last executing test programs: 8.591605553s ago: executing program 4 (id=972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0xd, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair(0x5, 0x3, 0x4, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70428, 0x1810}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x48}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x158, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x120, 0x2, [@TCA_ROUTE4_ACT={0x11c, 0x6, [@m_mpls={0x118, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xe2, 0x6, "7d702d047d3467d605bef7a0e5517a131bbf29c3017ee2ac364bfe841632218f4491d613fc1dd5fc9925387431e09082870b7405f947f76de7a48fcd497068421fc8c76105b381c370d0b327c5bf3559328bc9857fc20f1a13fcdca27dee901b02362efb6112f90b9f06c33002e46ddd70f72fdd52a9fc8e7e32fb282d3e65c32aaae50568b3b63adc5799bfb36783f6b40ffdffffffa651dadf108985c80ef73b3a2bae87b9e90d930308006d42d858aa185813d16af6b4b2416692b43fd59056a1fd95c9548d9e96c24559241bfa7754373f48b5c3e988b89a1006eeb3"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)={0x120, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7c00000000000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x6, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r15, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r16, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r15, &(0x7f0000000400)="b7647623175b5d25415aba2cfd55ac15c2e9511d0a309d156e33f71f052e5366a09a4c7e2eaeca3a1bbf4020865b3d066cbdef536d7658b5d1d1bcdc5cd2b799342e435e9c9f8e205bf97d87c8ffdb282e54a68d38e326592058cad5ebbb154b38955394c4471346df16e3d011009c61e444ae942ac71650671651cefece7dda6e1239816abf80c49218d9200b774e7288101280cc744231a85f596218a38c41faef8cb801fc2a340d1f15678c86bc", &(0x7f00000004c0)=""/159}, 0x20) 8.142049689s ago: executing program 4 (id=975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xb3, &(0x7f0000000ac0), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000140)=r0}, 0x20) r3 = socket$inet(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380), 0x500}, 0x20) connect$inet(r3, &(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 7.897259033s ago: executing program 4 (id=978): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) r1 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) recvfrom$inet6(r4, &(0x7f0000000380)=""/229, 0xe5, 0x10010, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@end]}}, {0x4e20, 0x4e20, 0x4c, 0x0, @wg=@response={0x2, 0x4, 0x4, "7580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x8a) socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000080), &(0x7f0000000380)=r9}, 0x20) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="9000000010000311000000000000000000000700", @ANYBLOB="352178389e6a20f483742ab61993f0f4372127987a9320a4122dca6d11bee9cd21738699902ba9fcd83be32aa1490824de5265a58d1bae8e85924e7edd79b65796af190798ccaf8c729a5ffd71ec90e6439c0b85d082cd6d524b9f243ecf8c6ea985821e75af5dc67cf602097d45fc045ec8b7e8472fa96898271f4a4630634591ea6e3c3b", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="0800c700c2a1a7b5ed96525a2b886736069f1a30b22ba86c3f02d9d5db74a7b07853b2f40bb29098abf5de484be99866a4acf6860212", @ANYRESOCT=r7], 0x90}}, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000000), 0x2, 0x0) 7.415379085s ago: executing program 4 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000280)=0x8) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000004c0)={r10, @in6={{0xa, 0x4e24, 0x6, @remote, 0x5}}}, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd0000120000000000000064d6892b0f9a11"], 0xfd0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200060004008535523700000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r13, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffff00001000000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 6.467460465s ago: executing program 3 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, 0x0, 0x4008091) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8040020}, 0x44850) syz_emit_ethernet(0x5e, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESOCT=r0, @ANYRESOCT=r1], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@deltfilter={0xa8, 0x2d, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {0x0, 0xf}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private0}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8808}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x16}}]}, 0xa8}}, 0x884) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b0f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e71, @private=0xa010102}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$rose(r4, &(0x7f0000002a00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.484577907s ago: executing program 1 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}, 0x1, 0x0, 0x0, 0x80ffffff}, 0x0) 5.314295219s ago: executing program 1 (id=998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000580)={'syztnl0\x00', r4, 0x7, 0x700, 0xb, 0x9, {{0x30, 0x4, 0x0, 0x9, 0xc0, 0x67, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x41, [@dev={0xac, 0x14, 0x14, 0x1b}, @local, @local, @loopback, @loopback, @local, @multicast2]}, @generic={0x88, 0x4, "967a"}, @timestamp={0x44, 0x4, 0xfe, 0x0, 0x9}, @timestamp_prespec={0x44, 0x54, 0x24, 0x3, 0x2, [{@local, 0x4}, {@multicast1}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@multicast1, 0x7}, {@empty, 0x5}, {@local, 0x10}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@rand_addr=0x64010101, 0x7ff}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x4, [{@rand_addr=0x64010100, 0x97fe}, {@empty}]}, @noop, @end, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x8, [{@multicast1, 0x7fffffff}, {@empty, 0xb}]}]}}}}}) r6 = socket(0x10, 0x80002, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) connect$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000240)={r13, 0x7eeb}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f00000002c0)={r13, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}}, 0x0) r14 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@netrom, @remote, @bcast, @netrom, @rose, @netrom, @default, @null]}, &(0x7f0000000100)=0x48) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000240)=0x8) getsockname$ax25(r14, &(0x7f0000000180)={{0x3, @bcast}, [@null, @bcast, @netrom, @bcast, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000200)=0x48) 5.313865223s ago: executing program 3 (id=999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r2, 0x7d243a6ea807936d, 0x12, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x84) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x28000600) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, 0x0) 4.998678029s ago: executing program 3 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f00000006c0)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000540), 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) unshare(0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x1, 0x1, 0x6, 0x0, {{0x7, 0x4, 0x0, 0x22, 0x1c, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@generic={0x7, 0x4, "8de6"}, @noop]}}}}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000001d000400a0007000fcdbdf2502000000d9fd25d543787abc3fae933034a8f8f68c5dd77680e758f830cd7bc0b1d00b4d2b6a08f81ed8b6e65ab3f714", @ANYRES32=r4, @ANYBLOB="4000c00b18000e80050001000900000004000200050001000800000005000c000000000008000a000700000014000100fe8000000000000000000000000000aa08000b0023000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300), 0x10, 0x100000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000004000000ff10000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000000000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x40f00, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xa, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x0, 0x1, 0xc, 0xb}, {0x4, 0x2, 0x10, 0x1}, {0x3, 0x5, 0x2, 0xc}, {0x2, 0x4, 0xa, 0x9}, {0x0, 0x3, 0x6, 0xc}, {0x4, 0x5, 0x10, 0x1}], 0x10, 0x5}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r10, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000740)={0x80}) r11 = socket$caif_seqpacket(0x25, 0x5, 0x1) ppoll(&(0x7f0000000640)=[{r0, 0x100}, {r5, 0x118a}, {r1, 0x2144}, {r6, 0x1470}, {r7, 0x4000}, {r9, 0x8000}, {r11, 0x40}, {r3, 0x9129}], 0x8, &(0x7f0000000680), &(0x7f0000000700)={[0x6]}, 0x8) listen(r2, 0x40011) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r12, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bind$bt_sco(r12, &(0x7f0000000800), 0x8) listen(r12, 0x2) 4.945855061s ago: executing program 1 (id=1001): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e28, 0x80000001, @loopback, 0x4a87f804}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="344d5e003e000701feffffff201ff11e897cfff4040042800c5b00c2f74c77e2cff5a29f530af7a104084bfdc3430cff028fb113a97ca6e5a1981cf56ef2676847879b986a3870cfa47781bb52183af404000000d139ad94c77224f7"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x198, 0xfeffffff, 0x268, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2b, @rand_addr=0x64010100, @loopback, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@remote, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3a, @private, @rand_addr, @gre_key, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) socket$inet_sctp(0x2, 0x0, 0x84) 4.670247855s ago: executing program 3 (id=1002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/186, 0xba}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000001a80)=""/175, 0xaf}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001b40)=""/179, 0xb3}], 0x8, &(0x7f0000000240)}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="10000001000300000000000000dbdf48"], 0x10}, {&(0x7f0000000200)={0x10, 0x41, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x4000880}, 0x801) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r7, 0x1) 4.430426546s ago: executing program 1 (id=1003): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000120001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30", @ANYBLOB], 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800400008008000800", @ANYRES32=r1, @ANYBLOB="040001"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=0x0], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 4.227834578s ago: executing program 1 (id=1004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4c21, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000003c0)="d33dd4", 0x3, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (rerun: 32) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)="e0713cb165662b7d3b1a4595e372d6fdc7eea7a16eaf94501f9981705f1cea0a461ae1c3cad0e97ec088b239063045bdb8773529f0e52975e07e90579f67fc40c006187ac34b4b81e6322dc9e705fdce1440b32968ffcb997a99ff6ebe2643f665c160955e3c3522be5c3c01010000000000009c6e894cde0766723e2b2cbc29a193dc68538af00b579570c18be2d2235c268e3c7192c7b758e7a1b6789042656a506249e55d8b0ad41987e22981ec508bcee94a817b448451d00eadd5f86e2ffccb4db448c517b720b58050", 0xcc}], 0x1, 0x0, 0x0, 0x10}, 0x20040854) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x30, 0x0, 0x0, 0x5f]}}, 0x0, 0x45}, 0x28) (async, rerun: 64) r2 = socket$inet6(0xa, 0x3, 0x1) (async, rerun: 64) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) unshare(0x66000080) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) (async) sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000080)="b3b2551567ac16522a620ec5c35d5e961ed2a69d303a03", 0x17}, {&(0x7f0000000500)="96fde0428c0f26c4a6df88a33762607d885696d9dc9bf7421c29ee00aa8f1f33fa7976972abb55993247de1a9bcf76c3202239438a35864c532c7e137d225c97c854ec9be68d9b6f9c5d43fb8ee821ca465c3164ea80c83b8f703be4d25b5977d78057fc173c6b65d6ae084384d9bcd5e15483794218c26fe635ea8503fe3fd295b69542422dea4a384da960df3c939e446ccd04625d14d0c475dd6e15ba81e394f8cf86033fed66210fadad3d8454db590a20cc2a91269ceaea1d2613d1bea524358b856ba9342ea2", 0xc9}], 0x3, &(0x7f0000001d80)=[{0xa0, 0x92ad9c6ca2cff909, 0x800, "cb9f07e4c763990469bbdd354c0564394bad247a25f8549465a26cbbc229dd2ee89fc7727e3a581dad4e7dcbc73ef39910749abc3c71e50be7fa3786c8444db29afee54b4e3285ed05f8d5440b98bbcfafe7813d5a16e7e895b5404998dc04e6e62e1e9aa479cfd4acf6c722cab968f508383e3b89a5e1fea5fa069e3348b6cc02e7375e9ff7dc2a9cbc151052f1"}, {0x110, 0x115, 0x5, "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"}, {0x100, 0x0, 0x1, "e85568f2f47ef2e63efff82dc06ee118e47432ae900574b7f9cd25892b85b3ed9717712b2855c4abe8d4abcb6d49c4d458184817285539cf7cb1919ba504f097535dcb7b5eaa8ef8f0fde5a432f0681b957ba36d4dd42f7b4d3834fff7b7af309cb964f9458040ef235ebe68af4cdd90a92d24359c0fcc26fc2b98b020dd15c0b5f95411f3c38b3b5cd196735097204b5d53b8b00fc2923a043847ebf604bebb0d4c96d77e655917ca9b93270242f3138a9d40047fa8df52d5ca6f58d6655b8f1e6001ac9c4434b2bba5da32a1074c3c7896a73b2d0ca2176719de119d6abc8fdf7856036e130609145180603c80"}, {0x118, 0x10e, 0x3ff, "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"}], 0x3c8}}, {{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, 0x2, 0x0, 0x3}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000980)="3f7cb69cc26501d7ff7390eff269116ba7191e470b3906841fba7656221d1f22b53626eb4fae7739d319f8bc91e3bcff0549ef16a6c8516c3bccd99549b320fc7806c83ee8a6d6d21216cec0e6482c4b3e1b807c0fae3322da9ac0f62946744a3b44c90cce0f9dd3a1d44b2495f321491674b65dcb290adb9d3ac7381df92b23756e177d122d5817557f45b829a54e9b513f30a9fa95e300f5123d6e5b0ccaa470ab0bc19698e6dd594c0f57c7b69c075aefd1082a3da765b84eaabe94baec5006a63d56fbdb9c5f91bfc78afb0479f4507d674bb60aca609f857a3cd41b52e66402d7443d", 0xe5}, {&(0x7f0000000ac0)="94c73c7bc45c894b0d2e24df7b2d4a56b2bc89e41d8a2ca12ec0afa43d073e7ac09ccaeb12555d6c43fee466e8a0f6aa0523a82dffbf900d9640ca3e2520f9bb7e73cb6a1aae597cf34caa76836ff9d48c8bca077f231dc1374c35e51b65845eb9d2a457faa3caeb980b2eca80dcb9606f521b4d68c59b0116ad7456e26a3e5182dc475c3b5df92fef16766a141b4c156948107930370a8962f58653c888b8e954f43d354b23033f75f6ce54fe75a253ff03b7a85d14c8f623f80b5a", 0xbc}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000000b80)="a7f843492c285fe8a4c2c3dfcc1d94a9c39da200a37331026a5dfb5abe8c32603876a80d188178982ae9ee20ded1a5473d2031f7b9b583ac211ae9d32bbc8b0ce2193cd88e558d353ac23f6d9bf38afdec94437db204449872865e5749821cfeb47216845b1bd895757e2cc8b1c923f8df8ca52e9fe6167d73c5a9c9596add56a7e14b69fc8ce62f34300c950e23e00dc3602512427f4a1d9d8d2dd238031e60c5f6c12f4247001f54369428e7fc7a7cb6978ea3785c51e6f79339ea0a", 0xbd}, {&(0x7f0000000240)}], 0x5}}], 0x2, 0x40) 3.851863663s ago: executing program 3 (id=1008): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a00800000020008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xf, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x6, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xffffe000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000006300), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r5, 0x501, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008058}, 0x30fcbe8a6bf4bf80) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 2.01137835s ago: executing program 0 (id=1018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/186, 0xba}, {&(0x7f0000000980)=""/112, 0x70}, {&(0x7f0000001a80)=""/175, 0xaf}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001b40)=""/179, 0xb3}], 0x8, &(0x7f0000000240)}, 0x2002) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="10000001000300000000000000dbdf48"], 0x10}, {&(0x7f0000000200)={0x10, 0x41, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x4000880}, 0x801) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r7, 0x1) 1.847866411s ago: executing program 2 (id=1019): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x48) 1.646337163s ago: executing program 1 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async) unshare(0x62040200) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000280)) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) socket$inet6(0xa, 0x80003, 0xff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x454}, 0x1, 0x0, 0x0, 0x40004}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000000100009500000000000000fcf8305add170b21f892558499e6f8200df7ced5aa29e27bd4fe7d97139959ed19c22d1d2a3342443e2e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) 1.645538106s ago: executing program 2 (id=1021): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0xd4, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)={0x1214, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x11f8, 0x8, 0x0, 0x1, [{0x82c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x388, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x90000000}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "136fec5e383230290e4c70522b1dd3d0fc49a90f8853d156865fcd7a62a7ed9f"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ea057dd7c010bac1f7158c5a9dc67c1c52db02becfc0eb257372a3ef29ae64a2"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @empty, 0x200}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1000, @rand_addr=' \x01\x00', 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}, {0x4f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x4cc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4c3408eada12e4004cee8209725dd6eb943a7ee49a65a32db277047d6cdb80ec"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1000, @private1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}, {0x230, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x2}, 0x6e}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x1214}, 0x1, 0x0, 0x0, 0x200480d0}, 0x8000) 1.482569146s ago: executing program 2 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x12}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf5c}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 1.189351842s ago: executing program 4 (id=1023): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl(r0, 0x9, &(0x7f0000000100)="6d75b33c14ca362bc431fb3efb68a6f73f9c113671c01265a5877787dafbeb3578a332247f2b3155f60b4e15b9371a42b26011a1a7d6691189f90cc600b2643974c0fba56dc3c0e0f43b93475f8fad") close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 1.062011171s ago: executing program 2 (id=1024): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=0x0], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff6f79deefc8bd95368e66016f0800010000000000020000004500003c52663e8b17e4fd00000000008490783fffffffac14c9f1fbfd536c24dc5446561b2e14aa00000000663bd5832af581598862d3555a84fcc242644599bad0f3d8dd26fc6d3774ff7d91cb401e8ee836f8d571f7607ece9a89d4030937e7d328a244e3a663c6e1aa2643f3a1b95ee3dd7c7048542e605e3769a017e26142c786", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014050a00000000000000000008d58838068b9100"], 0x4a) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24008000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0080000b0601020000000000000000020000050900020073797a3100000000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x404840c}, 0x40040) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010021bd7000000000000a000000000200090011000008000600ffff7fff"], 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000900)="f776ff141690ba77160c874176ba8fe68ce80ab4d20afbe3e1862758f27212986ca1f75e4ffb49fbbbf57c625954e654526bf05ae0dd24555f214819fc2912f0c1341fc30b8db9a9e1982fbdce2573628987657af5", 0x55}, {&(0x7f0000000980)="0e44abfba6feed0a81c02e36b8ecd398df42bd3d68986f3482bac75f828954b0b0f7988055313ba5706ec867cf74d668e1d38bf073a97888a8521190d675a3b4a9e1372eaad0e3047278da4fe760f9df2f8c66083741c9ed009de8888c3ee7981c95d2365fcfa7ced5fd79d851c6b4adae316f6b8b583aee5a29b3c59076a139ec06a9605f476371190f68825817ce835469fb52f84eb5a2807b9fe2f3", 0x9d}, {&(0x7f0000000640)="9494f645ac3e882e9ea5c593ae470aee7a5d2bd40f94e4a456d53700ad94031c9396bbc6dd0cf2b0056df3fffc62bd4a20e6c27e86e9c828009f9f", 0x3b}, {&(0x7f0000000ac0)="b19ece7b64f7f06b7a643e4a96c990a27226852b85a9c604baa419719f9413e126d19dd3ada315fc67c450ce4f2e1ec1bb595b3771c92c085d97634e519ef31da49a6cba0b435941bbc0ae60042adc833e72db33bcec1a480f901ff983f9581eeabf9cd3788d014861610dda40615fb59e4304dcc617", 0x76}], 0x4, &(0x7f0000000b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x48}, 0x14) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e39de000008280b372219d205e81f4a7f71c1926e50eefd7e0054a863f3d5cfe6cb5db5bb9fa697b4fe035bbb095873048", 0x3d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4040004) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000029c0)="a2d557", 0x3}], 0x1, 0x0, 0x0, 0x20004005}, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{&(0x7f0000000240)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f00000001c0)=""/62, 0x3e}], 0x2, 0x0, 0x2e}, 0x4}], 0x1, 0x40000040, &(0x7f0000000700)) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 1.001774397s ago: executing program 2 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 970.547252ms ago: executing program 0 (id=1026): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000120001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30", @ANYBLOB], 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x180}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25037c00000400c280180009801400ff80100046800400008008000800", @ANYRES32=r1, @ANYBLOB="040001"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=0x0], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 795.849766ms ago: executing program 0 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x4c, r1, 0x1, 0x0, 0x2000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 602.399536ms ago: executing program 0 (id=1028): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="b5648ccf1204a137b14cab9800080800000a0001000000000000000000140035006d616773656338ee4700000000000000000000182f3ee9307bb137b36d"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff6f79deefc8bd95368e66016f0800010000000000020000004500003c52663e8b17e4fd00000000008490783fffffffac14c9f1fbfd536c24dc5446561b2e14aa00000000663bd5832af581598862d3555a84fcc242644599bad0f3d8dd26fc6d3774ff7d91cb401e8ee836f8d571f7607ece9a89d4030937e7d328a244e3a663c6e1aa2643f3a1b95ee3dd7c7048542e605e3769a017e26142c786", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="aa00070090780014050a00000000000000000008d58838068b910000"], 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x69}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 526.400781ms ago: executing program 3 (id=1029): unshare(0x22020600) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="7fa32cf4cdad134766ad2d57b3a5364c1ea84ba36c9394c36f6223e3598d3a3bcaa2caeb5e09e78c990250a7ecf69d1d3eb6d81359ec0d944a4dd63e6521ddf50bcd59f43a65ee42b220d575"], 0x1c}, 0x1, 0x0, 0x0, 0x44844}, 0x40000) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$TUNGETVNETLE(r4, 0x40047452, &(0x7f0000000580)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r4, 0xffffe000) ppoll(&(0x7f0000000480)=[{r8, 0x53a0}, {0xffffffffffffffff, 0x88}], 0x2, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0, 0x0) 489.922495ms ago: executing program 0 (id=1030): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 174.3923ms ago: executing program 0 (id=1031): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="0038037f150000000001006661746164760000040002800a000100bbbbbbbbbb0000000000000000"], 0x40}}, 0x20000840) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000c04000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff87) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="7b86c480fa533102042ba2a932f8a3a027cebd39491b", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000140004800500030000000000050003000700000008000100010000000800020002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e25, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x2, 0x1, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYBLOB, @ANYRES64=r2], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c001b000400002dd0e0d7f01d", @ANYRESOCT=r4, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) 52.418407ms ago: executing program 2 (id=1032): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0xd4, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)={0x1214, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x11f8, 0x8, 0x0, 0x1, [{0x82c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x388, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x90000000}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "136fec5e383230290e4c70522b1dd3d0fc49a90f8853d156865fcd7a62a7ed9f"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ea057dd7c010bac1f7158c5a9dc67c1c52db02becfc0eb257372a3ef29ae64a2"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @empty, 0x200}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1000, @rand_addr=' \x01\x00', 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}]}, {0x4f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x4cc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4c3408eada12e4004cee8209725dd6eb943a7ee49a65a32db277047d6cdb80ec"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1000, @private1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}, {0x230, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x80000000, @private2={0xfc, 0x2, '\x00', 0x2}, 0x6e}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x1214}, 0x1, 0x0, 0x0, 0x200480d0}, 0x8000) 0s ago: executing program 4 (id=1033): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) (fail_nth: 8) kernel console output (not intermixed with test programs): tainted syzkaller #0 PREEMPT(full) [ 95.497874][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.497884][ T6416] Call Trace: [ 95.497891][ T6416] [ 95.497899][ T6416] dump_stack_lvl+0xe8/0x150 [ 95.497936][ T6416] should_fail_ex+0x414/0x560 [ 95.497968][ T6416] _copy_to_user+0x31/0xb0 [ 95.497992][ T6416] simple_read_from_buffer+0xe1/0x170 [ 95.498022][ T6416] proc_fail_nth_read+0x1b3/0x220 [ 95.498045][ T6416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.498066][ T6416] ? rw_verify_area+0x2a6/0x4d0 [ 95.498083][ T6416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.498104][ T6416] vfs_read+0x200/0xa30 [ 95.498121][ T6416] ? fdget_pos+0x247/0x320 [ 95.498147][ T6416] ? __pfx___mutex_lock+0x10/0x10 [ 95.498168][ T6416] ? __pfx_vfs_read+0x10/0x10 [ 95.498187][ T6416] ? __fget_files+0x2a/0x420 [ 95.498212][ T6416] ? __fget_files+0x3a0/0x420 [ 95.498234][ T6416] ? __fget_files+0x2a/0x420 [ 95.498265][ T6416] ksys_read+0x145/0x250 [ 95.498285][ T6416] ? __pfx_ksys_read+0x10/0x10 [ 95.498313][ T6416] do_syscall_64+0xec/0xf80 [ 95.498332][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.498349][ T6416] ? trace_irq_disable+0x37/0x100 [ 95.498372][ T6416] ? clear_bhb_loop+0x60/0xb0 [ 95.498393][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.498411][ T6416] RIP: 0033:0x7f555dd8e15c [ 95.498427][ T6416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.498441][ T6416] RSP: 002b:00007f555ebc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.498461][ T6416] RAX: ffffffffffffffda RBX: 00007f555dfe5fa0 RCX: 00007f555dd8e15c [ 95.498473][ T6416] RDX: 000000000000000f RSI: 00007f555ebc20a0 RDI: 0000000000000004 [ 95.498482][ T6416] RBP: 00007f555ebc2090 R08: 0000000000000000 R09: 0000000000000000 [ 95.498493][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.498503][ T6416] R13: 00007f555dfe6038 R14: 00007f555dfe5fa0 R15: 00007fff586e8f98 [ 95.498533][ T6416] [ 95.501148][ T6387] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.648299][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 95.742622][ T6395] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.800977][ T6415] bond1: (slave gretap1): making interface the new active one [ 95.813759][ T6415] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 95.840073][ T6395] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.129162][ T6411] bond1 (unregistering): (slave gretap1): Releasing active interface [ 96.143402][ T6411] bond1 (unregistering): Released all slaves [ 96.312957][ T6429] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.148'. [ 96.332062][ T3519] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.342409][ T6429] FAULT_INJECTION: forcing a failure. [ 96.342409][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 96.381031][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 96.381055][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.381067][ T6429] Call Trace: [ 96.381074][ T6429] [ 96.381081][ T6429] dump_stack_lvl+0xe8/0x150 [ 96.381110][ T6429] should_fail_ex+0x414/0x560 [ 96.381144][ T6429] should_failslab+0xa8/0x100 [ 96.381169][ T6429] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 96.381196][ T6429] ? kmem_cache_alloc_noprof+0x3ce/0x710 [ 96.381222][ T6429] ? __alloc_skb+0x27e/0x3a0 [ 96.381240][ T6429] ? ovs_flow_alloc+0x103/0x1f0 [ 96.381261][ T6429] ? ovs_flow_alloc+0x24/0x1f0 [ 96.381285][ T6429] ovs_flow_alloc+0x103/0x1f0 [ 96.381311][ T6429] ovs_packet_cmd_execute+0x568/0xe70 [ 96.381347][ T6429] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 96.381378][ T6429] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 96.381403][ T6429] genl_family_rcv_msg_doit+0x215/0x300 [ 96.381428][ T6429] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 96.381459][ T6429] ? bpf_lsm_capable+0x9/0x20 [ 96.381480][ T6429] ? security_capable+0x7e/0x2e0 [ 96.381508][ T6429] genl_rcv_msg+0x60e/0x790 [ 96.381532][ T6429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.381558][ T6429] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 96.381585][ T6429] ? __asan_memcpy+0x40/0x70 [ 96.381600][ T6429] ? __pfx_ref_tracker_free+0x10/0x10 [ 96.381625][ T6429] netlink_rcv_skb+0x208/0x470 [ 96.381650][ T6429] ? __pfx_genl_rcv_msg+0x10/0x10 [ 96.381669][ T6429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.381686][ T6429] ? genl_rcv+0x19/0x40 [ 96.381725][ T6429] ? down_read+0x274/0x2e0 [ 96.381744][ T6429] ? genl_rcv+0xd/0x40 [ 96.381770][ T6429] genl_rcv+0x28/0x40 [ 96.381794][ T6429] netlink_unicast+0x82f/0x9e0 [ 96.381822][ T6429] ? __pfx_netlink_unicast+0x10/0x10 [ 96.381844][ T6429] ? netlink_sendmsg+0x642/0xb30 [ 96.381866][ T6429] ? skb_put+0x11b/0x210 [ 96.381889][ T6429] netlink_sendmsg+0x805/0xb30 [ 96.381921][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.381948][ T6429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 96.381974][ T6429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.381991][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.382014][ T6429] __sock_sendmsg+0x21c/0x270 [ 96.382047][ T6429] ____sys_sendmsg+0x505/0x820 [ 96.382076][ T6429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.382106][ T6429] ? import_iovec+0x74/0xa0 [ 96.382131][ T6429] ___sys_sendmsg+0x21f/0x2a0 [ 96.382155][ T6429] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.382211][ T6429] ? __fget_files+0x2a/0x420 [ 96.382235][ T6429] ? __fget_files+0x3a0/0x420 [ 96.382269][ T6429] __x64_sys_sendmsg+0x19b/0x260 [ 96.382294][ T6429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.382327][ T6429] ? __pfx_ksys_write+0x10/0x10 [ 96.382355][ T6429] do_syscall_64+0xec/0xf80 [ 96.382375][ T6429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.382393][ T6429] ? trace_irq_disable+0x37/0x100 [ 96.382417][ T6429] ? clear_bhb_loop+0x60/0xb0 [ 96.382440][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.382458][ T6429] RIP: 0033:0x7f4c9858f749 [ 96.382475][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.382491][ T6429] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.382511][ T6429] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 96.382525][ T6429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 96.382537][ T6429] RBP: 00007f4c99443090 R08: 0000000000000000 R09: 0000000000000000 [ 96.382556][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.382566][ T6429] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 96.382598][ T6429] [ 96.386217][ T1027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727346][ T6441] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 96.790558][ T3519] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.852004][ T3519] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.865018][ T6441] netlink: 224 bytes leftover after parsing attributes in process `syz.1.152'. [ 97.138834][ T6452] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 97.224874][ T6455] ip6t_rpfilter: unknown options [ 97.467357][ T1027] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.512023][ T6465] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.158'. [ 97.525257][ T1027] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.559498][ T6465] netlink: Conntrack attr has 4 unknown bytes [ 97.590560][ T3928] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.659692][ T50] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.809835][ T6479] xfrm0 speed is unknown, defaulting to 1000 [ 98.075061][ T6497] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.576025][ T6497] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.788984][ T6497] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.885950][ T6526] tipc: Started in network mode [ 98.891940][ T6526] tipc: Node identity 16565e437e44, cluster identity 4711 [ 98.904494][ T6526] tipc: Enabled bearer , priority 0 [ 98.921354][ T6524] syzkaller0: entered promiscuous mode [ 98.926818][ T6524] syzkaller0: entered allmulticast mode [ 98.943002][ T6497] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.048891][ T6524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.175'. [ 99.078213][ T6524] tipc: Resetting bearer [ 99.232254][ T6540] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535) [ 99.810744][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.188'. [ 99.862288][ T5837] block nbd0: Receive control failed (result -32) [ 99.886471][ T6562] netlink: 72 bytes leftover after parsing attributes in process `syz.3.188'. [ 99.919800][ T5941] tipc: Node number set to 1746034243 [ 100.060274][ T6578] tipc: Enabling of bearer rejected, already enabled [ 100.229954][ T6590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.192'. [ 100.492174][ T6605] netlink: 68 bytes leftover after parsing attributes in process `syz.3.197'. [ 100.511923][ T6605] FAULT_INJECTION: forcing a failure. [ 100.511923][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 100.526577][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.3.197 Not tainted syzkaller #0 PREEMPT(full) [ 100.526600][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.526610][ T6605] Call Trace: [ 100.526617][ T6605] [ 100.526624][ T6605] dump_stack_lvl+0xe8/0x150 [ 100.526652][ T6605] should_fail_ex+0x414/0x560 [ 100.526685][ T6605] should_failslab+0xa8/0x100 [ 100.526710][ T6605] kmem_cache_alloc_noprof+0x88/0x710 [ 100.526738][ T6605] ? xfrm_state_alloc+0x24/0x2f0 [ 100.526766][ T6605] xfrm_state_alloc+0x24/0x2f0 [ 100.526789][ T6605] __find_acq_core+0x8a7/0x1c00 [ 100.526818][ T6605] ? xfrm_find_acq+0x4b/0xa0 [ 100.526843][ T6605] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 100.526874][ T6605] xfrm_find_acq+0x78/0xa0 [ 100.526911][ T6605] xfrm_alloc_userspi+0x6ab/0xcc0 [ 100.526946][ T6605] ? apparmor_capable+0x137/0x1a0 [ 100.526974][ T6605] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 100.526997][ T6605] ? __nla_parse+0x40/0x60 [ 100.527020][ T6605] xfrm_user_rcv_msg+0x7a3/0xab0 [ 100.527053][ T6605] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 100.527109][ T6605] ? __pfx___mutex_trylock_common+0x10/0x10 [ 100.527137][ T6605] ? rcu_is_watching+0x15/0xb0 [ 100.527181][ T6605] ? trace_contention_end+0x39/0x100 [ 100.527206][ T6605] ? __mutex_lock+0x335/0x1350 [ 100.527234][ T6605] netlink_rcv_skb+0x208/0x470 [ 100.527260][ T6605] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 100.527290][ T6605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.527327][ T6605] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.527349][ T6605] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.527379][ T6605] xfrm_netlink_rcv+0x79/0x90 [ 100.527407][ T6605] netlink_unicast+0x82f/0x9e0 [ 100.527437][ T6605] ? __pfx_netlink_unicast+0x10/0x10 [ 100.527455][ T6605] ? __alloc_skb+0x198/0x3a0 [ 100.527475][ T6605] ? netlink_sendmsg+0x642/0xb30 [ 100.527496][ T6605] ? skb_put+0x11b/0x210 [ 100.527521][ T6605] netlink_sendmsg+0x805/0xb30 [ 100.527555][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.527582][ T6605] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.527606][ T6605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.527622][ T6605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.527645][ T6605] __sock_sendmsg+0x21c/0x270 [ 100.527674][ T6605] ____sys_sendmsg+0x505/0x820 [ 100.527699][ T6605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.527729][ T6605] ? import_iovec+0x74/0xa0 [ 100.527754][ T6605] ___sys_sendmsg+0x21f/0x2a0 [ 100.527779][ T6605] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.527833][ T6605] ? __fget_files+0x2a/0x420 [ 100.527855][ T6605] ? __fget_files+0x3a0/0x420 [ 100.527889][ T6605] __x64_sys_sendmsg+0x19b/0x260 [ 100.527913][ T6605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.527944][ T6605] ? __pfx_ksys_write+0x10/0x10 [ 100.527973][ T6605] do_syscall_64+0xec/0xf80 [ 100.527992][ T6605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.528009][ T6605] ? trace_irq_disable+0x37/0x100 [ 100.528036][ T6605] ? clear_bhb_loop+0x60/0xb0 [ 100.528056][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.528073][ T6605] RIP: 0033:0x7f4a1078f749 [ 100.528089][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.528103][ T6605] RSP: 002b:00007f4a11664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.528123][ T6605] RAX: ffffffffffffffda RBX: 00007f4a109e5fa0 RCX: 00007f4a1078f749 [ 100.528136][ T6605] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003 [ 100.528156][ T6605] RBP: 00007f4a11664090 R08: 0000000000000000 R09: 0000000000000000 [ 100.528166][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.528176][ T6605] R13: 00007f4a109e6038 R14: 00007f4a109e5fa0 R15: 00007fff84d05068 [ 100.528204][ T6605] [ 100.893037][ T6610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.196'. [ 100.910838][ T6610] unsupported nla_type 540 [ 100.977659][ T6613] team_slave_0: entered promiscuous mode [ 100.983568][ T6613] team_slave_1: entered promiscuous mode [ 100.989341][ T6613] bridge1: entered promiscuous mode [ 100.994785][ T6613] bridge2: entered promiscuous mode [ 101.010393][ T6613] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.352868][ T6629] netlink: 576 bytes leftover after parsing attributes in process `syz.3.206'. [ 101.507060][ T6635] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 101.520949][ T6635] macsec1: entered allmulticast mode [ 101.526335][ T6635] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 101.540530][ T6635] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 101.549745][ T6635] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 101.651988][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.710328][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.800285][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.880144][ T3928] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.518366][ T6670] netlink: 'syz.2.225': attribute type 10 has an invalid length. [ 102.730896][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'. [ 102.783356][ T6673] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.916951][ T6683] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 102.935102][ T6673] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.174517][ T6673] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.261009][ T6699] gretap1: entered promiscuous mode [ 103.312748][ T6673] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.723175][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 103.803072][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.810808][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.885505][ T6720] netlink: 48 bytes leftover after parsing attributes in process `syz.3.244'. [ 103.986491][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.000136][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.087357][ T6714] bridge_slave_1: left allmulticast mode [ 104.094039][ T6714] bridge_slave_1: left promiscuous mode [ 104.100951][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.122417][ T6714] bridge_slave_0: left allmulticast mode [ 104.128609][ T6714] bridge_slave_0: left promiscuous mode [ 104.134365][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.262741][ T6723] vlan2: entered allmulticast mode [ 104.268711][ T6723] bridge0: port 3(vlan2) entered blocking state [ 104.284380][ T6723] bridge0: port 3(vlan2) entered disabled state [ 104.314370][ T6723] vlan2: entered promiscuous mode [ 104.322696][ T5942] xfrm0 speed is unknown, defaulting to 1000 [ 104.322744][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.329820][ T5942] syz1: Port: 1 Link DOWN [ 104.390812][ T5876] xfrm0 speed is unknown, defaulting to 1000 [ 104.443250][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.482796][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.492019][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.507776][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.549256][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.561652][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.573540][ T6738] tipc: Started in network mode [ 104.589185][ T6738] tipc: Node identity 626a3940a4fe, cluster identity 4711 [ 104.608298][ T6738] tipc: Enabled bearer , priority 0 [ 104.629172][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.646890][ T6738] tipc: Resetting bearer [ 104.942367][ T6757] tipc: Started in network mode [ 104.947440][ T6757] tipc: Node identity , cluster identity 4711 [ 104.953730][ T6757] tipc: Failed to set node id, please configure manually [ 105.006197][ T6757] tipc: Enabling of bearer rejected, failed to enable media [ 105.365444][ T6776] vlan2: entered allmulticast mode [ 105.371354][ T6776] dummy0: entered allmulticast mode [ 105.429102][ T6779] xfrm0 speed is unknown, defaulting to 1000 [ 105.504791][ T6780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.651837][ T5899] tipc: Node number set to 3331602752 [ 105.794756][ T6786] xfrm0 speed is unknown, defaulting to 1000 [ 106.375445][ T6801] xfrm0 speed is unknown, defaulting to 1000 [ 106.670336][ T6816] netlink: 'syz.0.276': attribute type 6 has an invalid length. [ 106.702216][ T6815] netlink: 'syz.0.276': attribute type 5 has an invalid length. [ 106.927288][ T6807] xfrm0 speed is unknown, defaulting to 1000 [ 107.547768][ T6818] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 108.028749][ T6857] bond0: option min_links: invalid value (18446744071830523904) [ 108.037273][ T6857] bond0: option min_links: allowed values 0 - 2147483647 [ 108.350050][ T6868] syzkaller0: entered promiscuous mode [ 108.355565][ T6868] syzkaller0: entered allmulticast mode [ 108.768162][ T5837] Bluetooth: hci3: command 0x0401 tx timeout [ 109.335354][ T6914] FAULT_INJECTION: forcing a failure. [ 109.335354][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 109.373917][ T6914] CPU: 0 UID: 0 PID: 6914 Comm: syz.1.302 Not tainted syzkaller #0 PREEMPT(full) [ 109.373944][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.373956][ T6914] Call Trace: [ 109.373963][ T6914] [ 109.373972][ T6914] dump_stack_lvl+0xe8/0x150 [ 109.374002][ T6914] should_fail_ex+0x414/0x560 [ 109.374037][ T6914] should_failslab+0xa8/0x100 [ 109.374063][ T6914] __kmalloc_cache_noprof+0x84/0x700 [ 109.374081][ T6914] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 109.374109][ T6914] ? sctp_add_bind_addr+0x8c/0x370 [ 109.374140][ T6914] sctp_add_bind_addr+0x8c/0x370 [ 109.374171][ T6914] sctp_copy_local_addr_list+0x30b/0x4e0 [ 109.374201][ T6914] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 109.374227][ T6914] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 109.374256][ T6914] ? sctp_v6_is_any+0x64/0x80 [ 109.374283][ T6914] ? sctp_copy_one_addr+0x93/0x360 [ 109.374312][ T6914] sctp_bind_addr_copy+0xb3/0x3c0 [ 109.374339][ T6914] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 109.374366][ T6914] sctp_connect_new_asoc+0x2e0/0x690 [ 109.374389][ T6914] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 109.374410][ T6914] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 109.374429][ T6914] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 109.374447][ T6914] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 109.374468][ T6914] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 109.374488][ T6914] ? security_sctp_bind_connect+0x7e/0x2e0 [ 109.374511][ T6914] sctp_sendmsg+0x155c/0x2840 [ 109.374549][ T6914] ? __pfx_sctp_sendmsg+0x10/0x10 [ 109.374565][ T6914] ? aa_sk_perm+0x15f/0x920 [ 109.374591][ T6914] ? aa_sk_perm+0x7ee/0x920 [ 109.374619][ T6914] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.374645][ T6914] ? sock_rps_record_flow+0x19/0x410 [ 109.374674][ T6914] ? inet_sendmsg+0x2f4/0x370 [ 109.374697][ T6914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.374717][ T6914] __sock_sendmsg+0x19c/0x270 [ 109.374748][ T6914] __sys_sendto+0x3bd/0x520 [ 109.374772][ T6914] ? __pfx___sys_sendto+0x10/0x10 [ 109.374789][ T6914] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 109.374824][ T6914] ? __fget_files+0x3a0/0x420 [ 109.374860][ T6914] ? ksys_write+0x22a/0x250 [ 109.374881][ T6914] ? __pfx_ksys_write+0x10/0x10 [ 109.374905][ T6914] __x64_sys_sendto+0xde/0x100 [ 109.374930][ T6914] do_syscall_64+0xec/0xf80 [ 109.374949][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.374967][ T6914] ? trace_irq_disable+0x37/0x100 [ 109.374992][ T6914] ? clear_bhb_loop+0x60/0xb0 [ 109.375015][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.375034][ T6914] RIP: 0033:0x7f4c9858f749 [ 109.375051][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.375067][ T6914] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.375087][ T6914] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 109.375102][ T6914] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 109.375114][ T6914] RBP: 00007f4c99443090 R08: 00002000000004c0 R09: 000000000000001c [ 109.375127][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.375139][ T6914] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 109.375172][ T6914] [ 109.906612][ T6932] netlink: 'syz.0.307': attribute type 11 has an invalid length. [ 109.952479][ T6932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.307'. [ 110.008470][ T6930] netlink: 'syz.0.307': attribute type 11 has an invalid length. [ 110.039528][ T6930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.307'. [ 110.299511][ T6957] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.318'. [ 110.671269][ T6968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.712255][ T6968] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.760259][ T6968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.172444][ T6986] ipt_REJECT: ECHOREPLY no longer supported. [ 111.186895][ T6987] netlink: 196 bytes leftover after parsing attributes in process `syz.0.326'. [ 111.242384][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 111.510439][ T6999] xfrm0 speed is unknown, defaulting to 1000 [ 112.053748][ T7002] xfrm0 speed is unknown, defaulting to 1000 [ 112.512061][ T7010] xfrm0 speed is unknown, defaulting to 1000 [ 113.640523][ T7053] netlink: 108 bytes leftover after parsing attributes in process `syz.1.340'. [ 113.971647][ T7061] netlink: 'syz.1.341': attribute type 39 has an invalid length. [ 114.108805][ T7061] hsr_slave_1 (unregistering): left promiscuous mode [ 114.881261][ T7097] bond1: (slave bond_slave_1): Device is not our slave [ 114.888555][ T7097] bond1: option active_slave: invalid value (bond_slave_1) [ 114.900311][ T7097] bond1 (unregistering): Released all slaves [ 115.283810][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 115.641551][ T7125] FAULT_INJECTION: forcing a failure. [ 115.641551][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 115.690781][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.2.363 Not tainted syzkaller #0 PREEMPT(full) [ 115.690811][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.690823][ T7125] Call Trace: [ 115.690831][ T7125] [ 115.690838][ T7125] dump_stack_lvl+0xe8/0x150 [ 115.690867][ T7125] should_fail_ex+0x414/0x560 [ 115.690902][ T7125] should_failslab+0xa8/0x100 [ 115.690926][ T7125] __kmalloc_cache_noprof+0x84/0x700 [ 115.690947][ T7125] ? hash_mac_create+0x2d1/0xee0 [ 115.690975][ T7125] hash_mac_create+0x2d1/0xee0 [ 115.691002][ T7125] ? __nla_parse+0x40/0x60 [ 115.691022][ T7125] ? __pfx_hash_mac_create+0x10/0x10 [ 115.691046][ T7125] ip_set_create+0xa9a/0x19c0 [ 115.691068][ T7125] ? ip_set_create+0x49f/0x19c0 [ 115.691100][ T7125] ? __pfx_ip_set_create+0x10/0x10 [ 115.691157][ T7125] nfnetlink_rcv_msg+0xb4d/0x1130 [ 115.691178][ T7125] ? unwind_get_return_address+0x4d/0x90 [ 115.691200][ T7125] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 115.691228][ T7125] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 115.691269][ T7125] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.691338][ T7125] netlink_rcv_skb+0x208/0x470 [ 115.691364][ T7125] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.691387][ T7125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.691422][ T7125] ? bpf_lsm_capable+0x9/0x20 [ 115.691444][ T7125] ? security_capable+0x7e/0x2e0 [ 115.691474][ T7125] nfnetlink_rcv+0x282/0x2590 [ 115.691507][ T7125] ? lockdep_hardirqs_on+0x7b/0x110 [ 115.691526][ T7125] ? __dev_queue_xmit+0x289/0x31c0 [ 115.691550][ T7125] ? __local_bh_enable_ip+0xd0/0x130 [ 115.691568][ T7125] ? __dev_queue_xmit+0x289/0x31c0 [ 115.691592][ T7125] ? __dev_queue_xmit+0x19cb/0x31c0 [ 115.691615][ T7125] ? ___sys_sendmsg+0x21f/0x2a0 [ 115.691644][ T7125] ? __dev_queue_xmit+0x289/0x31c0 [ 115.691674][ T7125] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.691702][ T7125] ? __pfx___dev_queue_xmit+0x10/0x10 [ 115.691745][ T7125] ? ref_tracker_free+0x63a/0x7d0 [ 115.691765][ T7125] ? __asan_memcpy+0x40/0x70 [ 115.691781][ T7125] ? __pfx_ref_tracker_free+0x10/0x10 [ 115.691817][ T7125] ? skb_clone+0x246/0x3a0 [ 115.691844][ T7125] ? __netlink_deliver_tap+0x807/0x850 [ 115.691868][ T7125] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.691898][ T7125] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.691930][ T7125] netlink_unicast+0x82f/0x9e0 [ 115.691960][ T7125] ? __pfx_netlink_unicast+0x10/0x10 [ 115.691979][ T7125] ? __alloc_skb+0x198/0x3a0 [ 115.691999][ T7125] ? netlink_sendmsg+0x642/0xb30 [ 115.692022][ T7125] ? skb_put+0x11b/0x210 [ 115.692046][ T7125] netlink_sendmsg+0x805/0xb30 [ 115.692080][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.692107][ T7125] ? aa_sock_msg_perm+0xf1/0x1b0 [ 115.692132][ T7125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.692150][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.692175][ T7125] __sock_sendmsg+0x21c/0x270 [ 115.692205][ T7125] ____sys_sendmsg+0x505/0x820 [ 115.692234][ T7125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.692266][ T7125] ? import_iovec+0x74/0xa0 [ 115.692293][ T7125] ___sys_sendmsg+0x21f/0x2a0 [ 115.692318][ T7125] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.692382][ T7125] ? __fget_files+0x2a/0x420 [ 115.692405][ T7125] ? __fget_files+0x3a0/0x420 [ 115.692439][ T7125] __x64_sys_sendmsg+0x19b/0x260 [ 115.692465][ T7125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.692498][ T7125] ? __pfx_ksys_write+0x10/0x10 [ 115.692528][ T7125] do_syscall_64+0xec/0xf80 [ 115.692548][ T7125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.692566][ T7125] ? trace_irq_disable+0x37/0x100 [ 115.692591][ T7125] ? clear_bhb_loop+0x60/0xb0 [ 115.692614][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.692632][ T7125] RIP: 0033:0x7f4074d8f749 [ 115.692649][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.692665][ T7125] RSP: 002b:00007f4075b42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.692686][ T7125] RAX: ffffffffffffffda RBX: 00007f4074fe5fa0 RCX: 00007f4074d8f749 [ 115.692701][ T7125] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 115.692713][ T7125] RBP: 00007f4075b42090 R08: 0000000000000000 R09: 0000000000000000 [ 115.692731][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.692742][ T7125] R13: 00007f4074fe6038 R14: 00007f4074fe5fa0 R15: 00007ffc1fa27e28 [ 115.692774][ T7125] [ 116.399841][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 116.446830][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 116.456284][ T5876] IPVS: starting estimator thread 0... [ 116.549010][ T7146] IPVS: using max 32 ests per chain, 76800 per kthread [ 116.558230][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'. [ 116.823359][ T7155] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.961010][ T7168] syz_tun: entered allmulticast mode [ 116.967235][ T7171] IPVS: length: 83 != 24 [ 116.974353][ T7155] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.997543][ T7167] syz_tun: left allmulticast mode [ 117.028803][ T7155] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.065489][ T7159] xfrm0 speed is unknown, defaulting to 1000 [ 117.114593][ T7155] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.297131][ T1080] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.380286][ T1080] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.406705][ T7186] IPv6: addrconf: prefix option has invalid lifetime [ 117.426657][ T1080] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.485099][ T1080] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.603049][ T7196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.855707][ T7200] tipc: Started in network mode [ 117.878777][ T7200] tipc: Node identity 92afef6046ba, cluster identity 4711 [ 117.886086][ T7200] tipc: Enabled bearer , priority 0 [ 117.946595][ T7209] syzkaller0: entered promiscuous mode [ 117.963650][ T7209] syzkaller0: entered allmulticast mode [ 118.066643][ T7206] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.135296][ T7200] tipc: Resetting bearer [ 118.189010][ T7206] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.324970][ T7206] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.431038][ T7206] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.531508][ T7231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.400'. [ 118.695542][ T7233] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.765374][ T7233] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.868007][ T7233] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.961344][ T7233] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.981163][ T5942] tipc: Node number set to 3558207328 [ 119.083636][ T3519] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.110656][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.134646][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.159784][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.242242][ T7255] FAULT_INJECTION: forcing a failure. [ 119.242242][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 119.255134][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.1.410 Not tainted syzkaller #0 PREEMPT(full) [ 119.255159][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.255170][ T7255] Call Trace: [ 119.255177][ T7255] [ 119.255185][ T7255] dump_stack_lvl+0xe8/0x150 [ 119.255214][ T7255] should_fail_ex+0x414/0x560 [ 119.255247][ T7255] should_failslab+0xa8/0x100 [ 119.255272][ T7255] kmem_cache_alloc_noprof+0x88/0x710 [ 119.255301][ T7255] ? skb_clone+0x212/0x3a0 [ 119.255329][ T7255] skb_clone+0x212/0x3a0 [ 119.255356][ T7255] maybe_deliver+0x98/0x160 [ 119.255380][ T7255] br_flood+0x31a/0x6a0 [ 119.255409][ T7255] br_dev_xmit+0xc58/0x1830 [ 119.255434][ T7255] ? __pfx_skb_network_protocol+0x10/0x10 [ 119.255459][ T7255] ? br_dev_xmit+0x184/0x1830 [ 119.255492][ T7255] ? __pfx_br_dev_xmit+0x10/0x10 [ 119.255512][ T7255] ? netif_skb_features+0xa69/0x1540 [ 119.255550][ T7255] ? __pfx_netif_skb_features+0x10/0x10 [ 119.255581][ T7255] ? stack_depot_save_flags+0x3f3/0x810 [ 119.255621][ T7255] dev_hard_start_xmit+0x2cd/0x800 [ 119.255663][ T7255] __dev_queue_xmit+0x149d/0x31c0 [ 119.255698][ T7255] ? __dev_queue_xmit+0x289/0x31c0 [ 119.255739][ T7255] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.255769][ T7255] ? rcu_is_watching+0x15/0xb0 [ 119.255792][ T7255] ? trace_kmalloc+0x1f/0xb0 [ 119.255806][ T7255] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 119.255841][ T7255] ? pskb_expand_head+0xb44/0x1160 [ 119.255875][ T7255] __bpf_tx_skb+0x18e/0x260 [ 119.255904][ T7255] bpf_clone_redirect+0x313/0x4b0 [ 119.255934][ T7255] ? bpf_test_run+0x192/0x7d0 [ 119.255957][ T7255] bpf_prog_38e8e33895f1bcc4+0x5b/0x64 [ 119.255979][ T7255] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.256008][ T7255] ? arch_stack_walk+0xfc/0x150 [ 119.256040][ T7255] ? ktime_get+0x45/0x200 [ 119.256081][ T7255] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 119.256109][ T7255] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.256127][ T7255] ? ktime_get+0x45/0x200 [ 119.256150][ T7255] ? seqcount_lockdep_reader_access+0xea/0x100 [ 119.256177][ T7255] ? read_tsc+0x9/0x20 [ 119.256200][ T7255] ? ktime_get+0x1d2/0x200 [ 119.256235][ T7255] bpf_test_run+0x313/0x7d0 [ 119.256278][ T7255] ? __pfx_bpf_test_run+0x10/0x10 [ 119.256316][ T7255] ? __kasan_krealloc+0xeb/0x110 [ 119.256338][ T7255] ? eth_type_trans+0x35e/0x6d0 [ 119.256369][ T7255] ? convert___skb_to_skb+0x3d/0x5b0 [ 119.256394][ T7255] bpf_prog_test_run_skb+0xd67/0x1d50 [ 119.256430][ T7255] ? __fget_files+0x2a/0x420 [ 119.256452][ T7255] ? __fget_files+0x3a0/0x420 [ 119.256474][ T7255] ? __fget_files+0x2a/0x420 [ 119.256499][ T7255] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 119.256523][ T7255] bpf_prog_test_run+0x2c7/0x340 [ 119.256554][ T7255] __sys_bpf+0x562/0x860 [ 119.256588][ T7255] ? __pfx___sys_bpf+0x10/0x10 [ 119.256629][ T7255] ? ksys_write+0x22a/0x250 [ 119.256649][ T7255] ? __pfx_ksys_write+0x10/0x10 [ 119.256676][ T7255] __x64_sys_bpf+0x7c/0x90 [ 119.256701][ T7255] do_syscall_64+0xec/0xf80 [ 119.256719][ T7255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.256736][ T7255] ? trace_irq_disable+0x37/0x100 [ 119.256759][ T7255] ? clear_bhb_loop+0x60/0xb0 [ 119.256782][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.256800][ T7255] RIP: 0033:0x7f4c9858f749 [ 119.256818][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.256833][ T7255] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.256852][ T7255] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 119.256866][ T7255] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 119.256877][ T7255] RBP: 00007f4c99443090 R08: 0000000000000000 R09: 0000000000000000 [ 119.256889][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.256900][ T7255] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 119.256932][ T7255] [ 120.853482][ T7285] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.984758][ T7285] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.045713][ T7285] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.105747][ T7285] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.393873][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.424'. [ 121.513434][ T7298] xfrm0 speed is unknown, defaulting to 1000 [ 121.883344][ T3519] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.940142][ T3519] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.987464][ T3519] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.030823][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.154559][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 122.340357][ T7312] SET target dimension over the limit! [ 123.049925][ T7333] bond1 (unregistering): Released all slaves [ 123.486516][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.526446][ T7355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.433'. [ 123.537797][ T1165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.547814][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.433'. [ 123.567963][ T1165] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.599428][ T1165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.741377][ T7363] netlink: 416 bytes leftover after parsing attributes in process `syz.4.437'. [ 123.992755][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 124.017520][ T7374] netlink: 56 bytes leftover after parsing attributes in process `syz.1.440'. [ 124.038450][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 124.119699][ T7374] openvswitch: netlink: Flow actions attr not present in new flow. [ 124.205725][ T7383] tipc: Enabling of bearer rejected, already enabled [ 124.875624][ T7417] xfrm0 speed is unknown, defaulting to 1000 [ 125.293292][ T7422] netlink: 'syz.4.453': attribute type 27 has an invalid length. [ 125.419005][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 125.505950][ T7433] openvswitch: netlink: Key 18 has unexpected len 0 expected 2 [ 125.537771][ T7430] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 125.569345][ T7431] FAULT_INJECTION: forcing a failure. [ 125.569345][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 125.598264][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.0.457 Not tainted syzkaller #0 PREEMPT(full) [ 125.598291][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.598302][ T7431] Call Trace: [ 125.598310][ T7431] [ 125.598318][ T7431] dump_stack_lvl+0xe8/0x150 [ 125.598358][ T7431] should_fail_ex+0x414/0x560 [ 125.598389][ T7431] should_failslab+0xa8/0x100 [ 125.598413][ T7431] __kmalloc_noprof+0xdf/0x800 [ 125.598432][ T7431] ? dev_prep_valid_name+0x193/0x610 [ 125.598462][ T7431] dev_prep_valid_name+0x193/0x610 [ 125.598489][ T7431] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 125.598517][ T7431] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 125.598553][ T7431] ? __raw_spin_lock_init+0x45/0x100 [ 125.598582][ T7431] register_netdevice+0x533/0x1a70 [ 125.598612][ T7431] ? _get_random_bytes+0x1bd/0x210 [ 125.598632][ T7431] ? __pfx__get_random_bytes+0x10/0x10 [ 125.598660][ T7431] ? __pfx_register_netdevice+0x10/0x10 [ 125.598688][ T7431] ? __asan_memset+0x22/0x50 [ 125.598702][ T7431] ? dev_addr_mod+0x2ce/0x3d0 [ 125.598722][ T7431] ? netif_inherit_tso_max+0x1ec/0x340 [ 125.598783][ T7431] veth_newlink+0x437/0xa60 [ 125.598806][ T7431] ? __pfx_veth_newlink+0x10/0x10 [ 125.598822][ T7431] ? alloc_netdev_mqs+0xc89/0x11b0 [ 125.598847][ T7431] ? rtnl_create_link+0x31f/0xcf0 [ 125.598872][ T7431] ? rtnl_newlink_create+0x25c/0xb00 [ 125.598893][ T7431] ? rtnl_newlink+0x16e7/0x1c90 [ 125.598911][ T7431] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 125.598930][ T7431] ? netlink_unicast+0x82f/0x9e0 [ 125.598956][ T7431] ? netlink_sendmsg+0x805/0xb30 [ 125.598977][ T7431] ? __sock_sendmsg+0x21c/0x270 [ 125.599003][ T7431] ? __x64_sys_sendmsg+0x19b/0x260 [ 125.599024][ T7431] ? do_syscall_64+0xec/0xf80 [ 125.599102][ T7431] ? validate_linkmsg+0x765/0x950 [ 125.599139][ T7431] ? __pfx_veth_newlink+0x10/0x10 [ 125.599159][ T7431] rtnl_newlink_create+0x310/0xb00 [ 125.599196][ T7431] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 125.599223][ T7431] ? __pfx___mutex_lock+0x10/0x10 [ 125.599255][ T7431] ? ns_capable+0x8a/0xf0 [ 125.599277][ T7431] rtnl_newlink+0x16e7/0x1c90 [ 125.599314][ T7431] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.599332][ T7431] ? do_syscall_64+0xec/0xf80 [ 125.599348][ T7431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.599440][ T7431] ? __local_bh_enable_ip+0xd0/0x130 [ 125.599459][ T7431] ? lockdep_hardirqs_on+0x7b/0x110 [ 125.599477][ T7431] ? __dev_queue_xmit+0x289/0x31c0 [ 125.599499][ T7431] ? __local_bh_enable_ip+0xd0/0x130 [ 125.599516][ T7431] ? __dev_queue_xmit+0x289/0x31c0 [ 125.599547][ T7431] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 125.599582][ T7431] ? __pfx_rtnl_newlink+0x10/0x10 [ 125.599601][ T7431] rtnetlink_rcv_msg+0x7cf/0xb70 [ 125.599626][ T7431] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 125.599645][ T7431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.599663][ T7431] ? ref_tracker_free+0x63a/0x7d0 [ 125.599683][ T7431] ? __asan_memcpy+0x40/0x70 [ 125.599698][ T7431] ? __pfx_ref_tracker_free+0x10/0x10 [ 125.599727][ T7431] netlink_rcv_skb+0x208/0x470 [ 125.599752][ T7431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.599774][ T7431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.599810][ T7431] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.599841][ T7431] netlink_unicast+0x82f/0x9e0 [ 125.599871][ T7431] ? __pfx_netlink_unicast+0x10/0x10 [ 125.599890][ T7431] ? __alloc_skb+0x198/0x3a0 [ 125.599910][ T7431] ? netlink_sendmsg+0x642/0xb30 [ 125.599932][ T7431] ? skb_put+0x11b/0x210 [ 125.599962][ T7431] netlink_sendmsg+0x805/0xb30 [ 125.599996][ T7431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.600024][ T7431] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.600050][ T7431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.600068][ T7431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.600093][ T7431] __sock_sendmsg+0x21c/0x270 [ 125.600124][ T7431] ____sys_sendmsg+0x505/0x820 [ 125.600152][ T7431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.600184][ T7431] ? import_iovec+0x74/0xa0 [ 125.600210][ T7431] ___sys_sendmsg+0x21f/0x2a0 [ 125.600234][ T7431] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.600293][ T7431] ? __fget_files+0x2a/0x420 [ 125.600316][ T7431] ? __fget_files+0x3a0/0x420 [ 125.600350][ T7431] __x64_sys_sendmsg+0x19b/0x260 [ 125.600375][ T7431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.600408][ T7431] ? __pfx_ksys_write+0x10/0x10 [ 125.600439][ T7431] do_syscall_64+0xec/0xf80 [ 125.600458][ T7431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.600475][ T7431] ? trace_irq_disable+0x37/0x100 [ 125.600500][ T7431] ? clear_bhb_loop+0x60/0xb0 [ 125.600524][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.600542][ T7431] RIP: 0033:0x7f555dd8f749 [ 125.600565][ T7431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.600581][ T7431] RSP: 002b:00007f555ebc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.600606][ T7431] RAX: ffffffffffffffda RBX: 00007f555dfe5fa0 RCX: 00007f555dd8f749 [ 125.600621][ T7431] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 125.600633][ T7431] RBP: 00007f555ebc2090 R08: 0000000000000000 R09: 0000000000000000 [ 125.600644][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.600655][ T7431] R13: 00007f555dfe6038 R14: 00007f555dfe5fa0 R15: 00007fff586e8f98 [ 125.600686][ T7431] [ 126.538451][ T7446] xfrm0 speed is unknown, defaulting to 1000 [ 126.632129][ T7453] netlink: 'syz.1.464': attribute type 4 has an invalid length. [ 127.110873][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.470'. [ 127.154204][ T7465] xfrm0 speed is unknown, defaulting to 1000 [ 127.500424][ T7495] FAULT_INJECTION: forcing a failure. [ 127.500424][ T7495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.546923][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.1.475 Not tainted syzkaller #0 PREEMPT(full) [ 127.546950][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.546962][ T7495] Call Trace: [ 127.546969][ T7495] [ 127.546977][ T7495] dump_stack_lvl+0xe8/0x150 [ 127.547007][ T7495] should_fail_ex+0x414/0x560 [ 127.547041][ T7495] _copy_to_user+0x31/0xb0 [ 127.547066][ T7495] btf_new_fd+0x567/0xc90 [ 127.547084][ T7495] ? apparmor_capable+0x137/0x1a0 [ 127.547121][ T7495] ? __pfx_btf_new_fd+0x10/0x10 [ 127.547140][ T7495] ? bpf_token_put+0x143/0x160 [ 127.547161][ T7495] ? bpf_btf_load+0x126/0x190 [ 127.547191][ T7495] __sys_bpf+0x3ed/0x860 [ 127.547219][ T7495] ? __pfx___sys_bpf+0x10/0x10 [ 127.547259][ T7495] ? ksys_write+0x22a/0x250 [ 127.547281][ T7495] ? __pfx_ksys_write+0x10/0x10 [ 127.547306][ T7495] __x64_sys_bpf+0x7c/0x90 [ 127.547331][ T7495] do_syscall_64+0xec/0xf80 [ 127.547350][ T7495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.547368][ T7495] ? trace_irq_disable+0x37/0x100 [ 127.547392][ T7495] ? clear_bhb_loop+0x60/0xb0 [ 127.547415][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.547433][ T7495] RIP: 0033:0x7f4c9858f749 [ 127.547450][ T7495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.547466][ T7495] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.547487][ T7495] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 127.547501][ T7495] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 127.547513][ T7495] RBP: 00007f4c99443090 R08: 0000000000000000 R09: 0000000000000000 [ 127.547525][ T7495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.547536][ T7495] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 127.547573][ T7495] [ 128.198352][ T7510] netlink: 'syz.1.481': attribute type 10 has an invalid length. [ 128.427699][ T7517] xt_socket: unknown flags 0x50 [ 128.456327][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.483'. [ 129.056950][ T7535] xfrm0 speed is unknown, defaulting to 1000 [ 129.383201][ T7555] FAULT_INJECTION: forcing a failure. [ 129.383201][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 129.432544][ T7555] CPU: 1 UID: 0 PID: 7555 Comm: syz.4.495 Not tainted syzkaller #0 PREEMPT(full) [ 129.432572][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.432583][ T7555] Call Trace: [ 129.432591][ T7555] [ 129.432599][ T7555] dump_stack_lvl+0xe8/0x150 [ 129.432630][ T7555] should_fail_ex+0x414/0x560 [ 129.432665][ T7555] should_failslab+0xa8/0x100 [ 129.432687][ T7555] kmem_cache_alloc_noprof+0x88/0x710 [ 129.432713][ T7555] ? security_file_alloc+0x34/0x330 [ 129.432735][ T7555] security_file_alloc+0x34/0x330 [ 129.432753][ T7555] init_file+0x93/0x2f0 [ 129.432777][ T7555] alloc_empty_file+0x6e/0x1d0 [ 129.432800][ T7555] alloc_file_pseudo+0x13d/0x210 [ 129.432827][ T7555] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 129.432863][ T7555] anon_inode_getfile+0xc5/0x1a0 [ 129.432894][ T7555] bpf_link_prime+0xfc/0x220 [ 129.432919][ T7555] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 129.432945][ T7555] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 129.432973][ T7555] ? __fget_files+0x2a/0x420 [ 129.433002][ T7555] bpf_raw_tracepoint_open+0x1b2/0x220 [ 129.433032][ T7555] __sys_bpf+0x73e/0x860 [ 129.433059][ T7555] ? __pfx___sys_bpf+0x10/0x10 [ 129.433098][ T7555] ? ksys_write+0x22a/0x250 [ 129.433118][ T7555] ? __pfx_ksys_write+0x10/0x10 [ 129.433142][ T7555] __x64_sys_bpf+0x7c/0x90 [ 129.433164][ T7555] do_syscall_64+0xec/0xf80 [ 129.433182][ T7555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.433200][ T7555] ? trace_irq_disable+0x37/0x100 [ 129.433223][ T7555] ? clear_bhb_loop+0x60/0xb0 [ 129.433244][ T7555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.433260][ T7555] RIP: 0033:0x7f7f3318f749 [ 129.433277][ T7555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.433293][ T7555] RSP: 002b:00007f7f340a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.433312][ T7555] RAX: ffffffffffffffda RBX: 00007f7f333e5fa0 RCX: 00007f7f3318f749 [ 129.433326][ T7555] RDX: 0000000000000010 RSI: 0000200000000980 RDI: 0000000000000011 [ 129.433343][ T7555] RBP: 00007f7f340a1090 R08: 0000000000000000 R09: 0000000000000000 [ 129.433353][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.433364][ T7555] R13: 00007f7f333e6038 R14: 00007f7f333e5fa0 R15: 00007ffdccde6fd8 [ 129.433390][ T7555] [ 130.060215][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.501'. [ 130.105102][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.501'. [ 130.182937][ T7569] rdma_rxe: rxe_newlink: failed to add syz_tun [ 130.303784][ T7581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.503'. [ 130.459485][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 130.566715][ T7597] bond1 (unregistering): Released all slaves [ 130.605027][ T7601] FAULT_INJECTION: forcing a failure. [ 130.605027][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 130.619252][ T7601] CPU: 1 UID: 0 PID: 7601 Comm: syz.0.509 Not tainted syzkaller #0 PREEMPT(full) [ 130.619277][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.619289][ T7601] Call Trace: [ 130.619297][ T7601] [ 130.619304][ T7601] dump_stack_lvl+0xe8/0x150 [ 130.619330][ T7601] should_fail_ex+0x414/0x560 [ 130.619363][ T7601] should_failslab+0xa8/0x100 [ 130.619386][ T7601] __kmalloc_cache_noprof+0x84/0x700 [ 130.619406][ T7601] ? sctp_add_bind_addr+0x8c/0x370 [ 130.619437][ T7601] sctp_add_bind_addr+0x8c/0x370 [ 130.619474][ T7601] sctp_copy_local_addr_list+0x30b/0x4e0 [ 130.619503][ T7601] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 130.619528][ T7601] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 130.619557][ T7601] ? sctp_v4_is_any+0x35/0x60 [ 130.619580][ T7601] ? sctp_copy_one_addr+0x93/0x360 [ 130.619608][ T7601] sctp_bind_addr_copy+0xb3/0x3c0 [ 130.619633][ T7601] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 130.619662][ T7601] sctp_connect_new_asoc+0x2e0/0x690 [ 130.619683][ T7601] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 130.619708][ T7601] ? __local_bh_enable_ip+0xd0/0x130 [ 130.619727][ T7601] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 130.619745][ T7601] ? security_sctp_bind_connect+0x7e/0x2e0 [ 130.619768][ T7601] sctp_sendmsg+0x155c/0x2840 [ 130.619783][ T7601] ? __lock_acquire+0x6b6/0x2cf0 [ 130.619812][ T7601] ? __pfx_sctp_sendmsg+0x10/0x10 [ 130.619828][ T7601] ? aa_sk_perm+0x15f/0x920 [ 130.619850][ T7601] ? aa_sk_perm+0x7ee/0x920 [ 130.619876][ T7601] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.619901][ T7601] ? sock_rps_record_flow+0x19/0x410 [ 130.619927][ T7601] ? inet_sendmsg+0x2f4/0x370 [ 130.619953][ T7601] __sock_sendmsg+0x19c/0x270 [ 130.619983][ T7601] ____sys_sendmsg+0x52d/0x820 [ 130.620010][ T7601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.620042][ T7601] ? import_iovec+0x74/0xa0 [ 130.620069][ T7601] ___sys_sendmsg+0x21f/0x2a0 [ 130.620094][ T7601] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.620121][ T7601] ? kstrtouint+0x6e/0xe0 [ 130.620169][ T7601] ? __fget_files+0x2a/0x420 [ 130.620192][ T7601] ? __fget_files+0x3a0/0x420 [ 130.620223][ T7601] __sys_sendmmsg+0x227/0x430 [ 130.620250][ T7601] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.620269][ T7601] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 130.620312][ T7601] ? ksys_write+0x22a/0x250 [ 130.620331][ T7601] ? __pfx_ksys_write+0x10/0x10 [ 130.620357][ T7601] __x64_sys_sendmmsg+0xa0/0xc0 [ 130.620382][ T7601] do_syscall_64+0xec/0xf80 [ 130.620399][ T7601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.620416][ T7601] ? trace_irq_disable+0x37/0x100 [ 130.620439][ T7601] ? clear_bhb_loop+0x60/0xb0 [ 130.620468][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.620485][ T7601] RIP: 0033:0x7f555dd8f749 [ 130.620502][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.620518][ T7601] RSP: 002b:00007f555ebc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.620538][ T7601] RAX: ffffffffffffffda RBX: 00007f555dfe5fa0 RCX: 00007f555dd8f749 [ 130.620553][ T7601] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003 [ 130.620564][ T7601] RBP: 00007f555ebc2090 R08: 0000000000000000 R09: 0000000000000000 [ 130.620575][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.620585][ T7601] R13: 00007f555dfe6038 R14: 00007f555dfe5fa0 R15: 00007fff586e8f98 [ 130.620628][ T7601] [ 131.631739][ T7625] vti0: entered promiscuous mode [ 131.641429][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 131.754763][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 131.899840][ T7642] netlink: zone id is out of range [ 131.916318][ T7642] netlink: zone id is out of range [ 131.938458][ T7642] netlink: zone id is out of range [ 131.957372][ T7642] netlink: zone id is out of range [ 131.983434][ T7642] netlink: zone id is out of range [ 131.995976][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 132.018073][ T7642] netlink: zone id is out of range [ 132.023237][ T7642] netlink: zone id is out of range [ 132.072908][ T7652] FAULT_INJECTION: forcing a failure. [ 132.072908][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 132.092957][ T7653] netlink: 6 bytes leftover after parsing attributes in process `syz.2.525'. [ 132.114385][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT(full) [ 132.114412][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.114424][ T7652] Call Trace: [ 132.114431][ T7652] [ 132.114439][ T7652] dump_stack_lvl+0xe8/0x150 [ 132.114469][ T7652] should_fail_ex+0x414/0x560 [ 132.114503][ T7652] should_failslab+0xa8/0x100 [ 132.114528][ T7652] __kmalloc_cache_noprof+0x84/0x700 [ 132.114549][ T7652] ? nfnetlink_rcv+0xf97/0x2590 [ 132.114576][ T7652] nfnetlink_rcv+0xf97/0x2590 [ 132.114630][ T7652] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.114667][ T7652] ? ref_tracker_free+0x63a/0x7d0 [ 132.114713][ T7652] ? __netlink_deliver_tap+0x807/0x850 [ 132.114736][ T7652] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.114776][ T7652] netlink_unicast+0x82f/0x9e0 [ 132.114806][ T7652] ? __pfx_netlink_unicast+0x10/0x10 [ 132.114825][ T7652] ? __alloc_skb+0x198/0x3a0 [ 132.114845][ T7652] ? netlink_sendmsg+0x642/0xb30 [ 132.114867][ T7652] ? skb_put+0x11b/0x210 [ 132.114890][ T7652] netlink_sendmsg+0x805/0xb30 [ 132.114923][ T7652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.114956][ T7652] ? aa_sock_msg_perm+0xf1/0x1b0 [ 132.114982][ T7652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.115000][ T7652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.115025][ T7652] __sock_sendmsg+0x21c/0x270 [ 132.115055][ T7652] ____sys_sendmsg+0x505/0x820 [ 132.115083][ T7652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.115115][ T7652] ? import_iovec+0x74/0xa0 [ 132.115140][ T7652] ___sys_sendmsg+0x21f/0x2a0 [ 132.115164][ T7652] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.115221][ T7652] ? __fget_files+0x2a/0x420 [ 132.115244][ T7652] ? __fget_files+0x3a0/0x420 [ 132.115277][ T7652] __x64_sys_sendmsg+0x19b/0x260 [ 132.115303][ T7652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.115338][ T7652] ? __pfx_ksys_write+0x10/0x10 [ 132.115368][ T7652] do_syscall_64+0xec/0xf80 [ 132.115394][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.115412][ T7652] ? trace_irq_disable+0x37/0x100 [ 132.115436][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 132.115458][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.115477][ T7652] RIP: 0033:0x7f4c9858f749 [ 132.115493][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.115509][ T7652] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.115531][ T7652] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 132.115545][ T7652] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000003 [ 132.115557][ T7652] RBP: 00007f4c99443090 R08: 0000000000000000 R09: 0000000000000000 [ 132.115568][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.115579][ T7652] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 132.115610][ T7652] [ 132.233182][ T7642] netlink: zone id is out of range [ 132.271238][ T7653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.271626][ T7642] netlink: zone id is out of range [ 132.509859][ T7662] bond0: Caught tx_queue_len zero misconfig [ 132.652921][ T7664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 132.772516][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.943069][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.540'. [ 132.999703][ T7682] xfrm0 speed is unknown, defaulting to 1000 [ 133.048535][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 133.299284][ T7703] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 133.343644][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 133.660515][ T7710] netlink: 'syz.4.542': attribute type 11 has an invalid length. [ 133.692790][ T7710] netlink: 'syz.4.542': attribute type 11 has an invalid length. [ 133.726299][ T7710] netlink: 224 bytes leftover after parsing attributes in process `syz.4.542'. [ 133.853158][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.888817][ T7723] netlink: 'syz.1.547': attribute type 13 has an invalid length. [ 133.934402][ T7723] netlink: 'syz.1.547': attribute type 12 has an invalid length. [ 134.001364][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 134.103682][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 134.125672][ T7725] tipc: Failed to obtain node identity [ 134.131631][ T7725] tipc: Enabling of bearer rejected, failed to enable media [ 134.163298][ T7738] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 134.205649][ T7738] netlink: 2 bytes leftover after parsing attributes in process `syz.0.555'. [ 134.397900][ T7741] FAULT_INJECTION: forcing a failure. [ 134.397900][ T7741] name failslab, interval 1, probability 0, space 0, times 0 [ 134.429792][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.2.556 Not tainted syzkaller #0 PREEMPT(full) [ 134.429818][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.429829][ T7741] Call Trace: [ 134.429837][ T7741] [ 134.429845][ T7741] dump_stack_lvl+0xe8/0x150 [ 134.429883][ T7741] should_fail_ex+0x414/0x560 [ 134.429917][ T7741] should_failslab+0xa8/0x100 [ 134.429943][ T7741] __kmalloc_noprof+0xdf/0x800 [ 134.429961][ T7741] ? kobject_get_path+0xc5/0x2f0 [ 134.429982][ T7741] ? __kasan_kmalloc+0x93/0xb0 [ 134.430007][ T7741] kobject_get_path+0xc5/0x2f0 [ 134.430026][ T7741] ? kobject_uevent_env+0x28c/0x9f0 [ 134.430055][ T7741] kobject_uevent_env+0x2a1/0x9f0 [ 134.430088][ T7741] device_add+0x557/0xb80 [ 134.430111][ T7741] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 134.430136][ T7741] wakeup_source_register+0x18a/0x380 [ 134.430170][ T7741] ep_insert+0xef6/0x19e0 [ 134.430210][ T7741] ? __pfx_ep_insert+0x10/0x10 [ 134.430247][ T7741] ? ep_loop_check+0x50/0x1b0 [ 134.430280][ T7741] do_epoll_ctl+0x7f4/0xe80 [ 134.430313][ T7741] __x64_sys_epoll_ctl+0x163/0x1a0 [ 134.430342][ T7741] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 134.430380][ T7741] do_syscall_64+0xec/0xf80 [ 134.430399][ T7741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.430417][ T7741] ? trace_irq_disable+0x37/0x100 [ 134.430440][ T7741] ? clear_bhb_loop+0x60/0xb0 [ 134.430462][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.430478][ T7741] RIP: 0033:0x7f4074d8f749 [ 134.430493][ T7741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.430508][ T7741] RSP: 002b:00007f4075b42038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 134.430528][ T7741] RAX: ffffffffffffffda RBX: 00007f4074fe5fa0 RCX: 00007f4074d8f749 [ 134.430541][ T7741] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 000000000000000b [ 134.430551][ T7741] RBP: 00007f4075b42090 R08: 0000000000000000 R09: 0000000000000000 [ 134.430562][ T7741] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.430574][ T7741] R13: 00007f4074fe6038 R14: 00007f4074fe5fa0 R15: 00007ffc1fa27e28 [ 134.430604][ T7741] [ 135.019844][ T7768] syz.1.566: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.078272][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.1.566 Not tainted syzkaller #0 PREEMPT(full) [ 135.078302][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.078314][ T7768] Call Trace: [ 135.078323][ T7768] [ 135.078331][ T7768] dump_stack_lvl+0xe8/0x150 [ 135.078362][ T7768] warn_alloc+0x214/0x310 [ 135.078386][ T7768] ? stack_trace_save+0x9c/0xe0 [ 135.078418][ T7768] ? __pfx_warn_alloc+0x10/0x10 [ 135.078446][ T7768] ? kasan_save_track+0x4f/0x80 [ 135.078464][ T7768] ? kasan_save_track+0x3e/0x80 [ 135.078480][ T7768] ? __kasan_kmalloc+0x93/0xb0 [ 135.078498][ T7768] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 135.078516][ T7768] ? xskq_create+0x56/0x170 [ 135.078544][ T7768] ? xsk_setsockopt+0x4dc/0x8d0 [ 135.078568][ T7768] ? do_sock_setsockopt+0x17c/0x1b0 [ 135.078588][ T7768] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 135.078607][ T7768] ? do_syscall_64+0xec/0xf80 [ 135.078630][ T7768] __vmalloc_node_range_noprof+0x134/0x16a0 [ 135.078681][ T7768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.078705][ T7768] ? __kasan_kmalloc+0x93/0xb0 [ 135.078732][ T7768] vmalloc_user_noprof+0xad/0xf0 [ 135.078751][ T7768] ? xskq_create+0xbf/0x170 [ 135.078777][ T7768] xskq_create+0xbf/0x170 [ 135.078807][ T7768] xsk_init_queue+0xb0/0x110 [ 135.078838][ T7768] xsk_setsockopt+0x4dc/0x8d0 [ 135.078867][ T7768] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.078892][ T7768] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.078917][ T7768] ? aa_sock_opt_perm+0xff/0x1a0 [ 135.078945][ T7768] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 135.078964][ T7768] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.078989][ T7768] do_sock_setsockopt+0x17c/0x1b0 [ 135.079025][ T7768] __x64_sys_setsockopt+0x13f/0x1b0 [ 135.079052][ T7768] do_syscall_64+0xec/0xf80 [ 135.079071][ T7768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.079091][ T7768] ? clear_bhb_loop+0x60/0xb0 [ 135.079112][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.079128][ T7768] RIP: 0033:0x7f4c9858f749 [ 135.079146][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.079162][ T7768] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.079183][ T7768] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 135.079198][ T7768] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 135.079213][ T7768] RBP: 00007f4c98613f91 R08: 0000000000000004 R09: 0000000000000000 [ 135.079225][ T7768] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.079238][ T7768] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 135.079267][ T7768] [ 135.084543][ T7768] Mem-Info: [ 135.359359][ T7768] active_anon:5767 inactive_anon:0 isolated_anon:0 [ 135.359359][ T7768] active_file:3423 inactive_file:39901 isolated_file:0 [ 135.359359][ T7768] unevictable:768 dirty:338 writeback:0 [ 135.359359][ T7768] slab_reclaimable:11032 slab_unreclaimable:98408 [ 135.359359][ T7768] mapped:31770 shmem:1350 pagetables:1338 [ 135.359359][ T7768] sec_pagetables:0 bounce:0 [ 135.359359][ T7768] kernel_misc_reclaimable:0 [ 135.359359][ T7768] free:1318952 free_pcp:16022 free_cma:0 [ 135.434171][ T7768] Node 0 active_anon:23068kB inactive_anon:0kB active_file:13692kB inactive_file:159404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127080kB dirty:1352kB writeback:0kB shmem:3864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12412kB pagetables:5200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.484778][ T7768] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.515128][ T7768] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.548114][ T7768] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 135.554217][ T7768] Node 0 DMA32 free:1366996kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23068kB inactive_anon:0kB active_file:13692kB inactive_file:159404kB unevictable:1536kB writepending:1352kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:44592kB local_pcp:20336kB free_cma:0kB [ 135.639488][ T7768] lowmem_reserve[]: 0 0 1 1 1 [ 135.653192][ T7768] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.714464][ T7768] lowmem_reserve[]: 0 0 0 0 0 [ 135.726626][ T7768] Node 1 Normal free:3893452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19744kB local_pcp:8576kB free_cma:0kB [ 135.786186][ T7768] lowmem_reserve[]: 0 0 0 0 0 [ 135.801901][ T7768] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.815456][ T7768] Node 0 DMA32: 2439*4kB (UME) 1633*8kB (UME) 809*16kB (UME) 422*32kB (UME) 248*64kB (UME) 183*128kB (UME) 160*256kB (UM) 97*512kB (UM) 76*1024kB (UME) 48*2048kB (UME) 247*4096kB (UM) = 1367028kB [ 135.836531][ T7768] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 135.981008][ T7768] Node 1 Normal: 171*4kB (UM) 40*8kB (UME) 46*16kB (UME) 84*32kB (UME) 24*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893452kB [ 136.044756][ T7768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.078144][ T7768] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.110670][ T7768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.171072][ T7768] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.191916][ T7768] 47600 total pagecache pages [ 136.196798][ T7768] 0 pages in swap cache [ 136.207013][ T7768] Free swap = 124996kB [ 136.212761][ T7768] Total swap = 124996kB [ 136.217147][ T7768] 2097051 pages RAM [ 136.221523][ T7768] 0 pages HighMem/MovableOnly [ 136.226643][ T7768] 425082 pages reserved [ 136.232542][ T7793] No such timeout policy "syz1" [ 136.239156][ T7768] 0 pages cma reserved [ 136.409164][ T7802] syzkaller0: left promiscuous mode [ 136.414549][ T7802] syzkaller0: left allmulticast mode [ 136.427249][ T7802] tipc: Enabling of bearer rejected, already enabled [ 136.527611][ T7806] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.579'. [ 136.558185][ T7806] FAULT_INJECTION: forcing a failure. [ 136.558185][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 136.598140][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.1.579 Not tainted syzkaller #0 PREEMPT(full) [ 136.598166][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.598179][ T7806] Call Trace: [ 136.598187][ T7806] [ 136.598195][ T7806] dump_stack_lvl+0xe8/0x150 [ 136.598225][ T7806] should_fail_ex+0x414/0x560 [ 136.598260][ T7806] should_failslab+0xa8/0x100 [ 136.598284][ T7806] kmem_cache_alloc_noprof+0x88/0x710 [ 136.598309][ T7806] ? __alloc_skb+0x27e/0x3a0 [ 136.598327][ T7806] ? ovs_flow_alloc+0x24/0x1f0 [ 136.598353][ T7806] ovs_flow_alloc+0x24/0x1f0 [ 136.598378][ T7806] ovs_packet_cmd_execute+0x568/0xe70 [ 136.598414][ T7806] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 136.598445][ T7806] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 136.598471][ T7806] genl_family_rcv_msg_doit+0x215/0x300 [ 136.598500][ T7806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 136.598529][ T7806] ? bpf_lsm_capable+0x9/0x20 [ 136.598549][ T7806] ? security_capable+0x7e/0x2e0 [ 136.598574][ T7806] genl_rcv_msg+0x60e/0x790 [ 136.598597][ T7806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.598612][ T7806] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 136.598637][ T7806] ? __asan_memcpy+0x40/0x70 [ 136.598652][ T7806] ? __pfx_ref_tracker_free+0x10/0x10 [ 136.598666][ T7806] ? __skb_clone+0x63/0x7a0 [ 136.598696][ T7806] netlink_rcv_skb+0x208/0x470 [ 136.598719][ T7806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.598737][ T7806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.598809][ T7806] ? genl_rcv+0x19/0x40 [ 136.598846][ T7806] ? down_read+0x274/0x2e0 [ 136.598862][ T7806] ? genl_rcv+0xd/0x40 [ 136.598893][ T7806] genl_rcv+0x28/0x40 [ 136.598917][ T7806] netlink_unicast+0x82f/0x9e0 [ 136.598943][ T7806] ? __pfx_netlink_unicast+0x10/0x10 [ 136.598961][ T7806] ? netlink_sendmsg+0x642/0xb30 [ 136.598979][ T7806] ? skb_put+0x11b/0x210 [ 136.598999][ T7806] netlink_sendmsg+0x805/0xb30 [ 136.599027][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.599049][ T7806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.599070][ T7806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.599085][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.599105][ T7806] __sock_sendmsg+0x21c/0x270 [ 136.599133][ T7806] ____sys_sendmsg+0x505/0x820 [ 136.599156][ T7806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.599181][ T7806] ? import_iovec+0x74/0xa0 [ 136.599203][ T7806] ___sys_sendmsg+0x21f/0x2a0 [ 136.599223][ T7806] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.599269][ T7806] ? __fget_files+0x2a/0x420 [ 136.599288][ T7806] ? __fget_files+0x3a0/0x420 [ 136.599315][ T7806] __x64_sys_sendmsg+0x19b/0x260 [ 136.599336][ T7806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.599362][ T7806] ? __pfx_ksys_write+0x10/0x10 [ 136.599386][ T7806] do_syscall_64+0xec/0xf80 [ 136.599403][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.599418][ T7806] ? trace_irq_disable+0x37/0x100 [ 136.599438][ T7806] ? clear_bhb_loop+0x60/0xb0 [ 136.599457][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.599472][ T7806] RIP: 0033:0x7f4c9858f749 [ 136.599486][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.599500][ T7806] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.599517][ T7806] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 136.599530][ T7806] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 136.599540][ T7806] RBP: 00007f4c99443090 R08: 0000000000000000 R09: 0000000000000000 [ 136.599549][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.599558][ T7806] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 136.599586][ T7806] [ 136.985503][ T7804] infiniband syû: set active [ 136.990703][ T7804] infiniband syû: added bond_slave_0 [ 137.173033][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.581'. [ 137.247088][ T7804] RDS/IB: syû: added [ 137.265349][ T7804] smc: adding ib device syû with port count 1 [ 137.278924][ T7804] smc: ib device syû port 1 has no pnetid [ 137.516447][ T7824] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 137.543142][ T7824] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 137.892952][ T7841] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.588'. [ 138.371239][ T7869] ip6gre1: entered promiscuous mode [ 138.668838][ T7881] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.732575][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 138.742136][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 138.962392][ T7890] xfrm0 speed is unknown, defaulting to 1000 [ 139.236307][ T7907] net_ratelimit: 38 callbacks suppressed [ 139.236325][ T7907] openvswitch: netlink: Message has 4 unknown bytes. [ 139.259088][ T7907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.689091][ T5837] Bluetooth: hci4: link tx timeout [ 139.694497][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.704799][ T5837] Bluetooth: hci4: link tx timeout [ 139.707883][ T7917] netlink: 'syz.4.599': attribute type 2 has an invalid length. [ 139.710004][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.849714][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.605'. [ 139.953680][ T7920] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 139.966639][ T7891] xfrm0 speed is unknown, defaulting to 1000 [ 139.981520][ T7920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.002990][ T5837] Bluetooth: hci4: link tx timeout [ 140.008204][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.029581][ T5837] Bluetooth: hci4: link tx timeout [ 140.034735][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.529469][ T5837] Bluetooth: hci4: link tx timeout [ 140.535187][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.620456][ T5837] Bluetooth: hci4: link tx timeout [ 140.625680][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.839156][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 141.027135][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.034605][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.079412][ T7962] netlink: 104 bytes leftover after parsing attributes in process `syz.1.613'. [ 141.112683][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.125283][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.179106][ T7960] geneve1: left promiscuous mode [ 141.212795][ T7960] tipc: Resetting bearer [ 141.224862][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.246954][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.277305][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.290585][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.434266][ T7968] FAULT_INJECTION: forcing a failure. [ 141.434266][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.447726][ T7968] CPU: 0 UID: 0 PID: 7968 Comm: syz.3.616 Not tainted syzkaller #0 PREEMPT(full) [ 141.447751][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.447763][ T7968] Call Trace: [ 141.447771][ T7968] [ 141.447780][ T7968] dump_stack_lvl+0xe8/0x150 [ 141.447808][ T7968] should_fail_ex+0x414/0x560 [ 141.447843][ T7968] _copy_to_iter+0x1de/0x1790 [ 141.447867][ T7968] ? do_raw_spin_lock+0x121/0x290 [ 141.447901][ T7968] ? __pfx__copy_to_iter+0x10/0x10 [ 141.447921][ T7968] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 141.447950][ T7968] ? lockdep_hardirqs_on+0x7b/0x110 [ 141.447970][ T7968] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.447999][ T7968] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 141.448032][ T7968] __skb_datagram_iter+0xf8/0x990 [ 141.448056][ T7968] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 141.448087][ T7968] skb_copy_datagram_iter+0xb5/0x210 [ 141.448115][ T7968] netlink_recvmsg+0x2ab/0xa30 [ 141.448159][ T7968] ? __pfx_netlink_recvmsg+0x10/0x10 [ 141.448188][ T7968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 141.448215][ T7968] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 141.448233][ T7968] ? security_socket_recvmsg+0x7e/0x2e0 [ 141.448260][ T7968] ? __pfx_netlink_recvmsg+0x10/0x10 [ 141.448285][ T7968] sock_recvmsg+0x22c/0x270 [ 141.448317][ T7968] __sys_recvfrom+0x1f6/0x340 [ 141.448340][ T7968] ? __pfx___sys_recvfrom+0x10/0x10 [ 141.448385][ T7968] ? exc_page_fault+0x71/0xd0 [ 141.448407][ T7968] ? do_user_addr_fault+0xc85/0x1380 [ 141.448431][ T7968] __x64_sys_recvfrom+0xde/0x100 [ 141.448456][ T7968] do_syscall_64+0xec/0xf80 [ 141.448475][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.448494][ T7968] ? trace_irq_disable+0x37/0x100 [ 141.448518][ T7968] ? clear_bhb_loop+0x60/0xb0 [ 141.448541][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.448559][ T7968] RIP: 0033:0x7f4a10791514 [ 141.448576][ T7968] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 141.448593][ T7968] RSP: 002b:00007f4a11662ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 141.448614][ T7968] RAX: ffffffffffffffda RBX: 00007f4a11662fc0 RCX: 00007f4a10791514 [ 141.448629][ T7968] RDX: 0000000000001000 RSI: 00007f4a11663010 RDI: 0000000000000006 [ 141.448642][ T7968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.448653][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 141.448665][ T7968] R13: 00007f4a11662f68 R14: 00007f4a11663010 R15: 0000000000000000 [ 141.448695][ T7968] [ 141.719926][ T5837] Bluetooth: hci4: link tx timeout [ 141.725082][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.808634][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 141.852440][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'. [ 141.979382][ T7973] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 141.987503][ T7973] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.526238][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 142.556030][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 142.900815][ T8008] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 142.916000][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 142.929474][ T8009] netlink: 128 bytes leftover after parsing attributes in process `syz.2.628'. [ 143.060936][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 143.094591][ T8020] FAULT_INJECTION: forcing a failure. [ 143.094591][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 143.103005][ T8018] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 143.118435][ T8018] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.137300][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 143.137327][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.137339][ T8020] Call Trace: [ 143.137346][ T8020] [ 143.137354][ T8020] dump_stack_lvl+0xe8/0x150 [ 143.137384][ T8020] should_fail_ex+0x414/0x560 [ 143.137419][ T8020] should_failslab+0xa8/0x100 [ 143.137443][ T8020] __kmalloc_noprof+0xdf/0x800 [ 143.137462][ T8020] ? fib6_info_alloc+0x30/0xf0 [ 143.137487][ T8020] fib6_info_alloc+0x30/0xf0 [ 143.137508][ T8020] ip6_route_info_create+0x142/0x860 [ 143.137532][ T8020] ? nla_find+0x138/0x150 [ 143.137554][ T8020] inet6_rtm_newroute+0x47e/0x18c0 [ 143.137579][ T8020] ? kasan_quarantine_put+0xbb/0x1f0 [ 143.137598][ T8020] ? lockdep_hardirqs_on+0x7b/0x110 [ 143.137621][ T8020] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 143.137640][ T8020] ? nlmon_xmit+0xb0/0x100 [ 143.137686][ T8020] ? lockdep_hardirqs_on+0x7b/0x110 [ 143.137729][ T8020] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 143.137748][ T8020] rtnetlink_rcv_msg+0x7cf/0xb70 [ 143.137773][ T8020] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 143.137792][ T8020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.137810][ T8020] ? ref_tracker_free+0x63a/0x7d0 [ 143.137835][ T8020] ? __asan_memcpy+0x40/0x70 [ 143.137851][ T8020] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.137868][ T8020] ? __skb_clone+0x63/0x7a0 [ 143.137900][ T8020] netlink_rcv_skb+0x208/0x470 [ 143.137921][ T8020] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.137942][ T8020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.137973][ T8020] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.138001][ T8020] netlink_unicast+0x82f/0x9e0 [ 143.138038][ T8020] ? __pfx_netlink_unicast+0x10/0x10 [ 143.138057][ T8020] ? __alloc_skb+0x198/0x3a0 [ 143.138074][ T8020] ? netlink_sendmsg+0x642/0xb30 [ 143.138094][ T8020] ? skb_put+0x11b/0x210 [ 143.138113][ T8020] netlink_sendmsg+0x805/0xb30 [ 143.138144][ T8020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.138170][ T8020] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.138196][ T8020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.138211][ T8020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.138236][ T8020] __sock_sendmsg+0x21c/0x270 [ 143.138265][ T8020] ____sys_sendmsg+0x505/0x820 [ 143.138291][ T8020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.138322][ T8020] ? import_iovec+0x74/0xa0 [ 143.138347][ T8020] ___sys_sendmsg+0x21f/0x2a0 [ 143.138373][ T8020] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.138429][ T8020] ? __fget_files+0x2a/0x420 [ 143.138452][ T8020] ? __fget_files+0x3a0/0x420 [ 143.138484][ T8020] __x64_sys_sendmsg+0x19b/0x260 [ 143.138507][ T8020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.138537][ T8020] ? __pfx_ksys_write+0x10/0x10 [ 143.138566][ T8020] do_syscall_64+0xec/0xf80 [ 143.138585][ T8020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.138603][ T8020] ? trace_irq_disable+0x37/0x100 [ 143.138627][ T8020] ? clear_bhb_loop+0x60/0xb0 [ 143.138647][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.138666][ T8020] RIP: 0033:0x7f555dd8f749 [ 143.138683][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.138700][ T8020] RSP: 002b:00007f555ebc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.138721][ T8020] RAX: ffffffffffffffda RBX: 00007f555dfe5fa0 RCX: 00007f555dd8f749 [ 143.138734][ T8020] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 143.138745][ T8020] RBP: 00007f555ebc2090 R08: 0000000000000000 R09: 0000000000000000 [ 143.138756][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.138767][ T8020] R13: 00007f555dfe6038 R14: 00007f555dfe5fa0 R15: 00007fff586e8f98 [ 143.138797][ T8020] [ 143.589157][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 143.747385][ T8030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.636'. [ 143.813604][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 143.889323][ T8038] syz.2.640 (8038) used obsolete PPPIOCDETACH ioctl [ 143.945152][ T8041] tipc: Enabling of bearer rejected, already enabled [ 143.966574][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'. [ 144.045558][ T8045] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 144.058642][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 144.116741][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 144.143313][ T8041] macvlan2: entered promiscuous mode [ 144.149051][ T8041] macvlan2: entered allmulticast mode [ 144.155271][ T8041] bond1: entered promiscuous mode [ 144.160822][ T8041] bridge1: entered promiscuous mode [ 144.167011][ T8041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.168539][ T8051] netlink: 96 bytes leftover after parsing attributes in process `syz.1.645'. [ 144.220747][ T8041] bond1: left promiscuous mode [ 144.225565][ T8041] bridge1: left promiscuous mode [ 144.976641][ T8093] netlink: 'syz.3.661': attribute type 21 has an invalid length. [ 145.116731][ T8098] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 145.128406][ T8101] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 145.139399][ T8098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.355886][ T5912] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 145.435135][ T8115] tipc: Resetting bearer [ 145.442225][ T8115] tipc: Resetting bearer [ 145.456524][ T8115] netlink: 'syz.0.669': attribute type 16 has an invalid length. [ 145.465277][ T8115] netlink: 'syz.0.669': attribute type 17 has an invalid length. [ 145.506945][ T5199] udevd[5199]: worker [5846] terminated by signal 33 (Unknown signal 33) [ 145.517191][ T5199] udevd[5199]: worker [5846] failed while handling '/devices/virtual/bluetooth/hci4/hci4:200/0005:0006:5508.0001/hidraw/hidraw0' [ 145.533469][ T8122] FAULT_INJECTION: forcing a failure. [ 145.533469][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.567066][ T8115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.567749][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.4.670 Not tainted syzkaller #0 PREEMPT(full) [ 145.567781][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.567793][ T8122] Call Trace: [ 145.567800][ T8122] [ 145.567808][ T8122] dump_stack_lvl+0xe8/0x150 [ 145.567837][ T8122] should_fail_ex+0x414/0x560 [ 145.567870][ T8122] _copy_from_user+0x2d/0xb0 [ 145.567894][ T8122] ___sys_recvmsg+0x12e/0x510 [ 145.567923][ T8122] ? __pfx____sys_recvmsg+0x10/0x10 [ 145.567950][ T8122] ? __fget_files+0x2a/0x420 [ 145.568002][ T8122] do_recvmmsg+0x307/0x770 [ 145.568035][ T8122] ? __pfx_do_recvmmsg+0x10/0x10 [ 145.568068][ T8122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.568105][ T8122] __x64_sys_recvmmsg+0x190/0x240 [ 145.568130][ T8122] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 145.568164][ T8122] do_syscall_64+0xec/0xf80 [ 145.568183][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.568200][ T8122] ? trace_irq_disable+0x37/0x100 [ 145.568225][ T8122] ? clear_bhb_loop+0x60/0xb0 [ 145.568246][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.568264][ T8122] RIP: 0033:0x7f7f3318f749 [ 145.568280][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.568296][ T8122] RSP: 002b:00007f7f340a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 145.568317][ T8122] RAX: ffffffffffffffda RBX: 00007f7f333e5fa0 RCX: 00007f7f3318f749 [ 145.568331][ T8122] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000006 [ 145.568343][ T8122] RBP: 00007f7f340a1090 R08: 0000000000000000 R09: 0000000000000000 [ 145.568355][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.568366][ T8122] R13: 00007f7f333e6038 R14: 00007f7f333e5fa0 R15: 00007ffdccde6fd8 [ 145.568396][ T8122] [ 145.791539][ T8103] xfrm0 speed is unknown, defaulting to 1000 [ 146.107482][ T8135] vlan2: entered allmulticast mode [ 146.149112][ T5912] IPVS: starting estimator thread 0... [ 146.258119][ T8136] IPVS: using max 31 ests per chain, 74400 per kthread [ 146.294718][ T8140] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 146.309202][ T8140] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 146.768333][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 146.992780][ T8177] xfrm0 speed is unknown, defaulting to 1000 [ 147.087045][ T8182] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 147.130484][ T8182] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.170019][ T8214] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 148.178554][ T8214] __nla_validate_parse: 13 callbacks suppressed [ 148.178571][ T8214] netlink: 224 bytes leftover after parsing attributes in process `syz.4.700'. [ 148.317069][ T8223] netlink: 312 bytes leftover after parsing attributes in process `syz.4.705'. [ 148.382789][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.391406][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.419382][ T8227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.668218][ T8227] bond2: option arp_validate: invalid value (18446744073709551614) [ 148.731358][ T8227] bond2 (unregistering): Released all slaves [ 149.200847][ T8259] netlink: 68 bytes leftover after parsing attributes in process `syz.3.717'. [ 149.813675][ T36] wlan1: Trigger new scan to find an IBSS to join [ 149.987233][ T8294] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 150.023709][ T8294] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 150.088711][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 150.717962][ T8325] FAULT_INJECTION: forcing a failure. [ 150.717962][ T8325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.732057][ T36] wlan1: Creating new IBSS network, BSSID be:01:68:99:01:50 [ 150.767482][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.4.739 Not tainted syzkaller #0 PREEMPT(full) [ 150.767512][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.767523][ T8325] Call Trace: [ 150.767531][ T8325] [ 150.767546][ T8325] dump_stack_lvl+0xe8/0x150 [ 150.767576][ T8325] should_fail_ex+0x414/0x560 [ 150.767611][ T8325] prepare_alloc_pages+0x22b/0x650 [ 150.767639][ T8325] __alloc_frozen_pages_noprof+0x123/0x370 [ 150.767665][ T8325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.767688][ T8325] ? __pfx__copy_from_iter+0x10/0x10 [ 150.767708][ T8325] ? policy_nodemask+0x27c/0x720 [ 150.767731][ T8325] ? aa_file_perm+0x44c/0x1530 [ 150.767759][ T8325] alloc_pages_mpol+0x232/0x4a0 [ 150.767786][ T8325] alloc_pages_noprof+0xa9/0x190 [ 150.767809][ T8325] anon_pipe_write+0xbf0/0x1460 [ 150.767832][ T8325] ? __pfx_aa_file_perm+0x10/0x10 [ 150.767877][ T8325] ? __pfx_anon_pipe_write+0x10/0x10 [ 150.767898][ T8325] ? common_file_perm+0x1b5/0x220 [ 150.767924][ T8325] ? bpf_lsm_file_permission+0x9/0x20 [ 150.767945][ T8325] ? security_file_permission+0x75/0x290 [ 150.767974][ T8325] vfs_write+0x5c9/0xb30 [ 150.767997][ T8325] ? __pfx_anon_pipe_write+0x10/0x10 [ 150.768018][ T8325] ? __pfx_vfs_write+0x10/0x10 [ 150.768043][ T8325] ? __fget_files+0x2a/0x420 [ 150.768073][ T8325] ksys_write+0x145/0x250 [ 150.768094][ T8325] ? __pfx_ksys_write+0x10/0x10 [ 150.768124][ T8325] do_syscall_64+0xec/0xf80 [ 150.768144][ T8325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.768162][ T8325] ? trace_irq_disable+0x37/0x100 [ 150.768187][ T8325] ? clear_bhb_loop+0x60/0xb0 [ 150.768210][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.768228][ T8325] RIP: 0033:0x7f7f3318f749 [ 150.768246][ T8325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.768264][ T8325] RSP: 002b:00007f7f340a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.768284][ T8325] RAX: ffffffffffffffda RBX: 00007f7f333e5fa0 RCX: 00007f7f3318f749 [ 150.768297][ T8325] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000006 [ 150.768310][ T8325] RBP: 00007f7f340a1090 R08: 0000000000000000 R09: 0000000000000000 [ 150.768322][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.768334][ T8325] R13: 00007f7f333e6038 R14: 00007f7f333e5fa0 R15: 00007ffdccde6fd8 [ 150.768366][ T8325] [ 151.264785][ T8346] geneve2: entered promiscuous mode [ 151.287711][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 60154 - 0 [ 151.305933][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 60154 - 0 [ 151.352300][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 60154 - 0 [ 151.377623][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 60154 - 0 [ 151.402153][ T8341] xfrm0 speed is unknown, defaulting to 1000 [ 152.142641][ T8377] FAULT_INJECTION: forcing a failure. [ 152.142641][ T8377] name failslab, interval 1, probability 0, space 0, times 0 [ 152.212513][ T8377] CPU: 1 UID: 0 PID: 8377 Comm: syz.4.751 Not tainted syzkaller #0 PREEMPT(full) [ 152.212541][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.212553][ T8377] Call Trace: [ 152.212561][ T8377] [ 152.212569][ T8377] dump_stack_lvl+0xe8/0x150 [ 152.212599][ T8377] should_fail_ex+0x414/0x560 [ 152.212634][ T8377] should_failslab+0xa8/0x100 [ 152.212660][ T8377] kmem_cache_alloc_noprof+0x88/0x710 [ 152.212688][ T8377] ? __netlink_lookup+0xbd/0x8a0 [ 152.212714][ T8377] ? skb_clone+0x212/0x3a0 [ 152.212742][ T8377] skb_clone+0x212/0x3a0 [ 152.212769][ T8377] __netlink_deliver_tap+0x404/0x850 [ 152.212805][ T8377] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.212829][ T8377] netlink_deliver_tap+0x19c/0x1b0 [ 152.212854][ T8377] netlink_unicast+0x7fa/0x9e0 [ 152.212883][ T8377] ? __pfx_netlink_unicast+0x10/0x10 [ 152.212903][ T8377] ? __alloc_skb+0x198/0x3a0 [ 152.212922][ T8377] ? netlink_sendmsg+0x642/0xb30 [ 152.212945][ T8377] ? skb_put+0x11b/0x210 [ 152.212969][ T8377] netlink_sendmsg+0x805/0xb30 [ 152.213002][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.213030][ T8377] ? aa_sock_msg_perm+0xf1/0x1b0 [ 152.213057][ T8377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.213075][ T8377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.213100][ T8377] __sock_sendmsg+0x21c/0x270 [ 152.213138][ T8377] __sys_sendto+0x3bd/0x520 [ 152.213161][ T8377] ? __pfx___sys_sendto+0x10/0x10 [ 152.213203][ T8377] ? exc_page_fault+0x71/0xd0 [ 152.213225][ T8377] ? do_user_addr_fault+0xc85/0x1380 [ 152.213248][ T8377] __x64_sys_sendto+0xde/0x100 [ 152.213271][ T8377] do_syscall_64+0xec/0xf80 [ 152.213290][ T8377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.213308][ T8377] ? trace_irq_disable+0x37/0x100 [ 152.213332][ T8377] ? clear_bhb_loop+0x60/0xb0 [ 152.213355][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.213374][ T8377] RIP: 0033:0x7f7f331915dc [ 152.213391][ T8377] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 152.213408][ T8377] RSP: 002b:00007f7f3409fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 152.213429][ T8377] RAX: ffffffffffffffda RBX: 00007f7f3409ffc0 RCX: 00007f7f331915dc [ 152.213444][ T8377] RDX: 0000000000000020 RSI: 00007f7f340a0010 RDI: 0000000000000003 [ 152.213456][ T8377] RBP: 0000000000000000 R08: 00007f7f3409ff14 R09: 000000000000000c [ 152.213469][ T8377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 152.213480][ T8377] R13: 00007f7f3409ff68 R14: 00007f7f340a0010 R15: 0000000000000000 [ 152.213511][ T8377] [ 152.834482][ T8403] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.897228][ T8406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 152.984343][ T8397] xfrm0 speed is unknown, defaulting to 1000 [ 153.005514][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 153.097641][ T8417] openvswitch: netlink: Key 18 has unexpected len 0 expected 2 [ 153.112136][ T5941] IPVS: starting estimator thread 0... [ 153.219464][ T8419] IPVS: using max 26 ests per chain, 62400 per kthread [ 153.385630][ T8428] netlink: 'syz.3.764': attribute type 6 has an invalid length. [ 153.725217][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 153.825703][ T8445] : renamed from veth0_to_bond [ 155.013674][ T8492] tipc: Resetting bearer [ 155.071905][ T8495] netlink: 64 bytes leftover after parsing attributes in process `syz.3.781'. [ 155.143008][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 155.419149][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 155.430744][ T8506] netlink: zone id is out of range [ 155.430853][ T8504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 155.435901][ T8506] netlink: zone id is out of range [ 155.468923][ T8506] netlink: zone id is out of range [ 155.474461][ T8506] netlink: zone id is out of range [ 155.517832][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 155.555033][ T8506] netlink: zone id is out of range [ 155.566512][ T8506] netlink: zone id is out of range [ 155.576283][ T8504] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 155.596574][ T8521] netlink: 128 bytes leftover after parsing attributes in process `syz.1.786'. [ 155.620300][ T8506] netlink: zone id is out of range [ 155.626934][ T8506] netlink: zone id is out of range [ 155.635680][ T8504] bond2 (unregistering): Released all slaves [ 155.673460][ T8506] netlink: zone id is out of range [ 155.779217][ T8526] netlink: 'syz.3.790': attribute type 29 has an invalid length. [ 156.046943][ T8536] xfrm0 speed is unknown, defaulting to 1000 [ 156.080913][ T8535] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 156.100112][ T8540] netlink: 632 bytes leftover after parsing attributes in process `syz.2.796'. [ 156.160181][ T8535] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 156.273879][ T8535] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 156.366715][ T8535] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 156.402163][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 156.552964][ T8555] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.802'. [ 156.562927][ T1027] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 60154 - 0 [ 156.584587][ T1027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 60154 - 0 [ 156.649332][ T1027] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 60154 - 0 [ 156.692122][ T8561] netlink: 'syz.0.805': attribute type 1 has an invalid length. [ 156.705109][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 60154 - 0 [ 156.850075][ T8567] tipc: Enabling of bearer rejected, already enabled [ 156.885819][ T8565] syzkaller0: entered promiscuous mode [ 156.893657][ T8565] syzkaller0: entered allmulticast mode [ 157.431633][ T8603] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 157.449203][ T8596] xt_l2tp: v2 doesn't support IP mode [ 157.474556][ T8594] syzkaller1: entered promiscuous mode [ 157.488160][ T8594] syzkaller1: entered allmulticast mode [ 157.623919][ T8598] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.713838][ T8598] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 157.943471][ T8615] tipc: Started in network mode [ 157.948617][ T8615] tipc: Node identity 6648113968b6, cluster identity 4711 [ 157.956005][ T8615] tipc: Enabled bearer , priority 0 [ 157.963675][ T8615] syzkaller0: entered promiscuous mode [ 157.969370][ T8615] syzkaller0: entered allmulticast mode [ 158.092943][ T8621] xfrm0 speed is unknown, defaulting to 1000 [ 158.636431][ T8647] FAULT_INJECTION: forcing a failure. [ 158.636431][ T8647] name failslab, interval 1, probability 0, space 0, times 0 [ 158.678646][ T8647] CPU: 1 UID: 0 PID: 8647 Comm: syz.4.838 Not tainted syzkaller #0 PREEMPT(full) [ 158.678673][ T8647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.678686][ T8647] Call Trace: [ 158.678694][ T8647] [ 158.678702][ T8647] dump_stack_lvl+0xe8/0x150 [ 158.678756][ T8647] should_fail_ex+0x414/0x560 [ 158.678794][ T8647] should_failslab+0xa8/0x100 [ 158.678820][ T8647] __kvmalloc_node_noprof+0x175/0x920 [ 158.678850][ T8647] ? rhashtable_init_noprof+0x52e/0xa70 [ 158.678870][ T8647] ? rhashtable_init_noprof+0x12d/0xa70 [ 158.678896][ T8647] rhashtable_init_noprof+0x52e/0xa70 [ 158.678924][ T8647] rhltable_init_noprof+0x1e/0x60 [ 158.678947][ T8647] nf_tables_newtable+0x68f/0x1890 [ 158.678997][ T8647] nfnetlink_rcv+0x11d9/0x2590 [ 158.679056][ T8647] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.679094][ T8647] ? ref_tracker_free+0x63a/0x7d0 [ 158.679143][ T8647] ? __netlink_deliver_tap+0x807/0x850 [ 158.679168][ T8647] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.679211][ T8647] netlink_unicast+0x82f/0x9e0 [ 158.679243][ T8647] ? __pfx_netlink_unicast+0x10/0x10 [ 158.679263][ T8647] ? __alloc_skb+0x198/0x3a0 [ 158.679283][ T8647] ? netlink_sendmsg+0x642/0xb30 [ 158.679306][ T8647] ? skb_put+0x11b/0x210 [ 158.679330][ T8647] netlink_sendmsg+0x805/0xb30 [ 158.679365][ T8647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.679394][ T8647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.679421][ T8647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.679440][ T8647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.679466][ T8647] __sock_sendmsg+0x21c/0x270 [ 158.679494][ T8647] ____sys_sendmsg+0x505/0x820 [ 158.679517][ T8647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.679545][ T8647] ? import_iovec+0x74/0xa0 [ 158.679570][ T8647] ___sys_sendmsg+0x21f/0x2a0 [ 158.679592][ T8647] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.679648][ T8647] ? __fget_files+0x2a/0x420 [ 158.679669][ T8647] ? __fget_files+0x3a0/0x420 [ 158.679702][ T8647] __x64_sys_sendmsg+0x19b/0x260 [ 158.679728][ T8647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.679765][ T8647] ? __pfx_ksys_write+0x10/0x10 [ 158.679792][ T8647] do_syscall_64+0xec/0xf80 [ 158.679810][ T8647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.679826][ T8647] ? trace_irq_disable+0x37/0x100 [ 158.679849][ T8647] ? clear_bhb_loop+0x60/0xb0 [ 158.679870][ T8647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.679889][ T8647] RIP: 0033:0x7f7f3318f749 [ 158.679904][ T8647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.679919][ T8647] RSP: 002b:00007f7f340a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.679939][ T8647] RAX: ffffffffffffffda RBX: 00007f7f333e5fa0 RCX: 00007f7f3318f749 [ 158.679952][ T8647] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 158.679964][ T8647] RBP: 00007f7f340a1090 R08: 0000000000000000 R09: 0000000000000000 [ 158.679974][ T8647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.679984][ T8647] R13: 00007f7f333e6038 R14: 00007f7f333e5fa0 R15: 00007ffdccde6fd8 [ 158.680015][ T8647] [ 159.068142][ T9] tipc: Node number set to 251531577 [ 159.314310][ T8672] __nla_validate_parse: 8 callbacks suppressed [ 159.314329][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 159.367239][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'. [ 159.374982][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.845'. [ 159.394286][ T8679] vlan4: entered allmulticast mode [ 159.405744][ T8679] bridge0: port 3(vlan4) entered blocking state [ 159.468585][ T8679] bridge0: port 3(vlan4) entered disabled state [ 159.511277][ T8679] vlan4: entered promiscuous mode [ 159.652763][ T8689] FAULT_INJECTION: forcing a failure. [ 159.652763][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 159.665464][ T8689] CPU: 0 UID: 0 PID: 8689 Comm: syz.1.848 Not tainted syzkaller #0 PREEMPT(full) [ 159.665490][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.665502][ T8689] Call Trace: [ 159.665509][ T8689] [ 159.665518][ T8689] dump_stack_lvl+0xe8/0x150 [ 159.665546][ T8689] should_fail_ex+0x414/0x560 [ 159.665578][ T8689] should_failslab+0xa8/0x100 [ 159.665601][ T8689] kmem_cache_alloc_noprof+0x88/0x710 [ 159.665629][ T8689] ? skb_clone+0x212/0x3a0 [ 159.665656][ T8689] skb_clone+0x212/0x3a0 [ 159.665683][ T8689] bpf_clone_redirect+0x16a/0x4b0 [ 159.665712][ T8689] ? bpf_test_run+0x192/0x7d0 [ 159.665736][ T8689] bpf_prog_e16758452f539c38+0x5f/0x68 [ 159.665757][ T8689] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 159.665786][ T8689] ? arch_stack_walk+0xfc/0x150 [ 159.665816][ T8689] ? ktime_get+0x45/0x200 [ 159.665856][ T8689] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 159.665885][ T8689] ? lockdep_hardirqs_on+0x7b/0x110 [ 159.665904][ T8689] ? ktime_get+0x45/0x200 [ 159.665928][ T8689] ? seqcount_lockdep_reader_access+0xea/0x100 [ 159.665961][ T8689] ? bpf_test_timer_continue+0x10d/0x320 [ 159.665990][ T8689] bpf_test_run+0x313/0x7d0 [ 159.666034][ T8689] ? __pfx_bpf_test_run+0x10/0x10 [ 159.666072][ T8689] ? __kasan_krealloc+0xeb/0x110 [ 159.666094][ T8689] ? eth_type_trans+0x35e/0x6d0 [ 159.666126][ T8689] ? convert___skb_to_skb+0x3d/0x5b0 [ 159.666153][ T8689] bpf_prog_test_run_skb+0xd67/0x1d50 [ 159.666188][ T8689] ? __fget_files+0x2a/0x420 [ 159.666211][ T8689] ? __fget_files+0x3a0/0x420 [ 159.666233][ T8689] ? __fget_files+0x2a/0x420 [ 159.666261][ T8689] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 159.666286][ T8689] bpf_prog_test_run+0x2c7/0x340 [ 159.666317][ T8689] __sys_bpf+0x562/0x860 [ 159.666346][ T8689] ? __pfx___sys_bpf+0x10/0x10 [ 159.666394][ T8689] ? ksys_write+0x22a/0x250 [ 159.666415][ T8689] ? __pfx_ksys_write+0x10/0x10 [ 159.666442][ T8689] __x64_sys_bpf+0x7c/0x90 [ 159.666466][ T8689] do_syscall_64+0xec/0xf80 [ 159.666485][ T8689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.666503][ T8689] ? trace_irq_disable+0x37/0x100 [ 159.666528][ T8689] ? clear_bhb_loop+0x60/0xb0 [ 159.666551][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.666569][ T8689] RIP: 0033:0x7f4c9858f749 [ 159.666585][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.666602][ T8689] RSP: 002b:00007f4c99443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.666624][ T8689] RAX: ffffffffffffffda RBX: 00007f4c987e5fa0 RCX: 00007f4c9858f749 [ 159.666638][ T8689] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 159.666651][ T8689] RBP: 00007f4c99443090 R08: 0000000000000000 R09: 0000000000000000 [ 159.666663][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.666675][ T8689] R13: 00007f4c987e6038 R14: 00007f4c987e5fa0 R15: 00007ffd514d4568 [ 159.666707][ T8689] [ 160.151517][ T8709] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 160.682830][ T8717] syzkaller1: entered promiscuous mode [ 160.695054][ T8717] syzkaller1: entered allmulticast mode [ 161.021824][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 161.053308][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 161.197880][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 161.204291][ T8746] net_ratelimit: 48 callbacks suppressed [ 161.204307][ T8746] netlink: zone id is out of range [ 161.238994][ T8746] netlink: zone id is out of range [ 161.244256][ T8746] netlink: zone id is out of range [ 161.251044][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.864'. [ 161.260340][ T8746] netlink: zone id is out of range [ 161.265587][ T8746] netlink: zone id is out of range [ 161.279257][ T8749] pimreg: entered allmulticast mode [ 161.286231][ T8746] netlink: zone id is out of range [ 161.291930][ T8746] netlink: zone id is out of range [ 161.297129][ T8746] netlink: zone id is out of range [ 161.365253][ T8746] netlink: zone id is out of range [ 161.390387][ T8746] netlink: zone id is out of range [ 161.459916][ T8749] xfrm0 speed is unknown, defaulting to 1000 [ 162.139568][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.878'. [ 162.169626][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.878'. [ 162.970042][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 163.861719][ T8833] syz_tun: entered allmulticast mode [ 163.878575][ T8832] syz_tun: left allmulticast mode [ 164.353599][ T8842] __nla_validate_parse: 3 callbacks suppressed [ 164.353616][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 164.576034][ T8848] vlan0: entered promiscuous mode [ 164.699005][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 164.736333][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 164.799222][ T8852] tipc: Enabled bearer , priority 0 [ 164.996924][ T8866] tipc: Enabling of bearer rejected, failed to enable media [ 165.018763][ T8860] xfrm0 speed is unknown, defaulting to 1000 [ 165.167021][ T8873] FAULT_INJECTION: forcing a failure. [ 165.167021][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.216626][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.0.917 Not tainted syzkaller #0 PREEMPT(full) [ 165.216655][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.216668][ T8873] Call Trace: [ 165.216676][ T8873] [ 165.216685][ T8873] dump_stack_lvl+0xe8/0x150 [ 165.216714][ T8873] should_fail_ex+0x414/0x560 [ 165.216749][ T8873] _copy_to_user+0x31/0xb0 [ 165.216774][ T8873] simple_read_from_buffer+0xe1/0x170 [ 165.216801][ T8873] proc_fail_nth_read+0x1b3/0x220 [ 165.216824][ T8873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.216845][ T8873] ? rw_verify_area+0x2a6/0x4d0 [ 165.216869][ T8873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.216891][ T8873] vfs_read+0x200/0xa30 [ 165.216921][ T8873] ? __pfx_vfs_read+0x10/0x10 [ 165.216936][ T8873] ? __sys_bpf+0x537/0x860 [ 165.216965][ T8873] ? __pfx___sys_bpf+0x10/0x10 [ 165.216988][ T8873] ? kmem_cache_free+0x197/0x620 [ 165.217024][ T8873] ksys_read+0x145/0x250 [ 165.217045][ T8873] ? __pfx_ksys_read+0x10/0x10 [ 165.217074][ T8873] do_syscall_64+0xec/0xf80 [ 165.217094][ T8873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.217112][ T8873] ? trace_irq_disable+0x37/0x100 [ 165.217137][ T8873] ? clear_bhb_loop+0x60/0xb0 [ 165.217160][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.217179][ T8873] RIP: 0033:0x7f555dd8e15c [ 165.217197][ T8873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 165.217214][ T8873] RSP: 002b:00007f555ebc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.217235][ T8873] RAX: ffffffffffffffda RBX: 00007f555dfe5fa0 RCX: 00007f555dd8e15c [ 165.217250][ T8873] RDX: 000000000000000f RSI: 00007f555ebc20a0 RDI: 0000000000000005 [ 165.217263][ T8873] RBP: 00007f555ebc2090 R08: 0000000000000000 R09: 0000000000000000 [ 165.217275][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.217287][ T8873] R13: 00007f555dfe6038 R14: 00007f555dfe5fa0 R15: 00007fff586e8f98 [ 165.217318][ T8873] [ 165.567115][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.918'. [ 165.589581][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.918'. [ 165.934871][ T8894] netlink: 'syz.0.922': attribute type 1 has an invalid length. [ 165.943302][ T8894] netlink: 244 bytes leftover after parsing attributes in process `syz.0.922'. [ 166.153399][ T8905] netlink: 52 bytes leftover after parsing attributes in process `syz.4.927'. [ 166.312528][ T8908] FAULT_INJECTION: forcing a failure. [ 166.312528][ T8908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.338776][ T8908] CPU: 0 UID: 0 PID: 8908 Comm: syz.0.929 Not tainted syzkaller #0 PREEMPT(full) [ 166.338803][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.338814][ T8908] Call Trace: [ 166.338822][ T8908] [ 166.338829][ T8908] dump_stack_lvl+0xe8/0x150 [ 166.338860][ T8908] should_fail_ex+0x414/0x560 [ 166.338895][ T8908] _copy_from_user+0x2d/0xb0 [ 166.338920][ T8908] kstrtouint_from_user+0xc4/0x170 [ 166.338946][ T8908] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 166.338989][ T8908] proc_fail_nth_write+0x88/0x200 [ 166.339011][ T8908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.339038][ T8908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.339060][ T8908] vfs_write+0x27e/0xb30 [ 166.339088][ T8908] ? __pfx_vfs_write+0x10/0x10 [ 166.339108][ T8908] ? __fget_files+0x2a/0x420 [ 166.339135][ T8908] ? __fget_files+0x3a0/0x420 [ 166.339158][ T8908] ? __fget_files+0x2a/0x420 [ 166.339190][ T8908] ksys_write+0x145/0x250 [ 166.339211][ T8908] ? __pfx_ksys_write+0x10/0x10 [ 166.339242][ T8908] do_syscall_64+0xec/0xf80 [ 166.339262][ T8908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.339287][ T8908] ? trace_irq_disable+0x37/0x100 [ 166.339313][ T8908] ? clear_bhb_loop+0x60/0xb0 [ 166.339336][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.339355][ T8908] RIP: 0033:0x7f555dd8e1ff [ 166.339373][ T8908] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.339389][ T8908] RSP: 002b:00007f555ebc2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.339410][ T8908] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f555dd8e1ff [ 166.339424][ T8908] RDX: 0000000000000001 RSI: 00007f555ebc20a0 RDI: 0000000000000004 [ 166.339436][ T8908] RBP: 00007f555ebc2090 R08: 0000000000000000 R09: 0000000000000000 [ 166.339449][ T8908] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 166.339460][ T8908] R13: 00007f555dfe6038 R14: 00007f555dfe5fa0 R15: 00007fff586e8f98 [ 166.339494][ T8908] [ 166.746684][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 166.749572][ T8912] tipc: Enabling of bearer rejected, already enabled [ 166.798974][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 166.951782][ T8922] netlink: 104 bytes leftover after parsing attributes in process `syz.3.933'. [ 167.085134][ T8920] tipc: Resetting bearer [ 167.182321][ T8935] net_ratelimit: 34 callbacks suppressed [ 167.182340][ T8935] openvswitch: netlink: Flow actions attr not present in new flow. [ 167.713032][ T8948] xfrm0 speed is unknown, defaulting to 1000 [ 168.300159][ T8974] netlink: 'syz.3.948': attribute type 21 has an invalid length. [ 168.408882][ T8982] FAULT_INJECTION: forcing a failure. [ 168.408882][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.445856][ T8983] xfrm0 speed is unknown, defaulting to 1000 [ 168.456886][ T8982] CPU: 0 UID: 0 PID: 8982 Comm: syz.2.950 Not tainted syzkaller #0 PREEMPT(full) [ 168.456912][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.456923][ T8982] Call Trace: [ 168.456931][ T8982] [ 168.456939][ T8982] dump_stack_lvl+0xe8/0x150 [ 168.456967][ T8982] should_fail_ex+0x414/0x560 [ 168.456997][ T8982] _copy_from_user+0x2d/0xb0 [ 168.457020][ T8982] __sys_bpf+0x1e3/0x860 [ 168.457046][ T8982] ? __pfx___sys_bpf+0x10/0x10 [ 168.457085][ T8982] ? ksys_write+0x22a/0x250 [ 168.457105][ T8982] ? __pfx_ksys_write+0x10/0x10 [ 168.457129][ T8982] __x64_sys_bpf+0x7c/0x90 [ 168.457153][ T8982] do_syscall_64+0xec/0xf80 [ 168.457172][ T8982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.457190][ T8982] ? trace_irq_disable+0x37/0x100 [ 168.457213][ T8982] ? clear_bhb_loop+0x60/0xb0 [ 168.457235][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.457251][ T8982] RIP: 0033:0x7f4074d8f749 [ 168.457267][ T8982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.457283][ T8982] RSP: 002b:00007f4075b42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.457302][ T8982] RAX: ffffffffffffffda RBX: 00007f4074fe5fa0 RCX: 00007f4074d8f749 [ 168.457317][ T8982] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 168.457329][ T8982] RBP: 00007f4075b42090 R08: 0000000000000000 R09: 0000000000000000 [ 168.457342][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.457354][ T8982] R13: 00007f4074fe6038 R14: 00007f4074fe5fa0 R15: 00007ffc1fa27e28 [ 168.457383][ T8982] [ 168.864883][ T8992] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 169.228263][ T9012] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 169.252803][ T9012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.994862][ T9037] __nla_validate_parse: 5 callbacks suppressed [ 169.994881][ T9037] netlink: 3 bytes leftover after parsing attributes in process `syz.1.961'. [ 170.038370][ T9037] netlink: 3 bytes leftover after parsing attributes in process `syz.1.961'. [ 170.173160][ T9041] xt_l2tp: v2 doesn't support IP mode [ 170.732033][ T9057] xt_bpf: check failed: parse error [ 170.765548][ T9064] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 170.787278][ T9064] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.463613][ T9093] bridge_slave_1: left allmulticast mode [ 171.490813][ T9093] bridge_slave_1: left promiscuous mode [ 171.506427][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.542242][ T9093] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 171.688264][ T9098] tipc: Enabling of bearer rejected, already enabled [ 172.099694][ T9116] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 172.107820][ T9116] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.176116][ T9121] tipc: Enabling of bearer rejected, already enabled [ 172.201165][ T9120] syzkaller1: entered promiscuous mode [ 172.206748][ T9120] syzkaller1: entered allmulticast mode [ 172.234167][ T9121] bridge_slave_0: entered promiscuous mode [ 172.266778][ T9114] netlink: 112 bytes leftover after parsing attributes in process `syz.4.978'. [ 172.281839][ T9121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.977'. [ 172.340206][ T9127] xt_l2tp: v2 doesn't support IP mode [ 172.452404][ T9132] batadv_slave_0: entered promiscuous mode [ 172.631823][ T9136] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.718186][ T9141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.983'. [ 172.816222][ T9136] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.949606][ T9136] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.993345][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 173.106427][ T9159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.117236][ T5845] udevd[5845]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.173341][ T9136] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.216798][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.987'. [ 173.297138][ T9173] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 173.311451][ T9173] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.346250][ T9163] xfrm0 speed is unknown, defaulting to 1000 [ 173.604856][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.663124][ T1165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.733757][ T1027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.839637][ T1165] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.164451][ T9197] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 174.874785][ T9215] gtp0: entered promiscuous mode [ 174.892152][ T9215] gtp0: entered allmulticast mode [ 175.341214][ T9236] xt_l2tp: v2 doesn't support IP mode [ 175.553948][ T9241] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 175.583078][ T9241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.817926][ T9249] xfrm0 speed is unknown, defaulting to 1000 [ 175.981881][ T9257] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.210464][ T9272] netlink: 'syz.2.1009': attribute type 3 has an invalid length. [ 176.230279][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'. [ 176.234753][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'. [ 176.480793][ T9280] tipc: Enabled bearer , priority 10 [ 176.608784][ T9289] xfrm0 speed is unknown, defaulting to 1000 [ 176.624154][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 176.662891][ T9292] netlink: 'syz.0.1013': attribute type 64 has an invalid length. [ 176.686979][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 176.962102][ T9298] tipc: Resetting bearer [ 177.032495][ T9298] tipc: Resetting bearer [ 177.050495][ T9298] syzkaller0: left promiscuous mode [ 177.055903][ T9298] syzkaller0: left allmulticast mode [ 177.072868][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 177.133095][ T9298] vlan2: left allmulticast mode [ 177.526284][ T9309] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 177.559588][ T9309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.748010][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 177.789368][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1016'. [ 177.958267][ T9318] xt_l2tp: v2 doesn't support IP mode [ 178.309582][ T9322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 178.419827][ T9323] xfrm0 speed is unknown, defaulting to 1000 [ 178.997144][ T9345] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 179.015953][ T9345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.601237][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 179.734556][ T9373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1031'. [ 179.792561][ T9374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1031'. [ 179.950248][ T9374] xfrm0 speed is unknown, defaulting to 1000 [ 179.956227][ T9379] FAULT_INJECTION: forcing a failure. [ 179.956227][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.957039][ T9379] [ 179.957048][ T9379] ====================================================== [ 179.957056][ T9379] WARNING: possible circular locking dependency detected [ 179.957070][ T9379] syzkaller #0 Not tainted [ 179.957079][ T9379] ------------------------------------------------------ [ 179.957086][ T9379] syz.4.1033/9379 is trying to acquire lock: [ 179.957096][ T9379] ffffffff8df35920 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x2c5/0x550 [ 179.957153][ T9379] [ 179.957153][ T9379] but task is already holding lock: [ 179.957159][ T9379] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 179.957198][ T9379] [ 179.957198][ T9379] which lock already depends on the new lock. [ 179.957198][ T9379] [ 179.957205][ T9379] [ 179.957205][ T9379] the existing dependency chain (in reverse order) is: [ 179.957212][ T9379] [ 179.957212][ T9379] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 179.957235][ T9379] _raw_spin_lock_nested+0x32/0x50 [ 179.957253][ T9379] raw_spin_rq_lock_nested+0x2a/0x140 [ 179.957269][ T9379] task_rq_lock+0xbc/0x470 [ 179.957285][ T9379] cgroup_move_task+0x92/0x2a0 [ 179.957305][ T9379] css_set_move_task+0x658/0x9e0 [ 179.957322][ T9379] cgroup_post_fork+0x1ef/0x7a0 [ 179.957338][ T9379] copy_process+0x3614/0x3950 [ 179.957356][ T9379] kernel_clone+0x21e/0x820 [ 179.957373][ T9379] user_mode_thread+0xdd/0x140 [ 179.957392][ T9379] rest_init+0x23/0x300 [ 179.957411][ T9379] start_kernel+0x381/0x3d0 [ 179.957437][ T9379] x86_64_start_reservations+0x24/0x30 [ 179.957458][ T9379] x86_64_start_kernel+0x143/0x1c0 [ 179.957478][ T9379] common_startup_64+0x13e/0x147 [ 179.957499][ T9379] [ 179.957499][ T9379] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 179.957522][ T9379] _raw_spin_lock_irqsave+0x40/0x60 [ 179.957547][ T9379] try_to_wake_up+0x67/0x12b0 [ 179.957568][ T9379] __wake_up_common_lock+0x137/0x1f0 [ 179.957592][ T9379] tty_port_default_wakeup+0xfb/0x170 [ 179.957615][ T9379] serial8250_tx_chars+0x72e/0x970 [ 179.957641][ T9379] serial8250_handle_irq+0x633/0xbb0 [ 179.957666][ T9379] serial8250_default_handle_irq+0xbf/0x200 [ 179.957685][ T9379] serial8250_interrupt+0x8d/0x180 [ 179.957707][ T9379] __handle_irq_event_percpu+0x217/0x970 [ 179.957731][ T9379] handle_irq_event+0x8b/0x1e0 [ 179.957753][ T9379] handle_edge_irq+0x23b/0xa10 [ 179.957774][ T9379] __common_interrupt+0x141/0x1f0 [ 179.957797][ T9379] common_interrupt+0xb6/0xe0 [ 179.957818][ T9379] asm_common_interrupt+0x26/0x40 [ 179.957834][ T9379] lock_release+0x18/0x3b0 [ 179.957850][ T9379] unwind_next_frame+0x1ab1/0x23d0 [ 179.957869][ T9379] arch_stack_walk+0x11c/0x150 [ 179.957887][ T9379] stack_trace_save+0x9c/0xe0 [ 179.957911][ T9379] kasan_save_track+0x3e/0x80 [ 179.957928][ T9379] kasan_save_free_info+0x46/0x50 [ 179.957951][ T9379] __kasan_slab_free+0x5c/0x80 [ 179.957968][ T9379] kfree+0x1c0/0x660 [ 179.957991][ T9379] tomoyo_realpath_from_path+0x598/0x5d0 [ 179.958014][ T9379] tomoyo_path_number_perm+0x1e8/0x5a0 [ 179.958031][ T9379] security_file_ioctl+0xcb/0x2d0 [ 179.958046][ T9379] __se_sys_ioctl+0x47/0x170 [ 179.958061][ T9379] do_syscall_64+0xec/0xf80 [ 179.958077][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.958092][ T9379] [ 179.958092][ T9379] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 179.958116][ T9379] _raw_spin_lock_irqsave+0x40/0x60 [ 179.958140][ T9379] __wake_up_common_lock+0x2f/0x1f0 [ 179.958164][ T9379] tty_port_default_wakeup+0xfb/0x170 [ 179.958181][ T9379] serial8250_tx_chars+0x72e/0x970 [ 179.958205][ T9379] serial8250_handle_irq+0x633/0xbb0 [ 179.958230][ T9379] serial8250_default_handle_irq+0xbf/0x200 [ 179.958248][ T9379] serial8250_interrupt+0x8d/0x180 [ 179.958271][ T9379] __handle_irq_event_percpu+0x217/0x970 [ 179.958294][ T9379] handle_irq_event+0x8b/0x1e0 [ 179.958316][ T9379] handle_edge_irq+0x23b/0xa10 [ 179.958336][ T9379] __common_interrupt+0x141/0x1f0 [ 179.958359][ T9379] common_interrupt+0xb6/0xe0 [ 179.958378][ T9379] asm_common_interrupt+0x26/0x40 [ 179.958394][ T9379] __schedule+0x14cd/0x4fd0 [ 179.958418][ T9379] schedule+0x165/0x360 [ 179.958431][ T9379] worker_thread+0xa82/0xda0 [ 179.958447][ T9379] kthread+0x711/0x8a0 [ 179.958467][ T9379] ret_from_fork+0x510/0xa50 [ 179.958481][ T9379] ret_from_fork_asm+0x1a/0x30 [ 179.958503][ T9379] [ 179.958503][ T9379] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 179.958526][ T9379] _raw_spin_lock_irqsave+0x40/0x60 [ 179.958550][ T9379] serial8250_console_write+0x155/0x1b60 [ 179.958567][ T9379] console_flush_all+0x713/0xb00 [ 179.958590][ T9379] console_unlock+0xbb/0x190 [ 179.958608][ T9379] vprintk_emit+0x47b/0x550 [ 179.958632][ T9379] _printk+0xcf/0x120 [ 179.958655][ T9379] register_console+0xa8b/0xf90 [ 179.958677][ T9379] univ8250_console_init+0x3a/0x70 [ 179.958699][ T9379] console_init+0xfc/0x3f0 [ 179.958718][ T9379] start_kernel+0x227/0x3d0 [ 179.958742][ T9379] x86_64_start_reservations+0x24/0x30 [ 179.958763][ T9379] x86_64_start_kernel+0x143/0x1c0 [ 179.958783][ T9379] common_startup_64+0x13e/0x147 [ 179.958803][ T9379] [ 179.958803][ T9379] -> #0 (console_owner){-.-.}-{0:0}: [ 179.958826][ T9379] __lock_acquire+0x15a6/0x2cf0 [ 179.958842][ T9379] lock_acquire+0x107/0x340 [ 179.958856][ T9379] vprintk_emit+0x2e1/0x550 [ 179.958875][ T9379] _printk+0xcf/0x120 [ 179.958897][ T9379] should_fail_ex+0x3f5/0x560 [ 179.958920][ T9379] strncpy_from_user+0x36/0x2c0 [ 179.958943][ T9379] strncpy_from_user_nofault+0x72/0x150 [ 179.958963][ T9379] bpf_probe_read_compat_str+0xe2/0x180 [ 179.958980][ T9379] bpf_prog_d359f1fa6cfa10c1+0x78/0x80 [ 179.958994][ T9379] bpf_trace_run2+0x284/0x4c0 [ 179.959015][ T9379] __bpf_trace_tlb_flush+0xf5/0x150 [ 179.959037][ T9379] trace_tlb_flush+0xff/0x120 [ 179.959059][ T9379] switch_mm_irqs_off+0x4cc/0x700 [ 179.959081][ T9379] __schedule+0xfdb/0x4fd0 [ 179.959105][ T9379] preempt_schedule_common+0x83/0xd0 [ 179.959119][ T9379] preempt_schedule_thunk+0x16/0x30 [ 179.959133][ T9379] __local_bh_enable_ip+0xe1/0x130 [ 179.959149][ T9379] __ip6_del_rt+0xa1/0x180 [ 179.959168][ T9379] ip6_del_rt+0xb3/0x100 [ 179.959181][ T9379] __ipv6_ifa_notify+0x5b7/0xaa0 [ 179.959200][ T9379] ipv6_del_addr+0x678/0x8a0 [ 179.959215][ T9379] inet6_addr_del+0x473/0x640 [ 179.959230][ T9379] addrconf_del_ifaddr+0x113/0x160 [ 179.959245][ T9379] inet6_ioctl+0x10f/0x280 [ 179.959269][ T9379] sock_do_ioctl+0xdc/0x300 [ 179.959292][ T9379] sock_ioctl+0x576/0x790 [ 179.959311][ T9379] __se_sys_ioctl+0xfc/0x170 [ 179.959325][ T9379] do_syscall_64+0xec/0xf80 [ 179.959342][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.959358][ T9379] [ 179.959358][ T9379] other info that might help us debug this: [ 179.959358][ T9379] [ 179.959364][ T9379] Chain exists of: [ 179.959364][ T9379] console_owner --> &p->pi_lock --> &rq->__lock [ 179.959364][ T9379] [ 179.959394][ T9379] Possible unsafe locking scenario: [ 179.959394][ T9379] [ 179.959400][ T9379] CPU0 CPU1 [ 179.959406][ T9379] ---- ---- [ 179.959412][ T9379] lock(&rq->__lock); [ 179.959423][ T9379] lock(&p->pi_lock); [ 179.959437][ T9379] lock(&rq->__lock); [ 179.959451][ T9379] lock(console_owner); [ 179.959463][ T9379] [ 179.959463][ T9379] *** DEADLOCK *** [ 179.959463][ T9379] [ 179.959468][ T9379] 3 locks held by syz.4.1033/9379: [ 179.959479][ T9379] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_del_ifaddr+0xfd/0x160 [ 179.959522][ T9379] #1: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 179.959567][ T9379] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4c0 [ 179.959621][ T9379] [ 179.959621][ T9379] stack backtrace: [ 179.959631][ T9379] CPU: 1 UID: 0 PID: 9379 Comm: syz.4.1033 Not tainted syzkaller #0 PREEMPT(full) [ 179.959653][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.959669][ T9379] Call Trace: [ 179.959676][ T9379] [ 179.959683][ T9379] dump_stack_lvl+0xe8/0x150 [ 179.959707][ T9379] print_circular_bug+0x2e2/0x300 [ 179.959729][ T9379] check_noncircular+0x12e/0x150 [ 179.959754][ T9379] __lock_acquire+0x15a6/0x2cf0 [ 179.959782][ T9379] ? vprintk_emit+0x2c5/0x550 [ 179.959803][ T9379] lock_acquire+0x107/0x340 [ 179.959819][ T9379] ? vprintk_emit+0x2c5/0x550 [ 179.959843][ T9379] ? do_raw_spin_unlock+0x122/0x240 [ 179.959867][ T9379] ? vprintk_emit+0x2c5/0x550 [ 179.959889][ T9379] vprintk_emit+0x2e1/0x550 [ 179.959909][ T9379] ? vprintk_emit+0x2c5/0x550 [ 179.959931][ T9379] ? __pfx_vprintk_emit+0x10/0x10 [ 179.959957][ T9379] _printk+0xcf/0x120 [ 179.959984][ T9379] ? __pfx__printk+0x10/0x10 [ 179.960009][ T9379] ? ___ratelimit+0x5a0/0x900 [ 179.960034][ T9379] ? kasan_save_track+0x4f/0x80 [ 179.960052][ T9379] ? kasan_save_track+0x3e/0x80 [ 179.960071][ T9379] should_fail_ex+0x3f5/0x560 [ 179.960098][ T9379] strncpy_from_user+0x36/0x2c0 [ 179.960122][ T9379] ? bpf_trace_run2+0x186/0x4c0 [ 179.960144][ T9379] ? lock_acquire+0x107/0x340 [ 179.960162][ T9379] strncpy_from_user_nofault+0x72/0x150 [ 179.960184][ T9379] bpf_probe_read_compat_str+0xe2/0x180 [ 179.960205][ T9379] bpf_prog_d359f1fa6cfa10c1+0x78/0x80 [ 179.960220][ T9379] bpf_trace_run2+0x284/0x4c0 [ 179.960242][ T9379] ? bpf_trace_run2+0x186/0x4c0 [ 179.960266][ T9379] ? __pfx_bpf_trace_run2+0x10/0x10 [ 179.960291][ T9379] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 179.960317][ T9379] __bpf_trace_tlb_flush+0xf5/0x150 [ 179.960340][ T9379] ? sched_clock+0x3f/0x60 [ 179.960364][ T9379] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 179.960392][ T9379] ? __schedule+0x249b/0x4fd0 [ 179.960421][ T9379] trace_tlb_flush+0xff/0x120 [ 179.960445][ T9379] switch_mm_irqs_off+0x4cc/0x700 [ 179.960472][ T9379] __schedule+0xfdb/0x4fd0 [ 179.960501][ T9379] ? nlmsg_notify+0x14a/0x1a0 [ 179.960523][ T9379] ? fib6_del+0x146c/0x1560 [ 179.960548][ T9379] ? __pfx___schedule+0x10/0x10 [ 179.960577][ T9379] ? __pfx_fib6_del+0x10/0x10 [ 179.960597][ T9379] ? preempt_schedule_thunk+0x16/0x30 [ 179.960618][ T9379] preempt_schedule_common+0x83/0xd0 [ 179.960635][ T9379] ? __ip6_del_rt+0xa1/0x180 [ 179.960654][ T9379] preempt_schedule_thunk+0x16/0x30 [ 179.960673][ T9379] __local_bh_enable_ip+0xe1/0x130 [ 179.960691][ T9379] __ip6_del_rt+0xa1/0x180 [ 179.960712][ T9379] ip6_del_rt+0xb3/0x100 [ 179.960727][ T9379] ? __pfx_ip6_del_rt+0x10/0x10 [ 179.960742][ T9379] ? __build_skb_around+0x22d/0x3c0 [ 179.960762][ T9379] ? nlmsg_notify+0xf0/0x1a0 [ 179.960783][ T9379] ? nlmsg_notify+0x14a/0x1a0 [ 179.960804][ T9379] __ipv6_ifa_notify+0x5b7/0xaa0 [ 179.960829][ T9379] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 179.960852][ T9379] ? __timer_delete+0x5d/0x390 [ 179.960868][ T9379] ? rcu_is_watching+0x15/0xb0 [ 179.960891][ T9379] ? work_grab_pending+0x3d6/0x8e0 [ 179.960913][ T9379] ? __cancel_work+0x17f/0x230 [ 179.960933][ T9379] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.960951][ T9379] ? __cancel_work+0x1dd/0x230 [ 179.960973][ T9379] ipv6_del_addr+0x678/0x8a0 [ 179.960992][ T9379] ? __local_bh_enable_ip+0xd0/0x130 [ 179.961011][ T9379] inet6_addr_del+0x473/0x640 [ 179.961033][ T9379] addrconf_del_ifaddr+0x113/0x160 [ 179.961050][ T9379] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 179.961068][ T9379] ? kasan_quarantine_put+0xbb/0x1f0 [ 179.961090][ T9379] inet6_ioctl+0x10f/0x280 [ 179.961115][ T9379] ? __pfx_inet6_ioctl+0x10/0x10 [ 179.961141][ T9379] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 179.961161][ T9379] ? do_vfs_ioctl+0xbe8/0x1430 [ 179.961178][ T9379] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 179.961198][ T9379] sock_do_ioctl+0xdc/0x300 [ 179.961222][ T9379] ? __pfx_sock_do_ioctl+0x10/0x10 [ 179.961245][ T9379] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 179.961271][ T9379] sock_ioctl+0x576/0x790 [ 179.961295][ T9379] ? __pfx_sock_ioctl+0x10/0x10 [ 179.961318][ T9379] ? __fget_files+0x2a/0x420 [ 179.961340][ T9379] ? __fget_files+0x3a0/0x420 [ 179.961361][ T9379] ? __fget_files+0x2a/0x420 [ 179.961383][ T9379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.961403][ T9379] ? __pfx_sock_ioctl+0x10/0x10 [ 179.961426][ T9379] __se_sys_ioctl+0xfc/0x170 [ 179.961443][ T9379] do_syscall_64+0xec/0xf80 [ 179.961460][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.961477][ T9379] ? trace_irq_disable+0x37/0x100 [ 179.961501][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 179.961520][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.961537][ T9379] RIP: 0033:0x7f7f3318f749 [ 179.961552][ T9379] Code: Unable to access opcode bytes at 0x7f7f3318f71f. [ 179.961561][ T9379] RSP: 002b:00007f7f340a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.961579][ T9379] RAX: ffffffffffffffda RBX: 00007f7f333e5fa0 RCX: 00007f7f3318f749 [ 179.961594][ T9379] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 179.961606][ T9379] RBP: 00007f7f340a1090 R08: 0000000000000000 R09: 0000000000000000 [ 179.961622][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.961634][ T9379] R13: 00007f7f333e6038 R14: 00007f7f333e5fa0 R15: 00007ffdccde6fd8 [ 179.961655][ T9379] [ 181.253494][ T9379] CPU: 1 UID: 0 PID: 9379 Comm: syz.4.1033 Not tainted syzkaller #0 PREEMPT(full) [ 181.253509][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.253517][ T9379] Call Trace: [ 181.253523][ T9379] [ 181.253529][ T9379] dump_stack_lvl+0xe8/0x150 [ 181.253546][ T9379] should_fail_ex+0x414/0x560 [ 181.253563][ T9379] strncpy_from_user+0x36/0x2c0 [ 181.253578][ T9379] ? bpf_trace_run2+0x186/0x4c0 [ 181.253591][ T9379] ? lock_acquire+0x107/0x340 [ 181.253601][ T9379] strncpy_from_user_nofault+0x72/0x150 [ 181.253614][ T9379] bpf_probe_read_compat_str+0xe2/0x180 [ 181.253626][ T9379] bpf_prog_d359f1fa6cfa10c1+0x78/0x80 [ 181.253635][ T9379] bpf_trace_run2+0x284/0x4c0 [ 181.253648][ T9379] ? bpf_trace_run2+0x186/0x4c0 [ 181.253661][ T9379] ? __pfx_bpf_trace_run2+0x10/0x10 [ 181.253674][ T9379] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 181.253689][ T9379] __bpf_trace_tlb_flush+0xf5/0x150 [ 181.253702][ T9379] ? sched_clock+0x3f/0x60 [ 181.253717][ T9379] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 181.253732][ T9379] ? __schedule+0x249b/0x4fd0 [ 181.253749][ T9379] trace_tlb_flush+0xff/0x120 [ 181.253763][ T9379] switch_mm_irqs_off+0x4cc/0x700 [ 181.253778][ T9379] __schedule+0xfdb/0x4fd0 [ 181.253794][ T9379] ? nlmsg_notify+0x14a/0x1a0 [ 181.253807][ T9379] ? fib6_del+0x146c/0x1560 [ 181.253821][ T9379] ? __pfx___schedule+0x10/0x10 [ 181.253837][ T9379] ? __pfx_fib6_del+0x10/0x10 [ 181.253848][ T9379] ? preempt_schedule_thunk+0x16/0x30 [ 181.253857][ T9379] preempt_schedule_common+0x83/0xd0 [ 181.253867][ T9379] ? __ip6_del_rt+0xa1/0x180 [ 181.253878][ T9379] preempt_schedule_thunk+0x16/0x30 [ 181.253888][ T9379] __local_bh_enable_ip+0xe1/0x130 [ 181.253899][ T9379] __ip6_del_rt+0xa1/0x180 [ 181.253911][ T9379] ip6_del_rt+0xb3/0x100 [ 181.253922][ T9379] ? __pfx_ip6_del_rt+0x10/0x10 [ 181.253930][ T9379] ? __build_skb_around+0x22d/0x3c0 [ 181.253944][ T9379] ? nlmsg_notify+0xf0/0x1a0 [ 181.253956][ T9379] ? nlmsg_notify+0x14a/0x1a0 [ 181.253968][ T9379] __ipv6_ifa_notify+0x5b7/0xaa0 [ 181.253982][ T9379] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 181.253994][ T9379] ? __timer_delete+0x5d/0x390 [ 181.254003][ T9379] ? rcu_is_watching+0x15/0xb0 [ 181.254015][ T9379] ? work_grab_pending+0x3d6/0x8e0 [ 181.254028][ T9379] ? __cancel_work+0x17f/0x230 [ 181.254039][ T9379] ? lockdep_hardirqs_on+0x7b/0x110 [ 181.254049][ T9379] ? __cancel_work+0x1dd/0x230 [ 181.254061][ T9379] ipv6_del_addr+0x678/0x8a0 [ 181.254071][ T9379] ? __local_bh_enable_ip+0xd0/0x130 [ 181.254081][ T9379] inet6_addr_del+0x473/0x640 [ 181.254093][ T9379] addrconf_del_ifaddr+0x113/0x160 [ 181.254102][ T9379] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 181.254112][ T9379] ? kasan_quarantine_put+0xbb/0x1f0 [ 181.254124][ T9379] inet6_ioctl+0x10f/0x280 [ 181.254139][ T9379] ? __pfx_inet6_ioctl+0x10/0x10 [ 181.254152][ T9379] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 181.254164][ T9379] ? do_vfs_ioctl+0xbe8/0x1430 [ 181.254174][ T9379] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.254183][ T9379] sock_do_ioctl+0xdc/0x300 [ 181.254198][ T9379] ? __pfx_sock_do_ioctl+0x10/0x10 [ 181.254211][ T9379] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 181.254224][ T9379] sock_ioctl+0x576/0x790 [ 181.254238][ T9379] ? __pfx_sock_ioctl+0x10/0x10 [ 181.254251][ T9379] ? __fget_files+0x2a/0x420 [ 181.254263][ T9379] ? __fget_files+0x3a0/0x420 [ 181.254274][ T9379] ? __fget_files+0x2a/0x420 [ 181.254291][ T9379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 181.254303][ T9379] ? __pfx_sock_ioctl+0x10/0x10 [ 181.254315][ T9379] __se_sys_ioctl+0xfc/0x170 [ 181.254325][ T9379] do_syscall_64+0xec/0xf80 [ 181.254335][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.254345][ T9379] ? trace_irq_disable+0x37/0x100 [ 181.254359][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 181.254369][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.254379][ T9379] RIP: 0033:0x7f7f3318f749 [ 181.254388][ T9379] Code: Unable to access opcode bytes at 0x7f7f3318f71f. [ 181.254394][ T9379] RSP: 002b:00007f7f340a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.254406][ T9379] RAX: ffffffffffffffda RBX: 00007f7f333e5fa0 RCX: 00007f7f3318f749 [ 181.254414][ T9379] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 181.254421][ T9379] RBP: 00007f7f340a1090 R08: 0000000000000000 R09: 0000000000000000 [ 181.254427][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.254433][ T9379] R13: 00007f7f333e6038 R14: 00007f7f333e5fa0 R15: 00007ffdccde6fd8 [ 181.254444][ T9379]