 Not tainted syzkaller #0 PREEMPT(full) [ 2210.465307][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2210.465321][T21792] Call Trace: [ 2210.465330][T21792] [ 2210.465339][T21792] dump_stack_lvl+0x189/0x250 [ 2210.465370][T21792] ? __pfx____ratelimit+0x10/0x10 [ 2210.465393][T21792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2210.465429][T21792] ? __pfx__printk+0x10/0x10 [ 2210.465458][T21792] ? __might_fault+0xb0/0x130 [ 2210.465499][T21792] should_fail_ex+0x414/0x560 [ 2210.465533][T21792] _copy_from_user+0x2d/0xb0 [ 2210.465559][T21792] ___sys_sendmsg+0x158/0x2a0 [ 2210.465587][T21792] ? __pfx____sys_sendmsg+0x10/0x10 [ 2210.465661][T21792] ? __fget_files+0x2a/0x420 [ 2210.465678][T21792] ? __fget_files+0x3a0/0x420 [ 2210.465706][T21792] __sys_sendmmsg+0x227/0x430 [ 2210.465753][T21792] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2210.465774][T21792] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2210.465838][T21792] ? ksys_write+0x22a/0x250 [ 2210.465866][T21792] ? __pfx_ksys_write+0x10/0x10 [ 2210.465892][T21792] ? rcu_is_watching+0x15/0xb0 [ 2210.465919][T21792] __x64_sys_sendmmsg+0xa0/0xc0 [ 2210.465944][T21792] do_syscall_64+0xfa/0x3b0 [ 2210.465964][T21792] ? lockdep_hardirqs_on+0x9c/0x150 [ 2210.465984][T21792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.466003][T21792] ? clear_bhb_loop+0x60/0xb0 [ 2210.466027][T21792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.466046][T21792] RIP: 0033:0x7f679c18ebe9 [ 2210.466063][T21792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2210.466080][T21792] RSP: 002b:00007f679d00e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2210.466100][T21792] RAX: ffffffffffffffda RBX: 00007f679c3c5fa0 RCX: 00007f679c18ebe9 [ 2210.466132][T21792] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000008 [ 2210.466145][T21792] RBP: 00007f679d00e090 R08: 0000000000000000 R09: 0000000000000000 [ 2210.466158][T21792] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 2210.466171][T21792] R13: 00007f679c3c6038 R14: 00007f679c3c5fa0 R15: 00007fff199ed1b8 [ 2210.466205][T21792] [ 2211.297158][T21828] macsec0: entered promiscuous mode [ 2211.302863][T21828] macsec0: entered allmulticast mode [ 2211.310141][T21822] lo speed is unknown, defaulting to 1000 [ 2211.317758][T21822] lo speed is unknown, defaulting to 1000 [ 2211.324728][T21828] veth1_macvtap: entered allmulticast mode [ 2211.336566][T21828] macsec0: left promiscuous mode [ 2211.343887][T21828] macsec0: left allmulticast mode [ 2211.348975][T21828] veth1_macvtap: left allmulticast mode [ 2211.365776][T21822] lo speed is unknown, defaulting to 1000 [ 2212.275868][T21849] ip_vti0: Master is either lo or non-ether device [ 2212.645548][T21863] netlink: 'syz.0.13626': attribute type 9 has an invalid length. [ 2212.665229][T21863] __nla_validate_parse: 10 callbacks suppressed [ 2212.665249][T21863] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.13626'. [ 2212.679069][T21866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13628'. [ 2212.991428][T21865] delete_channel: no stack [ 2213.289745][T21893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13634'. [ 2213.299051][T21893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13634'. [ 2213.504995][T21908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13639'. [ 2213.636267][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13639'. [ 2213.935898][T21921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13641'. [ 2213.971079][T21921] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13641'. [ 2213.992517][T21921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13641'. [ 2214.031583][T21921] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13641'. [ 2214.424475][T21943] netlink: 'syz.0.13646': attribute type 1 has an invalid length. [ 2214.464603][T21946] FAULT_INJECTION: forcing a failure. [ 2214.464603][T21946] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.479549][T21946] CPU: 1 UID: 0 PID: 21946 Comm: syz.3.13647 Not tainted syzkaller #0 PREEMPT(full) [ 2214.479579][T21946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2214.479592][T21946] Call Trace: [ 2214.479601][T21946] [ 2214.479611][T21946] dump_stack_lvl+0x189/0x250 [ 2214.479641][T21946] ? __pfx____ratelimit+0x10/0x10 [ 2214.479665][T21946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2214.479690][T21946] ? __pfx__printk+0x10/0x10 [ 2214.479725][T21946] ? __pfx___might_resched+0x10/0x10 [ 2214.479751][T21946] should_fail_ex+0x414/0x560 [ 2214.479784][T21946] should_failslab+0xa8/0x100 [ 2214.479817][T21946] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2214.479847][T21946] ? __alloc_skb+0x112/0x2d0 [ 2214.479883][T21946] __alloc_skb+0x112/0x2d0 [ 2214.479910][T21946] netlink_sendmsg+0x5c6/0xb30 [ 2214.479944][T21946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.479971][T21946] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2214.479993][T21946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2214.480016][T21946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.480040][T21946] __sock_sendmsg+0x21c/0x270 [ 2214.480074][T21946] ____sys_sendmsg+0x505/0x830 [ 2214.480121][T21946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2214.480156][T21946] ? import_iovec+0x74/0xa0 [ 2214.480185][T21946] ___sys_sendmsg+0x21f/0x2a0 [ 2214.480212][T21946] ? __pfx____sys_sendmsg+0x10/0x10 [ 2214.480277][T21946] ? __fget_files+0x2a/0x420 [ 2214.480294][T21946] ? __fget_files+0x3a0/0x420 [ 2214.480324][T21946] __x64_sys_sendmsg+0x19b/0x260 [ 2214.480352][T21946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2214.480387][T21946] ? __pfx_ksys_write+0x10/0x10 [ 2214.480411][T21946] ? rcu_is_watching+0x15/0xb0 [ 2214.480438][T21946] ? do_syscall_64+0xbe/0x3b0 [ 2214.480465][T21946] do_syscall_64+0xfa/0x3b0 [ 2214.480486][T21946] ? lockdep_hardirqs_on+0x9c/0x150 [ 2214.480506][T21946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.480527][T21946] ? clear_bhb_loop+0x60/0xb0 [ 2214.480551][T21946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.480571][T21946] RIP: 0033:0x7f75e178ebe9 [ 2214.480590][T21946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2214.480608][T21946] RSP: 002b:00007f75e2569038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2214.480629][T21946] RAX: ffffffffffffffda RBX: 00007f75e19c5fa0 RCX: 00007f75e178ebe9 [ 2214.480645][T21946] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 2214.480658][T21946] RBP: 00007f75e2569090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.480671][T21946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2214.480683][T21946] R13: 00007f75e19c6038 R14: 00007f75e19c5fa0 R15: 00007ffdc26485c8 [ 2214.480717][T21946] [ 2214.857515][T21954] FAULT_INJECTION: forcing a failure. [ 2214.857515][T21954] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.907717][T21954] CPU: 1 UID: 0 PID: 21954 Comm: syz.3.13648 Not tainted syzkaller #0 PREEMPT(full) [ 2214.907743][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2214.907755][T21954] Call Trace: [ 2214.907762][T21954] [ 2214.907771][T21954] dump_stack_lvl+0x189/0x250 [ 2214.907798][T21954] ? __pfx____ratelimit+0x10/0x10 [ 2214.907817][T21954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2214.907839][T21954] ? __pfx__printk+0x10/0x10 [ 2214.907869][T21954] ? __pfx___might_resched+0x10/0x10 [ 2214.907885][T21954] ? fs_reclaim_acquire+0x7d/0x100 [ 2214.907906][T21954] should_fail_ex+0x414/0x560 [ 2214.907953][T21954] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 2214.907974][T21954] should_failslab+0xa8/0x100 [ 2214.908006][T21954] __kvmalloc_node_noprof+0x161/0x5f0 [ 2214.908047][T21954] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 2214.908075][T21954] rhashtable_init_noprof+0x4ee/0xbb0 [ 2214.908106][T21954] rhltable_init_noprof+0x1e/0x60 [ 2214.908130][T21954] nf_tables_newtable+0x68f/0x1890 [ 2214.908181][T21954] nfnetlink_rcv+0x1132/0x2520 [ 2214.908269][T21954] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2214.908359][T21954] ? netlink_deliver_tap+0x2e/0x1b0 [ 2214.908403][T21954] netlink_unicast+0x82f/0x9e0 [ 2214.908446][T21954] ? __pfx_netlink_unicast+0x10/0x10 [ 2214.908479][T21954] ? netlink_sendmsg+0x642/0xb30 [ 2214.908498][T21954] ? skb_put+0x11b/0x210 [ 2214.908525][T21954] netlink_sendmsg+0x805/0xb30 [ 2214.908559][T21954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.908584][T21954] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2214.908606][T21954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2214.908628][T21954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.908652][T21954] __sock_sendmsg+0x21c/0x270 [ 2214.908686][T21954] ____sys_sendmsg+0x505/0x830 [ 2214.908719][T21954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2214.908756][T21954] ? import_iovec+0x74/0xa0 [ 2214.908794][T21954] ___sys_sendmsg+0x21f/0x2a0 [ 2214.908822][T21954] ? __pfx____sys_sendmsg+0x10/0x10 [ 2214.908889][T21954] ? __fget_files+0x2a/0x420 [ 2214.908908][T21954] ? __fget_files+0x3a0/0x420 [ 2214.908938][T21954] __x64_sys_sendmsg+0x19b/0x260 [ 2214.908968][T21954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2214.909003][T21954] ? __pfx_ksys_write+0x10/0x10 [ 2214.909034][T21954] ? rcu_is_watching+0x15/0xb0 [ 2214.909060][T21954] ? do_syscall_64+0xbe/0x3b0 [ 2214.909086][T21954] do_syscall_64+0xfa/0x3b0 [ 2214.909107][T21954] ? lockdep_hardirqs_on+0x9c/0x150 [ 2214.909129][T21954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.909155][T21954] ? clear_bhb_loop+0x60/0xb0 [ 2214.909181][T21954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.909201][T21954] RIP: 0033:0x7f75e178ebe9 [ 2214.909221][T21954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2214.909239][T21954] RSP: 002b:00007f75e2548038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2214.909261][T21954] RAX: ffffffffffffffda RBX: 00007f75e19c6090 RCX: 00007f75e178ebe9 [ 2214.909277][T21954] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2214.909292][T21954] RBP: 00007f75e2548090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.909304][T21954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2214.909317][T21954] R13: 00007f75e19c6128 R14: 00007f75e19c6090 R15: 00007ffdc26485c8 [ 2214.909353][T21954] [ 2215.354662][T21952] lo speed is unknown, defaulting to 1000 [ 2215.368018][T21952] lo speed is unknown, defaulting to 1000 [ 2215.391257][T21952] lo speed is unknown, defaulting to 1000 [ 2216.274306][T21992] sctp: [Deprecated]: syz.3.13660 (pid 21992) Use of int in max_burst socket option. [ 2216.274306][T21992] Use struct sctp_assoc_value instead [ 2216.330488][T21996] netlink: 'syz.4.13662': attribute type 2 has an invalid length. [ 2216.357288][T21996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2216.979736][T22021] netlink: 'syz.0.13669': attribute type 2 has an invalid length. [ 2217.330739][T22037] bridge10: left allmulticast mode [ 2217.342048][T22041] [ 2217.344410][T22041] ====================================================== [ 2217.351453][T22041] WARNING: possible circular locking dependency detected [ 2217.358522][T22041] syzkaller #0 Not tainted [ 2217.362946][T22041] ------------------------------------------------------ [ 2217.369966][T22041] syz.2.13676/22041 is trying to acquire lock: [ 2217.376136][T22041] ffffffff8f68eb18 (nr_neigh_list_lock){+.-.}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 2217.385474][T22041] [ 2217.385474][T22041] but task is already holding lock: [ 2217.392835][T22041] ffff888028c26070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 2217.402175][T22041] [ 2217.402175][T22041] which lock already depends on the new lock. [ 2217.402175][T22041] [ 2217.412584][T22041] [ 2217.412584][T22041] the existing dependency chain (in reverse order) is: [ 2217.421591][T22041] [ 2217.421591][T22041] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 2217.429581][T22041] lock_acquire+0x120/0x360 [ 2217.434616][T22041] _raw_spin_lock_bh+0x36/0x50 [ 2217.439909][T22041] nr_rt_ioctl+0x193/0xd50 [ 2217.444853][T22041] sock_do_ioctl+0xdc/0x300 [ 2217.449877][T22041] sock_ioctl+0x576/0x790 [ 2217.454773][T22041] __se_sys_ioctl+0xfc/0x170 [ 2217.459888][T22041] do_syscall_64+0xfa/0x3b0 [ 2217.465013][T22041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.471420][T22041] [ 2217.471420][T22041] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 2217.479240][T22041] lock_acquire+0x120/0x360 [ 2217.484276][T22041] _raw_spin_lock_bh+0x36/0x50 [ 2217.489658][T22041] nr_rt_device_down+0xa9/0x720 [ 2217.495035][T22041] nr_device_event+0x137/0x150 [ 2217.500325][T22041] notifier_call_chain+0x1b3/0x3e0 [ 2217.505957][T22041] __dev_notify_flags+0x18d/0x2e0 [ 2217.511507][T22041] netif_change_flags+0xe8/0x1a0 [ 2217.516971][T22041] dev_change_flags+0x130/0x260 [ 2217.522357][T22041] dev_ioctl+0x7b4/0x1150 [ 2217.527206][T22041] sock_do_ioctl+0x22c/0x300 [ 2217.532327][T22041] sock_ioctl+0x576/0x790 [ 2217.537182][T22041] __se_sys_ioctl+0xfc/0x170 [ 2217.542295][T22041] do_syscall_64+0xfa/0x3b0 [ 2217.547320][T22041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.553737][T22041] [ 2217.553737][T22041] -> #0 (nr_neigh_list_lock){+.-.}-{3:3}: [ 2217.561665][T22041] validate_chain+0xb9b/0x2140 [ 2217.566961][T22041] __lock_acquire+0xab9/0xd20 [ 2217.572165][T22041] lock_acquire+0x120/0x360 [ 2217.577195][T22041] _raw_spin_lock_bh+0x36/0x50 [ 2217.582485][T22041] nr_remove_neigh+0x25/0xe0 [ 2217.587696][T22041] nr_add_node+0x1d9f/0x2570 [ 2217.592842][T22041] nr_rt_ioctl+0xc12/0xd50 [ 2217.597789][T22041] sock_do_ioctl+0xdc/0x300 [ 2217.602821][T22041] sock_ioctl+0x576/0x790 [ 2217.607682][T22041] __se_sys_ioctl+0xfc/0x170 [ 2217.612832][T22041] do_syscall_64+0xfa/0x3b0 [ 2217.617866][T22041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.624290][T22041] [ 2217.624290][T22041] other info that might help us debug this: [ 2217.624290][T22041] [ 2217.634520][T22041] Chain exists of: [ 2217.634520][T22041] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 2217.634520][T22041] [ 2217.648346][T22041] Possible unsafe locking scenario: [ 2217.648346][T22041] [ 2217.655795][T22041] CPU0 CPU1 [ 2217.661160][T22041] ---- ---- [ 2217.666521][T22041] lock(&nr_node->node_lock); [ 2217.671294][T22041] lock(nr_node_list_lock); [ 2217.678494][T22041] lock(&nr_node->node_lock); [ 2217.685801][T22041] lock(nr_neigh_list_lock); [ 2217.690535][T22041] [ 2217.690535][T22041] *** DEADLOCK *** [ 2217.690535][T22041] [ 2217.698672][T22041] 1 lock held by syz.2.13676/22041: [ 2217.703868][T22041] #0: ffff888028c26070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 2217.713641][T22041] [ 2217.713641][T22041] stack backtrace: [ 2217.719535][T22041] CPU: 1 UID: 0 PID: 22041 Comm: syz.2.13676 Not tainted syzkaller #0 PREEMPT(full) [ 2217.719557][T22041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2217.719568][T22041] Call Trace: [ 2217.719577][T22041] [ 2217.719586][T22041] dump_stack_lvl+0x189/0x250 [ 2217.719610][T22041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2217.719629][T22041] ? __pfx__printk+0x10/0x10 [ 2217.719651][T22041] ? stack_trace_save+0x9c/0xe0 [ 2217.719676][T22041] print_circular_bug+0x2ee/0x310 [ 2217.719698][T22041] check_noncircular+0x134/0x160 [ 2217.719719][T22041] validate_chain+0xb9b/0x2140 [ 2217.719736][T22041] ? do_syscall_64+0xfa/0x3b0 [ 2217.719767][T22041] __lock_acquire+0xab9/0xd20 [ 2217.719794][T22041] ? nr_remove_neigh+0x25/0xe0 [ 2217.719809][T22041] lock_acquire+0x120/0x360 [ 2217.719832][T22041] ? nr_remove_neigh+0x25/0xe0 [ 2217.719850][T22041] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2217.719871][T22041] ? nr_remove_neigh+0x25/0xe0 [ 2217.719886][T22041] _raw_spin_lock_bh+0x36/0x50 [ 2217.719912][T22041] ? nr_remove_neigh+0x25/0xe0 [ 2217.719927][T22041] nr_remove_neigh+0x25/0xe0 [ 2217.719943][T22041] nr_add_node+0x1d9f/0x2570 [ 2217.719970][T22041] ? dev_get_by_name+0x21/0x200 [ 2217.719992][T22041] ? dev_get_by_name+0x21/0x200 [ 2217.720013][T22041] ? dev_get_by_name+0x21/0x200 [ 2217.720033][T22041] ? nr_call_to_digi+0x136/0x1b0 [ 2217.720058][T22041] nr_rt_ioctl+0xc12/0xd50 [ 2217.720087][T22041] ? kasan_quarantine_put+0xdd/0x220 [ 2217.720108][T22041] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 2217.720137][T22041] ? apparmor_capable+0x137/0x1b0 [ 2217.720162][T22041] ? capable+0x89/0xe0 [ 2217.720178][T22041] ? nr_ioctl+0x1b1/0x3b0 [ 2217.720199][T22041] sock_do_ioctl+0xdc/0x300 [ 2217.720223][T22041] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2217.720245][T22041] ? __lock_acquire+0xab9/0xd20 [ 2217.720275][T22041] sock_ioctl+0x576/0x790 [ 2217.720298][T22041] ? __pfx_sock_ioctl+0x10/0x10 [ 2217.720320][T22041] ? __fget_files+0x2a/0x420 [ 2217.720334][T22041] ? __fget_files+0x3a0/0x420 [ 2217.720348][T22041] ? __fget_files+0x2a/0x420 [ 2217.720363][T22041] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2217.720384][T22041] ? __pfx_sock_ioctl+0x10/0x10 [ 2217.720406][T22041] __se_sys_ioctl+0xfc/0x170 [ 2217.720427][T22041] do_syscall_64+0xfa/0x3b0 [ 2217.720444][T22041] ? lockdep_hardirqs_on+0x9c/0x150 [ 2217.720461][T22041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.720478][T22041] ? clear_bhb_loop+0x60/0xb0 [ 2217.720496][T22041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2217.720520][T22041] RIP: 0033:0x7f157018ebe9 [ 2217.720536][T22041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2217.720551][T22041] RSP: 002b:00007f1570f8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2217.720568][T22041] RAX: ffffffffffffffda RBX: 00007f15703c6180 RCX: 00007f157018ebe9 [ 2217.720581][T22041] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000025 [ 2217.720593][T22041] RBP: 00007f1570211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2217.720603][T22041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2217.720613][T22041] R13: 00007f15703c6218 R14: 00007f15703c6180 R15: 00007ffce11074b8 [ 2217.720634][T22041] [ 2218.065420][T22037] bridge11: left allmulticast mode [ 2218.090464][T22044] FAULT_INJECTION: forcing a failure. [ 2218.090464][T22044] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.111555][T22037] bridge12: left allmulticast mode [ 2218.119814][T22044] CPU: 1 UID: 0 PID: 22044 Comm: syz.0.13677 Not tainted syzkaller #0 PREEMPT(full) [ 2218.119841][T22044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2218.119855][T22044] Call Trace: [ 2218.119863][T22044] [ 2218.119872][T22044] dump_stack_lvl+0x189/0x250 [ 2218.119901][T22044] ? __pfx____ratelimit+0x10/0x10 [ 2218.119924][T22044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2218.119948][T22044] ? __pfx__printk+0x10/0x10 [ 2218.119977][T22044] ? rcu_is_watching+0x15/0xb0 [ 2218.120000][T22044] ? __pfx___might_resched+0x10/0x10 [ 2218.120021][T22044] ? lock_acquire+0x5f/0x360 [ 2218.120055][T22044] should_fail_ex+0x414/0x560 [ 2218.120086][T22044] should_failslab+0xa8/0x100 [ 2218.120117][T22044] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2218.120145][T22044] ? __kernfs_new_node+0xd7/0x7e0 [ 2218.120170][T22044] __kernfs_new_node+0xd7/0x7e0 [ 2218.120193][T22044] ? up_write+0x1c4/0x420 [ 2218.120214][T22044] ? kernfs_activate_one+0x238/0x370 [ 2218.120242][T22044] ? __pfx___kernfs_new_node+0x10/0x10 [ 2218.120264][T22044] ? rcu_is_watching+0x15/0xb0 [ 2218.120283][T22044] ? kernfs_root+0x1c/0x230 [ 2218.120304][T22044] ? rcu_is_watching+0x15/0xb0 [ 2218.120322][T22044] ? kernfs_root+0x1c/0x230 [ 2218.120343][T22044] ? lock_release+0x4b/0x3e0 [ 2218.120372][T22044] ? sysfs_create_dir_ns+0x123/0x280 [ 2218.120393][T22044] ? kernfs_root+0x1c/0x230 [ 2218.120412][T22044] ? kernfs_root+0x1c/0x230 [ 2218.120437][T22044] kernfs_new_node+0x102/0x210 [ 2218.120463][T22044] __kernfs_create_file+0x4b/0x2e0 [ 2218.120494][T22044] sysfs_add_file_mode_ns+0x238/0x300 [ 2218.120529][T22044] sysfs_create_file_ns+0x128/0x1a0 [ 2218.120572][T22044] ? __pfx___up_read+0x10/0x10 [ 2218.120594][T22044] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 2218.120628][T22044] ? __dev_fwnode+0x50/0x80 [ 2218.120648][T22044] ? device_create_file+0xf4/0x1c0 [ 2218.120670][T22044] device_add+0x440/0xb50 [ 2218.120692][T22044] tty_register_device_attr+0x3fe/0x8f0 [ 2218.120719][T22044] ? __pfx_tty_register_device_attr+0x10/0x10 [ 2218.120747][T22044] ? tty_port_register_device+0x5a/0x100 [ 2218.120771][T22044] rfcomm_dev_ioctl+0x176d/0x1d20 [ 2218.120802][T22044] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 2218.120837][T22044] ? lock_release+0x4b/0x3e0 [ 2218.120863][T22044] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 2218.120890][T22044] ? kfree+0x18e/0x440 [ 2218.120914][T22044] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2218.120946][T22044] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2218.120974][T22044] sock_do_ioctl+0xdc/0x300 [ 2218.121002][T22044] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2218.121029][T22044] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2218.121058][T22044] sock_ioctl+0x576/0x790 [ 2218.121082][T22044] ? lock_release+0x4b/0x3e0 [ 2218.121109][T22044] ? __pfx_sock_ioctl+0x10/0x10 [ 2218.121135][T22044] ? __fget_files+0x2a/0x420 [ 2218.121150][T22044] ? __fget_files+0x3a0/0x420 [ 2218.121164][T22044] ? __fget_files+0x2a/0x420 [ 2218.121179][T22044] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2218.121203][T22044] ? __pfx_sock_ioctl+0x10/0x10 [ 2218.121227][T22044] __se_sys_ioctl+0xfc/0x170 [ 2218.121251][T22044] do_syscall_64+0xfa/0x3b0 [ 2218.121272][T22044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2218.121291][T22044] ? clear_bhb_loop+0x60/0xb0 [ 2218.121312][T22044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2218.121332][T22044] RIP: 0033:0x7f109538ebe9 [ 2218.121350][T22044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2218.121369][T22044] RSP: 002b:00007f10935f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2218.121391][T22044] RAX: ffffffffffffffda RBX: 00007f10955c5fa0 RCX: 00007f109538ebe9 [ 2218.121407][T22044] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000006 [ 2218.121421][T22044] RBP: 00007f10935f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2218.121434][T22044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2218.121447][T22044] R13: 00007f10955c6038 R14: 00007f10955c5fa0 R15: 00007ffca0537e88 [ 2218.121471][T22044] [ 2218.146506][T20183] lo speed is unknown, defaulting to 1000 [ 2218.530869][T20183] syz0: Port: 1 Link DOWN [ 2218.544540][ T37] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2218.553330][ T37] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2218.562903][T18314] lo speed is unknown, defaulting to 1000 [ 2218.562911][ T37] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2218.579908][ T37] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0