last executing test programs: 9m23.266593204s ago: executing program 4 (id=5221): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x26) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)={0x1, 0x6d1, 0xb, {}, {}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x5, 0x5, 0x0, 0x0, "c84b0f70ed9a476e"}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9m23.148099165s ago: executing program 2 (id=5226): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x6}, {0xf, 0x8}}}, 0x24}}, 0x4000d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2e, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e223700"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 9m23.065854803s ago: executing program 2 (id=5227): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={r2, 0x0, 0x20, 0x4, 0x3}, &(0x7f0000000480)=0x18) 9m22.952011791s ago: executing program 2 (id=5229): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) shutdown(r1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket(0x11, 0x800000003, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0xc39}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000ac0)=""/89, 0x59}) sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0x8e}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd1004", 0x6f}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853", 0x5b}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63", 0xaa}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf", 0x7d}], 0x5}}], 0x4, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 9m22.864774938s ago: executing program 4 (id=5231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x84ff, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 9m22.717841392s ago: executing program 4 (id=5233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) bind$xdp(r4, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)=""/48, &(0x7f0000000240)=0x30) 9m22.657859735s ago: executing program 2 (id=5235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) 9m22.657076241s ago: executing program 4 (id=5236): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4080) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="02010000020023002cbd700000000000"], 0x10}, 0x19}, 0x0) 9m22.574155977s ago: executing program 2 (id=5237): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x6}, {0xf, 0x8}}}, 0x24}}, 0x4000d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 9m22.517653949s ago: executing program 4 (id=5238): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x26) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)={0x1, 0x6d1, 0xb, {}, {}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x5, 0x5, 0x0, 0x0, "c84b0f70ed9a476e"}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a01010000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9m22.34895671s ago: executing program 2 (id=5240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 9m22.012043468s ago: executing program 32 (id=5240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 9m22.004006827s ago: executing program 4 (id=5244): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0xf, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0xfffffffffffffffc, 0x0) 9m21.88007597s ago: executing program 33 (id=5244): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0xf, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0xfffffffffffffffc, 0x0) 3.304173968s ago: executing program 5 (id=13483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x420}}, 0x40040) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) sendto$unix(r4, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) recvfrom$unix(r5, 0x0, 0x0, 0x10102, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x38, 0x3e, 0x107, 0x0, 0x4000, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x400c050) socket$nl_route(0x10, 0x3, 0x0) 2.365432101s ago: executing program 5 (id=13491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r1, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='workqueue_queue_work\x00'}, 0x18) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) 2.32284148s ago: executing program 0 (id=13492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x500}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.197220645s ago: executing program 5 (id=13495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x22020600) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fd", 0x1}], 0x1, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.724376758s ago: executing program 0 (id=13500): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 1.586237186s ago: executing program 0 (id=13503): syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x480c4) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffff804b}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x48851) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x440c4}, 0x2004c041) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000540)={r5, r6, 0x9, 0xa5, &(0x7f0000000480)="44384bb93d8a918e576206e5d4db7af4eb8a0cc5e2a8dd3aed0df42adbf3dec28131c109117b19ec482396aceecd76828421c60292d000a26ee9fb22e0ffbc0305609b73d1944269699eb9c5998e8f1e0f3444fb6705796d9e782c6d80d25c105dfcb6409db28a1ccb5bc06c3d3b520dafc23047d7662a045d26986251e3e5f9fa7d6b9404d02e2a927f7b8fa2304a51660d8adfc65b2790d31cc71d44accac7461894e2be", 0x3, 0xa5, 0x2, 0x2, 0x6, 0x0, 0x6, 'syz0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r6) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x652}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x150}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x600000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x96e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff0000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r9 = socket(0x1, 0x5, 0x2) r10 = accept4(r7, &(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000008c0)=0x80, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r12, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r13, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r11) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r15, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c091}, 0x0) pipe(&(0x7f0000000bc0)) syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r12) socket$nl_route(0x10, 0x3, 0x0) accept4$ax25(r10, 0x0, &(0x7f0000000c40), 0xc00) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000d40)={@l2={0x1f, 0x8, @none, 0xfffa, 0x1}, {&(0x7f0000000c80)=""/121, 0x79}, &(0x7f0000000d00)}, 0xa0) 1.441695264s ago: executing program 1 (id=13509): pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000001c0)="8d5f5112adcb70151b02a1eef70bbfeaffb23142acbe9e58bb322eb9e068e9bbd24b8bb4aa3e2e62cbcd7c8b71587e622b23f7912e8eed9dfc184abc8c7e5a9fdbff4894227ceee89b85976803bd1481e04a3e3ad3b82d120caa53209c8b9abb7b456fae520494de730371178aae6273ebc7ed072bdd28b3c945d980390ccab6494d2f726051943e92b0c2ff44196e17d786a93535311245011ed86006e04fa3e971478b1a3a31276330be65fece6854cc099d33aef57226c3461120f7d0246879cf89", 0xc3, 0x80, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffa5, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.3776994s ago: executing program 6 (id=13510): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10, 0x110, 0xa}], 0x30}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x431, 0x7a}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x4, 0x6}, {0x2, 0x6}, {0x1f, 0x1}, {0xfc, 0x6}, {0x1, 0x1}, {0x49, 0x2}, {0x5, 0x5}, {0xb7, 0x1}, {0x9, 0x5}, {0x92, 0x4}, {0xf8, 0x2}, {0x34, 0x3}, {0x7f, 0x2}, {0x2, 0x4}, {0x9, 0x3}, {0x8, 0x3}, {0x4, 0x7}, {0x16, 0x4}, {0x7, 0x3}], "e787fa102776c48b"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x4}, {0x8}, {0x3f}, {0xbe, 0x6}, {0x8, 0x7}, {0x3, 0x3}, {0x7}, {0x37, 0x5}, {0x0, 0x6}, {0x6}, {0xb, 0x1}], "703c3eee43795533"}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r11, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r12 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r14, {0x0, 0xf}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfd42}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r11, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r11, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ffc300000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 1.377428068s ago: executing program 1 (id=13511): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000004000000000000000002030073797a320000008014000480080002400000000008000140000000050900010073797a310000003452535079e5d9d5f056e5b0741ed00030000000050a01020000000000000000010020000c00024000060000000000010900010073797a3100000000040004801400000011"], 0xb8}}, 0x200000d4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) close(r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$isdn(0x22, 0x3, 0x11) bind$isdn(r9, &(0x7f00000000c0)={0x22, 0x1, 0x9, 0x4d, 0x1}, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000004000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="00000000000000e778c9d0b9a408d294c7d6ded98e43000000c1730d3b188e75d25c7f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r10}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r10, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000001003c0012800e0001006970366772657461700000002800028014000700ff010000000000000000000000000001060011004e2000000600020010000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.305151254s ago: executing program 0 (id=13513): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.189759857s ago: executing program 6 (id=13514): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 1.188619831s ago: executing program 5 (id=13515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x1, @default, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r8 = accept4(r7, 0x0, 0x0, 0x80000) write(r8, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf00) 1.097646504s ago: executing program 3 (id=13516): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700"], 0x1ac}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="4be3edaaad02b57053912942dea6863ef0f76de5ddd6d552aff29f84404f4fc76713d49cfc998e8c51b796a4164523a1514d76928e2c162ec778c3b07bfe54d2561e076c06b8f1f34d2d058a07093a31ba2129d735b9965d6dac2468c6d7f851233a113ab7d5d15131c6117e13dc42eff096227226d522cc6df248a29df163c9acae02d47cf2465f1ef252f97f0894a5e7cef28a0fa40d6914", 0x99) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.083891794s ago: executing program 6 (id=13517): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x700, 0x800, 0x0, 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.07117084s ago: executing program 3 (id=13518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x34, 0xa5e7}}], 0x18}}], 0x1, 0x840) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd25, 0x25dfdbfc, {0x2, 0x8a, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 985.401801ms ago: executing program 3 (id=13519): socket$inet6(0xa, 0x3, 0x7) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000000080002000700339d060001"], 0x24}}, 0x4040080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socketpair(0x1, 0x80000, 0x5bb1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000003f00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25030000000800020601000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x8004}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r6, 0x0, &(0x7f00000001c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000200)}], 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 984.727772ms ago: executing program 6 (id=13520): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a6001c0000000000000000000000000b0001000000fe8000000000000000000000000000aa04"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r1, 0x10e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0000012abd7011ffdbdf1e80101009809543b5ff04c80a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x14200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8890}, 0x8000) 852.304737ms ago: executing program 3 (id=13521): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r0, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0xeb9, 0x7}, &(0x7f0000000040)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000100000000000c2049998356abff5560523dd850000007b000000b7080000000000007be442207ae023e6c68d04d1f9aaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff4f94", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000100d052673b005645d2865ae288ef748397bfe903b22dcedb81c9c19e16ed178e0b24a172b230c09946908c6fa23b1831f7ab9ba07ae3c4fa58da3509bfbd045a4c0c8a8c9f05d92832a1b0782b346d6e1fda7e303a600bcdaf2456ac08fcd50b37aa859a030bdb2d8af08f181f3e3256d0afd16f6730745788f72fd0173ce3f6641f1be676a7d6341b8a886ff0ea567632cb611a1b25ba2c16824103a5ababf5a3bbdc2454ec1de24bff7d8a31e3d3f27299527e83773a1e093731dc58cecabf7176", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES64=r4, @ANYRES16=r2, @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x8, 0x2, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0xffffffffffffff86, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x1404, 0x20, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r9}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xe0000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x25, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000600000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff8500000006000000498c0700890f0000850000003b00000018100000", @ANYRES32, @ANYBLOB="000000000000000018550000060000000000000000000400185d0000100000000000000000000000184b0000ffffffff00000000000000003f86c0ff10000000586b50001000000018510000040000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x10000, 0x95, &(0x7f0000000400)=""/149, 0x41100, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0x401, 0xe22}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r8, r11, r12, r13], &(0x7f00000006c0)=[{0x0, 0x3, 0x2, 0x8}, {0x3, 0x5, 0x10, 0x1}, {0x5, 0x5, 0xa, 0x8}, {0x1, 0x2, 0xe, 0x1}, {0x4, 0x1, 0x11, 0x5}, {0x3, 0x1, 0x7, 0xc}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, 0x0, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x64, &(0x7f0000000bc0)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0xd55, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd38945c3}, @in6={0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xea}, @in6={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}]}, &(0x7f0000000140)=0x10) sendto$ax25(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0xac) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="855bfd2c1800000000000000180000001800000002000000000000000000000d020000000000000000000002020000000000"], &(0x7f0000000200)=""/208, 0x32, 0xd0, 0x1}, 0x28) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r10, @ANYBLOB="0500"/20, @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="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"], 0x50) ppoll(&(0x7f0000000880)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x50}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0x1114}, {r14, 0x510}, {r16, 0x2000}], 0x6, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000900)={[0x80000001]}, 0x8) 836.41404ms ago: executing program 1 (id=13522): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000011, 0x6052, r0, 0xffffe000) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) write$cgroup_int(r9, &(0x7f0000000240)=0x10000, 0x12) 809.606448ms ago: executing program 6 (id=13523): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x10000}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 749.623388ms ago: executing program 1 (id=13524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000c22e2899dc2ac13af46f98123b683f07e490e0d8c03afccf45a4b7eb76295160000000000000005b16c3931377f3842f45e95639d53a9600d409523f8baceb4d5254d6000000130bbe507fd920778f659ae100c4231f000000000000004f985cc4c7a8d4a18f9e1b85", @ANYRES16=r4, @ANYBLOB="010000000000fcffffef1000000008000600000000001800018014000200776c616e3100"/46], 0x34}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20085}, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r1, &(0x7f0000000300)={{0x6, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendto$netrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000c22e2899dc2ac13af46f98123b683f07e490e0d8c03afccf45a4b7eb76295160000000000000005b16c3931377f3842f45e95639d53a9600d409523f8baceb4d5254d6000000130bbe507fd920778f659ae100c4231f000000000000004f985cc4c7a8d4a18f9e1b85", @ANYRES16=r4, @ANYBLOB="010000000000fcffffef1000000008000600000000001800018014000200776c616e3100"/46], 0x34}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20085}, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) 745.595024ms ago: executing program 6 (id=13525): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000400010002", 0x7) r1 = socket(0x1e, 0x4, 0x0) read$alg(r1, &(0x7f00000001c0)=""/80, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x25, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xfff1, 0xd}, {0xa66d7a8dcde29517, 0xc}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0xfffffffd, 0x2}, 0x1c) recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) unshare(0x4060000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="840100001000010028bd7000ffdbdf2564010100000000000000000000090000000000000000001264501a2a6f04292cddb2000000004e230000200080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, 0x0, &(0x7f0000000640)=0xfffffffffffffed6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500000000000800124000000a000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 728.168647ms ago: executing program 5 (id=13526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000011, 0x6052, r0, 0xffffe000) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) write$cgroup_int(r8, &(0x7f0000000240)=0x10000, 0x12) 621.772961ms ago: executing program 1 (id=13527): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) pipe(&(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) pipe(&(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 621.424739ms ago: executing program 1 (id=13528): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8e73eda5a8caf70487ea6edede6b8337d5ff348bd874de5b9a5058b85c0659031d237abfcdc40bd6b45d4845b08adc7bdaefa8099bef8d5f6cae07abc605dc651a21b04ae53f6d89d9fac3ec696ca9508a681ca65a4524242fae4d79e40840ce54330107125a916b03459f58e4e6c3215a97e391c069926a24d9486909ef1f0c210514e2cd81cbaa6352a2de4f5829eb670a6500c83eb8c8bd5edbe4005bfb524fce3d4796d028acf27fb9df67851db5d59b2f88d97aa591d607d602dbb9bb4211abbc8641610aae237e8d47f8381dced80019a4e9b3d0e6e2a978ffeec19fe0a6077eb48d3d4d478801eb1902bb3f8552d402dd8de49cb6bb7c78600c75e3bcf53bf58e391d6484423cbfe17cf95f3b30a41b849af63ffd6a7b5aaab0ce5ac6d78519430c27415fd46f150671ee860341b9c473937c498cc9aae0cb64a73f24780b4771b1ea51816bd68f19c49747c4caf0acd418517e88e1f82cd9d2d870abb33624483670269aac3d2fe75fff726d60fe1be2fc2abc47b98eb75ef2f7f4eca0b50450ef48d71921cd10307563d120eed0416e3dcf4b198ec8424d857ab872d9de56e614e3fba275bae2c21793bebe86cdfbe822bffd2c9be6e623fcbb441e202cf8107da69cb06f93f7956a4ee88de99dc881fac8894ea5acaf4cac4c65de055017ab0dcd1adab2a22e1c2a12e73316be0f4d07b405d6bf4adda88fac3f081f8f180b403a067184b26e35860e1064d87748390e6f63217d7db40f002f85c57c125be768d68600e2c795a83a3477481a41b8392a6ae2c3a51cec2da15980c299f528e658641960ef2983ae3e30955586dd9e6a6591d81645ed451dfc14b2c648a89655af1f66067350c6fb356610469ae7b20ccd14cbb0fb04f58bfda8f28f90ebade9b6f8017094f1d467d9df73dfcc48cea0307ca833b72978e64651c8eb429f2b36adab59251452b4abaa2ecb42eaf674b12b49081b40c324d6da586212f187c51e32c42b00622b3fcb1acfecaeb603cec87a0010c199a80cf184894b0992fe709613c672ec91587afe94c637cce86a50dfe9c695c8398e963e68156537014405962d20610846691a352dad6204a33f07f175e5dbdc89aab549ef4150320084fd999a090d86affac5ac371dfe5dd595b7459b39bd78ba5bb77469da251d4f9906356667a27ac58025eed8d0ded3a69cd2a6cae52ac4dd5799802421fd8a818c5bc787da162a42f5dec2175b4ff37a543d214bdf0cc071de0b77c9902ce7dbb42ace340e64a020100b677a73bc4449655f4165f074cb1b85cd491f18f3fbeb03ca708a91fe041a46433d8d8e1693dbff6333981c243b1d412c87741aca8e790f3ebb3151e3b44870ba74c64cc5c3011d7ac138ef0bd48f197a32c31fac8d53ba54ae114119328eb9e8825555ba29e9d45cbe656eeff1b4e39600695d3911ab4f5075c3d5691b731c50adc226d3ebf50d3c38561a5d0cef2c9d16e071bb8221ab4f85a802a63b7071402f88c7cf39cfc916f8622357b3234f3761f89cfbf3aded40c512a614702ae867e197510d3bdb4ee60df96c4e51b5a338b58b07e8ee62be9822e0d166ff874b8d1f9e4486c601d9b56a26eb0b83a80704dee19d10cc05c63b95f7d1efef88177645bc30d8473983ed552926d219bd0c3dbcb0fb464649624ba7a57f5163f49f33fb79a46e7ac9797e300262a843f15f644f5230546f3c62450242fe12a79bd44c61fd946165662b0bfbcffd12deb93e0cb82dc8cc66bebf0721b94a5fa0d66381540246ff78c6225a952ab984c06c07902ed42e40fcc9151b0a59be83f454698f302f349014082ff08bcecbf0b9dea7e32b063449d573ca1b6efc812acf382ef7b7e6cd206185e063c985b8c44fe38d62d4a8d3d15228406f3abed51fe90bae3ddc283069d46e0ebd3a8bb87e4e0eb116dff6fc881e8fd0e5032e6a6494cadfd85652ed1c9c2d7aa00e18ccbde0aa3c857c50ee86975aff735f633471ab8e6db33bfcefeae661bd1bd6dfb55a9a4b4f9be01fd15e27e03fc943ccdb91a799d2eb168d9fdeecd32c19169cc0443ebb8e2f681d773efff72530f61a288cfb49c0217b9a9223ceb3798390e15fbe9475975c05f22a7c4d1990f9400a249d32eec4a5773bea0d15cc0df06d223e057b3693ac906cf632da8c9092e52718bd9f16af452dacfab22cfc2c58a3168de9914570f1035ae9b3092346db21dda270393a992cb967dc074ae2fe8b545df855b9e8b251cac7935a842bda9e850a9efb5309cc0fb83a630dcb3684fec4999ed6c4cc91aea72961420523be74711ff4c3f16a5f6ee906dae87d2bbc194b2d8b7743c157f6c8d80e6f4e377cf05810bef82e51fa5c1e442018466071f7d572cae794fab5cfbbd8e8d398c3a2823e8ce4357572a32123312d0d3976d63dc2a00b2d474ad288762e768e31ab7b4f09e7f3cfcb7a48adbdbca43d30c9bc8f67d115bc34f24eaf0318bb5e2994ff0f8b62c13f46abebdd0846da71a5d106e62266ec3e5a3f2c7166628220568807b595dc73920a0a7a9f2644db70fc53fac0a547cf6cbefe7aee975e0159fe8f413eab912925757581d2fe97cc5f19343f329b2ef081397737414a822432b5f9fa2044aebda92c1d6a065401b70c20a6867fb93e8f6f575aa9fae3e67b6fc6e0418f58731d932b3e5bd1dddbb9854a25144a334d00bea2995d7a751d40a06c37372b05cc584aaf62b90fdd95f87ff53eab367600d50eebbbb4cf04f225824086cfaca6aa82b3e3433881f7ec32cd419780ed0de6fb2234368983282fb93b9d1a6bd96c3d14aff8272328db634b02bbbc5b8957c695e469f80fc50eac333b88303d0bf29c42c13a92a58a9bf30391cfe6a0c5df40cd5b7a8637cbece9a4f251e5aa4aa2fdf883d82d2a430f06416f0372911e426620b25d8839d2ac9d73cb782194f0daddd4caa68f1ff6892981c00d6812d21ffb5fcd9b1cd187d519040968aa2d7f4ccfcc236ffe2cae8d349f39feb3fa574272a428dfbfba0a735a349188b1396b96d1fc2e86069fc797de98985bf338e495d66cbed89c2f5f2cc78ec2b880f04627e5cd49e93bb606d241149b936ab29b790e22022361c483d760e07cabdfdd204114fc3808b7bb7cf977ffe0b8c58584364571578084f1dfbb592e47e0f01c020d02aafc8c83a56299f31836574923a706e7a46861502dfbf0e9d2893a38aca39a16cec44664541e092ec489abfa28128ebd73e7bbe062515384c69c656268ef42c37632ce2db76afd09e6de7928136cfaae1b4fdeaab590617584831a7eb19af64625ec2ca635f79f50caa48524b0fcd1e08a09bcf52e231f3487ab54fc77ae44e13a966976e9e9deaf8ab9da7f804fe6290e16629c6f83110f54e5c206798033c614be334a5ee04f4ecb30f58371eeb3664eab1d00f52725992897279d21d475cefbe2345a7f1df6e916a806e7c39b651866f6c1108d00990673ca858d8af73a26a74e1f8d7818859e7d0123224f866ed0745382b2a29f5374d7c6c0fa54ddf743d89c85dc56cfab74ee786d054a5f4f1db15d85e9fe1a7fdaa3746d9e7429735f2253cb2a600b81f969c7c7e56f22b47f15aa700b3369102ea105106b96cebd1161673ae4725a4d96421833f65f76c64de5aa7957b0df8ab64583e8d5018faa1f4e0376f1d38103ac78403f65f809619c3a9fe43c6b3493d29c52d4c230a39914b1b49c627fba1612c6479205c256ef023cb52ca142c6c37391ec9f74ba334ddebce6438cdf6e99527e68585324cbf6547872366d2d0b7db30a33528a745cbc8820e52a3cf77e50a76935ff4a7f41dfc58c86ff05e24436faf28f423467105b314bd6e4edbf1a352840728e8fe4dd79ee5f770dd987eb62ba3ff5c26c9de6685afefa5a227a4a6dfc1d23ba09eefab45402b138b53b83873a3797096d4b62450c579a894be0c05b947646ef2039ed37955155b58fae377c727605979505b037a0a72e622b883cd1001f69da95ffdd143e68e1fc2cc42db37bde33184ff85c89713a722e1eba4ad292ec9ccd1c8c18674e77bf6394edd47ad635b278ec09921020507104485a6453585c385d0cd4cf611d0c6da50ec3d34eecaf3bba0ae5051a55450ae2e40c4fd0ba420b04b2e1b4d1592e8b80f92d40d42de588e719fe2b022c30a5187c64cc5c48679f680387464d3681edea585006a2e852be2266e8c4230a6bf60dd8efb0e3c1b4dcfed2844d495957ae734470d0199a0e0278f80018a39e9c82c15cb9c73a3deb2579444b414ca7061bfb4f599fe3968334c0ebde54b9a046370bb7d3227c9dd23e8edcf8b07aabf328bb164c79c6df5f0bd46a276413dee370e32da823d5e9839937e72b6480ac0439d104cadba1a8d6d0542f73f720ecdafece52fc6fa291e44b3852af376a3aceb05c2c293a2576175a3b4135ff6799a232d9c3907fcdd49e0d97e80ece0135dac08c37a16a93046d7ca3f3db91d0c28447522759017980f4d3321981ab53000fbe5293b396f6163e3ae016329bc42f6c958d648a30ed5c6e14eeef235fb74cbc24e183a0f89ee89b3c51a8b7106afefb2e406a026619793fe4c3f4bdc7d66fbf98a740afb32485ae5451b905c22bf63f9b3b42b30a3287f266559db4067d1c00d2ffee58378a44614dafed9107d97d9c3048f2bdba374ccc827f302dae2a4637354cedfc0a2d7f2d2462f5ed43f1b682e8167a2081a20741ed8bb94791526355e14a6b191aee05ef45f5d5cd83cf8fa66e5c5b4f38d7bedc90da431a285b239e13a3f9e68399da38eda883b4e443c1d557fc4cec84ce9bccf67a652e7d94c8ff57c277fb0ce233ea35929d98467ea8643cfc0464827aa26e381293c0efc049b4707416551c7d57c40d232a660b2c8d722dcd1cde8629e2b30b476c2ea9da3beec02a6b38f507230ee700f871338007cdb06d3be80450fb20f8493668183d776c902d044d4152c8a4e9ffa909d82d1b6aa27ca390706d7690b307436de72b4a81c094688397281810e98053b8c622bdc1194f54aab47fe1d3d9512733ee3e6b5b7688a90960929a0afee9580440b8964c450e3caeefcbe24c1bf6e74336ad4954f62c874a4a1ba019cae59bd1eb2ffee6174e04324348d92b588a31271a3ac59b91adb5eb22cf5af39d7cb8a7d3d8916aa9cb772c53217c18c7caa1442f9046ea806e48c6b3542d97916091d9485f0d0652427e6224346df7e4ad0820cb532fec7079c32a1dbb09cfdf8dab5f9bf240620937a91f504e7ca5a", 0xfbe}], 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) pipe(0x0) 601.92351ms ago: executing program 5 (id=13529): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x4}, 0x38) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 364.356794ms ago: executing program 0 (id=13530): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4a, &(0x7f0000000000)=0x2, 0x4) 297.669569ms ago: executing program 0 (id=13531): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'gretap0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x23, "4372070025f7f2bf568d00000000ffffffff000000586c9a7affa71b5e223700000000"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket(0x2000000015, 0x80005, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000100001002ebd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b432000001000500140003006e657464657673696d3000000000000068001680640001800c000500020000009a04000054000c80140001000800000030020000810000008100000014"], 0x9c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @loopback}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xedef}) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000020000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000180ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000001100020095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf250008000700000000", @ANYRES32=r12, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r11, @ANYBLOB="14000c00fe8000000000000000000000000000bb08000500ac14143a0c0003000300000000000000080002000000000005000d000a00000008000500ffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20004080) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES16=r10], 0x248}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 24.829678ms ago: executing program 3 (id=13532): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010000500efff00000000037f00040000", @ANYRES32=r0, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) 0s ago: executing program 3 (id=13533): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, 0x4}, 0x6) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x26) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): 007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1132.500702][T15362] [ 1132.741536][ T5870] Bluetooth: hci1: command tx timeout [ 1132.783549][T15370] netlink: 'syz.3.12761': attribute type 10 has an invalid length. [ 1132.832380][T15370] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1132.857826][T15374] __nla_validate_parse: 1 callbacks suppressed [ 1132.857844][T15374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12761'. [ 1132.901786][T15056] veth0_macvtap: entered promiscuous mode [ 1132.927956][T15056] veth1_macvtap: entered promiscuous mode [ 1132.982713][T15056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.014865][T15056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.063057][ T2332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.118060][ T2332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.135752][ T2332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.155372][T15386] FAULT_INJECTION: forcing a failure. [ 1133.155372][T15386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1133.174343][ T2332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.187135][T15386] CPU: 0 UID: 0 PID: 15386 Comm: syz.0.12766 Not tainted syzkaller #0 PREEMPT(full) [ 1133.187162][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1133.187176][T15386] Call Trace: [ 1133.187183][T15386] [ 1133.187190][T15386] dump_stack_lvl+0x189/0x250 [ 1133.187214][T15386] ? __pfx____ratelimit+0x10/0x10 [ 1133.187235][T15386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.187252][T15386] ? __pfx__printk+0x10/0x10 [ 1133.187273][T15386] ? lock_acquire+0x5f/0x360 [ 1133.187300][T15386] should_fail_ex+0x414/0x560 [ 1133.187323][T15386] prepare_alloc_pages+0x213/0x610 [ 1133.187344][T15386] __alloc_frozen_pages_noprof+0x123/0x370 [ 1133.187364][T15386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1133.187387][T15386] alloc_pages_bulk_noprof+0x560/0x710 [ 1133.187407][T15386] ? alloc_pages_noprof+0xbe/0x190 [ 1133.187436][T15386] kasan_populate_vmalloc+0xba/0x1a0 [ 1133.187459][T15386] alloc_vmap_area+0xd51/0x1490 [ 1133.187486][T15386] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1133.187507][T15386] ? __kasan_kmalloc+0x93/0xb0 [ 1133.187528][T15386] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 1133.187550][T15386] ? __sys_bpf+0x60f/0x870 [ 1133.187571][T15386] ? __get_vm_area_node+0x13f/0x300 [ 1133.187590][T15386] ? dev_map_alloc+0x1c9/0x540 [ 1133.187606][T15386] __get_vm_area_node+0x1f8/0x300 [ 1133.187629][T15386] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1133.187654][T15386] ? dev_map_alloc+0x1c9/0x540 [ 1133.187679][T15386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1133.187702][T15386] ? rcu_is_watching+0x15/0xb0 [ 1133.187720][T15386] ? trace_kmalloc+0x1f/0xd0 [ 1133.187740][T15386] ? __kmalloc_node_noprof+0x293/0x4e0 [ 1133.187760][T15386] ? bpf_map_area_alloc+0x64/0x180 [ 1133.187783][T15386] bpf_map_area_alloc+0x12d/0x180 [ 1133.187806][T15386] ? dev_map_alloc+0x1c9/0x540 [ 1133.187822][T15386] dev_map_alloc+0x1c9/0x540 [ 1133.187839][T15386] map_create+0xaa0/0x14d0 [ 1133.187858][T15386] ? __might_fault+0xcc/0x130 [ 1133.187879][T15386] ? security_bpf+0x7e/0x300 [ 1133.187903][T15386] __sys_bpf+0x60f/0x870 [ 1133.187924][T15386] ? __pfx___sys_bpf+0x10/0x10 [ 1133.187950][T15386] ? ksys_write+0x22a/0x250 [ 1133.187973][T15386] ? __pfx_ksys_write+0x10/0x10 [ 1133.187994][T15386] ? rcu_is_watching+0x15/0xb0 [ 1133.188014][T15386] __x64_sys_bpf+0x7c/0x90 [ 1133.188034][T15386] do_syscall_64+0xfa/0x3b0 [ 1133.188048][T15386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.188065][T15386] ? clear_bhb_loop+0x60/0xb0 [ 1133.188082][T15386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.188098][T15386] RIP: 0033:0x7f5b8a38ebe9 [ 1133.188113][T15386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.188127][T15386] RSP: 002b:00007f5b8b1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1133.188144][T15386] RAX: ffffffffffffffda RBX: 00007f5b8a5b5fa0 RCX: 00007f5b8a38ebe9 [ 1133.188157][T15386] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 1133.188169][T15386] RBP: 00007f5b8b1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.188180][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.188190][T15386] R13: 00007f5b8a5b6038 R14: 00007f5b8a5b5fa0 R15: 00007ffcf2837148 [ 1133.188210][T15386] [ 1133.513137][T15389] netlink: 84 bytes leftover after parsing attributes in process `syz.6.12767'. [ 1133.616421][ T2332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.640270][ T2332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.657448][T15396] netlink: 1 bytes leftover after parsing attributes in process `syz.6.12769'. [ 1133.753494][T26127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.773254][T26127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.991960][T15411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12773'. [ 1134.003184][T15411] tc_dump_action: action bad kind [ 1134.307942][T15429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12779'. [ 1134.467964][T15417] lo speed is unknown, defaulting to 1000 [ 1134.475536][T15417] lo speed is unknown, defaulting to 1000 [ 1135.199196][T15452] Bluetooth: MGMT ver 1.23 [ 1135.320765][T15465] netlink: 'syz.1.12789': attribute type 15 has an invalid length. [ 1135.333909][T15464] FAULT_INJECTION: forcing a failure. [ 1135.333909][T15464] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.390928][T15464] CPU: 0 UID: 0 PID: 15464 Comm: syz.5.12793 Not tainted syzkaller #0 PREEMPT(full) [ 1135.390953][T15464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1135.390963][T15464] Call Trace: [ 1135.390971][T15464] [ 1135.390978][T15464] dump_stack_lvl+0x189/0x250 [ 1135.391003][T15464] ? __pfx____ratelimit+0x10/0x10 [ 1135.391025][T15464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1135.391043][T15464] ? __pfx__printk+0x10/0x10 [ 1135.391066][T15464] ? fs_reclaim_acquire+0x7d/0x100 [ 1135.391089][T15464] ? rcu_is_watching+0x15/0xb0 [ 1135.391105][T15464] ? __pfx___might_resched+0x10/0x10 [ 1135.391120][T15464] ? lock_acquire+0x5f/0x360 [ 1135.391144][T15464] should_fail_ex+0x414/0x560 [ 1135.391167][T15464] should_failslab+0xa8/0x100 [ 1135.391193][T15464] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1135.391217][T15464] ? __alloc_skb+0x112/0x2d0 [ 1135.391234][T15464] __alloc_skb+0x112/0x2d0 [ 1135.391252][T15464] netlink_sendmsg+0x5c6/0xb30 [ 1135.391274][T15464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.391292][T15464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1135.391309][T15464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1135.391328][T15464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1135.391345][T15464] __sock_sendmsg+0x21c/0x270 [ 1135.391368][T15464] ____sys_sendmsg+0x505/0x830 [ 1135.391389][T15464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1135.391412][T15464] ? import_iovec+0x74/0xa0 [ 1135.391432][T15464] ___sys_sendmsg+0x21f/0x2a0 [ 1135.391452][T15464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1135.391485][T15464] ? __fget_files+0x2a/0x420 [ 1135.391501][T15464] ? __fget_files+0x3a0/0x420 [ 1135.391520][T15464] __x64_sys_sendmsg+0x19b/0x260 [ 1135.391541][T15464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1135.391564][T15464] ? __pfx_ksys_write+0x10/0x10 [ 1135.391584][T15464] ? rcu_is_watching+0x15/0xb0 [ 1135.391603][T15464] ? rcu_is_watching+0x15/0xb0 [ 1135.391622][T15464] do_syscall_64+0xfa/0x3b0 [ 1135.391639][T15464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.391657][T15464] ? clear_bhb_loop+0x60/0xb0 [ 1135.391676][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.391691][T15464] RIP: 0033:0x7f89e6f8ebe9 [ 1135.391707][T15464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.391724][T15464] RSP: 002b:00007f89e7d76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.391743][T15464] RAX: ffffffffffffffda RBX: 00007f89e71b5fa0 RCX: 00007f89e6f8ebe9 [ 1135.391757][T15464] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1135.391769][T15464] RBP: 00007f89e7d76090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.391780][T15464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.391791][T15464] R13: 00007f89e71b6038 R14: 00007f89e71b5fa0 R15: 00007ffca61cd1a8 [ 1135.391811][T15464] [ 1135.811181][T15472] lo speed is unknown, defaulting to 1000 [ 1135.818156][T15472] lo speed is unknown, defaulting to 1000 [ 1135.846354][T15479] netlink: 'syz.1.12799': attribute type 1 has an invalid length. [ 1135.928911][T15484] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1136.166656][T15508] netlink: 'syz.3.12808': attribute type 11 has an invalid length. [ 1136.183468][T15508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12808'. [ 1136.298638][T15520] netlink: 16386 bytes leftover after parsing attributes in process `syz.6.12811'. [ 1136.342699][T15514] nbd29: detected capacity change from 0 to 549764202496 [ 1136.380334][T15514] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12809'. [ 1136.396458][ T5870] block nbd29: Receive control failed (result -32) [ 1136.574637][T15526] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12813'. [ 1136.638838][T15531] netlink: 'syz.1.12816': attribute type 1 has an invalid length. [ 1136.863976][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12822'. [ 1136.876648][T15545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1136.967972][T15539] lo speed is unknown, defaulting to 1000 [ 1136.974860][T15539] lo speed is unknown, defaulting to 1000 [ 1137.305807][T15550] lo speed is unknown, defaulting to 1000 [ 1137.328808][T15550] lo speed is unknown, defaulting to 1000 [ 1137.506877][T15563] netlink: 'syz.5.12829': attribute type 1 has an invalid length. [ 1137.592108][T15570] FAULT_INJECTION: forcing a failure. [ 1137.592108][T15570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.616563][T15563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1137.624505][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.0.12831 Not tainted syzkaller #0 PREEMPT(full) [ 1137.624529][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1137.624541][T15570] Call Trace: [ 1137.624547][T15570] [ 1137.624555][T15570] dump_stack_lvl+0x189/0x250 [ 1137.624580][T15570] ? __pfx____ratelimit+0x10/0x10 [ 1137.624604][T15570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1137.624624][T15570] ? __pfx__printk+0x10/0x10 [ 1137.624654][T15570] ? rcu_is_watching+0x15/0xb0 [ 1137.624672][T15570] ? lock_acquire+0x5f/0x360 [ 1137.624695][T15570] ? __might_fault+0xb0/0x130 [ 1137.624718][T15570] ? rcu_is_watching+0x15/0xb0 [ 1137.624736][T15570] should_fail_ex+0x414/0x560 [ 1137.624760][T15570] _copy_from_user+0x2d/0xb0 [ 1137.624780][T15570] __copy_msghdr+0x3c5/0x5b0 [ 1137.624801][T15570] ___sys_sendmsg+0x1a5/0x2a0 [ 1137.624820][T15570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.624841][T15570] ? kstrtouint+0x6e/0xe0 [ 1137.624872][T15570] ? __fget_files+0x2a/0x420 [ 1137.624886][T15570] ? __fget_files+0x3a0/0x420 [ 1137.624905][T15570] __sys_sendmmsg+0x227/0x430 [ 1137.624925][T15570] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1137.624939][T15570] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1137.624966][T15570] ? ksys_write+0x22a/0x250 [ 1137.624987][T15570] ? __pfx_ksys_write+0x10/0x10 [ 1137.625005][T15570] ? rcu_is_watching+0x15/0xb0 [ 1137.625023][T15570] __x64_sys_sendmmsg+0xa0/0xc0 [ 1137.625040][T15570] do_syscall_64+0xfa/0x3b0 [ 1137.625056][T15570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.625073][T15570] ? clear_bhb_loop+0x60/0xb0 [ 1137.625091][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.625108][T15570] RIP: 0033:0x7f5b8a38ebe9 [ 1137.625124][T15570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.625138][T15570] RSP: 002b:00007f5b8b1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1137.625159][T15570] RAX: ffffffffffffffda RBX: 00007f5b8a5b5fa0 RCX: 00007f5b8a38ebe9 [ 1137.625173][T15570] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000007 [ 1137.625185][T15570] RBP: 00007f5b8b1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.625197][T15570] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 1137.625208][T15570] R13: 00007f5b8a5b6038 R14: 00007f5b8a5b5fa0 R15: 00007ffcf2837148 [ 1137.625230][T15570] [ 1137.650131][T15569] bond1: (slave geneve2): making interface the new active one [ 1137.651509][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1137.693461][T15569] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1137.868764][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1137.903145][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1137.920558][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1137.929237][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1138.185932][T15592] __nla_validate_parse: 1 callbacks suppressed [ 1138.185951][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12840'. [ 1138.230248][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12840'. [ 1138.266841][T15592] macvlan2: entered promiscuous mode [ 1138.442541][T15571] lo speed is unknown, defaulting to 1000 [ 1138.449287][T15571] lo speed is unknown, defaulting to 1000 [ 1138.595253][T15609] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1138.830264][T15620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.837755][T15620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.875422][T15620] netlink: 'syz.5.12849': attribute type 2 has an invalid length. [ 1138.900701][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12849'. [ 1138.981588][T15620] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1139.158010][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12857'. [ 1139.171622][T15650] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12858'. [ 1139.238646][T15571] chnl_net:caif_netlink_parms(): no params data found [ 1139.411396][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.418849][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.455563][T15571] bridge_slave_0: entered allmulticast mode [ 1139.469177][T15571] bridge_slave_0: entered promiscuous mode [ 1139.487682][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.505923][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.528436][T15571] bridge_slave_1: entered allmulticast mode [ 1139.560389][T15571] bridge_slave_1: entered promiscuous mode [ 1139.667071][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12867'. [ 1139.768090][T15677] netlink: 'syz.5.12868': attribute type 10 has an invalid length. [ 1139.819744][T15683] netlink: 'syz.5.12868': attribute type 10 has an invalid length. [ 1139.859507][T15677] bond0: (slave dummy0): Releasing backup interface [ 1139.904930][T15677] team0: Port device dummy0 added [ 1139.915893][T15673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12867'. [ 1139.954341][T15683] team0: Port device dummy0 removed [ 1139.972868][T15683] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1139.987175][T15571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.990610][ T5182] Bluetooth: hci5: command tx timeout [ 1140.008411][T15689] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12871'. [ 1140.035998][T15571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.128093][T15571] team0: Port device team_slave_0 added [ 1140.152011][T15571] team0: Port device team_slave_1 added [ 1140.201967][T15691] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12872'. [ 1140.264630][T15571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.279629][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.309495][T15571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.322182][T15571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.329148][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.355914][T15571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.425614][T15571] hsr_slave_0: entered promiscuous mode [ 1140.432235][T15571] hsr_slave_1: entered promiscuous mode [ 1140.438467][T15571] debugfs: 'hsr0' already exists in 'hsr' [ 1140.452588][T15571] Cannot create hsr debugfs directory [ 1140.506469][T15697] lo speed is unknown, defaulting to 1000 [ 1140.518948][T15697] lo speed is unknown, defaulting to 1000 [ 1140.545610][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12881'. [ 1140.556511][T15710] netlink: 'syz.1.12881': attribute type 1 has an invalid length. [ 1141.039169][T15571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1141.303976][T15571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1141.349516][T15571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1141.435417][T15571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1141.983457][T15571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.034507][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.060067][ T5182] Bluetooth: hci5: command tx timeout [ 1142.078799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.085971][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.144021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.151234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.267978][T15571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1142.601247][T15571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.740725][T15793] lo speed is unknown, defaulting to 1000 [ 1142.757610][T15793] lo speed is unknown, defaulting to 1000 [ 1142.850876][T15803] netlink: 'syz.0.12908': attribute type 10 has an invalid length. [ 1142.874313][T15803] team0: Port device dummy0 added [ 1143.052214][T15809] netlink: 'syz.3.12909': attribute type 10 has an invalid length. [ 1143.069730][T15803] netlink: 'syz.0.12908': attribute type 10 has an invalid length. [ 1143.108682][T15809] bond0: (slave dummy0): Releasing backup interface [ 1143.127162][T15809] team0: Port device dummy0 added [ 1143.127511][T15811] netlink: 'syz.3.12909': attribute type 10 has an invalid length. [ 1143.150812][T15803] team0: Port device dummy0 removed [ 1143.202531][T15803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1143.297462][T15811] team0: Port device dummy0 removed [ 1143.352602][T15811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1143.831029][T15571] veth0_vlan: entered promiscuous mode [ 1143.879025][T15571] veth1_vlan: entered promiscuous mode [ 1143.999339][T15571] veth0_macvtap: entered promiscuous mode [ 1144.019589][T15828] FAULT_INJECTION: forcing a failure. [ 1144.019589][T15828] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.025727][T15571] veth1_macvtap: entered promiscuous mode [ 1144.080308][T15828] CPU: 0 UID: 0 PID: 15828 Comm: syz.3.12915 Not tainted syzkaller #0 PREEMPT(full) [ 1144.080335][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1144.080346][T15828] Call Trace: [ 1144.080353][T15828] [ 1144.080361][T15828] dump_stack_lvl+0x189/0x250 [ 1144.080387][T15828] ? __pfx____ratelimit+0x10/0x10 [ 1144.080411][T15828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.080431][T15828] ? __pfx__printk+0x10/0x10 [ 1144.080456][T15828] ? __pfx___might_resched+0x10/0x10 [ 1144.080473][T15828] ? lock_acquire+0x5f/0x360 [ 1144.080498][T15828] should_fail_ex+0x414/0x560 [ 1144.080522][T15828] should_failslab+0xa8/0x100 [ 1144.080547][T15828] __kmalloc_noprof+0xcb/0x4f0 [ 1144.080568][T15828] ? kfree+0x4d/0x440 [ 1144.080586][T15828] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1144.080607][T15828] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1144.080627][T15828] ? tomoyo_domain+0xd9/0x130 [ 1144.080647][T15828] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1144.080670][T15828] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1144.080692][T15828] ? lock_release+0x4b/0x3e0 [ 1144.080715][T15828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1144.080739][T15828] ? rcu_is_watching+0x15/0xb0 [ 1144.080757][T15828] ? lock_release+0x4b/0x3e0 [ 1144.080778][T15828] ? vfs_write+0x956/0xb30 [ 1144.080802][T15828] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1144.080827][T15828] ? lock_release+0x4b/0x3e0 [ 1144.080852][T15828] ? __fget_files+0x2a/0x420 [ 1144.080868][T15828] ? __fget_files+0x3a0/0x420 [ 1144.080883][T15828] ? __fget_files+0x2a/0x420 [ 1144.080900][T15828] security_file_ioctl+0xcb/0x2d0 [ 1144.080923][T15828] __se_sys_ioctl+0x47/0x170 [ 1144.080945][T15828] do_syscall_64+0xfa/0x3b0 [ 1144.080962][T15828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.080979][T15828] ? clear_bhb_loop+0x60/0xb0 [ 1144.080999][T15828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.081016][T15828] RIP: 0033:0x7f3949b8ebe9 [ 1144.081032][T15828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.081047][T15828] RSP: 002b:00007f394aaad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1144.081067][T15828] RAX: ffffffffffffffda RBX: 00007f3949db5fa0 RCX: 00007f3949b8ebe9 [ 1144.081081][T15828] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 1144.081093][T15828] RBP: 00007f394aaad090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.081106][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.081117][T15828] R13: 00007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1144.081139][T15828] [ 1144.081147][T15828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1144.087303][T15571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.171474][ T5182] Bluetooth: hci5: command tx timeout [ 1144.181994][T15571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.466726][ T2332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.476409][ T2332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.486139][T15839] __nla_validate_parse: 4 callbacks suppressed [ 1144.486158][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12920'. [ 1144.534099][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12920'. [ 1144.701221][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12920'. [ 1144.713409][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12920'. [ 1144.726233][T15851] FAULT_INJECTION: forcing a failure. [ 1144.726233][T15851] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.726661][ T2332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.739486][T15851] CPU: 0 UID: 0 PID: 15851 Comm: syz.0.12924 Not tainted syzkaller #0 PREEMPT(full) [ 1144.739510][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1144.739521][T15851] Call Trace: [ 1144.739528][T15851] [ 1144.739536][T15851] dump_stack_lvl+0x189/0x250 [ 1144.739561][T15851] ? __pfx____ratelimit+0x10/0x10 [ 1144.739585][T15851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1144.739605][T15851] ? __pfx__printk+0x10/0x10 [ 1144.739628][T15851] ? __pfx___might_resched+0x10/0x10 [ 1144.739645][T15851] ? lock_acquire+0x5f/0x360 [ 1144.739669][T15851] should_fail_ex+0x414/0x560 [ 1144.739692][T15851] should_failslab+0xa8/0x100 [ 1144.739717][T15851] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1144.739739][T15851] ? __alloc_skb+0x112/0x2d0 [ 1144.739757][T15851] __alloc_skb+0x112/0x2d0 [ 1144.739778][T15851] alloc_skb_with_frags+0xca/0x890 [ 1144.739803][T15851] sock_alloc_send_pskb+0x857/0x990 [ 1144.739830][T15851] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1144.739854][T15851] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1144.739876][T15851] unix_dgram_sendmsg+0x461/0x1850 [ 1144.739908][T15851] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1144.739929][T15851] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1144.739950][T15851] ? is_bpf_text_address+0x26/0x2b0 [ 1144.739973][T15851] ? rcu_is_watching+0x15/0xb0 [ 1144.739991][T15851] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1144.740014][T15851] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 1144.740037][T15851] __sock_sendmsg+0x21c/0x270 [ 1144.740060][T15851] ____sys_sendmsg+0x52d/0x830 [ 1144.740080][T15851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1144.740102][T15851] ? import_iovec+0x74/0xa0 [ 1144.740129][T15851] ___sys_sendmsg+0x21f/0x2a0 [ 1144.740148][T15851] ? __pfx____sys_sendmsg+0x10/0x10 [ 1144.740168][T15851] ? kstrtouint+0x6e/0xe0 [ 1144.740202][T15851] ? rcu_is_watching+0x15/0xb0 [ 1144.740219][T15851] ? lock_release+0x4b/0x3e0 [ 1144.740242][T15851] ? __might_fault+0xcc/0x130 [ 1144.740265][T15851] __sys_sendmmsg+0x227/0x430 [ 1144.740285][T15851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1144.740302][T15851] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1144.740330][T15851] ? ksys_write+0x22a/0x250 [ 1144.740352][T15851] ? __pfx_ksys_write+0x10/0x10 [ 1144.740372][T15851] ? rcu_is_watching+0x15/0xb0 [ 1144.740391][T15851] __x64_sys_sendmmsg+0xa0/0xc0 [ 1144.740410][T15851] do_syscall_64+0xfa/0x3b0 [ 1144.740427][T15851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.740444][T15851] ? clear_bhb_loop+0x60/0xb0 [ 1144.740463][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.740480][T15851] RIP: 0033:0x7f5b8a38ebe9 [ 1144.740496][T15851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.740512][T15851] RSP: 002b:00007f5b8b1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1144.740532][T15851] RAX: ffffffffffffffda RBX: 00007f5b8a5b5fa0 RCX: 00007f5b8a38ebe9 [ 1144.740546][T15851] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1144.740559][T15851] RBP: 00007f5b8b1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.740570][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1144.740580][T15851] R13: 00007f5b8a5b6038 R14: 00007f5b8a5b5fa0 R15: 00007ffcf2837148 [ 1144.740601][T15851] [ 1145.092048][T15840] lo speed is unknown, defaulting to 1000 [ 1145.098637][T15840] lo speed is unknown, defaulting to 1000 [ 1145.125122][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.155422][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.249864][ T2332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.297116][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.307394][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.339650][T15867] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12930'. [ 1145.604755][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12931'. [ 1145.712611][T15859] lo speed is unknown, defaulting to 1000 [ 1145.722147][T15859] lo speed is unknown, defaulting to 1000 [ 1145.897367][T15885] netlink: 84 bytes leftover after parsing attributes in process `syz.5.12934'. [ 1146.113316][T15889] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12935'. [ 1146.220676][ T5182] Bluetooth: hci5: command tx timeout [ 1146.482474][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12941'. [ 1146.496783][T15904] FAULT_INJECTION: forcing a failure. [ 1146.496783][T15904] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.514616][T15904] CPU: 1 UID: 0 PID: 15904 Comm: syz.3.12941 Not tainted syzkaller #0 PREEMPT(full) [ 1146.514643][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1146.514655][T15904] Call Trace: [ 1146.514662][T15904] [ 1146.514671][T15904] dump_stack_lvl+0x189/0x250 [ 1146.514696][T15904] ? __pfx____ratelimit+0x10/0x10 [ 1146.514721][T15904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1146.514754][T15904] ? __pfx__printk+0x10/0x10 [ 1146.514777][T15904] ? fs_reclaim_acquire+0x7d/0x100 [ 1146.514802][T15904] ? __pfx___might_resched+0x10/0x10 [ 1146.514818][T15904] ? lock_acquire+0x5f/0x360 [ 1146.514842][T15904] should_fail_ex+0x414/0x560 [ 1146.514866][T15904] should_failslab+0xa8/0x100 [ 1146.514890][T15904] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1146.514913][T15904] ? fib_table_insert+0x4a7/0x1b50 [ 1146.514933][T15904] fib_table_insert+0x4a7/0x1b50 [ 1146.514951][T15904] ? inet_dev_addr_type+0x30/0x50 [ 1146.514971][T15904] ? rcu_is_watching+0x15/0xb0 [ 1146.514989][T15904] ? rcu_is_watching+0x15/0xb0 [ 1146.515004][T15904] ? inet_dev_addr_type+0x30/0x50 [ 1146.515024][T15904] ? lock_release+0x4b/0x3e0 [ 1146.515051][T15904] fib_magic+0x2c4/0x390 [ 1146.515073][T15904] ? __pfx_fib_magic+0x10/0x10 [ 1146.515092][T15904] ? queue_work_on+0x1ed/0x270 [ 1146.515117][T15904] ? mutex_is_locked+0x17/0x50 [ 1146.515133][T15904] ? rtnl_is_locked+0x15/0x20 [ 1146.515154][T15904] fib_add_ifaddr+0x144/0x5f0 [ 1146.515178][T15904] fib_inetaddr_event+0x12e/0x190 [ 1146.515201][T15904] notifier_call_chain+0x1b3/0x3e0 [ 1146.515223][T15904] blocking_notifier_call_chain+0x6a/0x90 [ 1146.515243][T15904] __inet_insert_ifa+0xa13/0xbf0 [ 1146.515270][T15904] ? __pfx___inet_insert_ifa+0x10/0x10 [ 1146.515291][T15904] ? __kasan_kmalloc+0x93/0xb0 [ 1146.515313][T15904] ? inet_rtm_newaddr+0x8d7/0x18b0 [ 1146.515336][T15904] inet_rtm_newaddr+0xf3a/0x18b0 [ 1146.515360][T15904] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1146.515383][T15904] ? lock_release+0x4b/0x3e0 [ 1146.515405][T15904] ? bpf_lsm_capable+0x9/0x20 [ 1146.515427][T15904] ? security_capable+0x7e/0x2e0 [ 1146.515453][T15904] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1146.515473][T15904] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1146.515498][T15904] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1146.515521][T15904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1146.515545][T15904] ? __netlink_lookup+0xbd/0x810 [ 1146.515561][T15904] ? rcu_is_watching+0x15/0xb0 [ 1146.515580][T15904] ? rcu_is_watching+0x15/0xb0 [ 1146.515599][T15904] netlink_rcv_skb+0x208/0x470 [ 1146.515624][T15904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1146.515649][T15904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.515683][T15904] netlink_unicast+0x82f/0x9e0 [ 1146.515710][T15904] ? __pfx_netlink_unicast+0x10/0x10 [ 1146.515734][T15904] ? netlink_sendmsg+0x642/0xb30 [ 1146.515755][T15904] ? skb_put+0x11b/0x210 [ 1146.515774][T15904] netlink_sendmsg+0x805/0xb30 [ 1146.515795][T15904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.515813][T15904] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1146.515830][T15904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1146.515849][T15904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.515865][T15904] __sock_sendmsg+0x21c/0x270 [ 1146.515888][T15904] ____sys_sendmsg+0x505/0x830 [ 1146.515909][T15904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.515931][T15904] ? import_iovec+0x74/0xa0 [ 1146.515953][T15904] ___sys_sendmsg+0x21f/0x2a0 [ 1146.515972][T15904] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.516006][T15904] ? __fget_files+0x2a/0x420 [ 1146.516021][T15904] ? __fget_files+0x3a0/0x420 [ 1146.516041][T15904] __x64_sys_sendmsg+0x19b/0x260 [ 1146.516060][T15904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.516084][T15904] ? __pfx_ksys_write+0x10/0x10 [ 1146.516107][T15904] ? rcu_is_watching+0x15/0xb0 [ 1146.516126][T15904] do_syscall_64+0xfa/0x3b0 [ 1146.516144][T15904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.516163][T15904] ? clear_bhb_loop+0x60/0xb0 [ 1146.516182][T15904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.516199][T15904] RIP: 0033:0x7f3949b8ebe9 [ 1146.516215][T15904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1146.516231][T15904] RSP: 002b:00007f394aaad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.516250][T15904] RAX: ffffffffffffffda RBX: 00007f3949db5fa0 RCX: 00007f3949b8ebe9 [ 1146.516264][T15904] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1146.516276][T15904] RBP: 00007f394aaad090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.516288][T15904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.516299][T15904] R13: 00007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1146.516320][T15904] [ 1147.039847][T15911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12943'. [ 1147.083618][T15914] bridge0: port 3(erspan0) entered blocking state [ 1147.091000][T15914] bridge0: port 3(erspan0) entered disabled state [ 1147.098504][T15914] erspan0: entered allmulticast mode [ 1147.105556][T15914] erspan0: entered promiscuous mode [ 1147.236075][T15914] erspan0: left allmulticast mode [ 1147.243821][T15914] erspan0: left promiscuous mode [ 1147.248963][T15914] bridge0: port 3(erspan0) entered disabled state [ 1147.275223][T15919] bond0: entered promiscuous mode [ 1147.294288][T15919] bond_slave_0: entered promiscuous mode [ 1147.304078][T15919] bond_slave_1: entered promiscuous mode [ 1147.326550][T15919] dummy0: entered promiscuous mode [ 1147.356590][T15919] batadv0: entered promiscuous mode [ 1147.362691][T15919] hsr1: entered allmulticast mode [ 1147.367874][T15919] bond0: entered allmulticast mode [ 1147.373124][T15919] bond_slave_0: entered allmulticast mode [ 1147.378885][T15919] bond_slave_1: entered allmulticast mode [ 1147.386311][T15919] dummy0: entered allmulticast mode [ 1147.392070][T15919] batadv0: entered allmulticast mode [ 1147.397694][T15919] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1147.407188][T15913] lo speed is unknown, defaulting to 1000 [ 1147.414651][T15913] lo speed is unknown, defaulting to 1000 [ 1147.921901][T15950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.323940][T15975] FAULT_INJECTION: forcing a failure. [ 1148.323940][T15975] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.338479][T15975] CPU: 0 UID: 0 PID: 15975 Comm: syz.6.12970 Not tainted syzkaller #0 PREEMPT(full) [ 1148.338506][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1148.338517][T15975] Call Trace: [ 1148.338524][T15975] [ 1148.338532][T15975] dump_stack_lvl+0x189/0x250 [ 1148.338557][T15975] ? __pfx____ratelimit+0x10/0x10 [ 1148.338581][T15975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.338601][T15975] ? __pfx__printk+0x10/0x10 [ 1148.338628][T15975] should_fail_ex+0x414/0x560 [ 1148.338653][T15975] should_failslab+0xa8/0x100 [ 1148.338677][T15975] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1148.338700][T15975] ? skb_clone+0x212/0x3a0 [ 1148.338722][T15975] skb_clone+0x212/0x3a0 [ 1148.338743][T15975] __netlink_deliver_tap+0x404/0x850 [ 1148.338773][T15975] ? netlink_deliver_tap+0x2e/0x1b0 [ 1148.338798][T15975] netlink_deliver_tap+0x19c/0x1b0 [ 1148.338830][T15975] netlink_unicast+0x7fa/0x9e0 [ 1148.338856][T15975] ? __pfx_netlink_unicast+0x10/0x10 [ 1148.338880][T15975] ? netlink_sendmsg+0x642/0xb30 [ 1148.338896][T15975] ? skb_put+0x11b/0x210 [ 1148.338914][T15975] netlink_sendmsg+0x805/0xb30 [ 1148.338934][T15975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.338952][T15975] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1148.338970][T15975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1148.338989][T15975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1148.339006][T15975] __sock_sendmsg+0x21c/0x270 [ 1148.339029][T15975] ____sys_sendmsg+0x505/0x830 [ 1148.339050][T15975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1148.339072][T15975] ? import_iovec+0x74/0xa0 [ 1148.339092][T15975] ___sys_sendmsg+0x21f/0x2a0 [ 1148.339110][T15975] ? __pfx____sys_sendmsg+0x10/0x10 [ 1148.339142][T15975] ? __fget_files+0x2a/0x420 [ 1148.339157][T15975] ? __fget_files+0x3a0/0x420 [ 1148.339177][T15975] __x64_sys_sendmsg+0x19b/0x260 [ 1148.339195][T15975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1148.339218][T15975] ? __pfx_ksys_write+0x10/0x10 [ 1148.339239][T15975] ? rcu_is_watching+0x15/0xb0 [ 1148.339259][T15975] ? rcu_is_watching+0x15/0xb0 [ 1148.339277][T15975] do_syscall_64+0xfa/0x3b0 [ 1148.339295][T15975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.339313][T15975] ? clear_bhb_loop+0x60/0xb0 [ 1148.339332][T15975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.339351][T15975] RIP: 0033:0x7f7e0618ebe9 [ 1148.339367][T15975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.339383][T15975] RSP: 002b:00007f7e06fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1148.339403][T15975] RAX: ffffffffffffffda RBX: 00007f7e063b5fa0 RCX: 00007f7e0618ebe9 [ 1148.339417][T15975] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1148.339429][T15975] RBP: 00007f7e06fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.339441][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.339456][T15975] R13: 00007f7e063b6038 R14: 00007f7e063b5fa0 R15: 00007ffcf0e2cd18 [ 1148.339477][T15975] [ 1148.914499][T15995] FAULT_INJECTION: forcing a failure. [ 1148.914499][T15995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1148.995513][T15995] CPU: 1 UID: 0 PID: 15995 Comm: syz.3.12977 Not tainted syzkaller #0 PREEMPT(full) [ 1148.995541][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1148.995552][T15995] Call Trace: [ 1148.995559][T15995] [ 1148.995567][T15995] dump_stack_lvl+0x189/0x250 [ 1148.995594][T15995] ? __pfx____ratelimit+0x10/0x10 [ 1148.995618][T15995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.995639][T15995] ? __pfx__printk+0x10/0x10 [ 1148.995672][T15995] ? lock_acquire+0x5f/0x360 [ 1148.995700][T15995] should_fail_ex+0x414/0x560 [ 1148.995724][T15995] prepare_alloc_pages+0x213/0x610 [ 1148.995745][T15995] __alloc_frozen_pages_noprof+0x123/0x370 [ 1148.995766][T15995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1148.995783][T15995] ? css_rstat_updated+0x23a/0x4f0 [ 1148.995804][T15995] ? policy_nodemask+0x27c/0x720 [ 1148.995827][T15995] ? __pfx_lru_add+0x10/0x10 [ 1148.995847][T15995] alloc_pages_mpol+0x232/0x4a0 [ 1148.995872][T15995] folio_alloc_mpol_noprof+0x39/0x70 [ 1148.995896][T15995] shmem_alloc_and_add_folio+0x447/0xf60 [ 1148.995923][T15995] ? filemap_get_entry+0xad/0x2f0 [ 1148.995939][T15995] ? filemap_get_entry+0xad/0x2f0 [ 1148.995958][T15995] ? shmem_huge_global_enabled+0x174/0x3a0 [ 1148.995978][T15995] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1148.996002][T15995] ? shmem_allowable_huge_orders+0x414/0x420 [ 1148.996027][T15995] shmem_get_folio_gfp+0x59d/0x1660 [ 1148.996056][T15995] shmem_fault+0x179/0x390 [ 1148.996083][T15995] __do_fault+0x138/0x390 [ 1148.996109][T15995] __handle_mm_fault+0x3611/0x5440 [ 1148.996138][T15995] ? __pfx___handle_mm_fault+0x10/0x10 [ 1148.996159][T15995] ? rcu_is_watching+0x15/0xb0 [ 1148.996185][T15995] ? find_vma+0xe7/0x160 [ 1148.996205][T15995] ? __pfx_find_vma+0x10/0x10 [ 1148.996227][T15995] handle_mm_fault+0x40a/0x8e0 [ 1148.996253][T15995] do_user_addr_fault+0x764/0x1390 [ 1148.996284][T15995] exc_page_fault+0x76/0xf0 [ 1148.996309][T15995] asm_exc_page_fault+0x26/0x30 [ 1148.996326][T15995] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1148.996348][T15995] Code: 09 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1148.996364][T15995] RSP: 0018:ffffc90003aefb98 EFLAGS: 00050202 [ 1148.996381][T15995] RAX: 00007ffffffff001 RBX: 00000000000200cc RCX: 000000000000a3d8 [ 1148.996394][T15995] RDX: 0000000000000001 RSI: 0000200000036000 RDI: ffff8880721d5cf4 [ 1148.996407][T15995] RBP: ffffc90003aefce0 R08: 0000000000000003 R09: 0000000000000004 [ 1148.996419][T15995] R10: dffffc0000000000 R11: ffffed100e43c019 R12: ffffc90003aefda8 [ 1148.996432][T15995] R13: 1ffff9200075dfb5 R14: ffff8880721c0000 R15: 000020000002030c [ 1148.996455][T15995] _copy_from_user+0x7a/0xb0 [ 1148.996475][T15995] generic_map_update_batch+0x572/0x7f0 [ 1148.996500][T15995] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1148.996519][T15995] ? __fget_files+0x2a/0x420 [ 1148.996541][T15995] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1148.996560][T15995] bpf_map_do_batch+0x369/0x5f0 [ 1148.996585][T15995] __sys_bpf+0x6af/0x870 [ 1148.996608][T15995] ? __pfx___sys_bpf+0x10/0x10 [ 1148.996635][T15995] ? ksys_write+0x22a/0x250 [ 1148.996663][T15995] ? __pfx_ksys_write+0x10/0x10 [ 1148.996683][T15995] ? rcu_is_watching+0x15/0xb0 [ 1148.996704][T15995] __x64_sys_bpf+0x7c/0x90 [ 1148.996723][T15995] do_syscall_64+0xfa/0x3b0 [ 1148.996741][T15995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.996758][T15995] ? clear_bhb_loop+0x60/0xb0 [ 1148.996777][T15995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.996794][T15995] RIP: 0033:0x7f3949b8ebe9 [ 1148.996809][T15995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.996825][T15995] RSP: 002b:00007f394aaad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1148.996843][T15995] RAX: ffffffffffffffda RBX: 00007f3949db5fa0 RCX: 00007f3949b8ebe9 [ 1148.996857][T15995] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 1148.996869][T15995] RBP: 00007f394aaad090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.996880][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.996892][T15995] R13: 00007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1148.996913][T15995] [ 1149.017123][T15989] lo speed is unknown, defaulting to 1000 [ 1149.479307][T15989] lo speed is unknown, defaulting to 1000 [ 1149.593506][T16016] __nla_validate_parse: 18 callbacks suppressed [ 1149.593525][T16016] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12986'. [ 1149.746305][T16027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12990'. [ 1149.851540][T16030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12991'. [ 1149.860921][T16030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12991'. [ 1150.173825][T16042] netlink: 168 bytes leftover after parsing attributes in process `syz.6.12995'. [ 1150.244624][T16046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12996'. [ 1150.244624][T16045] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12996'. [ 1150.563946][T16061] lo speed is unknown, defaulting to 1000 [ 1150.577197][T16061] lo speed is unknown, defaulting to 1000 [ 1150.624212][T16059] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13001'. [ 1150.709081][T16065] batman_adv: batadv0: Adding interface: vxlan0 [ 1150.717739][T16065] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.748213][T16065] batman_adv: batadv0: Interface activated: vxlan0 [ 1150.758577][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1150.769437][T16062] lo speed is unknown, defaulting to 1000 [ 1150.769437][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1150.769471][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1150.825946][T16062] lo speed is unknown, defaulting to 1000 [ 1150.853542][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.309442][T16094] netlink: 'syz.1.13009': attribute type 1 has an invalid length. [ 1151.375275][T16094] tipc: Started in network mode [ 1151.381650][T16094] tipc: Node identity 8a727a8419be, cluster identity 4711 [ 1151.388953][T16094] tipc: Enabled bearer , priority 0 [ 1151.399642][T16093] tipc: Resetting bearer [ 1151.469264][T16093] tipc: Disabling bearer [ 1151.481466][T16100] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13012'. [ 1151.710934][T16103] lo speed is unknown, defaulting to 1000 [ 1151.738685][T16103] lo speed is unknown, defaulting to 1000 [ 1151.873341][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13017'. [ 1152.157730][T16120] batman_adv: batadv0: Adding interface: vxlan0 [ 1152.166337][T16120] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.192991][T16120] batman_adv: batadv0: Interface activated: vxlan0 [ 1152.206932][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1152.216358][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1152.236596][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1152.257974][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1152.360346][T16128] netlink: 'syz.3.13024': attribute type 1 has an invalid length. [ 1152.593312][T16147] syzkaller1: entered promiscuous mode [ 1152.599329][T16147] syzkaller1: entered allmulticast mode [ 1152.771731][T16152] sctp: [Deprecated]: syz.1.13034 (pid 16152) Use of int in max_burst socket option deprecated. [ 1152.771731][T16152] Use struct sctp_assoc_value instead [ 1152.936674][ T30] audit: type=1800 audit(1756481635.328:9): pid=16156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13035" name="memory.events" dev="tmpfs" ino=558 res=0 errno=0 [ 1153.311298][T27825] IPVS: starting estimator thread 0... [ 1153.420851][T16175] IPVS: using max 47 ests per chain, 112800 per kthread [ 1153.496335][T16180] delete_channel: no stack [ 1153.501808][T16180] netlink: 'syz.6.13043': attribute type 1 has an invalid length. [ 1153.502999][T16169] lo speed is unknown, defaulting to 1000 [ 1153.527574][T16169] lo speed is unknown, defaulting to 1000 [ 1153.601044][T16183] FAULT_INJECTION: forcing a failure. [ 1153.601044][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.617968][T16183] CPU: 1 UID: 0 PID: 16183 Comm: syz.5.13045 Not tainted syzkaller #0 PREEMPT(full) [ 1153.618004][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1153.618016][T16183] Call Trace: [ 1153.618024][T16183] [ 1153.618032][T16183] dump_stack_lvl+0x189/0x250 [ 1153.618057][T16183] ? __pfx____ratelimit+0x10/0x10 [ 1153.618082][T16183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1153.618102][T16183] ? __pfx__printk+0x10/0x10 [ 1153.618126][T16183] ? fs_reclaim_acquire+0x7d/0x100 [ 1153.618151][T16183] ? __pfx___might_resched+0x10/0x10 [ 1153.618168][T16183] ? lock_acquire+0x5f/0x360 [ 1153.618192][T16183] should_fail_ex+0x414/0x560 [ 1153.618217][T16183] should_failslab+0xa8/0x100 [ 1153.618243][T16183] __kmalloc_cache_noprof+0x70/0x3d0 [ 1153.618266][T16183] ? sctp_transport_new+0x7e/0x640 [ 1153.618286][T16183] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1153.618312][T16183] sctp_transport_new+0x7e/0x640 [ 1153.618334][T16183] sctp_assoc_add_peer+0x260/0x13b0 [ 1153.618355][T16183] ? sctp_bind_addr_copy+0x380/0x3c0 [ 1153.618381][T16183] sctp_connect_new_asoc+0x30a/0x690 [ 1153.618401][T16183] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1153.618421][T16183] ? __ipv6_addr_type+0x14d/0x2f0 [ 1153.618446][T16183] ? sctp_inet6_send_verify+0x6e/0x300 [ 1153.618468][T16183] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1153.618489][T16183] __sctp_connect+0x5ba/0xd50 [ 1153.618512][T16183] ? __pfx___sctp_connect+0x10/0x10 [ 1153.618533][T16183] sctp_inet_connect+0x12e/0x1e0 [ 1153.618557][T16183] __sys_connect+0x316/0x440 [ 1153.618582][T16183] ? __fget_files+0x3a0/0x420 [ 1153.618598][T16183] ? __pfx___sys_connect+0x10/0x10 [ 1153.618628][T16183] ? __pfx_ksys_write+0x10/0x10 [ 1153.618653][T16183] __x64_sys_connect+0x7a/0x90 [ 1153.618678][T16183] do_syscall_64+0xfa/0x3b0 [ 1153.618695][T16183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.618713][T16183] ? clear_bhb_loop+0x60/0xb0 [ 1153.618732][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.618750][T16183] RIP: 0033:0x7f89e6f8ebe9 [ 1153.618766][T16183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.618782][T16183] RSP: 002b:00007f89e7d76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1153.618801][T16183] RAX: ffffffffffffffda RBX: 00007f89e71b5fa0 RCX: 00007f89e6f8ebe9 [ 1153.618815][T16183] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1153.618827][T16183] RBP: 00007f89e7d76090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.618839][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.618850][T16183] R13: 00007f89e71b6038 R14: 00007f89e71b5fa0 R15: 00007ffca61cd1a8 [ 1153.618872][T16183] [ 1154.035460][ T122] IPVS: starting estimator thread 0... [ 1154.131065][T16197] IPVS: using max 41 ests per chain, 98400 per kthread [ 1154.842519][T16209] can: request_module (can-proto-5) failed. [ 1154.915555][T16220] __nla_validate_parse: 21 callbacks suppressed [ 1154.915573][T16220] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13057'. [ 1154.951066][T16188] lo speed is unknown, defaulting to 1000 [ 1154.968029][T16188] lo speed is unknown, defaulting to 1000 [ 1155.489684][T16232] FAULT_INJECTION: forcing a failure. [ 1155.489684][T16232] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.507167][T16232] CPU: 0 UID: 0 PID: 16232 Comm: syz.1.13061 Not tainted syzkaller #0 PREEMPT(full) [ 1155.507194][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1155.507204][T16232] Call Trace: [ 1155.507210][T16232] [ 1155.507217][T16232] dump_stack_lvl+0x189/0x250 [ 1155.507241][T16232] ? __pfx____ratelimit+0x10/0x10 [ 1155.507265][T16232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1155.507284][T16232] ? __pfx__printk+0x10/0x10 [ 1155.507309][T16232] should_fail_ex+0x414/0x560 [ 1155.507332][T16232] should_failslab+0xa8/0x100 [ 1155.507356][T16232] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1155.507377][T16232] ? skb_clone+0x212/0x3a0 [ 1155.507396][T16232] skb_clone+0x212/0x3a0 [ 1155.507413][T16232] __netlink_deliver_tap+0x404/0x850 [ 1155.507439][T16232] ? netlink_deliver_tap+0x2e/0x1b0 [ 1155.507461][T16232] netlink_deliver_tap+0x19c/0x1b0 [ 1155.507483][T16232] netlink_unicast+0x7fa/0x9e0 [ 1155.507508][T16232] ? __pfx_netlink_unicast+0x10/0x10 [ 1155.507530][T16232] ? netlink_sendmsg+0x642/0xb30 [ 1155.507546][T16232] ? skb_put+0x11b/0x210 [ 1155.507562][T16232] netlink_sendmsg+0x805/0xb30 [ 1155.507582][T16232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.507599][T16232] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1155.507616][T16232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1155.507633][T16232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.507647][T16232] __sock_sendmsg+0x21c/0x270 [ 1155.507668][T16232] ____sys_sendmsg+0x505/0x830 [ 1155.507688][T16232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.507710][T16232] ? import_iovec+0x74/0xa0 [ 1155.507731][T16232] ___sys_sendmsg+0x21f/0x2a0 [ 1155.507750][T16232] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.507784][T16232] ? __fget_files+0x2a/0x420 [ 1155.507798][T16232] ? __fget_files+0x3a0/0x420 [ 1155.507825][T16232] __x64_sys_sendmsg+0x19b/0x260 [ 1155.507848][T16232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1155.507871][T16232] ? __pfx_ksys_write+0x10/0x10 [ 1155.507891][T16232] ? rcu_is_watching+0x15/0xb0 [ 1155.507910][T16232] ? rcu_is_watching+0x15/0xb0 [ 1155.507928][T16232] do_syscall_64+0xfa/0x3b0 [ 1155.507945][T16232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.507961][T16232] ? clear_bhb_loop+0x60/0xb0 [ 1155.507980][T16232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.507998][T16232] RIP: 0033:0x7efff8f8ebe9 [ 1155.508015][T16232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.508031][T16232] RSP: 002b:00007efff9e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.508051][T16232] RAX: ffffffffffffffda RBX: 00007efff91b5fa0 RCX: 00007efff8f8ebe9 [ 1155.508066][T16232] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1155.508078][T16232] RBP: 00007efff9e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.508090][T16232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.508101][T16232] R13: 00007efff91b6038 R14: 00007efff91b5fa0 R15: 00007ffd380e24f8 [ 1155.508122][T16232] [ 1155.845993][T16234] netlink: 'syz.6.13062': attribute type 1 has an invalid length. [ 1155.854882][T16234] netlink: 80 bytes leftover after parsing attributes in process `syz.6.13062'. [ 1156.024128][T16238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1156.115880][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13069'. [ 1156.148466][T16249] bridge_slave_1: left allmulticast mode [ 1156.163142][T16249] bridge_slave_1: left promiscuous mode [ 1156.201572][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.227959][T16249] bridge_slave_0: left allmulticast mode [ 1156.244255][T16249] bridge_slave_0: left promiscuous mode [ 1156.264770][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.355981][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13070'. [ 1156.415054][T16263] syzkaller0: entered promiscuous mode [ 1156.441334][T16263] syzkaller0: entered allmulticast mode [ 1156.685476][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13078'. [ 1156.724966][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13078'. [ 1157.137488][T16290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.187535][T16290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.382426][T16290] hsr1: left allmulticast mode [ 1157.387386][T16290] bond0: left allmulticast mode [ 1157.406556][T16290] bond_slave_0: left allmulticast mode [ 1157.412779][T16290] bond_slave_1: left allmulticast mode [ 1157.418383][T16290] dummy0: left allmulticast mode [ 1157.424764][T16290] batadv0: left allmulticast mode [ 1157.435396][T16290] batman_adv: batadv0: Interface deactivated: vxlan0 [ 1157.443782][T16285] lo speed is unknown, defaulting to 1000 [ 1157.453490][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.463339][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.479140][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.509322][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.596815][T16285] lo speed is unknown, defaulting to 1000 [ 1157.596831][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.624909][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.648565][T16306] sctp: [Deprecated]: syz.3.13084 (pid 16306) Use of int in max_burst socket option. [ 1157.648565][T16306] Use struct sctp_assoc_value instead [ 1157.655030][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.703311][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.824847][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13087'. [ 1157.841691][T16303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13083'. [ 1157.861412][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13087'. [ 1157.874992][T16319] netlink: 'syz.6.13086': attribute type 15 has an invalid length. [ 1158.107033][T16305] lo speed is unknown, defaulting to 1000 [ 1158.121851][T16305] lo speed is unknown, defaulting to 1000 [ 1158.529711][T16348] FAULT_INJECTION: forcing a failure. [ 1158.529711][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.545084][T16348] CPU: 1 UID: 0 PID: 16348 Comm: syz.1.13097 Not tainted syzkaller #0 PREEMPT(full) [ 1158.545111][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1158.545122][T16348] Call Trace: [ 1158.545130][T16348] [ 1158.545138][T16348] dump_stack_lvl+0x189/0x250 [ 1158.545163][T16348] ? __pfx____ratelimit+0x10/0x10 [ 1158.545187][T16348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.545207][T16348] ? __pfx__printk+0x10/0x10 [ 1158.545228][T16348] ? ___sys_sendmsg+0x21f/0x2a0 [ 1158.545247][T16348] ? __pfx___might_resched+0x10/0x10 [ 1158.545265][T16348] ? lock_acquire+0x5f/0x360 [ 1158.545290][T16348] should_fail_ex+0x414/0x560 [ 1158.545314][T16348] should_failslab+0xa8/0x100 [ 1158.545338][T16348] __kmalloc_cache_noprof+0x70/0x3d0 [ 1158.545361][T16348] ? xfrm_policy_alloc+0x78/0x2b0 [ 1158.545382][T16348] xfrm_policy_alloc+0x78/0x2b0 [ 1158.545401][T16348] xfrm_policy_construct+0x39/0x6b0 [ 1158.545428][T16348] xfrm_add_policy+0x267/0x800 [ 1158.545452][T16348] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1158.545478][T16348] ? apparmor_capable+0x137/0x1b0 [ 1158.545501][T16348] ? __nla_parse+0x40/0x60 [ 1158.545527][T16348] xfrm_user_rcv_msg+0x7a0/0xab0 [ 1158.545550][T16348] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1158.545587][T16348] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1158.545611][T16348] ? rcu_is_watching+0x15/0xb0 [ 1158.545627][T16348] ? trace_contention_end+0x39/0x120 [ 1158.545643][T16348] ? __mutex_lock+0x335/0x1350 [ 1158.545660][T16348] netlink_rcv_skb+0x208/0x470 [ 1158.545682][T16348] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1158.545702][T16348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1158.545730][T16348] ? lock_release+0x4b/0x3e0 [ 1158.545753][T16348] ? netlink_deliver_tap+0x2e/0x1b0 [ 1158.545775][T16348] xfrm_netlink_rcv+0x79/0x90 [ 1158.545795][T16348] netlink_unicast+0x82f/0x9e0 [ 1158.545828][T16348] ? __pfx_netlink_unicast+0x10/0x10 [ 1158.545851][T16348] ? netlink_sendmsg+0x642/0xb30 [ 1158.545864][T16348] ? skb_put+0x11b/0x210 [ 1158.545882][T16348] netlink_sendmsg+0x805/0xb30 [ 1158.545903][T16348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.545920][T16348] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1158.545936][T16348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1158.545954][T16348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.545971][T16348] __sock_sendmsg+0x21c/0x270 [ 1158.545992][T16348] ____sys_sendmsg+0x505/0x830 [ 1158.546011][T16348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.546031][T16348] ? import_iovec+0x74/0xa0 [ 1158.546049][T16348] ___sys_sendmsg+0x21f/0x2a0 [ 1158.546067][T16348] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.546094][T16348] ? __fget_files+0x2a/0x420 [ 1158.546109][T16348] ? __fget_files+0x3a0/0x420 [ 1158.546129][T16348] __x64_sys_sendmsg+0x19b/0x260 [ 1158.546148][T16348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.546170][T16348] ? __pfx_ksys_write+0x10/0x10 [ 1158.546191][T16348] ? rcu_is_watching+0x15/0xb0 [ 1158.546209][T16348] ? rcu_is_watching+0x15/0xb0 [ 1158.546227][T16348] do_syscall_64+0xfa/0x3b0 [ 1158.546244][T16348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.546261][T16348] ? clear_bhb_loop+0x60/0xb0 [ 1158.546280][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.546298][T16348] RIP: 0033:0x7efff8f8ebe9 [ 1158.546314][T16348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.546329][T16348] RSP: 002b:00007efff9e7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.546349][T16348] RAX: ffffffffffffffda RBX: 00007efff91b5fa0 RCX: 00007efff8f8ebe9 [ 1158.546367][T16348] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1158.546379][T16348] RBP: 00007efff9e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.546390][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.546401][T16348] R13: 00007efff91b6038 R14: 00007efff91b5fa0 R15: 00007ffd380e24f8 [ 1158.546421][T16348] [ 1159.662707][T16374] syzkaller1: entered promiscuous mode [ 1159.683559][T16374] syzkaller1: entered allmulticast mode [ 1160.435192][T16400] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 1160.546562][T16395] lo speed is unknown, defaulting to 1000 [ 1160.597791][T16395] lo speed is unknown, defaulting to 1000 [ 1160.606545][T16402] __nla_validate_parse: 5 callbacks suppressed [ 1160.606565][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13117'. [ 1160.644466][T16402] netlink: 'syz.6.13117': attribute type 11 has an invalid length. [ 1160.652776][T16402] netlink: 'syz.6.13117': attribute type 4 has an invalid length. [ 1160.661231][T16402] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13117'. [ 1160.792091][T16412] netlink: 'syz.6.13121': attribute type 10 has an invalid length. [ 1160.813349][T16415] FAULT_INJECTION: forcing a failure. [ 1160.813349][T16415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.830189][T16415] CPU: 0 UID: 0 PID: 16415 Comm: syz.3.13123 Not tainted syzkaller #0 PREEMPT(full) [ 1160.830227][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1160.830238][T16415] Call Trace: [ 1160.830245][T16415] [ 1160.830253][T16415] dump_stack_lvl+0x189/0x250 [ 1160.830279][T16415] ? __pfx____ratelimit+0x10/0x10 [ 1160.830303][T16415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1160.830323][T16415] ? __pfx__printk+0x10/0x10 [ 1160.830344][T16415] ? __might_fault+0xb0/0x130 [ 1160.830370][T16415] ? rcu_is_watching+0x15/0xb0 [ 1160.830389][T16415] should_fail_ex+0x414/0x560 [ 1160.830414][T16415] _copy_from_user+0x2d/0xb0 [ 1160.830434][T16415] ___sys_sendmsg+0x158/0x2a0 [ 1160.830454][T16415] ? __pfx____sys_sendmsg+0x10/0x10 [ 1160.830488][T16415] ? __fget_files+0x2a/0x420 [ 1160.830504][T16415] ? __fget_files+0x3a0/0x420 [ 1160.830524][T16415] __x64_sys_sendmsg+0x19b/0x260 [ 1160.830544][T16415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1160.830567][T16415] ? __pfx_ksys_write+0x10/0x10 [ 1160.830588][T16415] ? rcu_is_watching+0x15/0xb0 [ 1160.830607][T16415] ? rcu_is_watching+0x15/0xb0 [ 1160.830626][T16415] do_syscall_64+0xfa/0x3b0 [ 1160.830643][T16415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.830661][T16415] ? clear_bhb_loop+0x60/0xb0 [ 1160.830681][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.830699][T16415] RIP: 0033:0x7f3949b8ebe9 [ 1160.830715][T16415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.830731][T16415] RSP: 002b:00007f394aaad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1160.830752][T16415] RAX: ffffffffffffffda RBX: 00007f3949db5fa0 RCX: 00007f3949b8ebe9 [ 1160.830765][T16415] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 1160.830777][T16415] RBP: 00007f394aaad090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.830789][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.830801][T16415] R13: 00007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1160.830822][T16415] [ 1160.837692][T16412] team0: Port device dummy0 added [ 1160.928257][T16416] netlink: 'syz.6.13121': attribute type 10 has an invalid length. [ 1161.160566][T16416] team0: Port device dummy0 removed [ 1161.186405][T16416] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1161.294924][T16428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.302458][T16428] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1161.387753][T16412] openvswitch: netlink: Message has 16 unknown bytes. [ 1161.602657][T16428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.633470][T16438] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13128'. [ 1161.643968][T16428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.841822][T16428] macvlan2: left promiscuous mode [ 1161.849357][T16428] batman_adv: batadv0: Interface deactivated: vxlan0 [ 1161.865397][ T1166] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.890714][ T1166] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.938254][ T1166] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.965537][ T1166] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.019408][ T1166] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.038437][ T1166] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.079445][ T1166] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.098879][ T1166] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.121461][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13135'. [ 1162.132999][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13135'. [ 1162.185325][T16462] netlink: 'syz.3.13136': attribute type 72 has an invalid length. [ 1162.193749][T16462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13136'. [ 1162.261870][T16464] FAULT_INJECTION: forcing a failure. [ 1162.261870][T16464] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.282476][T16464] CPU: 1 UID: 0 PID: 16464 Comm: syz.3.13137 Not tainted syzkaller #0 PREEMPT(full) [ 1162.282504][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1162.282515][T16464] Call Trace: [ 1162.282522][T16464] [ 1162.282530][T16464] dump_stack_lvl+0x189/0x250 [ 1162.282555][T16464] ? __pfx____ratelimit+0x10/0x10 [ 1162.282580][T16464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.282599][T16464] ? __pfx__printk+0x10/0x10 [ 1162.282622][T16464] ? fs_reclaim_acquire+0x7d/0x100 [ 1162.282646][T16464] ? rcu_is_watching+0x15/0xb0 [ 1162.282662][T16464] ? __pfx___might_resched+0x10/0x10 [ 1162.282678][T16464] ? lock_acquire+0x5f/0x360 [ 1162.282703][T16464] should_fail_ex+0x414/0x560 [ 1162.282727][T16464] should_failslab+0xa8/0x100 [ 1162.282751][T16464] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1162.282774][T16464] ? __alloc_skb+0x112/0x2d0 [ 1162.282792][T16464] __alloc_skb+0x112/0x2d0 [ 1162.282809][T16464] netlink_sendmsg+0x5c6/0xb30 [ 1162.282830][T16464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.282847][T16464] ? is_bpf_text_address+0x26/0x2b0 [ 1162.282870][T16464] ? rcu_is_watching+0x15/0xb0 [ 1162.282885][T16464] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1162.282902][T16464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1162.282921][T16464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.282938][T16464] __sock_sendmsg+0x21c/0x270 [ 1162.282961][T16464] ____sys_sendmsg+0x52d/0x830 [ 1162.282982][T16464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.283004][T16464] ? import_iovec+0x74/0xa0 [ 1162.283025][T16464] ___sys_sendmsg+0x21f/0x2a0 [ 1162.283043][T16464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.283064][T16464] ? kstrtouint+0x6e/0xe0 [ 1162.283099][T16464] ? __fget_files+0x2a/0x420 [ 1162.283114][T16464] ? __fget_files+0x3a0/0x420 [ 1162.283134][T16464] __sys_sendmmsg+0x227/0x430 [ 1162.283154][T16464] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1162.283171][T16464] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1162.283200][T16464] ? ksys_write+0x22a/0x250 [ 1162.283223][T16464] ? __pfx_ksys_write+0x10/0x10 [ 1162.283242][T16464] ? rcu_is_watching+0x15/0xb0 [ 1162.283261][T16464] __x64_sys_sendmmsg+0xa0/0xc0 [ 1162.283281][T16464] do_syscall_64+0xfa/0x3b0 [ 1162.283305][T16464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.283323][T16464] ? clear_bhb_loop+0x60/0xb0 [ 1162.283342][T16464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.283359][T16464] RIP: 0033:0x7f3949b8ebe9 [ 1162.283375][T16464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.283391][T16464] RSP: 002b:00007f394aaad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1162.283411][T16464] RAX: ffffffffffffffda RBX: 00007f3949db5fa0 RCX: 00007f3949b8ebe9 [ 1162.283425][T16464] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1162.283438][T16464] RBP: 00007f394aaad090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.283449][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.283461][T16464] R13: 00007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1162.283506][T16464] [ 1162.789720][T16482] netlink: 'syz.5.13142': attribute type 10 has an invalid length. [ 1162.866293][T16485] netlink: 'syz.5.13142': attribute type 10 has an invalid length. [ 1162.915368][T16488] FAULT_INJECTION: forcing a failure. [ 1162.915368][T16488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.935294][T16482] bond0: (slave dummy0): Releasing backup interface [ 1162.949964][T16488] CPU: 1 UID: 0 PID: 16488 Comm: syz.0.13146 Not tainted syzkaller #0 PREEMPT(full) [ 1162.949991][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1162.950001][T16488] Call Trace: [ 1162.950007][T16488] [ 1162.950014][T16488] dump_stack_lvl+0x189/0x250 [ 1162.950039][T16488] ? __pfx____ratelimit+0x10/0x10 [ 1162.950061][T16488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.950079][T16488] ? __pfx__printk+0x10/0x10 [ 1162.950100][T16488] ? rcu_is_watching+0x15/0xb0 [ 1162.950116][T16488] should_fail_ex+0x414/0x560 [ 1162.950139][T16488] _copy_from_user+0x2d/0xb0 [ 1162.950158][T16488] sctp_setsockopt+0x19f/0x1200 [ 1162.950175][T16488] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1162.950199][T16488] do_sock_setsockopt+0x179/0x1b0 [ 1162.950219][T16488] __x64_sys_setsockopt+0x13f/0x1b0 [ 1162.950239][T16488] do_syscall_64+0xfa/0x3b0 [ 1162.950265][T16488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.950283][T16488] ? clear_bhb_loop+0x60/0xb0 [ 1162.950302][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.950319][T16488] RIP: 0033:0x7f5b8a38ebe9 [ 1162.950334][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.950350][T16488] RSP: 002b:00007f5b8b1d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1162.950369][T16488] RAX: ffffffffffffffda RBX: 00007f5b8a5b5fa0 RCX: 00007f5b8a38ebe9 [ 1162.950383][T16488] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003 [ 1162.950393][T16488] RBP: 00007f5b8b1d4090 R08: 0000000000000008 R09: 0000000000000000 [ 1162.950403][T16488] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1162.950412][T16488] R13: 00007f5b8a5b6038 R14: 00007f5b8a5b5fa0 R15: 00007ffcf2837148 [ 1162.950431][T16488] [ 1163.199487][T16482] dummy0: left promiscuous mode [ 1163.229259][T16482] team0: Port device dummy0 added [ 1163.280043][T16485] team0: Port device dummy0 removed [ 1163.326794][T16485] dummy0: entered promiscuous mode [ 1163.369365][T16485] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1163.682889][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13154'. [ 1163.798539][T16519] bond0: (slave dummy0): Releasing backup interface [ 1163.810368][T16519] bridge_slave_0: left allmulticast mode [ 1163.814637][T16521] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13156'. [ 1163.816040][T16519] bridge_slave_0: left promiscuous mode [ 1163.853287][T16519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.872247][T16519] bridge_slave_1: left allmulticast mode [ 1163.877938][T16519] bridge_slave_1: left promiscuous mode [ 1163.914551][T16519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.917217][T16526] nbd: socks must be embedded in a SOCK_ITEM attr [ 1163.947764][T16519] bond0: (slave bond_slave_0): Releasing backup interface [ 1163.957229][T16519] bond0: (slave bond_slave_1): Releasing backup interface [ 1163.967481][T16519] team0: Port device team_slave_0 removed [ 1163.976014][T16519] team0: Port device team_slave_1 removed [ 1164.006277][T16519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.015633][T16519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.016769][T16517] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13157'. [ 1164.034588][T16519] bond0: (slave wlan1): Releasing backup interface [ 1164.042922][T16519] batman_adv: batadv0: Removing interface: vxlan0 [ 1164.064441][T16521] geneve3: entered promiscuous mode [ 1164.082139][T16537] netlink: 'syz.1.13160': attribute type 15 has an invalid length. [ 1164.109131][ T2332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.157252][ T2332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.172580][ T2332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.204949][ T2332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.239622][T16514] lo speed is unknown, defaulting to 1000 [ 1164.248013][T16514] lo speed is unknown, defaulting to 1000 [ 1164.799028][T16568] tipc: Started in network mode [ 1164.804100][T16568] tipc: Node identity ac14140f, cluster identity 4711 [ 1164.816914][T16568] tipc: New replicast peer: 255.255.255.255 [ 1164.823684][T16568] tipc: Enabled bearer , priority 10 [ 1164.958135][T16572] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.13171'. [ 1165.167269][T16584] netlink: 'syz.6.13172': attribute type 15 has an invalid length. [ 1165.690668][T16621] __nla_validate_parse: 1 callbacks suppressed [ 1165.690745][T16621] netlink: 84 bytes leftover after parsing attributes in process `syz.5.13186'. [ 1165.940008][T20498] tipc: Node number set to 2886997007 [ 1166.326466][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13190'. [ 1166.337062][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13190'. [ 1166.602981][T16646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13196'. [ 1166.618331][T16650] syzkaller0: entered promiscuous mode [ 1166.625097][T16650] syzkaller0: entered allmulticast mode [ 1166.984174][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13202'. [ 1167.024430][T16668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13202'. [ 1167.036439][T16668] : renamed from bond_slave_0 [ 1167.153492][T16678] sctp: [Deprecated]: syz.3.13207 (pid 16678) Use of int in max_burst socket option. [ 1167.153492][T16678] Use struct sctp_assoc_value instead [ 1167.153865][T16679] FAULT_INJECTION: forcing a failure. [ 1167.153865][T16679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.177809][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13207'. [ 1167.201338][T16679] CPU: 1 UID: 0 PID: 16679 Comm: syz.0.13206 Not tainted syzkaller #0 PREEMPT(full) [ 1167.201365][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1167.201377][T16679] Call Trace: [ 1167.201385][T16679] [ 1167.201393][T16679] dump_stack_lvl+0x189/0x250 [ 1167.201418][T16679] ? __pfx____ratelimit+0x10/0x10 [ 1167.201446][T16679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.201466][T16679] ? __pfx__printk+0x10/0x10 [ 1167.201487][T16679] ? __might_fault+0xb0/0x130 [ 1167.201513][T16679] ? rcu_is_watching+0x15/0xb0 [ 1167.201532][T16679] should_fail_ex+0x414/0x560 [ 1167.201564][T16679] _copy_from_iter+0x1db/0x16f0 [ 1167.201585][T16679] ? rcu_is_watching+0x15/0xb0 [ 1167.201602][T16679] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1167.201627][T16679] ? __pfx__copy_from_iter+0x10/0x10 [ 1167.201644][T16679] ? __build_skb_around+0x257/0x3e0 [ 1167.201662][T16679] ? netlink_sendmsg+0x642/0xb30 [ 1167.201678][T16679] ? skb_put+0x11b/0x210 [ 1167.201696][T16679] netlink_sendmsg+0x6b2/0xb30 [ 1167.201717][T16679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.201735][T16679] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1167.201753][T16679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1167.201772][T16679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.201788][T16679] __sock_sendmsg+0x21c/0x270 [ 1167.201811][T16679] ____sys_sendmsg+0x505/0x830 [ 1167.201832][T16679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.201855][T16679] ? import_iovec+0x74/0xa0 [ 1167.201880][T16679] ___sys_sendmsg+0x21f/0x2a0 [ 1167.201899][T16679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.201932][T16679] ? __fget_files+0x2a/0x420 [ 1167.201948][T16679] ? __fget_files+0x3a0/0x420 [ 1167.201969][T16679] __x64_sys_sendmsg+0x19b/0x260 [ 1167.201989][T16679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.202012][T16679] ? __pfx_ksys_write+0x10/0x10 [ 1167.202033][T16679] ? rcu_is_watching+0x15/0xb0 [ 1167.202051][T16679] ? rcu_is_watching+0x15/0xb0 [ 1167.202069][T16679] do_syscall_64+0xfa/0x3b0 [ 1167.202085][T16679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.202102][T16679] ? clear_bhb_loop+0x60/0xb0 [ 1167.202121][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.202138][T16679] RIP: 0033:0x7f5b8a38ebe9 [ 1167.202154][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.202170][T16679] RSP: 002b:00007f5b8b1d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.202190][T16679] RAX: ffffffffffffffda RBX: 00007f5b8a5b5fa0 RCX: 00007f5b8a38ebe9 [ 1167.202204][T16679] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1167.202215][T16679] RBP: 00007f5b8b1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.202227][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.202238][T16679] R13: 00007f5b8a5b6038 R14: 00007f5b8a5b5fa0 R15: 00007ffcf2837148 [ 1167.202258][T16679] [ 1167.633903][T16698] netlink: 'syz.1.13213': attribute type 13 has an invalid length. [ 1167.642516][T16698] netlink: 'syz.1.13213': attribute type 17 has an invalid length. [ 1167.687486][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13213'. [ 1167.689096][T16698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.710959][T16698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.725749][T16698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1167.843781][T16707] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1167.918875][T16700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.022303][T16698] lo speed is unknown, defaulting to 1000 [ 1168.028991][T16698] lo speed is unknown, defaulting to 1000 [ 1168.221842][T16731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.239094][T16734] FAULT_INJECTION: forcing a failure. [ 1168.239094][T16734] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.346134][T16734] CPU: 1 UID: 0 PID: 16734 Comm: syz.6.13223 Not tainted syzkaller #0 PREEMPT(full) [ 1168.346162][T16734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.346174][T16734] Call Trace: [ 1168.346182][T16734] [ 1168.346191][T16734] dump_stack_lvl+0x189/0x250 [ 1168.346217][T16734] ? __pfx____ratelimit+0x10/0x10 [ 1168.346241][T16734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.346261][T16734] ? __pfx__printk+0x10/0x10 [ 1168.346285][T16734] ? fs_reclaim_acquire+0x7d/0x100 [ 1168.346310][T16734] ? rcu_is_watching+0x15/0xb0 [ 1168.346327][T16734] ? __pfx___might_resched+0x10/0x10 [ 1168.346344][T16734] ? lock_acquire+0x5f/0x360 [ 1168.346369][T16734] should_fail_ex+0x414/0x560 [ 1168.346394][T16734] should_failslab+0xa8/0x100 [ 1168.346419][T16734] __kmalloc_cache_noprof+0x70/0x3d0 [ 1168.346441][T16734] ? sctp_association_new+0x89/0x25f0 [ 1168.346460][T16734] ? __asan_memcpy+0x40/0x70 [ 1168.346480][T16734] sctp_association_new+0x89/0x25f0 [ 1168.346499][T16734] ? sctp_do_bind+0x65a/0x940 [ 1168.346518][T16734] ? __ipv6_addr_type+0x10c/0x2f0 [ 1168.346545][T16734] sctp_connect_new_asoc+0x2c5/0x690 [ 1168.346565][T16734] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1168.346587][T16734] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1168.346608][T16734] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1168.346629][T16734] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1168.346653][T16734] sctp_sendmsg+0x155c/0x2810 [ 1168.346682][T16734] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1168.346698][T16734] ? rcu_is_watching+0x15/0xb0 [ 1168.346717][T16734] ? aa_sk_perm+0x81e/0x950 [ 1168.346743][T16734] ? __pfx_aa_sk_perm+0x10/0x10 [ 1168.346767][T16734] ? sock_rps_record_flow+0x19/0x410 [ 1168.346791][T16734] ? inet_sendmsg+0x2f4/0x370 [ 1168.346814][T16734] __sock_sendmsg+0x19c/0x270 [ 1168.346838][T16734] ____sys_sendmsg+0x52d/0x830 [ 1168.346858][T16734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1168.346876][T16734] ? __might_fault+0xb0/0x130 [ 1168.346902][T16734] ? import_iovec+0x74/0xa0 [ 1168.346922][T16734] ___sys_sendmsg+0x21f/0x2a0 [ 1168.346941][T16734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1168.346962][T16734] ? kstrtouint+0x6e/0xe0 [ 1168.346997][T16734] ? __fget_files+0x2a/0x420 [ 1168.347012][T16734] ? __fget_files+0x3a0/0x420 [ 1168.347032][T16734] __sys_sendmmsg+0x227/0x430 [ 1168.347053][T16734] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1168.347070][T16734] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1168.347099][T16734] ? ksys_write+0x22a/0x250 [ 1168.347122][T16734] ? __pfx_ksys_write+0x10/0x10 [ 1168.347141][T16734] ? rcu_is_watching+0x15/0xb0 [ 1168.347162][T16734] __x64_sys_sendmmsg+0xa0/0xc0 [ 1168.347182][T16734] do_syscall_64+0xfa/0x3b0 [ 1168.347199][T16734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.347217][T16734] ? clear_bhb_loop+0x60/0xb0 [ 1168.347236][T16734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.347254][T16734] RIP: 0033:0x7f7e0618ebe9 [ 1168.347269][T16734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.347285][T16734] RSP: 002b:00007f7e06fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1168.347305][T16734] RAX: ffffffffffffffda RBX: 00007f7e063b5fa0 RCX: 00007f7e0618ebe9 [ 1168.347318][T16734] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000007 [ 1168.347330][T16734] RBP: 00007f7e06fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.347342][T16734] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 1168.347353][T16734] R13: 00007f7e063b6038 R14: 00007f7e063b5fa0 R15: 00007ffcf0e2cd18 [ 1168.347374][T16734] [ 1168.715933][T16731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.834272][T16728] lo speed is unknown, defaulting to 1000 [ 1168.855832][T16739] netlink: 'syz.6.13224': attribute type 2 has an invalid length. [ 1168.895321][T16731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.926163][T16728] lo speed is unknown, defaulting to 1000 [ 1168.950270][T16748] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1169.070999][T16731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.225631][T16724] lo speed is unknown, defaulting to 1000 [ 1169.243080][T16724] lo speed is unknown, defaulting to 1000 [ 1169.245198][T26127] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.277070][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.306786][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.337503][ T1166] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.871923][T16782] netlink: 'syz.6.13242': attribute type 10 has an invalid length. [ 1169.899164][T16782] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13242'. [ 1169.943320][T16782] dummy0: entered promiscuous mode [ 1169.949050][T16782] dummy0: entered allmulticast mode [ 1170.005919][T16782] bond0: (slave dummy0): Releasing backup interface [ 1170.023605][T16782] bridge0: port 3(dummy0) entered blocking state [ 1170.030383][T16782] bridge0: port 3(dummy0) entered disabled state [ 1170.140600][T16792] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1170.163791][T16791] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.13244'. [ 1170.794913][T16822] netlink: 'syz.1.13254': attribute type 10 has an invalid length. [ 1170.825809][T16822] team0: Port device dummy0 added [ 1170.875132][T16828] netlink: 'syz.1.13254': attribute type 10 has an invalid length. [ 1170.942089][T16828] team0: Port device dummy0 removed [ 1171.015150][T16828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1171.069947][T16825] __nla_validate_parse: 1 callbacks suppressed [ 1171.069968][T16825] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.13258'. [ 1171.267155][T16842] FAULT_INJECTION: forcing a failure. [ 1171.267155][T16842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.311946][T16842] CPU: 1 UID: 0 PID: 16842 Comm: syz.0.13262 Not tainted syzkaller #0 PREEMPT(full) [ 1171.311974][T16842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1171.311986][T16842] Call Trace: [ 1171.311993][T16842] [ 1171.312001][T16842] dump_stack_lvl+0x189/0x250 [ 1171.312027][T16842] ? __pfx____ratelimit+0x10/0x10 [ 1171.312051][T16842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1171.312071][T16842] ? __pfx__printk+0x10/0x10 [ 1171.312094][T16842] ? lock_acquire+0x5f/0x360 [ 1171.312121][T16842] should_fail_ex+0x414/0x560 [ 1171.312154][T16842] prepare_alloc_pages+0x213/0x610 [ 1171.312174][T16842] __alloc_frozen_pages_noprof+0x123/0x370 [ 1171.312194][T16842] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1171.312216][T16842] ? policy_nodemask+0x27c/0x720 [ 1171.312241][T16842] alloc_pages_mpol+0x232/0x4a0 [ 1171.312266][T16842] vma_alloc_folio_noprof+0xe4/0x200 [ 1171.312291][T16842] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1171.312314][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.312333][T16842] ? lock_release+0x4b/0x3e0 [ 1171.312356][T16842] folio_prealloc+0x30/0x180 [ 1171.312378][T16842] do_wp_page+0x1231/0x5800 [ 1171.312403][T16842] ? lock_acquire+0x5f/0x360 [ 1171.312425][T16842] ? __pfx_do_wp_page+0x10/0x10 [ 1171.312442][T16842] ? do_raw_spin_lock+0x121/0x290 [ 1171.312462][T16842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1171.312479][T16842] ? ___pte_offset_map+0x45/0x250 [ 1171.312503][T16842] __handle_mm_fault+0x1033/0x5440 [ 1171.312530][T16842] ? __pfx___handle_mm_fault+0x10/0x10 [ 1171.312550][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.312574][T16842] ? follow_page_pte+0xd03/0x13e0 [ 1171.312598][T16842] handle_mm_fault+0x40a/0x8e0 [ 1171.312624][T16842] __get_user_pages+0x1699/0x2ce0 [ 1171.312642][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.312672][T16842] __gup_longterm_locked+0xde9/0x1660 [ 1171.312693][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.312709][T16842] ? lock_acquire+0x5f/0x360 [ 1171.312731][T16842] ? gup_fast_fallback+0x21f/0x2010 [ 1171.312753][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.312769][T16842] ? sanity_check_pinned_pages+0x1241/0x1300 [ 1171.312791][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.312809][T16842] gup_fast_fallback+0x1e6a/0x2010 [ 1171.312843][T16842] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1171.312863][T16842] ? kasan_save_track+0x4f/0x80 [ 1171.312883][T16842] ? kasan_save_track+0x3e/0x80 [ 1171.312902][T16842] ? __kasan_kmalloc+0x93/0xb0 [ 1171.312922][T16842] ? sock_kmalloc+0xd6/0x160 [ 1171.312941][T16842] ? af_alg_get_rsgl+0x236/0x810 [ 1171.312962][T16842] ? skcipher_recvmsg+0x3c0/0x11c0 [ 1171.312983][T16842] ? ____sys_recvmsg+0x1c9/0x460 [ 1171.312999][T16842] ? ___sys_recvmsg+0x1b5/0x510 [ 1171.313016][T16842] ? __x64_sys_recvmsg+0x198/0x260 [ 1171.313037][T16842] ? pin_user_pages_fast+0x4d/0xb0 [ 1171.313059][T16842] iov_iter_extract_pages+0x35a/0x5e0 [ 1171.313083][T16842] extract_iter_to_sg+0xe46/0x24e0 [ 1171.313116][T16842] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1171.313165][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.313181][T16842] ? trace_kmalloc+0x1f/0xd0 [ 1171.313201][T16842] ? __kmalloc_noprof+0x29b/0x4f0 [ 1171.313224][T16842] ? __asan_memset+0x22/0x50 [ 1171.313243][T16842] af_alg_get_rsgl+0x436/0x810 [ 1171.313272][T16842] skcipher_recvmsg+0x3c0/0x11c0 [ 1171.313294][T16842] ? aa_sk_perm+0x81e/0x950 [ 1171.313322][T16842] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1171.313345][T16842] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1171.313363][T16842] ? security_socket_recvmsg+0x7e/0x2e0 [ 1171.313382][T16842] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1171.313402][T16842] sock_recvmsg+0x22c/0x270 [ 1171.313426][T16842] ____sys_recvmsg+0x1c9/0x460 [ 1171.313448][T16842] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1171.313473][T16842] ? import_iovec+0x74/0xa0 [ 1171.313494][T16842] ___sys_recvmsg+0x1b5/0x510 [ 1171.313511][T16842] ? get_pid_task+0x20/0x1f0 [ 1171.313534][T16842] ? __pfx____sys_recvmsg+0x10/0x10 [ 1171.313555][T16842] ? __fget_files+0x2a/0x420 [ 1171.313569][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.313593][T16842] ? __fget_files+0x3a0/0x420 [ 1171.313613][T16842] __x64_sys_recvmsg+0x198/0x260 [ 1171.313634][T16842] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1171.313657][T16842] ? __pfx_ksys_write+0x10/0x10 [ 1171.313678][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.313696][T16842] ? rcu_is_watching+0x15/0xb0 [ 1171.313714][T16842] do_syscall_64+0xfa/0x3b0 [ 1171.313731][T16842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.313750][T16842] ? clear_bhb_loop+0x60/0xb0 [ 1171.313768][T16842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.313785][T16842] RIP: 0033:0x7f5b8a38ebe9 [ 1171.313802][T16842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.313818][T16842] RSP: 002b:00007f5b8b1d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1171.313838][T16842] RAX: ffffffffffffffda RBX: 00007f5b8a5b5fa0 RCX: 00007f5b8a38ebe9 [ 1171.313851][T16842] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1171.313863][T16842] RBP: 00007f5b8b1d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.313875][T16842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1171.313886][T16842] R13: 00007f5b8a5b6038 R14: 00007f5b8a5b5fa0 R15: 00007ffcf2837148 [ 1171.313908][T16842] [ 1172.000453][T16849] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1172.080504][T16849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.094066][T16855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13265'. [ 1172.218804][T16864] FAULT_INJECTION: forcing a failure. [ 1172.218804][T16864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.235053][T16864] CPU: 1 UID: 0 PID: 16864 Comm: syz.6.13269 Not tainted syzkaller #0 PREEMPT(full) [ 1172.235080][T16864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1172.235092][T16864] Call Trace: [ 1172.235099][T16864] [ 1172.235108][T16864] dump_stack_lvl+0x189/0x250 [ 1172.235133][T16864] ? __pfx____ratelimit+0x10/0x10 [ 1172.235158][T16864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1172.235179][T16864] ? __pfx__printk+0x10/0x10 [ 1172.235199][T16864] ? __might_fault+0xb0/0x130 [ 1172.235226][T16864] ? rcu_is_watching+0x15/0xb0 [ 1172.235244][T16864] should_fail_ex+0x414/0x560 [ 1172.235269][T16864] _copy_from_iter+0x1db/0x16f0 [ 1172.235292][T16864] ? __pfx__copy_from_iter+0x10/0x10 [ 1172.235311][T16864] ? rcu_is_watching+0x15/0xb0 [ 1172.235336][T16864] ? trace_kmalloc+0x1f/0xd0 [ 1172.235357][T16864] ? kernfs_fop_write_iter+0x158/0x4f0 [ 1172.235382][T16864] kernfs_fop_write_iter+0x19f/0x4f0 [ 1172.235408][T16864] vfs_write+0x5c9/0xb30 [ 1172.235432][T16864] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1172.235455][T16864] ? __pfx_vfs_write+0x10/0x10 [ 1172.235481][T16864] ? __fget_files+0x2a/0x420 [ 1172.235500][T16864] ksys_write+0x145/0x250 [ 1172.235522][T16864] ? __pfx_ksys_write+0x10/0x10 [ 1172.235542][T16864] ? rcu_is_watching+0x15/0xb0 [ 1172.235560][T16864] ? rcu_is_watching+0x15/0xb0 [ 1172.235579][T16864] do_syscall_64+0xfa/0x3b0 [ 1172.235596][T16864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.235613][T16864] ? clear_bhb_loop+0x60/0xb0 [ 1172.235633][T16864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.235651][T16864] RIP: 0033:0x7f7e0618ebe9 [ 1172.235667][T16864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.235683][T16864] RSP: 002b:00007f7e06fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.235703][T16864] RAX: ffffffffffffffda RBX: 00007f7e063b5fa0 RCX: 00007f7e0618ebe9 [ 1172.235717][T16864] RDX: 000000000000000a RSI: 0000200000000140 RDI: 0000000000000006 [ 1172.235729][T16864] RBP: 00007f7e06fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.235741][T16864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.235752][T16864] R13: 00007f7e063b6038 R14: 00007f7e063b5fa0 R15: 00007ffcf0e2cd18 [ 1172.235773][T16864] [ 1172.471687][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13271'. [ 1172.491341][T16867] ip6tnl0: entered promiscuous mode [ 1172.496585][T16867] ip6tnl0: entered allmulticast mode [ 1172.552675][T16863] lo speed is unknown, defaulting to 1000 [ 1172.559227][T16863] lo speed is unknown, defaulting to 1000 [ 1172.645324][T16875] bond0: entered promiscuous mode [ 1172.656521][T16875] dummy0: entered promiscuous mode [ 1172.663325][T16875] batadv0: entered promiscuous mode [ 1172.669665][T16875] debugfs: 'hsr1' already exists in 'hsr' [ 1172.676245][T16875] Cannot create hsr debugfs directory [ 1172.682423][T16875] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1172.738406][T16880] sctp: [Deprecated]: syz.5.13277 (pid 16880) Use of int in max_burst socket option. [ 1172.738406][T16880] Use struct sctp_assoc_value instead [ 1172.814915][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13277'. [ 1172.892144][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13280'. [ 1172.925229][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13280'. [ 1172.952915][T16893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13280'. [ 1172.974940][T16893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13280'. [ 1172.993593][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13282'. [ 1172.994439][T16895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13284'. [ 1173.157962][T16902] netlink: 'syz.1.13287': attribute type 21 has an invalid length. [ 1173.194724][T16888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1173.218934][T16899] geneve3: left promiscuous mode [ 1173.264294][T16893] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1173.289193][ T49] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.368339][T16910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.396428][T16910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.416205][T16910] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 1173.427620][T16910] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1173.438682][T16910] bond0 (unregistering): Released all slaves [ 1173.458260][ T49] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.494557][ T49] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.538214][ T49] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.648244][T16927] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1174.707103][T16959] netlink: 'syz.6.13302': attribute type 39 has an invalid length. [ 1174.909001][T16961] tipc: Enabled bearer , priority 0 [ 1174.916737][T16961] syzkaller0: entered promiscuous mode [ 1174.922827][T16961] syzkaller0: entered allmulticast mode [ 1174.934628][T16961] tipc: Resetting bearer [ 1174.943171][T16960] tipc: Resetting bearer [ 1174.954546][T16960] tipc: Disabling bearer [ 1175.188570][T16977] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1175.222643][T16982] FAULT_INJECTION: forcing a failure. [ 1175.222643][T16982] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.237908][T16982] CPU: 1 UID: 0 PID: 16982 Comm: syz.6.13309 Not tainted syzkaller #0 PREEMPT(full) [ 1175.237934][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1175.237945][T16982] Call Trace: [ 1175.237952][T16982] [ 1175.237960][T16982] dump_stack_lvl+0x189/0x250 [ 1175.237995][T16982] ? __pfx____ratelimit+0x10/0x10 [ 1175.238018][T16982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.238036][T16982] ? __pfx__printk+0x10/0x10 [ 1175.238058][T16982] ? fs_reclaim_acquire+0x7d/0x100 [ 1175.238082][T16982] ? rcu_is_watching+0x15/0xb0 [ 1175.238100][T16982] ? __pfx___might_resched+0x10/0x10 [ 1175.238115][T16982] ? lock_acquire+0x5f/0x360 [ 1175.238138][T16982] should_fail_ex+0x414/0x560 [ 1175.238162][T16982] should_failslab+0xa8/0x100 [ 1175.238187][T16982] __kmalloc_noprof+0xcb/0x4f0 [ 1175.238208][T16982] ? __kasan_kmalloc+0x93/0xb0 [ 1175.238228][T16982] ? nla_strdup+0x9d/0x140 [ 1175.238253][T16982] nla_strdup+0x9d/0x140 [ 1175.238278][T16982] nf_tables_newtable+0x491/0x1890 [ 1175.238296][T16982] ? nfnetlink_subsys_unregister+0x171/0x1b0 [ 1175.238320][T16982] ? lock_release+0x4b/0x3e0 [ 1175.238348][T16982] nfnetlink_rcv+0x112f/0x2520 [ 1175.238383][T16982] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1175.238411][T16982] ? ref_tracker_free+0x63a/0x7d0 [ 1175.238447][T16982] ? __netlink_deliver_tap+0x807/0x850 [ 1175.238474][T16982] ? netlink_deliver_tap+0x2e/0x1b0 [ 1175.238499][T16982] ? lock_release+0x4b/0x3e0 [ 1175.238527][T16982] netlink_unicast+0x82f/0x9e0 [ 1175.238551][T16982] ? __pfx_netlink_unicast+0x10/0x10 [ 1175.238573][T16982] ? netlink_sendmsg+0x642/0xb30 [ 1175.238585][T16982] ? skb_put+0x11b/0x210 [ 1175.238595][T16982] netlink_sendmsg+0x805/0xb30 [ 1175.238606][T16982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.238616][T16982] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1175.238625][T16982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1175.238636][T16982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1175.238645][T16982] __sock_sendmsg+0x21c/0x270 [ 1175.238658][T16982] ____sys_sendmsg+0x505/0x830 [ 1175.238670][T16982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.238682][T16982] ? import_iovec+0x74/0xa0 [ 1175.238694][T16982] ___sys_sendmsg+0x21f/0x2a0 [ 1175.238704][T16982] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.238724][T16982] ? __fget_files+0x2a/0x420 [ 1175.238734][T16982] ? __fget_files+0x3a0/0x420 [ 1175.238744][T16982] __x64_sys_sendmsg+0x19b/0x260 [ 1175.238755][T16982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1175.238768][T16982] ? __pfx_ksys_write+0x10/0x10 [ 1175.238780][T16982] ? rcu_is_watching+0x15/0xb0 [ 1175.238791][T16982] ? rcu_is_watching+0x15/0xb0 [ 1175.238800][T16982] do_syscall_64+0xfa/0x3b0 [ 1175.238810][T16982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.238820][T16982] ? clear_bhb_loop+0x60/0xb0 [ 1175.238831][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.238840][T16982] RIP: 0033:0x7f7e0618ebe9 [ 1175.238851][T16982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.238860][T16982] RSP: 002b:00007f7e06fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.238872][T16982] RAX: ffffffffffffffda RBX: 00007f7e063b5fa0 RCX: 00007f7e0618ebe9 [ 1175.238880][T16982] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1175.238886][T16982] RBP: 00007f7e06fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.238893][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.238899][T16982] R13: 00007f7e063b6038 R14: 00007f7e063b5fa0 R15: 00007ffcf0e2cd18 [ 1175.238910][T16982] [ 1175.795458][T17000] FAULT_INJECTION: forcing a failure. [ 1175.795458][T17000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.805334][T17002] sctp: [Deprecated]: syz.3.13316 (pid 17002) Use of int in max_burst socket option. [ 1175.805334][T17002] Use struct sctp_assoc_value instead [ 1175.858438][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.6.13315 Not tainted syzkaller #0 PREEMPT(full) [ 1175.858465][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1175.858476][T17000] Call Trace: [ 1175.858483][T17000] [ 1175.858491][T17000] dump_stack_lvl+0x189/0x250 [ 1175.858516][T17000] ? __pfx____ratelimit+0x10/0x10 [ 1175.858538][T17000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.858557][T17000] ? __pfx__printk+0x10/0x10 [ 1175.858577][T17000] ? __might_fault+0xb0/0x130 [ 1175.858602][T17000] ? rcu_is_watching+0x15/0xb0 [ 1175.858620][T17000] should_fail_ex+0x414/0x560 [ 1175.858645][T17000] _copy_from_user+0x2d/0xb0 [ 1175.858664][T17000] __sys_bpf+0x1ed/0x870 [ 1175.858687][T17000] ? __pfx___sys_bpf+0x10/0x10 [ 1175.858713][T17000] ? ksys_write+0x22a/0x250 [ 1175.858736][T17000] ? __pfx_ksys_write+0x10/0x10 [ 1175.858756][T17000] ? rcu_is_watching+0x15/0xb0 [ 1175.858776][T17000] __x64_sys_bpf+0x7c/0x90 [ 1175.858796][T17000] do_syscall_64+0xfa/0x3b0 [ 1175.858817][T17000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.858835][T17000] ? clear_bhb_loop+0x60/0xb0 [ 1175.858862][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.858879][T17000] RIP: 0033:0x7f7e0618ebe9 [ 1175.858894][T17000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.858910][T17000] RSP: 002b:00007f7e06fbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1175.858930][T17000] RAX: ffffffffffffffda RBX: 00007f7e063b5fa0 RCX: 00007f7e0618ebe9 [ 1175.858944][T17000] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000008 [ 1175.858956][T17000] RBP: 00007f7e06fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.858966][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.858974][T17000] R13: 00007f7e063b6038 R14: 00007f7e063b5fa0 R15: 00007ffcf0e2cd18 [ 1175.858994][T17000] [ 1176.397557][T17025] __nla_validate_parse: 12 callbacks suppressed [ 1176.397574][T17025] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13321'. [ 1176.438069][T17005] lo speed is unknown, defaulting to 1000 [ 1176.473651][T17005] lo speed is unknown, defaulting to 1000 [ 1176.562999][T17033] netlink: 'syz.3.13325': attribute type 10 has an invalid length. [ 1176.592813][T17033] team0: Port device dummy0 added [ 1176.616560][T17037] netlink: 'syz.3.13325': attribute type 10 has an invalid length. [ 1176.627995][T17036] tipc: Enabled bearer , priority 0 [ 1176.630403][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13328'. [ 1176.638368][T17036] syzkaller0: entered promiscuous mode [ 1176.649385][T17036] syzkaller0: entered allmulticast mode [ 1176.740146][T17037] team0: Port device dummy0 removed [ 1176.748647][T17037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1176.769076][T17042] pimreg: entered allmulticast mode [ 1176.777426][T17036] tipc: Resetting bearer [ 1176.795039][T17035] tipc: Resetting bearer [ 1176.826542][T17035] tipc: Disabling bearer [ 1176.915283][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.922868][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.168880][T17045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.229627][T17045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.372728][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13333'. [ 1177.586756][ T60] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.598260][ T60] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.611198][ T60] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.629212][ T60] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.884061][T17078] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13341'. [ 1178.117608][T17084] lo speed is unknown, defaulting to 1000 [ 1178.126455][T17084] lo speed is unknown, defaulting to 1000 [ 1178.359033][T17106] ip6tnl0: left promiscuous mode [ 1178.365716][T17106] ip6tnl0: left allmulticast mode [ 1178.748424][T17120] FAULT_INJECTION: forcing a failure. [ 1178.748424][T17120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.787704][T17120] CPU: 0 UID: 0 PID: 17120 Comm: syz.1.13355 Not tainted syzkaller #0 PREEMPT(full) [ 1178.787731][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1178.787743][T17120] Call Trace: [ 1178.787750][T17120] [ 1178.787758][T17120] dump_stack_lvl+0x189/0x250 [ 1178.787784][T17120] ? __pfx____ratelimit+0x10/0x10 [ 1178.787808][T17120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1178.787828][T17120] ? __pfx__printk+0x10/0x10 [ 1178.787850][T17120] ? lock_acquire+0x5f/0x360 [ 1178.787875][T17120] should_fail_ex+0x414/0x560 [ 1178.787899][T17120] prepare_alloc_pages+0x213/0x610 [ 1178.787919][T17120] __alloc_frozen_pages_noprof+0x123/0x370 [ 1178.787939][T17120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1178.787956][T17120] ? css_rstat_updated+0x23a/0x4f0 [ 1178.787977][T17120] ? policy_nodemask+0x27c/0x720 [ 1178.787999][T17120] ? __pfx_lru_add+0x10/0x10 [ 1178.788018][T17120] alloc_pages_mpol+0x232/0x4a0 [ 1178.788043][T17120] folio_alloc_mpol_noprof+0x39/0x70 [ 1178.788067][T17120] shmem_alloc_and_add_folio+0x447/0xf60 [ 1178.788093][T17120] ? filemap_get_entry+0xad/0x2f0 [ 1178.788114][T17120] ? filemap_get_entry+0xad/0x2f0 [ 1178.788132][T17120] ? shmem_huge_global_enabled+0x174/0x3a0 [ 1178.788153][T17120] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1178.788178][T17120] ? shmem_allowable_huge_orders+0x414/0x420 [ 1178.788202][T17120] shmem_get_folio_gfp+0x59d/0x1660 [ 1178.788232][T17120] shmem_fault+0x179/0x390 [ 1178.788258][T17120] __do_fault+0x138/0x390 [ 1178.788284][T17120] __handle_mm_fault+0x3611/0x5440 [ 1178.788313][T17120] ? __pfx___handle_mm_fault+0x10/0x10 [ 1178.788332][T17120] ? rcu_is_watching+0x15/0xb0 [ 1178.788366][T17120] ? find_vma+0xe7/0x160 [ 1178.788386][T17120] ? __pfx_find_vma+0x10/0x10 [ 1178.788408][T17120] handle_mm_fault+0x40a/0x8e0 [ 1178.788434][T17120] do_user_addr_fault+0x764/0x1390 [ 1178.788466][T17120] exc_page_fault+0x76/0xf0 [ 1178.788491][T17120] asm_exc_page_fault+0x26/0x30 [ 1178.788508][T17120] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1178.788530][T17120] Code: 09 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1178.788545][T17120] RSP: 0018:ffffc9000b3cfb98 EFLAGS: 00050202 [ 1178.788563][T17120] RAX: 00007ffffffff001 RBX: 00000000000200cc RCX: 00000000000073d8 [ 1178.788576][T17120] RDX: 0000000000000001 RSI: 0000200000039000 RDI: ffff88805ccd8cf4 [ 1178.788589][T17120] RBP: ffffc9000b3cfce0 R08: 0000000000000003 R09: 0000000000000004 [ 1178.788600][T17120] R10: dffffc0000000000 R11: ffffed100b99c019 R12: ffffc9000b3cfda8 [ 1178.788613][T17120] R13: 1ffff92001679fb5 R14: ffff88805ccc0000 R15: 000020000002030c [ 1178.788636][T17120] _copy_from_user+0x7a/0xb0 [ 1178.788655][T17120] generic_map_update_batch+0x572/0x7f0 [ 1178.788680][T17120] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1178.788699][T17120] ? __fget_files+0x2a/0x420 [ 1178.788717][T17120] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1178.788735][T17120] bpf_map_do_batch+0x369/0x5f0 [ 1178.788761][T17120] __sys_bpf+0x6af/0x870 [ 1178.788782][T17120] ? __pfx___sys_bpf+0x10/0x10 [ 1178.788809][T17120] ? ksys_write+0x22a/0x250 [ 1178.788831][T17120] ? __pfx_ksys_write+0x10/0x10 [ 1178.788852][T17120] ? rcu_is_watching+0x15/0xb0 [ 1178.788872][T17120] __x64_sys_bpf+0x7c/0x90 [ 1178.788891][T17120] do_syscall_64+0xfa/0x3b0 [ 1178.788907][T17120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.788925][T17120] ? clear_bhb_loop+0x60/0xb0 [ 1178.788944][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.788961][T17120] RIP: 0033:0x7efff8f8ebe9 [ 1178.788976][T17120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.788991][T17120] RSP: 002b:00007efff9e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1178.789008][T17120] RAX: ffffffffffffffda RBX: 00007efff91b5fa0 RCX: 00007efff8f8ebe9 [ 1178.789022][T17120] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 1178.789034][T17120] RBP: 00007efff9e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.789046][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.789057][T17120] R13: 00007efff91b6038 R14: 00007efff91b5fa0 R15: 00007ffd380e24f8 [ 1178.789077][T17120] [ 1179.304542][T17126] sctp: [Deprecated]: syz.5.13357 (pid 17126) Use of int in max_burst socket option. [ 1179.304542][T17126] Use struct sctp_assoc_value instead [ 1179.417071][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13357'. [ 1179.467698][T17132] netlink: 'syz.3.13361': attribute type 1 has an invalid length. [ 1179.524495][T17137] netlink: 'syz.6.13359': attribute type 10 has an invalid length. [ 1179.537536][T17140] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13361'. [ 1179.551508][T17132] bond1: entered promiscuous mode [ 1179.556574][T17132] bond1: entered allmulticast mode [ 1179.562315][T17132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1179.569669][T17137] dummy0: left allmulticast mode [ 1179.578790][T17141] netlink: 'syz.6.13359': attribute type 10 has an invalid length. [ 1179.580037][T17137] dummy0: left promiscuous mode [ 1179.614589][T17137] bridge0: port 3(dummy0) entered disabled state [ 1179.625101][T17137] team0: Port device dummy0 added [ 1179.711162][T17140] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1179.880057][T17132] bond2 (unregistering): Released all slaves [ 1180.067499][T17141] team0: Port device dummy0 removed [ 1180.119521][T17141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1180.231796][T17151] bond1: left promiscuous mode [ 1180.249889][T17151] bond1: left allmulticast mode [ 1180.503867][T17165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13369'. [ 1180.654861][T17172] sctp: [Deprecated]: syz.0.13372 (pid 17172) Use of int in max_burst socket option. [ 1180.654861][T17172] Use struct sctp_assoc_value instead [ 1180.697452][T17172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13372'. [ 1180.827580][T17184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13377'. [ 1180.838806][T17184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13377'. [ 1180.904140][T17190] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1181.344628][T17212] lo speed is unknown, defaulting to 1000 [ 1181.351463][T17212] lo speed is unknown, defaulting to 1000 [ 1181.527366][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13388'. [ 1181.576104][T17226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13388'. [ 1181.594040][T17228] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13389'. [ 1181.597335][T17226] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.13388'. [ 1182.055973][T17235] lo speed is unknown, defaulting to 1000 [ 1182.063936][T17235] lo speed is unknown, defaulting to 1000 [ 1182.094354][T17281] netlink: 'syz.5.13397': attribute type 10 has an invalid length. [ 1182.121274][T17281] bond0: (slave dummy0): Releasing backup interface [ 1182.144850][T17281] dummy0: left promiscuous mode [ 1182.153124][T17286] netlink: 'syz.5.13397': attribute type 10 has an invalid length. [ 1182.174030][T17281] team0: Port device dummy0 added [ 1182.194202][T17286] team0: Port device dummy0 removed [ 1182.225360][T17286] dummy0: entered promiscuous mode [ 1182.250629][T17286] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1182.923240][T17317] FAULT_INJECTION: forcing a failure. [ 1182.923240][T17317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.949500][T17317] CPU: 0 UID: 0 PID: 17317 Comm: syz.3.13409 Not tainted syzkaller #0 PREEMPT(full) [ 1182.949529][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1182.949541][T17317] Call Trace: [ 1182.949549][T17317] [ 1182.949559][T17317] dump_stack_lvl+0x189/0x250 [ 1182.949586][T17317] ? __pfx____ratelimit+0x10/0x10 [ 1182.949611][T17317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.949632][T17317] ? __pfx__printk+0x10/0x10 [ 1182.949658][T17317] ? rcu_is_watching+0x15/0xb0 [ 1182.949677][T17317] should_fail_ex+0x414/0x560 [ 1182.949702][T17317] _copy_to_user+0x31/0xb0 [ 1182.949724][T17317] simple_read_from_buffer+0xe1/0x170 [ 1182.949751][T17317] proc_fail_nth_read+0x1b3/0x220 [ 1182.949776][T17317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1182.949793][T17317] ? rw_verify_area+0x2a6/0x4d0 [ 1182.949812][T17317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1182.949829][T17317] vfs_read+0x1fd/0xa30 [ 1182.949848][T17317] ? fdget_pos+0x247/0x320 [ 1182.949864][T17317] ? __pfx___mutex_lock+0x10/0x10 [ 1182.949878][T17317] ? __pfx_vfs_read+0x10/0x10 [ 1182.949902][T17317] ? __fget_files+0x3a0/0x420 [ 1182.949915][T17317] ? __fget_files+0x2a/0x420 [ 1182.949933][T17317] ksys_read+0x145/0x250 [ 1182.949955][T17317] ? __pfx_ksys_read+0x10/0x10 [ 1182.949977][T17317] ? rcu_is_watching+0x15/0xb0 [ 1182.949997][T17317] do_syscall_64+0xfa/0x3b0 [ 1182.950015][T17317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.950033][T17317] ? clear_bhb_loop+0x60/0xb0 [ 1182.950053][T17317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.950070][T17317] RIP: 0033:0x7f3949b8d5fc [ 1182.950087][T17317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1182.950103][T17317] RSP: 002b:00007f394aaad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1182.950123][T17317] RAX: ffffffffffffffda RBX: 00007f3949db5fa0 RCX: 00007f3949b8d5fc [ 1182.950138][T17317] RDX: 000000000000000f RSI: 00007f394aaad0a0 RDI: 0000000000000005 [ 1182.950150][T17317] RBP: 00007f394aaad090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.950162][T17317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.950174][T17317] R13: 00007f3949db6038 R14: 00007f3949db5fa0 R15: 00007fff540d3bf8 [ 1182.950202][T17317] [ 1183.239596][T17323] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13412'. [ 1183.589627][T17342] netlink: 'syz.0.13418': attribute type 15 has an invalid length. [ 1183.605127][T17345] netlink: 'syz.0.13418': attribute type 15 has an invalid length. [ 1183.654094][T17351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1183.667675][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13421'. [ 1183.726939][T17355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13423'. [ 1183.774478][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13425'. [ 1183.788929][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13425'. [ 1183.798748][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13425'. [ 1183.867977][T17367] netlink: 'syz.0.13429': attribute type 2 has an invalid length. [ 1184.082044][T17394] netlink: 'syz.0.13434': attribute type 1 has an invalid length. [ 1184.274035][T17408] netlink: 'syz.6.13437': attribute type 10 has an invalid length. [ 1184.325701][T17411] netlink: 'syz.6.13437': attribute type 10 has an invalid length. [ 1184.571592][T17408] bond0: (slave dummy0): Releasing backup interface [ 1184.615360][T17408] team0: Port device dummy0 added [ 1184.653818][T17411] team0: Port device dummy0 removed [ 1184.705792][T17411] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1184.985962][T17431] FAULT_INJECTION: forcing a failure. [ 1184.985962][T17431] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.019996][T17431] CPU: 1 UID: 0 PID: 17431 Comm: syz.1.13447 Not tainted syzkaller #0 PREEMPT(full) [ 1185.020023][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1185.020035][T17431] Call Trace: [ 1185.020042][T17431] [ 1185.020069][T17431] dump_stack_lvl+0x189/0x250 [ 1185.020095][T17431] ? __pfx____ratelimit+0x10/0x10 [ 1185.020119][T17431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.020140][T17431] ? __pfx__printk+0x10/0x10 [ 1185.020165][T17431] ? __pfx___might_resched+0x10/0x10 [ 1185.020193][T17431] ? lock_acquire+0x5f/0x360 [ 1185.020217][T17431] should_fail_ex+0x414/0x560 [ 1185.020242][T17431] ? page_pool_create_percpu+0x32a/0xbe0 [ 1185.020263][T17431] should_failslab+0xa8/0x100 [ 1185.020287][T17431] __kvmalloc_node_noprof+0x161/0x5f0 [ 1185.020311][T17431] ? page_pool_create_percpu+0x32a/0xbe0 [ 1185.020334][T17431] page_pool_create_percpu+0x32a/0xbe0 [ 1185.020360][T17431] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 1185.020388][T17431] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 1185.020427][T17431] ? stack_trace_save+0x9c/0xe0 [ 1185.020450][T17431] ? stack_depot_save_flags+0x40/0x860 [ 1185.020472][T17431] ? unwind_next_frame+0x11/0x2390 [ 1185.020504][T17431] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1185.020528][T17431] ? bpf_test_init+0xc2/0x170 [ 1185.020550][T17431] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 1185.020573][T17431] ? bpf_prog_test_run+0x2c7/0x340 [ 1185.020595][T17431] ? __sys_bpf+0x581/0x870 [ 1185.020613][T17431] ? __x64_sys_bpf+0x7c/0x90 [ 1185.020647][T17431] ? __might_fault+0xb0/0x130 [ 1185.020669][T17431] ? rcu_is_watching+0x15/0xb0 [ 1185.020687][T17431] ? lock_acquire+0x5f/0x360 [ 1185.020713][T17431] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1185.020731][T17431] ? __might_fault+0xcc/0x130 [ 1185.020754][T17431] ? _copy_from_user+0x94/0xb0 [ 1185.020773][T17431] ? bpf_test_init+0x133/0x170 [ 1185.020795][T17431] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1185.020821][T17431] bpf_prog_test_run_xdp+0x713/0x1000 [ 1185.020850][T17431] ? rcu_is_watching+0x15/0xb0 [ 1185.020869][T17431] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1185.020895][T17431] ? __fget_files+0x2a/0x420 [ 1185.020913][T17431] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1185.020938][T17431] bpf_prog_test_run+0x2c7/0x340 [ 1185.020963][T17431] __sys_bpf+0x581/0x870 [ 1185.020990][T17431] ? __pfx___sys_bpf+0x10/0x10 [ 1185.021017][T17431] ? ksys_write+0x22a/0x250 [ 1185.021044][T17431] ? __pfx_ksys_write+0x10/0x10 [ 1185.021064][T17431] ? rcu_is_watching+0x15/0xb0 [ 1185.021084][T17431] __x64_sys_bpf+0x7c/0x90 [ 1185.021104][T17431] do_syscall_64+0xfa/0x3b0 [ 1185.021121][T17431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.021139][T17431] ? clear_bhb_loop+0x60/0xb0 [ 1185.021158][T17431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.021177][T17431] RIP: 0033:0x7efff8f8ebe9 [ 1185.021193][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.021208][T17431] RSP: 002b:00007efff9e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1185.021228][T17431] RAX: ffffffffffffffda RBX: 00007efff91b5fa0 RCX: 00007efff8f8ebe9 [ 1185.021242][T17431] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1185.021255][T17431] RBP: 00007efff9e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.021267][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.021278][T17431] R13: 00007efff91b6038 R14: 00007efff91b5fa0 R15: 00007ffd380e24f8 [ 1185.021299][T17431] [ 1185.021324][T17431] page_pool_create_percpu() gave up with errno -12 [ 1185.115891][T17434] netlink: 'syz.5.13446': attribute type 15 has an invalid length. [ 1185.377474][T17443] netlink: 'syz.1.13450': attribute type 10 has an invalid length. [ 1185.472470][T17443] team0: Port device dummy0 added [ 1186.557823][T17482] __nla_validate_parse: 15 callbacks suppressed [ 1186.557845][T17482] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13464'. [ 1186.737391][T17471] bond0: (slave dummy0): Releasing backup interface [ 1186.764684][T17471] team0: Port device dummy0 added [ 1186.781324][T17472] team0: Port device dummy0 removed [ 1186.796279][T17472] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1186.807734][T17262] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.830715][T17262] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.854889][T17262] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.865982][T17262] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.890951][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13466'. [ 1186.929655][T17262] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.941515][T17497] sctp: [Deprecated]: syz.5.13468 (pid 17497) Use of int in max_burst socket option. [ 1186.941515][T17497] Use struct sctp_assoc_value instead [ 1186.960587][T17262] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.979740][T17262] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.009431][T17262] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.445834][T17265] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.460501][T17515] lo speed is unknown, defaulting to 1000 [ 1187.473206][T17265] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.492821][T17515] lo speed is unknown, defaulting to 1000 [ 1187.498805][T17265] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.526957][T17265] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.600051][T17533] sctp: [Deprecated]: syz.6.13482 (pid 17533) Use of int in max_burst socket option. [ 1187.600051][T17533] Use struct sctp_assoc_value instead [ 1187.706353][T17529] lo speed is unknown, defaulting to 1000 [ 1187.714319][T17529] lo speed is unknown, defaulting to 1000 [ 1187.835893][T17540] validate_nla: 5 callbacks suppressed [ 1187.835914][T17540] netlink: 'syz.5.13483': attribute type 10 has an invalid length. [ 1187.921312][T17543] netlink: 'syz.5.13483': attribute type 10 has an invalid length. [ 1187.993593][T17540] bond0: (slave dummy0): Releasing backup interface [ 1188.022102][T17540] dummy0: left promiscuous mode [ 1188.044152][T17540] team0: Port device dummy0 added [ 1188.069100][T17543] team0: Port device dummy0 removed [ 1188.096021][T17543] dummy0: entered promiscuous mode [ 1188.113357][T17543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1188.357183][T17556] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1188.747067][T17568] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13493'. [ 1188.777621][ T122] IPVS: starting estimator thread 0... [ 1188.880039][T17570] IPVS: using max 42 ests per chain, 100800 per kthread [ 1189.099480][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13497'. [ 1189.221975][T17579] netlink: 'syz.6.13497': attribute type 15 has an invalid length. [ 1189.263765][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1189.285360][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1189.310967][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1189.331638][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1189.348017][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1189.380697][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13498'. [ 1190.272333][T17664] pim6reg1: entered promiscuous mode [ 1190.284652][T17664] pim6reg1: entered allmulticast mode [ 1190.764946][T17688] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? Connection to 10.128.1.218 closed by remote host. [ 1191.959563][T17265] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1191.970643][T17265] bond0 (unregistering): Released all slaves [ 1191.981022][T17265] bond1 (unregistering): Released all slaves [ 1192.245996][T17265] hsr_slave_0: left promiscuous mode [ 1192.255755][T17265] hsr_slave_1: left promiscuous mode [ 1192.326731][T17265] Oops: general protection fault, probably for non-canonical address 0xdffffc001ffea000: 0000 [#1] SMP KASAN PTI [ 1192.338649][T17265] KASAN: probably user-memory-access in range [0x00000000fff50000-0x00000000fff50007] [ 1192.348180][T17265] CPU: 0 UID: 0 PID: 17265 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 1192.357801][T17265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1192.367839][T17265] Workqueue: netns cleanup_net [ 1192.372628][T17265] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 1192.378270][T17265] Code: ff ff ff e8 9d 36 41 01 89 c5 31 ff 89 c6 e8 12 eb 86 f7 85 ed 74 40 e8 c9 e6 86 f7 eb 05 e8 c2 e6 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 7c 52 ea f7 4d 8b 27 49 8d 7f 30 [ 1192.397859][T17265] RSP: 0018:ffffc9000c6af390 EFLAGS: 00010206 [ 1192.403906][T17265] RAX: 000000001ffea000 RBX: ffff888023cb0538 RCX: ffff888068c71e00 [ 1192.411881][T17265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1192.419851][T17265] RBP: 0000000000000000 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 1192.427824][T17265] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88803a9bb428 [ 1192.435795][T17265] R13: dffffc0000000000 R14: ffff88803a9bb400 R15: 00000000fff50000 [ 1192.443751][T17265] FS: 0000000000000000(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 1192.452665][T17265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.459228][T17265] CR2: 000055556c8d15c8 CR3: 0000000033658000 CR4: 00000000003526f0 [ 1192.467185][T17265] Call Trace: [ 1192.470458][T17265] [ 1192.473435][T17265] ipv6_mc_destroy_dev+0x45/0x5a0 [ 1192.478453][T17265] addrconf_ifdown+0x139e/0x1880 [ 1192.483379][T17265] ? tls_dev_event+0x717/0xec0 [ 1192.488126][T17265] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1192.493393][T17265] ? lock_release+0x4b/0x3e0 [ 1192.497969][T17265] ? net_generic+0x1e/0x240 [ 1192.502465][T17265] ? __pfx_tls_dev_event+0x10/0x10 [ 1192.507910][T17265] addrconf_notify+0x1bc/0x1010 [ 1192.512765][T17265] notifier_call_chain+0x1b3/0x3e0 [ 1192.517861][T17265] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 1192.524270][T17265] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1192.531024][T17265] ? unregister_netdevice_queue+0x1b3/0x380 [ 1192.536901][T17265] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1192.543132][T17265] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 1192.549272][T17265] default_device_exit_batch+0x819/0x890 [ 1192.554982][T17265] ? __pfx___might_resched+0x10/0x10 [ 1192.560251][T17265] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1192.566413][T17265] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1192.571858][T17265] ? net_generic+0x1e/0x240 [ 1192.576351][T17265] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1192.582492][T17265] ops_undo_list+0x525/0x990 [ 1192.587066][T17265] ? __pfx_ops_undo_list+0x10/0x10 [ 1192.592157][T17265] ? do_raw_spin_unlock+0x122/0x240 [ 1192.597343][T17265] cleanup_net+0x4c5/0x800 [ 1192.601742][T17265] ? __pfx_cleanup_net+0x10/0x10 [ 1192.606660][T17265] ? rcu_is_watching+0x15/0xb0 [ 1192.611403][T17265] ? process_scheduled_works+0x9ef/0x17b0 [ 1192.617106][T17265] ? process_scheduled_works+0x9ef/0x17b0 [ 1192.622813][T17265] process_scheduled_works+0xae1/0x17b0 [ 1192.628368][T17265] ? __pfx_process_scheduled_works+0x10/0x10 [ 1192.634347][T17265] worker_thread+0x8a0/0xda0 [ 1192.638946][T17265] kthread+0x70e/0x8a0 [ 1192.643017][T17265] ? __pfx_worker_thread+0x10/0x10 [ 1192.648122][T17265] ? __pfx_kthread+0x10/0x10 [ 1192.652710][T17265] ? rcu_is_watching+0x15/0xb0 [ 1192.657460][T17265] ? __pfx_kthread+0x10/0x10 [ 1192.662035][T17265] ret_from_fork+0x3f9/0x770 [ 1192.666611][T17265] ? __pfx_ret_from_fork+0x10/0x10 [ 1192.671711][T17265] ? __switch_to_asm+0x39/0x70 [ 1192.676466][T17265] ? __switch_to_asm+0x33/0x70 [ 1192.681386][T17265] ? __pfx_kthread+0x10/0x10 [ 1192.685962][T17265] ret_from_fork_asm+0x1a/0x30 [ 1192.690722][T17265] [ 1192.693907][T17265] Modules linked in: [ 1192.699897][T17265] ---[ end trace 0000000000000000 ]--- [ 1192.706345][T17265] RIP: 0010:mld_clear_delrec+0x3a5/0x660 [ 1192.712851][T17265] Code: ff ff ff e8 9d 36 41 01 89 c5 31 ff 89 c6 e8 12 eb 86 f7 85 ed 74 40 e8 c9 e6 86 f7 eb 05 e8 c2 e6 86 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 7c 52 ea f7 4d 8b 27 49 8d 7f 30 [ 1192.734103][T17265] RSP: 0018:ffffc9000c6af390 EFLAGS: 00010206 [ 1192.740271][T17265] RAX: 000000001ffea000 RBX: ffff888023cb0538 RCX: ffff888068c71e00 [ 1192.748255][T17265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1192.757093][T17265] RBP: 0000000000000000 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 1192.765263][T17265] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88803a9bb428 [ 1192.773920][T17265] R13: dffffc0000000000 R14: ffff88803a9bb400 R15: 00000000fff50000 [ 1192.782505][T17265] FS: 0000000000000000(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 1192.791609][T17265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.798215][T17265] CR2: 00007f8c91bf84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1192.807494][T17265] Kernel panic - not syncing: Fatal exception [ 1192.813873][T17265] Kernel Offset: disabled [ 1192.818204][T17265] Rebooting in 86400 seconds..