last executing test programs: 4m36.882640308s ago: executing program 3 (id=1727): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x7) 4m36.660108887s ago: executing program 3 (id=1730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="20008bd9c062587bc763f9e35a4d7684fb5a0060", @ANYRES16=r4, @ANYBLOB="07062bbd7000ffdbdf25270000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004850}, 0x8000812) 4m36.382018409s ago: executing program 3 (id=1732): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@deltfilter={0x988, 0x2d, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0x9}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x958, 0x2, [@TCA_BASIC_EMATCHES={0x84, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x100}, {0x2, 0x9, 0x6, 0x5, 0x7, 0x1}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x9, 0xc}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7}, {0xf, 0x2, 0x0, 'vl'}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x2}, {0xffffffffffffffff, 0x6, 0x4}}}, @TCF_EM_CONTAINER={0x20, 0x3, 0x0, 0x0, {{0xf, 0x0, 0x7}, "6bc8b720cfe353cc8bc2ee6e5e01cd5f1e"}}]}]}, @TCA_BASIC_ACT={0x8d0, 0x3, [@m_nat={0xdc, 0x1c, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xf, 0x6, 0x80000001, 0x3}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x5, 0x3, 0x4, 0x1}, @private=0xa010102, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xf2, 0x3, 0x80000001, 0x12}, @private=0xa010101, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0xe, 0x1, 0x8001, 0x80000000}, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffffff}}]}, {0x12, 0x6, "9888cc02b413cb50fbde14c605a5"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x128, 0x1e, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfff, 0x1, 0x10000000, 0x2, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x200, 0x0, 0x9, 0x1000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x4}}]}, {0xb1, 0x6, "15dbeacd222ef7a635988387303806fc9aabda70733652bcf7a49f31fc0034c21ffcd893583f44e177557565055be98d5ce9e783db8eb4912bb12beaf31691638720b56c2878eaa01f600233d4364b325f13bcc9f2eca93b4140f990b6c820e22a6fe1e16bc9f4829c7e8d730c3266f2e573234e1274623db4f7c6eee1d88858563b12dd798607c7deb61a11e3533c322e628269eb673a31cc0f2afe92168005ba96f351c2dc7c98352b4f737c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x128, 0x18, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0xad, 0x6, "f9caa95bc3ae8630afa97e602f9c0c9587efa5db8fbab18f70534737a124ef3dcae769ccb9871d7f4724efd0fccbaf3d55f6fc3becf25af8fbabd948524619d4274d4385adba8e8c84bc0bc05a198bc1b2c20798460519d041d9d9e741552366481d2c77c399ee7b77f19bf56f25596c4a5863e27c51e174e261844570e312c6bb8b3f76b445b709118c27a56929c992d51c2f01b02a9215b1e9984787bff872af297904f9d54d372a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x5a0, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x574, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x988}, 0x1, 0x0, 0x0, 0x4}, 0x80) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="30000000001100000000000007000000070b070000000000000000441409"], 0x30}, 0x0) 4m36.300911937s ago: executing program 3 (id=1733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x11, 0x2, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x3, 0x1, 0x1}}, 0xfffffe24, 0x0, 0x0, 0x0, 0x0, 0x20004851}, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80800) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x4000) accept4(r5, 0x0, 0x0, 0x400000000000000) 4m35.270868104s ago: executing program 3 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x20, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0c00990001fcffff2f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r12, 0x0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m35.20189753s ago: executing program 4 (id=1741): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xb0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@mcast2, @private1, @mcast1, 0xffffffff, 0xff, 0x3ff, 0x100, 0x100000000, 0x80000, r2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(r6, 0x1) write(r6, 0x0, 0x0) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m31.910682305s ago: executing program 4 (id=1753): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xb0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@mcast2, @private1, @mcast1, 0xffffffff, 0xff, 0x3ff, 0x100, 0x100000000, 0x80000, r2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x5, @l2={'eth', 0x3a, 'pim6reg\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x800) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m31.707013465s ago: executing program 2 (id=1754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000300)="bad330fb72e7a5", 0x7, 0x40, &(0x7f00000001c0)={0x11, 0x12, r6, 0x1, 0xd8, 0x6, @random="105951045ff3"}, 0x14) 4m31.682856416s ago: executing program 0 (id=1755): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10000}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r3, &(0x7f00000001c0), 0x20000000}, 0x20) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYBLOB="01002db9700000000000100000001800018014000200776c616e310000000000000000000000080007000000000008000600"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106620000000000000180000000000000000000000000000009500000000000000360a02000000ff00180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1c}, 0x94) 4m31.545065591s ago: executing program 4 (id=1756): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x53, &(0x7f00000002c0)={0x0, 0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x25, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000080000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000030301040000000000000000000000000c000200ffffffff000000030c000200fffffffc000100000c000200fffffffefffffffc730bf969aaf399ec2b5a000054778b6c1287f2287745204a357d4be57d843f6ec62580b6e5af0bcb1ff6"], 0x38}}, 0x8004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000080), 0x0}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) socket$inet(0xa, 0x801, 0x84) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xb, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) 4m31.480546113s ago: executing program 0 (id=1757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 4m31.288458431s ago: executing program 3 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c000000000000000a0000040900010073797a31000000000900020073797a3100000000200003801c000080140007800c000100636f756e746572000400028004000180140000001100010000000000000000000300000a"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffea0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x1e, 0x1, 0xfffffffd, 0x7ffffe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffffffffffff}, @FRA_FLOW={0x8, 0xb, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000051000000400000085000000720000001800000000100000000000000000000095000000000000009500000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r4, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000006140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='4V', 0x2}], 0x1}}], 0x1, 0x2400c0c5) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002200)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="57aaaf3e23c8217b75643a23ad7088d03070ffa08c5020c510062c9325e47185e54995c00cc35e9ee018ccbfe85778d7b3f8e8d5d6e441cf51cda018980f1e61fd8029ace2b3752a441cb6148530f73692bde0434e6d94aa3caf3fb85722509a7b9ec5011029847af4e59d699acb27ce6ab23533e27619cd42c11e"], 0x1104}, 0x1, 0x0, 0x0, 0x8040}, 0x4044080) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f54080006"], 0x60}}, 0xc000) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000000)={0x1d, r11, 0x3, {}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x0, 0x7, 0x8, @private0, @mcast1, 0x40, 0xf801, 0xc134, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000500)={@loopback, @private0, @loopback, 0x7ff, 0x48, 0x4, 0x500, 0xb3c, 0x10, r12}) 4m31.164208514s ago: executing program 0 (id=1761): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000100)={'gre0\x00', 0xf9bf}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000002c0)=""/77, &(0x7f0000000340)=0x18) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=""/153, &(0x7f0000000280)=0x99) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) 4m30.533426763s ago: executing program 1 (id=1763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x680002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200400, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000200)=0x3ff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 4m30.506646348s ago: executing program 2 (id=1764): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71184e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafbe863ca162afbdb9ceacc04d25983c69fa21c815735a1597b3eb59cb760d833def78e56a9", 0x33}, {&(0x7f0000000100)="f15e327d935bdfeb", 0x8}], 0x2) 4m30.371146569s ago: executing program 4 (id=1765): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20040080) socket(0x10, 0x803, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$alg(0x26, 0x5, 0x0) listen(r6, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{0x0}], 0x1) 4m30.198976361s ago: executing program 0 (id=1766): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xb0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@mcast2, @private1, @mcast1, 0xffffffff, 0xff, 0x3ff, 0x100, 0x100000000, 0x80000, r2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x5, @l2={'eth', 0x3a, 'pim6reg\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x800) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m30.079700288s ago: executing program 4 (id=1767): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x5dc) 4m30.049793344s ago: executing program 1 (id=1768): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 4m29.889142454s ago: executing program 4 (id=1769): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x61a400, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x1, 0x1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000089c8e3a7bffb93db0900000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15, @ANYRES64=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) close(0x4) 4m28.09807345s ago: executing program 2 (id=1770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x4, 0x6) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}, 0x18, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x4000040) bind$packet(r1, &(0x7f0000000e00)={0x11, 0x10, r2, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@getchain={0x34, 0x11, 0x1, 0xffff7ffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0x4}, {0xd, 0x10}, {0x9, 0xa}}, [{0x8}, {0x8, 0xb, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 4m28.046382331s ago: executing program 0 (id=1771): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macvlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x4000004) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x48}}, 0x4020000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000400)=0x14) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r5, 0x700, 0x1f866, 0x3, 0x8d3b0, {{0x19, 0x4, 0x2, 0x8, 0x64, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @broadcast, {[@generic={0x83, 0x12, "dda352fc08dee49936e69b559a8f0c4c"}, @generic={0x88, 0xb, "7eb5c1d3c96b1daffe"}, @timestamp_addr={0x44, 0x1c, 0xf1, 0x1, 0xe, [{@multicast1, 0x80000000}, {@remote}, {@empty, 0xa3}]}, @noop, @timestamp_addr={0x44, 0x14, 0x74, 0x1, 0x9, [{@private=0xa010102, 0xde0}, {@loopback, 0x1bc2b463}]}]}}}}}) 4m27.891024059s ago: executing program 1 (id=1772): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f00000001c0)=0x30) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) pread64(r2, 0x0, 0x0, 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) readv(r9, &(0x7f0000000840)=[{&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f00000000c0)}, {&(0x7f0000000780)=""/174, 0xae}, {&(0x7f0000000980)=""/185, 0xb9}], 0x5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r3, &(0x7f0000000380)="dcbff04db41806fef18536e818337d601376cd017f85b87c5dd881065b915024d29d40e8c524dc7e16479eef78f2d85ee567a573ae643920083f858b6e2a", &(0x7f0000000a40)=""/113}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x5, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f000f01001003ebf578b700"], 0x10) 4m27.482149338s ago: executing program 2 (id=1773): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xedc2, 0x4}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x52, 0x4, 0x6}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) bind$can_j1939(r4, &(0x7f0000001180)={0x1d, r5, 0x2, {0x0, 0xff, 0x1}}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x19, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @generic={0x5, 0xf, 0x8, 0xc4, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000080)='GPL\x00', 0xbd, 0xb8, &(0x7f0000000240)=""/184, 0x41000, 0x14, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x6, 0x85c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3], 0x0, 0x10, 0x1}, 0x94) 4m27.242210332s ago: executing program 0 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000300)="bad330fb72e7a5", 0x7, 0x40, &(0x7f00000001c0)={0x11, 0x12, r6, 0x1, 0xd8, 0x6, @random="105951045ff3"}, 0x14) 4m27.19041172s ago: executing program 1 (id=1775): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000), 0x8) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 4m26.205056349s ago: executing program 1 (id=1776): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000), 0x8) sendmmsg$sock(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 4m24.180958069s ago: executing program 2 (id=1777): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20040080) socket(0x10, 0x803, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$alg(0x26, 0x5, 0x0) listen(r6, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x100) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 4m17.338830137s ago: executing program 1 (id=1778): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000500}}], 0x62, 0x0) 4m13.204053927s ago: executing program 2 (id=1779): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) unshare(0x2c020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 4m7.475140479s ago: executing program 32 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c000000000000000a0000040900010073797a31000000000900020073797a3100000000200003801c000080140007800c000100636f756e746572000400028004000180140000001100010000000000000000000300000a"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffea0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x1e, 0x1, 0xfffffffd, 0x7ffffe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffffffffffff}, @FRA_FLOW={0x8, 0xb, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000051000000400000085000000720000001800000000100000000000000000000095000000000000009500000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r4, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000006140)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='4V', 0x2}], 0x1}}], 0x1, 0x2400c0c5) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000002200)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="57aaaf3e23c8217b75643a23ad7088d03070ffa08c5020c510062c9325e47185e54995c00cc35e9ee018ccbfe85778d7b3f8e8d5d6e441cf51cda018980f1e61fd8029ace2b3752a441cb6148530f73692bde0434e6d94aa3caf3fb85722509a7b9ec5011029847af4e59d699acb27ce6ab23533e27619cd42c11e"], 0x1104}, 0x1, 0x0, 0x0, 0x8040}, 0x4044080) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f54080006"], 0x60}}, 0xc000) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000000)={0x1d, r11, 0x3, {}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x0, 0x7, 0x8, @private0, @mcast1, 0x40, 0xf801, 0xc134, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000500)={@loopback, @private0, @loopback, 0x7ff, 0x48, 0x4, 0x500, 0xb3c, 0x10, r12}) 4m1.443638137s ago: executing program 33 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000300)="bad330fb72e7a5", 0x7, 0x40, &(0x7f00000001c0)={0x11, 0x12, r6, 0x1, 0xd8, 0x6, @random="105951045ff3"}, 0x14) 3m56.505963113s ago: executing program 34 (id=1769): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x61a400, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x1, 0x1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c00000089c8e3a7bffb93db0900000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15, @ANYRES64=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) close(0x4) 3m51.293007874s ago: executing program 35 (id=1778): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000500}}], 0x62, 0x0) 3m48.836699098s ago: executing program 36 (id=1779): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) unshare(0x2c020400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 13.105425875s ago: executing program 6 (id=1781): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x24, 0x24, 0xb0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@mcast2, @private1, @mcast1, 0xffffffff, 0xff, 0x3ff, 0x100, 0x100000000, 0x80000, r2}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x15, 0x5, @l2={'eth', 0x3a, 'pim6reg\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x800) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 9 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x2000c090) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x16, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x9, 0x40, 0xe}, @map_fd={0x18, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6324}, @ldst={0x0, 0x0, 0x3, 0x2, 0x7, 0xffffffffffffffc0, 0x4}, @call={0x85, 0x0, 0x0, 0x42}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x4, 0x97, &(0x7f0000000a00)=""/151, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x1, 0x8c40, 0x9c}, 0x10, 0x137df, r6, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f00000000c0), 0x0}, 0x20) r7 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/44, 0x2c, 0x4100, 0x0, 0x5f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xb}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 0137][ T9587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.060180][ T9587] ? down_read+0x1ad/0x2e0 [ 179.060206][ T9587] genl_rcv+0x28/0x40 [ 179.060230][ T9587] netlink_unicast+0x82f/0x9e0 [ 179.060258][ T9587] ? __pfx_netlink_unicast+0x10/0x10 [ 179.060278][ T9587] ? netlink_sendmsg+0x642/0xb30 [ 179.060298][ T9587] ? skb_put+0x11b/0x210 [ 179.060324][ T9587] netlink_sendmsg+0x805/0xb30 [ 179.060356][ T9587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.060382][ T9587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.060413][ T9587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.060432][ T9587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.060455][ T9587] __sock_sendmsg+0x21c/0x270 [ 179.060488][ T9587] ____sys_sendmsg+0x505/0x830 [ 179.060517][ T9587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.060549][ T9587] ? import_iovec+0x74/0xa0 [ 179.060577][ T9587] ___sys_sendmsg+0x21f/0x2a0 [ 179.060601][ T9587] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.060632][ T9587] ? rcu_read_lock_any_held+0xb3/0x120 [ 179.060669][ T9587] ? sb_end_write+0xe9/0x1c0 [ 179.060704][ T9587] ? __pfx_vfs_write+0x10/0x10 [ 179.060730][ T9587] ? do_sys_openat2+0x154/0x1c0 [ 179.060761][ T9587] __x64_sys_sendmsg+0x19b/0x260 [ 179.060786][ T9587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.060818][ T9587] ? __pfx_ksys_write+0x10/0x10 [ 179.060849][ T9587] ? do_syscall_64+0xbe/0xfa0 [ 179.060870][ T9587] do_syscall_64+0xfa/0xfa0 [ 179.060887][ T9587] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.060906][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.060924][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 179.060946][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.060963][ T9587] RIP: 0033:0x7f5240b8f749 [ 179.060989][ T9587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.061007][ T9587] RSP: 002b:00007f5241a26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.061034][ T9587] RAX: ffffffffffffffda RBX: 00007f5240de5fa0 RCX: 00007f5240b8f749 [ 179.061049][ T9587] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 179.061063][ T9587] RBP: 00007f5241a26090 R08: 0000000000000000 R09: 0000000000000000 [ 179.061076][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.061093][ T9587] R13: 00007f5240de6038 R14: 00007f5240de5fa0 R15: 00007fffb1d4ab98 [ 179.061128][ T9587] [ 179.532918][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 179.542056][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 179.618616][ T9596] net_ratelimit: 5 callbacks suppressed [ 179.618633][ T9596] netlink: get zone limit has 8 unknown bytes [ 179.662327][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 179.673032][ T9598] netlink: 'syz.0.1067': attribute type 2 has an invalid length. [ 180.179019][ T9620] syzkaller0: entered promiscuous mode [ 180.184849][ T9620] syzkaller0: entered allmulticast mode [ 180.213926][ T9611] wg1 speed is unknown, defaulting to 1000 [ 180.221604][ T9605] wg1 speed is unknown, defaulting to 1000 [ 180.314488][ T9635] netlink: 'syz.3.1076': attribute type 5 has an invalid length. [ 181.350911][ T9637] FAULT_INJECTION: forcing a failure. [ 181.350911][ T9637] name failslab, interval 1, probability 0, space 0, times 0 [ 181.389759][ T9637] CPU: 1 UID: 0 PID: 9637 Comm: syz.0.1075 Not tainted syzkaller #0 PREEMPT(full) [ 181.389786][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.389798][ T9637] Call Trace: [ 181.389807][ T9637] [ 181.389816][ T9637] dump_stack_lvl+0x189/0x250 [ 181.389847][ T9637] ? __pfx____ratelimit+0x10/0x10 [ 181.389878][ T9637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.389904][ T9637] ? __pfx__printk+0x10/0x10 [ 181.389928][ T9637] ? __pfx___might_resched+0x10/0x10 [ 181.389951][ T9637] ? fs_reclaim_acquire+0x7d/0x100 [ 181.389976][ T9637] should_fail_ex+0x414/0x560 [ 181.390012][ T9637] should_failslab+0xa8/0x100 [ 181.390034][ T9637] __kmalloc_cache_noprof+0x6f/0x6f0 [ 181.390059][ T9637] ? wake_up_q+0x99/0xd0 [ 181.390078][ T9637] ? nl80211_get_station+0x1aa/0x5d0 [ 181.390113][ T9637] nl80211_get_station+0x1aa/0x5d0 [ 181.390146][ T9637] ? trace_contention_end+0x39/0x120 [ 181.390170][ T9637] ? __pfx_nl80211_get_station+0x10/0x10 [ 181.390196][ T9637] ? __mutex_lock+0x335/0x1350 [ 181.390266][ T9637] ? nl80211_pre_doit+0x4f1/0x930 [ 181.390299][ T9637] genl_family_rcv_msg_doit+0x215/0x300 [ 181.390336][ T9637] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 181.390377][ T9637] ? stack_trace_save+0x9c/0xe0 [ 181.390414][ T9637] genl_rcv_msg+0x60e/0x790 [ 181.390448][ T9637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.390473][ T9637] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 181.390496][ T9637] ? __pfx_nl80211_get_station+0x10/0x10 [ 181.390522][ T9637] ? __pfx_nl80211_post_doit+0x10/0x10 [ 181.390563][ T9637] netlink_rcv_skb+0x208/0x470 [ 181.390583][ T9637] ? __lock_acquire+0xab9/0xd20 [ 181.390610][ T9637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.390639][ T9637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.390683][ T9637] ? down_read+0x1ad/0x2e0 [ 181.390709][ T9637] genl_rcv+0x28/0x40 [ 181.390733][ T9637] netlink_unicast+0x82f/0x9e0 [ 181.390763][ T9637] ? __pfx_netlink_unicast+0x10/0x10 [ 181.390785][ T9637] ? netlink_sendmsg+0x642/0xb30 [ 181.390805][ T9637] ? skb_put+0x11b/0x210 [ 181.390831][ T9637] netlink_sendmsg+0x805/0xb30 [ 181.390864][ T9637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.390891][ T9637] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.390923][ T9637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.390942][ T9637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.390966][ T9637] __sock_sendmsg+0x21c/0x270 [ 181.390998][ T9637] ____sys_sendmsg+0x505/0x830 [ 181.391028][ T9637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.391063][ T9637] ? import_iovec+0x74/0xa0 [ 181.391092][ T9637] ___sys_sendmsg+0x21f/0x2a0 [ 181.391119][ T9637] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.391181][ T9637] ? __fget_files+0x2a/0x420 [ 181.391199][ T9637] ? __fget_files+0x3a0/0x420 [ 181.391230][ T9637] __x64_sys_sendmsg+0x19b/0x260 [ 181.391256][ T9637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.391291][ T9637] ? __pfx_ksys_write+0x10/0x10 [ 181.391324][ T9637] ? do_syscall_64+0xbe/0xfa0 [ 181.391348][ T9637] do_syscall_64+0xfa/0xfa0 [ 181.391377][ T9637] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.391397][ T9637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.391417][ T9637] ? clear_bhb_loop+0x60/0xb0 [ 181.391442][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.391460][ T9637] RIP: 0033:0x7efe90d8f749 [ 181.391478][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.391496][ T9637] RSP: 002b:00007efe91ca3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.391517][ T9637] RAX: ffffffffffffffda RBX: 00007efe90fe5fa0 RCX: 00007efe90d8f749 [ 181.391532][ T9637] RDX: 0000000020008000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 181.391545][ T9637] RBP: 00007efe91ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 181.391557][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.391569][ T9637] R13: 00007efe90fe6038 R14: 00007efe90fe5fa0 R15: 00007ffe4d818378 [ 181.391611][ T9637] [ 181.789535][ T9640] wg1 speed is unknown, defaulting to 1000 [ 181.850517][ T9650] netlink: 'syz.3.1079': attribute type 11 has an invalid length. [ 181.858433][ T9650] netlink: 'syz.3.1079': attribute type 11 has an invalid length. [ 182.191009][ T9659] wg1 speed is unknown, defaulting to 1000 [ 182.741041][ T9683] netlink: 'syz.4.1089': attribute type 5 has an invalid length. [ 182.820898][ T9647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.871568][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.958395][ T9688] syzkaller0: entered promiscuous mode [ 182.964055][ T9688] syzkaller0: entered allmulticast mode [ 183.068200][ T9698] netlink: zone id is out of range [ 183.073478][ T9698] netlink: get zone limit has 4 unknown bytes [ 183.354155][ T9710] wg1 speed is unknown, defaulting to 1000 [ 183.476935][ T9720] ¾x9ÿ: renamed from bridge_slave_0 [ 183.641163][ T9724] __nla_validate_parse: 14 callbacks suppressed [ 183.641182][ T9724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 183.657306][ T9724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1102'. [ 183.790069][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1104'. [ 183.836697][ T9727] netlink: 'syz.4.1103': attribute type 9 has an invalid length. [ 183.839429][ T9731] syzkaller0: entered promiscuous mode [ 183.846081][ T9727] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1103'. [ 183.850085][ T9731] syzkaller0: entered allmulticast mode [ 183.877158][ T9729] vlan3: entered promiscuous mode [ 183.882295][ T9729] bridge0: entered promiscuous mode [ 184.108567][ T9740] netlink: zone id is out of range [ 184.113890][ T9740] netlink: get zone limit has 4 unknown bytes [ 184.234678][ T9744] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 184.293288][ T9751] netlink: 'syz.2.1107': attribute type 4 has an invalid length. [ 184.315619][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 184.451761][ T9755] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 184.473945][ T9758] netlink: 'syz.0.1113': attribute type 5 has an invalid length. [ 184.485163][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.521771][ T9755] bond0: (slave team0): Enslaving as an active interface with an up link [ 184.555778][ T9760] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1114'. [ 184.609200][ T9755] siw: device registration error -23 [ 184.646363][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 184.681149][ T9768] syzkaller0: entered promiscuous mode [ 184.697894][ T9768] syzkaller0: entered allmulticast mode [ 184.698225][ T9772] netlink: zone id is out of range [ 184.712521][ T9772] netlink: get zone limit has 4 unknown bytes [ 184.769244][ T9770] vlan2: entered promiscuous mode [ 184.774658][ T9770] batadv_slave_1: entered promiscuous mode [ 185.115770][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 185.153491][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 185.225291][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 185.306423][ T9794] atomic_op ffff8880785eb198 conn xmit_atomic 0000000000000000 [ 185.522019][ T9798] netlink: 'syz.0.1128': attribute type 4 has an invalid length. [ 185.584478][ T9801] netlink: 'syz.0.1128': attribute type 4 has an invalid length. [ 185.595268][ T9800] syzkaller0: entered promiscuous mode [ 185.623308][ T9800] syzkaller0: entered allmulticast mode [ 185.745982][ T9803] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 186.096482][ T9815] netlink: zone id is out of range [ 186.108271][ T9815] netlink: get zone limit has 4 unknown bytes [ 186.259228][ T9825] netlink: 'syz.4.1138': attribute type 5 has an invalid length. [ 186.308359][ T9826] syzkaller0: entered promiscuous mode [ 186.319810][ T9826] syzkaller0: entered allmulticast mode [ 186.327963][ T9829] batadv_slave_1: entered promiscuous mode [ 186.335566][ T9827] batadv_slave_1: left promiscuous mode [ 186.335898][ T9826] netlink: 'syz.0.1136': attribute type 5 has an invalid length. [ 186.559423][ T9841] netlink: 'syz.1.1143': attribute type 4 has an invalid length. [ 186.887644][ T9852] netlink: zone id is out of range [ 186.892934][ T9852] netlink: get zone limit has 4 unknown bytes [ 187.241273][ T9868] netlink: 'syz.2.1154': attribute type 4 has an invalid length. [ 187.288853][ T9871] vlan3: entered promiscuous mode [ 187.398573][ T9880] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 187.428277][ T9881] syzkaller0: entered promiscuous mode [ 187.440936][ T9883] netlink: zone id is out of range [ 187.446748][ T9881] syzkaller0: entered allmulticast mode [ 187.452399][ T9883] netlink: get zone limit has 4 unknown bytes [ 187.568652][ T9889] netlink: 'syz.3.1162': attribute type 5 has an invalid length. [ 187.589175][ T9890] batadv_slave_1: entered promiscuous mode [ 187.596668][ T9888] batadv_slave_1: left promiscuous mode [ 187.632289][ T9893] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 187.899001][ T9907] wg1: left promiscuous mode [ 187.923911][ T9907] wg1: left allmulticast mode [ 187.941910][ T9907] bond3: left allmulticast mode [ 187.948313][ T9910] FAULT_INJECTION: forcing a failure. [ 187.948313][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.964887][ T9910] CPU: 0 UID: 0 PID: 9910 Comm: syz.4.1171 Not tainted syzkaller #0 PREEMPT(full) [ 187.964912][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.964924][ T9910] Call Trace: [ 187.964932][ T9910] [ 187.964940][ T9910] dump_stack_lvl+0x189/0x250 [ 187.964971][ T9910] ? __pfx____ratelimit+0x10/0x10 [ 187.965002][ T9910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.965028][ T9910] ? __pfx__printk+0x10/0x10 [ 187.965049][ T9910] ? __might_fault+0xb0/0x130 [ 187.965088][ T9910] should_fail_ex+0x414/0x560 [ 187.965121][ T9910] _copy_from_user+0x2d/0xb0 [ 187.965147][ T9910] do_sys_poll+0x242/0x1070 [ 187.965174][ T9910] ? __lock_acquire+0xab9/0xd20 [ 187.965199][ T9910] ? __pfx_do_sys_poll+0x10/0x10 [ 187.965224][ T9910] ? __lock_acquire+0xab9/0xd20 [ 187.965316][ T9910] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 187.965372][ T9910] ? __pfx_timespec64_add_safe+0x10/0x10 [ 187.965389][ T9910] ? do_sys_openat2+0x154/0x1c0 [ 187.965422][ T9910] __se_sys_poll+0x128/0x320 [ 187.965453][ T9910] ? __pfx___se_sys_poll+0x10/0x10 [ 187.965485][ T9910] ? do_syscall_64+0xbe/0xfa0 [ 187.965509][ T9910] do_syscall_64+0xfa/0xfa0 [ 187.965527][ T9910] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.965546][ T9910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.965565][ T9910] ? clear_bhb_loop+0x60/0xb0 [ 187.965589][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.965609][ T9910] RIP: 0033:0x7f55b1d8f749 [ 187.965626][ T9910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.965643][ T9910] RSP: 002b:00007f55b2c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 187.965663][ T9910] RAX: ffffffffffffffda RBX: 00007f55b1fe5fa0 RCX: 00007f55b1d8f749 [ 187.965678][ T9910] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 187.965692][ T9910] RBP: 00007f55b2c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.965704][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.965716][ T9910] R13: 00007f55b1fe6038 R14: 00007f55b1fe5fa0 R15: 00007fff245bac48 [ 187.965750][ T9910] [ 187.999659][ T9913] netlink: zone id is out of range [ 188.097994][ T9907] wg1 speed is unknown, defaulting to 1000 [ 188.293047][ T9921] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 188.301872][ T9920] syzkaller0: entered promiscuous mode [ 188.312944][ T9920] syzkaller0: entered allmulticast mode [ 188.335547][ T9922] macvtap3: entered promiscuous mode [ 188.340858][ T9922] syz_tun: entered promiscuous mode [ 188.349991][ T9922] syz_tun: left promiscuous mode [ 188.896090][ T9941] __nla_validate_parse: 9 callbacks suppressed [ 188.896109][ T9941] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1181'. [ 189.019126][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 189.064795][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1182'. [ 189.321810][ T9955] netlink: 'syz.3.1186': attribute type 5 has an invalid length. [ 189.698913][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.706071][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.712376][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.729455][ T9975] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 189.750173][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.761384][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.768755][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.776042][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.782921][ T9975] wg1 speed is unknown, defaulting to 1000 [ 189.836131][ T9979] xt_NFQUEUE: number of total queues is 0 [ 190.037979][ T9991] net_ratelimit: 11 callbacks suppressed [ 190.037991][ T9991] netlink: zone id is out of range [ 190.049300][ T9991] netlink: zone id is out of range [ 190.054532][ T9991] netlink: zone id is out of range [ 190.059650][ T9991] netlink: zone id is out of range [ 190.064898][ T9991] netlink: zone id is out of range [ 190.070099][ T9991] netlink: get zone limit has 8 unknown bytes [ 190.678002][T10015] openvswitch: netlink: Unknown key attributes 2 [ 190.811235][T10019] netlink: zone id is out of range [ 190.817169][T10019] netlink: zone id is out of range [ 190.822371][T10019] netlink: zone id is out of range [ 190.905326][T10021] netlink: 'syz.1.1208': attribute type 5 has an invalid length. [ 191.002447][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1209'. [ 191.132790][T10028] IPVS: length: 77 != 24 [ 191.312224][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1214'. [ 191.801932][T10060] xt_TCPMSS: Only works on TCP SYN packets [ 191.957668][T10068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1220'. [ 192.166074][T10071] wg1 speed is unknown, defaulting to 1000 [ 192.185399][T10071] wg1 speed is unknown, defaulting to 1000 [ 192.191991][T10078] netlink: 'syz.3.1224': attribute type 13 has an invalid length. [ 192.217004][T10077] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 192.221475][T10078] netlink: 'syz.3.1224': attribute type 17 has an invalid length. [ 192.432386][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.460125][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.563302][T10094] batadv_slave_1: entered promiscuous mode [ 192.641301][T10093] batadv_slave_1: left promiscuous mode [ 192.672724][T10101] netlink: 'syz.2.1232': attribute type 5 has an invalid length. [ 192.759686][T10107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1235'. [ 193.223950][T10124] syzkaller0: entered promiscuous mode [ 193.236778][T10124] syzkaller0: entered allmulticast mode [ 193.264787][T10124] netlink: 'syz.3.1243': attribute type 5 has an invalid length. [ 193.312535][T10128] netlink: 'syz.4.1245': attribute type 1 has an invalid length. [ 193.362316][T10128] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.379229][T10128] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 193.410907][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 193.421234][T10131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1245'. [ 193.450880][T10131] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 193.472832][T10128] macvlan0: entered promiscuous mode [ 193.478268][T10128] macvlan0: entered allmulticast mode [ 193.484934][T10128] bond2: entered promiscuous mode [ 193.491152][T10128] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 193.502705][T10128] bond2: left promiscuous mode [ 193.589678][T10136] wg1 speed is unknown, defaulting to 1000 [ 193.600694][T10136] wg1 speed is unknown, defaulting to 1000 [ 193.620850][T10137] netlink: 'syz.2.1247': attribute type 16 has an invalid length. [ 193.637767][T10137] netlink: 'syz.2.1247': attribute type 17 has an invalid length. [ 193.672502][T10139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1248'. [ 193.807271][ T5939] IPVS: starting estimator thread 0... [ 193.933463][T10147] IPVS: using max 30 ests per chain, 72000 per kthread [ 194.188147][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195007][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.455097][T10177] FAULT_INJECTION: forcing a failure. [ 194.455097][T10177] name failslab, interval 1, probability 0, space 0, times 0 [ 194.475057][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.1.1260 Not tainted syzkaller #0 PREEMPT(full) [ 194.475081][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.475093][T10177] Call Trace: [ 194.475101][T10177] [ 194.475109][T10177] dump_stack_lvl+0x189/0x250 [ 194.475140][T10177] ? __pfx____ratelimit+0x10/0x10 [ 194.475170][T10177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.475196][T10177] ? __pfx__printk+0x10/0x10 [ 194.475229][T10177] ? __pfx___might_resched+0x10/0x10 [ 194.475249][T10177] ? fs_reclaim_acquire+0x7d/0x100 [ 194.475273][T10177] should_fail_ex+0x414/0x560 [ 194.475307][T10177] should_failslab+0xa8/0x100 [ 194.475328][T10177] __kvmalloc_node_noprof+0x158/0x910 [ 194.475358][T10177] ? bpf_test_run_xdp_live+0x1ba/0x1b10 [ 194.475388][T10177] bpf_test_run_xdp_live+0x1ba/0x1b10 [ 194.475409][T10177] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 194.475442][T10177] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 194.475469][T10177] ? synchronize_rcu+0x11a/0x310 [ 194.475492][T10177] ? __pfx_synchronize_rcu+0x10/0x10 [ 194.475518][T10177] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 194.475543][T10177] ? 0xffffffffa0205540 [ 194.475577][T10177] ? 0xffffffffa0201a10 [ 194.475621][T10177] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 194.475655][T10177] ? _copy_from_user+0x94/0xb0 [ 194.475680][T10177] ? bpf_test_init+0x113/0x150 [ 194.475697][T10177] ? xdp_convert_md_to_buff+0x5b/0x330 [ 194.475721][T10177] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 194.475759][T10177] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.475785][T10177] ? __fget_files+0x2a/0x420 [ 194.475809][T10177] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.475832][T10177] bpf_prog_test_run+0x2c7/0x340 [ 194.475856][T10177] __sys_bpf+0x562/0x860 [ 194.475878][T10177] ? __pfx___sys_bpf+0x10/0x10 [ 194.475911][T10177] ? ksys_write+0x22a/0x250 [ 194.475940][T10177] ? __pfx_ksys_write+0x10/0x10 [ 194.475973][T10177] __x64_sys_bpf+0x7c/0x90 [ 194.476001][T10177] do_syscall_64+0xfa/0xfa0 [ 194.476020][T10177] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.476038][T10177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.476061][T10177] ? clear_bhb_loop+0x60/0xb0 [ 194.476085][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.476102][T10177] RIP: 0033:0x7f705a78f749 [ 194.476118][T10177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.476136][T10177] RSP: 002b:00007f705b68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.476157][T10177] RAX: ffffffffffffffda RBX: 00007f705a9e6090 RCX: 00007f705a78f749 [ 194.476172][T10177] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 194.476185][T10177] RBP: 00007f705b68f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.476196][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.476207][T10177] R13: 00007f705a9e6128 R14: 00007f705a9e6090 R15: 00007fff1468ddf8 [ 194.476245][T10177] [ 194.777494][T10179] __nla_validate_parse: 1 callbacks suppressed [ 194.777513][T10179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1261'. [ 194.849035][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1262'. [ 195.119296][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 195.129139][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1263'. [ 195.163602][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1263'. [ 195.174203][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 195.183170][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 195.399124][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1271'. [ 195.536159][T10213] netlink: 'syz.4.1274': attribute type 4 has an invalid length. [ 195.685377][T10219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1275'. [ 195.742563][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'. [ 195.753641][T10224] net_ratelimit: 42 callbacks suppressed [ 195.753657][T10224] openvswitch: netlink: Unknown key attributes 2 [ 195.785607][T10221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.819353][T10221] vlan2: entered promiscuous mode [ 195.824563][T10221] bond4: entered promiscuous mode [ 196.221409][T10242] batadv_slave_1: entered promiscuous mode [ 196.254102][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.257159][T10241] batadv_slave_1: left promiscuous mode [ 196.260299][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 196.265790][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 196.292108][T10246] validate_nla: 1 callbacks suppressed [ 196.292124][T10246] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 196.462008][T10251] netlink: 'syz.1.1290': attribute type 13 has an invalid length. [ 196.471230][T10251] netlink: 'syz.1.1290': attribute type 17 has an invalid length. [ 196.531759][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.541101][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.560829][T10251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.744797][T10262] syzkaller0: entered promiscuous mode [ 196.750730][T10262] syzkaller0: entered allmulticast mode [ 196.784856][T10266] syzkaller0: entered promiscuous mode [ 196.790479][T10266] syzkaller0: entered allmulticast mode [ 196.929809][T10272] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 197.065854][T10278] batadv_slave_1: entered promiscuous mode [ 197.074043][T10277] batadv_slave_1: left promiscuous mode [ 197.572543][T10300] syzkaller0: entered promiscuous mode [ 197.582367][T10300] syzkaller0: entered allmulticast mode [ 197.709918][T10311] netlink: 'syz.3.1312': attribute type 4 has an invalid length. [ 197.715742][T10310] syzkaller0: entered promiscuous mode [ 197.723159][T10310] syzkaller0: entered allmulticast mode [ 197.826379][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 197.839596][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 197.848764][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 197.865196][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 197.910906][T10315] batadv_slave_1: entered promiscuous mode [ 197.921497][T10314] batadv_slave_1: left promiscuous mode [ 198.269479][T10330] netlink: zone id is out of range [ 198.274838][T10330] netlink: zone id is out of range [ 198.279958][T10330] netlink: zone id is out of range [ 198.286904][T10330] netlink: zone id is out of range [ 198.292031][T10330] netlink: zone id is out of range [ 198.297775][T10330] netlink: zone id is out of range [ 198.302893][T10330] netlink: zone id is out of range [ 198.308552][T10330] netlink: zone id is out of range [ 198.372955][T10338] syzkaller0: entered promiscuous mode [ 198.378886][T10338] syzkaller0: entered allmulticast mode [ 198.588817][T10347] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 198.658546][T10354] batadv_slave_1: entered promiscuous mode [ 198.671030][T10353] batadv_slave_1: left promiscuous mode [ 198.846138][ T940] IPVS: starting estimator thread 0... [ 198.924624][T10363] netlink: 'syz.0.1329': attribute type 13 has an invalid length. [ 198.965101][T10361] IPVS: using max 29 ests per chain, 69600 per kthread [ 199.041487][T10380] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 199.050201][T10380] syzkaller0: entered promiscuous mode [ 199.066371][T10380] syzkaller0: entered allmulticast mode [ 199.120356][T10386] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 199.292297][T10399] netlink: 'syz.0.1339': attribute type 4 has an invalid length. [ 199.479660][T10410] syzkaller0: entered promiscuous mode [ 199.485310][T10410] syzkaller0: entered allmulticast mode [ 199.831602][T10420] batadv_slave_1: entered promiscuous mode [ 199.992042][T10426] __nla_validate_parse: 8 callbacks suppressed [ 199.992054][T10426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1348'. [ 200.195970][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 200.237228][T10438] netlink: 'syz.3.1352': attribute type 4 has an invalid length. [ 200.548947][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 200.565811][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 200.628685][T10459] Cannot find set identified by id 65534 to match [ 200.677444][T10420] batadv_slave_1: left promiscuous mode [ 200.728250][T10459] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 200.736767][T10459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1360'. [ 200.930933][T10479] bond5: option resend_igmp: invalid value (2878) [ 200.937736][T10479] bond5: option resend_igmp: allowed values 0 - 255 [ 200.946270][T10479] bond5 (unregistering): Released all slaves [ 201.139246][T10493] FAULT_INJECTION: forcing a failure. [ 201.139246][T10493] name failslab, interval 1, probability 0, space 0, times 0 [ 201.153352][T10493] CPU: 0 UID: 0 PID: 10493 Comm: syz.2.1371 Not tainted syzkaller #0 PREEMPT(full) [ 201.153372][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.153382][T10493] Call Trace: [ 201.153389][T10493] [ 201.153396][T10493] dump_stack_lvl+0x189/0x250 [ 201.153422][T10493] ? __pfx____ratelimit+0x10/0x10 [ 201.153447][T10493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.153467][T10493] ? __pfx__printk+0x10/0x10 [ 201.153489][T10493] ? __pfx___might_resched+0x10/0x10 [ 201.153506][T10493] ? fs_reclaim_acquire+0x7d/0x100 [ 201.153525][T10493] should_fail_ex+0x414/0x560 [ 201.153561][T10493] should_failslab+0xa8/0x100 [ 201.153579][T10493] __kmalloc_noprof+0xcb/0x7f0 [ 201.153603][T10493] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 201.153630][T10493] ? is_bpf_text_address+0x26/0x2b0 [ 201.153654][T10493] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 201.153688][T10493] genl_family_rcv_msg_doit+0xb8/0x300 [ 201.153724][T10493] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.153761][T10493] ? apparmor_capable+0x137/0x1b0 [ 201.153786][T10493] ? bpf_lsm_capable+0x9/0x20 [ 201.153809][T10493] ? security_capable+0x7e/0x2e0 [ 201.153842][T10493] genl_rcv_msg+0x60e/0x790 [ 201.153877][T10493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.153903][T10493] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 201.153945][T10493] netlink_rcv_skb+0x208/0x470 [ 201.153964][T10493] ? __lock_acquire+0xab9/0xd20 [ 201.153984][T10493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.154013][T10493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.154055][T10493] ? down_read+0x1ad/0x2e0 [ 201.154081][T10493] genl_rcv+0x28/0x40 [ 201.154105][T10493] netlink_unicast+0x82f/0x9e0 [ 201.154134][T10493] ? __pfx_netlink_unicast+0x10/0x10 [ 201.154156][T10493] ? netlink_sendmsg+0x642/0xb30 [ 201.154176][T10493] ? skb_put+0x11b/0x210 [ 201.154201][T10493] netlink_sendmsg+0x805/0xb30 [ 201.154234][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.154260][T10493] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.154291][T10493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.154310][T10493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.154333][T10493] __sock_sendmsg+0x21c/0x270 [ 201.154369][T10493] ____sys_sendmsg+0x505/0x830 [ 201.154398][T10493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.154432][T10493] ? import_iovec+0x74/0xa0 [ 201.154461][T10493] ___sys_sendmsg+0x21f/0x2a0 [ 201.154487][T10493] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.154555][T10493] ? __fget_files+0x2a/0x420 [ 201.154574][T10493] ? __fget_files+0x3a0/0x420 [ 201.154604][T10493] __x64_sys_sendmsg+0x19b/0x260 [ 201.154631][T10493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.154665][T10493] ? __pfx_ksys_write+0x10/0x10 [ 201.154698][T10493] ? do_syscall_64+0xbe/0xfa0 [ 201.154722][T10493] do_syscall_64+0xfa/0xfa0 [ 201.154740][T10493] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.154760][T10493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.154779][T10493] ? clear_bhb_loop+0x60/0xb0 [ 201.154802][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.154820][T10493] RIP: 0033:0x7f5240b8f749 [ 201.154837][T10493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.154855][T10493] RSP: 002b:00007f5241a26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.154876][T10493] RAX: ffffffffffffffda RBX: 00007f5240de5fa0 RCX: 00007f5240b8f749 [ 201.154891][T10493] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000015 [ 201.154904][T10493] RBP: 00007f5241a26090 R08: 0000000000000000 R09: 0000000000000000 [ 201.154916][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.154927][T10493] R13: 00007f5240de6038 R14: 00007f5240de5fa0 R15: 00007fffb1d4ab98 [ 201.154961][T10493] [ 201.537212][T10497] FAULT_INJECTION: forcing a failure. [ 201.537212][T10497] name failslab, interval 1, probability 0, space 0, times 0 [ 201.550318][T10497] CPU: 1 UID: 0 PID: 10497 Comm: syz.1.1372 Not tainted syzkaller #0 PREEMPT(full) [ 201.550343][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.550354][T10497] Call Trace: [ 201.550361][T10497] [ 201.550369][T10497] dump_stack_lvl+0x189/0x250 [ 201.550398][T10497] ? __pfx____ratelimit+0x10/0x10 [ 201.550428][T10497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.550454][T10497] ? __pfx__printk+0x10/0x10 [ 201.550480][T10497] ? __pfx___might_resched+0x10/0x10 [ 201.550499][T10497] ? fs_reclaim_acquire+0x7d/0x100 [ 201.550533][T10497] should_fail_ex+0x414/0x560 [ 201.550567][T10497] should_failslab+0xa8/0x100 [ 201.550588][T10497] __kvmalloc_node_noprof+0x158/0x910 [ 201.550618][T10497] ? nf_tables_newchain+0x1b68/0x2750 [ 201.550640][T10497] ? __asan_memcpy+0x40/0x70 [ 201.550670][T10497] nf_tables_newchain+0x1b68/0x2750 [ 201.550713][T10497] ? __pfx_nf_tables_newchain+0x10/0x10 [ 201.550770][T10497] ? nfnl_pernet+0x23/0x240 [ 201.550804][T10497] ? __nla_parse+0x40/0x60 [ 201.550825][T10497] nfnetlink_rcv+0x11d9/0x2590 [ 201.550870][T10497] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 201.550899][T10497] ? ref_tracker_free+0x63a/0x7d0 [ 201.550940][T10497] ? __netlink_deliver_tap+0x807/0x850 [ 201.550958][T10497] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.550991][T10497] netlink_unicast+0x82f/0x9e0 [ 201.551014][T10497] ? __pfx_netlink_unicast+0x10/0x10 [ 201.551031][T10497] ? netlink_sendmsg+0x642/0xb30 [ 201.551048][T10497] ? skb_put+0x11b/0x210 [ 201.551069][T10497] netlink_sendmsg+0x805/0xb30 [ 201.551095][T10497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.551116][T10497] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.551141][T10497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.551157][T10497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.551177][T10497] __sock_sendmsg+0x21c/0x270 [ 201.551203][T10497] ____sys_sendmsg+0x505/0x830 [ 201.551227][T10497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.551254][T10497] ? import_iovec+0x74/0xa0 [ 201.551277][T10497] ___sys_sendmsg+0x21f/0x2a0 [ 201.551298][T10497] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.551348][T10497] ? __fget_files+0x2a/0x420 [ 201.551363][T10497] ? __fget_files+0x3a0/0x420 [ 201.551387][T10497] __x64_sys_sendmsg+0x19b/0x260 [ 201.551409][T10497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.551436][T10497] ? __pfx_ksys_write+0x10/0x10 [ 201.551463][T10497] ? do_syscall_64+0xbe/0xfa0 [ 201.551482][T10497] do_syscall_64+0xfa/0xfa0 [ 201.551497][T10497] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.551519][T10497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.551535][T10497] ? clear_bhb_loop+0x60/0xb0 [ 201.551554][T10497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.551570][T10497] RIP: 0033:0x7f705a78f749 [ 201.551585][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.551600][T10497] RSP: 002b:00007f705b6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.551617][T10497] RAX: ffffffffffffffda RBX: 00007f705a9e5fa0 RCX: 00007f705a78f749 [ 201.551629][T10497] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 201.551640][T10497] RBP: 00007f705b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 201.551650][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.551659][T10497] R13: 00007f705a9e6038 R14: 00007f705a9e5fa0 R15: 00007fff1468ddf8 [ 201.551688][T10497] [ 202.100498][T10508] validate_nla: 2 callbacks suppressed [ 202.100516][T10508] netlink: 'syz.0.1379': attribute type 4 has an invalid length. [ 202.157214][T10513] bond1 (unregistering): Released all slaves [ 202.319178][T10525] FAULT_INJECTION: forcing a failure. [ 202.319178][T10525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.355243][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.3.1381 Not tainted syzkaller #0 PREEMPT(full) [ 202.355269][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.355281][T10525] Call Trace: [ 202.355289][T10525] [ 202.355297][T10525] dump_stack_lvl+0x189/0x250 [ 202.355328][T10525] ? __pfx____ratelimit+0x10/0x10 [ 202.355359][T10525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.355386][T10525] ? __pfx__printk+0x10/0x10 [ 202.355407][T10525] ? __might_fault+0xb0/0x130 [ 202.355455][T10525] should_fail_ex+0x414/0x560 [ 202.355489][T10525] _copy_from_user+0x2d/0xb0 [ 202.355513][T10525] kstrtouint_from_user+0xc4/0x170 [ 202.355536][T10525] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 202.355574][T10525] proc_fail_nth_write+0x88/0x200 [ 202.355599][T10525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.355630][T10525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.355655][T10525] vfs_write+0x27e/0xb30 [ 202.355690][T10525] ? __pfx_vfs_write+0x10/0x10 [ 202.355719][T10525] ? __fget_files+0x2a/0x420 [ 202.355743][T10525] ? __fget_files+0x3a0/0x420 [ 202.355761][T10525] ? __fget_files+0x2a/0x420 [ 202.355790][T10525] ksys_write+0x145/0x250 [ 202.355820][T10525] ? __pfx_ksys_write+0x10/0x10 [ 202.355852][T10525] ? do_syscall_64+0xbe/0xfa0 [ 202.355876][T10525] do_syscall_64+0xfa/0xfa0 [ 202.355894][T10525] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.355914][T10525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.355933][T10525] ? clear_bhb_loop+0x60/0xb0 [ 202.355957][T10525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.355976][T10525] RIP: 0033:0x7f7aaeb8e1ff [ 202.355993][T10525] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 202.356011][T10525] RSP: 002b:00007f7aaf9e3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 202.356031][T10525] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7aaeb8e1ff [ 202.356045][T10525] RDX: 0000000000000001 RSI: 00007f7aaf9e30a0 RDI: 0000000000000005 [ 202.356058][T10525] RBP: 00007f7aaf9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 202.356071][T10525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 202.356082][T10525] R13: 00007f7aaede6038 R14: 00007f7aaede5fa0 R15: 00007ffdff366a28 [ 202.356116][T10525] [ 202.875024][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.889827][T10532] bond0: (slave rose0): Enslaving as an active interface with an up link [ 203.172730][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 203.210441][T10551] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.290868][T10558] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 203.325605][T10558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.366764][T10558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.374166][T10558] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 203.389470][T10558] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 203.518173][T10570] ip6tnl1: entered promiscuous mode [ 203.525104][T10570] ip6tnl1: entered allmulticast mode [ 203.841338][T10585] netlink: 'syz.4.1393': attribute type 4 has an invalid length. [ 204.182987][T10598] netlink: 'syz.1.1395': attribute type 3 has an invalid length. [ 204.403691][T10609] netlink: 'syz.1.1398': attribute type 7 has an invalid length. [ 204.446203][T10616] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1399'. [ 204.495789][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1399'. [ 204.646775][T10621] ip6tnl0: Caught tx_queue_len zero misconfig [ 204.687106][T10625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1402'. [ 204.753312][T10625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1402'. [ 204.888694][T10634] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 205.680430][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 205.690735][T10673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1416'. [ 205.780390][T10675] net_ratelimit: 1 callbacks suppressed [ 205.780406][T10675] openvswitch: netlink: Unknown key attributes 2 [ 206.206215][T10685] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1421'. [ 206.396226][T10692] netlink: 'syz.2.1424': attribute type 14 has an invalid length. [ 206.703431][T10708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1430'. [ 206.814070][T10712] openvswitch: netlink: Unknown key attributes 2 [ 207.329852][T10731] wg1 speed is unknown, defaulting to 1000 [ 207.357666][T10731] wg1 speed is unknown, defaulting to 1000 [ 207.384011][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1442'. [ 207.443508][T10733] netlink: 'syz.3.1442': attribute type 4 has an invalid length. [ 207.489701][T10740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'. [ 207.500582][T10740] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1441'. [ 207.511090][T10740] netlink: 'syz.2.1441': attribute type 6 has an invalid length. [ 207.519049][T10740] netlink: 'syz.2.1441': attribute type 5 has an invalid length. [ 207.528369][T10740] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1441'. [ 207.578969][T10743] lo: Caught tx_queue_len zero misconfig [ 207.603271][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1443'. [ 207.618049][T10743] netem: change failed [ 207.654373][T10735] netlink: 'syz.2.1441': attribute type 4 has an invalid length. [ 207.800885][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 207.886654][T10764] netlink: 'syz.3.1450': attribute type 13 has an invalid length. [ 207.900363][T10764] netlink: 'syz.3.1450': attribute type 17 has an invalid length. [ 207.941500][T10766] openvswitch: netlink: Unknown key attributes 2 [ 207.978596][T10760] wg1 speed is unknown, defaulting to 1000 [ 208.019957][T10760] wg1 speed is unknown, defaulting to 1000 [ 208.938750][T10793] bridge_slave_0: default FDB implementation only supports local addresses [ 209.007265][T10795] FAULT_INJECTION: forcing a failure. [ 209.007265][T10795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.075924][T10795] CPU: 1 UID: 0 PID: 10795 Comm: syz.3.1462 Not tainted syzkaller #0 PREEMPT(full) [ 209.075951][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.075963][T10795] Call Trace: [ 209.075971][T10795] [ 209.075980][T10795] dump_stack_lvl+0x189/0x250 [ 209.076011][T10795] ? __pfx____ratelimit+0x10/0x10 [ 209.076041][T10795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.076068][T10795] ? __pfx__printk+0x10/0x10 [ 209.076089][T10795] ? __might_fault+0xb0/0x130 [ 209.076128][T10795] should_fail_ex+0x414/0x560 [ 209.076163][T10795] _copy_from_iter+0x1de/0x1790 [ 209.076183][T10795] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 209.076210][T10795] ? kmalloc_reserve+0xbd/0x290 [ 209.076242][T10795] ? __pfx__copy_from_iter+0x10/0x10 [ 209.076261][T10795] ? __alloc_skb+0x2f1/0x430 [ 209.076284][T10795] ? __pfx___alloc_skb+0x10/0x10 [ 209.076306][T10795] ? netlink_sendmsg+0x642/0xb30 [ 209.076327][T10795] ? skb_put+0x11b/0x210 [ 209.076351][T10795] netlink_sendmsg+0x6b2/0xb30 [ 209.076384][T10795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.076410][T10795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 209.076441][T10795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.076460][T10795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.076484][T10795] __sock_sendmsg+0x21c/0x270 [ 209.076514][T10795] ____sys_sendmsg+0x505/0x830 [ 209.076542][T10795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.076572][T10795] ? import_iovec+0x74/0xa0 [ 209.076600][T10795] ___sys_sendmsg+0x21f/0x2a0 [ 209.076625][T10795] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.076681][T10795] ? __fget_files+0x2a/0x420 [ 209.076698][T10795] ? __fget_files+0x3a0/0x420 [ 209.076728][T10795] __x64_sys_sendmsg+0x19b/0x260 [ 209.076755][T10795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.076795][T10795] ? __pfx_ksys_write+0x10/0x10 [ 209.076828][T10795] ? do_syscall_64+0xbe/0xfa0 [ 209.076852][T10795] do_syscall_64+0xfa/0xfa0 [ 209.076870][T10795] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.076890][T10795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.076913][T10795] ? clear_bhb_loop+0x60/0xb0 [ 209.076937][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.076957][T10795] RIP: 0033:0x7f7aaeb8f749 [ 209.076974][T10795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.076991][T10795] RSP: 002b:00007f7aaf9e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.077011][T10795] RAX: ffffffffffffffda RBX: 00007f7aaede5fa0 RCX: 00007f7aaeb8f749 [ 209.077025][T10795] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 209.077037][T10795] RBP: 00007f7aaf9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 209.077049][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.077061][T10795] R13: 00007f7aaede6038 R14: 00007f7aaede5fa0 R15: 00007ffdff366a28 [ 209.077095][T10795] [ 209.437458][T10799] tipc: Started in network mode [ 209.452598][T10799] tipc: Node identity , cluster identity 4711 [ 209.460349][T10799] tipc: Failed to set node id, please configure manually [ 209.488216][T10799] tipc: Enabling of bearer rejected, failed to enable media [ 209.632669][T10806] syz.2.1467: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 209.726666][T10806] CPU: 1 UID: 0 PID: 10806 Comm: syz.2.1467 Not tainted syzkaller #0 PREEMPT(full) [ 209.726692][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.726705][T10806] Call Trace: [ 209.726712][T10806] [ 209.726727][T10806] dump_stack_lvl+0x189/0x250 [ 209.726761][T10806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.726787][T10806] ? __pfx__printk+0x10/0x10 [ 209.726807][T10806] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.726835][T10806] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.726864][T10806] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 209.726893][T10806] warn_alloc+0x214/0x310 [ 209.726922][T10806] ? stack_depot_save_flags+0x41b/0x860 [ 209.726951][T10806] ? __pfx_warn_alloc+0x10/0x10 [ 209.726977][T10806] ? kasan_save_track+0x3e/0x80 [ 209.726998][T10806] ? __kasan_kmalloc+0x93/0xb0 [ 209.727022][T10806] ? xsk_setsockopt+0x4dc/0x8d0 [ 209.727044][T10806] ? do_sock_setsockopt+0x17c/0x1b0 [ 209.727061][T10806] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 209.727076][T10806] ? do_syscall_64+0xfa/0xfa0 [ 209.727091][T10806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.727115][T10806] __vmalloc_node_range_noprof+0x125/0x12d0 [ 209.727164][T10806] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 209.727191][T10806] ? __kasan_kmalloc+0x93/0xb0 [ 209.727220][T10806] vmalloc_user_noprof+0xad/0xf0 [ 209.727243][T10806] ? xskq_create+0xbf/0x170 [ 209.727259][T10806] xskq_create+0xbf/0x170 [ 209.727276][T10806] xsk_init_queue+0xb0/0x110 [ 209.727302][T10806] xsk_setsockopt+0x4dc/0x8d0 [ 209.727327][T10806] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.727353][T10806] ? __pfx_aa_sk_perm+0x10/0x10 [ 209.727377][T10806] ? aa_sock_opt_perm+0xff/0x1b0 [ 209.727404][T10806] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 209.727420][T10806] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.727443][T10806] do_sock_setsockopt+0x17c/0x1b0 [ 209.727465][T10806] __x64_sys_setsockopt+0x13f/0x1b0 [ 209.727488][T10806] do_syscall_64+0xfa/0xfa0 [ 209.727502][T10806] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.727519][T10806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.727535][T10806] ? clear_bhb_loop+0x60/0xb0 [ 209.727554][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.727569][T10806] RIP: 0033:0x7f5240b8f749 [ 209.727584][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.727598][T10806] RSP: 002b:00007f5241a26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.727615][T10806] RAX: ffffffffffffffda RBX: 00007f5240de5fa0 RCX: 00007f5240b8f749 [ 209.727627][T10806] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 209.727637][T10806] RBP: 00007f5240c13f91 R08: 0000000000000004 R09: 0000000000000000 [ 209.727648][T10806] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.727658][T10806] R13: 00007f5240de6038 R14: 00007f5240de5fa0 R15: 00007fffb1d4ab98 [ 209.727685][T10806] [ 209.727709][T10806] Mem-Info: [ 210.026465][T10806] active_anon:7714 inactive_anon:0 isolated_anon:0 [ 210.026465][T10806] active_file:3712 inactive_file:39936 isolated_file:0 [ 210.026465][T10806] unevictable:768 dirty:414 writeback:0 [ 210.026465][T10806] slab_reclaimable:11849 slab_unreclaimable:127520 [ 210.026465][T10806] mapped:29993 shmem:1418 pagetables:1260 [ 210.026465][T10806] sec_pagetables:0 bounce:0 [ 210.026465][T10806] kernel_misc_reclaimable:0 [ 210.026465][T10806] free:1293160 free_pcp:17203 free_cma:0 [ 210.102792][T10822] syzkaller0: entered promiscuous mode [ 210.127935][T10822] syzkaller0: entered allmulticast mode [ 210.172815][T10806] Node 0 active_anon:31156kB inactive_anon:0kB active_file:14848kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120172kB dirty:1656kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13012kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.249778][T10806] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.298503][T10806] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.341439][T10806] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 210.341697][T10828] tipc: Enabled bearer , priority 0 [ 210.348351][T10806] Node 0 DMA32 free:1269780kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32256kB inactive_anon:0kB active_file:14848kB inactive_file:159544kB unevictable:1536kB writepending:1656kB zspages:0kB present:3129332kB managed:2565104kB mlocked:0kB bounce:0kB free_pcp:52556kB local_pcp:20424kB free_cma:0kB [ 210.388671][T10824] syzkaller0: entered promiscuous mode [ 210.394329][T10824] syzkaller0: entered allmulticast mode [ 210.401724][T10806] lowmem_reserve[]: 0 0 0 0 0 [ 210.409496][T10806] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.440306][T10806] lowmem_reserve[]: 0 0 0 0 0 [ 210.445353][T10806] Node 1 Normal free:3893684kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18080kB local_pcp:7392kB free_cma:0kB [ 210.478338][T10806] lowmem_reserve[]: 0 0 0 0 0 [ 210.483075][T10806] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.484280][T10824] tipc: Resetting bearer [ 210.501593][T10806] Node 0 DMA32: 745*4kB (UME) 466*8kB (UME) 212*16kB (UM) 378*32kB (UM) 84*64kB (UM) 46*128kB (UM) 28*256kB (UME) 21*512kB (UME) 5*1024kB (UME) 8*2048kB (UME) 292*4096kB (UM) = 1268916kB [ 210.525152][T10806] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 210.538020][T10806] Node 1 Normal: 203*4kB (U) 63*8kB (UME) 45*16kB (UME) 84*32kB (UME) 27*64kB (UME) 7*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893684kB [ 210.559733][T10823] tipc: Resetting bearer [ 210.566339][T10806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.586185][T10806] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.596438][T10823] tipc: Disabling bearer [ 210.602911][T10806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.618514][T10806] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.628136][T10806] 45062 total pagecache pages [ 210.632890][T10806] 0 pages in swap cache [ 210.642328][T10806] Free swap = 124996kB [ 210.646819][T10806] Total swap = 124996kB [ 210.651081][T10806] 2097051 pages RAM [ 210.698967][T10806] 0 pages HighMem/MovableOnly [ 210.709074][T10806] 424133 pages reserved [ 210.715956][T10806] 0 pages cma reserved [ 211.299874][T10858] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 211.476029][T10863] syzkaller0: entered promiscuous mode [ 211.492249][T10863] syzkaller0: entered allmulticast mode [ 211.498501][T10868] __nla_validate_parse: 6 callbacks suppressed [ 211.498515][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 211.618848][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1484'. [ 211.798824][T10875] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 211.812688][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 212.019533][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1495'. [ 212.156556][T10890] wg1 speed is unknown, defaulting to 1000 [ 212.194469][T10890] wg1 speed is unknown, defaulting to 1000 [ 212.466388][T10912] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 212.474377][T10912] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 212.682928][T10920] batadv_slave_1: entered promiscuous mode [ 212.739238][T10917] batadv_slave_1: left promiscuous mode [ 212.819661][T10924] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 212.847897][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 213.000048][T10935] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1507'. [ 213.186333][ T5829] Bluetooth: hci4: link tx timeout [ 213.191855][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.288590][T10941] tipc: Started in network mode [ 213.295588][T10941] tipc: Node identity 3e96a71a85b7, cluster identity 4711 [ 213.302923][T10941] tipc: Enabled bearer , priority 0 [ 213.390003][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 213.415544][T10941] syzkaller0: entered promiscuous mode [ 213.421145][T10941] syzkaller0: entered allmulticast mode [ 213.429787][T10941] tipc: Resetting bearer [ 213.450670][T10958] netlink: 'syz.1.1515': attribute type 4 has an invalid length. [ 213.575554][ T13] tipc: Resetting bearer [ 213.582961][T10940] tipc: Resetting bearer [ 214.710964][T10940] tipc: Disabling bearer [ 214.743585][ T6834] tipc: Node number set to 3139544858 [ 214.909577][T10990] netlink: 'syz.4.1525': attribute type 96 has an invalid length. [ 215.106327][T10999] tipc: Enabled bearer , priority 0 [ 215.138815][T10999] syzkaller0: entered promiscuous mode [ 215.163496][T10999] syzkaller0: entered allmulticast mode [ 215.216248][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 215.252204][T10997] tipc: Resetting bearer [ 215.279638][T10997] tipc: Disabling bearer [ 215.594307][T11011] wg1 speed is unknown, defaulting to 1000 [ 215.678314][T11011] wg1 speed is unknown, defaulting to 1000 [ 215.957619][T11027] FAULT_INJECTION: forcing a failure. [ 215.957619][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 216.043376][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.2.1529 Not tainted syzkaller #0 PREEMPT(full) [ 216.043403][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.043419][T11027] Call Trace: [ 216.043426][T11027] [ 216.043435][T11027] dump_stack_lvl+0x189/0x250 [ 216.043466][T11027] ? __pfx____ratelimit+0x10/0x10 [ 216.043496][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.043523][T11027] ? __pfx__printk+0x10/0x10 [ 216.043551][T11027] ? __pfx___might_resched+0x10/0x10 [ 216.043578][T11027] should_fail_ex+0x414/0x560 [ 216.043612][T11027] should_failslab+0xa8/0x100 [ 216.043634][T11027] __kmalloc_noprof+0xcb/0x7f0 [ 216.043662][T11027] ? skcipher_next_slow+0xee/0x230 [ 216.043684][T11027] ? skcipher_walk_next+0x7b3/0xbe0 [ 216.043711][T11027] skcipher_next_slow+0xee/0x230 [ 216.043738][T11027] cbc_decrypt+0xa4d/0xad0 [ 216.043768][T11027] ? __pfx_cbc_decrypt+0x10/0x10 [ 216.043819][T11027] skcipher_recvmsg+0xb37/0x11d0 [ 216.043868][T11027] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 216.043898][T11027] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 216.043917][T11027] ? security_socket_recvmsg+0x7e/0x2e0 [ 216.043937][T11027] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 216.043964][T11027] sock_recvmsg+0x22c/0x270 [ 216.043999][T11027] ____sys_recvmsg+0x1c9/0x460 [ 216.044031][T11027] ? __pfx_____sys_recvmsg+0x10/0x10 [ 216.044072][T11027] ? import_iovec+0x74/0xa0 [ 216.044101][T11027] ___sys_recvmsg+0x1b5/0x510 [ 216.044130][T11027] ? __pfx____sys_recvmsg+0x10/0x10 [ 216.044181][T11027] ? __fget_files+0x3a0/0x420 [ 216.044212][T11027] __x64_sys_recvmsg+0x198/0x260 [ 216.044239][T11027] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 216.044274][T11027] ? __pfx_ksys_write+0x10/0x10 [ 216.044306][T11027] ? do_syscall_64+0xbe/0xfa0 [ 216.044330][T11027] do_syscall_64+0xfa/0xfa0 [ 216.044353][T11027] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.044373][T11027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.044392][T11027] ? clear_bhb_loop+0x60/0xb0 [ 216.044416][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.044435][T11027] RIP: 0033:0x7f5240b8f749 [ 216.044453][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.044470][T11027] RSP: 002b:00007f5241a26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 216.044491][T11027] RAX: ffffffffffffffda RBX: 00007f5240de5fa0 RCX: 00007f5240b8f749 [ 216.044505][T11027] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 216.044518][T11027] RBP: 00007f5241a26090 R08: 0000000000000000 R09: 0000000000000000 [ 216.044530][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.044542][T11027] R13: 00007f5240de6038 R14: 00007f5240de5fa0 R15: 00007fffb1d4ab98 [ 216.044576][T11027] [ 216.541571][T11042] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 216.587457][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 216.641607][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 216.669749][T11047] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 216.679813][T11047] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1536'. [ 216.896488][T11056] netlink: 'syz.3.1539': attribute type 13 has an invalid length. [ 216.917096][T11056] netlink: 'syz.3.1539': attribute type 17 has an invalid length. [ 217.029284][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.054605][T11056] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.089339][T11056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.258697][T11064] syzkaller0: entered promiscuous mode [ 217.265604][T11064] syzkaller0: entered allmulticast mode [ 217.360867][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1541'. [ 217.377851][T11066] vlan2: entered promiscuous mode [ 217.383051][T11066] dummy0: entered promiscuous mode [ 217.501330][T11070] FAULT_INJECTION: forcing a failure. [ 217.501330][T11070] name failslab, interval 1, probability 0, space 0, times 0 [ 217.516092][T11070] CPU: 0 UID: 0 PID: 11070 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT(full) [ 217.516118][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.516130][T11070] Call Trace: [ 217.516138][T11070] [ 217.516146][T11070] dump_stack_lvl+0x189/0x250 [ 217.516177][T11070] ? __pfx____ratelimit+0x10/0x10 [ 217.516206][T11070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.516233][T11070] ? __pfx__printk+0x10/0x10 [ 217.516260][T11070] ? __pfx___might_resched+0x10/0x10 [ 217.516281][T11070] ? fs_reclaim_acquire+0x7d/0x100 [ 217.516305][T11070] should_fail_ex+0x414/0x560 [ 217.516340][T11070] should_failslab+0xa8/0x100 [ 217.516362][T11070] __kmalloc_node_noprof+0xd2/0x800 [ 217.516389][T11070] ? qdisc_alloc+0x92/0x900 [ 217.516416][T11070] qdisc_alloc+0x92/0x900 [ 217.516446][T11070] qdisc_create+0x12c/0xea0 [ 217.516478][T11070] ? qdisc_lookup+0x36d/0x6d0 [ 217.516506][T11070] tc_modify_qdisc+0x1547/0x2020 [ 217.516550][T11070] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 217.516608][T11070] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 217.516635][T11070] rtnetlink_rcv_msg+0x77c/0xb70 [ 217.516654][T11070] ? __lock_acquire+0xab9/0xd20 [ 217.516676][T11070] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 217.516695][T11070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.516733][T11070] netlink_rcv_skb+0x208/0x470 [ 217.516753][T11070] ? __lock_acquire+0xab9/0xd20 [ 217.516772][T11070] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.516794][T11070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.516828][T11070] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.516858][T11070] netlink_unicast+0x82f/0x9e0 [ 217.516887][T11070] ? __pfx_netlink_unicast+0x10/0x10 [ 217.516909][T11070] ? netlink_sendmsg+0x642/0xb30 [ 217.516928][T11070] ? skb_put+0x11b/0x210 [ 217.516961][T11070] netlink_sendmsg+0x805/0xb30 [ 217.516993][T11070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.517019][T11070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 217.517049][T11070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.517068][T11070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.517091][T11070] __sock_sendmsg+0x21c/0x270 [ 217.517124][T11070] ____sys_sendmsg+0x505/0x830 [ 217.517153][T11070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.517187][T11070] ? import_iovec+0x74/0xa0 [ 217.517214][T11070] ___sys_sendmsg+0x21f/0x2a0 [ 217.517240][T11070] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.517303][T11070] ? __fget_files+0x2a/0x420 [ 217.517321][T11070] ? __fget_files+0x3a0/0x420 [ 217.517345][T11070] __x64_sys_sendmsg+0x19b/0x260 [ 217.517367][T11070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.517394][T11070] ? __pfx_ksys_write+0x10/0x10 [ 217.517420][T11070] ? do_syscall_64+0xbe/0xfa0 [ 217.517439][T11070] do_syscall_64+0xfa/0xfa0 [ 217.517454][T11070] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.517471][T11070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.517486][T11070] ? clear_bhb_loop+0x60/0xb0 [ 217.517506][T11070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.517521][T11070] RIP: 0033:0x7efe90d8f749 [ 217.517536][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.517551][T11070] RSP: 002b:00007efe91ca3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.517568][T11070] RAX: ffffffffffffffda RBX: 00007efe90fe5fa0 RCX: 00007efe90d8f749 [ 217.517580][T11070] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 217.517591][T11070] RBP: 00007efe91ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 217.517601][T11070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.517611][T11070] R13: 00007efe90fe6038 R14: 00007efe90fe5fa0 R15: 00007ffe4d818378 [ 217.517638][T11070] [ 217.886210][T11074] FAULT_INJECTION: forcing a failure. [ 217.886210][T11074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.899300][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.1.1545 Not tainted syzkaller #0 PREEMPT(full) [ 217.899323][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.899335][T11074] Call Trace: [ 217.899342][T11074] [ 217.899351][T11074] dump_stack_lvl+0x189/0x250 [ 217.899383][T11074] ? __pfx____ratelimit+0x10/0x10 [ 217.899414][T11074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.899441][T11074] ? __pfx__printk+0x10/0x10 [ 217.899461][T11074] ? __might_fault+0xb0/0x130 [ 217.899500][T11074] should_fail_ex+0x414/0x560 [ 217.899534][T11074] _copy_from_iter+0x1de/0x1790 [ 217.899556][T11074] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 217.899583][T11074] ? kmalloc_reserve+0xbd/0x290 [ 217.899617][T11074] ? __pfx__copy_from_iter+0x10/0x10 [ 217.899636][T11074] ? __alloc_skb+0x2f1/0x430 [ 217.899658][T11074] ? __pfx___alloc_skb+0x10/0x10 [ 217.899679][T11074] ? netlink_sendmsg+0x642/0xb30 [ 217.899700][T11074] ? skb_put+0x11b/0x210 [ 217.899723][T11074] netlink_sendmsg+0x6b2/0xb30 [ 217.899755][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.899781][T11074] ? aa_sock_msg_perm+0xf1/0x1d0 [ 217.899811][T11074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.899831][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.899854][T11074] __sock_sendmsg+0x21c/0x270 [ 217.899886][T11074] ____sys_sendmsg+0x505/0x830 [ 217.899921][T11074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.899955][T11074] ? import_iovec+0x74/0xa0 [ 217.899983][T11074] ___sys_sendmsg+0x21f/0x2a0 [ 217.900009][T11074] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.900067][T11074] ? __fget_files+0x2a/0x420 [ 217.900085][T11074] ? __fget_files+0x3a0/0x420 [ 217.900115][T11074] __x64_sys_sendmsg+0x19b/0x260 [ 217.900142][T11074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.900174][T11074] ? __pfx_ksys_write+0x10/0x10 [ 217.900206][T11074] ? do_syscall_64+0xbe/0xfa0 [ 217.900230][T11074] do_syscall_64+0xfa/0xfa0 [ 217.900248][T11074] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.900268][T11074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.900288][T11074] ? clear_bhb_loop+0x60/0xb0 [ 217.900312][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.900332][T11074] RIP: 0033:0x7f705a78f749 [ 217.900349][T11074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.900366][T11074] RSP: 002b:00007f705b6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.900387][T11074] RAX: ffffffffffffffda RBX: 00007f705a9e5fa0 RCX: 00007f705a78f749 [ 217.900402][T11074] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000013 [ 217.900415][T11074] RBP: 00007f705b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 217.900427][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.900438][T11074] R13: 00007f705a9e6038 R14: 00007f705a9e5fa0 R15: 00007fff1468ddf8 [ 217.900472][T11074] [ 218.357777][T11072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.595637][T11090] FAULT_INJECTION: forcing a failure. [ 218.595637][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 218.608536][T11090] CPU: 1 UID: 0 PID: 11090 Comm: syz.1.1549 Not tainted syzkaller #0 PREEMPT(full) [ 218.608560][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.608571][T11090] Call Trace: [ 218.608579][T11090] [ 218.608587][T11090] dump_stack_lvl+0x189/0x250 [ 218.608617][T11090] ? __pfx____ratelimit+0x10/0x10 [ 218.608646][T11090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.608671][T11090] ? __pfx__printk+0x10/0x10 [ 218.608703][T11090] should_fail_ex+0x414/0x560 [ 218.608737][T11090] should_failslab+0xa8/0x100 [ 218.608758][T11090] kmem_cache_alloc_noprof+0x74/0x6e0 [ 218.608786][T11090] ? radix_tree_node_alloc+0x7e/0x3a0 [ 218.608821][T11090] radix_tree_node_alloc+0x7e/0x3a0 [ 218.608863][T11090] idr_get_free+0x2b3/0xa70 [ 218.608902][T11090] idr_alloc_u32+0x159/0x2d0 [ 218.608927][T11090] ? __pfx_idr_alloc_u32+0x10/0x10 [ 218.608950][T11090] ? do_raw_spin_lock+0x121/0x290 [ 218.608987][T11090] idr_alloc_cyclic+0x9b/0x1b0 [ 218.609013][T11090] bpf_link_prime+0x6b/0x220 [ 218.609044][T11090] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 218.609073][T11090] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 218.609107][T11090] ? __fget_files+0x2a/0x420 [ 218.609137][T11090] bpf_raw_tracepoint_open+0x1b2/0x220 [ 218.609162][T11090] __sys_bpf+0x73e/0x860 [ 218.609183][T11090] ? __pfx___sys_bpf+0x10/0x10 [ 218.609221][T11090] ? ksys_write+0x22a/0x250 [ 218.609252][T11090] ? __pfx_ksys_write+0x10/0x10 [ 218.609285][T11090] __x64_sys_bpf+0x7c/0x90 [ 218.609313][T11090] do_syscall_64+0xfa/0xfa0 [ 218.609331][T11090] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.609351][T11090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.609371][T11090] ? clear_bhb_loop+0x60/0xb0 [ 218.609395][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.609414][T11090] RIP: 0033:0x7f705a78f749 [ 218.609431][T11090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.609448][T11090] RSP: 002b:00007f705b6b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.609468][T11090] RAX: ffffffffffffffda RBX: 00007f705a9e5fa0 RCX: 00007f705a78f749 [ 218.609483][T11090] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 218.609496][T11090] RBP: 00007f705b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 218.609508][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.609520][T11090] R13: 00007f705a9e6038 R14: 00007f705a9e5fa0 R15: 00007fff1468ddf8 [ 218.609554][T11090] [ 219.053582][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1551'. [ 219.082918][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 219.125363][T11099] erspan0: entered promiscuous mode [ 219.134622][T11099] macvlan0: entered allmulticast mode [ 219.140011][T11099] erspan0: entered allmulticast mode [ 219.332043][T11109] wg1 speed is unknown, defaulting to 1000 [ 219.359470][T11109] wg1 speed is unknown, defaulting to 1000 [ 219.366933][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 219.376519][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 219.646511][T11123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1561'. [ 219.895814][T11135] wg1 speed is unknown, defaulting to 1000 [ 219.918722][T11135] wg1 speed is unknown, defaulting to 1000 [ 219.927269][T11141] FAULT_INJECTION: forcing a failure. [ 219.927269][T11141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.952482][T11141] CPU: 0 UID: 0 PID: 11141 Comm: syz.4.1565 Not tainted syzkaller #0 PREEMPT(full) [ 219.952506][T11141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.952518][T11141] Call Trace: [ 219.952525][T11141] [ 219.952534][T11141] dump_stack_lvl+0x189/0x250 [ 219.952563][T11141] ? __pfx____ratelimit+0x10/0x10 [ 219.952592][T11141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.952615][T11141] ? __pfx__printk+0x10/0x10 [ 219.952636][T11141] ? __might_fault+0xb0/0x130 [ 219.952674][T11141] should_fail_ex+0x414/0x560 [ 219.952721][T11141] _copy_from_user+0x2d/0xb0 [ 219.952747][T11141] sctp_getsockopt_context+0xb5/0x4c0 [ 219.952771][T11141] ? __pfx_sctp_getsockopt_context+0x10/0x10 [ 219.952802][T11141] sctp_getsockopt+0x4a0/0xb60 [ 219.952823][T11141] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 219.952855][T11141] do_sock_getsockopt+0x372/0x450 [ 219.952882][T11141] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.952904][T11141] ? do_syscall_64+0xa0/0xfa0 [ 219.952923][T11141] ? __fget_files+0x2a/0x420 [ 219.952942][T11141] ? __fget_files+0x3a0/0x420 [ 219.952958][T11141] ? __fget_files+0x2a/0x420 [ 219.952985][T11141] __x64_sys_getsockopt+0x1a5/0x250 [ 219.953007][T11141] ? do_syscall_64+0xa0/0xfa0 [ 219.953027][T11141] ? do_syscall_64+0xa0/0xfa0 [ 219.953051][T11141] do_syscall_64+0xfa/0xfa0 [ 219.953069][T11141] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.953089][T11141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.953109][T11141] ? clear_bhb_loop+0x60/0xb0 [ 219.953133][T11141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.953153][T11141] RIP: 0033:0x7f55b1d8f749 [ 219.953170][T11141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.953187][T11141] RSP: 002b:00007f55b2c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.953206][T11141] RAX: ffffffffffffffda RBX: 00007f55b1fe6090 RCX: 00007f55b1d8f749 [ 219.953220][T11141] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 219.953231][T11141] RBP: 00007f55b2c6e090 R08: 0000200000000080 R09: 0000000000000000 [ 219.953244][T11141] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.953256][T11141] R13: 00007f55b1fe6128 R14: 00007f55b1fe6090 R15: 00007fff245bac48 [ 219.953288][T11141] [ 220.354919][T11140] wg1 speed is unknown, defaulting to 1000 [ 220.365506][T11140] wg1 speed is unknown, defaulting to 1000 [ 220.491352][T11148] FAULT_INJECTION: forcing a failure. [ 220.491352][T11148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.530672][T11148] CPU: 1 UID: 0 PID: 11148 Comm: syz.2.1568 Not tainted syzkaller #0 PREEMPT(full) [ 220.530697][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.530710][T11148] Call Trace: [ 220.530719][T11148] [ 220.530728][T11148] dump_stack_lvl+0x189/0x250 [ 220.530760][T11148] ? __pfx____ratelimit+0x10/0x10 [ 220.530792][T11148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.530819][T11148] ? __pfx__printk+0x10/0x10 [ 220.530854][T11148] should_fail_ex+0x414/0x560 [ 220.530890][T11148] _copy_to_user+0x31/0xb0 [ 220.530924][T11148] simple_read_from_buffer+0xe1/0x170 [ 220.530960][T11148] proc_fail_nth_read+0x1b3/0x220 [ 220.530990][T11148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.531019][T11148] ? rw_verify_area+0x2a6/0x4d0 [ 220.531045][T11148] ? __lock_acquire+0xab9/0xd20 [ 220.531062][T11148] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.531090][T11148] vfs_read+0x200/0xa30 [ 220.531116][T11148] ? fdget_pos+0x247/0x320 [ 220.531140][T11148] ? __pfx___mutex_lock+0x10/0x10 [ 220.531162][T11148] ? __pfx_vfs_read+0x10/0x10 [ 220.531191][T11148] ? __fget_files+0x2a/0x420 [ 220.531215][T11148] ? __fget_files+0x3a0/0x420 [ 220.531233][T11148] ? __fget_files+0x2a/0x420 [ 220.531262][T11148] ksys_read+0x145/0x250 [ 220.531292][T11148] ? __pfx_ksys_read+0x10/0x10 [ 220.531324][T11148] ? do_syscall_64+0xbe/0xfa0 [ 220.531349][T11148] do_syscall_64+0xfa/0xfa0 [ 220.531368][T11148] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.531388][T11148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.531409][T11148] ? clear_bhb_loop+0x60/0xb0 [ 220.531434][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.531455][T11148] RIP: 0033:0x7f5240b8e15c [ 220.531474][T11148] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.531493][T11148] RSP: 002b:00007f5241a26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.531515][T11148] RAX: ffffffffffffffda RBX: 00007f5240de5fa0 RCX: 00007f5240b8e15c [ 220.531531][T11148] RDX: 000000000000000f RSI: 00007f5241a260a0 RDI: 0000000000000006 [ 220.531544][T11148] RBP: 00007f5241a26090 R08: 0000000000000000 R09: 0000000000000000 [ 220.531558][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.531571][T11148] R13: 00007f5240de6038 R14: 00007f5240de5fa0 R15: 00007fffb1d4ab98 [ 220.531612][T11148] [ 221.174549][T11167] wg1 speed is unknown, defaulting to 1000 [ 221.186753][T11167] wg1 speed is unknown, defaulting to 1000 [ 222.270554][T11214] batadv_slave_1: entered promiscuous mode [ 222.309613][T11212] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 222.350584][T11213] batadv_slave_1: left promiscuous mode [ 222.570026][T11224] syzkaller0: entered promiscuous mode [ 222.582319][T11224] syzkaller0: entered allmulticast mode [ 222.634735][T11224] tipc: Enabled bearer , priority 0 [ 222.664248][T11222] tipc: Resetting bearer [ 222.682037][T11234] FAULT_INJECTION: forcing a failure. [ 222.682037][T11234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.709839][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.4.1598 Not tainted syzkaller #0 PREEMPT(full) [ 222.709863][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.709875][T11234] Call Trace: [ 222.709882][T11234] [ 222.709890][T11234] dump_stack_lvl+0x189/0x250 [ 222.709921][T11234] ? __pfx____ratelimit+0x10/0x10 [ 222.709951][T11234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.709977][T11234] ? __pfx__printk+0x10/0x10 [ 222.710011][T11234] should_fail_ex+0x414/0x560 [ 222.710046][T11234] _copy_from_user+0x2d/0xb0 [ 222.710072][T11234] ___bpf_copy_key+0xaa/0x120 [ 222.710096][T11234] map_update_elem+0x200/0x750 [ 222.710120][T11234] ? bpf_lsm_bpf+0x9/0x20 [ 222.710148][T11234] __sys_bpf+0x619/0x860 [ 222.710170][T11234] ? __pfx___sys_bpf+0x10/0x10 [ 222.710205][T11234] ? ksys_write+0x22a/0x250 [ 222.710235][T11234] ? __pfx_ksys_write+0x10/0x10 [ 222.710268][T11234] __x64_sys_bpf+0x7c/0x90 [ 222.710297][T11234] do_syscall_64+0xfa/0xfa0 [ 222.710315][T11234] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.710335][T11234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.710354][T11234] ? clear_bhb_loop+0x60/0xb0 [ 222.710378][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.710396][T11234] RIP: 0033:0x7f55b1d8f749 [ 222.710414][T11234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.710431][T11234] RSP: 002b:00007f55b2c8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.710451][T11234] RAX: ffffffffffffffda RBX: 00007f55b1fe5fa0 RCX: 00007f55b1d8f749 [ 222.710466][T11234] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 222.710478][T11234] RBP: 00007f55b2c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.710490][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.710502][T11234] R13: 00007f55b1fe6038 R14: 00007f55b1fe5fa0 R15: 00007fff245bac48 [ 222.710535][T11234] [ 222.959083][T11222] tipc: Disabling bearer [ 223.131052][T11248] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1601'. [ 223.163057][T11253] batadv_slave_1: entered promiscuous mode [ 223.188305][T11252] batadv_slave_1: left promiscuous mode [ 223.279926][T11258] bond3 (unregistering): Released all slaves [ 223.334345][T11264] syzkaller0: entered promiscuous mode [ 223.340468][T11264] syzkaller0: entered allmulticast mode [ 223.417649][T11264] tipc: Enabled bearer , priority 0 [ 223.540860][T11264] tipc: Resetting bearer [ 223.582017][T11272] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 223.634327][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1608'. [ 223.645144][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 223.664599][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 223.668042][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'. [ 223.684099][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'. [ 223.693594][T11263] tipc: Resetting bearer [ 223.734959][T11263] tipc: Disabling bearer [ 223.757995][T11276] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 223.760718][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'. [ 223.775751][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'. [ 223.796769][T11284] netlink: 'syz.4.1611': attribute type 4 has an invalid length. [ 223.921689][T11291] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 223.948313][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'. [ 223.957568][T11280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'. [ 223.979481][T11291] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 224.308051][T11311] netlink: 'syz.0.1619': attribute type 11 has an invalid length. [ 224.351958][T11311] No such timeout policy "syz1" [ 224.383735][T11311] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20002 [ 224.446588][T11320] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 224.610656][T11334] openvswitch: netlink: Unknown key attributes 2 [ 224.685157][T11337] pimreg3: entered allmulticast mode [ 224.887649][T11344] netlink: 'syz.1.1630': attribute type 4 has an invalid length. [ 224.966324][T11344] netlink: 'syz.1.1630': attribute type 4 has an invalid length. [ 225.012746][T11344] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 225.489314][T11376] netlink: 'syz.1.1639': attribute type 15 has an invalid length. [ 225.516901][T11381] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.539869][T11376] netlink: 'syz.1.1639': attribute type 15 has an invalid length. [ 225.633543][T11384] `: renamed from team0 (while UP) [ 226.121333][T11403] syzkaller0: entered promiscuous mode [ 226.138851][T11403] syzkaller0: entered allmulticast mode [ 226.155986][T11399] tipc: Enabled bearer , priority 0 [ 226.216568][T11391] tipc: Resetting bearer [ 226.328609][T11428] FAULT_INJECTION: forcing a failure. [ 226.328609][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 226.343306][T11428] CPU: 1 UID: 0 PID: 11428 Comm: syz.3.1648 Not tainted syzkaller #0 PREEMPT(full) [ 226.343331][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.343343][T11428] Call Trace: [ 226.343350][T11428] [ 226.343358][T11428] dump_stack_lvl+0x189/0x250 [ 226.343390][T11428] ? __pfx____ratelimit+0x10/0x10 [ 226.343420][T11428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.343451][T11428] ? __pfx__printk+0x10/0x10 [ 226.343478][T11428] ? __pfx___might_resched+0x10/0x10 [ 226.343500][T11428] ? fs_reclaim_acquire+0x7d/0x100 [ 226.343525][T11428] should_fail_ex+0x414/0x560 [ 226.343558][T11428] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 226.343588][T11428] should_failslab+0xa8/0x100 [ 226.343609][T11428] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 226.343636][T11428] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 226.343664][T11428] ? alloc_inode+0x6a/0x1b0 [ 226.343692][T11428] ? __pfx_simple_start_creating+0x10/0x10 [ 226.343717][T11428] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 226.343745][T11428] alloc_inode+0x6a/0x1b0 [ 226.343776][T11428] new_inode+0x22/0x170 [ 226.343800][T11428] __debugfs_create_file+0x14d/0x4f0 [ 226.343836][T11428] debugfs_create_file_full+0x3f/0x60 [ 226.343869][T11428] ref_tracker_dir_debugfs+0x14e/0x270 [ 226.343890][T11428] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 226.343941][T11428] ? trace_kmalloc+0x1f/0xd0 [ 226.343965][T11428] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 226.344000][T11428] ? __raw_spin_lock_init+0x45/0x100 [ 226.344031][T11428] alloc_netdev_mqs+0x272/0x11b0 [ 226.344057][T11428] ? __pfx_l2tp_eth_dev_setup+0x10/0x10 [ 226.344101][T11428] l2tp_eth_create+0x1bd/0xbd0 [ 226.344129][T11428] ? l2tp_tunnel_get+0x8d/0x400 [ 226.344150][T11428] ? l2tp_tunnel_get+0x365/0x400 [ 226.344169][T11428] ? l2tp_tunnel_get+0x8d/0x400 [ 226.344189][T11428] ? __pfx_l2tp_eth_create+0x10/0x10 [ 226.344231][T11428] l2tp_nl_cmd_session_create+0x733/0xc20 [ 226.344272][T11428] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 226.344309][T11428] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 226.344346][T11428] genl_family_rcv_msg_doit+0x215/0x300 [ 226.344381][T11428] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.344425][T11428] ? bpf_lsm_capable+0x9/0x20 [ 226.344448][T11428] ? security_capable+0x7e/0x2e0 [ 226.344484][T11428] genl_rcv_msg+0x60e/0x790 [ 226.344519][T11428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.344545][T11428] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 226.344577][T11428] ? __asan_memcpy+0x40/0x70 [ 226.344603][T11428] ? __pfx_ref_tracker_free+0x10/0x10 [ 226.344632][T11428] netlink_rcv_skb+0x208/0x470 [ 226.344651][T11428] ? __lock_acquire+0xab9/0xd20 [ 226.344671][T11428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.344700][T11428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.344744][T11428] ? down_read+0x1ad/0x2e0 [ 226.344771][T11428] genl_rcv+0x28/0x40 [ 226.344796][T11428] netlink_unicast+0x82f/0x9e0 [ 226.344826][T11428] ? __pfx_netlink_unicast+0x10/0x10 [ 226.344848][T11428] ? netlink_sendmsg+0x642/0xb30 [ 226.344868][T11428] ? skb_put+0x11b/0x210 [ 226.344894][T11428] netlink_sendmsg+0x805/0xb30 [ 226.344927][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.344954][T11428] ? aa_sock_msg_perm+0xf1/0x1d0 [ 226.344985][T11428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.345005][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.345029][T11428] __sock_sendmsg+0x21c/0x270 [ 226.345061][T11428] ____sys_sendmsg+0x505/0x830 [ 226.345097][T11428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.345132][T11428] ? import_iovec+0x74/0xa0 [ 226.345161][T11428] ___sys_sendmsg+0x21f/0x2a0 [ 226.345188][T11428] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.345255][T11428] ? __fget_files+0x2a/0x420 [ 226.345272][T11428] ? __fget_files+0x3a0/0x420 [ 226.345305][T11428] __x64_sys_sendmsg+0x19b/0x260 [ 226.345331][T11428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.345367][T11428] ? __pfx_ksys_write+0x10/0x10 [ 226.345398][T11428] ? do_syscall_64+0xbe/0xfa0 [ 226.345421][T11428] do_syscall_64+0xfa/0xfa0 [ 226.345439][T11428] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.345459][T11428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.345478][T11428] ? clear_bhb_loop+0x60/0xb0 [ 226.345502][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.345521][T11428] RIP: 0033:0x7f7aaeb8f749 [ 226.345538][T11428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.345556][T11428] RSP: 002b:00007f7aaf9e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.345578][T11428] RAX: ffffffffffffffda RBX: 00007f7aaede5fa0 RCX: 00007f7aaeb8f749 [ 226.345593][T11428] RDX: 0000000020000084 RSI: 0000200000000140 RDI: 0000000000000006 [ 226.345606][T11428] RBP: 00007f7aaf9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 226.345618][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.345631][T11428] R13: 00007f7aaede6038 R14: 00007f7aaede5fa0 R15: 00007ffdff366a28 [ 226.345667][T11428] [ 226.345765][T11428] debugfs: out of free dentries, can not create file 'netdev@ffff888031c44618' [ 227.907324][T11391] tipc: Disabling bearer [ 227.916345][T11432] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 227.997839][T11440] wg1 speed is unknown, defaulting to 1000 [ 228.021522][T11446] wg1 speed is unknown, defaulting to 1000 [ 228.023015][T11440] wg1 speed is unknown, defaulting to 1000 [ 228.042530][T11447] wg1 speed is unknown, defaulting to 1000 [ 228.045717][T11446] wg1 speed is unknown, defaulting to 1000 [ 228.071032][T11453] syzkaller0: entered promiscuous mode [ 228.078440][T11453] syzkaller0: entered allmulticast mode [ 228.100755][T11447] wg1 speed is unknown, defaulting to 1000 [ 228.136446][T11455] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 228.347913][T11459] __nla_validate_parse: 11 callbacks suppressed [ 228.347934][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'. [ 228.370590][T11460] wg1 speed is unknown, defaulting to 1000 [ 228.395231][T11460] wg1 speed is unknown, defaulting to 1000 [ 228.463742][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 228.472630][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 228.745738][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.765468][T11476] validate_nla: 3 callbacks suppressed [ 228.765484][T11476] netlink: 'syz.1.1661': attribute type 4 has an invalid length. [ 228.801717][T11476] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 229.055515][T11492] syz_tun: entered promiscuous mode [ 229.066908][T11485] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 229.076700][T11492] macvtap0: entered promiscuous mode [ 229.117320][T11498] tipc: Enabled bearer , priority 0 [ 229.223986][T11488] syzkaller0: entered promiscuous mode [ 229.231114][T11488] syzkaller0: entered allmulticast mode [ 229.237294][T11488] tipc: Resetting bearer [ 229.242573][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 229.251994][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 229.276785][T11487] tipc: Resetting bearer [ 229.429613][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1671'. [ 229.501270][T11512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.671996][T11518] netlink: 'syz.1.1674': attribute type 4 has an invalid length. [ 229.730012][T11519] netlink: 'syz.1.1674': attribute type 4 has an invalid length. [ 230.581529][T11487] tipc: Disabling bearer [ 230.593518][T11508] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 230.594502][T11511] erspan0: entered allmulticast mode [ 230.620422][T11524] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 230.646958][ T5939] tipc: Node number set to 11552 [ 230.807728][T11535] netlink: get zone limit has 8 unknown bytes [ 230.959054][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 230.969780][T11547] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1684'. [ 230.981165][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 230.981555][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 230.994737][T11547] ip6gretap0: entered promiscuous mode [ 231.022147][T11548] vlan2: entered promiscuous mode [ 231.031622][T11548] bridge0: entered promiscuous mode [ 231.071502][T11552] pim6reg: entered allmulticast mode [ 231.086349][T11552] pim6reg: left allmulticast mode [ 231.195937][T11557] tipc: Enabled bearer , priority 0 [ 231.206334][T11556] tipc: Disabling bearer [ 231.333770][T11564] pimreg: entered allmulticast mode [ 231.345798][T11560] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 231.656727][T11580] batadv_slave_1: entered promiscuous mode [ 231.665374][T11579] batadv_slave_1: left promiscuous mode [ 231.723021][T11582] team0: Caught tx_queue_len zero misconfig [ 231.757398][T11584] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 231.765637][T11583] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 231.904969][T11594] tipc: Enabled bearer , priority 0 [ 231.936291][T11592] tipc: Disabling bearer [ 231.961620][T11596] FAULT_INJECTION: forcing a failure. [ 231.961620][T11596] name failslab, interval 1, probability 0, space 0, times 0 [ 231.974593][T11596] CPU: 0 UID: 0 PID: 11596 Comm: syz.4.1699 Not tainted syzkaller #0 PREEMPT(full) [ 231.974615][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.974632][T11596] Call Trace: [ 231.974639][T11596] [ 231.974647][T11596] dump_stack_lvl+0x189/0x250 [ 231.974677][T11596] ? __pfx____ratelimit+0x10/0x10 [ 231.974707][T11596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.974732][T11596] ? __pfx__printk+0x10/0x10 [ 231.974767][T11596] should_fail_ex+0x414/0x560 [ 231.974797][T11596] ? hash_ip4_add+0x78/0x1ec0 [ 231.974822][T11596] should_failslab+0xa8/0x100 [ 231.974844][T11596] __kmalloc_noprof+0xcb/0x7f0 [ 231.974869][T11596] ? hash_ip4_add+0xc81/0x1ec0 [ 231.974891][T11596] ? hash_ip4_add+0x78/0x1ec0 [ 231.974917][T11596] ? hash_ip4_add+0x78/0x1ec0 [ 231.974942][T11596] hash_ip4_add+0xc81/0x1ec0 [ 231.974979][T11596] ? __pfx_ip_set_get_ipaddr4+0x10/0x10 [ 231.975024][T11596] hash_ip4_uadt+0x640/0x850 [ 231.975053][T11596] ? __pfx_hash_ip4_add+0x10/0x10 [ 231.975078][T11596] ? __pfx_hash_ip4_uadt+0x10/0x10 [ 231.975125][T11596] call_ad+0x178/0xb00 [ 231.975156][T11596] ? __pfx_call_ad+0x10/0x10 [ 231.975191][T11596] ? __nla_parse+0x40/0x60 [ 231.975216][T11596] ip_set_ad+0x791/0x930 [ 231.975245][T11596] ? __pfx_ip_set_ad+0x10/0x10 [ 231.975307][T11596] nfnetlink_rcv_msg+0xb4d/0x1130 [ 231.975326][T11596] ? __lock_acquire+0xab9/0xd20 [ 231.975345][T11596] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 231.975386][T11596] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 231.975439][T11596] ? __lock_acquire+0xab9/0xd20 [ 231.975475][T11596] netlink_rcv_skb+0x208/0x470 [ 231.975499][T11596] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 231.975520][T11596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.975562][T11596] ? bpf_lsm_capable+0x9/0x20 [ 231.975586][T11596] ? security_capable+0x7e/0x2e0 [ 231.975621][T11596] nfnetlink_rcv+0x282/0x2590 [ 231.975641][T11596] ? unwind_get_return_address+0x4d/0x90 [ 231.975665][T11596] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.975691][T11596] ? arch_stack_walk+0xfc/0x150 [ 231.975728][T11596] ? stack_trace_save+0x9c/0xe0 [ 231.975757][T11596] ? stack_depot_save_flags+0x40/0x860 [ 231.975786][T11596] ? __pfx_stack_trace_save+0x10/0x10 [ 231.975816][T11596] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 231.975833][T11596] ? kasan_save_track+0x4f/0x80 [ 231.975858][T11596] ? kasan_save_track+0x3e/0x80 [ 231.975884][T11596] ? __kasan_slab_alloc+0x6c/0x80 [ 231.975911][T11596] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 231.975936][T11596] ? kmalloc_reserve+0xbd/0x290 [ 231.975955][T11596] ? __alloc_skb+0x27e/0x430 [ 231.975972][T11596] ? netlink_sendmsg+0x5c6/0xb30 [ 231.975998][T11596] ? __lock_acquire+0xab9/0xd20 [ 231.976046][T11596] ? __lock_acquire+0xab9/0xd20 [ 231.976077][T11596] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.976106][T11596] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.976136][T11596] netlink_unicast+0x82f/0x9e0 [ 231.976166][T11596] ? __pfx_netlink_unicast+0x10/0x10 [ 231.976187][T11596] ? netlink_sendmsg+0x642/0xb30 [ 231.976208][T11596] ? skb_put+0x11b/0x210 [ 231.976232][T11596] netlink_sendmsg+0x805/0xb30 [ 231.976266][T11596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.976292][T11596] ? aa_sock_msg_perm+0xf1/0x1d0 [ 231.976322][T11596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.976340][T11596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.976363][T11596] __sock_sendmsg+0x21c/0x270 [ 231.976394][T11596] ____sys_sendmsg+0x505/0x830 [ 231.976423][T11596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.976457][T11596] ? import_iovec+0x74/0xa0 [ 231.976486][T11596] ___sys_sendmsg+0x21f/0x2a0 [ 231.976512][T11596] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.976583][T11596] ? __fget_files+0x2a/0x420 [ 231.976601][T11596] ? __fget_files+0x3a0/0x420 [ 231.976631][T11596] __x64_sys_sendmsg+0x19b/0x260 [ 231.976658][T11596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.976692][T11596] ? __pfx_ksys_write+0x10/0x10 [ 231.976725][T11596] ? do_syscall_64+0xbe/0xfa0 [ 231.976749][T11596] do_syscall_64+0xfa/0xfa0 [ 231.976767][T11596] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.976786][T11596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.976806][T11596] ? clear_bhb_loop+0x60/0xb0 [ 231.976831][T11596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.976849][T11596] RIP: 0033:0x7f55b1d8f749 [ 231.976867][T11596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.976885][T11596] RSP: 002b:00007f55b2c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.976906][T11596] RAX: ffffffffffffffda RBX: 00007f55b1fe5fa0 RCX: 00007f55b1d8f749 [ 231.976921][T11596] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 231.976934][T11596] RBP: 00007f55b2c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.976947][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.976959][T11596] R13: 00007f55b1fe6038 R14: 00007f55b1fe5fa0 R15: 00007fff245bac48 [ 231.976994][T11596] [ 232.731176][T11612] openvswitch: netlink: Unknown key attributes 2 [ 233.039741][T11619] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 233.108535][T11621] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 233.361524][T11628] wg1 speed is unknown, defaulting to 1000 [ 233.371536][T11628] wg1 speed is unknown, defaulting to 1000 [ 233.419445][T11636] batadv_slave_1: entered promiscuous mode [ 233.469040][T11635] batadv_slave_1: left promiscuous mode [ 233.498042][T11641] netlink: 'syz.3.1719': attribute type 12 has an invalid length. [ 233.515290][T11639] tipc: Enabled bearer , priority 0 [ 233.524930][T11637] tipc: Disabling bearer [ 233.554403][T11641] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 233.607677][T11650] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 233.610499][T11641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.797957][T11650] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 234.000101][T11674] __nla_validate_parse: 1 callbacks suppressed [ 234.000119][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'. [ 234.070185][T11678] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1730'. [ 234.095265][T11678] netlink: 'syz.3.1730': attribute type 9 has an invalid length. [ 234.131294][T11678] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1730'. [ 234.165959][T11678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1730'. [ 234.444193][T11689] wg1 speed is unknown, defaulting to 1000 [ 234.465317][T11689] wg1 speed is unknown, defaulting to 1000 [ 235.054750][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'. [ 235.979125][T11732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1744'. [ 236.109220][T11735] openvswitch: netlink: Unknown key attributes 2 [ 236.282775][T11727] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 236.669226][T11746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1747'. [ 236.706093][T11745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1747'. [ 237.473603][T11761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1749'. [ 238.499624][T11728] macvtap1: entered promiscuous mode [ 238.834802][T11772] vlan3: entered promiscuous mode [ 239.280622][T11784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.425792][T11790] FAULT_INJECTION: forcing a failure. [ 239.425792][T11790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.512414][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.1.1759 Not tainted syzkaller #0 PREEMPT(full) [ 239.512441][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.512458][T11790] Call Trace: [ 239.512465][T11790] [ 239.512473][T11790] dump_stack_lvl+0x189/0x250 [ 239.512504][T11790] ? __pfx____ratelimit+0x10/0x10 [ 239.512534][T11790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.512560][T11790] ? __pfx__printk+0x10/0x10 [ 239.512581][T11790] ? __might_fault+0xb0/0x130 [ 239.512620][T11790] should_fail_ex+0x414/0x560 [ 239.512654][T11790] _copy_from_iter+0x1de/0x1790 [ 239.512674][T11790] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 239.512701][T11790] ? kmalloc_reserve+0xbd/0x290 [ 239.512733][T11790] ? __pfx__copy_from_iter+0x10/0x10 [ 239.512752][T11790] ? __alloc_skb+0x2f1/0x430 [ 239.512773][T11790] ? __pfx___alloc_skb+0x10/0x10 [ 239.512803][T11790] ? netlink_sendmsg+0x642/0xb30 [ 239.512823][T11790] ? skb_put+0x11b/0x210 [ 239.512847][T11790] netlink_sendmsg+0x6b2/0xb30 [ 239.512878][T11790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.512903][T11790] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.512932][T11790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.512950][T11790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.512972][T11790] __sock_sendmsg+0x21c/0x270 [ 239.513001][T11790] ____sys_sendmsg+0x505/0x830 [ 239.513028][T11790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.513059][T11790] ? import_iovec+0x74/0xa0 [ 239.513087][T11790] ___sys_sendmsg+0x21f/0x2a0 [ 239.513113][T11790] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.513172][T11790] ? __fget_files+0x2a/0x420 [ 239.513193][T11790] ? __fget_files+0x3a0/0x420 [ 239.513220][T11790] __x64_sys_sendmsg+0x19b/0x260 [ 239.513245][T11790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.513277][T11790] ? __pfx_ksys_write+0x10/0x10 [ 239.513308][T11790] ? do_syscall_64+0xbe/0xfa0 [ 239.513331][T11790] do_syscall_64+0xfa/0xfa0 [ 239.513348][T11790] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.513367][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.513386][T11790] ? clear_bhb_loop+0x60/0xb0 [ 239.513408][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.513426][T11790] RIP: 0033:0x7f705a78f749 [ 239.513443][T11790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.513459][T11790] RSP: 002b:00007f705b6b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.513480][T11790] RAX: ffffffffffffffda RBX: 00007f705a9e5fa0 RCX: 00007f705a78f749 [ 239.513494][T11790] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 239.513507][T11790] RBP: 00007f705b6b0090 R08: 0000000000000000 R09: 0000000000000000 [ 239.513520][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.513531][T11790] R13: 00007f705a9e6038 R14: 00007f705a9e5fa0 R15: 00007fff1468ddf8 [ 239.513563][T11790] [ 239.529804][T11794] syzkaller0: entered promiscuous mode [ 239.863075][T11794] syzkaller0: entered allmulticast mode [ 239.876068][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 239.923125][T11798] xfrm1: entered promiscuous mode [ 239.936960][T11798] xfrm1: entered allmulticast mode [ 239.949808][T11802] IPVS: length: 24 != 61464 [ 239.973651][T11795] netlink: 'syz.3.1760': attribute type 12 has an invalid length. [ 240.495692][T11809] syzkaller0: entered promiscuous mode [ 240.501255][T11809] syzkaller0: entered allmulticast mode [ 242.745394][T11822] wg1 speed is unknown, defaulting to 1000 [ 242.763792][T11832] netlink: 'syz.2.1770': attribute type 10 has an invalid length. [ 242.869391][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 242.948992][T11841] netlink: 'syz.1.1772': attribute type 4 has an invalid length. [ 243.012105][T11843] netlink: 'syz.1.1772': attribute type 4 has an invalid length. [ 243.101041][T11822] wg1 speed is unknown, defaulting to 1000 [ 243.338189][T11838] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 243.602631][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'. [ 244.083391][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'. [ 250.818530][T11856] syzkaller0: entered promiscuous mode [ 250.851811][T11856] syzkaller0: entered allmulticast mode [ 254.763224][ C0] sched: DL replenish lagged too much [ 255.737555][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769576][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.566876][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.886133][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.929063][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.113441][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.254598][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.263371][ T5839] Bluetooth: hci5: command tx timeout [ 296.297531][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 296.367849][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 296.486521][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.222475][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.535436][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.344215][ T5829] Bluetooth: hci5: command tx timeout [ 300.533381][ T5839] Bluetooth: hci5: command tx timeout [ 300.538843][ T5839] Bluetooth: hci6: command tx timeout [ 302.716049][ T5839] Bluetooth: hci5: command tx timeout [ 302.953884][ T5839] Bluetooth: hci6: command tx timeout [ 305.145392][ T5839] Bluetooth: hci6: command tx timeout [ 307.378761][ T5839] Bluetooth: hci6: command tx timeout [ 309.867472][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.977596][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 310.864821][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 310.955722][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 310.998885][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 311.081267][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.119803][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.360335][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.438733][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.777277][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.799395][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 314.009013][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 314.060264][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 314.167869][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 314.250885][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 317.205183][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.261056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.677990][ T5829] Bluetooth: hci8: command tx timeout [ 333.076311][ T5834] Bluetooth: hci8: command tx timeout [ 335.240386][ T5834] Bluetooth: hci8: command tx timeout [ 337.320624][ T5834] Bluetooth: hci8: command tx timeout [ 337.989475][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.037604][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.151355][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.307061][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.377941][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.334392][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 347.369871][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 347.442285][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 347.614668][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 347.667981][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 355.062866][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 355.146473][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 355.476184][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 355.563732][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 356.195860][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 357.477440][ T5839] Bluetooth: hci9: command tx timeout [ 357.500664][ T5839] Bluetooth: hci7: command tx timeout [ 357.702573][ T52] Bluetooth: hci3: command tx timeout [ 357.710534][ T5839] Bluetooth: hci10: command tx timeout [ 358.672164][ T5149] Bluetooth: hci11: command tx timeout [ 359.783600][ T5149] Bluetooth: hci10: command tx timeout [ 359.789351][ T5149] Bluetooth: hci7: command tx timeout [ 359.821268][ T52] Bluetooth: hci9: command tx timeout [ 359.835943][ T52] Bluetooth: hci3: command tx timeout [ 360.202542][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.349380][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.383996][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.465876][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.754743][ T5839] Bluetooth: hci11: command tx timeout [ 360.813822][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.041176][ T5839] Bluetooth: hci7: command tx timeout [ 362.055684][ T52] Bluetooth: hci3: command tx timeout [ 362.061096][ T52] Bluetooth: hci9: command tx timeout [ 362.093128][ T5829] Bluetooth: hci10: command tx timeout [ 362.385109][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.619534][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.656797][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.754400][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.849702][ T52] Bluetooth: hci11: command tx timeout [ 363.380257][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.709673][ T5840] Bluetooth: hci1: command tx timeout [ 364.342109][ T5149] Bluetooth: hci9: command tx timeout [ 364.356479][ T5149] Bluetooth: hci7: command tx timeout [ 364.358206][ T52] Bluetooth: hci10: command tx timeout [ 364.361876][ T5149] Bluetooth: hci3: command tx timeout [ 365.058340][ T5840] Bluetooth: hci11: command tx timeout [ 365.943532][ T5149] Bluetooth: hci1: command tx timeout [ 368.094420][ T5149] Bluetooth: hci4: command tx timeout [ 368.100433][ T5149] Bluetooth: hci1: command tx timeout [ 370.294491][ T5840] Bluetooth: hci1: command tx timeout [ 370.299934][ T5840] Bluetooth: hci4: command tx timeout [ 372.401082][ T5149] Bluetooth: hci4: command tx timeout [ 374.503115][ T5149] Bluetooth: hci4: command tx timeout [ 378.625871][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.679353][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.222648][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 395.345695][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 395.402041][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 395.479760][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 395.760979][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 400.599891][ T5840] Bluetooth: hci12: command tx timeout [ 402.776261][ T5840] Bluetooth: hci12: command tx timeout [ 404.924951][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.932996][ T5149] Bluetooth: hci12: command tx timeout [ 404.985888][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.130753][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.398183][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.033662][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.069687][ T5840] Bluetooth: hci12: command tx timeout [ 408.791474][ T5840] Bluetooth: hci2: command tx timeout [ 410.863389][ T5840] Bluetooth: hci2: command tx timeout [ 412.974323][ T5840] Bluetooth: hci2: command tx timeout [ 415.106927][ T5840] Bluetooth: hci2: command tx timeout [ 422.088022][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.135948][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.191515][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.396529][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.716166][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.125348][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.170042][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.301103][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.578909][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.408733][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.246699][ T5829] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 428.416223][ T5829] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 428.489746][ T5829] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 428.650833][ T5829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 428.725833][ T5829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 431.117995][ T52] Bluetooth: hci6: command tx timeout [ 433.228693][ T5840] Bluetooth: hci6: command tx timeout [ 434.637874][ T5840] Bluetooth: hci5: command tx timeout [ 435.304587][ T5840] Bluetooth: hci6: command tx timeout [ 435.707420][ T5840] Bluetooth: hci13: command tx timeout [ 436.741946][ T5840] Bluetooth: hci5: command tx timeout [ 437.695045][ T5840] Bluetooth: hci6: command tx timeout [ 437.789903][ T5840] Bluetooth: hci13: command tx timeout [ 438.828649][ T5840] Bluetooth: hci5: command tx timeout [ 439.936079][ T5840] Bluetooth: hci13: command tx timeout [ 440.072550][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.104841][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.295500][ T5840] Bluetooth: hci5: command tx timeout [ 442.198306][ T5840] Bluetooth: hci13: command tx timeout [ 489.322566][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.371560][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.388475][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.461982][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.510910][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.569579][ T5840] Bluetooth: hci3: Opcode 0x1001 failed: -110 [ 491.745244][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.752228][ T5829] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 491.806018][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.056369][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.737543][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.618004][T11966] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 494.790040][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.849117][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.904745][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.895308][ T5149] Bluetooth: hci1: command tx timeout [ 498.982722][ T5149] Bluetooth: hci1: command tx timeout [ 501.582276][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.596555][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.575059][ T5149] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 504.139916][ T52] Bluetooth: hci1: command tx timeout [ 504.184194][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 504.229610][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.266537][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 504.376297][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.429360][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 504.578656][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 504.664937][T11974] Bluetooth: hci2: Opcode 0x0c03 failed: -4 [ 504.698483][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.211984][ T5149] Bluetooth: hci1: command tx timeout [ 508.227115][ T5829] Bluetooth: hci3: command tx timeout [ 508.374480][ T5149] Bluetooth: hci0: command tx timeout [ 510.364629][ T5149] Bluetooth: hci3: command tx timeout [ 510.425735][ T5149] Bluetooth: hci0: command tx timeout [ 512.434497][ T5149] Bluetooth: hci3: command tx timeout [ 512.502707][ T5149] Bluetooth: hci0: command tx timeout [ 515.013574][ T5149] Bluetooth: hci3: command tx timeout [ 515.019022][ T5149] Bluetooth: hci0: command tx timeout [ 534.039686][T11976] wg1 speed is unknown, defaulting to 1000 [ 535.002493][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.202723][T11976] wg1 speed is unknown, defaulting to 1000 [ 535.450996][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.793997][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.138140][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.535376][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 538.903756][ T5840] Bluetooth: hci2: command tx timeout [ 541.057197][ T5840] Bluetooth: hci2: command tx timeout [ 543.180746][ T5840] Bluetooth: hci2: command tx timeout [ 543.782281][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.843714][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.907339][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.295078][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.976213][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.456514][ T5149] Bluetooth: hci2: command tx timeout [ 548.667535][ T5149] Bluetooth: hci4: command tx timeout [ 549.186685][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 549.405138][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 549.441938][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 549.529774][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 549.616751][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 550.856425][ T5840] Bluetooth: hci4: command tx timeout [ 553.185606][ T5829] Bluetooth: hci4: command tx timeout [ 553.191068][ T5829] Bluetooth: hci5: command tx timeout [ 554.825985][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.911150][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.954715][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 555.339596][ T52] Bluetooth: hci5: command tx timeout [ 555.352507][ T5839] Bluetooth: hci4: command tx timeout [ 555.390135][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.493541][T12003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.526202][T12003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 555.570034][T12003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.594043][T12003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 555.656909][T12003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 555.798934][T12003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.523512][ T5829] Bluetooth: hci5: command tx timeout [ 558.267045][ T5829] Bluetooth: hci0: command tx timeout [ 558.805308][ T5829] Bluetooth: hci1: command tx timeout [ 560.087670][ T5829] Bluetooth: hci5: command tx timeout [ 560.914036][ T5829] Bluetooth: hci0: command tx timeout [ 560.919477][ T5829] Bluetooth: hci1: command tx timeout [ 563.308676][ T5149] Bluetooth: hci1: command tx timeout [ 563.340408][ T5829] Bluetooth: hci0: command tx timeout [ 563.459533][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.473686][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.387493][ T5149] Bluetooth: hci1: command tx timeout [ 565.392921][ T5149] Bluetooth: hci0: command tx timeout [ 624.399526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.413750][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.973651][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 664.493801][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 670.057931][T12003] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 670.075148][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 670.138231][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 670.219875][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 670.257114][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 670.318787][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 670.654347][T12003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 670.787670][T12003] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 670.920637][T12003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.011147][T12003] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 671.239524][ T5149] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 671.308452][ T5149] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 671.360172][ T5149] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 672.301071][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 672.380345][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 672.428441][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 672.515148][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 672.562089][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 672.687243][T12003] Bluetooth: hci4: command 0x0406 tx timeout [ 672.742246][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 673.480409][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 673.744380][T12003] Bluetooth: hci6: command tx timeout [ 675.789789][ T5840] Bluetooth: hci6: command tx timeout [ 675.805204][ T5834] Bluetooth: hci7: command tx timeout [ 676.574069][ T5840] Bluetooth: hci9: command tx timeout [ 677.240973][ T5840] Bluetooth: hci8: command tx timeout [ 677.781261][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 677.868307][ T5834] Bluetooth: hci7: command tx timeout [ 677.912995][ T5840] Bluetooth: hci6: command tx timeout [ 679.180961][ T5149] Bluetooth: hci9: command tx timeout [ 679.322882][ T5149] Bluetooth: hci8: command tx timeout [ 680.647592][ T5149] Bluetooth: hci6: command tx timeout [ 680.653032][ T5149] Bluetooth: hci7: command tx timeout [ 681.412099][ T5834] Bluetooth: hci9: command tx timeout [ 681.426623][ T5834] Bluetooth: hci8: command tx timeout [ 682.822417][ T5834] Bluetooth: hci7: command tx timeout [ 682.969769][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 682.984868][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 683.683667][ T52] Bluetooth: hci9: command tx timeout [ 683.689108][ T52] Bluetooth: hci8: command tx timeout [ 686.074978][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.089193][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.896216][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 692.943159][ T5834] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 693.006871][ T5834] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 693.342314][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 693.396778][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 696.315132][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 696.412684][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 696.456456][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 696.535730][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 696.579661][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 699.272882][ T5829] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 699.460203][ T5829] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 699.498451][ T5829] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 699.570362][ T5829] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 699.725358][ T5829] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 700.720431][ T52] Bluetooth: hci10: command tx timeout [ 700.754603][ T5834] Bluetooth: hci11: command tx timeout [ 701.720087][ T31] INFO: task dhcpcd:5494 blocked for more than 144 seconds. [ 701.735965][ T31] Not tainted syzkaller #0 [ 701.740916][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 702.343727][ T31] task:dhcpcd state:D stack:21288 pid:5494 tgid:5494 ppid:5493 task_flags:0x400140 flags:0x00080001 [ 702.460540][ T5840] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 702.527183][ T31] Call Trace: [ 702.530496][ T31] [ 704.658945][ T31] __schedule+0x1798/0x4cc0 [ 704.721062][ T5840] Bluetooth: hci11: command tx timeout [ 704.736377][ T5840] Bluetooth: hci10: command tx timeout [ 704.757875][ T5840] Bluetooth: hci12: command tx timeout [ 705.338192][ T31] ? __lock_acquire+0xab9/0xd20 [ 705.343103][ T31] ? __lock_acquire+0xab9/0xd20 [ 706.358267][ T31] ? __pfx___schedule+0x10/0x10 [ 706.380728][ T31] ? schedule+0x91/0x360 [ 706.393896][ T31] schedule+0x165/0x360 [ 706.398084][ T31] schedule_preempt_disabled+0x13/0x30 [ 706.922692][ T52] Bluetooth: hci12: command tx timeout [ 706.937151][ T52] Bluetooth: hci10: command tx timeout [ 706.942644][ T52] Bluetooth: hci11: command tx timeout [ 707.369445][ T31] __mutex_lock+0x7e6/0x1350 [ 707.486715][ T31] ? __mutex_lock+0x5bb/0x1350 [ 707.491530][ T31] ? rtnl_dumpit+0x92/0x200 [ 707.772976][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 707.786958][ T31] ? __build_skb_around+0x262/0x3f0 [ 707.792201][ T31] ? __alloc_skb+0x2f1/0x430 [ 707.933373][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 707.938363][ T31] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 708.092732][ T31] rtnl_dumpit+0x92/0x200 [ 708.117226][ T31] netlink_dump+0x6e4/0xe90 [ 708.121777][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 708.184368][ T31] ? netlink_recvmsg+0x5b2/0xa30 [ 708.189349][ T31] ? kmem_cache_free+0x19b/0x690 [ 708.443442][ T31] netlink_recvmsg+0x676/0xa30 [ 708.703737][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 708.709085][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 709.065623][ T31] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 709.070965][ T31] ? security_socket_recvmsg+0x7e/0x2e0 [ 709.098571][ T5840] Bluetooth: hci11: command tx timeout [ 709.112971][ T5840] Bluetooth: hci10: command tx timeout [ 709.128122][ T52] Bluetooth: hci12: command tx timeout [ 709.262675][ T31] ? __pfx_netlink_recvmsg+0x10/0x10 [ 709.276589][ T31] sock_recvmsg+0x22c/0x270 [ 709.281126][ T31] ____sys_recvmsg+0x1c9/0x460 [ 709.353138][ T31] ? __pfx_____sys_recvmsg+0x10/0x10 [ 709.506566][ T31] ? import_iovec+0x74/0xa0 [ 709.511103][ T31] ___sys_recvmsg+0x1b5/0x510 [ 709.751562][ T31] ? __pfx____sys_recvmsg+0x10/0x10 [ 709.765559][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 709.770719][ T31] ? count_memcg_event_mm+0x21/0x260 [ 709.938479][ T31] __x64_sys_recvmsg+0x198/0x260 [ 709.952860][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 710.124464][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 710.129807][ T31] ? do_syscall_64+0xbe/0xfa0 [ 710.211423][ T31] do_syscall_64+0xfa/0xfa0 [ 710.224872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.230096][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.206499][ T31] ? clear_bhb_loop+0x60/0xb0 [ 711.211234][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.240479][ T52] Bluetooth: hci12: command tx timeout