last executing test programs: 9.357380362s ago: executing program 0 (id=984): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES16=r2, @ANYBLOB="00000400000001000c002b800857a400", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 5.106526683s ago: executing program 0 (id=1020): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 4.676666335s ago: executing program 0 (id=1023): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x4a, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 'veth1_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000500), &(0x7f0000000100)=@udp6=r1, 0x1}, 0x20) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @remote}, 0xb6b2ca0ebc195c99, {0x2, 0x4e24, @multicast2}, 'veth0_vlan\x00'}) pipe(&(0x7f0000000080)) 4.443597514s ago: executing program 0 (id=1026): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="06000e0004000000be7000005c0000000000000062930948f1bf3de029437f9c081b0405000000000000002c010000001e37ba5048b00c7d9f4dc5704046d819ec84134ffa65cda304cb07d391824b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006ac0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x264, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x250, 0x1, [@m_connmark={0x114, 0x2, 0x0, 0x0, {{0xd}, {0xe4, 0xf5, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x0, 0x7, 0x20000007}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x1, 0x5, 0x1ff, 0x10}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x766c, 0x4, 0x10000000, 0x9, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x10000005, 0x2, 0x90df}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0xc, 0x10001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0xe, 0x80000000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x20000000, 0x4ddf, 0xffff9d77}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xd, 0x1, 0xde, 0x80000001}, 0xe730}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x138, 0x5, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1e, 0x7091, 0x0, 0x1, 0xffff}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xd7, 0x6, "e79343a7e68dc93478d5d2ef87f6389ac2ed02b84d388d13456492eb7adc77023cc6ac4f27c15ebe42f3ef6d1c47a2119faed6f5b9bed4076b2c022405313cc318cbc2fa43eaf3e70fe810bee4f903d540807a3dd387ca981a5ee08e7636b1df9401f070c3ed8c07d488702fbba6b0b9ac620e2df4ce51b30ddff8df5cbfa764f0823e13878deb92161595cf948ef6fd6394ac590533a3d82fb4c3fb71d919ab9453f04d7f06c714786db219f75e7e2a59fc309358a47b3cdcde6f3f3423c2f00d22281838e98c236d6cbbe0b61ad91bcf74e9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x264}}, 0x0) r2 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb}]}, 0x1f}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x10, r4, 0xe38d3000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) socket$can_bcm(0x1d, 0x2, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x65, "9c4677ad377bb9202e8b46abf41f74106a8e9b625bb6984ae494663dbe2e110bfbde756bba14b53f6fc42597182c3112809a7bdcc1e6c184e1c727688c2d0e89d888a7795612964854ec7720824a22d25c3b2cc8fa998dc8c1c507070689099e47b7b417a9"}, &(0x7f0000000300)=0x6d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000080), 0x10) 4.030696248s ago: executing program 0 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x48}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x2000000}}, 0x48}}, 0x0) 3.778540978s ago: executing program 0 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x6, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/909], &(0x7f0000000600)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x45, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x61e}]}, 0x3c}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r8, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="ce6f"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, 0x2c}}, 0x8400) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r0, 0x0, 0xc7, 0x3d, &(0x7f0000000740)="2b7a15a2fb36895f208eb8cbfb4707213844937e4a7e7cb71dde75e618f5314b3c1ffb18b4fe1c6c3a2e545a5b32c8d23db5920a0c5c4e67e113512f464b7c738e225399131dd1159ea0216c2e72888be4b7afc7fcb4068b5e136cf34ac91b49ed3ac814f76be7d9842cae976ba5a7cd01a9ec669c8ceec6f1a115371bdda567ee5d218a5844c82d4b58ae6c935fc7844badea7bf0aa481768909b665dc0745fe438a1d9c45081c26108b2e553358c0dafde231071d6a99416726b637912d51225226651ee13c1", &(0x7f0000000840)=""/61, 0x4, 0x0, 0xea, 0x66, &(0x7f0000001080)="b233fe04a75a355aba12e037003a74cc0502de5f6406e39439b84e795a97c312775bd21796c31ba969c68876107ec73aec93f8edfba38f4e99ea7cf926219243f8321ef728f3782941f21014a76f77c00716efe7657fdf5097ad69b3e5b82c24b5152bd5ce3b9c23b749fbcc77439e76db227af46065303a678ba544a997704db0f712fc8056b3ad5e47c355d3268c1a5004cdd60438df850177ff228f8a4a0115f75cc681c45999ddcce0c7f9cf1b8ecbab085d67f0877b336fec1f3b48ed74bf880809ebbf7d08242f9a4b45330235c1dd1d25034d81de6e085bda3ffdf2dde6e7006648881fac2e4e", &(0x7f0000000880)="55f40dbb3faa0d9a921d926e65dd4221312d132c4539d71728cb91137f383fb9bcaebc769d3b7b0c718eb31a8a4ffc465cc367fbdc48ac4be789c033946e1424fe928d39afd7a19b6f3cb4a9c2bc1fe5e2dcff6315106f3826da4ae58dffe5babff1af039b6a", 0x2, 0x0, 0x6}, 0x50) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty}}}], 0x20}}], 0x1, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200480, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="31032dbd7000fda600000b00000008000300", @ANYRES32], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r12) 3.507386625s ago: executing program 1 (id=1036): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x13d, @private2, 0xffffffff}], 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b0013000000080001000000000008004f00000000000800150004000000080003"], 0x38}}, 0x80) 3.267967943s ago: executing program 3 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="84", 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb}, 0x38) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0x11, 0x148, 0x170, 0x0, 0x2b8, 0x2a8, 0x2a8, 0x2b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x37, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@empty, [0xffffffff, 0x0, 0xff000000, 0xffffffff], 0x4e21, 0x21, 0x7, 0x4e21, 0x8, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x2, 0x1, 0xf, 0x4], 0x3, 0x1}, {0x4, [0x7, 0x3, 0x3, 0x6, 0x0, 0x1], 0x4, 0x4}}}}, {{@ip={@multicast2, @empty, 0x0, 0xff000000, 'vlan0\x00', 'syzkaller0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x0, 0x2, 0x0, 0x4], 0x2, 0x6}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0x4b, 0x3, 0x9, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x2d3c, 0x30, 0x300, 0x0, 0x0, {}, [{0x2d28, 0x1, [@m_pedit={0x2d24, 0x3, 0x0, 0x0, {{0xa}, {0x2c18, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x2, 0x101, 0x0, 0xfffffffb, 0x2}, 0x9, 0x7, [{0xc5, 0x9, 0xffff, 0x0, 0x8, 0x5}, {0x5, 0x1, 0x2, 0x2, 0x9, 0xfc}, {0x7, 0x41c, 0x6, 0x2, 0x6e4, 0x160000}, {0x7, 0x7, 0x8, 0xfffffff9, 0x9, 0xffffffff}, {0x8000, 0x8000, 0x6ee, 0xd79c, 0x101, 0x5}, {0xc9, 0x4, 0x5, 0x1, 0x7fffffff, 0x9}, {0x2, 0x7, 0x8, 0x6, 0xfffffffc, 0x54decfc0}, {0xfffffffe, 0x1, 0x946, 0x6}]}, [{0x4, 0x8001, 0x4, 0x0, 0x7, 0x9}, {0x3, 0x4, 0xb, 0x4, 0x9, 0x1ff}, {0xa84c, 0x1ffc0, 0x1, 0x4, 0x2, 0x7969}, {0x7, 0x0, 0x2, 0x8, 0x7f, 0x6}, {0x10000, 0xc00000, 0x8, 0x2, 0x6, 0x7}, {0x101, 0x5, 0x5, 0x2, 0xb, 0x86}, {0xe635, 0x80000000, 0xf, 0x7, 0xfffffff7, 0x9}, {0x1, 0x3, 0x5cd, 0x3f3a, 0x5}, {0x4, 0xffffe004, 0x37, 0x8000, 0x0, 0xe}, {0x6, 0x8019, 0xfffffffe, 0x4, 0x2, 0x80000000}, {0x10001, 0x3, 0x800, 0x2, 0x7, 0x480000}, {0x2, 0x1c3, 0xf2, 0x1, 0x10000, 0x4192}, {0x5, 0x8, 0x5, 0xe, 0x1, 0x1ff}, {0xb, 0x400, 0x8, 0x3, 0xd, 0x1}, {0x7, 0x5, 0x5, 0x800, 0x4}, {0x6, 0xffffffff, 0x4, 0x7a, 0x6, 0x5}, {0x9, 0x4, 0x3, 0x0, 0x5f6, 0x64}, {0x3, 0xec1, 0x8, 0x6, 0x9, 0x4}, {0xb4f, 0x8, 0x9, 0x5c0, 0x1ff, 0x6}, {0x7, 0xd, 0x81, 0xfe, 0x5, 0x6}, {0x0, 0xb960, 0x4, 0x8, 0x7, 0xfffffffd}, {0x200, 0x3, 0x8, 0x1, 0x80, 0x664c}, {0x2, 0x4, 0x4, 0x7ff, 0xb, 0x9}, {0x8, 0x5, 0xd, 0x4, 0x7, 0x174edbe7}, {0x3, 0x9, 0x80000001, 0x2, 0x46, 0x9}, {0x5, 0x5, 0x3, 0x8, 0x0, 0x7}, {0x226e, 0x5, 0x1000, 0x3, 0x2, 0x80}, {0x68, 0xfffffff9, 0xb, 0xe636, 0x4, 0x4}, {0x2, 0x2, 0x81, 0xfffffffc, 0x7, 0x9}, {0xb1f, 0x4, 0x4, 0x0, 0x0, 0x27}, {0x5, 0x3, 0x4, 0xffff, 0x6}, {0x8000, 0x5, 0x4, 0x7, 0x3ff, 0x7}, {0x5, 0x8, 0xf, 0x2, 0x3d6, 0x101}, {0x8000, 0xa7a0, 0x1, 0x6, 0x8e9, 0x7ff}, {0x7, 0x4, 0x8, 0x2, 0x9}, {0x9, 0x44d17cc7, 0x3ff, 0xc4, 0xe, 0x80}, {0x6, 0x400, 0x18d, 0xc552, 0x0, 0xff}, {0x0, 0x7f, 0x4, 0x0, 0x809, 0x6}, {0x0, 0x1000, 0x5, 0x800, 0xffff8000, 0x4}, {0x8, 0x1ff, 0x1, 0x8, 0xbd9, 0x8}, {0x4, 0x6a5d, 0xf882, 0x9, 0x7fffffff, 0x3}, {0x4, 0x2, 0xe32, 0x3, 0x7, 0x6}, {0x5, 0x8, 0x8, 0xc, 0xc90}, {0x7, 0xe1, 0x10000, 0x6c, 0x8, 0x800}, {0xffff0001, 0x800, 0x3, 0x80000001, 0x6, 0x40}, {0x18, 0x9, 0xd1, 0x6, 0xc9c, 0xb}, {0x88e, 0x630, 0x7ec36ee1, 0x4, 0x7, 0x80000001}, {0x0, 0x7, 0x8, 0x4, 0xffff, 0x4}, {0x6, 0x1, 0x1, 0x6, 0x1000, 0x6}, {0xb26, 0x9, 0xb, 0x4, 0x7fffffff, 0x3ff}, {0x2, 0x8, 0x5, 0x8, 0x5, 0x6}, {0x1baf, 0x3, 0x0, 0x1, 0x8, 0x80}, {0xe, 0xdc, 0x61f, 0xfff, 0x8, 0x80000001}, {0x0, 0x5876, 0x2, 0x5, 0x5, 0x6}, {0xfcb97afe, 0x0, 0x3d9, 0x4, 0x100}, {0x1, 0x6, 0x5, 0x2, 0x4, 0x853}, {0x6, 0x7, 0x457, 0x0, 0x8, 0x800}, {0x4, 0x9, 0x6, 0x8, 0xffffffff, 0x2}, {0xa067, 0x0, 0x9ec, 0x6, 0x23de603d}, {0x2, 0x2, 0x6, 0x3d, 0x3ff, 0x8}, {0xd4, 0x3, 0x14bd, 0x80, 0x6, 0x7}, {0x3, 0x7, 0x2, 0x200, 0xffffffff, 0x1}, {0x1, 0x2, 0xd7b, 0x3, 0xfffffffe, 0x2834}, {0x3, 0x1, 0x0, 0x5, 0xaea, 0x6}, {0x8000, 0x1, 0x0, 0x4, 0x4, 0x9}, {0x8, 0x8, 0x400000, 0xef, 0x7, 0x8}, {0x1, 0x4, 0xe, 0x6, 0x10001, 0x5}, {0xc72, 0x6, 0x95, 0x6, 0x629, 0x200}, {0x92d, 0x9, 0x8, 0x10000, 0x4, 0x4}, {0x6, 0x5, 0xe, 0xefa, 0x0, 0x3}, {0x400, 0x9, 0x4, 0x6, 0x2, 0xa9a0}, {0xa38e, 0x8, 0x4, 0x0, 0x401, 0xfffffffb}, {0x9, 0x7, 0xf996, 0x1, 0x8, 0x6}, {0xb, 0x401, 0x7ff, 0xfffffffa, 0x16, 0x10}, {0x785a, 0x2, 0x8, 0x6710ef7b, 0x55, 0x2}, {0x5, 0x89a0, 0x6, 0xab, 0x10, 0x60}, {0x2, 0x80000001, 0x0, 0x1, 0x5, 0x4f}, {0x3, 0xfffffff9, 0x1b39, 0x7, 0xc, 0x7}, {0x7, 0x9, 0x10000, 0xe54, 0x5, 0x9}, {0x8, 0x7, 0x80000001, 0x119, 0x3, 0x9}, {0x5, 0x8000, 0x9, 0x40b, 0xfffffffb, 0xe5b}, {0x5cd, 0xfffffff6, 0x8, 0x1, 0x1000, 0x881}, {0x4, 0xc0000000, 0x4, 0x8001, 0x41d1, 0x40}, {0x6, 0x6, 0x10001, 0x7, 0x6, 0x100}, {0x0, 0x80000000, 0xe1b, 0x4, 0x7, 0x1}, {0x89, 0xffffffff, 0x2, 0x5, 0x81, 0xcd4d}, {0x0, 0xfffffeff, 0x1, 0x3836, 0x6, 0x3}, {0x7e83, 0x7, 0x1, 0xd4, 0xba44, 0x93}, {0x89a6, 0x9d2, 0x93a, 0x5, 0x5, 0xfffffffc}, {0x4, 0xd, 0xe070, 0x5, 0x53, 0x8}, {0xe, 0xfffffffe, 0xd6, 0x1ff, 0x7, 0x8000000}, {0x5, 0x0, 0x6, 0x10, 0x67, 0x400}, {0x6, 0x1000, 0xf, 0x4, 0x2, 0x4}, {0x5, 0x5, 0xfffffff8, 0x19, 0x0, 0x8}, {0xb, 0xf0, 0x1, 0x4, 0x400}, {0x0, 0x2, 0x64920395, 0x200, 0xc, 0x4}, {0x1, 0xfffffff7, 0xc, 0x100, 0x82, 0xbb15}, {0x8c3, 0xa, 0x7, 0xe, 0x4, 0x80}, {0xf8, 0x9, 0x0, 0x1ff, 0xd, 0x772}, {0x7, 0x1e9, 0x5, 0x6, 0x100, 0xffff}, {0x3, 0xe, 0x77c, 0x0, 0x11b3, 0x801c}, {0x4, 0x4, 0x1ff, 0x4, 0x80000000, 0x3ff}, {0x10, 0x6, 0x7, 0x0, 0xffffffff, 0x3}, {0x2, 0x0, 0x1, 0x8, 0x8, 0x6}, {0x0, 0x1ff, 0x80, 0x6, 0x7, 0x39}, {0x6, 0x5, 0x9, 0x8, 0xfffffffd, 0x5}, {0x2, 0x78d0, 0x8, 0x1, 0x4, 0x100}, {0x9, 0x1, 0xb96, 0x1, 0x6, 0x10001}, {0x8001, 0xd554, 0xd, 0xe, 0x7}, {0x80000001, 0x2, 0x5, 0x37e, 0x2, 0x5}, {0x1, 0x4, 0xc00000, 0x17d7e7d8, 0x81, 0x3}, {0xe7d, 0xfffffffc, 0x0, 0x7007, 0x2910, 0xf}, {0x220, 0x8, 0x4, 0xe60, 0x400, 0xa}, {0x80000000, 0x3, 0xc, 0x4, 0x9}, {0x4, 0x9, 0x5, 0xfffffffc, 0x100, 0xffff5620}, {0xc, 0x8, 0x9, 0x2, 0x9, 0x6}, {0x7, 0x3, 0x10, 0x1, 0x3, 0x7fff}, {0x6, 0x6, 0x9, 0x7f, 0x9, 0x5}, {0xfffffffb, 0xa, 0x4, 0x7a9, 0xffff, 0x5}, {0x0, 0x1ff, 0x6, 0x800, 0x7, 0x1}, {0x7, 0x6, 0x1, 0xb7f, 0x9, 0xd}, {0x7, 0x2, 0x10001, 0x646, 0x8, 0xb61}, {0x390b, 0x0, 0x0, 0xdde, 0x4, 0x94}, {0x3, 0x3ff, 0x1, 0x4, 0x10000, 0x9}, {0x6, 0xb0, 0x5, 0x8, 0x6, 0xb}, {0x9, 0x3, 0x1bcf, 0x5, 0x3, 0x80}, {0xdc2e, 0x6, 0x6, 0x5, 0xf1b6e29, 0x4}, {0x5, 0x3, 0x4, 0x2, 0xc, 0x2}], [{0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x5}, {0x3}, {0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {}, {}, {0x2}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x1, 0x78343c0a7054ce49}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {0x3}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x8001, 0xffff, 0x8, 0xb, 0x1}, 0x4, 0x1, [{0xc, 0x1, 0x79635d55, 0x2, 0x3, 0x4}, {0x0, 0x9, 0x8a, 0x7, 0x7ff, 0x2}]}, [{0x0, 0x0, 0x10, 0x9, 0x100, 0x7}, {0x9, 0x9b2, 0xd, 0xffffff68, 0x7, 0x5}, {0x262b0043, 0x80, 0xfffffff4, 0xfffff3c7, 0x0, 0x101}, {0x9, 0x3, 0x1, 0x400, 0x8, 0x1c0}, {0x4, 0x10, 0xa3, 0x0, 0xfffffffb, 0x8}, {0x6b, 0x3, 0x8001, 0x7a0a, 0x2, 0x2}, {0x8, 0x1000, 0x7fff80, 0x4, 0x89, 0x3}, {0x4, 0x100, 0x1, 0x3292, 0x7, 0x7}, {0x6, 0x8, 0xc, 0x0, 0x400, 0x2}, {0x3, 0xcb29, 0x101, 0x0, 0x9, 0x1}, {0x9, 0xae7, 0x0, 0x1, 0x6, 0xfff}, {0xa, 0x3e, 0x2, 0x9bef, 0x7fff, 0xe}, {0x47e, 0x9, 0x8, 0x7, 0xe2f, 0x415695ba}, {0x2, 0xc, 0x8, 0xdf, 0xd, 0xd}, {0x4, 0x8, 0x8001, 0x7, 0x8, 0x5}, {0x7, 0x2, 0x2d49, 0x8253, 0x3ff, 0x41}, {0x2, 0xfffff0b0, 0x4, 0x7, 0xcb, 0xfff}, {0x3, 0x4, 0x10000, 0xb4800000, 0x10, 0x5}, {0x3, 0xdd, 0x6, 0x5c2, 0x7, 0xfffffe00}, {0x8, 0x7, 0x4, 0x1, 0x7, 0xffffa614}, {0x0, 0xe391, 0xf4, 0x9, 0x1}, {0x676, 0x4, 0x1fb1, 0x5e3, 0x80000}, {0x7, 0x0, 0x7f, 0x2, 0x4, 0x8}, {0x1ff, 0x6, 0x8001, 0x4, 0x927, 0x1}, {0x7, 0x7, 0x6, 0x0, 0xffff0001, 0x6}, {0x3fd, 0x4, 0x5, 0x8, 0x80000001, 0x3}, {0x6, 0x7, 0x82, 0x7f, 0x6, 0x2}, {0x7, 0x7, 0x5b, 0x1, 0x1, 0x1}, {0x66, 0x8, 0x1, 0x0, 0xe8cf, 0x10}, {0x8, 0x1, 0x4, 0xf, 0x800, 0x2}, {0x9, 0x4, 0xb, 0x4, 0x6a2, 0xb091}, {0x1, 0xe7, 0x5, 0x8001, 0xffff, 0x9}, {0x4, 0x6, 0x9, 0x3, 0x39c, 0xf47}, {0x3, 0x7fffffff, 0x8001, 0x7, 0xd, 0x8}, {0x81, 0x101, 0x7b8e6acf, 0x1, 0x4, 0x7}, {0xf, 0x1, 0x6, 0x4, 0x2, 0x10000}, {0x7fffffff, 0x3, 0x101, 0x7, 0x74, 0x80000001}, {0xadf, 0xffffffff, 0x9, 0x4, 0x75, 0x8a2f}, {0x1, 0x80, 0x94c, 0x8, 0x7, 0x4}, {0xfff, 0x3, 0x6, 0xe4c2, 0x4000, 0x7}, {0x5, 0x5, 0x0, 0x5, 0x1, 0x400}, {0xfffffffb, 0x8001, 0x9, 0x0, 0x2, 0x7}, {0x98fa, 0x10001, 0x8, 0xffffffff, 0x2, 0x5}, {0xffffffc0, 0xfffffff8, 0x3, 0x6, 0x9, 0x1b0c}, {0xffffffff, 0x5, 0x5, 0xfffffffb, 0x4, 0x2}, {0x9, 0xc, 0x5, 0x2, 0xe9a6, 0xfffffff9}, {0x6, 0x5, 0xe5d, 0x1, 0x3, 0xe9}, {0x0, 0x3, 0x5, 0x6, 0x7, 0x7}, {0xfffffff5, 0xfffffffe, 0x8f9, 0x2, 0x2, 0x5}, {0xff, 0x7ff, 0x0, 0xfffffff8, 0x9, 0xf}, {0x1, 0xff, 0x7, 0x5, 0x2, 0x1c}, {0xfffffffe, 0x2, 0x1, 0x3cc, 0x7ff, 0x3}, {0x6, 0x5, 0x2, 0x2b6, 0x1}, {0xfefa, 0x5, 0x100, 0x6, 0xf7, 0x9}, {0x5, 0x2, 0x7, 0x7, 0xfffffff9, 0x2}, {0x4, 0x40, 0x6, 0x80000001, 0x3, 0x8}, {0x5, 0x1, 0x7, 0x1, 0x4, 0xe}, {0x9, 0x80000000, 0x1000, 0x401, 0xfffffffb}, {0x0, 0x7, 0x1000, 0x8, 0x5, 0x4}, {0x5, 0x9, 0x80000000, 0x3, 0x6, 0x8}, {0x2, 0x0, 0xc, 0x9, 0x2, 0xd}, {0x2, 0x0, 0x7f, 0x9, 0x0, 0x1c}, {0x5, 0x9, 0x8, 0x400, 0x8485, 0x5}, {0x4, 0x9, 0x8, 0x1, 0x1000, 0x655}, {0x9055, 0xfffffffa, 0xef, 0x2, 0x1b, 0x40}, {0x5, 0x2, 0x8, 0x4dd, 0xf95e000, 0x401}, {0x2d17, 0x7, 0x80000001, 0xfffffff8, 0x7ff, 0x3}, {0x10, 0x401, 0xfffffffb, 0x1, 0x400, 0x80000000}, {0x7ff, 0x80000000, 0x0, 0x3, 0x800, 0xf7d}, {0x5, 0x2, 0x8, 0x2, 0x6, 0x3ff}, {0x5, 0x3, 0x6, 0x9, 0x4, 0x100}, {0xfff, 0x1d, 0xceb5, 0x5, 0x3, 0x8}, {0x7ff, 0x10000000, 0x1, 0xc, 0x18, 0x1}, {0x2, 0xfffffffe, 0x7, 0x3, 0x5, 0x7}, {0x4, 0x7, 0x6578, 0xffff, 0xfff, 0x4}, {0x6, 0x5a, 0x0, 0x6c7e, 0x6, 0xffffff62}, {0x4, 0x9, 0x2a, 0x0, 0x8, 0x4}, {0x401, 0xfffffffc, 0x1, 0xe, 0x10, 0x7}, {0x6, 0x9, 0x9, 0x81, 0x10, 0x5}, {0x1, 0x2747, 0x8, 0x3, 0x8, 0x7}, {0x7fffffff, 0x5, 0x2, 0x81, 0x6, 0x9}, {0x9, 0x4, 0x8000, 0x101, 0x9, 0x5}, {0x9, 0xcc, 0xe, 0x8, 0x7ff, 0x461}, {0x1, 0x2, 0x4, 0x7, 0xffff, 0x9}, {0x9, 0x1, 0x4, 0x8, 0x101, 0x100}, {0x9, 0x7fffffff, 0x2, 0x1f3, 0xff, 0x200}, {0xffffff7f, 0x5, 0x9c2c, 0x401, 0xe, 0xd8f}, {0x3, 0x7, 0x5, 0xc, 0xffffffff, 0x401}, {0x9, 0x0, 0x2, 0xffff, 0x0, 0x656}, {0x5, 0x7, 0x3, 0xff, 0x9, 0x3ff}, {0x487, 0x1, 0x400, 0x101, 0x0, 0x5}, {0x881, 0x8000, 0x101, 0x0, 0x9, 0x2}, {0x80, 0xff, 0xbfcc, 0xdf24, 0x4, 0xf0}, {0x10000, 0xa00000, 0xb8f8, 0x7, 0x2, 0x7}, {0x6, 0x10001, 0x8, 0xc, 0x3, 0x2}, {0x80000000, 0x1, 0x8000, 0x3, 0x1000, 0x4}, {0x6, 0x1000, 0x2, 0xff56, 0x100, 0x22}, {0x6, 0xc, 0x4, 0x6, 0xfffffffa, 0x6}, {0x2, 0x3, 0xfffffff8, 0x6, 0x65, 0x7fff}, {0xe, 0x45, 0x25, 0x35, 0x4, 0x9b}, {0x1, 0x80000001, 0x200, 0x4, 0x6, 0x502}, {0x7, 0x4, 0x3, 0x101, 0x2, 0xa5}, {0x3ff, 0x2, 0x4, 0x3, 0xffff, 0x40000}, {0x401, 0xa345, 0xa, 0x9, 0x4, 0x6}, {0x4, 0x4, 0x1, 0x3, 0xffff, 0xfffffff8}, {0x6, 0x7f, 0x3, 0x3fff8000, 0x1, 0x2}, {0x1, 0xce18, 0xae28, 0x5e25e389, 0x7, 0x1}, {0x800, 0x4, 0xffff, 0xff, 0x8001, 0x2}, {0x3, 0xf7a4, 0x81, 0xb, 0x3, 0x72aa}, {0x10001, 0x4, 0x2, 0x3, 0x1}, {0xfffffffc, 0x5, 0xd0a, 0x3, 0x5}, {0x800, 0x9, 0x8, 0x6, 0xf034, 0x9}, {0x5, 0x8, 0x7, 0x4, 0x401, 0x4}, {0x80000001, 0x5, 0x3, 0x4, 0x8, 0x5}, {0xffffffff, 0x7, 0xe, 0xc46, 0x7, 0x7}, {0x1, 0x6, 0x7, 0x0, 0x87a, 0x361}, {0xfffffb0a, 0x140000, 0x8, 0x115b, 0x1ff, 0x129}, {0x6, 0x10001, 0xf82, 0x200, 0x2, 0xe655}, {0x2, 0x1a3d, 0x9, 0x883b, 0x6, 0x1}, {0x2, 0xc, 0x8d, 0x7, 0xd02, 0x100}, {0x9, 0x7, 0x200, 0x10, 0x8, 0x2}, {0x81, 0xe, 0x46, 0x3, 0x9, 0xa445}, {0x7, 0x0, 0x1, 0x7ff, 0x528, 0x25f64b4f}, {0x200, 0x0, 0xddf, 0x6, 0x1, 0x8}, {0x5, 0x10000, 0x40, 0xfffffffb, 0x8000, 0x3}, {0x8, 0x5, 0x7, 0x9, 0x10}, {0xc, 0x5, 0x3, 0x101, 0x80, 0x800}, {0x1, 0x2, 0xfffffffb, 0x9, 0x101, 0x24335aa7}], [{0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {}, {0x2}, {0x2}, {0x2}, {0x2}, {0x1}, {0x2, 0xc9c21ec416dd1f27}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x1}, {0x1}, {}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x2}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x3}, {0x5}, {0x4}, {0x3}, {0x7964702eb0cb796a, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0xbb6abdde28ce8b78, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x9, 0x8001, 0x20000000, 0x4, 0x5}, 0x9, 0x5, [{0x2c, 0x1, 0x9, 0x6, 0x9, 0x8}, {0x6, 0x1, 0x800, 0x5f5b, 0xc41d, 0x10}, {0x4, 0xd, 0x9, 0xf, 0x6, 0xea}, {0x400, 0x9, 0x1, 0x7, 0x380000, 0xd8e}, {0x0, 0xc1, 0x7, 0x8, 0x5, 0x6}, {0x7, 0x4, 0x8, 0x9, 0x8001, 0x3d8}, {0x3, 0x1, 0x9, 0x4, 0x9, 0x1}, {0x101, 0xa2ca, 0x1, 0x15f, 0x0, 0x6}]}, [{0x7, 0x7fffffff, 0xa, 0xcaa, 0xec, 0x3ff}, {0x6, 0x40, 0x9, 0x401, 0x4, 0x6}, {0x4, 0x80, 0x101, 0x3, 0x7f, 0x2}, {0xbb, 0x980, 0x8, 0x1, 0x9, 0x8}, {0x5, 0x5, 0xffffffff, 0x31, 0x361, 0x800}, {0x4, 0x37, 0x9, 0xffffffff, 0x1, 0x40}, {0x5b8, 0x0, 0x1, 0x6, 0x3, 0x7}, {0x2049, 0xfca, 0xfffffffc, 0x401, 0x2, 0x8}, {0x1, 0x80000000, 0x0, 0x9, 0x9, 0x6195}, {0x371, 0x6, 0x3, 0x7da1092b, 0x2, 0x1c5}, {0x20000000, 0xa6c, 0x35d6, 0x4, 0xfffffff4, 0x5}, {0x4, 0xe0, 0x2, 0x3, 0x1, 0xf429}, {0xe, 0x4, 0x0, 0x5, 0x400, 0x2eb4}, {0x7, 0x9e05, 0x1c0000, 0x0, 0x7, 0x5}, {0x1, 0x3, 0xaa1f, 0x6, 0x5, 0xd0d4}, {0x400, 0x3, 0xa0, 0xd2c3, 0x80000000, 0x2}, {0x4, 0x4, 0x1, 0x9, 0x80000001, 0xe4}, {0xff, 0x7fff, 0x2, 0xffff6e22, 0x2, 0x4}, {0x200, 0x7, 0x7, 0x4, 0x39, 0x1000}, {0x9c, 0x7, 0x4b, 0x5, 0x2, 0x1000}, {0x3, 0x4f71bd4, 0x4, 0x4, 0x8, 0x8}, {0x0, 0x3, 0x8, 0x1, 0x0, 0x10000}, {0x4, 0x3ff, 0x14, 0x7bd, 0x1, 0x8}, {0x57ee5810, 0x1, 0x2, 0x2, 0x6, 0x7ff}, {0x4, 0xb, 0x4, 0x2496, 0x7, 0x8}, {0x81, 0x6, 0x3, 0x6, 0x8, 0x6}, {0xfffffff8, 0x7, 0x6, 0x8, 0xe, 0x9}, {0x6, 0xfffffffe, 0x1, 0x80, 0x3ff, 0x4}, {0x39a, 0x100, 0x9, 0x83, 0x5, 0x7}, {0x7, 0x6, 0x9, 0x8, 0xfffffffb, 0x79ee}, {0x2, 0x0, 0xfffffffb, 0x0, 0x401, 0x7}, {0x8, 0x2, 0xffffffff, 0xb74, 0x0, 0x1}, {0x1d4f6bb, 0x4, 0x5, 0x80000001, 0x7, 0x2}, {0x7f80, 0x9, 0x0, 0x0, 0x9, 0xa83c0000}, {0xf, 0x16d6, 0x1, 0xffa, 0x4a7c, 0x7}, {0x2, 0xa57, 0xe2f, 0x4, 0xff, 0x2}, {0x5, 0x1, 0x5, 0x7, 0xf, 0x5}, {0x1, 0xc, 0x400000, 0xd, 0x63, 0xe9}, {0xc, 0x6, 0x6, 0x5, 0x9, 0x7ff}, {0x35b5, 0xff, 0x1, 0x9, 0x8}, {0x8, 0x5, 0xffffff01, 0xc69e, 0xf98c, 0x1}, {0xd, 0x9, 0x3, 0xe, 0x6, 0x400}, {0x1, 0xf25, 0x6, 0xa, 0x13, 0xfffffffa}, {0x1, 0x200, 0x3ff, 0x10000, 0x2, 0x10000}, {0x7f, 0xffc, 0xd90, 0x4, 0x1, 0x7}, {0xff, 0xde5, 0x10001, 0xffffffff, 0xfffffff7, 0x7}, {0x1, 0xfffffdd7, 0x9, 0xde, 0x80000001, 0x1ff}, {0x1, 0x3, 0xba, 0x5, 0xffffffff, 0x7fff}, {0x49, 0x0, 0xc5, 0x9, 0x5, 0x2}, {0x6, 0xbc6, 0x7, 0x7, 0x200, 0x4}, {0x1000, 0xfffffffa, 0x9, 0x0, 0x93a, 0x8}, {0xffffffff, 0x8, 0x4, 0x66, 0x2, 0x7ff}, {0x0, 0x257b, 0x7, 0x401, 0x7ff, 0x7}, {0x79, 0xfff, 0x7, 0x6, 0x3, 0x6}, {0x7, 0x0, 0x9, 0x401, 0x9, 0x1}, {0x3, 0x7fffffff, 0xffffff00, 0xfe, 0x4, 0x6}, {0xffffffff, 0x101, 0x3, 0x9, 0x0, 0x7fff}, {0xfffffff7, 0x87fb, 0x4, 0x7, 0x7, 0x80000001}, {0xfff, 0x664dd4e0, 0x5f, 0xfffffff8, 0x9, 0x2}, {0x40, 0x1, 0x401, 0x1, 0x99, 0x7fffffff}, {0x5, 0x7, 0x9, 0x9, 0x3}, {0x4, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x0, 0x3, 0x0, 0x2, 0xffff7fff, 0x7a10}, {0xff, 0x6, 0x6, 0x5, 0x1, 0x6}, {0xe, 0x2, 0x3, 0x100, 0x40, 0x2}, {0x800, 0xffffffff, 0x2, 0x0, 0x4, 0x3}, {0x9, 0x8, 0x9a, 0x6, 0x8, 0x8}, {0x8, 0x200, 0x57e9, 0x9, 0xf733, 0x6}, {0xa0000000, 0x3ff, 0x2b, 0x6, 0x1ff, 0x1}, {0x4, 0xf8, 0xbcbc0, 0x5, 0x9a, 0xd5}, {0x9, 0x6, 0xd0d, 0xc00000, 0x1, 0x40}, {0x4, 0x6, 0x8, 0xc91}, {0x6, 0x7, 0x0, 0xe, 0xa, 0xfffffff2}, {0x8, 0x10, 0x7fffffff, 0x8f, 0xfffffffc, 0x3}, {0x9, 0x912b, 0x5, 0x8, 0x1}, {0x1000, 0x7, 0x8, 0x6, 0xe76, 0x7}, {0x0, 0x0, 0x5, 0x1, 0x7}, {0x7fff, 0x30000000, 0x80, 0x200, 0x13, 0x8}, {0x2, 0x5, 0x692, 0x6, 0x200, 0x8000000}, {0x8, 0xb, 0x2, 0x2, 0x8, 0x5c6e}, {0x100, 0x4dd, 0x7ff, 0x2, 0x200, 0xf951}, {0x30d, 0x80, 0x4, 0x3ff, 0x7, 0x4}, {0x1, 0x20, 0x8, 0xffffff36, 0x4941, 0x8b34}, {0x5, 0x67a1, 0x5, 0xa, 0x10000}, {0x7, 0xaf2, 0xb1b, 0x1, 0x0, 0x2}, {0x7, 0x81, 0x4, 0x9, 0x1, 0xc}, {0xde1, 0x7f, 0x5, 0x6, 0x7, 0x7}, {0xffffffff, 0x0, 0xd8, 0xf, 0x6, 0x9}, {0x9, 0x0, 0x9, 0x1, 0x1e, 0x8559}, {0x9, 0xdf, 0x7, 0x9, 0x1, 0x4}, {0xd, 0x7d0, 0x9, 0x3, 0x5, 0x91}, {0x0, 0xfffffffc, 0x9, 0x8, 0x4, 0xc367}, {0x7, 0xf8, 0x800, 0x80000000, 0x1, 0x3ff}, {0x623, 0x5, 0xf175, 0x608, 0xfffffff9, 0x8}, {0x3, 0x2, 0xe1, 0xa74f, 0x3, 0x8}, {0xfffffc00, 0x7, 0x7, 0x2, 0x0, 0x6941}, {0xc, 0x6, 0x80, 0x3, 0x6, 0x2}, {0x3, 0xfffffff6, 0xb8, 0x5, 0x0, 0x3074}, {0xb4cf, 0x61db, 0x4ce1, 0x5, 0xe6352ae0, 0x40}, {0x9, 0x1, 0x7fffffff, 0x9, 0x0, 0x8}, {0x1, 0xf, 0x1, 0x3, 0xf, 0x200}, {0x7, 0x1ff, 0x80000000, 0x8, 0x6, 0x7}, {0x3, 0xff, 0x5, 0x7, 0x7fff, 0x6}, {0xfffffff7, 0xd89, 0xccb6, 0x3, 0x10000, 0x4}, {0xc, 0x2, 0x81, 0x6, 0x9, 0x31}, {0x3, 0x6, 0xfe7, 0x401, 0x2, 0xfffffffe}, {0x3, 0x5, 0x0, 0x400, 0x401, 0x6e}, {0x1, 0xa3, 0xb6, 0x1ff, 0x3, 0xf10}, {0x4, 0x89, 0xe, 0x6, 0x6, 0x7}, {0x10000, 0x2bd14b0b, 0x1, 0x8, 0x8, 0x7}, {0x5, 0x5, 0x0, 0x5, 0x8, 0x40}, {0x7, 0x5, 0x20c6, 0x5, 0x10f, 0x3ff}, {0xc7, 0x1, 0x5b, 0x1, 0x8, 0x5}, {0x9, 0x9, 0xfffffffa, 0xd28, 0xe, 0x7404350d}, {0x80000000, 0xf5, 0x7, 0x10, 0x9, 0x3d000000}, {0x5, 0xff, 0xfffffffd, 0x4, 0x82, 0x6}, {0x9, 0x5a, 0x6, 0x7fffffff, 0x80000000, 0x5}, {0x9, 0x5, 0x3, 0x1, 0x2, 0x8}, {0x9, 0x70, 0x1000, 0x8, 0xa, 0xffffff81}, {0x5, 0xf13a, 0x81, 0x8, 0x1, 0x34}, {0x0, 0x9, 0x5, 0x6, 0x3, 0x4}, {0x4, 0x1c53, 0xfffffffb, 0xffffffff, 0x0, 0x3}, {0x8, 0x1, 0x65, 0x7, 0x0, 0x400}, {0x101, 0x8, 0x5, 0x380000, 0x27a, 0xffff}, {0x0, 0xcc4, 0xe888, 0x0, 0x5, 0x488}, {0x0, 0x3, 0x1, 0x0, 0x10, 0xbff}, {0x9, 0x400, 0x401, 0x8000, 0x3}, {0x1, 0x0, 0x80000000, 0x6, 0x7fffffff, 0x9}], [{}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x94ce8515705d5ac9}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0xacf821f3f91266b7}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0xb1ebeccbf48b3fdd, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x862e2a5ebba2840a}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0xb344c5f0ee0916d3}, {0x5}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x3}, {}, {}, {0x5, 0x1}, {}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x934eb9ee606c7761}, {}, {0x2}], 0x1}}]}, {0xe2, 0x6, "5cbc6201c49cbef9ac3cb29cac9818229ce44cebf41857a3d4b44d74afa623a857e7d8a5eb83bb8819069d90f4dc069478e3da4e237c06090485fc2788310d43366ebd6efdf8c0c66abe019d1e1d94e2b25ef63276e41d5430b8d1315d7deb773594a78e8ff0223120365fa6e7103fa5ab65b2af1f78d16a73b495003646f493e70df06d5d12c3e656480128651da077e28cd22579344a8dc292f61673c47bc7556a9679869449d09ee1ba57cca37d7a2504b1f81df679f8333ab3f6617f38cad933c8156a48c779de364ab860eca0805d1871011cb7796761d8fbe81040"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2d3c}}, 0x48000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x30b}, 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000008000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000020000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 3.034688863s ago: executing program 1 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 1) 2.702636086s ago: executing program 4 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f000007", @ANYRESOCT=0x0, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=""/62, 0x3e}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffffffffffffd5, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.519548953s ago: executing program 1 (id=1043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "f638af87f60de83af507f41e54bad26aee733ca149c85c489ae3cc08823d4f060249916ee78a62cfadb62d04aea1897169"}, @NFTA_TABLE_USERDATA={0x0, 0x6, "fc4be743f817dc34796b49440c0ea5d1ef527ebbfec3f5569105ff4b6dacff25cf982a7b8b7d379a8be8c5add99a8016ce9bda40abe5f1ba9c4b3fe06dae25b3ef6dc5aff35db5495e3876f930a43b2041ca19f65532cf80ce52f1ce560332c58659ed9c8f2c7c4b51d5fd281c8c32"}, @NFTA_TABLE_USERDATA={0x0, 0x6, "b173d27ba818942413a8d71f0dd572f054d75be86ba0bc2d952bee4870af4c21a758ca7d7257667e3f864cfd334ba8c6325740bb657aa4a3"}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x0, 0x6, "18d493aec01a4161e06a8b9e204ac3a5514ae473"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x8008880) 2.462026063s ago: executing program 2 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000a00)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0x11, @void, @value}, 0x94) 2.388033652s ago: executing program 4 (id=1045): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8000, 0x4, 0x80000001}, &(0x7f00000000c0)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, 0x0, 0x8000) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x13) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) close(0x4) 2.2106944s ago: executing program 1 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x140b, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48001}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @in=@multicast2, 0xfffd, 0x0, 0x4e04, 0x0, 0x2, 0x0, 0x20, 0x29}, {@in=@remote, 0x2000, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x2, 0x4, 0xffffffffffffffff, 0x4, 0x20000000008}, {0x100000001, 0x8, 0x7f}, {0xf6}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "ed2f7e2afc190308cc15135fafb860dfe5e816"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x804) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='a', 0x1}, {&(0x7f0000000ac0)="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", 0x5ac}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f00761e99319cd3c3197ccf0840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.114740732s ago: executing program 2 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xfffffffffffffeda}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8850) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x3e47, 0xcb0e, {{0x1b, 0x4, 0x3, 0x6, 0x6c, 0x66, 0x0, 0x80, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0x3, [{@private=0xa010101}]}, @timestamp_prespec={0x44, 0x4c, 0x23, 0x3, 0x1, [{@local, 0x6}, {@loopback, 0xffffff26}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa4}, {@local, 0x5}, {@multicast1, 0x200}, {@empty, 0xfdb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x1}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8011}, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4100, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) pipe(&(0x7f0000000680)={0xffffffffffffffff}) readv(r4, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) connect$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0xe) 2.108927021s ago: executing program 4 (id=1048): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 1.536196453s ago: executing program 3 (id=1049): socket$inet6(0xa, 0x800000000000002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, 0x0, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2b, 0x7f, 0x9, 0x2, 0x29, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x0, 0x7, 0xff, 0xa}}) (async, rerun: 32) socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x3}, 0x8) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x3, 0x201, 0x9, 0xfffffffa, 0x4, 0xc, 0x2}, &(0x7f00000001c0)=0x20) (async) socket$inet_sctp(0x2, 0x1, 0x84) write$tun(r2, 0x0, 0x1e1) socket(0x22, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.272002272s ago: executing program 4 (id=1050): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1890ff00000000000000000000000000850000000f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) 1.210716944s ago: executing program 1 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 1.173540362s ago: executing program 3 (id=1052): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1a, 0x9, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}]}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000742a000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000001200)=ANY=[@ANYBLOB="ffffffffffff0180c200000388a800008100000086dd6000000000482f00fc0000000000000000000000000000fcff020000000000000000000000000001242081000000000000f4080000000800000086dd080088be00000000100000000100000000000000080022eb0000000020"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1e8, 0x2a8, 0x2a8, 0x1e8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x4, 0xe, 0x0, 0x3], 0x0, 0x6}, {0xffffffffffffffff, [0x11, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'ip6gretap0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x21, 0x3}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x3, 0x2, 0x0, 0x0, 0x1], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="080066bd7000fbdbdf251400000008000e000800000005000b00010000000800060003000000080011000d0000000500190010"], 0x3c}, 0x1, 0x0, 0x0, 0x8051}, 0x54) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000000101040000000000000000010000001c001880080001400000000008000240000000002f412df0e3e6c98b040001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffbe, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}}, 0xc800) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b00010025bd7000fddbdf25ff02000000000000000000001b000001ac1e00010800000000000000000000004e2200004e230004080000805c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffff0002000000000000010000000000000001000000000000800900000000000000000000008015010002004000000000000100000000000000fd0000000000000001000000000000000700000000000000000002030000000029000000000000000c00150053073500040000000c0008000800080001050000"], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1a, 0x9, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}]}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000742a000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_emit_ethernet(0x86, &(0x7f0000001200)=ANY=[@ANYBLOB="ffffffffffff0180c200000388a800008100000086dd6000000000482f00fc0000000000000000000000000000fcff020000000000000000000000000001242081000000000000f4080000000800000086dd080088be00000000100000000100000000000000080022eb0000000020"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) (async) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1e8, 0x2a8, 0x2a8, 0x1e8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x4, 0xe, 0x0, 0x3], 0x0, 0x6}, {0xffffffffffffffff, [0x11, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'ip6gretap0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x21, 0x3}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x3, 0x2, 0x0, 0x0, 0x1], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="080066bd7000fbdbdf251400000008000e000800000005000b00010000000800060003000000080011000d0000000500190010"], 0x3c}, 0x1, 0x0, 0x0, 0x8051}, 0x54) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000000101040000000000000000010000001c001880080001400000000008000240000000002f412df0e3e6c98b040001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffbe, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}}, 0xc800) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b00010025bd7000fddbdf25ff02000000000000000000001b000001ac1e00010800000000000000000000004e2200004e230004080000805c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffff0002000000000000010000000000000001000000000000800900000000000000000000008015010002004000000000000100000000000000fd0000000000000001000000000000000700000000000000000002030000000029000000000000000c00150053073500040000000c0008000800080001050000"], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async) 1.047497753s ago: executing program 2 (id=1053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 966.683746ms ago: executing program 4 (id=1054): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x14b0}, 0x1, 0x0, 0x0, 0x891}, 0x20000044) 852.841698ms ago: executing program 3 (id=1055): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x2, @private2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffffab}}, @flowinfo={{0x14, 0x29, 0xb, 0x4610}}], 0x30, 0xe0ff}}], 0x1, 0x8c1) 837.459502ms ago: executing program 2 (id=1056): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140ffff"], 0xe0}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) 706.600901ms ago: executing program 4 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001cc0)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4008000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 667.374071ms ago: executing program 3 (id=1058): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r3}, 0xffffffffffffff32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) 261.198201ms ago: executing program 2 (id=1059): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1407, 0x400, 0x6, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1407, 0x400, 0x6, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000004000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}], 0x1, 0x2000, 0x0) (async) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}], 0x1, 0x2000, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000d6fb3ad8167d3270a42afe5729483ff5928b26aabeb8403dc8804a30ef808ed021c68321fe9e64abc1564c50dc17e4ba3dfc30c8852e9730ae6d3efc82cfcbe4272a7cfbdfc974ca82ba9ed34d084134fc3a", @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf255100000008000300", @ANYRES32=r4, @ANYBLOB="05008a00020000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) 244.218292ms ago: executing program 1 (id=1060): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000000)=0x5, 0x12) sendfile(r3, r2, 0x0, 0x1) connect$inet(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000200)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="012000001400000000001b000000"], 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000d0425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1000000001000400050011000c06755a"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, &(0x7f0000000380)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid_for_children\x00') ioctl$F2FS_IOC_RESIZE_FS(r9, 0x4008f510, &(0x7f0000000340)=0xfffffffffffff517) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000c00)={&(0x7f0000000400)=@ax25={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)="69281aeccc3febafdbdf244d36cb1ae61c574b0e5975f047572dbb545b89f9e5800e32afbb598b08fe776bb30efa621d2e311d7d247a82f0713c9966d319011191bfd24138374814e17342f0e6b41027646a3af8cf528e9c6fbcc5f8d8b0ba7e493c087275c6a02cfbaeeeae6617e41757a97e6e68500e0b433093b96092745166750f840f3c626fb58cf6de84876568c95a4353a40edd828a0ec99ab5e0109a3918913972e1ab61276649fbbf0727aa05ab772d5dd7e5382cd15164fd96dfe9bc53e5b31a5dc23d544e00e580794174b44ed9ee59e6ca6a98a312223c39700d7f2c6d5ed91899f409a06a6e010f91e971", 0xf1}, {&(0x7f0000000600)="b1535d09acfaf6240a94f8074a9bb940fac1676aa9b50215e3b75f65cd57bae0cc50c69ac6c2ff48767a3b22242c95406ccb5f01b227be2afad76898dc9743e02fd5849a", 0x44}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x404c815) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.644597ms ago: executing program 2 (id=1061): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xd, 0x0, &(0x7f0000000300)="40f0538ef047b21fb600683055", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x80000, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e21, @broadcast}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f00"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) unshare(0x8040480) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 3 (id=1062): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x3c}}, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): fx_dump_stack_lvl+0x10/0x10 [ 131.208576][ T6777] ? __pfx__printk+0x10/0x10 [ 131.208611][ T6777] should_fail_ex+0x414/0x560 [ 131.208642][ T6777] _copy_to_user+0x31/0xb0 [ 131.208665][ T6777] simple_read_from_buffer+0xe1/0x170 [ 131.208691][ T6777] proc_fail_nth_read+0x1df/0x250 [ 131.208718][ T6777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.208744][ T6777] ? rw_verify_area+0x258/0x650 [ 131.208772][ T6777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.208796][ T6777] vfs_read+0x200/0x980 [ 131.208820][ T6777] ? __pfx___mutex_lock+0x10/0x10 [ 131.208846][ T6777] ? __pfx_vfs_read+0x10/0x10 [ 131.208865][ T6777] ? __fget_files+0x2a/0x420 [ 131.208893][ T6777] ? __fget_files+0x3a0/0x420 [ 131.208912][ T6777] ? __fget_files+0x2a/0x420 [ 131.208943][ T6777] ksys_read+0x145/0x250 [ 131.208965][ T6777] ? __pfx_ksys_read+0x10/0x10 [ 131.208989][ T6777] ? do_syscall_64+0xbe/0x3b0 [ 131.209018][ T6777] do_syscall_64+0xfa/0x3b0 [ 131.209041][ T6777] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.209064][ T6777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.209082][ T6777] ? clear_bhb_loop+0x60/0xb0 [ 131.209104][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.209130][ T6777] RIP: 0033:0x7f4e4318d33c [ 131.209148][ T6777] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.209162][ T6777] RSP: 002b:00007f4e440b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.209183][ T6777] RAX: ffffffffffffffda RBX: 00007f4e433b6080 RCX: 00007f4e4318d33c [ 131.209195][ T6777] RDX: 000000000000000f RSI: 00007f4e440b10a0 RDI: 0000000000000004 [ 131.209206][ T6777] RBP: 00007f4e440b1090 R08: 0000000000000000 R09: 0000000000000000 [ 131.209217][ T6777] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 131.209228][ T6777] R13: 0000000000000001 R14: 00007f4e433b6080 R15: 00007ffffaef8bf8 [ 131.209260][ T6777] [ 131.506467][ T6776] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 131.514608][ T6776] vlan2: entered allmulticast mode [ 131.519833][ T6776] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 131.648459][ T6778] netlink: del zone limit has 4 unknown bytes [ 131.970064][ T30] audit: type=1107 audit(1749277265.857:7): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 132.005657][ T6792] siw: device registration error -23 [ 132.488041][ T6813] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.500357][ T6805] hsr0 speed is unknown, defaulting to 1000 [ 132.898951][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 132.915009][ T6824] netlink: del zone limit has 4 unknown bytes [ 132.974496][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.983014][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.180480][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 133.292702][ T6822] hsr0 speed is unknown, defaulting to 1000 [ 133.362153][ T6825] hsr0 speed is unknown, defaulting to 1000 [ 133.673033][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 133.689383][ T6855] x_tables: duplicate underflow at hook 3 [ 133.809848][ T6859] FAULT_INJECTION: forcing a failure. [ 133.809848][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.827567][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.2.293 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 133.827595][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.827606][ T6859] Call Trace: [ 133.827614][ T6859] [ 133.827622][ T6859] dump_stack_lvl+0x189/0x250 [ 133.827657][ T6859] ? __pfx____ratelimit+0x10/0x10 [ 133.827682][ T6859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.827710][ T6859] ? __pfx__printk+0x10/0x10 [ 133.827730][ T6859] ? __might_fault+0xb0/0x130 [ 133.827762][ T6859] should_fail_ex+0x414/0x560 [ 133.827794][ T6859] _copy_from_iter+0x1db/0x16f0 [ 133.827827][ T6859] ? rcu_is_watching+0x15/0xb0 [ 133.827846][ T6859] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 133.827868][ T6859] ? __pfx__copy_from_iter+0x10/0x10 [ 133.827898][ T6859] ? __build_skb_around+0x257/0x3e0 [ 133.827921][ T6859] ? netlink_sendmsg+0x642/0xb30 [ 133.827938][ T6859] ? skb_put+0x11b/0x210 [ 133.827961][ T6859] netlink_sendmsg+0x6b2/0xb30 [ 133.827991][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.828014][ T6859] ? aa_sock_msg_perm+0x94/0x160 [ 133.828041][ T6859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.828074][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.828094][ T6859] __sock_sendmsg+0x219/0x270 [ 133.828123][ T6859] ____sys_sendmsg+0x505/0x830 [ 133.828151][ T6859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.828182][ T6859] ? import_iovec+0x74/0xa0 [ 133.828206][ T6859] ___sys_sendmsg+0x21f/0x2a0 [ 133.828229][ T6859] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.828293][ T6859] ? __fget_files+0x2a/0x420 [ 133.828312][ T6859] ? __fget_files+0x3a0/0x420 [ 133.828346][ T6859] __x64_sys_sendmsg+0x19b/0x260 [ 133.828369][ T6859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.828401][ T6859] ? __pfx_ksys_write+0x10/0x10 [ 133.828422][ T6859] ? rcu_is_watching+0x15/0xb0 [ 133.828445][ T6859] ? do_syscall_64+0xbe/0x3b0 [ 133.828475][ T6859] do_syscall_64+0xfa/0x3b0 [ 133.828498][ T6859] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.828521][ T6859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.828539][ T6859] ? clear_bhb_loop+0x60/0xb0 [ 133.828562][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.828579][ T6859] RIP: 0033:0x7efca898e929 [ 133.828598][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.828612][ T6859] RSP: 002b:00007efca9886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.828633][ T6859] RAX: ffffffffffffffda RBX: 00007efca8bb5fa0 RCX: 00007efca898e929 [ 133.828647][ T6859] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 133.828658][ T6859] RBP: 00007efca9886090 R08: 0000000000000000 R09: 0000000000000000 [ 133.828669][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.828680][ T6859] R13: 0000000000000000 R14: 00007efca8bb5fa0 R15: 00007ffd94592d68 [ 133.828712][ T6859] [ 134.251278][ T6843] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 134.399020][ T6863] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 134.475105][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 134.548406][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 135.357820][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 135.443558][ T6888] netlink: 'syz.0.303': attribute type 30 has an invalid length. [ 135.451485][ T51] Bluetooth: hci1: command 0x080f tx timeout [ 135.459921][ T6882] hsr0 speed is unknown, defaulting to 1000 [ 135.618893][ T6898] trusted_key: syz.1.307 sent an empty control message without MSG_MORE. [ 135.628798][ T6896] syz_tun: entered allmulticast mode [ 135.705476][ T6895] syz_tun: left allmulticast mode [ 135.717831][ T6901] siw: device registration error -23 [ 135.723946][ T30] audit: type=1107 audit(1749277269.607:8): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 136.326030][ T30] audit: type=1107 audit(1749277270.197:9): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 136.344225][ T6920] siw: device registration error -23 [ 136.381663][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 136.547667][ T6933] xt_hashlimit: size too large, truncated to 1048576 [ 136.626920][ T6937] FAULT_INJECTION: forcing a failure. [ 136.626920][ T6937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.682493][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.0.321 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 136.682523][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.682534][ T6937] Call Trace: [ 136.682542][ T6937] [ 136.682550][ T6937] dump_stack_lvl+0x189/0x250 [ 136.682585][ T6937] ? __pfx____ratelimit+0x10/0x10 [ 136.682610][ T6937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.682638][ T6937] ? __pfx__printk+0x10/0x10 [ 136.682659][ T6937] ? __might_fault+0xb0/0x130 [ 136.682691][ T6937] should_fail_ex+0x414/0x560 [ 136.682721][ T6937] _copy_from_iter+0x1db/0x16f0 [ 136.682755][ T6937] ? rcu_is_watching+0x15/0xb0 [ 136.682775][ T6937] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 136.682796][ T6937] ? __pfx__copy_from_iter+0x10/0x10 [ 136.682826][ T6937] ? __build_skb_around+0x257/0x3e0 [ 136.682849][ T6937] ? netlink_sendmsg+0x642/0xb30 [ 136.682866][ T6937] ? skb_put+0x11b/0x210 [ 136.682889][ T6937] netlink_sendmsg+0x6b2/0xb30 [ 136.682919][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.682948][ T6937] ? aa_sock_msg_perm+0x94/0x160 [ 136.682974][ T6937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.682996][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.683013][ T6937] __sock_sendmsg+0x219/0x270 [ 136.683040][ T6937] ____sys_sendmsg+0x52d/0x830 [ 136.683065][ T6937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.683093][ T6937] ? import_iovec+0x74/0xa0 [ 136.683115][ T6937] ___sys_sendmsg+0x21f/0x2a0 [ 136.683136][ T6937] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.683191][ T6937] ? __fget_files+0x2a/0x420 [ 136.683212][ T6937] ? __fget_files+0x3a0/0x420 [ 136.683242][ T6937] __sys_sendmmsg+0x227/0x430 [ 136.683269][ T6937] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.683286][ T6937] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 136.683340][ T6937] ? ksys_write+0x22a/0x250 [ 136.683372][ T6937] ? __pfx_ksys_write+0x10/0x10 [ 136.683387][ T6937] ? rcu_is_watching+0x15/0xb0 [ 136.683410][ T6937] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.683432][ T6937] do_syscall_64+0xfa/0x3b0 [ 136.683454][ T6937] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.683474][ T6937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.683492][ T6937] ? clear_bhb_loop+0x60/0xb0 [ 136.683515][ T6937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.683532][ T6937] RIP: 0033:0x7f3d4bf8e929 [ 136.683550][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.683562][ T6937] RSP: 002b:00007f3d4cd8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.683581][ T6937] RAX: ffffffffffffffda RBX: 00007f3d4c1b5fa0 RCX: 00007f3d4bf8e929 [ 136.683594][ T6937] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 136.683605][ T6937] RBP: 00007f3d4cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 136.683616][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.683627][ T6937] R13: 0000000000000000 R14: 00007f3d4c1b5fa0 R15: 00007ffdedb3d9e8 [ 136.683657][ T6937] [ 137.078221][ T30] audit: type=1107 audit(1749277270.907:10): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 137.140452][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 137.236119][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 137.247046][ T6951] FAULT_INJECTION: forcing a failure. [ 137.247046][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.320323][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.0.324 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 137.320351][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.320362][ T6951] Call Trace: [ 137.320370][ T6951] [ 137.320378][ T6951] dump_stack_lvl+0x189/0x250 [ 137.320412][ T6951] ? __pfx____ratelimit+0x10/0x10 [ 137.320435][ T6951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.320461][ T6951] ? __pfx__printk+0x10/0x10 [ 137.320480][ T6951] ? __might_fault+0xb0/0x130 [ 137.320511][ T6951] should_fail_ex+0x414/0x560 [ 137.320542][ T6951] _copy_from_iter+0x1db/0x16f0 [ 137.320572][ T6951] ? rcu_is_watching+0x15/0xb0 [ 137.320588][ T6951] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 137.320610][ T6951] ? __pfx__copy_from_iter+0x10/0x10 [ 137.320639][ T6951] ? __build_skb_around+0x257/0x3e0 [ 137.320658][ T6951] ? netlink_sendmsg+0x642/0xb30 [ 137.320674][ T6951] ? skb_put+0x11b/0x210 [ 137.320697][ T6951] netlink_sendmsg+0x6b2/0xb30 [ 137.320726][ T6951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.320749][ T6951] ? aa_sock_msg_perm+0x94/0x160 [ 137.320773][ T6951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.320797][ T6951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.320817][ T6951] __sock_sendmsg+0x219/0x270 [ 137.320843][ T6951] ____sys_sendmsg+0x505/0x830 [ 137.320869][ T6951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.320898][ T6951] ? import_iovec+0x74/0xa0 [ 137.320921][ T6951] ___sys_sendmsg+0x21f/0x2a0 [ 137.320943][ T6951] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.320999][ T6951] ? __fget_files+0x2a/0x420 [ 137.321019][ T6951] ? __fget_files+0x3a0/0x420 [ 137.321052][ T6951] __x64_sys_sendmsg+0x19b/0x260 [ 137.321074][ T6951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.321105][ T6951] ? __pfx_ksys_write+0x10/0x10 [ 137.321121][ T6951] ? rcu_is_watching+0x15/0xb0 [ 137.321143][ T6951] ? do_syscall_64+0xbe/0x3b0 [ 137.321172][ T6951] do_syscall_64+0xfa/0x3b0 [ 137.321195][ T6951] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.321217][ T6951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.321235][ T6951] ? clear_bhb_loop+0x60/0xb0 [ 137.321257][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.321274][ T6951] RIP: 0033:0x7f3d4bf8e929 [ 137.321291][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.321320][ T6951] RSP: 002b:00007f3d4cd8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.321341][ T6951] RAX: ffffffffffffffda RBX: 00007f3d4c1b5fa0 RCX: 00007f3d4bf8e929 [ 137.321355][ T6951] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 137.321365][ T6951] RBP: 00007f3d4cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 137.321376][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.321386][ T6951] R13: 0000000000000000 R14: 00007f3d4c1b5fa0 R15: 00007ffdedb3d9e8 [ 137.321416][ T6951] [ 138.009539][ T6968] x_tables: duplicate underflow at hook 3 [ 138.080767][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 138.097462][ T6971] netlink: 'syz.0.333': attribute type 30 has an invalid length. [ 138.189185][ T6978] siw: device registration error -23 [ 138.192880][ T30] audit: type=1107 audit(1749277272.077:11): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 138.942088][ T7008] xt_hashlimit: size too large, truncated to 1048576 [ 139.003555][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 139.049909][ T7011] netlink: 'syz.0.346': attribute type 30 has an invalid length. [ 139.417380][ T7023] x_tables: duplicate underflow at hook 1 [ 139.637616][ T30] audit: type=1107 audit(1749277273.527:12): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 139.650413][ T7030] siw: device registration error -23 [ 140.023912][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 140.406482][ T7052] netlink: del zone limit has 4 unknown bytes [ 140.536949][ T7062] FAULT_INJECTION: forcing a failure. [ 140.536949][ T7062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.583502][ T7062] CPU: 0 UID: 0 PID: 7062 Comm: syz.4.362 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 140.583530][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.583541][ T7062] Call Trace: [ 140.583549][ T7062] [ 140.583558][ T7062] dump_stack_lvl+0x189/0x250 [ 140.583592][ T7062] ? __pfx____ratelimit+0x10/0x10 [ 140.583616][ T7062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.583643][ T7062] ? __pfx__printk+0x10/0x10 [ 140.583678][ T7062] should_fail_ex+0x414/0x560 [ 140.583709][ T7062] _copy_to_user+0x31/0xb0 [ 140.583732][ T7062] simple_read_from_buffer+0xe1/0x170 [ 140.583758][ T7062] proc_fail_nth_read+0x1df/0x250 [ 140.583785][ T7062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.583812][ T7062] ? rw_verify_area+0x258/0x650 [ 140.583839][ T7062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.583864][ T7062] vfs_read+0x200/0x980 [ 140.583888][ T7062] ? __pfx___mutex_lock+0x10/0x10 [ 140.583914][ T7062] ? __pfx_vfs_read+0x10/0x10 [ 140.583934][ T7062] ? __fget_files+0x2a/0x420 [ 140.583961][ T7062] ? __fget_files+0x3a0/0x420 [ 140.583980][ T7062] ? __fget_files+0x2a/0x420 [ 140.584011][ T7062] ksys_read+0x145/0x250 [ 140.584032][ T7062] ? __pfx_ksys_read+0x10/0x10 [ 140.584046][ T7062] ? rcu_is_watching+0x15/0xb0 [ 140.584070][ T7062] ? do_syscall_64+0xbe/0x3b0 [ 140.584100][ T7062] do_syscall_64+0xfa/0x3b0 [ 140.584123][ T7062] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.584146][ T7062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.584164][ T7062] ? clear_bhb_loop+0x60/0xb0 [ 140.584188][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.584206][ T7062] RIP: 0033:0x7f4e4318d33c [ 140.584224][ T7062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.584239][ T7062] RSP: 002b:00007f4e440d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.584269][ T7062] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318d33c [ 140.584282][ T7062] RDX: 000000000000000f RSI: 00007f4e440d20a0 RDI: 0000000000000004 [ 140.584294][ T7062] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 140.584306][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.584317][ T7062] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 140.584349][ T7062] [ 140.889739][ T7042] xt_hashlimit: max too large, truncated to 1048576 [ 140.898592][ T7042] Cannot find add_set index 3 as target [ 141.498135][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 141.693779][ T7093] netlink: del zone limit has 4 unknown bytes [ 141.744063][ T7097] veth0_to_bond: entered allmulticast mode [ 142.296462][ T7117] x_tables: duplicate underflow at hook 3 [ 142.457661][ T7124] FAULT_INJECTION: forcing a failure. [ 142.457661][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.475016][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.3.383 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 142.475060][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.475071][ T7124] Call Trace: [ 142.475079][ T7124] [ 142.475086][ T7124] dump_stack_lvl+0x189/0x250 [ 142.475121][ T7124] ? __pfx____ratelimit+0x10/0x10 [ 142.475145][ T7124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.475173][ T7124] ? __pfx__printk+0x10/0x10 [ 142.475193][ T7124] ? __might_fault+0xb0/0x130 [ 142.475224][ T7124] should_fail_ex+0x414/0x560 [ 142.475253][ T7124] _copy_from_iter+0x1db/0x16f0 [ 142.475286][ T7124] ? rcu_is_watching+0x15/0xb0 [ 142.475309][ T7124] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 142.475329][ T7124] ? __pfx__copy_from_iter+0x10/0x10 [ 142.475358][ T7124] ? __build_skb_around+0x257/0x3e0 [ 142.475380][ T7124] ? skb_put+0x11b/0x210 [ 142.475402][ T7124] pfkey_sendmsg+0x230/0x1090 [ 142.475436][ T7124] ? __pfx___might_resched+0x10/0x10 [ 142.475450][ T7124] ? __lock_acquire+0xab9/0xd20 [ 142.475481][ T7124] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 142.475515][ T7124] ? aa_sk_perm+0x81e/0x950 [ 142.475537][ T7124] ? is_bpf_text_address+0x26/0x2b0 [ 142.475557][ T7124] ? __pfx_aa_sk_perm+0x10/0x10 [ 142.475576][ T7124] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 142.475610][ T7124] ? aa_sock_msg_perm+0x94/0x160 [ 142.475635][ T7124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.475659][ T7124] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 142.475687][ T7124] __sock_sendmsg+0x219/0x270 [ 142.475715][ T7124] ____sys_sendmsg+0x505/0x830 [ 142.475742][ T7124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.475780][ T7124] ? import_iovec+0x74/0xa0 [ 142.475803][ T7124] ___sys_sendmsg+0x21f/0x2a0 [ 142.475825][ T7124] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.475886][ T7124] ? __fget_files+0x2a/0x420 [ 142.475906][ T7124] ? __fget_files+0x3a0/0x420 [ 142.475939][ T7124] __x64_sys_sendmsg+0x19b/0x260 [ 142.475962][ T7124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.475992][ T7124] ? __pfx_ksys_write+0x10/0x10 [ 142.476007][ T7124] ? rcu_is_watching+0x15/0xb0 [ 142.476030][ T7124] ? do_syscall_64+0xbe/0x3b0 [ 142.476068][ T7124] do_syscall_64+0xfa/0x3b0 [ 142.476091][ T7124] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.476114][ T7124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.476131][ T7124] ? clear_bhb_loop+0x60/0xb0 [ 142.476154][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.476171][ T7124] RIP: 0033:0x7f345358e929 [ 142.476188][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.476203][ T7124] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.476223][ T7124] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 142.476235][ T7124] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 142.476246][ T7124] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.476257][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.476268][ T7124] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 142.476298][ T7124] [ 142.637575][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.383'. [ 142.944769][ T7128] netlink: del zone limit has 4 unknown bytes [ 143.055236][ T7133] xt_hashlimit: size too large, truncated to 1048576 [ 143.191600][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 144.154126][ T7179] x_tables: duplicate underflow at hook 3 [ 144.303658][ T7181] netlink: del zone limit has 4 unknown bytes [ 144.465505][ T7162] xt_hashlimit: max too large, truncated to 1048576 [ 144.475873][ T7162] Cannot find add_set index 3 as target [ 144.653519][ T7196] siw: device registration error -23 [ 144.659267][ T30] audit: type=1107 audit(1749277278.537:13): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 144.851653][ T7204] xt_hashlimit: size too large, truncated to 1048576 [ 144.976045][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 145.642101][ T7236] FAULT_INJECTION: forcing a failure. [ 145.642101][ T7236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.667812][ T7236] CPU: 0 UID: 0 PID: 7236 Comm: syz.1.415 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 145.667840][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.667850][ T7236] Call Trace: [ 145.667857][ T7236] [ 145.667865][ T7236] dump_stack_lvl+0x189/0x250 [ 145.667897][ T7236] ? __pfx____ratelimit+0x10/0x10 [ 145.667921][ T7236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.667949][ T7236] ? __pfx__printk+0x10/0x10 [ 145.667968][ T7236] ? __might_fault+0xb0/0x130 [ 145.667999][ T7236] should_fail_ex+0x414/0x560 [ 145.668029][ T7236] _copy_from_iter+0x1db/0x16f0 [ 145.668058][ T7236] ? rep_movs_alternative+0x4a/0x90 [ 145.668082][ T7236] ? __pfx__copy_from_iter+0x10/0x10 [ 145.668105][ T7236] ? sock_alloc_send_pskb+0x875/0x990 [ 145.668134][ T7236] ? __pfx__copy_from_iter+0x10/0x10 [ 145.668164][ T7236] ? page_copy_sane+0x16a/0x280 [ 145.668193][ T7236] copy_page_from_iter+0xdd/0x170 [ 145.668225][ T7236] skb_copy_datagram_from_iter+0x306/0x720 [ 145.668261][ T7236] unix_stream_sendmsg+0x5a1/0xc90 [ 145.668299][ T7236] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 145.668333][ T7236] ? aa_sock_msg_perm+0x94/0x160 [ 145.668359][ T7236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.668382][ T7236] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 145.668402][ T7236] __sock_sendmsg+0x219/0x270 [ 145.668430][ T7236] ____sys_sendmsg+0x505/0x830 [ 145.668456][ T7236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.668486][ T7236] ? import_iovec+0x74/0xa0 [ 145.668508][ T7236] ___sys_sendmsg+0x21f/0x2a0 [ 145.668530][ T7236] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.668590][ T7236] ? __fget_files+0x2a/0x420 [ 145.668609][ T7236] ? __fget_files+0x3a0/0x420 [ 145.668642][ T7236] __x64_sys_sendmsg+0x19b/0x260 [ 145.668664][ T7236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.668694][ T7236] ? __pfx_ksys_write+0x10/0x10 [ 145.668709][ T7236] ? rcu_is_watching+0x15/0xb0 [ 145.668732][ T7236] ? do_syscall_64+0xbe/0x3b0 [ 145.668760][ T7236] do_syscall_64+0xfa/0x3b0 [ 145.668782][ T7236] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.668804][ T7236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.668821][ T7236] ? clear_bhb_loop+0x60/0xb0 [ 145.668843][ T7236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.668860][ T7236] RIP: 0033:0x7feed498e929 [ 145.668876][ T7236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.668891][ T7236] RSP: 002b:00007feed57cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.668911][ T7236] RAX: ffffffffffffffda RBX: 00007feed4bb5fa0 RCX: 00007feed498e929 [ 145.668923][ T7236] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 145.668934][ T7236] RBP: 00007feed57cc090 R08: 0000000000000000 R09: 0000000000000000 [ 145.668945][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.668955][ T7236] R13: 0000000000000000 R14: 00007feed4bb5fa0 R15: 00007ffdf4e3f938 [ 145.668985][ T7236] [ 145.991789][ T7234] netlink: del zone limit has 4 unknown bytes [ 146.183325][ T30] audit: type=1107 audit(1749277280.067:14): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 146.216467][ T7245] siw: device registration error -23 [ 146.764130][ T7263] syzkaller1: entered promiscuous mode [ 146.782456][ T7263] syzkaller1: entered allmulticast mode [ 147.149539][ T7283] netlink: del zone limit has 4 unknown bytes [ 147.311777][ T7287] siw: device registration error -23 [ 147.318875][ T30] audit: type=1107 audit(1749277281.187:15): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 147.383193][ T7291] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 147.637575][ T7277] xt_hashlimit: max too large, truncated to 1048576 [ 147.644474][ T7277] Cannot find add_set index 3 as target [ 147.713444][ T7304] FAULT_INJECTION: forcing a failure. [ 147.713444][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 147.734657][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.4.438 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 147.734685][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.734695][ T7304] Call Trace: [ 147.734702][ T7304] [ 147.734710][ T7304] dump_stack_lvl+0x189/0x250 [ 147.734745][ T7304] ? __pfx____ratelimit+0x10/0x10 [ 147.734770][ T7304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.734797][ T7304] ? __pfx__printk+0x10/0x10 [ 147.734823][ T7304] ? __pfx___might_resched+0x10/0x10 [ 147.734846][ T7304] should_fail_ex+0x414/0x560 [ 147.734875][ T7304] should_failslab+0xa8/0x100 [ 147.734898][ T7304] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 147.734918][ T7304] ? __alloc_skb+0x112/0x2d0 [ 147.734941][ T7304] __alloc_skb+0x112/0x2d0 [ 147.734963][ T7304] netlink_sendmsg+0x5c6/0xb30 [ 147.734994][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.735030][ T7304] ? aa_sock_msg_perm+0x94/0x160 [ 147.735057][ T7304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.735081][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.735100][ T7304] __sock_sendmsg+0x219/0x270 [ 147.735128][ T7304] ____sys_sendmsg+0x505/0x830 [ 147.735154][ T7304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.735184][ T7304] ? import_iovec+0x74/0xa0 [ 147.735208][ T7304] ___sys_sendmsg+0x21f/0x2a0 [ 147.735231][ T7304] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.735295][ T7304] ? __fget_files+0x2a/0x420 [ 147.735316][ T7304] ? __fget_files+0x3a0/0x420 [ 147.735347][ T7304] __x64_sys_sendmsg+0x19b/0x260 [ 147.735371][ T7304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.735401][ T7304] ? __pfx_ksys_write+0x10/0x10 [ 147.735416][ T7304] ? rcu_is_watching+0x15/0xb0 [ 147.735437][ T7304] ? do_syscall_64+0xbe/0x3b0 [ 147.735465][ T7304] do_syscall_64+0xfa/0x3b0 [ 147.735487][ T7304] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.735508][ T7304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.735526][ T7304] ? clear_bhb_loop+0x60/0xb0 [ 147.735549][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.735565][ T7304] RIP: 0033:0x7f4e4318e929 [ 147.735583][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.735598][ T7304] RSP: 002b:00007f4e440d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.735619][ T7304] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318e929 [ 147.735632][ T7304] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 147.735643][ T7304] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 147.735654][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.735664][ T7304] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 147.735692][ T7304] [ 148.311345][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 149.050449][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 149.584725][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.592299][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.475790][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 150.959106][ T7364] xt_hashlimit: max too large, truncated to 1048576 [ 150.966899][ T7364] Cannot find add_set index 3 as target [ 151.192673][ T7394] FAULT_INJECTION: forcing a failure. [ 151.192673][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.226349][ T7394] CPU: 0 UID: 0 PID: 7394 Comm: syz.4.463 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 151.226379][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.226390][ T7394] Call Trace: [ 151.226398][ T7394] [ 151.226407][ T7394] dump_stack_lvl+0x189/0x250 [ 151.226441][ T7394] ? __pfx____ratelimit+0x10/0x10 [ 151.226467][ T7394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.226495][ T7394] ? __pfx__printk+0x10/0x10 [ 151.226517][ T7394] ? __might_fault+0xb0/0x130 [ 151.226549][ T7394] should_fail_ex+0x414/0x560 [ 151.226581][ T7394] _copy_from_iter+0x1db/0x16f0 [ 151.226615][ T7394] ? rcu_is_watching+0x15/0xb0 [ 151.226635][ T7394] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 151.226658][ T7394] ? __pfx__copy_from_iter+0x10/0x10 [ 151.226689][ T7394] ? __build_skb_around+0x257/0x3e0 [ 151.226712][ T7394] ? netlink_sendmsg+0x642/0xb30 [ 151.226730][ T7394] ? skb_put+0x11b/0x210 [ 151.226753][ T7394] netlink_sendmsg+0x6b2/0xb30 [ 151.226784][ T7394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.226807][ T7394] ? aa_sock_msg_perm+0x94/0x160 [ 151.226835][ T7394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.226860][ T7394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.226880][ T7394] __sock_sendmsg+0x219/0x270 [ 151.226910][ T7394] ____sys_sendmsg+0x505/0x830 [ 151.226939][ T7394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.226970][ T7394] ? import_iovec+0x74/0xa0 [ 151.226994][ T7394] ___sys_sendmsg+0x21f/0x2a0 [ 151.227018][ T7394] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.227077][ T7394] ? __fget_files+0x2a/0x420 [ 151.227097][ T7394] ? __fget_files+0x3a0/0x420 [ 151.227127][ T7394] __x64_sys_sendmsg+0x19b/0x260 [ 151.227149][ T7394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.227180][ T7394] ? __pfx_ksys_write+0x10/0x10 [ 151.227204][ T7394] ? rcu_is_watching+0x15/0xb0 [ 151.227224][ T7394] ? do_syscall_64+0xbe/0x3b0 [ 151.227253][ T7394] do_syscall_64+0xfa/0x3b0 [ 151.227275][ T7394] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.227295][ T7394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.227313][ T7394] ? clear_bhb_loop+0x60/0xb0 [ 151.227335][ T7394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.227352][ T7394] RIP: 0033:0x7f4e4318e929 [ 151.227370][ T7394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.227384][ T7394] RSP: 002b:00007f4e440d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.227405][ T7394] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318e929 [ 151.227418][ T7394] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 151.227430][ T7394] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 151.227441][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.227451][ T7394] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 151.227482][ T7394] [ 151.609095][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 151.732574][ T7403] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.465'. [ 152.022377][ T7418] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.466'. [ 152.382485][ T7417] netlink: del zone limit has 4 unknown bytes [ 152.639990][ T7436] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 152.677316][ T7436] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 153.034437][ T7443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.044007][ T7443] team0: Port device bond1 added [ 153.989680][ T7454] xt_hashlimit: max too large, truncated to 1048576 [ 154.000585][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 154.040086][ T7454] Cannot find add_set index 3 as target [ 154.144558][ T7476] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 154.178028][ T7473] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 154.297447][ T7473] team0: Device hsr_slave_0 failed to register rx_handler [ 154.547408][ T7486] netlink: 'syz.2.487': attribute type 30 has an invalid length. [ 154.563871][ T7486] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.572733][ T7486] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.581677][ T7486] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.590562][ T7486] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.623096][ T7486] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.632825][ T7486] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.642442][ T7486] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.652315][ T7486] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.697920][ T7494] netlink: 'syz.4.488': attribute type 21 has an invalid length. [ 154.734018][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.488'. [ 154.827854][ T7493] netlink: del zone limit has 4 unknown bytes [ 154.975584][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.490'. [ 155.016967][ T7499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.490'. [ 155.117335][ T7505] netlink: 'syz.1.493': attribute type 30 has an invalid length. [ 155.136858][ T7505] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.145708][ T7505] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.154471][ T7505] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.163855][ T7505] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.472070][ T7505] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.481748][ T7505] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.491563][ T7505] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.500939][ T7505] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.892454][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 156.232377][ T7535] FAULT_INJECTION: forcing a failure. [ 156.232377][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.252374][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.0.502 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 156.252402][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.252413][ T7535] Call Trace: [ 156.252421][ T7535] [ 156.252430][ T7535] dump_stack_lvl+0x189/0x250 [ 156.252465][ T7535] ? __pfx____ratelimit+0x10/0x10 [ 156.252490][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.252518][ T7535] ? __pfx__printk+0x10/0x10 [ 156.252539][ T7535] ? __might_fault+0xb0/0x130 [ 156.252570][ T7535] should_fail_ex+0x414/0x560 [ 156.252602][ T7535] _copy_from_user+0x2d/0xb0 [ 156.252625][ T7535] ___sys_sendmsg+0x158/0x2a0 [ 156.252650][ T7535] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.252712][ T7535] ? __fget_files+0x2a/0x420 [ 156.252734][ T7535] ? __fget_files+0x3a0/0x420 [ 156.252768][ T7535] __x64_sys_sendmsg+0x19b/0x260 [ 156.252792][ T7535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.252824][ T7535] ? __pfx_ksys_write+0x10/0x10 [ 156.252840][ T7535] ? rcu_is_watching+0x15/0xb0 [ 156.252864][ T7535] ? do_syscall_64+0xbe/0x3b0 [ 156.252893][ T7535] do_syscall_64+0xfa/0x3b0 [ 156.252915][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.252938][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.252957][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 156.252980][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.252998][ T7535] RIP: 0033:0x7f3d4bf8e929 [ 156.253015][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.253031][ T7535] RSP: 002b:00007f3d4cd8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.253052][ T7535] RAX: ffffffffffffffda RBX: 00007f3d4c1b5fa0 RCX: 00007f3d4bf8e929 [ 156.253066][ T7535] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 156.253077][ T7535] RBP: 00007f3d4cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.253089][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.253100][ T7535] R13: 0000000000000000 R14: 00007f3d4c1b5fa0 R15: 00007ffdedb3d9e8 [ 156.253131][ T7535] [ 156.284292][ T7524] xt_hashlimit: max too large, truncated to 1048576 [ 156.515253][ T7524] Cannot find add_set index 3 as target [ 156.587392][ T7539] netlink: del zone limit has 4 unknown bytes [ 156.752513][ T7545] netlink: 88 bytes leftover after parsing attributes in process `syz.0.505'. [ 156.761890][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 157.107925][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 157.675788][ T7573] lo speed is unknown, defaulting to 1000 [ 157.724949][ T7573] lo speed is unknown, defaulting to 1000 [ 157.747602][ T7573] lo speed is unknown, defaulting to 1000 [ 157.768869][ T7574] netlink: del zone limit has 4 unknown bytes [ 158.280393][ T7586] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 158.441148][ T10] lo speed is unknown, defaulting to 1000 [ 158.447249][ T7573] infiniband sz1: set active [ 158.452157][ T7573] infiniband sz1: added lo [ 158.606926][ T30] audit: type=1107 audit(1749277292.477:16): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 158.658367][ T7573] RDS/IB: sz1: added [ 158.665031][ T7580] xt_hashlimit: max too large, truncated to 1048576 [ 158.672765][ T7573] smc: adding ib device sz1 with port count 1 [ 158.680550][ T7580] Cannot find add_set index 3 as target [ 158.703379][ T7573] smc: ib device sz1 port 1 has pnetid [ 158.740572][ T5892] lo speed is unknown, defaulting to 1000 [ 158.753267][ T7573] lo speed is unknown, defaulting to 1000 [ 158.984723][ T7600] FAULT_INJECTION: forcing a failure. [ 158.984723][ T7600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.013714][ T7600] CPU: 1 UID: 0 PID: 7600 Comm: syz.4.525 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 159.013742][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.013752][ T7600] Call Trace: [ 159.013760][ T7600] [ 159.013768][ T7600] dump_stack_lvl+0x189/0x250 [ 159.013800][ T7600] ? __pfx____ratelimit+0x10/0x10 [ 159.013824][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.013851][ T7600] ? __pfx__printk+0x10/0x10 [ 159.013882][ T7600] ? __might_fault+0xb0/0x130 [ 159.013913][ T7600] should_fail_ex+0x414/0x560 [ 159.013943][ T7600] _copy_from_iter+0x1db/0x16f0 [ 159.013977][ T7600] ? rcu_is_watching+0x15/0xb0 [ 159.013997][ T7600] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 159.014018][ T7600] ? __pfx__copy_from_iter+0x10/0x10 [ 159.014048][ T7600] ? __build_skb_around+0x257/0x3e0 [ 159.014069][ T7600] ? netlink_sendmsg+0x642/0xb30 [ 159.014085][ T7600] ? skb_put+0x11b/0x210 [ 159.014107][ T7600] netlink_sendmsg+0x6b2/0xb30 [ 159.014135][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.014158][ T7600] ? aa_sock_msg_perm+0x94/0x160 [ 159.014185][ T7600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.014208][ T7600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.014229][ T7600] __sock_sendmsg+0x219/0x270 [ 159.014258][ T7600] ____sys_sendmsg+0x505/0x830 [ 159.014285][ T7600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.014316][ T7600] ? import_iovec+0x74/0xa0 [ 159.014340][ T7600] ___sys_sendmsg+0x21f/0x2a0 [ 159.014364][ T7600] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.014425][ T7600] ? __fget_files+0x2a/0x420 [ 159.014446][ T7600] ? __fget_files+0x3a0/0x420 [ 159.014480][ T7600] __x64_sys_sendmsg+0x19b/0x260 [ 159.014503][ T7600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.014536][ T7600] ? __pfx_ksys_write+0x10/0x10 [ 159.014551][ T7600] ? rcu_is_watching+0x15/0xb0 [ 159.014574][ T7600] ? do_syscall_64+0xbe/0x3b0 [ 159.014603][ T7600] do_syscall_64+0xfa/0x3b0 [ 159.014635][ T7600] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.014658][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.014677][ T7600] ? clear_bhb_loop+0x60/0xb0 [ 159.014700][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.014718][ T7600] RIP: 0033:0x7f4e4318e929 [ 159.014736][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.014749][ T7600] RSP: 002b:00007f4e440d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.014771][ T7600] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318e929 [ 159.014784][ T7600] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 159.014796][ T7600] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 159.014807][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.014818][ T7600] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 159.014849][ T7600] [ 159.209434][ T7573] lo speed is unknown, defaulting to 1000 [ 159.450938][ T7605] netlink: del zone limit has 4 unknown bytes [ 159.887731][ T7573] lo speed is unknown, defaulting to 1000 [ 160.289961][ T7573] lo speed is unknown, defaulting to 1000 [ 160.747515][ T7573] lo speed is unknown, defaulting to 1000 [ 161.042298][ T7588] siw: device registration error -23 [ 161.428789][ T7642] netlink: del zone limit has 4 unknown bytes [ 161.431359][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 161.444291][ T7645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 161.794624][ T7633] xt_hashlimit: max too large, truncated to 1048576 [ 161.821135][ T7633] Cannot find add_set index 3 as target [ 161.922855][ T30] audit: type=1804 audit(1749277295.807:17): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.548" name=2F6E6577726F6F742F3132342FFF dev="tmpfs" ino=659 res=1 errno=0 [ 161.957535][ T30] audit: type=1800 audit(1749277295.837:18): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.548" name=FF dev="tmpfs" ino=659 res=0 errno=0 [ 162.243189][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 162.411633][ T7680] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.653621][ T7682] netlink: del zone limit has 4 unknown bytes [ 162.847417][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.558'. [ 163.004068][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 163.255174][ T7711] netlink: 'syz.0.564': attribute type 30 has an invalid length. [ 163.654449][ T7716] netlink: 'syz.2.565': attribute type 30 has an invalid length. [ 163.674595][ T7716] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.685083][ T7716] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.694401][ T7716] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.703224][ T7716] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.724476][ T7716] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.726134][ T7724] netlink: del zone limit has 4 unknown bytes [ 163.733749][ T7716] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.748630][ T7716] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.757813][ T7716] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.112982][ T7736] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 164.158292][ T7736] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 164.268173][ T7734] netlink: zone id is out of range [ 164.274856][ T7734] netlink: zone id is out of range [ 164.307400][ T7734] netlink: zone id is out of range [ 164.322525][ T7734] netlink: zone id is out of range [ 164.347578][ T7734] netlink: zone id is out of range [ 164.357323][ T7734] netlink: zone id is out of range [ 164.362494][ T7734] netlink: zone id is out of range [ 164.387662][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 164.434851][ T7734] netlink: zone id is out of range [ 164.441330][ T7734] netlink: zone id is out of range [ 164.824906][ T7760] netlink: 'syz.2.583': attribute type 30 has an invalid length. [ 164.841448][ T7760] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.850293][ T7760] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.859152][ T7760] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.867936][ T7760] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.062585][ T7760] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.072067][ T7760] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.081157][ T7760] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.090194][ T7760] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.160106][ T7772] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.797449][ T7796] netlink: 88 bytes leftover after parsing attributes in process `syz.0.594'. [ 165.838809][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 166.082697][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 166.142304][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 166.176620][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 167.151163][ T7837] netlink: 'syz.4.609': attribute type 30 has an invalid length. [ 167.325599][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 167.597756][ T7851] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 167.612007][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.614'. [ 168.214557][ T7859] bridge0: port 3(veth0_to_bridge) entered blocking state [ 168.232310][ T7859] bridge0: port 3(veth0_to_bridge) entered disabled state [ 168.242539][ T7859] veth0_to_bridge: entered allmulticast mode [ 168.285930][ T7859] veth0_to_bridge: entered promiscuous mode [ 168.438138][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 168.958190][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 169.060502][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 169.164168][ T7884] x_tables: duplicate underflow at hook 3 [ 169.327561][ T30] audit: type=1107 audit(1749277303.207:19): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 169.507522][ T7890] net_ratelimit: 6 callbacks suppressed [ 169.507543][ T7890] netlink: del zone limit has 4 unknown bytes [ 170.143850][ T7901] xt_hashlimit: size too large, truncated to 1048576 [ 170.330348][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 170.381430][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 170.867037][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 171.349719][ T7931] xt_hashlimit: max too large, truncated to 1048576 [ 171.505597][ T7931] Cannot find add_set index 3 as target [ 171.671343][ T7936] x_tables: duplicate underflow at hook 3 [ 172.100320][ T6056] IPVS: starting estimator thread 0... [ 172.134677][ T7942] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.205756][ T7944] IPVS: using max 26 ests per chain, 62400 per kthread [ 172.217435][ T7946] FAULT_INJECTION: forcing a failure. [ 172.217435][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.268101][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.3.646 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 172.268131][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.268141][ T7946] Call Trace: [ 172.268149][ T7946] [ 172.268157][ T7946] dump_stack_lvl+0x189/0x250 [ 172.268191][ T7946] ? __pfx____ratelimit+0x10/0x10 [ 172.268223][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.268250][ T7946] ? __pfx__printk+0x10/0x10 [ 172.268271][ T7946] ? __might_fault+0xb0/0x130 [ 172.268303][ T7946] should_fail_ex+0x414/0x560 [ 172.268335][ T7946] _copy_from_user+0x2d/0xb0 [ 172.268356][ T7946] ___sys_sendmsg+0x158/0x2a0 [ 172.268381][ T7946] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.268443][ T7946] ? __fget_files+0x2a/0x420 [ 172.268464][ T7946] ? __fget_files+0x3a0/0x420 [ 172.268497][ T7946] __x64_sys_sendmsg+0x19b/0x260 [ 172.268521][ T7946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.268553][ T7946] ? __pfx_ksys_write+0x10/0x10 [ 172.268568][ T7946] ? rcu_is_watching+0x15/0xb0 [ 172.268591][ T7946] ? do_syscall_64+0xbe/0x3b0 [ 172.268620][ T7946] do_syscall_64+0xfa/0x3b0 [ 172.268643][ T7946] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.268667][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.268684][ T7946] ? clear_bhb_loop+0x60/0xb0 [ 172.268707][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.268725][ T7946] RIP: 0033:0x7f345358e929 [ 172.268742][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.268757][ T7946] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.268778][ T7946] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 172.268791][ T7946] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.268803][ T7946] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.268814][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.268825][ T7946] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 172.268857][ T7946] [ 172.953834][ T7958] FAULT_INJECTION: forcing a failure. [ 172.953834][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 172.995221][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.1.651 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 172.995251][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.995261][ T7958] Call Trace: [ 172.995269][ T7958] [ 172.995282][ T7958] dump_stack_lvl+0x189/0x250 [ 172.995333][ T7958] ? __pfx____ratelimit+0x10/0x10 [ 172.995357][ T7958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.995383][ T7958] ? __pfx__printk+0x10/0x10 [ 172.995411][ T7958] ? ref_tracker_alloc+0x318/0x460 [ 172.995440][ T7958] should_fail_ex+0x414/0x560 [ 172.995470][ T7958] should_failslab+0xa8/0x100 [ 172.995493][ T7958] kmem_cache_alloc_noprof+0x73/0x3c0 [ 172.995511][ T7958] ? skb_clone+0x212/0x3a0 [ 172.995537][ T7958] skb_clone+0x212/0x3a0 [ 172.995561][ T7958] __netlink_deliver_tap+0x404/0x850 [ 172.995595][ T7958] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.995616][ T7958] netlink_deliver_tap+0x19c/0x1b0 [ 172.995637][ T7958] netlink_unicast+0x72f/0x8d0 [ 172.995678][ T7958] netlink_sendmsg+0x805/0xb30 [ 172.995710][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.995733][ T7958] ? aa_sock_msg_perm+0x94/0x160 [ 172.995761][ T7958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.995786][ T7958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.995806][ T7958] __sock_sendmsg+0x219/0x270 [ 172.995837][ T7958] ____sys_sendmsg+0x505/0x830 [ 172.995863][ T7958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.995894][ T7958] ? import_iovec+0x74/0xa0 [ 172.995919][ T7958] ___sys_sendmsg+0x21f/0x2a0 [ 172.995944][ T7958] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.996019][ T7958] ? __fget_files+0x2a/0x420 [ 172.996040][ T7958] ? __fget_files+0x3a0/0x420 [ 172.996075][ T7958] __x64_sys_sendmsg+0x19b/0x260 [ 172.996099][ T7958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.996131][ T7958] ? __pfx_ksys_write+0x10/0x10 [ 172.996147][ T7958] ? rcu_is_watching+0x15/0xb0 [ 172.996172][ T7958] ? do_syscall_64+0xbe/0x3b0 [ 172.996201][ T7958] do_syscall_64+0xfa/0x3b0 [ 172.996224][ T7958] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.996247][ T7958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.996265][ T7958] ? clear_bhb_loop+0x60/0xb0 [ 172.996288][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.996305][ T7958] RIP: 0033:0x7feed498e929 [ 172.996323][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.996339][ T7958] RSP: 002b:00007feed57cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.996360][ T7958] RAX: ffffffffffffffda RBX: 00007feed4bb5fa0 RCX: 00007feed498e929 [ 172.996373][ T7958] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 172.996385][ T7958] RBP: 00007feed57cc090 R08: 0000000000000000 R09: 0000000000000000 [ 172.996396][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.996407][ T7958] R13: 0000000000000000 R14: 00007feed4bb5fa0 R15: 00007ffdf4e3f938 [ 172.996440][ T7958] [ 173.594451][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 174.175567][ T7967] xt_hashlimit: max too large, truncated to 1048576 [ 174.182470][ T7967] Cannot find add_set index 3 as target [ 174.490489][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 174.763119][ T8007] netlink: 248 bytes leftover after parsing attributes in process `syz.0.667'. [ 174.829956][ T8007] openvswitch: netlink: IP tunnel dst address not specified [ 174.940909][ T8014] hsr0 speed is unknown, defaulting to 1000 [ 174.989767][ T8014] lo speed is unknown, defaulting to 1000 [ 174.997057][ T30] audit: type=1107 audit(1749277308.887:20): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 175.010971][ T8013] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 175.087311][ T30] audit: type=1107 audit(1749277308.977:21): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 175.714220][ T8044] netlink: 'syz.0.680': attribute type 8 has an invalid length. [ 175.900544][ T8020] siw: device registration error -23 [ 176.065476][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 176.091237][ T8053] FAULT_INJECTION: forcing a failure. [ 176.091237][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 176.124070][ T8053] CPU: 0 UID: 0 PID: 8053 Comm: syz.3.684 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 176.124100][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.124111][ T8053] Call Trace: [ 176.124119][ T8053] [ 176.124128][ T8053] dump_stack_lvl+0x189/0x250 [ 176.124168][ T8053] ? __pfx____ratelimit+0x10/0x10 [ 176.124195][ T8053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.124223][ T8053] ? __pfx__printk+0x10/0x10 [ 176.124252][ T8053] ? __pfx___might_resched+0x10/0x10 [ 176.124270][ T8053] ? fs_reclaim_acquire+0x7d/0x100 [ 176.124299][ T8053] should_fail_ex+0x414/0x560 [ 176.124331][ T8053] should_failslab+0xa8/0x100 [ 176.124355][ T8053] __kmalloc_noprof+0xcb/0x4f0 [ 176.124374][ T8053] ? unregister_netdevice_many_notify+0x909/0x2320 [ 176.124406][ T8053] unregister_netdevice_many_notify+0x909/0x2320 [ 176.124438][ T8053] ? __mutex_lock+0x330/0xe80 [ 176.124461][ T8053] ? __lock_acquire+0xab9/0xd20 [ 176.124494][ T8053] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 176.124533][ T8053] ? unregister_netdevice_queue+0x1b3/0x380 [ 176.124575][ T8053] ? __pfx_veth_dellink+0x10/0x10 [ 176.124599][ T8053] rtnl_dellink+0x488/0x710 [ 176.124634][ T8053] ? __pfx_rtnl_dellink+0x10/0x10 [ 176.124673][ T8053] ? __lock_acquire+0xab9/0xd20 [ 176.124792][ T8053] ? __pfx_rtnl_dellink+0x10/0x10 [ 176.124819][ T8053] rtnetlink_rcv_msg+0x7cc/0xb70 [ 176.124851][ T8053] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 176.124878][ T8053] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.124935][ T8053] netlink_rcv_skb+0x205/0x470 [ 176.124956][ T8053] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.124986][ T8053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.125021][ T8053] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.125040][ T8053] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.125067][ T8053] netlink_unicast+0x758/0x8d0 [ 176.125108][ T8053] netlink_sendmsg+0x805/0xb30 [ 176.125140][ T8053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.125164][ T8053] ? aa_sock_msg_perm+0x94/0x160 [ 176.125192][ T8053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.125217][ T8053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.125238][ T8053] __sock_sendmsg+0x219/0x270 [ 176.125268][ T8053] ____sys_sendmsg+0x505/0x830 [ 176.125294][ T8053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.125323][ T8053] ? import_iovec+0x74/0xa0 [ 176.125346][ T8053] ___sys_sendmsg+0x21f/0x2a0 [ 176.125368][ T8053] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.125432][ T8053] ? __fget_files+0x2a/0x420 [ 176.125452][ T8053] ? __fget_files+0x3a0/0x420 [ 176.125486][ T8053] __x64_sys_sendmsg+0x19b/0x260 [ 176.125511][ T8053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.125543][ T8053] ? __pfx_ksys_write+0x10/0x10 [ 176.125560][ T8053] ? rcu_is_watching+0x15/0xb0 [ 176.125584][ T8053] ? do_syscall_64+0xbe/0x3b0 [ 176.125614][ T8053] do_syscall_64+0xfa/0x3b0 [ 176.125638][ T8053] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.125662][ T8053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.125680][ T8053] ? clear_bhb_loop+0x60/0xb0 [ 176.125704][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.125722][ T8053] RIP: 0033:0x7f345358e929 [ 176.125740][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.125755][ T8053] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.125777][ T8053] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 176.125789][ T8053] RDX: 0000000000040000 RSI: 0000200000000440 RDI: 0000000000000004 [ 176.125800][ T8053] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.125813][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.125823][ T8053] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 176.125854][ T8053] [ 176.711430][ T8047] xt_hashlimit: max too large, truncated to 1048576 [ 176.727235][ T8053] bridge_slave_1 (unregistering): left allmulticast mode [ 176.747448][ T8053] bridge_slave_1 (unregistering): left promiscuous mode [ 176.781456][ T8047] Cannot find add_set index 3 as target [ 176.812897][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.291221][ T8073] x_tables: duplicate underflow at hook 3 [ 177.426948][ T8079] FAULT_INJECTION: forcing a failure. [ 177.426948][ T8079] name failslab, interval 1, probability 0, space 0, times 0 [ 177.464176][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.4.692 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 177.464205][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.464217][ T8079] Call Trace: [ 177.464226][ T8079] [ 177.464235][ T8079] dump_stack_lvl+0x189/0x250 [ 177.464266][ T8079] ? __pfx____ratelimit+0x10/0x10 [ 177.464290][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.464318][ T8079] ? __pfx__printk+0x10/0x10 [ 177.464345][ T8079] ? __pfx___might_resched+0x10/0x10 [ 177.464362][ T8079] ? fs_reclaim_acquire+0x7d/0x100 [ 177.464390][ T8079] should_fail_ex+0x414/0x560 [ 177.464422][ T8079] should_failslab+0xa8/0x100 [ 177.464446][ T8079] __kmalloc_cache_noprof+0x70/0x3d0 [ 177.464465][ T8079] ? rtnl_newlink+0xed/0x1c70 [ 177.464495][ T8079] ? __lock_acquire+0xab9/0xd20 [ 177.464522][ T8079] rtnl_newlink+0xed/0x1c70 [ 177.464561][ T8079] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.464587][ T8079] ? is_bpf_text_address+0x26/0x2b0 [ 177.464613][ T8079] ? __lock_acquire+0xab9/0xd20 [ 177.464653][ T8079] ? __lock_acquire+0xab9/0xd20 [ 177.464700][ T8079] ? is_bpf_text_address+0x26/0x2b0 [ 177.464724][ T8079] ? is_bpf_text_address+0x292/0x2b0 [ 177.464740][ T8079] ? is_bpf_text_address+0x26/0x2b0 [ 177.464761][ T8079] ? kernel_text_address+0xa5/0xe0 [ 177.464800][ T8079] ? __lock_acquire+0xab9/0xd20 [ 177.464855][ T8079] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.464882][ T8079] rtnetlink_rcv_msg+0x7cc/0xb70 [ 177.464915][ T8079] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 177.464950][ T8079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.464997][ T8079] netlink_rcv_skb+0x205/0x470 [ 177.465019][ T8079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.465049][ T8079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.465084][ T8079] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.465102][ T8079] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.465128][ T8079] netlink_unicast+0x758/0x8d0 [ 177.465167][ T8079] netlink_sendmsg+0x805/0xb30 [ 177.465197][ T8079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.465219][ T8079] ? aa_sock_msg_perm+0x94/0x160 [ 177.465246][ T8079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.465271][ T8079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.465289][ T8079] __sock_sendmsg+0x219/0x270 [ 177.465316][ T8079] ____sys_sendmsg+0x505/0x830 [ 177.465343][ T8079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.465376][ T8079] ? import_iovec+0x74/0xa0 [ 177.465402][ T8079] ___sys_sendmsg+0x21f/0x2a0 [ 177.465426][ T8079] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.465491][ T8079] ? __fget_files+0x2a/0x420 [ 177.465511][ T8079] ? __fget_files+0x3a0/0x420 [ 177.465546][ T8079] __x64_sys_sendmsg+0x19b/0x260 [ 177.465570][ T8079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.465606][ T8079] ? rcu_is_watching+0x15/0xb0 [ 177.465625][ T8079] ? trace_sys_enter+0x25/0x120 [ 177.465657][ T8079] do_syscall_64+0xfa/0x3b0 [ 177.465682][ T8079] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.465704][ T8079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.465723][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 177.465746][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.465764][ T8079] RIP: 0033:0x7f4e4318e929 [ 177.465782][ T8079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.465798][ T8079] RSP: 002b:00007f4e440d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.465820][ T8079] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318e929 [ 177.465834][ T8079] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 177.465846][ T8079] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 177.465857][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.465868][ T8079] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 177.465900][ T8079] [ 177.914727][ T8081] siw: device registration error -23 [ 177.943620][ T30] audit: type=1107 audit(1749277311.797:22): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 178.320892][ T8092] nbd: must specify an index to disconnect [ 178.864906][ T8117] FAULT_INJECTION: forcing a failure. [ 178.864906][ T8117] name failslab, interval 1, probability 0, space 0, times 0 [ 178.929483][ T8117] CPU: 1 UID: 0 PID: 8117 Comm: syz.3.706 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 178.929514][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.929526][ T8117] Call Trace: [ 178.929535][ T8117] [ 178.929543][ T8117] dump_stack_lvl+0x189/0x250 [ 178.929579][ T8117] ? __pfx____ratelimit+0x10/0x10 [ 178.929600][ T8117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.929621][ T8117] ? __pfx__printk+0x10/0x10 [ 178.929643][ T8117] ? __pfx___might_resched+0x10/0x10 [ 178.929656][ T8117] ? fs_reclaim_acquire+0x7d/0x100 [ 178.929680][ T8117] should_fail_ex+0x414/0x560 [ 178.929705][ T8117] should_failslab+0xa8/0x100 [ 178.929722][ T8117] __kmalloc_noprof+0xcb/0x4f0 [ 178.929742][ T8117] ? iter_file_splice_write+0x1cb/0x1000 [ 178.929763][ T8117] iter_file_splice_write+0x1cb/0x1000 [ 178.929779][ T8117] ? __pfx_current_time+0x10/0x10 [ 178.929818][ T8117] ? __pfx_iter_file_splice_write+0x10/0x10 [ 178.929838][ T8117] ? rcu_read_lock_any_held+0xb3/0x120 [ 178.929854][ T8117] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 178.929883][ T8117] ? __pfx_iter_file_splice_write+0x10/0x10 [ 178.929900][ T8117] direct_splice_actor+0x101/0x160 [ 178.929919][ T8117] splice_direct_to_actor+0x5a5/0xcc0 [ 178.929961][ T8117] ? __pfx_direct_splice_actor+0x10/0x10 [ 178.929976][ T8117] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 178.929993][ T8117] ? __pfx_aa_file_perm+0x10/0x10 [ 178.930021][ T8117] do_splice_direct+0x181/0x270 [ 178.930039][ T8117] ? __pfx_do_splice_direct+0x10/0x10 [ 178.930055][ T8117] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 178.930077][ T8117] ? rw_verify_area+0x258/0x650 [ 178.930103][ T8117] do_sendfile+0x4da/0x7e0 [ 178.930121][ T8117] ? __pfx_vfs_write+0x10/0x10 [ 178.930141][ T8117] ? __pfx_do_sendfile+0x10/0x10 [ 178.930159][ T8117] ? __fget_files+0x3a0/0x420 [ 178.930186][ T8117] __se_sys_sendfile64+0x13e/0x190 [ 178.930206][ T8117] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 178.930221][ T8117] ? rcu_is_watching+0x15/0xb0 [ 178.930239][ T8117] ? do_syscall_64+0xbe/0x3b0 [ 178.930262][ T8117] do_syscall_64+0xfa/0x3b0 [ 178.930280][ T8117] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.930297][ T8117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.930312][ T8117] ? clear_bhb_loop+0x60/0xb0 [ 178.930329][ T8117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.930344][ T8117] RIP: 0033:0x7f345358e929 [ 178.930358][ T8117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.930370][ T8117] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 178.930387][ T8117] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 178.930398][ T8117] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 178.930407][ T8117] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.930416][ T8117] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000001 [ 178.930425][ T8117] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 178.930449][ T8117] [ 179.393505][ T8122] vlan1: entered allmulticast mode [ 179.398911][ T8122] veth0_vlan: entered allmulticast mode [ 179.603963][ T8128] x_tables: duplicate underflow at hook 3 [ 179.850377][ T8137] netlink: 'syz.1.716': attribute type 21 has an invalid length. [ 180.098483][ T8150] xt_hashlimit: size too large, truncated to 1048576 [ 180.135758][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 180.223834][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 180.701471][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 180.892121][ T8171] netlink: 'syz.0.728': attribute type 29 has an invalid length. [ 180.908243][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 181.156862][ T8181] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 181.185458][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 181.205773][ T8185] xt_hashlimit: size too large, truncated to 1048576 [ 181.295918][ T8193] x_tables: duplicate underflow at hook 3 [ 181.396956][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 181.784776][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 182.059553][ T8216] netlink: 88 bytes leftover after parsing attributes in process `syz.4.744'. [ 182.609005][ T8237] xt_hashlimit: size too large, truncated to 1048576 [ 182.654694][ T8240] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 182.755935][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 182.805930][ T8251] x_tables: duplicate underflow at hook 3 [ 183.685102][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 184.084507][ T8289] x_tables: ip_tables: udp match: only valid for protocol 17 [ 184.905354][ T8307] x_tables: duplicate underflow at hook 3 [ 184.905462][ T8303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.921052][ T8303] team0: Port device bond1 added [ 186.020634][ T8340] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 186.048384][ T8340] netlink: 244 bytes leftover after parsing attributes in process `syz.3.788'. [ 186.280854][ T8340] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 186.635119][ T8361] tipc: Failed to remove unknown binding: 66,1,1/0:3852991095/3852991097 [ 186.697721][ T8360] x_tables: duplicate underflow at hook 3 [ 187.168909][ T8377] FAULT_INJECTION: forcing a failure. [ 187.168909][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 187.209990][ T8370] xt_CT: No such helper "snmp" [ 187.227596][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.1.802 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 187.227627][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.227639][ T8377] Call Trace: [ 187.227648][ T8377] [ 187.227656][ T8377] dump_stack_lvl+0x189/0x250 [ 187.227693][ T8377] ? __pfx____ratelimit+0x10/0x10 [ 187.227718][ T8377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.227748][ T8377] ? __pfx__printk+0x10/0x10 [ 187.227778][ T8377] ? ref_tracker_alloc+0x318/0x460 [ 187.227809][ T8377] should_fail_ex+0x414/0x560 [ 187.227840][ T8377] should_failslab+0xa8/0x100 [ 187.227865][ T8377] kmem_cache_alloc_noprof+0x73/0x3c0 [ 187.227884][ T8377] ? skb_clone+0x212/0x3a0 [ 187.227957][ T8377] skb_clone+0x212/0x3a0 [ 187.227984][ T8377] __netlink_deliver_tap+0x404/0x850 [ 187.228020][ T8377] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.228041][ T8377] netlink_deliver_tap+0x19c/0x1b0 [ 187.228063][ T8377] netlink_unicast+0x72f/0x8d0 [ 187.228104][ T8377] netlink_sendmsg+0x805/0xb30 [ 187.228137][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.228161][ T8377] ? aa_sock_msg_perm+0x94/0x160 [ 187.228190][ T8377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.228214][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.228235][ T8377] __sock_sendmsg+0x219/0x270 [ 187.228265][ T8377] ____sys_sendmsg+0x52d/0x830 [ 187.228295][ T8377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.228328][ T8377] ? import_iovec+0x74/0xa0 [ 187.228354][ T8377] ___sys_sendmsg+0x21f/0x2a0 [ 187.228378][ T8377] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.228444][ T8377] ? __fget_files+0x2a/0x420 [ 187.228466][ T8377] ? __fget_files+0x3a0/0x420 [ 187.228501][ T8377] __sys_sendmmsg+0x227/0x430 [ 187.228530][ T8377] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.228549][ T8377] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 187.228616][ T8377] ? ksys_write+0x22a/0x250 [ 187.228638][ T8377] ? __pfx_ksys_write+0x10/0x10 [ 187.228654][ T8377] ? rcu_is_watching+0x15/0xb0 [ 187.228681][ T8377] __x64_sys_sendmmsg+0xa0/0xc0 [ 187.228705][ T8377] do_syscall_64+0xfa/0x3b0 [ 187.228729][ T8377] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.228753][ T8377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.228772][ T8377] ? clear_bhb_loop+0x60/0xb0 [ 187.228796][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.228814][ T8377] RIP: 0033:0x7feed498e929 [ 187.228832][ T8377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.228849][ T8377] RSP: 002b:00007feed57cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.228871][ T8377] RAX: ffffffffffffffda RBX: 00007feed4bb5fa0 RCX: 00007feed498e929 [ 187.228885][ T8377] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 187.228898][ T8377] RBP: 00007feed57cc090 R08: 0000000000000000 R09: 0000000000000000 [ 187.228910][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.228922][ T8377] R13: 0000000000000000 R14: 00007feed4bb5fa0 R15: 00007ffdf4e3f938 [ 187.228956][ T8377] [ 187.539890][ T8350] xt_hashlimit: max too large, truncated to 1048576 [ 187.546976][ T8350] Cannot find add_set index 3 as target [ 187.623826][ T8385] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 187.636160][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 188.054935][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 188.181880][ T8400] bridge_slave_1 (unregistering): left allmulticast mode [ 188.221730][ T8400] bridge_slave_1 (unregistering): left promiscuous mode [ 188.282575][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.316990][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 188.841658][ T8425] FAULT_INJECTION: forcing a failure. [ 188.841658][ T8425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.873331][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.0.816 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 188.873359][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.873372][ T8425] Call Trace: [ 188.873379][ T8425] [ 188.873388][ T8425] dump_stack_lvl+0x189/0x250 [ 188.873424][ T8425] ? __pfx____ratelimit+0x10/0x10 [ 188.873449][ T8425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.873478][ T8425] ? __pfx__printk+0x10/0x10 [ 188.873500][ T8425] ? __might_fault+0xb0/0x130 [ 188.873543][ T8425] should_fail_ex+0x414/0x560 [ 188.873575][ T8425] _copy_from_iter+0x1db/0x16f0 [ 188.873610][ T8425] ? rcu_is_watching+0x15/0xb0 [ 188.873630][ T8425] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 188.873653][ T8425] ? __pfx__copy_from_iter+0x10/0x10 [ 188.873683][ T8425] ? __build_skb_around+0x257/0x3e0 [ 188.873707][ T8425] ? netlink_sendmsg+0x642/0xb30 [ 188.873724][ T8425] ? skb_put+0x11b/0x210 [ 188.873747][ T8425] netlink_sendmsg+0x6b2/0xb30 [ 188.873777][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.873800][ T8425] ? aa_sock_msg_perm+0x94/0x160 [ 188.873826][ T8425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.873850][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.873870][ T8425] __sock_sendmsg+0x219/0x270 [ 188.873899][ T8425] ____sys_sendmsg+0x505/0x830 [ 188.873926][ T8425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.873958][ T8425] ? import_iovec+0x74/0xa0 [ 188.873982][ T8425] ___sys_sendmsg+0x21f/0x2a0 [ 188.874005][ T8425] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.874068][ T8425] ? __fget_files+0x2a/0x420 [ 188.874088][ T8425] ? __fget_files+0x3a0/0x420 [ 188.874123][ T8425] __x64_sys_sendmsg+0x19b/0x260 [ 188.874146][ T8425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.874177][ T8425] ? __pfx_ksys_write+0x10/0x10 [ 188.874194][ T8425] ? rcu_is_watching+0x15/0xb0 [ 188.874218][ T8425] ? do_syscall_64+0xbe/0x3b0 [ 188.874248][ T8425] do_syscall_64+0xfa/0x3b0 [ 188.874269][ T8425] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.874292][ T8425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.874310][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 188.874334][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.874352][ T8425] RIP: 0033:0x7f3d4bf8e929 [ 188.874370][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.874386][ T8425] RSP: 002b:00007f3d4cd8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.874407][ T8425] RAX: ffffffffffffffda RBX: 00007f3d4c1b5fa0 RCX: 00007f3d4bf8e929 [ 188.874421][ T8425] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 188.874432][ T8425] RBP: 00007f3d4cd8e090 R08: 0000000000000000 R09: 0000000000000000 [ 188.874444][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.874454][ T8425] R13: 0000000000000000 R14: 00007f3d4c1b5fa0 R15: 00007ffdedb3d9e8 [ 188.874486][ T8425] [ 189.302291][ T8427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.320778][ T8427] bond0: (slave bond2): Enslaving as an active interface with an up link [ 189.429635][ T8443] xt_hashlimit: size too large, truncated to 1048576 [ 189.628423][ T8452] xt_hashlimit: size too large, truncated to 1048576 [ 189.818310][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 190.069058][ T8462] FAULT_INJECTION: forcing a failure. [ 190.069058][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 190.165417][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.1.829 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 190.165448][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.165459][ T8462] Call Trace: [ 190.165467][ T8462] [ 190.165475][ T8462] dump_stack_lvl+0x189/0x250 [ 190.165509][ T8462] ? __pfx____ratelimit+0x10/0x10 [ 190.165534][ T8462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.165562][ T8462] ? __pfx__printk+0x10/0x10 [ 190.165602][ T8462] ? ref_tracker_alloc+0x318/0x460 [ 190.165632][ T8462] should_fail_ex+0x414/0x560 [ 190.165662][ T8462] should_failslab+0xa8/0x100 [ 190.165686][ T8462] kmem_cache_alloc_noprof+0x73/0x3c0 [ 190.165703][ T8462] ? skb_clone+0x212/0x3a0 [ 190.165729][ T8462] skb_clone+0x212/0x3a0 [ 190.165755][ T8462] __netlink_deliver_tap+0x404/0x850 [ 190.165788][ T8462] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.165810][ T8462] netlink_deliver_tap+0x19c/0x1b0 [ 190.165830][ T8462] netlink_unicast+0x72f/0x8d0 [ 190.165869][ T8462] netlink_sendmsg+0x805/0xb30 [ 190.165900][ T8462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.165922][ T8462] ? aa_sock_msg_perm+0x94/0x160 [ 190.165949][ T8462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.165973][ T8462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.165993][ T8462] __sock_sendmsg+0x219/0x270 [ 190.166021][ T8462] ____sys_sendmsg+0x505/0x830 [ 190.166049][ T8462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.166081][ T8462] ? import_iovec+0x74/0xa0 [ 190.166104][ T8462] ___sys_sendmsg+0x21f/0x2a0 [ 190.166128][ T8462] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.166190][ T8462] ? __fget_files+0x2a/0x420 [ 190.166210][ T8462] ? __fget_files+0x3a0/0x420 [ 190.166243][ T8462] __x64_sys_sendmsg+0x19b/0x260 [ 190.166267][ T8462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.166302][ T8462] ? rcu_is_watching+0x15/0xb0 [ 190.166321][ T8462] ? trace_sys_enter+0x25/0x120 [ 190.166353][ T8462] do_syscall_64+0xfa/0x3b0 [ 190.166377][ T8462] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.166399][ T8462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.166418][ T8462] ? clear_bhb_loop+0x60/0xb0 [ 190.166442][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.166460][ T8462] RIP: 0033:0x7feed498e929 [ 190.166478][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.166494][ T8462] RSP: 002b:00007feed57cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.166517][ T8462] RAX: ffffffffffffffda RBX: 00007feed4bb5fa0 RCX: 00007feed498e929 [ 190.166530][ T8462] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 190.166543][ T8462] RBP: 00007feed57cc090 R08: 0000000000000000 R09: 0000000000000000 [ 190.166555][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.166565][ T8462] R13: 0000000000000000 R14: 00007feed4bb5fa0 R15: 00007ffdf4e3f938 [ 190.166607][ T8462] [ 191.426789][ T8488] FAULT_INJECTION: forcing a failure. [ 191.426789][ T8488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.436917][ T8489] FAULT_INJECTION: forcing a failure. [ 191.436917][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 191.468338][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.1.839 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 191.468370][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.468381][ T8488] Call Trace: [ 191.468390][ T8488] [ 191.468399][ T8488] dump_stack_lvl+0x189/0x250 [ 191.468435][ T8488] ? __pfx____ratelimit+0x10/0x10 [ 191.468461][ T8488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.468489][ T8488] ? __pfx__printk+0x10/0x10 [ 191.468513][ T8488] ? fs_reclaim_acquire+0x7d/0x100 [ 191.468555][ T8488] should_fail_ex+0x414/0x560 [ 191.468587][ T8488] prepare_alloc_pages+0x213/0x610 [ 191.468620][ T8488] __alloc_frozen_pages_noprof+0x123/0x370 [ 191.468650][ T8488] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.468686][ T8488] ? policy_nodemask+0x27c/0x720 [ 191.468705][ T8488] ? __lock_acquire+0xab9/0xd20 [ 191.468736][ T8488] alloc_pages_bulk_noprof+0x560/0x710 [ 191.468768][ T8488] ? alloc_pages_noprof+0xbe/0x190 [ 191.468792][ T8488] kasan_populate_vmalloc+0xba/0x1a0 [ 191.468827][ T8488] alloc_vmap_area+0xd51/0x1490 [ 191.468866][ T8488] ? __pfx_alloc_vmap_area+0x10/0x10 [ 191.468885][ T8488] ? __kasan_kmalloc+0x93/0xb0 [ 191.468905][ T8488] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 191.468926][ T8488] ? __get_vm_area_node+0x13f/0x300 [ 191.468946][ T8488] ? prealloc_init+0x123/0x630 [ 191.468972][ T8488] __get_vm_area_node+0x1f8/0x300 [ 191.468999][ T8488] __vmalloc_node_range_noprof+0x301/0x12f0 [ 191.469022][ T8488] ? prealloc_init+0x123/0x630 [ 191.469045][ T8488] ? __lock_acquire+0xab9/0xd20 [ 191.469095][ T8488] ? do_raw_spin_lock+0x121/0x290 [ 191.469121][ T8488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.469148][ T8488] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 191.469176][ T8488] bpf_map_area_alloc+0x12d/0x180 [ 191.469204][ T8488] ? prealloc_init+0x123/0x630 [ 191.469232][ T8488] prealloc_init+0x123/0x630 [ 191.469261][ T8488] ? __percpu_counter_init_many+0x364/0x380 [ 191.469293][ T8488] htab_map_alloc+0x6ce/0xc70 [ 191.469327][ T8488] map_create+0x903/0x1150 [ 191.469359][ T8488] ? security_bpf+0x7e/0x300 [ 191.469384][ T8488] __sys_bpf+0x67e/0x860 [ 191.469413][ T8488] ? __pfx___sys_bpf+0x10/0x10 [ 191.469454][ T8488] ? ksys_write+0x22a/0x250 [ 191.469476][ T8488] ? __pfx_ksys_write+0x10/0x10 [ 191.469505][ T8488] __x64_sys_bpf+0x7c/0x90 [ 191.469537][ T8488] do_syscall_64+0xfa/0x3b0 [ 191.469561][ T8488] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.469585][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.469604][ T8488] ? clear_bhb_loop+0x60/0xb0 [ 191.469628][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.469646][ T8488] RIP: 0033:0x7feed498e929 [ 191.469665][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.469681][ T8488] RSP: 002b:00007feed57cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.469703][ T8488] RAX: ffffffffffffffda RBX: 00007feed4bb5fa0 RCX: 00007feed498e929 [ 191.469717][ T8488] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 191.469730][ T8488] RBP: 00007feed57cc090 R08: 0000000000000000 R09: 0000000000000000 [ 191.469743][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.469755][ T8488] R13: 0000000000000001 R14: 00007feed4bb5fa0 R15: 00007ffdf4e3f938 [ 191.469786][ T8488] [ 191.506497][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.3.838 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 191.506524][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.506535][ T8489] Call Trace: [ 191.506542][ T8489] [ 191.506549][ T8489] dump_stack_lvl+0x189/0x250 [ 191.506580][ T8489] ? __pfx____ratelimit+0x10/0x10 [ 191.506602][ T8489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.506627][ T8489] ? __pfx__printk+0x10/0x10 [ 191.506652][ T8489] ? __pfx___might_resched+0x10/0x10 [ 191.506668][ T8489] ? fs_reclaim_acquire+0x7d/0x100 [ 191.506693][ T8489] should_fail_ex+0x414/0x560 [ 191.506721][ T8489] should_failslab+0xa8/0x100 [ 191.506742][ T8489] kmem_cache_alloc_noprof+0x73/0x3c0 [ 191.506759][ T8489] ? skb_clone+0x212/0x3a0 [ 191.506792][ T8489] skb_clone+0x212/0x3a0 [ 191.506815][ T8489] pfkey_sendmsg+0x44b/0x1090 [ 191.506849][ T8489] ? __lock_acquire+0xab9/0xd20 [ 191.506878][ T8489] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 191.506929][ T8489] ? aa_sock_msg_perm+0x94/0x160 [ 191.506953][ T8489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.506975][ T8489] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 191.507000][ T8489] __sock_sendmsg+0x219/0x270 [ 191.507026][ T8489] ____sys_sendmsg+0x505/0x830 [ 191.507050][ T8489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.507079][ T8489] ? import_iovec+0x74/0xa0 [ 191.507101][ T8489] ___sys_sendmsg+0x21f/0x2a0 [ 191.507122][ T8489] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.507179][ T8489] ? __fget_files+0x2a/0x420 [ 191.507197][ T8489] ? __fget_files+0x3a0/0x420 [ 191.507226][ T8489] __x64_sys_sendmsg+0x19b/0x260 [ 191.507248][ T8489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.507276][ T8489] ? __pfx_ksys_write+0x10/0x10 [ 191.507291][ T8489] ? rcu_is_watching+0x15/0xb0 [ 191.507313][ T8489] ? do_syscall_64+0xbe/0x3b0 [ 191.507338][ T8489] do_syscall_64+0xfa/0x3b0 [ 191.507358][ T8489] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.507378][ T8489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.507394][ T8489] ? clear_bhb_loop+0x60/0xb0 [ 191.507415][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.507431][ T8489] RIP: 0033:0x7f345358e929 [ 191.507446][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.507460][ T8489] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.507480][ T8489] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 191.507492][ T8489] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 191.507503][ T8489] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.507514][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.507524][ T8489] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 191.507553][ T8489] [ 192.104347][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.838'. [ 192.258151][ T8496] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 192.312099][ T8496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.843'. [ 193.034804][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 193.169458][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 194.062347][ T8552] x_tables: duplicate underflow at hook 3 [ 194.273170][ T30] audit: type=1107 audit(1749277328.157:23): pid=8554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 194.287700][ T8555] siw: device registration error -23 [ 194.413678][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425722][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.455846][ T8542] xt_hashlimit: max too large, truncated to 1048576 [ 194.471513][ T8542] Cannot find add_set index 3 as target [ 194.646444][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 194.986616][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 195.394862][ T8593] FAULT_INJECTION: forcing a failure. [ 195.394862][ T8593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.436851][ T8593] CPU: 0 UID: 0 PID: 8593 Comm: syz.4.877 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 195.436883][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.436895][ T8593] Call Trace: [ 195.436903][ T8593] [ 195.436912][ T8593] dump_stack_lvl+0x189/0x250 [ 195.436945][ T8593] ? __pfx____ratelimit+0x10/0x10 [ 195.436968][ T8593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.436996][ T8593] ? __pfx__printk+0x10/0x10 [ 195.437016][ T8593] ? __might_fault+0xb0/0x130 [ 195.437049][ T8593] should_fail_ex+0x414/0x560 [ 195.437081][ T8593] _copy_from_iter+0x1db/0x16f0 [ 195.437111][ T8593] ? rep_movs_alternative+0x4a/0x90 [ 195.437140][ T8593] ? __pfx__copy_from_iter+0x10/0x10 [ 195.437165][ T8593] ? sock_alloc_send_pskb+0x875/0x990 [ 195.437195][ T8593] ? __pfx__copy_from_iter+0x10/0x10 [ 195.437226][ T8593] ? page_copy_sane+0x16a/0x280 [ 195.437256][ T8593] copy_page_from_iter+0xdd/0x170 [ 195.437290][ T8593] skb_copy_datagram_from_iter+0x306/0x720 [ 195.437327][ T8593] unix_stream_sendmsg+0x5a1/0xc90 [ 195.437367][ T8593] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 195.437395][ T8593] ? aa_sock_msg_perm+0x94/0x160 [ 195.437423][ T8593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.437447][ T8593] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 195.437477][ T8593] __sock_sendmsg+0x219/0x270 [ 195.437508][ T8593] ____sys_sendmsg+0x505/0x830 [ 195.437535][ T8593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.437567][ T8593] ? import_iovec+0x74/0xa0 [ 195.437591][ T8593] ___sys_sendmsg+0x21f/0x2a0 [ 195.437616][ T8593] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.437679][ T8593] ? __fget_files+0x2a/0x420 [ 195.437699][ T8593] ? __fget_files+0x3a0/0x420 [ 195.437731][ T8593] __x64_sys_sendmsg+0x19b/0x260 [ 195.437757][ T8593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.437797][ T8593] ? rcu_is_watching+0x15/0xb0 [ 195.437817][ T8593] ? trace_sys_enter+0x25/0x120 [ 195.437849][ T8593] do_syscall_64+0xfa/0x3b0 [ 195.437873][ T8593] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.437897][ T8593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.437915][ T8593] ? clear_bhb_loop+0x60/0xb0 [ 195.437938][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.437958][ T8593] RIP: 0033:0x7f4e4318e929 [ 195.437975][ T8593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.437992][ T8593] RSP: 002b:00007f4e440d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.438014][ T8593] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318e929 [ 195.438028][ T8593] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 195.438040][ T8593] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 195.438051][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.438063][ T8593] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 195.438095][ T8593] [ 196.274519][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 196.412736][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 196.556307][ T8618] netlink: del zone limit has 4 unknown bytes [ 196.786592][ T8610] xt_hashlimit: max too large, truncated to 1048576 [ 196.838387][ T8610] Cannot find add_set index 3 as target [ 197.026595][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.890'. [ 197.062017][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 197.367227][ T8643] tipc: Started in network mode [ 197.373301][ T8643] tipc: Node identity 7f000001, cluster identity 4711 [ 197.395871][ T8643] tipc: Enabling of bearer rejected, failed to enable media [ 197.505989][ T8649] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 197.652162][ T8653] !: renamed from dummy0 [ 197.923737][ T8663] netlink: del zone limit has 4 unknown bytes [ 198.066194][ T8653] hsr0 speed is unknown, defaulting to 1000 [ 198.122758][ T8653] lo speed is unknown, defaulting to 1000 [ 198.727477][ T8681] xt_hashlimit: max too large, truncated to 1048576 [ 198.734363][ T8681] Cannot find add_set index 3 as target [ 198.915095][ T8687] syzkaller1: entered promiscuous mode [ 198.944896][ T8687] syzkaller1: entered allmulticast mode [ 199.309942][ T8691] xt_hashlimit: size too large, truncated to 1048576 [ 200.100281][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 200.591539][ T8706] netlink: del zone limit has 4 unknown bytes [ 201.687535][ T5207] udevd[5207]: worker [5853] terminated by signal 33 (Unknown signal 33) [ 201.735829][ T5207] udevd[5207]: worker [5853] failed while handling '/devices/virtual/block/loop3' [ 201.801525][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.925'. [ 201.856135][ T8744] x_tables: duplicate underflow at hook 3 [ 201.983496][ T8743] netlink: del zone limit has 4 unknown bytes [ 202.218986][ T8749] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 202.247134][ T8749] Bluetooth: MGMT ver 1.23 [ 202.335904][ T8732] xt_hashlimit: max too large, truncated to 1048576 [ 202.343002][ T8732] Cannot find add_set index 3 as target [ 202.975455][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 203.256430][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 203.313102][ T8775] FAULT_INJECTION: forcing a failure. [ 203.313102][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.329064][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: syz.4.939 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 203.329092][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.329104][ T8775] Call Trace: [ 203.329112][ T8775] [ 203.329121][ T8775] dump_stack_lvl+0x189/0x250 [ 203.329157][ T8775] ? __pfx____ratelimit+0x10/0x10 [ 203.329183][ T8775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.329213][ T8775] ? __pfx__printk+0x10/0x10 [ 203.329234][ T8775] ? __might_fault+0xb0/0x130 [ 203.329267][ T8775] should_fail_ex+0x414/0x560 [ 203.329298][ T8775] _copy_from_user+0x2d/0xb0 [ 203.329320][ T8775] ___sys_sendmsg+0x158/0x2a0 [ 203.329345][ T8775] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.329371][ T8775] ? rcu_read_lock_any_held+0xb3/0x120 [ 203.329406][ T8775] ? sb_end_write+0xe9/0x1c0 [ 203.329444][ T8775] ? __pfx_vfs_write+0x10/0x10 [ 203.329475][ T8775] __x64_sys_sendmsg+0x19b/0x260 [ 203.329500][ T8775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.329533][ T8775] ? __pfx_ksys_write+0x10/0x10 [ 203.329548][ T8775] ? rcu_is_watching+0x15/0xb0 [ 203.329572][ T8775] ? do_syscall_64+0xbe/0x3b0 [ 203.329718][ T8775] do_syscall_64+0xfa/0x3b0 [ 203.329759][ T8775] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.329784][ T8775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.329804][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 203.329828][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.329847][ T8775] RIP: 0033:0x7f4e4318e929 [ 203.329865][ T8775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.329881][ T8775] RSP: 002b:00007f4e440d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.329903][ T8775] RAX: ffffffffffffffda RBX: 00007f4e433b5fa0 RCX: 00007f4e4318e929 [ 203.329923][ T8775] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000006 [ 203.329935][ T8775] RBP: 00007f4e440d2090 R08: 0000000000000000 R09: 0000000000000000 [ 203.329957][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.329968][ T8775] R13: 0000000000000000 R14: 00007f4e433b5fa0 R15: 00007ffffaef8bf8 [ 203.330000][ T8775] [ 203.838379][ T8785] x_tables: duplicate underflow at hook 3 [ 203.963689][ T8793] xt_hashlimit: size too large, truncated to 1048576 [ 204.120553][ T8801] FAULT_INJECTION: forcing a failure. [ 204.120553][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 204.134627][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 204.154254][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.3.948 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 204.154284][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.154296][ T8801] Call Trace: [ 204.154303][ T8801] [ 204.154312][ T8801] dump_stack_lvl+0x189/0x250 [ 204.154346][ T8801] ? __pfx____ratelimit+0x10/0x10 [ 204.154370][ T8801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.154398][ T8801] ? __pfx__printk+0x10/0x10 [ 204.154425][ T8801] ? __pfx___might_resched+0x10/0x10 [ 204.154448][ T8801] should_fail_ex+0x414/0x560 [ 204.154479][ T8801] should_failslab+0xa8/0x100 [ 204.154503][ T8801] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 204.154523][ T8801] ? __alloc_skb+0x112/0x2d0 [ 204.154546][ T8801] __alloc_skb+0x112/0x2d0 [ 204.154567][ T8801] netlink_sendmsg+0x5c6/0xb30 [ 204.154596][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.154626][ T8801] ? aa_sock_msg_perm+0x94/0x160 [ 204.154651][ T8801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.154672][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.154692][ T8801] __sock_sendmsg+0x219/0x270 [ 204.154721][ T8801] ____sys_sendmsg+0x505/0x830 [ 204.154748][ T8801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.154779][ T8801] ? import_iovec+0x74/0xa0 [ 204.154802][ T8801] ___sys_sendmsg+0x21f/0x2a0 [ 204.154826][ T8801] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.154887][ T8801] ? __fget_files+0x2a/0x420 [ 204.154908][ T8801] ? __fget_files+0x3a0/0x420 [ 204.154941][ T8801] __x64_sys_sendmsg+0x19b/0x260 [ 204.154964][ T8801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.154995][ T8801] ? __pfx_ksys_write+0x10/0x10 [ 204.155011][ T8801] ? rcu_is_watching+0x15/0xb0 [ 204.155034][ T8801] ? do_syscall_64+0xbe/0x3b0 [ 204.155064][ T8801] do_syscall_64+0xfa/0x3b0 [ 204.155087][ T8801] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.155110][ T8801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.155128][ T8801] ? clear_bhb_loop+0x60/0xb0 [ 204.155151][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.155174][ T8801] RIP: 0033:0x7f345358e929 [ 204.155190][ T8801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.155206][ T8801] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.155228][ T8801] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 204.155242][ T8801] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 204.155253][ T8801] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.155264][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.155274][ T8801] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 204.155304][ T8801] [ 204.735065][ T8804] netlink: del zone limit has 4 unknown bytes [ 204.967970][ T8816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.993773][ T6045] lo speed is unknown, defaulting to 1000 [ 205.011267][ T6045] sz1: Port: 1 Link DOWN [ 205.022360][ T6045] lo speed is unknown, defaulting to 1000 [ 205.028807][ T8822] netlink: 'syz.2.953': attribute type 16 has an invalid length. [ 205.059071][ T8822] netlink: 'syz.2.953': attribute type 17 has an invalid length. [ 205.158672][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.167642][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.181530][ T8822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.297527][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.958'. [ 205.318603][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 205.620097][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.959'. [ 205.781875][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 205.883574][ T8851] x_tables: duplicate underflow at hook 3 [ 206.070975][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 206.127678][ T8850] bridge_slave_0: left allmulticast mode [ 206.150384][ T8850] bridge_slave_0: left promiscuous mode [ 206.171216][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.198758][ T8854] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 206.269061][ T8850] bond0: (slave bond_slave_0): Releasing backup interface [ 206.346264][ T8850] bond0: (slave bond_slave_1): Releasing backup interface [ 206.371829][ T8850] team0: Port device team_slave_0 removed [ 206.406494][ T8850] team0: Port device team_slave_1 removed [ 206.414981][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.453850][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.483412][ T8850] team0: Port device bond1 removed [ 206.501257][ T8850] bond0: (slave bond2): Releasing backup interface [ 206.544100][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.685745][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 206.710687][ T8854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.838493][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 206.966705][ T8887] bond0: entered promiscuous mode [ 206.971829][ T8887] bond_slave_0: entered promiscuous mode [ 206.990831][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 207.016268][ T8887] bond_slave_1: entered promiscuous mode [ 207.039981][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 208.407682][ T8900] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.437475][ T8903] pim6reg: entered allmulticast mode [ 208.452540][ T8903] pim6reg: left allmulticast mode [ 208.602260][ T8908] netlink: 'syz.0.981': attribute type 10 has an invalid length. [ 208.641971][ T8908] bridge0: entered promiscuous mode [ 208.660889][ T8908] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.817870][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 208.839489][ T8911] IPVS: Error joining to the multicast group [ 208.857962][ T8914] FAULT_INJECTION: forcing a failure. [ 208.857962][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 208.889618][ T8914] CPU: 1 UID: 0 PID: 8914 Comm: syz.2.983 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 208.889648][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.889659][ T8914] Call Trace: [ 208.889668][ T8914] [ 208.889676][ T8914] dump_stack_lvl+0x189/0x250 [ 208.889713][ T8914] ? __pfx____ratelimit+0x10/0x10 [ 208.889739][ T8914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.889766][ T8914] ? __pfx__printk+0x10/0x10 [ 208.889794][ T8914] ? __pfx___might_resched+0x10/0x10 [ 208.889818][ T8914] should_fail_ex+0x414/0x560 [ 208.889845][ T8914] should_failslab+0xa8/0x100 [ 208.889865][ T8914] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 208.889882][ T8914] ? __alloc_skb+0x112/0x2d0 [ 208.889903][ T8914] __alloc_skb+0x112/0x2d0 [ 208.889922][ T8914] netlink_sendmsg+0x5c6/0xb30 [ 208.889949][ T8914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.889969][ T8914] ? aa_sock_msg_perm+0x94/0x160 [ 208.889997][ T8914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.890018][ T8914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.890035][ T8914] __sock_sendmsg+0x219/0x270 [ 208.890060][ T8914] __sys_sendto+0x3bd/0x520 [ 208.890078][ T8914] ? __pfx___sys_sendto+0x10/0x10 [ 208.890108][ T8914] ? count_memcg_event_mm+0x21/0x260 [ 208.890152][ T8914] ? exc_page_fault+0x76/0xf0 [ 208.890178][ T8914] ? do_user_addr_fault+0xc8a/0x1390 [ 208.890209][ T8914] __x64_sys_sendto+0xde/0x100 [ 208.890232][ T8914] do_syscall_64+0xfa/0x3b0 [ 208.890254][ T8914] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.890276][ T8914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.890294][ T8914] ? clear_bhb_loop+0x60/0xb0 [ 208.890316][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.890333][ T8914] RIP: 0033:0x7efca89907bc [ 208.890359][ T8914] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 208.890376][ T8914] RSP: 002b:00007efca9884ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 208.890399][ T8914] RAX: ffffffffffffffda RBX: 00007efca9884fc0 RCX: 00007efca89907bc [ 208.890412][ T8914] RDX: 0000000000000020 RSI: 00007efca9885010 RDI: 0000000000000003 [ 208.890425][ T8914] RBP: 0000000000000000 R08: 00007efca9884f14 R09: 000000000000000c [ 208.890436][ T8914] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 208.890447][ T8914] R13: 00007efca9884f68 R14: 00007efca9885010 R15: 0000000000000000 [ 208.890478][ T8914] [ 209.346315][ T8921] hsr0 speed is unknown, defaulting to 1000 [ 209.354822][ T8921] lo speed is unknown, defaulting to 1000 [ 210.089190][ T8940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.538867][ T8959] FAULT_INJECTION: forcing a failure. [ 210.538867][ T8959] name failslab, interval 1, probability 0, space 0, times 0 [ 210.552177][ T8959] CPU: 0 UID: 0 PID: 8959 Comm: syz.2.997 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 210.552203][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.552214][ T8959] Call Trace: [ 210.552222][ T8959] [ 210.552230][ T8959] dump_stack_lvl+0x189/0x250 [ 210.552264][ T8959] ? __pfx____ratelimit+0x10/0x10 [ 210.552301][ T8959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.552329][ T8959] ? __pfx__printk+0x10/0x10 [ 210.552357][ T8959] ? __pfx___might_resched+0x10/0x10 [ 210.552382][ T8959] should_fail_ex+0x414/0x560 [ 210.552413][ T8959] should_failslab+0xa8/0x100 [ 210.552438][ T8959] __kmalloc_cache_noprof+0x70/0x3d0 [ 210.552458][ T8959] ? subflow_ulp_init+0xd0/0x5c0 [ 210.552484][ T8959] subflow_ulp_init+0xd0/0x5c0 [ 210.552502][ T8959] ? tcp_set_ulp+0xb1/0x5f0 [ 210.552527][ T8959] tcp_set_ulp+0x53c/0x5f0 [ 210.552550][ T8959] mptcp_subflow_create_socket+0x5c5/0xb40 [ 210.552591][ T8959] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 210.552622][ T8959] ? aa_label_sk_perm+0x413/0x560 [ 210.552653][ T8959] __mptcp_nmpc_sk+0x148/0x750 [ 210.552676][ T8959] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 210.552699][ T8959] ? look_up_lock_class+0x74/0x170 [ 210.552731][ T8959] mptcp_connect+0x70/0xc10 [ 210.552763][ T8959] __inet_stream_connect+0x298/0xf10 [ 210.552802][ T8959] ? __local_bh_enable_ip+0x12d/0x1c0 [ 210.552830][ T8959] ? __pfx___inet_stream_connect+0x10/0x10 [ 210.552857][ T8959] ? __local_bh_enable_ip+0x12d/0x1c0 [ 210.552885][ T8959] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 210.552926][ T8959] inet_stream_connect+0x66/0xa0 [ 210.552956][ T8959] __sys_connect+0x313/0x440 [ 210.552984][ T8959] ? __fget_files+0x3a0/0x420 [ 210.553007][ T8959] ? __pfx___sys_connect+0x10/0x10 [ 210.553051][ T8959] ? __pfx_ksys_write+0x10/0x10 [ 210.553067][ T8959] ? rcu_is_watching+0x15/0xb0 [ 210.553095][ T8959] __x64_sys_connect+0x7a/0x90 [ 210.553124][ T8959] do_syscall_64+0xfa/0x3b0 [ 210.553149][ T8959] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.553172][ T8959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.553190][ T8959] ? clear_bhb_loop+0x60/0xb0 [ 210.553215][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.553233][ T8959] RIP: 0033:0x7efca898e929 [ 210.553251][ T8959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.553267][ T8959] RSP: 002b:00007efca9886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 210.553296][ T8959] RAX: ffffffffffffffda RBX: 00007efca8bb5fa0 RCX: 00007efca898e929 [ 210.553310][ T8959] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000006 [ 210.553322][ T8959] RBP: 00007efca9886090 R08: 0000000000000000 R09: 0000000000000000 [ 210.553333][ T8959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.553344][ T8959] R13: 0000000000000000 R14: 00007efca8bb5fa0 R15: 00007ffd94592d68 [ 210.553377][ T8959] [ 211.186366][ T8969] FAULT_INJECTION: forcing a failure. [ 211.186366][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 211.275839][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.2.1000 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 211.275868][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.275879][ T8969] Call Trace: [ 211.275887][ T8969] [ 211.275896][ T8969] dump_stack_lvl+0x189/0x250 [ 211.275931][ T8969] ? __pfx____ratelimit+0x10/0x10 [ 211.275957][ T8969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.275985][ T8969] ? __pfx__printk+0x10/0x10 [ 211.276012][ T8969] ? __pfx___might_resched+0x10/0x10 [ 211.276030][ T8969] ? fs_reclaim_acquire+0x7d/0x100 [ 211.276057][ T8969] should_fail_ex+0x414/0x560 [ 211.276089][ T8969] should_failslab+0xa8/0x100 [ 211.276112][ T8969] __kmalloc_cache_noprof+0x70/0x3d0 [ 211.276131][ T8969] ? genl_start+0x1c9/0x6c0 [ 211.276161][ T8969] genl_start+0x1c9/0x6c0 [ 211.276182][ T8969] ? netlink_lookup+0x30/0x200 [ 211.276208][ T8969] __netlink_dump_start+0x466/0x7e0 [ 211.276247][ T8969] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 211.276276][ T8969] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 211.276307][ T8969] ? rcu_is_watching+0x15/0xb0 [ 211.276324][ T8969] ? __pfx_genl_start+0x10/0x10 [ 211.276344][ T8969] ? __pfx_genl_dumpit+0x10/0x10 [ 211.276364][ T8969] ? __pfx_genl_done+0x10/0x10 [ 211.276392][ T8969] ? bpf_lsm_capable+0x9/0x20 [ 211.276410][ T8969] ? security_capable+0x7e/0x2e0 [ 211.276443][ T8969] genl_rcv_msg+0x5da/0x790 [ 211.276475][ T8969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.276495][ T8969] ? ref_tracker_free+0x63a/0x7d0 [ 211.276520][ T8969] ? __pfx_ip_vs_genl_dump_services+0x10/0x10 [ 211.276557][ T8969] ? __pfx_ref_tracker_free+0x10/0x10 [ 211.276596][ T8969] netlink_rcv_skb+0x205/0x470 [ 211.276617][ T8969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.276643][ T8969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.276683][ T8969] ? down_read+0x1ad/0x2e0 [ 211.276715][ T8969] genl_rcv+0x28/0x40 [ 211.276736][ T8969] netlink_unicast+0x758/0x8d0 [ 211.276778][ T8969] netlink_sendmsg+0x805/0xb30 [ 211.276809][ T8969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.276833][ T8969] ? aa_sock_msg_perm+0x94/0x160 [ 211.276866][ T8969] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.276890][ T8969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.276911][ T8969] __sock_sendmsg+0x219/0x270 [ 211.276941][ T8969] ____sys_sendmsg+0x505/0x830 [ 211.276969][ T8969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.277001][ T8969] ? import_iovec+0x74/0xa0 [ 211.277026][ T8969] ___sys_sendmsg+0x21f/0x2a0 [ 211.277050][ T8969] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.277115][ T8969] ? __fget_files+0x2a/0x420 [ 211.277136][ T8969] ? __fget_files+0x3a0/0x420 [ 211.277170][ T8969] __x64_sys_sendmsg+0x19b/0x260 [ 211.277194][ T8969] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.277227][ T8969] ? __pfx_ksys_write+0x10/0x10 [ 211.277243][ T8969] ? rcu_is_watching+0x15/0xb0 [ 211.277267][ T8969] ? do_syscall_64+0xbe/0x3b0 [ 211.277294][ T8969] do_syscall_64+0xfa/0x3b0 [ 211.277315][ T8969] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.277336][ T8969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.277353][ T8969] ? clear_bhb_loop+0x60/0xb0 [ 211.277376][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.277392][ T8969] RIP: 0033:0x7efca898e929 [ 211.277409][ T8969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.277425][ T8969] RSP: 002b:00007efca9886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.277446][ T8969] RAX: ffffffffffffffda RBX: 00007efca8bb5fa0 RCX: 00007efca898e929 [ 211.277460][ T8969] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 211.277471][ T8969] RBP: 00007efca9886090 R08: 0000000000000000 R09: 0000000000000000 [ 211.277483][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.277494][ T8969] R13: 0000000000000000 R14: 00007efca8bb5fa0 R15: 00007ffd94592d68 [ 211.277535][ T8969] [ 211.874814][ T8979] netlink: zone id is out of range [ 211.884850][ T8979] netlink: del zone limit has 4 unknown bytes [ 211.899504][ T8976] xt_hashlimit: size too large, truncated to 1048576 [ 211.949520][ T8980] __nla_validate_parse: 3 callbacks suppressed [ 211.949542][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 211.958671][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 214.598317][ T9061] FAULT_INJECTION: forcing a failure. [ 214.598317][ T9061] name failslab, interval 1, probability 0, space 0, times 0 [ 214.647458][ T9061] CPU: 1 UID: 0 PID: 9061 Comm: syz.2.1035 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 214.647487][ T9061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.647498][ T9061] Call Trace: [ 214.647505][ T9061] [ 214.647514][ T9061] dump_stack_lvl+0x189/0x250 [ 214.647580][ T9061] ? __pfx____ratelimit+0x10/0x10 [ 214.647605][ T9061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.647640][ T9061] ? __pfx__printk+0x10/0x10 [ 214.647669][ T9061] ? __pfx___might_resched+0x10/0x10 [ 214.647686][ T9061] ? fs_reclaim_acquire+0x7d/0x100 [ 214.647714][ T9061] should_fail_ex+0x414/0x560 [ 214.647746][ T9061] should_failslab+0xa8/0x100 [ 214.647769][ T9061] __kmalloc_noprof+0xcb/0x4f0 [ 214.647787][ T9061] ? iter_file_splice_write+0x1cb/0x1000 [ 214.647814][ T9061] iter_file_splice_write+0x1cb/0x1000 [ 214.647835][ T9061] ? __pfx_current_time+0x10/0x10 [ 214.647888][ T9061] ? __pfx_iter_file_splice_write+0x10/0x10 [ 214.647913][ T9061] ? rcu_read_lock_any_held+0xb3/0x120 [ 214.647933][ T9061] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 214.647964][ T9061] ? __pfx_iter_file_splice_write+0x10/0x10 [ 214.647986][ T9061] direct_splice_actor+0x101/0x160 [ 214.648012][ T9061] splice_direct_to_actor+0x5a5/0xcc0 [ 214.648056][ T9061] ? __pfx_direct_splice_actor+0x10/0x10 [ 214.648077][ T9061] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 214.648098][ T9061] ? __pfx_aa_file_perm+0x10/0x10 [ 214.648134][ T9061] do_splice_direct+0x181/0x270 [ 214.648158][ T9061] ? __pfx_do_splice_direct+0x10/0x10 [ 214.648179][ T9061] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 214.648209][ T9061] ? rw_verify_area+0x258/0x650 [ 214.648242][ T9061] do_sendfile+0x4da/0x7e0 [ 214.648265][ T9061] ? __pfx_vfs_write+0x10/0x10 [ 214.648289][ T9061] ? __pfx_do_sendfile+0x10/0x10 [ 214.648308][ T9061] ? __fget_files+0x3a0/0x420 [ 214.648338][ T9061] __se_sys_sendfile64+0x13e/0x190 [ 214.648360][ T9061] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 214.648380][ T9061] ? rcu_is_watching+0x15/0xb0 [ 214.648404][ T9061] ? do_syscall_64+0xbe/0x3b0 [ 214.648433][ T9061] do_syscall_64+0xfa/0x3b0 [ 214.648457][ T9061] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.648480][ T9061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.648499][ T9061] ? clear_bhb_loop+0x60/0xb0 [ 214.648523][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.648549][ T9061] RIP: 0033:0x7efca898e929 [ 214.648568][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.648582][ T9061] RSP: 002b:00007efca9886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 214.648603][ T9061] RAX: ffffffffffffffda RBX: 00007efca8bb5fa0 RCX: 00007efca898e929 [ 214.648617][ T9061] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 214.648628][ T9061] RBP: 00007efca9886090 R08: 0000000000000000 R09: 0000000000000000 [ 214.648640][ T9061] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000001 [ 214.648651][ T9061] R13: 0000000000000000 R14: 00007efca8bb5fa0 R15: 00007ffd94592d68 [ 214.648684][ T9061] [ 214.676520][ T9059] hsr0 speed is unknown, defaulting to 1000 [ 214.996582][ T9059] lo speed is unknown, defaulting to 1000 [ 215.052219][ T9070] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 215.103838][ T9074] FAULT_INJECTION: forcing a failure. [ 215.103838][ T9074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.123444][ T9074] CPU: 0 UID: 0 PID: 9074 Comm: syz.1.1040 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 215.123473][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.123484][ T9074] Call Trace: [ 215.123532][ T9074] [ 215.123542][ T9074] dump_stack_lvl+0x189/0x250 [ 215.123578][ T9074] ? __pfx____ratelimit+0x10/0x10 [ 215.123605][ T9074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.123633][ T9074] ? __pfx__printk+0x10/0x10 [ 215.123655][ T9074] ? __might_fault+0xb0/0x130 [ 215.123689][ T9074] should_fail_ex+0x414/0x560 [ 215.123721][ T9074] _copy_from_user+0x2d/0xb0 [ 215.123744][ T9074] __sys_bpf+0x1ed/0x860 [ 215.123773][ T9074] ? __pfx___sys_bpf+0x10/0x10 [ 215.123815][ T9074] ? ksys_write+0x22a/0x250 [ 215.123837][ T9074] ? __pfx_ksys_write+0x10/0x10 [ 215.123853][ T9074] ? rcu_is_watching+0x15/0xb0 [ 215.123882][ T9074] __x64_sys_bpf+0x7c/0x90 [ 215.123907][ T9074] do_syscall_64+0xfa/0x3b0 [ 215.123931][ T9074] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.123955][ T9074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.123974][ T9074] ? clear_bhb_loop+0x60/0xb0 [ 215.123999][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.124017][ T9074] RIP: 0033:0x7feed498e929 [ 215.124036][ T9074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.124053][ T9074] RSP: 002b:00007feed57cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.124075][ T9074] RAX: ffffffffffffffda RBX: 00007feed4bb5fa0 RCX: 00007feed498e929 [ 215.124089][ T9074] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 215.124101][ T9074] RBP: 00007feed57cc090 R08: 0000000000000000 R09: 0000000000000000 [ 215.124113][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.124125][ T9074] R13: 0000000000000000 R14: 00007feed4bb5fa0 R15: 00007ffdf4e3f938 [ 215.124158][ T9074] [ 215.386149][ T9077] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 215.393961][ T9077] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1041'. [ 215.449792][ T9075] xt_hashlimit: max too large, truncated to 1048576 [ 215.516988][ T9075] Cannot find add_set index 3 as target [ 215.523094][ T9077] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 215.599731][ T9063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.645750][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'. [ 215.675057][ T9063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.696314][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1033'. [ 215.725422][ T9063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.789145][ T9063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.076221][ T9095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1046'. [ 216.181608][ T9099] netlink: zone id is out of range [ 216.206879][ T9099] netlink: zone id is out of range [ 216.226793][ T9099] netlink: zone id is out of range [ 216.237986][ T9099] netlink: zone id is out of range [ 216.249753][ T9099] netlink: zone id is out of range [ 216.263565][ T9099] netlink: zone id is out of range [ 216.274736][ T9099] netlink: zone id is out of range [ 216.285188][ T9099] netlink: zone id is out of range [ 216.711451][ T9115] netlink: 'syz.3.1049': attribute type 39 has an invalid length. [ 216.967857][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 216.973966][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 216.980405][ T5850] Bluetooth: hci1: command 0x080f tx timeout [ 216.986775][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 217.153253][ T9126] Cannot find set identified by id 2 to match [ 217.227501][ T9132] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1054'. [ 217.238487][ T9132] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.1054'. [ 217.550553][ T9124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.569383][ T9124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.719848][ T9124] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.730728][ T9124] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.739716][ T9124] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.748928][ T9124] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.830067][ T9149] bridge_slave_0: left allmulticast mode [ 217.836435][ T9149] bridge_slave_0: left promiscuous mode [ 217.842639][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.859806][ T9149] bridge_slave_1: left allmulticast mode [ 217.897403][ T9149] bridge_slave_1: left promiscuous mode [ 217.903340][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.964341][ T9149] bond0: (slave bond_slave_0): Releasing backup interface [ 217.974786][ T9149] bond0: (slave bond_slave_1): Releasing backup interface [ 217.989150][ T9149] team0: Port device team_slave_0 removed [ 217.998809][ T9149] team0: Port device team_slave_1 removed [ 218.012102][ T9149] bond0: (slave wlan1): Releasing backup interface [ 218.049590][ T9149] team0: Port device bond1 removed [ 218.069812][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 218.092749][ T9157] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.101877][ T9157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.110916][ T9157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.119854][ T9157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.138745][ T9157] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.147792][ T9157] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.156868][ T9157] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.165911][ T9157] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.169201][ T9160] FAULT_INJECTION: forcing a failure. [ 218.169201][ T9160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.170035][ T9160] [ 218.170042][ T9160] ====================================================== [ 218.170049][ T9160] WARNING: possible circular locking dependency detected [ 218.170056][ T9160] 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 Not tainted [ 218.170066][ T9160] ------------------------------------------------------ [ 218.170072][ T9160] syz.3.1062/9160 is trying to acquire lock: [ 218.170081][ T9160] ffffffff8e133280 (console_owner){-...}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 218.170125][ T9160] [ 218.170125][ T9160] but task is already holding lock: [ 218.170131][ T9160] ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 218.170173][ T9160] [ 218.170173][ T9160] which lock already depends on the new lock. [ 218.170173][ T9160] [ 218.170179][ T9160] [ 218.170179][ T9160] the existing dependency chain (in reverse order) is: [ 218.170185][ T9160] [ 218.170185][ T9160] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 218.170207][ T9160] lock_acquire+0x120/0x360 [ 218.170228][ T9160] _raw_spin_lock_nested+0x32/0x50 [ 218.170247][ T9160] raw_spin_rq_lock_nested+0x2a/0x140 [ 218.170267][ T9160] task_rq_lock+0xbc/0x470 [ 218.170288][ T9160] cgroup_move_task+0x9a/0x590 [ 218.170303][ T9160] css_set_move_task+0x658/0x9e0 [ 218.170319][ T9160] cgroup_post_fork+0x1ef/0x790 [ 218.170334][ T9160] copy_process+0x3862/0x3c00 [ 218.170349][ T9160] kernel_clone+0x21e/0x870 [ 218.170363][ T9160] user_mode_thread+0xdd/0x140 [ 218.170378][ T9160] rest_init+0x23/0x300 [ 218.170390][ T9160] start_kernel+0x47d/0x500 [ 218.170407][ T9160] x86_64_start_reservations+0x24/0x30 [ 218.170429][ T9160] x86_64_start_kernel+0x143/0x1c0 [ 218.170449][ T9160] common_startup_64+0x13e/0x147 [ 218.170466][ T9160] [ 218.170466][ T9160] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 218.170487][ T9160] lock_acquire+0x120/0x360 [ 218.170505][ T9160] _raw_spin_lock_irqsave+0xa7/0xf0 [ 218.170522][ T9160] try_to_wake_up+0x6e/0x1290 [ 218.170545][ T9160] __wake_up_common_lock+0x134/0x1f0 [ 218.170564][ T9160] tty_port_default_wakeup+0xa2/0xf0 [ 218.170581][ T9160] serial8250_tx_chars+0x72e/0x970 [ 218.170597][ T9160] serial8250_handle_irq+0x633/0xbb0 [ 218.170612][ T9160] serial8250_default_handle_irq+0xbf/0x1b0 [ 218.170630][ T9160] serial8250_interrupt+0xa2/0x1d0 [ 218.170650][ T9160] __handle_irq_event_percpu+0x28c/0x980 [ 218.170667][ T9160] handle_irq_event+0x8b/0x1e0 [ 218.170683][ T9160] handle_edge_irq+0x267/0x9c0 [ 218.170696][ T9160] __common_interrupt+0x143/0x250 [ 218.170714][ T9160] common_interrupt+0xb6/0xe0 [ 218.170729][ T9160] asm_common_interrupt+0x26/0x40 [ 218.170744][ T9160] pv_native_safe_halt+0x13/0x20 [ 218.170761][ T9160] default_idle+0x13/0x20 [ 218.170781][ T9160] default_idle_call+0x74/0xb0 [ 218.170801][ T9160] do_idle+0x1e8/0x510 [ 218.170814][ T9160] cpu_startup_entry+0x44/0x60 [ 218.170827][ T9160] rest_init+0x2de/0x300 [ 218.170839][ T9160] start_kernel+0x47d/0x500 [ 218.170856][ T9160] x86_64_start_reservations+0x24/0x30 [ 218.170877][ T9160] x86_64_start_kernel+0x143/0x1c0 [ 218.170898][ T9160] common_startup_64+0x13e/0x147 [ 218.170913][ T9160] [ 218.170913][ T9160] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 218.170935][ T9160] lock_acquire+0x120/0x360 [ 218.170954][ T9160] _raw_spin_lock_irqsave+0xa7/0xf0 [ 218.170970][ T9160] __wake_up_common_lock+0x2f/0x1f0 [ 218.170988][ T9160] tty_port_default_wakeup+0xa2/0xf0 [ 218.171004][ T9160] serial8250_tx_chars+0x72e/0x970 [ 218.171019][ T9160] serial8250_handle_irq+0x633/0xbb0 [ 218.171034][ T9160] serial8250_default_handle_irq+0xbf/0x1b0 [ 218.171052][ T9160] serial8250_interrupt+0xa2/0x1d0 [ 218.171072][ T9160] __handle_irq_event_percpu+0x28c/0x980 [ 218.171089][ T9160] handle_irq_event+0x8b/0x1e0 [ 218.171105][ T9160] handle_edge_irq+0x267/0x9c0 [ 218.171119][ T9160] __common_interrupt+0x143/0x250 [ 218.171137][ T9160] common_interrupt+0xb6/0xe0 [ 218.171151][ T9160] asm_common_interrupt+0x26/0x40 [ 218.171164][ T9160] pv_native_safe_halt+0x13/0x20 [ 218.171200][ T9160] default_idle+0x13/0x20 [ 218.171220][ T9160] default_idle_call+0x74/0xb0 [ 218.171241][ T9160] do_idle+0x1e8/0x510 [ 218.171254][ T9160] cpu_startup_entry+0x44/0x60 [ 218.171266][ T9160] rest_init+0x2de/0x300 [ 218.171279][ T9160] start_kernel+0x47d/0x500 [ 218.171295][ T9160] x86_64_start_reservations+0x24/0x30 [ 218.171316][ T9160] x86_64_start_kernel+0x143/0x1c0 [ 218.171337][ T9160] common_startup_64+0x13e/0x147 [ 218.171352][ T9160] [ 218.171352][ T9160] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 218.171374][ T9160] lock_acquire+0x120/0x360 [ 218.171393][ T9160] _raw_spin_lock_irqsave+0xa7/0xf0 [ 218.171409][ T9160] serial8250_console_write+0x17e/0x1ba0 [ 218.171424][ T9160] console_flush_all+0x728/0xc40 [ 218.171440][ T9160] console_unlock+0xc4/0x270 [ 218.171454][ T9160] vprintk_emit+0x5b7/0x7a0 [ 218.171467][ T9160] _printk+0xcf/0x120 [ 218.171482][ T9160] register_console+0xa8b/0xf90 [ 218.171498][ T9160] univ8250_console_init+0x52/0x90 [ 218.171518][ T9160] console_init+0x1a1/0x670 [ 218.171549][ T9160] start_kernel+0x2cc/0x500 [ 218.171566][ T9160] x86_64_start_reservations+0x24/0x30 [ 218.171587][ T9160] x86_64_start_kernel+0x143/0x1c0 [ 218.171607][ T9160] common_startup_64+0x13e/0x147 [ 218.171622][ T9160] [ 218.171622][ T9160] -> #0 (console_owner){-...}-{0:0}: [ 218.171644][ T9160] validate_chain+0xb9b/0x2140 [ 218.171657][ T9160] __lock_acquire+0xab9/0xd20 [ 218.171676][ T9160] lock_acquire+0x120/0x360 [ 218.171694][ T9160] vprintk_emit+0x460/0x7a0 [ 218.171708][ T9160] _printk+0xcf/0x120 [ 218.171721][ T9160] should_fail_ex+0x3f5/0x560 [ 218.171739][ T9160] strncpy_from_user+0x36/0x290 [ 218.171756][ T9160] strncpy_from_user_nofault+0x72/0x150 [ 218.171777][ T9160] bpf_probe_read_user_str+0x2a/0x70 [ 218.171798][ T9160] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 218.171811][ T9160] bpf_trace_run2+0x281/0x4b0 [ 218.171827][ T9160] __bpf_trace_tlb_flush+0xf5/0x150 [ 218.171843][ T9160] trace_tlb_flush+0x115/0x140 [ 218.171858][ T9160] switch_mm_irqs_off+0x53e/0x7a0 [ 218.171873][ T9160] __schedule+0x106c/0x4d00 [ 218.171889][ T9160] schedule+0x165/0x360 [ 218.171905][ T9160] schedule_preempt_disabled+0x13/0x30 [ 218.171922][ T9160] __mutex_lock+0x3ce/0xe80 [ 218.171941][ T9160] nl80211_pre_doit+0x5f/0x930 [ 218.171957][ T9160] genl_family_rcv_msg_doit+0x1bb/0x300 [ 218.171977][ T9160] genl_rcv_msg+0x60e/0x790 [ 218.171994][ T9160] netlink_rcv_skb+0x205/0x470 [ 218.172006][ T9160] genl_rcv+0x28/0x40 [ 218.172022][ T9160] netlink_unicast+0x758/0x8d0 [ 218.172042][ T9160] netlink_sendmsg+0x805/0xb30 [ 218.172055][ T9160] __sock_sendmsg+0x219/0x270 [ 218.172074][ T9160] ____sys_sendmsg+0x505/0x830 [ 218.172088][ T9160] ___sys_sendmsg+0x21f/0x2a0 [ 218.172103][ T9160] __x64_sys_sendmsg+0x19b/0x260 [ 218.172117][ T9160] do_syscall_64+0xfa/0x3b0 [ 218.172136][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.172151][ T9160] [ 218.172151][ T9160] other info that might help us debug this: [ 218.172151][ T9160] [ 218.172157][ T9160] Chain exists of: [ 218.172157][ T9160] console_owner --> &p->pi_lock --> &rq->__lock [ 218.172157][ T9160] [ 218.172182][ T9160] Possible unsafe locking scenario: [ 218.172182][ T9160] [ 218.172187][ T9160] CPU0 CPU1 [ 218.172192][ T9160] ---- ---- [ 218.172197][ T9160] lock(&rq->__lock); [ 218.172207][ T9160] lock(&p->pi_lock); [ 218.172220][ T9160] lock(&rq->__lock); [ 218.172232][ T9160] lock(console_owner); [ 218.172242][ T9160] [ 218.172242][ T9160] *** DEADLOCK *** [ 218.172242][ T9160] [ 218.172247][ T9160] 4 locks held by syz.3.1062/9160: [ 218.172256][ T9160] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 218.172296][ T9160] #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 218.172335][ T9160] #2: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 218.172379][ T9160] #3: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 218.172418][ T9160] [ 218.172418][ T9160] stack backtrace: [ 218.172426][ T9160] CPU: 1 UID: 0 PID: 9160 Comm: syz.3.1062 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 218.172445][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.172455][ T9160] Call Trace: [ 218.172461][ T9160] [ 218.172469][ T9160] dump_stack_lvl+0x189/0x250 [ 218.172495][ T9160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.172518][ T9160] ? __pfx__printk+0x10/0x10 [ 218.172542][ T9160] ? print_lock_name+0xde/0x100 [ 218.172559][ T9160] print_circular_bug+0x2ee/0x310 [ 218.172577][ T9160] check_noncircular+0x134/0x160 [ 218.172596][ T9160] validate_chain+0xb9b/0x2140 [ 218.172620][ T9160] __lock_acquire+0xab9/0xd20 [ 218.172643][ T9160] ? vprintk_emit+0x444/0x7a0 [ 218.172658][ T9160] lock_acquire+0x120/0x360 [ 218.172678][ T9160] ? vprintk_emit+0x444/0x7a0 [ 218.172696][ T9160] ? do_raw_spin_unlock+0x122/0x240 [ 218.172713][ T9160] ? vprintk_emit+0x444/0x7a0 [ 218.172728][ T9160] vprintk_emit+0x460/0x7a0 [ 218.172743][ T9160] ? vprintk_emit+0x444/0x7a0 [ 218.172758][ T9160] ? __pfx_vprintk_emit+0x10/0x10 [ 218.172773][ T9160] ? search_extable+0x8f/0xd0 [ 218.172793][ T9160] ? __pfx_search_extable+0x10/0x10 [ 218.172812][ T9160] ? strncpy_from_user+0x1bc/0x290 [ 218.172834][ T9160] ? strncpy_from_user+0x1bc/0x290 [ 218.172854][ T9160] _printk+0xcf/0x120 [ 218.172869][ T9160] ? __pfx____ratelimit+0x10/0x10 [ 218.172890][ T9160] ? __pfx__printk+0x10/0x10 [ 218.172911][ T9160] should_fail_ex+0x3f5/0x560 [ 218.172932][ T9160] strncpy_from_user+0x36/0x290 [ 218.172952][ T9160] strncpy_from_user_nofault+0x72/0x150 [ 218.172975][ T9160] bpf_probe_read_user_str+0x2a/0x70 [ 218.172998][ T9160] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 218.173012][ T9160] bpf_trace_run2+0x281/0x4b0 [ 218.173030][ T9160] ? bpf_trace_run2+0x186/0x4b0 [ 218.173048][ T9160] ? __pfx_bpf_trace_run2+0x10/0x10 [ 218.173069][ T9160] ? kvm_sched_clock_read+0x11/0x20 [ 218.173087][ T9160] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 218.173105][ T9160] __bpf_trace_tlb_flush+0xf5/0x150 [ 218.173122][ T9160] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 218.173140][ T9160] ? psi_group_change+0xbc7/0x1210 [ 218.173155][ T9160] ? rcu_read_lock_sched_held+0x89/0x100 [ 218.173173][ T9160] trace_tlb_flush+0x115/0x140 [ 218.173190][ T9160] switch_mm_irqs_off+0x53e/0x7a0 [ 218.173209][ T9160] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 218.173225][ T9160] ? psi_task_switch+0x314/0x6d0 [ 218.173244][ T9160] __schedule+0x106c/0x4d00 [ 218.173267][ T9160] ? schedule+0x165/0x360 [ 218.173284][ T9160] ? irqentry_exit+0x74/0x90 [ 218.173305][ T9160] ? __pfx___schedule+0x10/0x10 [ 218.173328][ T9160] ? __pfx_osq_unlock+0x10/0x10 [ 218.173346][ T9160] schedule+0x165/0x360 [ 218.173365][ T9160] schedule_preempt_disabled+0x13/0x30 [ 218.173384][ T9160] __mutex_lock+0x3ce/0xe80 [ 218.173409][ T9160] ? nl80211_pre_doit+0x5f/0x930 [ 218.173428][ T9160] ? __pfx___mutex_lock+0x10/0x10 [ 218.173453][ T9160] ? __nla_parse+0x40/0x60 [ 218.173476][ T9160] nl80211_pre_doit+0x5f/0x930 [ 218.173494][ T9160] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 218.173518][ T9160] genl_family_rcv_msg_doit+0x1bb/0x300 [ 218.173547][ T9160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.173572][ T9160] ? bpf_lsm_capable+0x9/0x20 [ 218.173588][ T9160] ? security_capable+0x7e/0x2e0 [ 218.173610][ T9160] genl_rcv_msg+0x60e/0x790 [ 218.173632][ T9160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.173650][ T9160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 218.173668][ T9160] ? __pfx_nl80211_new_key+0x10/0x10 [ 218.173688][ T9160] ? __pfx_nl80211_post_doit+0x10/0x10 [ 218.173711][ T9160] netlink_rcv_skb+0x205/0x470 [ 218.173727][ T9160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.173746][ T9160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.173767][ T9160] ? down_read+0x1ad/0x2e0 [ 218.173789][ T9160] genl_rcv+0x28/0x40 [ 218.173806][ T9160] netlink_unicast+0x758/0x8d0 [ 218.173833][ T9160] netlink_sendmsg+0x805/0xb30 [ 218.173851][ T9160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.173869][ T9160] ? aa_sock_msg_perm+0x94/0x160 [ 218.173889][ T9160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.173910][ T9160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.173926][ T9160] __sock_sendmsg+0x219/0x270 [ 218.173946][ T9160] ____sys_sendmsg+0x505/0x830 [ 218.173965][ T9160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.173984][ T9160] ? import_iovec+0x74/0xa0 [ 218.174002][ T9160] ___sys_sendmsg+0x21f/0x2a0 [ 218.174020][ T9160] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.174048][ T9160] ? __fget_files+0x2a/0x420 [ 218.174066][ T9160] ? __fget_files+0x3a0/0x420 [ 218.174087][ T9160] __x64_sys_sendmsg+0x19b/0x260 [ 218.174105][ T9160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.174124][ T9160] ? __pfx_ksys_write+0x10/0x10 [ 218.174139][ T9160] ? rcu_is_watching+0x15/0xb0 [ 218.174155][ T9160] ? do_syscall_64+0xbe/0x3b0 [ 218.174177][ T9160] do_syscall_64+0xfa/0x3b0 [ 218.174196][ T9160] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.174215][ T9160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.174231][ T9160] ? clear_bhb_loop+0x60/0xb0 [ 218.174248][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.174264][ T9160] RIP: 0033:0x7f345358e929 [ 218.174277][ T9160] Code: Unable to access opcode bytes at 0x7f345358e8ff. [ 218.174286][ T9160] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.174303][ T9160] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 218.174315][ T9160] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 218.174326][ T9160] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.174336][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.174346][ T9160] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 218.174364][ T9160] [ 219.555501][ T9160] CPU: 1 UID: 0 PID: 9160 Comm: syz.3.1062 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 219.555519][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.555526][ T9160] Call Trace: [ 219.555533][ T9160] [ 219.555540][ T9160] dump_stack_lvl+0x189/0x250 [ 219.555561][ T9160] ? __pfx____ratelimit+0x10/0x10 [ 219.555575][ T9160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.555590][ T9160] ? __pfx__printk+0x10/0x10 [ 219.555604][ T9160] should_fail_ex+0x414/0x560 [ 219.555619][ T9160] strncpy_from_user+0x36/0x290 [ 219.555633][ T9160] strncpy_from_user_nofault+0x72/0x150 [ 219.555649][ T9160] bpf_probe_read_user_str+0x2a/0x70 [ 219.555666][ T9160] bpf_prog_02a70dbeb5f742df+0x43/0x49 [ 219.555676][ T9160] bpf_trace_run2+0x281/0x4b0 [ 219.555689][ T9160] ? bpf_trace_run2+0x186/0x4b0 [ 219.555701][ T9160] ? __pfx_bpf_trace_run2+0x10/0x10 [ 219.555714][ T9160] ? kvm_sched_clock_read+0x11/0x20 [ 219.555727][ T9160] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 219.555739][ T9160] __bpf_trace_tlb_flush+0xf5/0x150 [ 219.555750][ T9160] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 219.555763][ T9160] ? psi_group_change+0xbc7/0x1210 [ 219.555774][ T9160] ? rcu_read_lock_sched_held+0x89/0x100 [ 219.555786][ T9160] trace_tlb_flush+0x115/0x140 [ 219.555798][ T9160] switch_mm_irqs_off+0x53e/0x7a0 [ 219.555811][ T9160] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 219.555821][ T9160] ? psi_task_switch+0x314/0x6d0 [ 219.555833][ T9160] __schedule+0x106c/0x4d00 [ 219.555850][ T9160] ? schedule+0x165/0x360 [ 219.555861][ T9160] ? irqentry_exit+0x74/0x90 [ 219.555875][ T9160] ? __pfx___schedule+0x10/0x10 [ 219.555890][ T9160] ? __pfx_osq_unlock+0x10/0x10 [ 219.555902][ T9160] schedule+0x165/0x360 [ 219.555914][ T9160] schedule_preempt_disabled+0x13/0x30 [ 219.555926][ T9160] __mutex_lock+0x3ce/0xe80 [ 219.555943][ T9160] ? nl80211_pre_doit+0x5f/0x930 [ 219.555956][ T9160] ? __pfx___mutex_lock+0x10/0x10 [ 219.555972][ T9160] ? __nla_parse+0x40/0x60 [ 219.555987][ T9160] nl80211_pre_doit+0x5f/0x930 [ 219.555999][ T9160] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 219.556016][ T9160] genl_family_rcv_msg_doit+0x1bb/0x300 [ 219.556031][ T9160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.556047][ T9160] ? bpf_lsm_capable+0x9/0x20 [ 219.556057][ T9160] ? security_capable+0x7e/0x2e0 [ 219.556072][ T9160] genl_rcv_msg+0x60e/0x790 [ 219.556086][ T9160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.556099][ T9160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 219.556111][ T9160] ? __pfx_nl80211_new_key+0x10/0x10 [ 219.556123][ T9160] ? __pfx_nl80211_post_doit+0x10/0x10 [ 219.556138][ T9160] netlink_rcv_skb+0x205/0x470 [ 219.556149][ T9160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.556161][ T9160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.556175][ T9160] ? down_read+0x1ad/0x2e0 [ 219.556189][ T9160] genl_rcv+0x28/0x40 [ 219.556208][ T9160] netlink_unicast+0x758/0x8d0 [ 219.556226][ T9160] netlink_sendmsg+0x805/0xb30 [ 219.556238][ T9160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.556250][ T9160] ? aa_sock_msg_perm+0x94/0x160 [ 219.556264][ T9160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.556277][ T9160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.556287][ T9160] __sock_sendmsg+0x219/0x270 [ 219.556302][ T9160] ____sys_sendmsg+0x505/0x830 [ 219.556314][ T9160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.556327][ T9160] ? import_iovec+0x74/0xa0 [ 219.556339][ T9160] ___sys_sendmsg+0x21f/0x2a0 [ 219.556351][ T9160] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.556369][ T9160] ? __fget_files+0x2a/0x420 [ 219.556381][ T9160] ? __fget_files+0x3a0/0x420 [ 219.556394][ T9160] __x64_sys_sendmsg+0x19b/0x260 [ 219.556406][ T9160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.556419][ T9160] ? __pfx_ksys_write+0x10/0x10 [ 219.556429][ T9160] ? rcu_is_watching+0x15/0xb0 [ 219.556440][ T9160] ? do_syscall_64+0xbe/0x3b0 [ 219.556455][ T9160] do_syscall_64+0xfa/0x3b0 [ 219.556469][ T9160] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.556481][ T9160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.556492][ T9160] ? clear_bhb_loop+0x60/0xb0 [ 219.556503][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.556514][ T9160] RIP: 0033:0x7f345358e929 [ 219.556524][ T9160] Code: Unable to access opcode bytes at 0x7f345358e8ff. [ 219.556530][ T9160] RSP: 002b:00007f34513f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.556543][ T9160] RAX: ffffffffffffffda RBX: 00007f34537b5fa0 RCX: 00007f345358e929 [ 219.556551][ T9160] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 219.556558][ T9160] RBP: 00007f34513f6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.556565][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.556572][ T9160] R13: 0000000000000000 R14: 00007f34537b5fa0 R15: 00007ffed132a9f8 [ 219.556583][ T9160] [ 220.071083][ T9161] net_ratelimit: 18 callbacks suppressed [ 220.071104][ T9161] netlink: del zone limit has 4 unknown bytes