last executing test programs: 5m32.89592552s ago: executing program 4 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x40, '\x00', r2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r11 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 5m29.87547403s ago: executing program 4 (id=1567): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e85", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 5m29.703605919s ago: executing program 3 (id=1570): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) write(r0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000180)=""/109, &(0x7f0000000200)=0x6d) 5m29.636204939s ago: executing program 0 (id=1571): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60041}, 0x0) 5m29.58690286s ago: executing program 0 (id=1573): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) 5m29.500238025s ago: executing program 4 (id=1575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x20004074}, 0x0) 5m29.412602099s ago: executing program 0 (id=1577): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) connect$tipc(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x700, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x5, 0x7) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)=0x28) 5m29.392922007s ago: executing program 4 (id=1578): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 5m29.22662393s ago: executing program 4 (id=1580): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0xffffff80, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x1c) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m28.972014414s ago: executing program 4 (id=1584): unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5218) poll(&(0x7f0000000380)=[{r2, 0x2}], 0x1, 0x3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 5m28.76178591s ago: executing program 3 (id=1586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)}}], 0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 5m28.032997309s ago: executing program 0 (id=1588): socket$kcm(0x11, 0x3, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000c00)={0x14, 0x1, 0xb, 0x101, 0x70bd26, 0x25dfdbfe, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x48004}, 0x40000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000005c0)=0xfffffff9, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/93, 0x5d}, 0x6}], 0x2, 0x100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)='\b', 0x1}], 0x2}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="6a0033008000e1000802110000000802110000005050505050500000030000000000000064000140010003010e0406f8970000020005030037022a01032d1a02000c0200000000000000300001000f0000000700060000000472060303b9260303710701ff010002f6000000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, r5, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "05"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "716e95edc8"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06989d78f0"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "dcc60253266e01"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24044051}, 0x10) 5m27.754408088s ago: executing program 3 (id=1590): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 5m27.589124997s ago: executing program 3 (id=1592): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r2], 0x15c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x9, 0x8a, 0x7, 0x2d, 0x0, 0x7fff, 0x3}, 0x1c) 5m27.536048613s ago: executing program 1 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xffffff81, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x22, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x3c}}, 0x8001) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0xb00, 0x40822}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ea08003a4bdc8151f3347c7e06a726e1f8d950dc758dc972979051285c369fed17eb41285de7ed7f7e59349019c3f6824ca9fa2a0d3d16ee57aeb05e4387098f9832ab2e27199b34fcb54a71b7fcdff8dfbde450eeb0c1a784", @ANYRES16=r10, @ANYBLOB="00082dbd7000fedbdf250500000008003b000300000005002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000000040)={0x80000000}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) 5m27.205151211s ago: executing program 3 (id=1596): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x1d, r4}, 0x43, &(0x7f0000000140)={&(0x7f0000000340)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xe, 0x3, 0x0, 0x0, "555390508bff2b9e63477a98784ca217bae7ae597ea6ea5b806fcd257ce7cb9e0346b0e1ec5064937df2a6f9dd768ae61274d13f2ddf486eaacfb6af356771b9"}, 0x10}, 0x2, 0x0, 0x0, 0x844}, 0x4000855) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xce, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xb8, 0x12, 0x400, 0x70bd2c, 0x25dfdbf8, {0xa, 0x6, 0x0, 0xe, {0x4621, 0x4e24, [0x4, 0xb8, 0x1, 0x9], [0x133, 0x4, 0x5, 0x7], 0x0, [0x5, 0x20000401]}, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "23198431c25cd97a9e640d64e7147fdba7fba71d7dbe9fb6c66c0d2361b6d2ffff000065a85a9cd1e6cf2e5f0b3d47f9dac8ce58850d6d7f4e161c65534a43f566a44a2897c2de2fc94763e408ebceb7ce146f25b5f781ebf37be7dbc4b3e6fe91c4e0ebf2"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000240)={'bridge_slave_0\x00', @ifru_map={0xc, 0x7, 0x7, 0x2, 0x9}}) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x701}, 0x14}}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bind$bt_l2cap(r11, &(0x7f0000000280)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) close(r6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r14 = socket(0x9, 0x5, 0xffff) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) sendmsg$TIPC_NL_MEDIA_GET(r14, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x20c, r15, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 5m27.144162341s ago: executing program 1 (id=1597): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000380)={0x1, 'vlan1\x00', {}, 0x7}) 5m27.069415867s ago: executing program 0 (id=1598): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{0x0}], 0x1}}], 0x2, 0x4048010) 5m26.910296391s ago: executing program 0 (id=1600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)}}], 0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 5m26.896142462s ago: executing program 1 (id=1601): r0 = socket(0x840000000002, 0x3, 0xff) ppoll(&(0x7f0000000040)=[{}, {0xffffffffffffffff, 0x110}, {0xffffffffffffffff, 0x2210}, {0xffffffffffffffff, 0x40c9}, {}, {0xffffffffffffffff, 0x8031}, {0xffffffffffffffff, 0x1040}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0xfffffcc9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500060000746401009e150451160200000864ce", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004040) 5m26.884129044s ago: executing program 2 (id=1602): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 5m26.769438534s ago: executing program 1 (id=1603): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x1000, 0x3, 0x2}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, &(0x7f0000000140)=0x84) bind$netlink(r0, &(0x7f0000000580)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x84f9, 0x4, [0x6, 0x2, 0x5, 0x20]}, &(0x7f0000000300)=0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x20008004) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private1, 0x4e20, 0xfffd, 0x4e22, 0x0, 0xa}, {0xff, 0xfffffffffffffffe, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x9}}, 0xe8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000007c0)={r1, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000040)=0x84) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000000)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) accept4(r8, 0x0, 0x0, 0x80000) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 5m26.701672426s ago: executing program 2 (id=1604): epoll_create(0x3ff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x0) 5m26.611219504s ago: executing program 2 (id=1605): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db729598", 0xb}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x9, 0x9, 0x1}, 0x6) 5m26.563193209s ago: executing program 1 (id=1606): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44054) 5m26.469382872s ago: executing program 2 (id=1607): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x2, 0xd, 0x3, 0xf, 0x6, 0x1, 0xf9, 0x2, 0x1, 0x6, 0x5a, 0x7, 0xfb}, 0xe) getsockname(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r1, &(0x7f00000002c0)="dcd03cb5d4bd8539ce59c043fa8c231dffa40743b0ca28135680362524f00c61b48d23a080c2a252", 0x28, 0x1000) ioctl(r2, 0x8b2a, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x12, &(0x7f0000000900)=ANY=[@ANYBLOB="180000f07639b975ab000200000000000000ffae8e8ed0333e8b91f7e821e494c59e6d349078aad9c775cce7a22497963a571cb7811b77fd58134a3f8da2bec5418b2f07b78820bc87acbc887d0e3307b3d8afae48a24526fcdf1939786d5c06f34f0c3c32cada2c148c6ffab0a3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000405b2000f0ffffff18260000", @ANYRES32, @ANYBLOB="0000000052050000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x800000, 0x0, 0x0, 0x41101, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='contention_end\x00', r3, 0x0, 0x3}, 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r1, 0x7fff, 0x80000000, 0x7}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@newchain={0x2c, 0x64, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x10, 0xc}, {0xfff1, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) connect$x25(r4, &(0x7f0000000140), 0x12) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0xffffffff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}]}]}, 0x38}}, 0x20000000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r8, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) unshare(0x24020400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x4, 0x12}, 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x14, r12, 0x8c24381a3d4a0b6f, 0x0, 0x0, {0x2f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m26.4098902s ago: executing program 1 (id=1608): socket$kcm(0x11, 0x3, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x48004}, 0x40000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000005c0)=0xfffffff9, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/93, 0x5d}, 0x6}], 0x2, 0x100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)='\b', 0x1}], 0x2}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="6a0033008000e1000802110000000802110000005050505050500000030000000000000064000140010003010e0406f8970000020005030037022a01032d1a02000c0200000000000000300001000f0000000700060000000472060303b9260303710701ff010002f6000000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "05"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "716e95edc8"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06989d78f0"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "dcc60253266e01"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24044051}, 0x10) 5m26.338290558s ago: executing program 2 (id=1609): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa0000aa0180c200000008ff"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}}, 0x80) 5m26.18411964s ago: executing program 3 (id=1610): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000380)={0x1, 'vlan1\x00', {}, 0x7}) 5m26.169799046s ago: executing program 2 (id=1611): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b4"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x4000000000009b6, 0x12) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r7, 0x4000, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x50}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0x52}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}]}, 0x38}}, 0x0) 4m51.163222392s ago: executing program 32 (id=1600): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)}}], 0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 4m51.118616493s ago: executing program 33 (id=1608): socket$kcm(0x11, 0x3, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x48004}, 0x40000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000005c0)=0xfffffff9, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/93, 0x5d}, 0x6}], 0x2, 0x100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)='\b', 0x1}], 0x2}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="6a0033008000e1000802110000000802110000005050505050500000030000000000000064000140010003010e0406f8970000020005030037022a01032d1a02000c0200000000000000300001000f0000000700060000000472060303b9260303710701ff010002f6000000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, r4, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "05"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "716e95edc8"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06989d78f0"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "dcc60253266e01"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24044051}, 0x10) 4m51.057070756s ago: executing program 34 (id=1611): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b4"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r0}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x4000000000009b6, 0x12) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r7, 0x4000, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x50}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0x52}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}]}, 0x38}}, 0x0) 4m50.968010606s ago: executing program 35 (id=1610): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000380)={0x1, 'vlan1\x00', {}, 0x7}) 4m50.830399319s ago: executing program 36 (id=1584): unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5218) poll(&(0x7f0000000380)=[{r2, 0x2}], 0x1, 0x3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 3.361743079s ago: executing program 9 (id=4034): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)={0x228, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xf8, 0x0, 0x1, [@generic="b7c9a4e6d422763cbdf96025db25a99bc2bff96a4536aca67f06c5b8736d3bb0e92ab4f07e6fa886fd434148fc0fc61c6d33781a95c6a56f47e9ff2e9cd60151c738cfe835"]}]}, @nested={0x1c4, 0x6, 0x0, 0x1, [@nested={0x1c0, 0xac, 0x0, 0x1, [@nested={0x1bc, 0x13e, 0x0, 0x1, [@nested={0x1b8, 0xa0, 0x0, 0x1, [@nested={0x1b4, 0x61, 0x0, 0x1, [@nested={0x1b0, 0x9d, 0x0, 0x1, [@nested={0x1a9, 0x63, 0x0, 0x1, [@generic="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"]}]}]}]}]}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2.60302073s ago: executing program 6 (id=4042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xffffffff}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) 2.440088003s ago: executing program 6 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000862801000000a3fa9b42b5888bb9000a14000000020a0103000000000000000000000000140000001100010000000000000000000000000ac166268f27bc3d1a8b64ee0c5aacd6c6e659841351a853211156f4d35eae6fe2afe03d0c62dc41bfc376f88804b69aa3682c5bb5d13720a6fd7dd138e9f323a829e0af0b96d805dc6a150cdd5710957487f629268cc015f7ac7cebc9a6a006cf202aaf331cf0fbffd9417d6aee229c412fc5df45d1fc12b20ca8cc599280235df42c095d8d2340ec"], 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="d2e087395f1c2e268f8791f0cd94ea0ca190acb2bf1407dce1d891a7e0407463f92c75f1fdbc81f86b22bbd73fcc8487d0802258ae93d787aa89b9eefbbf5c58e665c9482659815c601c759f28d76d048d73bb15c9eb5cc6128f8e4e296e248487982ef929d0f6372e4d41c52674d74bd58b7d253e60854f02bb3d152413de6bf05231ba677f530ccc8887f278e8658d068ee2d8426f70abdcb0c4a8938772f9628fa902ad3af500c938565e8c25b1aa87e8e432fd5cc67cb5afefbe1fd35ca57746e855b35c209af7551b095a62052c68fba4ae0e3b8de829a94001daa1f3cd718a6d1484e69c29f4cdfb4b703f2029c88c0d60165a55af", 0xf8, 0x20008000, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff050006"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 1.987348303s ago: executing program 6 (id=4048): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000021000000008d07ebb5ee2388058300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xf, 0x1}, {0x7, 0x6}, {0xfff9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="06000000a00000000400000000000000", @ANYRES64=r8, @ANYRES64=r9/1000+10000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="2d0600000100000001000060390100008c5e314282aa6fb674b496aca28fbe8c8aec859e5fa287b756dea5c1ceda96a6f900c8e30546665f9bab8f68b3be296d0bacc710bbbd6628c3c9a09636d92d28920fb86a64af12db1fe47159c4067a90c7f3149a740c65ef851ead6d6a71e99e406b267e23afb43cda97037e896527ff7d97c2fea43651f6b8bfe7ea75e547e1d5e0eb57721933018803533f3933d16c95cb3789c9ab"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x44001) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000f7ffffff01000000000000000c400100", @ANYRES32=r10, @ANYBLOB="0400"/20, @ANYRES16=r11, @ANYRES32, @ANYBLOB="0004007d2d16e000"/24, @ANYRES32, @ANYBLOB="697b0f3e15483b46139e408f39de5b16cc9a829726084df68189e8c894612120e5261e86f3d32a5e8f5d6c3ca9308ef4fd4346463a6a3a414e28067cfe82a3e60e2aeeecbfe887a9dd39e2d534a86c7e92a8da91b6f8a2c4484bcf9ddaa0a3c7733e619027dde761de696c305b740d85d348e3a952ef67e21314e036843ff65e2e"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r13, &(0x7f0000000a40)="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", &(0x7f0000000600)=@udp=r5, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 1.823067087s ago: executing program 7 (id=4050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10011}, 0x0) 1.796675547s ago: executing program 8 (id=4052): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}}, &(0x7f00000003c0)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000400)={r5, 0x30d3, 0x6, [0xca4c, 0x6, 0x7ff, 0x6, 0xa, 0x944]}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9e, '\x00', r7, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000580)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", ""]}, 0xf6}, 0x1, 0x0, 0x0, 0x48084}, 0xc801) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', 0x0, 0x0, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x6c, 0x3e, 0x100, 0x70bd2c, 0xffbffffe, {0x21}, [@generic="4f850c26d94506e6e7c8d89e15d31fca285b4e72fb445fec2e28ffd9edd9832d1add1b6e9549ce58c81bf373b48b01945b1ca3cb685b3c433c4974b4f94be42dc9e11afb9734463f3cbd30e617356e538c94648a815e"]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d3}, 0x8005) 1.692007322s ago: executing program 7 (id=4053): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='cdev_update\x00', r0, 0x0, 0x800}, 0x18) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='memory.low\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r3, 0x42}], 0x1, 0x23f679b6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.681795269s ago: executing program 5 (id=4054): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000"], 0x44}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24008004) 1.544189016s ago: executing program 5 (id=4055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x1c, 0x0, 0x24040090}, 0xc0) 1.321809657s ago: executing program 8 (id=4056): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x12, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="f8", 0x1}], 0x1}, 0x2c01}], 0x1, 0x4c851) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64], 0x174}}, 0x0) 1.190738365s ago: executing program 8 (id=4057): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01006bd40602f35065c2002c0000000600000009000000000000100c000000080000220000000e0500000000000004010000000001000000002e5f303000000000"], &(0x7f0000000140)=""/31, 0x4a, 0x1f, 0x0, 0x20000000, 0x10000}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xf625, 0x7, 0x2, 0x49410, r1, 0x907, '\x00', r2, r3, 0x3, 0x0, 0x2, 0x4, @value=r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f0000000180)="7685", 0x0}, 0x20) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.084145601s ago: executing program 5 (id=4058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000862801000000a3fa9b42b5888bb9000a14000000020a0103000000000000000000000000140000001100010000000000000000000000000ac166268f27bc3d1a8b64ee0c5aacd6c6e659841351a853211156f4d35eae6fe2afe03d0c62dc41bfc376f88804b69aa3682c5bb5d13720a6fd7dd138e9f323a829e0af0b96d805dc6a150cdd5710957487f629268cc015f7ac7cebc9a6a006cf202aaf331cf0fbffd9417d6aee229c412fc5df45d1fc12b20ca8cc599280235df42c095d8d2340ec"], 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, &(0x7f0000000940)}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="d2e087395f1c2e268f8791f0cd94ea0ca190acb2bf1407dce1d891a7e0407463f92c75f1fdbc81f86b22bbd73fcc8487d0802258ae93d787aa89b9eefbbf5c58e665c9482659815c601c759f28d76d048d73bb15c9eb5cc6128f8e4e296e248487982ef929d0f6372e4d41c52674d74bd58b7d253e60854f02bb3d152413de6bf05231ba677f530ccc8887f278e8658d068ee2d8426f70abdcb0c4a8938772f9628fa902ad3af500c938565e8c25b1aa87e8e432fd5cc67cb5afefbe1fd35ca57746e855b35c209af7551b095a62052c68fba4ae0e3b8de829a94001daa1f3cd718a6d1484e69c29f4cdfb4b703f2029c88c0d60165a55af", 0xf8, 0x20008000, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff050006"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 1.07575152s ago: executing program 6 (id=4059): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (fail_nth: 15) 974.374362ms ago: executing program 9 (id=4060): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 700.35354ms ago: executing program 9 (id=4061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x604000000000000, 0x0, 0x80}, 0x40800) 641.583674ms ago: executing program 6 (id=4062): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000300000000000086dd6800000900383a00fe880000000000000000000000000101ff0200000000000000000000000000c602009078000005dc608c9d2b00092f0000000000000000000000000000000001fe8000000000000000000000000000aa2f0027a168000000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) r3 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20004880) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) recvmmsg(r2, &(0x7f000000a540)=[{{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/199, 0xc7}, 0xfffffffa}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000080, &(0x7f00000000c0)={0xa, 0x4e22, 0x40000005, @mcast2, 0xfffffffd}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xc2, &(0x7f0000000280)={@broadcast, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x7a, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0x12, "743495125a561de584b703c8e22a6dee"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xf, "6580a5e976ecfe92dbf6da5940"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0) close(0xffffffffffffffff) 629.14804ms ago: executing program 7 (id=4063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10011}, 0x0) 495.488998ms ago: executing program 9 (id=4064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x448c0) 434.892155ms ago: executing program 5 (id=4065): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000"], 0x44}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x24008004) 434.524286ms ago: executing program 7 (id=4066): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}}, &(0x7f00000003c0)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000400)={r5, 0x30d3, 0x6, [0xca4c, 0x6, 0x7ff, 0x6, 0xa, 0x944]}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9e, '\x00', r7, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000900010053"], 0xb4}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000580)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", ""]}, 0xf6}, 0x1, 0x0, 0x0, 0x48084}, 0xc801) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', 0x0, 0x0, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x6c, 0x3e, 0x100, 0x70bd2c, 0xffbffffe, {0x21}, [@generic="4f850c26d94506e6e7c8d89e15d31fca285b4e72fb445fec2e28ffd9edd9832d1add1b6e9549ce58c81bf373b48b01945b1ca3cb685b3c433c4974b4f94be42dc9e11afb9734463f3cbd30e617356e538c94648a815e"]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d3}, 0x8005) 432.267651ms ago: executing program 8 (id=4067): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x12, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="f8", 0x1}], 0x1}, 0x2c01}], 0x1, 0x4c851) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64], 0x174}}, 0x0) 431.766069ms ago: executing program 6 (id=4068): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd604dda0000180600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002d863790d000000000000"], 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0x24020400) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) 374.22517ms ago: executing program 9 (id=4069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002680)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x80000000, 0x426, 0xb, {0x8, 0x0, 0xff00, 0x3, 0x101, 0xa0}, {0x8, 0x1, 0x100, 0x3, 0xa}, 0x8, 0x2, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0xd, 0x5, 0x7, 0xd, 0xf, 0x8, 0xf, 0x8, 0x9, 0x10001, 0x5ff, 0x5, 0x3ffc000, 0x1, 0x80000000, 0x75, 0x7d, 0x5, 0xffff, 0x80000000, 0x3, 0x49, 0x5, 0x4, 0xffff, 0xfada, 0x70000000, 0x80000000, 0x8, 0x4, 0x9, 0x7, 0x2, 0x401, 0xe0, 0x1fd, 0x4, 0x7, 0x3b1, 0x5, 0x9, 0x7, 0x4, 0x4, 0x7, 0x1, 0xfffffffd, 0x101, 0xcc, 0x8, 0xb, 0x8000, 0x9, 0x0, 0x1, 0xfffffffe, 0x8, 0x1, 0x8d3, 0x1, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x81, 0x5000, 0xffff, 0x3, 0x8, 0x4, 0x40, 0x1ff, 0xd8, 0xfffffffd, 0x6, 0x5, 0x3, 0xffff, 0x4, 0x1f073468, 0x1, 0x7fffffff, 0x8, 0x1000, 0x7, 0x1, 0x7fff, 0x1ff, 0x4, 0x4, 0x4, 0x80000001, 0x3, 0x200, 0xffff, 0x20000, 0x9, 0x9a5, 0x0, 0x9, 0x10000, 0x8001, 0x5, 0x5ea, 0x1, 0x1ff, 0x8e2, 0x101, 0x9, 0x9, 0x14000, 0xffffe6d2, 0x1, 0xe61, 0x11, 0xff, 0x3857, 0x3, 0x69a, 0x7, 0x8, 0x48000000, 0x7, 0x8, 0xfffffff8, 0x7, 0x400, 0x3, 0xc37, 0x2, 0x0, 0x1, 0xfffffff8, 0xb6, 0x9, 0xfffffffd, 0x6, 0x8, 0x6, 0x2, 0x1, 0x55d0, 0x4000004, 0x3, 0x2, 0x6, 0x401, 0xffff, 0x5, 0x4, 0x10, 0x4, 0x7, 0x1000, 0x7a, 0x4, 0xa0, 0x4, 0x10000000, 0x7, 0x0, 0x200, 0x8000, 0x8, 0x87fa, 0x0, 0x3, 0x9, 0x4, 0x4, 0x3, 0x4, 0xb4a, 0xffff17f2, 0x7, 0x71a, 0xfff, 0x4, 0xa, 0x0, 0x9, 0x8, 0x9, 0xf8bb, 0x55, 0x100, 0x9, 0x9, 0x3a4f, 0x9, 0x5, 0x7ff, 0x775, 0x9, 0xff, 0xfffffffd, 0x6, 0x8, 0x0, 0x9, 0xc, 0x100, 0x2, 0x0, 0x5, 0x8, 0x4, 0x1, 0x8, 0x6, 0x7f, 0x3, 0x3, 0x1, 0x4000000, 0x2, 0x0, 0x6, 0x6, 0x1854, 0xaed, 0x5, 0x9, 0x0, 0x4, 0xff, 0x1, 0x4, 0x748, 0xd7a, 0x0, 0x9, 0x5, 0x7, 0xd, 0x6, 0xffff8500, 0x1000, 0x1, 0x101, 0x6, 0x5, 0x5, 0x5, 0x10001, 0x231, 0x3, 0x100004, 0x1ff, 0x194, 0x5, 0x5]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x45}]}}]}, 0x480}}, 0x20004804) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000200)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'nq\x00', 0x1, 0x1, 0x6f}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030004080090006400000000024000b9d20000180070001006374000014000280080001400000000008000240000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xe4}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 248.13375ms ago: executing program 5 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000a0a010800000000000000000a0000010900020073797a31000000000900010073797a3100"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 204.461862ms ago: executing program 8 (id=4071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100000000002c0002800c000280050001000000090014000180080001000000000008000200ac1e0001060003400000000008000740000000004c001080080003400000013308000240000000cd08000140000005ff0800014000000401080001400000000940fd034000000009070002400000000108000240000000090800014000000025d357178a5553435029bb50736e04e638bdd6a458182e04a17fbe93b387d091c7e8528035e618610871ad8179e032aeb4a40d1b5f6429"], 0xb8}}, 0x0) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 178.744823ms ago: executing program 7 (id=4072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000040000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 103.256159ms ago: executing program 5 (id=4073): r0 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback={0xf00}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) 55.301188ms ago: executing program 7 (id=4074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x40}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0xa4}, 0x1, 0x0, 0xfc00000000000000}, 0x8004) 54.515694ms ago: executing program 8 (id=4075): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 0s ago: executing program 9 (id=4076): r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8500}}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4c3, @private1}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet_int(r1, 0x29, 0x33, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="b05151345b4698ada7ba4b37c76c478cfbb2ee0f724d5bda6ff55993c8e27ef93ab957504f0dcd1c225295e8f346bdd3d3bd1f8a38f9a80f3ea6dc33fabffd765726ed947822f31ba7e972db6098672df5a4e52ee389bde1a6d4276bc32ce965dae527126aff731b60909ff062188193d668bf829bd35f09a7267c8126646f217f9ad5dff7edfd", 0x87, 0x20044041, 0x0, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1003, &(0x7f0000000340)=""/4099, 0x41100, 0x6}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xfff3, 0xe}, {0x2, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0x800) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0xec1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/172, 0xac}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/56, 0x38}], 0x3, &(0x7f0000000140)=""/3, 0x3}, 0x8000) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.9.3362'. [ 526.950879][T17221] lo speed is unknown, defaulting to 1000 [ 527.112997][T17291] FAULT_INJECTION: forcing a failure. [ 527.112997][T17291] name failslab, interval 1, probability 0, space 0, times 0 [ 527.142556][T17291] CPU: 0 UID: 0 PID: 17291 Comm: syz.5.3364 Not tainted syzkaller #0 PREEMPT(full) [ 527.142588][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.142599][T17291] Call Trace: [ 527.142608][T17291] [ 527.142616][T17291] dump_stack_lvl+0x189/0x250 [ 527.142643][T17291] ? __pfx____ratelimit+0x10/0x10 [ 527.142672][T17291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.142692][T17291] ? __pfx__printk+0x10/0x10 [ 527.142734][T17291] should_fail_ex+0x414/0x560 [ 527.142766][T17291] should_failslab+0xa8/0x100 [ 527.142794][T17291] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 527.142829][T17291] ? nf_ct_ext_add+0x1ab/0x450 [ 527.142860][T17291] ? nf_ct_ext_add+0x1ab/0x450 [ 527.142883][T17291] krealloc_noprof+0x124/0x340 [ 527.142912][T17291] nf_ct_ext_add+0x1ab/0x450 [ 527.142945][T17291] ctnetlink_new_conntrack+0x11e7/0x2070 [ 527.142973][T17291] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 527.143006][T17291] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 527.143028][T17291] ? trace_contention_end+0x39/0x120 [ 527.143048][T17291] ? __mutex_lock+0x335/0x1350 [ 527.143073][T17291] ? __lock_acquire+0xab9/0xd20 [ 527.143101][T17291] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 527.143160][T17291] nfnetlink_rcv_msg+0xb4a/0x1130 [ 527.143187][T17291] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 527.143235][T17291] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 527.143301][T17291] ? is_bpf_text_address+0x26/0x2b0 [ 527.143346][T17291] netlink_rcv_skb+0x208/0x470 [ 527.143368][T17291] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 527.143398][T17291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.143433][T17291] ? bpf_lsm_capable+0x9/0x20 [ 527.143455][T17291] ? security_capable+0x7e/0x2e0 [ 527.143490][T17291] nfnetlink_rcv+0x26a/0x2520 [ 527.143518][T17291] ? is_bpf_text_address+0x26/0x2b0 [ 527.143547][T17291] ? kernel_text_address+0xa5/0xe0 [ 527.143571][T17291] ? __kernel_text_address+0xd/0x40 [ 527.143593][T17291] ? unwind_get_return_address+0x4d/0x90 [ 527.143612][T17291] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.143633][T17291] ? arch_stack_walk+0xfc/0x150 [ 527.143672][T17291] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 527.143701][T17291] ? stack_depot_save_flags+0x40/0x860 [ 527.143733][T17291] ? __lock_acquire+0xab9/0xd20 [ 527.143788][T17291] ? __lock_acquire+0xab9/0xd20 [ 527.143837][T17291] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.143866][T17291] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.143896][T17291] netlink_unicast+0x82f/0x9e0 [ 527.143926][T17291] ? __pfx_netlink_unicast+0x10/0x10 [ 527.143946][T17291] ? netlink_sendmsg+0x642/0xb30 [ 527.143964][T17291] ? skb_put+0x11b/0x210 [ 527.143990][T17291] netlink_sendmsg+0x805/0xb30 [ 527.144023][T17291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.144048][T17291] ? aa_sock_msg_perm+0xf1/0x1d0 [ 527.144078][T17291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.144096][T17291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.144117][T17291] __sock_sendmsg+0x21c/0x270 [ 527.144148][T17291] ____sys_sendmsg+0x505/0x830 [ 527.144178][T17291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.144214][T17291] ? import_iovec+0x74/0xa0 [ 527.144242][T17291] ___sys_sendmsg+0x21f/0x2a0 [ 527.144270][T17291] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.144342][T17291] ? __fget_files+0x2a/0x420 [ 527.144368][T17291] ? __fget_files+0x3a0/0x420 [ 527.144409][T17291] __x64_sys_sendmsg+0x19b/0x260 [ 527.144437][T17291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.144474][T17291] ? __pfx_ksys_write+0x10/0x10 [ 527.144496][T17291] ? rcu_is_watching+0x15/0xb0 [ 527.144521][T17291] ? do_syscall_64+0xbe/0x3b0 [ 527.144546][T17291] do_syscall_64+0xfa/0x3b0 [ 527.144563][T17291] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.144591][T17291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.144610][T17291] ? clear_bhb_loop+0x60/0xb0 [ 527.144635][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.144654][T17291] RIP: 0033:0x7fbfd318eec9 [ 527.144674][T17291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.144691][T17291] RSP: 002b:00007fbfd4041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.144714][T17291] RAX: ffffffffffffffda RBX: 00007fbfd33e5fa0 RCX: 00007fbfd318eec9 [ 527.144729][T17291] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 527.144749][T17291] RBP: 00007fbfd4041090 R08: 0000000000000000 R09: 0000000000000000 [ 527.144762][T17291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.144774][T17291] R13: 00007fbfd33e6038 R14: 00007fbfd33e5fa0 R15: 00007ffca2833da8 [ 527.144811][T17291] [ 527.144983][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3364'. [ 527.618151][T17221] lo speed is unknown, defaulting to 1000 [ 527.874979][T17305] FAULT_INJECTION: forcing a failure. [ 527.874979][T17305] name failslab, interval 1, probability 0, space 0, times 0 [ 527.916681][T17305] CPU: 0 UID: 0 PID: 17305 Comm: syz.7.3369 Not tainted syzkaller #0 PREEMPT(full) [ 527.916711][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.916724][T17305] Call Trace: [ 527.916732][T17305] [ 527.916741][T17305] dump_stack_lvl+0x189/0x250 [ 527.916768][T17305] ? __pfx____ratelimit+0x10/0x10 [ 527.916793][T17305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.916812][T17305] ? __pfx__printk+0x10/0x10 [ 527.916833][T17305] ? rcu_is_watching+0x15/0xb0 [ 527.916850][T17305] ? trace_fib_table_lookup+0x85/0x200 [ 527.916881][T17305] should_fail_ex+0x414/0x560 [ 527.916911][T17305] should_failslab+0xa8/0x100 [ 527.916936][T17305] kmem_cache_alloc_noprof+0x73/0x3c0 [ 527.916956][T17305] ? dst_alloc+0x105/0x170 [ 527.916978][T17305] ? fib_lookup+0x76/0x440 [ 527.917005][T17305] dst_alloc+0x105/0x170 [ 527.917049][T17305] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 527.917088][T17305] ? ip_route_output_key_hash+0xc1/0x280 [ 527.917115][T17305] ip_route_output_key_hash+0x174/0x280 [ 527.917144][T17305] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 527.917191][T17305] tcp_v4_connect+0x751/0x1a00 [ 527.917239][T17305] ? __pfx_tcp_v4_connect+0x10/0x10 [ 527.917271][T17305] __inet_stream_connect+0x2ae/0xe80 [ 527.917302][T17305] ? __local_bh_enable_ip+0x12d/0x1c0 [ 527.917329][T17305] ? __pfx___inet_stream_connect+0x10/0x10 [ 527.917349][T17305] ? __local_bh_enable_ip+0x12d/0x1c0 [ 527.917377][T17305] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 527.917420][T17305] inet_stream_connect+0x66/0xa0 [ 527.917444][T17305] __sys_connect+0x316/0x440 [ 527.917465][T17305] ? __fget_files+0x3a0/0x420 [ 527.917494][T17305] ? __pfx___sys_connect+0x10/0x10 [ 527.917530][T17305] ? __pfx_ksys_write+0x10/0x10 [ 527.917552][T17305] ? rcu_is_watching+0x15/0xb0 [ 527.917582][T17305] __x64_sys_connect+0x7a/0x90 [ 527.917606][T17305] do_syscall_64+0xfa/0x3b0 [ 527.917624][T17305] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.917653][T17305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.917672][T17305] ? clear_bhb_loop+0x60/0xb0 [ 527.917698][T17305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.917716][T17305] RIP: 0033:0x7f4c1bd8eec9 [ 527.917736][T17305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.917753][T17305] RSP: 002b:00007f4c1cb67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 527.917774][T17305] RAX: ffffffffffffffda RBX: 00007f4c1bfe5fa0 RCX: 00007f4c1bd8eec9 [ 527.917789][T17305] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000007 [ 527.917802][T17305] RBP: 00007f4c1cb67090 R08: 0000000000000000 R09: 0000000000000000 [ 527.917815][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.917828][T17305] R13: 00007f4c1bfe6038 R14: 00007f4c1bfe5fa0 R15: 00007ffcc188cca8 [ 527.917865][T17305] [ 528.348292][T17221] lo speed is unknown, defaulting to 1000 [ 528.775176][T17221] lo speed is unknown, defaulting to 1000 [ 528.799446][T17327] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3379'. [ 529.068045][T17337] tipc: Enabled bearer , priority 0 [ 529.076076][T17337] syzkaller0: entered promiscuous mode [ 529.081821][T17337] syzkaller0: entered allmulticast mode [ 529.145448][T17337] tipc: Resetting bearer [ 529.170276][T17336] tipc: Resetting bearer [ 529.215946][T17336] tipc: Disabling bearer [ 529.275316][T17221] lo speed is unknown, defaulting to 1000 [ 529.456782][T17350] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3389'. [ 530.147581][T17221] lo speed is unknown, defaulting to 1000 [ 530.150545][T17368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3396'. [ 530.164167][T17369] FAULT_INJECTION: forcing a failure. [ 530.164167][T17369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.208379][T17369] CPU: 0 UID: 0 PID: 17369 Comm: syz.9.3397 Not tainted syzkaller #0 PREEMPT(full) [ 530.208411][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.208424][T17369] Call Trace: [ 530.208433][T17369] [ 530.208443][T17369] dump_stack_lvl+0x189/0x250 [ 530.208472][T17369] ? __pfx____ratelimit+0x10/0x10 [ 530.208503][T17369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.208525][T17369] ? __pfx__printk+0x10/0x10 [ 530.208552][T17369] ? __might_fault+0xb0/0x130 [ 530.208591][T17369] should_fail_ex+0x414/0x560 [ 530.208626][T17369] _copy_from_user+0x2d/0xb0 [ 530.208652][T17369] ____sys_sendmsg+0x2fe/0x830 [ 530.208685][T17369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.208723][T17369] ? import_iovec+0x74/0xa0 [ 530.208752][T17369] ___sys_sendmsg+0x21f/0x2a0 [ 530.208780][T17369] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.208855][T17369] ? __fget_files+0x2a/0x420 [ 530.208881][T17369] ? __fget_files+0x3a0/0x420 [ 530.208922][T17369] __x64_sys_sendmsg+0x19b/0x260 [ 530.208951][T17369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.208989][T17369] ? __pfx_ksys_write+0x10/0x10 [ 530.209020][T17369] ? do_syscall_64+0xbe/0x3b0 [ 530.209046][T17369] do_syscall_64+0xfa/0x3b0 [ 530.209064][T17369] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.209092][T17369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.209112][T17369] ? clear_bhb_loop+0x60/0xb0 [ 530.209137][T17369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.209157][T17369] RIP: 0033:0x7f0daa78eec9 [ 530.209177][T17369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.209193][T17369] RSP: 002b:00007f0dab615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.209217][T17369] RAX: ffffffffffffffda RBX: 00007f0daa9e5fa0 RCX: 00007f0daa78eec9 [ 530.209232][T17369] RDX: 0000000004040810 RSI: 0000200000000200 RDI: 0000000000000003 [ 530.209245][T17369] RBP: 00007f0dab615090 R08: 0000000000000000 R09: 0000000000000000 [ 530.209258][T17369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.209270][T17369] R13: 00007f0daa9e6038 R14: 00007f0daa9e5fa0 R15: 00007ffe63d75388 [ 530.209306][T17369] [ 531.121579][T17391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.497904][T17408] netlink: 768 bytes leftover after parsing attributes in process `syz.8.3413'. [ 531.500536][T17410] netlink: 'syz.7.3410': attribute type 6 has an invalid length. [ 531.517351][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3413'. [ 531.538689][T17408] netlink: 110 bytes leftover after parsing attributes in process `syz.8.3413'. [ 531.561450][T17408] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3413'. [ 531.573425][T17412] tipc: Enabled bearer , priority 0 [ 531.585983][T17412] syzkaller0: entered promiscuous mode [ 531.592935][T17412] syzkaller0: entered allmulticast mode [ 531.617837][T17412] syzkaller0: mtu less than device minimum [ 531.628151][T17411] tipc: Resetting bearer [ 531.668766][T17411] tipc: Disabling bearer [ 531.705419][T17417] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3413'. [ 531.900812][T17427] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 531.940945][T17429] FAULT_INJECTION: forcing a failure. [ 531.940945][T17429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.954909][T17429] CPU: 0 UID: 0 PID: 17429 Comm: syz.5.3420 Not tainted syzkaller #0 PREEMPT(full) [ 531.954938][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.954951][T17429] Call Trace: [ 531.954960][T17429] [ 531.954970][T17429] dump_stack_lvl+0x189/0x250 [ 531.954999][T17429] ? __pfx____ratelimit+0x10/0x10 [ 531.955030][T17429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.955053][T17429] ? __pfx__printk+0x10/0x10 [ 531.955079][T17429] ? __might_fault+0xb0/0x130 [ 531.955118][T17429] should_fail_ex+0x414/0x560 [ 531.955152][T17429] _copy_from_user+0x2d/0xb0 [ 531.955178][T17429] kstrtouint_from_user+0xc4/0x170 [ 531.955204][T17429] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 531.955245][T17429] proc_fail_nth_write+0x88/0x200 [ 531.955266][T17429] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.955295][T17429] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.955318][T17429] vfs_write+0x27e/0xb30 [ 531.955356][T17429] ? __pfx_vfs_write+0x10/0x10 [ 531.955383][T17429] ? __fget_files+0x2a/0x420 [ 531.955416][T17429] ? __fget_files+0x3a0/0x420 [ 531.955442][T17429] ? __fget_files+0x2a/0x420 [ 531.955481][T17429] ksys_write+0x145/0x250 [ 531.955510][T17429] ? __pfx_ksys_write+0x10/0x10 [ 531.955531][T17429] ? rcu_is_watching+0x15/0xb0 [ 531.955556][T17429] ? do_syscall_64+0xbe/0x3b0 [ 531.955581][T17429] do_syscall_64+0xfa/0x3b0 [ 531.955598][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.955624][T17429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.955644][T17429] ? clear_bhb_loop+0x60/0xb0 [ 531.955668][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.955688][T17429] RIP: 0033:0x7fbfd318d97f [ 531.955707][T17429] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 531.955725][T17429] RSP: 002b:00007fbfd4041030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 531.955748][T17429] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfd318d97f [ 531.955763][T17429] RDX: 0000000000000001 RSI: 00007fbfd40410a0 RDI: 000000000000000a [ 531.955776][T17429] RBP: 00007fbfd4041090 R08: 0000000000000000 R09: 0000000000000000 [ 531.955789][T17429] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 531.955801][T17429] R13: 00007fbfd33e6038 R14: 00007fbfd33e5fa0 R15: 00007ffca2833da8 [ 531.955836][T17429] [ 532.338131][ T55] block nbd2: Possible stuck request ffff888025041c00: control (read@0,1024B). Runtime 330 seconds [ 532.349558][ T55] block nbd2: Possible stuck request ffff888025041dc0: control (read@1024,1024B). Runtime 330 seconds [ 532.361155][ T55] block nbd2: Possible stuck request ffff888025041f80: control (read@2048,1024B). Runtime 330 seconds [ 532.373264][ T55] block nbd2: Possible stuck request ffff888025042140: control (read@3072,1024B). Runtime 330 seconds [ 533.217955][T17461] FAULT_INJECTION: forcing a failure. [ 533.217955][T17461] name failslab, interval 1, probability 0, space 0, times 0 [ 533.232163][T17461] CPU: 0 UID: 0 PID: 17461 Comm: syz.8.3432 Not tainted syzkaller #0 PREEMPT(full) [ 533.232191][T17461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.232204][T17461] Call Trace: [ 533.232212][T17461] [ 533.232222][T17461] dump_stack_lvl+0x189/0x250 [ 533.232250][T17461] ? __pfx____ratelimit+0x10/0x10 [ 533.232281][T17461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.232303][T17461] ? __pfx__printk+0x10/0x10 [ 533.232336][T17461] ? __pfx___might_resched+0x10/0x10 [ 533.232371][T17461] should_fail_ex+0x414/0x560 [ 533.232404][T17461] should_failslab+0xa8/0x100 [ 533.232433][T17461] __kmalloc_noprof+0xcb/0x4f0 [ 533.232457][T17461] ? sk_prot_alloc+0xe7/0x220 [ 533.232493][T17461] sk_prot_alloc+0xe7/0x220 [ 533.232513][T17461] ? sk_alloc+0x24/0x370 [ 533.232539][T17461] sk_alloc+0x3a/0x370 [ 533.232560][T17461] ? bpf_ctx_init+0x167/0x1d0 [ 533.232585][T17461] bpf_prog_test_run_skb+0x2ed/0x1560 [ 533.232605][T17461] ? __fget_files+0x2a/0x420 [ 533.232651][T17461] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 533.232671][T17461] bpf_prog_test_run+0x2c7/0x340 [ 533.232703][T17461] __sys_bpf+0x581/0x870 [ 533.232730][T17461] ? __pfx___sys_bpf+0x10/0x10 [ 533.232770][T17461] ? ksys_write+0x22a/0x250 [ 533.232797][T17461] ? __pfx_ksys_write+0x10/0x10 [ 533.232818][T17461] ? rcu_is_watching+0x15/0xb0 [ 533.232847][T17461] __x64_sys_bpf+0x7c/0x90 [ 533.232870][T17461] do_syscall_64+0xfa/0x3b0 [ 533.232889][T17461] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.232918][T17461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.232937][T17461] ? clear_bhb_loop+0x60/0xb0 [ 533.232963][T17461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.232981][T17461] RIP: 0033:0x7f3afe98eec9 [ 533.233016][T17461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.233034][T17461] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.233057][T17461] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 533.233071][T17461] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 533.233084][T17461] RBP: 00007f3aff828090 R08: 0000000000000000 R09: 0000000000000000 [ 533.233097][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.233109][T17461] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 533.233145][T17461] [ 533.481148][T17448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 533.487862][T17453] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 533.638292][T17468] syzkaller0: entered promiscuous mode [ 533.664206][T17468] syzkaller0: entered allmulticast mode [ 533.847650][T17475] nbd6: detected capacity change from 0 to 63 [ 533.863863][T17477] block nbd6: NBD_DISCONNECT [ 533.868981][T17477] block nbd6: Disconnected due to user request. [ 533.878440][T17477] block nbd6: shutting down sockets [ 533.919870][ C1] blk_print_req_error: 138 callbacks suppressed [ 533.919894][ C1] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.935340][ C1] buffer_io_error: 138 callbacks suppressed [ 533.935358][ C1] Buffer I/O error on dev nbd6, logical block 2, async page read [ 533.950817][ C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.960039][ C1] Buffer I/O error on dev nbd6, logical block 3, async page read [ 533.967932][ C1] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.977120][ C1] Buffer I/O error on dev nbd6, logical block 0, async page read [ 533.984943][ C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.994278][ C1] Buffer I/O error on dev nbd6, logical block 1, async page read [ 534.002240][ T6010] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.021199][T17483] pim6reg1: entered promiscuous mode [ 534.027627][T17483] pim6reg1: entered allmulticast mode [ 534.035616][ T6010] Buffer I/O error on dev nbd6, logical block 0, async page read [ 534.043977][ T6010] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.053810][ T6010] Buffer I/O error on dev nbd6, logical block 1, async page read [ 534.062293][ T6010] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.085627][ T6010] Buffer I/O error on dev nbd6, logical block 2, async page read [ 534.101773][ T6010] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.117339][ T6010] Buffer I/O error on dev nbd6, logical block 3, async page read [ 534.129207][ T6010] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.138870][ T6010] Buffer I/O error on dev nbd6, logical block 0, async page read [ 534.148025][ T6010] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.157982][ T6010] Buffer I/O error on dev nbd6, logical block 1, async page read [ 534.170676][ T6010] ldm_validate_partition_table(): Disk read failed. [ 534.191089][ T6010] Dev nbd6: unable to read RDB block 0 [ 534.202155][T17489] netlink: 'syz.5.3443': attribute type 1 has an invalid length. [ 534.218077][ T6010] nbd6: unable to read partition table [ 534.239296][ T6010] ldm_validate_partition_table(): Disk read failed. [ 534.250245][ T6010] Dev nbd6: unable to read RDB block 0 [ 534.257245][T17486] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3442'. [ 534.270520][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3442'. [ 534.274172][T17489] bond2: (slave gretap1): making interface the new active one [ 534.285068][ T6010] nbd6: unable to read partition table [ 534.288964][T17489] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 534.435957][T17496] FAULT_INJECTION: forcing a failure. [ 534.435957][T17496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.449944][T17496] CPU: 1 UID: 0 PID: 17496 Comm: syz.5.3444 Not tainted syzkaller #0 PREEMPT(full) [ 534.449972][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.449984][T17496] Call Trace: [ 534.449993][T17496] [ 534.450002][T17496] dump_stack_lvl+0x189/0x250 [ 534.450031][T17496] ? __pfx____ratelimit+0x10/0x10 [ 534.450061][T17496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.450083][T17496] ? __pfx__printk+0x10/0x10 [ 534.450111][T17496] ? fs_reclaim_acquire+0x7d/0x100 [ 534.450151][T17496] should_fail_ex+0x414/0x560 [ 534.450184][T17496] prepare_alloc_pages+0x213/0x610 [ 534.450223][T17496] __alloc_frozen_pages_noprof+0x123/0x370 [ 534.450258][T17496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.450310][T17496] ? policy_nodemask+0x27c/0x720 [ 534.450344][T17496] alloc_pages_mpol+0x232/0x4a0 [ 534.450376][T17496] vma_alloc_folio_noprof+0xe4/0x200 [ 534.450406][T17496] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 534.450449][T17496] folio_prealloc+0x30/0x180 [ 534.450478][T17496] do_wp_page+0x1231/0x5800 [ 534.450528][T17496] ? __pfx_do_wp_page+0x10/0x10 [ 534.450548][T17496] ? do_raw_spin_lock+0x121/0x290 [ 534.450581][T17496] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.450618][T17496] __handle_mm_fault+0x1033/0x5440 [ 534.450661][T17496] ? __pfx___handle_mm_fault+0x10/0x10 [ 534.450702][T17496] ? follow_page_pte+0xd03/0x13e0 [ 534.450741][T17496] handle_mm_fault+0x40a/0x8e0 [ 534.450779][T17496] __get_user_pages+0x1699/0x2ce0 [ 534.450799][T17496] ? __lock_acquire+0xab9/0xd20 [ 534.450880][T17496] __gup_longterm_locked+0xde9/0x1660 [ 534.450920][T17496] ? sanity_check_pinned_pages+0x1241/0x1300 [ 534.450946][T17496] ? gup_fast_fallback+0x195f/0x2010 [ 534.450972][T17496] gup_fast_fallback+0x1e6a/0x2010 [ 534.451032][T17496] ? __pfx_gup_fast_fallback+0x10/0x10 [ 534.451051][T17496] ? kasan_save_track+0x4f/0x80 [ 534.451069][T17496] ? kasan_save_track+0x3e/0x80 [ 534.451087][T17496] ? __kasan_kmalloc+0x93/0xb0 [ 534.451105][T17496] ? sock_kmalloc+0xd6/0x160 [ 534.451128][T17496] ? af_alg_get_rsgl+0x236/0x810 [ 534.451148][T17496] ? skcipher_recvmsg+0x3c0/0x11c0 [ 534.451172][T17496] ? ____sys_recvmsg+0x1c9/0x460 [ 534.451192][T17496] ? ___sys_recvmsg+0x1b5/0x510 [ 534.451211][T17496] ? __x64_sys_recvmsg+0x198/0x260 [ 534.451237][T17496] ? pin_user_pages_fast+0x4d/0xb0 [ 534.451261][T17496] iov_iter_extract_pages+0x35a/0x5e0 [ 534.451293][T17496] extract_iter_to_sg+0xe46/0x24e0 [ 534.451330][T17496] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 534.451356][T17496] ? rcu_is_watching+0x15/0xb0 [ 534.451375][T17496] ? trace_kmalloc+0x1f/0xd0 [ 534.451395][T17496] ? __kmalloc_noprof+0x29b/0x4f0 [ 534.451427][T17496] ? __asan_memset+0x22/0x50 [ 534.451451][T17496] af_alg_get_rsgl+0x436/0x810 [ 534.451498][T17496] skcipher_recvmsg+0x3c0/0x11c0 [ 534.451530][T17496] ? aa_sk_perm+0x81e/0x950 [ 534.451573][T17496] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 534.451602][T17496] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 534.451621][T17496] ? security_socket_recvmsg+0x7e/0x2e0 [ 534.451642][T17496] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 534.451669][T17496] sock_recvmsg+0x22c/0x270 [ 534.451705][T17496] ____sys_recvmsg+0x1c9/0x460 [ 534.451739][T17496] ? __pfx_____sys_recvmsg+0x10/0x10 [ 534.451784][T17496] ? import_iovec+0x74/0xa0 [ 534.451819][T17496] ___sys_recvmsg+0x1b5/0x510 [ 534.451850][T17496] ? __pfx____sys_recvmsg+0x10/0x10 [ 534.451908][T17496] ? __fget_files+0x3a0/0x420 [ 534.451949][T17496] __x64_sys_recvmsg+0x198/0x260 [ 534.451979][T17496] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 534.452018][T17496] ? __pfx_ksys_write+0x10/0x10 [ 534.452038][T17496] ? rcu_is_watching+0x15/0xb0 [ 534.452061][T17496] ? do_syscall_64+0xbe/0x3b0 [ 534.452086][T17496] do_syscall_64+0xfa/0x3b0 [ 534.452104][T17496] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.452131][T17496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.452153][T17496] ? clear_bhb_loop+0x60/0xb0 [ 534.452178][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.452197][T17496] RIP: 0033:0x7fbfd318eec9 [ 534.452217][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.452234][T17496] RSP: 002b:00007fbfd4041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 534.452256][T17496] RAX: ffffffffffffffda RBX: 00007fbfd33e5fa0 RCX: 00007fbfd318eec9 [ 534.452272][T17496] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 000000000000000b [ 534.452285][T17496] RBP: 00007fbfd4041090 R08: 0000000000000000 R09: 0000000000000000 [ 534.452298][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.452311][T17496] R13: 00007fbfd33e6038 R14: 00007fbfd33e5fa0 R15: 00007ffca2833da8 [ 534.452348][T17496] [ 535.582663][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3451'. [ 535.954649][T17511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 536.067694][T17532] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 536.437219][T17535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3459'. [ 536.478729][T17524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 536.982389][T17556] vlan1: entered promiscuous mode [ 537.053167][T17557] lo speed is unknown, defaulting to 1000 [ 537.106044][T17555] lo speed is unknown, defaulting to 1000 [ 537.122019][T17566] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 537.152810][T17555] lo speed is unknown, defaulting to 1000 [ 537.335291][T17577] tipc: New replicast peer: 255.255.255.255 [ 537.351078][T17574] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 537.364556][T17577] tipc: Enabled bearer , priority 26 [ 537.520885][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3474'. [ 537.550101][T17585] netlink: 'syz.5.3474': attribute type 1 has an invalid length. [ 537.562508][T17585] netlink: 'syz.5.3474': attribute type 2 has an invalid length. [ 537.589974][T17585] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3474'. [ 537.762207][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3478'. [ 537.835364][T17604] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3480'. [ 538.032860][T17612] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3482'. [ 538.085793][T17613] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3482'. [ 538.331252][T17557] lo speed is unknown, defaulting to 1000 [ 538.724871][T17627] netlink: 6048 bytes leftover after parsing attributes in process `syz.9.3486'. [ 538.841000][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3486'. [ 539.007504][T17630] lo speed is unknown, defaulting to 1000 [ 539.045551][T17635] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3488'. [ 539.090554][T17617] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 539.135441][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3488'. [ 539.210013][T17630] lo speed is unknown, defaulting to 1000 [ 540.083255][T17650] ipvlan4: entered promiscuous mode [ 540.771694][T17669] lo speed is unknown, defaulting to 1000 [ 540.832572][T17676] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 540.857299][T17669] lo speed is unknown, defaulting to 1000 [ 540.885339][T17675] lo speed is unknown, defaulting to 1000 [ 541.245379][T17664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 541.411448][T17686] netlink: 'syz.9.3505': attribute type 1 has an invalid length. [ 541.650213][T17675] lo speed is unknown, defaulting to 1000 [ 542.336088][T17707] lo speed is unknown, defaulting to 1000 [ 542.403278][T17707] lo speed is unknown, defaulting to 1000 [ 543.010627][T17717] lo speed is unknown, defaulting to 1000 [ 543.120253][T17717] lo speed is unknown, defaulting to 1000 [ 543.194140][T17712] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 543.324011][T17727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.447306][T17730] macvlan2: entered promiscuous mode [ 543.452849][T17730] macvlan2: entered allmulticast mode [ 543.460649][T17730] bond5: entered promiscuous mode [ 543.468438][T17730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.478785][T17730] bond5: left promiscuous mode [ 544.146804][T17743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 544.734681][T17759] syzkaller0: entered promiscuous mode [ 544.749595][T17759] syzkaller0: entered allmulticast mode [ 544.750544][T17762] __nla_validate_parse: 16 callbacks suppressed [ 544.750560][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3530'. [ 544.921379][T17764] tipc: Enabled bearer , priority 0 [ 544.931341][T17764] syzkaller0: entered promiscuous mode [ 544.937677][T17764] syzkaller0: entered allmulticast mode [ 544.987163][T17763] tipc: Resetting bearer [ 544.999206][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3533'. [ 545.028635][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3532'. [ 545.059889][T17763] tipc: Disabling bearer [ 545.061914][T17770] FAULT_INJECTION: forcing a failure. [ 545.061914][T17770] name failslab, interval 1, probability 0, space 0, times 0 [ 545.079136][T17770] CPU: 1 UID: 0 PID: 17770 Comm: syz.9.3534 Not tainted syzkaller #0 PREEMPT(full) [ 545.079164][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.079177][T17770] Call Trace: [ 545.079185][T17770] [ 545.079195][T17770] dump_stack_lvl+0x189/0x250 [ 545.079221][T17770] ? __pfx____ratelimit+0x10/0x10 [ 545.079250][T17770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.079272][T17770] ? __pfx__printk+0x10/0x10 [ 545.079314][T17770] should_fail_ex+0x414/0x560 [ 545.079348][T17770] should_failslab+0xa8/0x100 [ 545.079378][T17770] __kmalloc_cache_noprof+0x70/0x3d0 [ 545.079402][T17770] ? sctp_add_bind_addr+0x8c/0x370 [ 545.079429][T17770] sctp_add_bind_addr+0x8c/0x370 [ 545.079457][T17770] sctp_copy_local_addr_list+0x30b/0x4e0 [ 545.079484][T17770] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 545.079504][T17770] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 545.079529][T17770] ? sctp_v6_is_any+0x64/0x80 [ 545.079555][T17770] ? sctp_copy_one_addr+0x93/0x360 [ 545.079582][T17770] sctp_bind_addr_copy+0xb3/0x3c0 [ 545.079606][T17770] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 545.079637][T17770] sctp_connect_new_asoc+0x2e0/0x690 [ 545.079666][T17770] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 545.079688][T17770] ? __local_bh_enable_ip+0x12d/0x1c0 [ 545.079730][T17770] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 545.079752][T17770] ? security_sctp_bind_connect+0x7e/0x2e0 [ 545.079781][T17770] sctp_sendmsg+0x155c/0x2810 [ 545.079820][T17770] ? __pfx_sctp_sendmsg+0x10/0x10 [ 545.079849][T17770] ? aa_sk_perm+0x81e/0x950 [ 545.079883][T17770] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.079916][T17770] ? sock_rps_record_flow+0x19/0x410 [ 545.079939][T17770] ? inet_sendmsg+0x2f4/0x370 [ 545.079963][T17770] __sock_sendmsg+0x19c/0x270 [ 545.079996][T17770] ____sys_sendmsg+0x52d/0x830 [ 545.080029][T17770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.080066][T17770] ? import_iovec+0x74/0xa0 [ 545.080095][T17770] ___sys_sendmsg+0x21f/0x2a0 [ 545.080124][T17770] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.080196][T17770] ? __fget_files+0x2a/0x420 [ 545.080223][T17770] ? __fget_files+0x3a0/0x420 [ 545.080261][T17770] __sys_sendmmsg+0x227/0x430 [ 545.080294][T17770] ? __pfx___sys_sendmmsg+0x10/0x10 [ 545.080314][T17770] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 545.080364][T17770] ? ksys_write+0x22a/0x250 [ 545.080391][T17770] ? __pfx_ksys_write+0x10/0x10 [ 545.080411][T17770] ? rcu_is_watching+0x15/0xb0 [ 545.080438][T17770] __x64_sys_sendmmsg+0xa0/0xc0 [ 545.080464][T17770] do_syscall_64+0xfa/0x3b0 [ 545.080481][T17770] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.080507][T17770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.080527][T17770] ? clear_bhb_loop+0x60/0xb0 [ 545.080551][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.080568][T17770] RIP: 0033:0x7f0daa78eec9 [ 545.080587][T17770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.080603][T17770] RSP: 002b:00007f0dab615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 545.080625][T17770] RAX: ffffffffffffffda RBX: 00007f0daa9e5fa0 RCX: 00007f0daa78eec9 [ 545.080638][T17770] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000007 [ 545.080650][T17770] RBP: 00007f0dab615090 R08: 0000000000000000 R09: 0000000000000000 [ 545.080661][T17770] R10: 0000000004048010 R11: 0000000000000246 R12: 0000000000000002 [ 545.080674][T17770] R13: 00007f0daa9e6038 R14: 00007f0daa9e5fa0 R15: 00007ffe63d75388 [ 545.080709][T17770] [ 545.536796][T17773] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3535'. [ 545.781766][T17792] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3536'. [ 545.782462][T17791] netlink: 'syz.5.3541': attribute type 5 has an invalid length. [ 545.829218][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3536'. [ 545.890486][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3536'. [ 545.967471][ T30] audit: type=1107 audit(1758714939.629:6): pid=17795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 545.977836][T17802] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3536'. [ 546.086685][T17796] lo speed is unknown, defaulting to 1000 [ 546.110160][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3543'. [ 546.134846][T17796] lo speed is unknown, defaulting to 1000 [ 546.637069][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3545'. [ 547.079679][T17837] FAULT_INJECTION: forcing a failure. [ 547.079679][T17837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.093691][T17837] CPU: 0 UID: 0 PID: 17837 Comm: syz.8.3556 Not tainted syzkaller #0 PREEMPT(full) [ 547.093730][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.093743][T17837] Call Trace: [ 547.093752][T17837] [ 547.093761][T17837] dump_stack_lvl+0x189/0x250 [ 547.093789][T17837] ? __pfx____ratelimit+0x10/0x10 [ 547.093819][T17837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.093842][T17837] ? __pfx__printk+0x10/0x10 [ 547.093866][T17837] ? __might_fault+0xb0/0x130 [ 547.093900][T17837] should_fail_ex+0x414/0x560 [ 547.093931][T17837] _copy_from_user+0x2d/0xb0 [ 547.093957][T17837] __sys_bpf+0x1ed/0x870 [ 547.093983][T17837] ? __pfx___sys_bpf+0x10/0x10 [ 547.094020][T17837] ? ksys_write+0x22a/0x250 [ 547.094048][T17837] ? __pfx_ksys_write+0x10/0x10 [ 547.094069][T17837] ? rcu_is_watching+0x15/0xb0 [ 547.094095][T17837] __x64_sys_bpf+0x7c/0x90 [ 547.094117][T17837] do_syscall_64+0xfa/0x3b0 [ 547.094135][T17837] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.094162][T17837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.094180][T17837] ? clear_bhb_loop+0x60/0xb0 [ 547.094205][T17837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.094222][T17837] RIP: 0033:0x7f3afe98eec9 [ 547.094242][T17837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.094258][T17837] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.094280][T17837] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 547.094294][T17837] RDX: 0000000000000020 RSI: 0000200000000800 RDI: 0000000000000003 [ 547.094306][T17837] RBP: 00007f3aff828090 R08: 0000000000000000 R09: 0000000000000000 [ 547.094318][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.094330][T17837] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 547.094363][T17837] [ 547.532204][T17855] FAULT_INJECTION: forcing a failure. [ 547.532204][T17855] name failslab, interval 1, probability 0, space 0, times 0 [ 547.545958][T17855] CPU: 1 UID: 0 PID: 17855 Comm: syz.7.3560 Not tainted syzkaller #0 PREEMPT(full) [ 547.545987][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.545999][T17855] Call Trace: [ 547.546009][T17855] [ 547.546018][T17855] dump_stack_lvl+0x189/0x250 [ 547.546048][T17855] ? __pfx____ratelimit+0x10/0x10 [ 547.546079][T17855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.546103][T17855] ? __pfx__printk+0x10/0x10 [ 547.546149][T17855] should_fail_ex+0x414/0x560 [ 547.546182][T17855] should_failslab+0xa8/0x100 [ 547.546210][T17855] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 547.546235][T17855] ? __alloc_skb+0x112/0x2d0 [ 547.546254][T17855] ? sock_queue_rcv_skb_reason+0x130/0x190 [ 547.546279][T17855] __alloc_skb+0x112/0x2d0 [ 547.546305][T17855] create_monitor_event+0x1ab/0x8b0 [ 547.546330][T17855] ? send_monitor_replay+0x431/0x610 [ 547.546360][T17855] send_monitor_replay+0x70/0x610 [ 547.546395][T17855] hci_sock_bind+0x772/0x1000 [ 547.546420][T17855] ? __pfx_aa_sk_perm+0x10/0x10 [ 547.546448][T17855] ? tomoyo_socket_bind_permission+0x150/0x290 [ 547.546471][T17855] ? __pfx_hci_sock_bind+0x10/0x10 [ 547.546496][T17855] ? apparmor_socket_bind+0xff/0x1e0 [ 547.546526][T17855] ? bpf_lsm_socket_bind+0x9/0x20 [ 547.546551][T17855] __sys_bind+0x2c6/0x3e0 [ 547.546574][T17855] ? __pfx___sys_bind+0x10/0x10 [ 547.546610][T17855] ? __pfx_ksys_write+0x10/0x10 [ 547.546645][T17855] __x64_sys_bind+0x7a/0x90 [ 547.546667][T17855] do_syscall_64+0xfa/0x3b0 [ 547.546685][T17855] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.546721][T17855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.546740][T17855] ? clear_bhb_loop+0x60/0xb0 [ 547.546764][T17855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.546782][T17855] RIP: 0033:0x7f4c1bd8eec9 [ 547.546801][T17855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.546818][T17855] RSP: 002b:00007f4c1cb46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 547.546839][T17855] RAX: ffffffffffffffda RBX: 00007f4c1bfe6090 RCX: 00007f4c1bd8eec9 [ 547.546853][T17855] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 547.546866][T17855] RBP: 00007f4c1cb46090 R08: 0000000000000000 R09: 0000000000000000 [ 547.546878][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.546890][T17855] R13: 00007f4c1bfe6128 R14: 00007f4c1bfe6090 R15: 00007ffcc188cca8 [ 547.546922][T17855] [ 547.884625][T17862] netlink: 'syz.6.3562': attribute type 6 has an invalid length. [ 548.274768][T17865] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 548.290781][T17852] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 549.141758][T17910] FAULT_INJECTION: forcing a failure. [ 549.141758][T17910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.158167][T17910] CPU: 0 UID: 0 PID: 17910 Comm: syz.9.3577 Not tainted syzkaller #0 PREEMPT(full) [ 549.158195][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.158208][T17910] Call Trace: [ 549.158216][T17910] [ 549.158225][T17910] dump_stack_lvl+0x189/0x250 [ 549.158253][T17910] ? __pfx____ratelimit+0x10/0x10 [ 549.158283][T17910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.158306][T17910] ? __pfx__printk+0x10/0x10 [ 549.158347][T17910] should_fail_ex+0x414/0x560 [ 549.158381][T17910] _copy_to_user+0x31/0xb0 [ 549.158408][T17910] simple_read_from_buffer+0xe1/0x170 [ 549.158440][T17910] proc_fail_nth_read+0x1b3/0x220 [ 549.158466][T17910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.158491][T17910] ? rw_verify_area+0x2a6/0x4d0 [ 549.158513][T17910] ? __lock_acquire+0xab9/0xd20 [ 549.158538][T17910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.158561][T17910] vfs_read+0x1fd/0xa30 [ 549.158584][T17910] ? fdget_pos+0x247/0x320 [ 549.158616][T17910] ? __pfx___mutex_lock+0x10/0x10 [ 549.158636][T17910] ? __pfx_vfs_read+0x10/0x10 [ 549.158662][T17910] ? __fget_files+0x2a/0x420 [ 549.158695][T17910] ? __fget_files+0x3a0/0x420 [ 549.158720][T17910] ? __fget_files+0x2a/0x420 [ 549.158756][T17910] ksys_read+0x145/0x250 [ 549.158783][T17910] ? __pfx_ksys_read+0x10/0x10 [ 549.158804][T17910] ? rcu_is_watching+0x15/0xb0 [ 549.158831][T17910] ? do_syscall_64+0xbe/0x3b0 [ 549.158856][T17910] do_syscall_64+0xfa/0x3b0 [ 549.158873][T17910] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.158901][T17910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.158922][T17910] ? clear_bhb_loop+0x60/0xb0 [ 549.158947][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.158966][T17910] RIP: 0033:0x7f0daa78d8dc [ 549.158993][T17910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 549.159010][T17910] RSP: 002b:00007f0dab615030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.159033][T17910] RAX: ffffffffffffffda RBX: 00007f0daa9e5fa0 RCX: 00007f0daa78d8dc [ 549.159047][T17910] RDX: 000000000000000f RSI: 00007f0dab6150a0 RDI: 0000000000000004 [ 549.159060][T17910] RBP: 00007f0dab615090 R08: 0000000000000000 R09: 0000000000000000 [ 549.159072][T17910] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 549.159083][T17910] R13: 00007f0daa9e6038 R14: 00007f0daa9e5fa0 R15: 00007ffe63d75388 [ 549.159118][T17910] [ 549.407356][T17914] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 549.455000][T17912] sctp: [Deprecated]: syz.7.3575 (pid 17912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.455000][T17912] Use struct sctp_sack_info instead [ 549.674401][T17926] lo speed is unknown, defaulting to 1000 [ 549.692962][T17926] lo speed is unknown, defaulting to 1000 [ 550.440620][T17953] __nla_validate_parse: 19 callbacks suppressed [ 550.440641][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3589'. [ 550.484367][T17949] veth1_to_bond: entered allmulticast mode [ 550.623171][T17961] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3588'. [ 550.651084][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.698588][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3588'. [ 550.713022][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.730260][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3588'. [ 550.759253][T17951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.787266][T17968] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3588'. [ 550.853249][T17971] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3593'. [ 550.912369][T17953] veth1_to_bond (unregistering): left allmulticast mode [ 551.302080][T17984] netlink: 'syz.8.3597': attribute type 10 has an invalid length. [ 551.345949][T17987] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3600'. [ 551.363653][T17989] netlink: 'syz.5.3601': attribute type 1 has an invalid length. [ 551.382646][T17989] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.3601'. [ 551.418514][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3597'. [ 551.659309][T18000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.701883][T16952] page_pool_release_retry() stalled pool shutdown: id 127, 1 inflight 60 sec [ 551.794707][T18005] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3606'. [ 551.805541][T18003] openvswitch: netlink: Flow key attr not present in new flow. [ 551.938435][T18009] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 552.418739][T18033] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 552.601775][T18043] lo speed is unknown, defaulting to 1000 [ 552.691279][T18043] lo speed is unknown, defaulting to 1000 [ 553.001149][T18024] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 553.141607][T18059] netem: change failed [ 553.600201][T18072] lo speed is unknown, defaulting to 1000 [ 553.649627][T18080] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.757113][T18080] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.798820][T18072] lo speed is unknown, defaulting to 1000 [ 553.888989][T18080] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.001664][T18093] FAULT_INJECTION: forcing a failure. [ 554.001664][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.027221][T18093] CPU: 0 UID: 0 PID: 18093 Comm: syz.9.3640 Not tainted syzkaller #0 PREEMPT(full) [ 554.027250][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 554.027261][T18093] Call Trace: [ 554.027270][T18093] [ 554.027280][T18093] dump_stack_lvl+0x189/0x250 [ 554.027308][T18093] ? __pfx____ratelimit+0x10/0x10 [ 554.027338][T18093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.027359][T18093] ? __pfx__printk+0x10/0x10 [ 554.027385][T18093] ? __might_fault+0xb0/0x130 [ 554.027425][T18093] should_fail_ex+0x414/0x560 [ 554.027459][T18093] _copy_from_user+0x2d/0xb0 [ 554.027485][T18093] csum_and_copy_from_iter_full+0x694/0x1ed0 [ 554.027517][T18093] ? rcu_is_watching+0x15/0xb0 [ 554.027558][T18093] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 554.027588][T18093] ? policy_nodemask+0x27c/0x720 [ 554.027629][T18093] ip_generic_getfrag+0x12f/0x2b0 [ 554.027661][T18093] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.027698][T18093] ? skb_page_frag_refill+0x199/0x320 [ 554.027735][T18093] __ip6_append_data+0x205e/0x3f30 [ 554.027786][T18093] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.027836][T18093] ? __pfx___ip6_append_data+0x10/0x10 [ 554.027854][T18093] ? __pfx_ip6_mtu+0x10/0x10 [ 554.027885][T18093] ip6_append_data+0x1c1/0x380 [ 554.027911][T18093] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 554.027941][T18093] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 554.027983][T18093] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 554.028033][T18093] ? __pfx_aa_sk_perm+0x10/0x10 [ 554.028059][T18093] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 554.028091][T18093] ? inet_sendmsg+0x2f4/0x370 [ 554.028108][T18093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.028132][T18093] __sock_sendmsg+0x19c/0x270 [ 554.028165][T18093] ____sys_sendmsg+0x505/0x830 [ 554.028197][T18093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.028232][T18093] ? import_iovec+0x74/0xa0 [ 554.028260][T18093] ___sys_sendmsg+0x21f/0x2a0 [ 554.028288][T18093] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.028356][T18093] ? __fget_files+0x2a/0x420 [ 554.028381][T18093] ? __fget_files+0x3a0/0x420 [ 554.028419][T18093] __x64_sys_sendmsg+0x19b/0x260 [ 554.028447][T18093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.028483][T18093] ? __pfx_ksys_write+0x10/0x10 [ 554.028504][T18093] ? rcu_is_watching+0x15/0xb0 [ 554.028528][T18093] ? do_syscall_64+0xbe/0x3b0 [ 554.028552][T18093] do_syscall_64+0xfa/0x3b0 [ 554.028579][T18093] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.028606][T18093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.028624][T18093] ? clear_bhb_loop+0x60/0xb0 [ 554.028648][T18093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.028667][T18093] RIP: 0033:0x7f0daa78eec9 [ 554.028697][T18093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.028712][T18093] RSP: 002b:00007f0dab615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.028735][T18093] RAX: ffffffffffffffda RBX: 00007f0daa9e5fa0 RCX: 00007f0daa78eec9 [ 554.028748][T18093] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 554.028760][T18093] RBP: 00007f0dab615090 R08: 0000000000000000 R09: 0000000000000000 [ 554.028772][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 554.028783][T18093] R13: 00007f0daa9e6038 R14: 00007f0daa9e5fa0 R15: 00007ffe63d75388 [ 554.028817][T18093] [ 554.462231][T18080] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.912835][ T36] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.008899][ T5034] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.145372][T18109] netlink: 'syz.5.3646': attribute type 282 has an invalid length. [ 555.191271][ T5034] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.276756][ T5034] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.719320][T18131] __nla_validate_parse: 15 callbacks suppressed [ 555.719344][T18131] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3653'. [ 555.845813][T18135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3654'. [ 556.391523][T18158] batadv_slave_1: entered promiscuous mode [ 556.486079][T18161] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3661'. [ 556.498423][T18156] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3660'. [ 556.551540][T18151] batadv_slave_1: left promiscuous mode [ 556.753767][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3664'. [ 556.763146][T18143] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 556.771320][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3664'. [ 556.788148][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3663'. [ 556.836797][T18177] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3665'. [ 556.925591][T18181] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3667'. [ 556.962793][T18179] syzkaller0: entered promiscuous mode [ 556.983724][T18179] syzkaller0: entered allmulticast mode [ 557.150314][T18188] netlink: 'syz.7.3670': attribute type 30 has an invalid length. [ 557.199102][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3672'. [ 557.736209][T18210] lo speed is unknown, defaulting to 1000 [ 557.811292][T18216] Unsupported ieee802154 address type: 0 [ 557.822263][T18210] lo speed is unknown, defaulting to 1000 [ 557.831139][T18218] Unsupported ieee802154 address type: 0 [ 557.998936][T18191] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 558.122146][T18227] netlink: 'syz.5.3682': attribute type 1 has an invalid length. [ 558.878015][T18256] netlink: 'syz.9.3692': attribute type 20 has an invalid length. [ 559.120169][T18268] FAULT_INJECTION: forcing a failure. [ 559.120169][T18268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.134068][T18268] CPU: 0 UID: 0 PID: 18268 Comm: syz.8.3698 Not tainted syzkaller #0 PREEMPT(full) [ 559.134096][T18268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.134108][T18268] Call Trace: [ 559.134117][T18268] [ 559.134126][T18268] dump_stack_lvl+0x189/0x250 [ 559.134153][T18268] ? __pfx____ratelimit+0x10/0x10 [ 559.134179][T18268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.134196][T18268] ? __pfx__printk+0x10/0x10 [ 559.134216][T18268] ? __might_fault+0xb0/0x130 [ 559.134245][T18268] should_fail_ex+0x414/0x560 [ 559.134271][T18268] _copy_from_user+0x2d/0xb0 [ 559.134290][T18268] ___sys_sendmsg+0x158/0x2a0 [ 559.134312][T18268] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.134363][T18268] ? __fget_files+0x2a/0x420 [ 559.134384][T18268] ? __fget_files+0x3a0/0x420 [ 559.134413][T18268] __x64_sys_sendmsg+0x19b/0x260 [ 559.134434][T18268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.134462][T18268] ? __pfx_ksys_write+0x10/0x10 [ 559.134478][T18268] ? rcu_is_watching+0x15/0xb0 [ 559.134499][T18268] ? do_syscall_64+0xbe/0x3b0 [ 559.134522][T18268] do_syscall_64+0xfa/0x3b0 [ 559.134536][T18268] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.134557][T18268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.134572][T18268] ? clear_bhb_loop+0x60/0xb0 [ 559.134590][T18268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.134604][T18268] RIP: 0033:0x7f3afe98eec9 [ 559.134619][T18268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.134633][T18268] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.134651][T18268] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 559.134662][T18268] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 559.134673][T18268] RBP: 00007f3aff828090 R08: 0000000000000000 R09: 0000000000000000 [ 559.134682][T18268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.134692][T18268] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 559.134727][T18268] [ 559.952042][T18292] FAULT_INJECTION: forcing a failure. [ 559.952042][T18292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.966430][T18292] CPU: 1 UID: 0 PID: 18292 Comm: syz.7.3705 Not tainted syzkaller #0 PREEMPT(full) [ 559.966460][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.966472][T18292] Call Trace: [ 559.966480][T18292] [ 559.966490][T18292] dump_stack_lvl+0x189/0x250 [ 559.966518][T18292] ? __pfx____ratelimit+0x10/0x10 [ 559.966547][T18292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.966569][T18292] ? __pfx__printk+0x10/0x10 [ 559.966595][T18292] ? __might_fault+0xb0/0x130 [ 559.966633][T18292] should_fail_ex+0x414/0x560 [ 559.966669][T18292] _copy_from_user+0x2d/0xb0 [ 559.966696][T18292] ___sys_sendmsg+0x158/0x2a0 [ 559.966736][T18292] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.966806][T18292] ? __fget_files+0x2a/0x420 [ 559.966832][T18292] ? __fget_files+0x3a0/0x420 [ 559.966873][T18292] __x64_sys_sendmsg+0x19b/0x260 [ 559.966901][T18292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.966938][T18292] ? __pfx_ksys_write+0x10/0x10 [ 559.966959][T18292] ? rcu_is_watching+0x15/0xb0 [ 559.966985][T18292] ? do_syscall_64+0xbe/0x3b0 [ 559.967010][T18292] do_syscall_64+0xfa/0x3b0 [ 559.967027][T18292] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.967056][T18292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.967076][T18292] ? clear_bhb_loop+0x60/0xb0 [ 559.967099][T18292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.967118][T18292] RIP: 0033:0x7f4c1bd8eec9 [ 559.967137][T18292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.967155][T18292] RSP: 002b:00007f4c1cb67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.967178][T18292] RAX: ffffffffffffffda RBX: 00007f4c1bfe5fa0 RCX: 00007f4c1bd8eec9 [ 559.967193][T18292] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 559.967206][T18292] RBP: 00007f4c1cb67090 R08: 0000000000000000 R09: 0000000000000000 [ 559.967218][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.967230][T18292] R13: 00007f4c1bfe6038 R14: 00007f4c1bfe5fa0 R15: 00007ffcc188cca8 [ 559.967264][T18292] [ 560.558525][T18312] veth0_to_bond: entered allmulticast mode [ 561.007568][T18330] nbd9: detected capacity change from 0 to 63 [ 561.024303][T18333] block nbd9: NBD_DISCONNECT [ 561.051563][T18333] block nbd9: Disconnected due to user request. [ 561.071260][T18333] block nbd9: shutting down sockets [ 561.102503][ C0] blk_print_req_error: 138 callbacks suppressed [ 561.102528][ C0] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.118028][ C0] buffer_io_error: 138 callbacks suppressed [ 561.118048][ C0] Buffer I/O error on dev nbd9, logical block 0, async page read [ 561.131934][ C0] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.141162][ C0] Buffer I/O error on dev nbd9, logical block 1, async page read [ 561.149107][ C0] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.158221][ C0] Buffer I/O error on dev nbd9, logical block 2, async page read [ 561.166210][ C0] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.175277][ C0] Buffer I/O error on dev nbd9, logical block 3, async page read [ 561.187252][ T6010] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.201995][ T6010] Buffer I/O error on dev nbd9, logical block 0, async page read [ 561.225011][ T6010] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.244784][ T6010] Buffer I/O error on dev nbd9, logical block 1, async page read [ 561.334393][ T30] audit: type=1800 audit(1758714954.999:7): pid=18340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3720" name="memory.events" dev="tmpfs" ino=2056 res=0 errno=0 [ 561.424302][ T6010] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.434609][ T6010] Buffer I/O error on dev nbd9, logical block 2, async page read [ 561.443877][ T6010] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.454876][ T6010] Buffer I/O error on dev nbd9, logical block 3, async page read [ 561.537106][ T6010] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.568841][T18356] __nla_validate_parse: 12 callbacks suppressed [ 561.568861][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3728'. [ 561.576105][T18355] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3727'. [ 561.584793][ T6010] Buffer I/O error on dev nbd9, logical block 0, async page read [ 561.636314][ T6010] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.650988][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3727'. [ 561.654643][ T6010] Buffer I/O error on dev nbd9, logical block 1, async page read [ 561.681588][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3727'. [ 561.681649][ T6010] ldm_validate_partition_table(): Disk read failed. [ 561.722891][T18364] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3727'. [ 561.730613][ T6010] Dev nbd9: unable to read RDB block 0 [ 561.750698][ T6010] nbd9: unable to read partition table [ 561.802254][ T6010] ldm_validate_partition_table(): Disk read failed. [ 561.834307][ T6010] Dev nbd9: unable to read RDB block 0 [ 561.868762][ T6010] nbd9: unable to read partition table [ 562.021439][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3736'. [ 562.060071][T18377] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3737'. [ 562.073649][T18377] netlink: zone id is out of range [ 562.099721][T18377] netlink: zone id is out of range [ 562.120195][T18377] netlink: get zone limit has 8 unknown bytes [ 562.417479][ T55] block nbd2: Possible stuck request ffff888025041c00: control (read@0,1024B). Runtime 360 seconds [ 562.429933][ T55] block nbd2: Possible stuck request ffff888025041dc0: control (read@1024,1024B). Runtime 360 seconds [ 562.441718][ T55] block nbd2: Possible stuck request ffff888025041f80: control (read@2048,1024B). Runtime 360 seconds [ 562.453037][ T55] block nbd2: Possible stuck request ffff888025042140: control (read@3072,1024B). Runtime 360 seconds [ 562.492339][T18404] lo speed is unknown, defaulting to 1000 [ 562.505260][T18404] lo speed is unknown, defaulting to 1000 [ 562.923476][T18415] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3744'. [ 562.939784][T18417] sctp: [Deprecated]: syz.6.3747 (pid 18417) Use of int in max_burst socket option. [ 562.939784][T18417] Use struct sctp_assoc_value instead [ 562.994385][T18419] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3748'. [ 563.027366][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 564.049256][T18455] lo speed is unknown, defaulting to 1000 [ 564.082190][T18455] lo speed is unknown, defaulting to 1000 [ 564.775155][T18479] netlink: 'syz.9.3764': attribute type 13 has an invalid length. [ 564.794875][T18479] netlink: 'syz.9.3764': attribute type 17 has an invalid length. [ 564.863648][T18482] FAULT_INJECTION: forcing a failure. [ 564.863648][T18482] name failslab, interval 1, probability 0, space 0, times 0 [ 564.877137][T18482] CPU: 1 UID: 0 PID: 18482 Comm: syz.5.3765 Not tainted syzkaller #0 PREEMPT(full) [ 564.877156][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.877163][T18482] Call Trace: [ 564.877168][T18482] [ 564.877174][T18482] dump_stack_lvl+0x189/0x250 [ 564.877193][T18482] ? __pfx____ratelimit+0x10/0x10 [ 564.877211][T18482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.877225][T18482] ? __pfx__printk+0x10/0x10 [ 564.877249][T18482] should_fail_ex+0x414/0x560 [ 564.877269][T18482] should_failslab+0xa8/0x100 [ 564.877287][T18482] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 564.877302][T18482] ? nf_ct_ext_add+0x1ab/0x450 [ 564.877321][T18482] ? nf_ct_ext_add+0x1ab/0x450 [ 564.877336][T18482] krealloc_noprof+0x124/0x340 [ 564.877353][T18482] nf_ct_ext_add+0x1ab/0x450 [ 564.877374][T18482] ctnetlink_new_conntrack+0x11e7/0x2070 [ 564.877391][T18482] ? ctnetlink_new_conntrack+0x6d3/0x2070 [ 564.877411][T18482] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 564.877425][T18482] ? trace_contention_end+0x39/0x120 [ 564.877437][T18482] ? __mutex_lock+0x335/0x1350 [ 564.877454][T18482] ? __lock_acquire+0xab9/0xd20 [ 564.877471][T18482] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 564.877506][T18482] nfnetlink_rcv_msg+0xb4a/0x1130 [ 564.877524][T18482] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 564.877554][T18482] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 564.877570][T18482] ? kasan_save_free_info+0x46/0x50 [ 564.877614][T18482] netlink_rcv_skb+0x208/0x470 [ 564.877627][T18482] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 564.877646][T18482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.877678][T18482] ? bpf_lsm_capable+0x9/0x20 [ 564.877701][T18482] ? security_capable+0x7e/0x2e0 [ 564.877735][T18482] nfnetlink_rcv+0x26a/0x2520 [ 564.877766][T18482] ? __dev_queue_xmit+0x1d79/0x3b50 [ 564.877804][T18482] ? __dev_queue_xmit+0x27b/0x3b50 [ 564.877831][T18482] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 564.877848][T18482] ? __pfx___dev_queue_xmit+0x10/0x10 [ 564.877874][T18482] ? ref_tracker_free+0x63a/0x7d0 [ 564.877891][T18482] ? __asan_memcpy+0x40/0x70 [ 564.877911][T18482] ? __pfx_ref_tracker_free+0x10/0x10 [ 564.877940][T18482] ? skb_clone+0x246/0x3a0 [ 564.877957][T18482] ? __netlink_deliver_tap+0x807/0x850 [ 564.877970][T18482] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.877987][T18482] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.878005][T18482] netlink_unicast+0x82f/0x9e0 [ 564.878022][T18482] ? __pfx_netlink_unicast+0x10/0x10 [ 564.878035][T18482] ? netlink_sendmsg+0x642/0xb30 [ 564.878046][T18482] ? skb_put+0x11b/0x210 [ 564.878062][T18482] netlink_sendmsg+0x805/0xb30 [ 564.878081][T18482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.878096][T18482] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.878115][T18482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.878127][T18482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.878140][T18482] __sock_sendmsg+0x21c/0x270 [ 564.878159][T18482] ____sys_sendmsg+0x505/0x830 [ 564.878178][T18482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.878199][T18482] ? import_iovec+0x74/0xa0 [ 564.878217][T18482] ___sys_sendmsg+0x21f/0x2a0 [ 564.878233][T18482] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.878272][T18482] ? __fget_files+0x2a/0x420 [ 564.878287][T18482] ? __fget_files+0x3a0/0x420 [ 564.878311][T18482] __x64_sys_sendmsg+0x19b/0x260 [ 564.878327][T18482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.878349][T18482] ? __pfx_ksys_write+0x10/0x10 [ 564.878362][T18482] ? rcu_is_watching+0x15/0xb0 [ 564.878376][T18482] ? do_syscall_64+0xbe/0x3b0 [ 564.878391][T18482] do_syscall_64+0xfa/0x3b0 [ 564.878401][T18482] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.878418][T18482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.878429][T18482] ? clear_bhb_loop+0x60/0xb0 [ 564.878444][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.878455][T18482] RIP: 0033:0x7fbfd318eec9 [ 564.878467][T18482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.878477][T18482] RSP: 002b:00007fbfd4041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.878492][T18482] RAX: ffffffffffffffda RBX: 00007fbfd33e5fa0 RCX: 00007fbfd318eec9 [ 564.878501][T18482] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 564.878508][T18482] RBP: 00007fbfd4041090 R08: 0000000000000000 R09: 0000000000000000 [ 564.878515][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.878522][T18482] R13: 00007fbfd33e6038 R14: 00007fbfd33e5fa0 R15: 00007ffca2833da8 [ 564.878542][T18482] [ 565.338978][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.425097][T18479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.454139][T18466] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 566.301555][T18529] lo speed is unknown, defaulting to 1000 [ 566.323990][T18529] lo speed is unknown, defaulting to 1000 [ 567.020114][T18526] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 567.039132][T18531] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 567.344795][T18562] __nla_validate_parse: 17 callbacks suppressed [ 567.344816][T18562] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3789'. [ 567.408703][T18564] tipc: Enabling of bearer rejected, failed to enable media [ 567.418802][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3789'. [ 567.449316][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3789'. [ 567.512223][T18562] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3789'. [ 568.043508][T18585] netlink: 'syz.5.3798': attribute type 1 has an invalid length. [ 568.195795][T18585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 568.226157][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3800'. [ 568.257952][T18589] bond4: (slave veth5): Enslaving as an active interface with a down link [ 568.294347][T18590] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3799'. [ 568.512706][T18611] netlink: 4928 bytes leftover after parsing attributes in process `syz.8.3803'. [ 568.845955][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3805'. [ 569.074759][T18599] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 569.394157][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3809'. [ 569.394863][T18639] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3810'. [ 569.694167][T18655] FAULT_INJECTION: forcing a failure. [ 569.694167][T18655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.712465][T18655] CPU: 1 UID: 0 PID: 18655 Comm: syz.8.3816 Not tainted syzkaller #0 PREEMPT(full) [ 569.712495][T18655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 569.712507][T18655] Call Trace: [ 569.712515][T18655] [ 569.712524][T18655] dump_stack_lvl+0x189/0x250 [ 569.712552][T18655] ? __pfx____ratelimit+0x10/0x10 [ 569.712582][T18655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.712605][T18655] ? __pfx__printk+0x10/0x10 [ 569.712631][T18655] ? __might_fault+0xb0/0x130 [ 569.712671][T18655] should_fail_ex+0x414/0x560 [ 569.712706][T18655] _copy_from_iter+0x1de/0x1790 [ 569.712726][T18655] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 569.712762][T18655] ? snprintf+0xda/0x120 [ 569.712786][T18655] ? __pfx__copy_from_iter+0x10/0x10 [ 569.712817][T18655] ? aa_label_sk_perm+0x4cd/0x630 [ 569.712853][T18655] ping_v4_sendmsg+0x222/0x1750 [ 569.712873][T18655] ? __lock_acquire+0xab9/0xd20 [ 569.712918][T18655] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 569.712996][T18655] ? __local_bh_enable_ip+0x12d/0x1c0 [ 569.713027][T18655] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.713056][T18655] ? __local_bh_enable_ip+0x12d/0x1c0 [ 569.713092][T18655] ? inet_sendmsg+0x14f/0x370 [ 569.713113][T18655] ? inet_sendmsg+0x2f4/0x370 [ 569.713134][T18655] __sock_sendmsg+0x19c/0x270 [ 569.713165][T18655] ____sys_sendmsg+0x505/0x830 [ 569.713196][T18655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.713231][T18655] ? import_iovec+0x74/0xa0 [ 569.713259][T18655] ___sys_sendmsg+0x21f/0x2a0 [ 569.713286][T18655] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.713352][T18655] ? __fget_files+0x2a/0x420 [ 569.713378][T18655] ? __fget_files+0x3a0/0x420 [ 569.713418][T18655] __x64_sys_sendmsg+0x19b/0x260 [ 569.713446][T18655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.713483][T18655] ? __pfx_ksys_write+0x10/0x10 [ 569.713504][T18655] ? rcu_is_watching+0x15/0xb0 [ 569.713530][T18655] ? do_syscall_64+0xbe/0x3b0 [ 569.713555][T18655] do_syscall_64+0xfa/0x3b0 [ 569.713572][T18655] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.713600][T18655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.713620][T18655] ? clear_bhb_loop+0x60/0xb0 [ 569.713645][T18655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.713665][T18655] RIP: 0033:0x7f3afe98eec9 [ 569.713682][T18655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.713697][T18655] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.713719][T18655] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 569.713733][T18655] RDX: 0000000004040810 RSI: 0000200000000200 RDI: 0000000000000003 [ 569.713744][T18655] RBP: 00007f3aff828090 R08: 0000000000000000 R09: 0000000000000000 [ 569.713756][T18655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.713769][T18655] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 569.713805][T18655] [ 570.042747][T18667] tipc: Failed to remove unknown binding: 66,1,1/279467459:691574930/691574932 [ 570.054253][T18667] tipc: Failed to remove unknown binding: 66,1,1/279467459:691574930/691574932 [ 570.316867][T18678] syzkaller0: entered promiscuous mode [ 570.322524][T18678] syzkaller0: entered allmulticast mode [ 570.570178][T18662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 571.289483][T18723] pimreg: entered allmulticast mode [ 571.694283][T18750] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 572.027167][T18724] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 572.039994][T18759] syzkaller1: entered promiscuous mode [ 572.047006][T18759] syzkaller1: entered allmulticast mode [ 572.132979][T18769] netlink: 'syz.7.3854': attribute type 1 has an invalid length. [ 572.403355][T16957] IPVS: starting estimator thread 0... [ 572.442318][T18786] __nla_validate_parse: 7 callbacks suppressed [ 572.442340][T18786] netlink: 240 bytes leftover after parsing attributes in process `syz.8.3858'. [ 572.500404][T18785] IPVS: using max 23 ests per chain, 55200 per kthread [ 572.593534][ T5862] block nbd3: Receive control failed (result -107) [ 572.617016][T18789] nbd3: detected capacity change from 0 to 32 [ 572.637818][ T6010] block nbd3: Dead connection, failed to find a fallback [ 572.666038][ T6010] block nbd3: shutting down sockets [ 572.690245][ T6010] blk_print_req_error: 138 callbacks suppressed [ 572.690266][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.734561][ T6010] buffer_io_error: 138 callbacks suppressed [ 572.734583][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.760782][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.771312][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.780372][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.790683][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.808672][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.820106][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.832079][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.842339][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.852826][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.865454][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.874972][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.895090][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.895320][T18797] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3861'. [ 572.909398][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.941578][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.951469][ T6010] ldm_validate_partition_table(): Disk read failed. [ 572.959201][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.972394][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.981843][ T6010] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.992312][ T6010] Buffer I/O error on dev nbd3, logical block 0, async page read [ 573.004073][ T6010] Dev nbd3: unable to read RDB block 0 [ 573.011687][ T6010] nbd3: unable to read partition table [ 573.083251][ T6010] ldm_validate_partition_table(): Disk read failed. [ 573.101563][ T6010] Dev nbd3: unable to read RDB block 0 [ 573.134185][ T6010] nbd3: unable to read partition table [ 573.480317][T18824] netlink: 'syz.9.3870': attribute type 1 has an invalid length. [ 573.626038][T18824] bond4: (slave gretap1): making interface the new active one [ 573.668974][T18824] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 573.771495][T18830] tipc: Enabling of bearer rejected, failed to enable media [ 573.782408][T18830] syzkaller0: entered promiscuous mode [ 573.788055][T18830] syzkaller0: entered allmulticast mode [ 573.844782][T18832] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 573.960654][T18812] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 573.972692][T18835] gtp1: entered promiscuous mode [ 573.979194][T18835] gtp1: entered allmulticast mode [ 574.201509][T18847] FAULT_INJECTION: forcing a failure. [ 574.201509][T18847] name failslab, interval 1, probability 0, space 0, times 0 [ 574.236375][T18847] CPU: 1 UID: 0 PID: 18847 Comm: syz.8.3878 Not tainted syzkaller #0 PREEMPT(full) [ 574.236407][T18847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.236419][T18847] Call Trace: [ 574.236428][T18847] [ 574.236437][T18847] dump_stack_lvl+0x189/0x250 [ 574.236464][T18847] ? __pfx____ratelimit+0x10/0x10 [ 574.236494][T18847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.236516][T18847] ? __pfx__printk+0x10/0x10 [ 574.236546][T18847] ? __pfx___might_resched+0x10/0x10 [ 574.236572][T18847] ? fs_reclaim_acquire+0x7d/0x100 [ 574.236604][T18847] should_fail_ex+0x414/0x560 [ 574.236638][T18847] should_failslab+0xa8/0x100 [ 574.236676][T18847] __kmalloc_noprof+0xcb/0x4f0 [ 574.236699][T18847] ? security_sk_alloc+0x52/0x390 [ 574.236727][T18847] security_sk_alloc+0x52/0x390 [ 574.236753][T18847] sk_prot_alloc+0x101/0x220 [ 574.236775][T18847] ? sk_alloc+0x24/0x370 [ 574.236801][T18847] sk_alloc+0x3a/0x370 [ 574.236822][T18847] ? bpf_ctx_init+0x167/0x1d0 [ 574.236847][T18847] bpf_prog_test_run_skb+0x2ed/0x1560 [ 574.236867][T18847] ? __fget_files+0x2a/0x420 [ 574.236907][T18847] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 574.236929][T18847] bpf_prog_test_run+0x2c7/0x340 [ 574.236960][T18847] __sys_bpf+0x581/0x870 [ 574.236987][T18847] ? __pfx___sys_bpf+0x10/0x10 [ 574.237027][T18847] ? ksys_write+0x22a/0x250 [ 574.237054][T18847] ? __pfx_ksys_write+0x10/0x10 [ 574.237075][T18847] ? rcu_is_watching+0x15/0xb0 [ 574.237103][T18847] __x64_sys_bpf+0x7c/0x90 [ 574.237126][T18847] do_syscall_64+0xfa/0x3b0 [ 574.237145][T18847] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.237173][T18847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.237191][T18847] ? clear_bhb_loop+0x60/0xb0 [ 574.237213][T18847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.237232][T18847] RIP: 0033:0x7f3afe98eec9 [ 574.237251][T18847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.237267][T18847] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 574.237289][T18847] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 574.237303][T18847] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 574.237317][T18847] RBP: 00007f3aff828090 R08: 0000000000000000 R09: 0000000000000000 [ 574.237329][T18847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.237340][T18847] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 574.237375][T18847] [ 574.691957][T18864] FAULT_INJECTION: forcing a failure. [ 574.691957][T18864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.705897][T18864] CPU: 0 UID: 0 PID: 18864 Comm: syz.5.3885 Not tainted syzkaller #0 PREEMPT(full) [ 574.705928][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.705951][T18864] Call Trace: [ 574.705961][T18864] [ 574.705971][T18864] dump_stack_lvl+0x189/0x250 [ 574.706000][T18864] ? __pfx____ratelimit+0x10/0x10 [ 574.706030][T18864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.706053][T18864] ? __pfx__printk+0x10/0x10 [ 574.706078][T18864] ? __might_fault+0xb0/0x130 [ 574.706122][T18864] should_fail_ex+0x414/0x560 [ 574.706153][T18864] _copy_from_user+0x2d/0xb0 [ 574.706178][T18864] ___sys_recvmsg+0x12e/0x510 [ 574.706209][T18864] ? __pfx____sys_recvmsg+0x10/0x10 [ 574.706271][T18864] ? __might_fault+0xb0/0x130 [ 574.706302][T18864] do_recvmmsg+0x307/0x770 [ 574.706338][T18864] ? __pfx_do_recvmmsg+0x10/0x10 [ 574.706379][T18864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.706421][T18864] __x64_sys_recvmmsg+0x190/0x240 [ 574.706450][T18864] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 574.706483][T18864] ? do_syscall_64+0xbe/0x3b0 [ 574.706507][T18864] do_syscall_64+0xfa/0x3b0 [ 574.706525][T18864] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.706552][T18864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.706572][T18864] ? clear_bhb_loop+0x60/0xb0 [ 574.706596][T18864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.706615][T18864] RIP: 0033:0x7fbfd318eec9 [ 574.706635][T18864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.706653][T18864] RSP: 002b:00007fbfd4041038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 574.706674][T18864] RAX: ffffffffffffffda RBX: 00007fbfd33e5fa0 RCX: 00007fbfd318eec9 [ 574.706688][T18864] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000007 [ 574.706701][T18864] RBP: 00007fbfd4041090 R08: 0000000000000000 R09: 0000000000000000 [ 574.706714][T18864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.706727][T18864] R13: 00007fbfd33e6038 R14: 00007fbfd33e5fa0 R15: 00007ffca2833da8 [ 574.706762][T18864] [ 574.932162][T18861] nbd6: detected capacity change from 0 to 63 [ 574.941055][T18862] block nbd6: NBD_DISCONNECT [ 574.947198][T18862] block nbd6: Disconnected due to user request. [ 574.953548][T18862] block nbd6: shutting down sockets [ 575.087792][T18869] tipc: Enabling of bearer rejected, failed to enable media [ 575.111898][T18869] syzkaller0: entered promiscuous mode [ 575.119535][T18869] syzkaller0: entered allmulticast mode [ 575.285336][T18878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.306423][T16957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.580574][T18887] FAULT_INJECTION: forcing a failure. [ 575.580574][T18887] name failslab, interval 1, probability 0, space 0, times 0 [ 575.623203][T18887] CPU: 1 UID: 0 PID: 18887 Comm: syz.8.3893 Not tainted syzkaller #0 PREEMPT(full) [ 575.623233][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.623245][T18887] Call Trace: [ 575.623254][T18887] [ 575.623263][T18887] dump_stack_lvl+0x189/0x250 [ 575.623290][T18887] ? __pfx____ratelimit+0x10/0x10 [ 575.623320][T18887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.623342][T18887] ? __pfx__printk+0x10/0x10 [ 575.623375][T18887] ? __pfx___might_resched+0x10/0x10 [ 575.623407][T18887] should_fail_ex+0x414/0x560 [ 575.623438][T18887] ? traverse+0xd9/0x570 [ 575.623455][T18887] should_failslab+0xa8/0x100 [ 575.623482][T18887] __kvmalloc_node_noprof+0x161/0x5f0 [ 575.623505][T18887] ? traverse+0xd9/0x570 [ 575.623529][T18887] traverse+0xd9/0x570 [ 575.623558][T18887] ? aa_file_perm+0x13a/0x1550 [ 575.623581][T18887] seq_read_iter+0xcfe/0xe10 [ 575.623625][T18887] ? __asan_memset+0x22/0x50 [ 575.623653][T18887] seq_read+0x369/0x480 [ 575.623686][T18887] ? __pfx_seq_read+0x10/0x10 [ 575.623706][T18887] ? __debugfs_file_get+0x5dd/0x710 [ 575.623733][T18887] ? __pfx___debugfs_file_get+0x10/0x10 [ 575.623775][T18887] full_proxy_read+0x124/0x1f0 [ 575.623801][T18887] vfs_readv+0x5a7/0x850 [ 575.623819][T18887] ? __pfx_full_proxy_read+0x10/0x10 [ 575.623842][T18887] ? __pfx_vfs_readv+0x10/0x10 [ 575.623887][T18887] ? __fget_files+0x2a/0x420 [ 575.623918][T18887] ? __fget_files+0x3a0/0x420 [ 575.623941][T18887] ? __fget_files+0x2a/0x420 [ 575.623978][T18887] __x64_sys_preadv+0x197/0x2a0 [ 575.624009][T18887] ? __pfx___x64_sys_preadv+0x10/0x10 [ 575.624032][T18887] ? rcu_is_watching+0x15/0xb0 [ 575.624058][T18887] ? do_syscall_64+0xbe/0x3b0 [ 575.624082][T18887] do_syscall_64+0xfa/0x3b0 [ 575.624098][T18887] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.624124][T18887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.624154][T18887] ? clear_bhb_loop+0x60/0xb0 [ 575.624178][T18887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.624197][T18887] RIP: 0033:0x7f3afe98eec9 [ 575.624216][T18887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.624232][T18887] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 575.624255][T18887] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 575.624270][T18887] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 575.624283][T18887] RBP: 00007f3aff828090 R08: 0000000000000007 R09: 0000000000000000 [ 575.624295][T18887] R10: 00000000000000e9 R11: 0000000000000246 R12: 0000000000000001 [ 575.624307][T18887] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 575.624344][T18887] [ 575.897987][T18875] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 575.898091][T16957] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 576.128220][T18901] netlink: 'syz.6.3899': attribute type 1 has an invalid length. [ 576.191513][T18905] FAULT_INJECTION: forcing a failure. [ 576.191513][T18905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.209839][T18905] CPU: 0 UID: 0 PID: 18905 Comm: syz.8.3900 Not tainted syzkaller #0 PREEMPT(full) [ 576.209867][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 576.209877][T18905] Call Trace: [ 576.209885][T18905] [ 576.209893][T18905] dump_stack_lvl+0x189/0x250 [ 576.209928][T18905] ? __pfx____ratelimit+0x10/0x10 [ 576.209957][T18905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.209979][T18905] ? __pfx__printk+0x10/0x10 [ 576.210017][T18905] ? fs_reclaim_acquire+0x7d/0x100 [ 576.210055][T18905] should_fail_ex+0x414/0x560 [ 576.210088][T18905] prepare_alloc_pages+0x213/0x610 [ 576.210126][T18905] __alloc_frozen_pages_noprof+0x123/0x370 [ 576.210160][T18905] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 576.210196][T18905] ? policy_nodemask+0x27c/0x720 [ 576.210228][T18905] alloc_pages_mpol+0x232/0x4a0 [ 576.210260][T18905] vma_alloc_folio_noprof+0xe4/0x200 [ 576.210289][T18905] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 576.210330][T18905] folio_prealloc+0x30/0x180 [ 576.210356][T18905] do_wp_page+0x1231/0x5800 [ 576.210405][T18905] ? __pfx_do_wp_page+0x10/0x10 [ 576.210424][T18905] ? do_raw_spin_lock+0x121/0x290 [ 576.210450][T18905] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 576.210486][T18905] __handle_mm_fault+0x1033/0x5440 [ 576.210531][T18905] ? __pfx___handle_mm_fault+0x10/0x10 [ 576.210571][T18905] ? follow_page_pte+0xd03/0x13e0 [ 576.210606][T18905] handle_mm_fault+0x40a/0x8e0 [ 576.210642][T18905] __get_user_pages+0x1699/0x2ce0 [ 576.210659][T18905] ? __lock_acquire+0xab9/0xd20 [ 576.210723][T18905] __gup_longterm_locked+0xde9/0x1660 [ 576.210762][T18905] ? sanity_check_pinned_pages+0x1241/0x1300 [ 576.210787][T18905] ? gup_fast_fallback+0x195f/0x2010 [ 576.210827][T18905] gup_fast_fallback+0x1e6a/0x2010 [ 576.210889][T18905] ? __pfx_gup_fast_fallback+0x10/0x10 [ 576.210918][T18905] ? kasan_save_track+0x4f/0x80 [ 576.210939][T18905] ? kasan_save_track+0x3e/0x80 [ 576.210957][T18905] ? __kasan_kmalloc+0x93/0xb0 [ 576.210978][T18905] ? sock_kmalloc+0xd6/0x160 [ 576.211002][T18905] ? af_alg_get_rsgl+0x236/0x810 [ 576.211023][T18905] ? skcipher_recvmsg+0x3c0/0x11c0 [ 576.211049][T18905] ? ____sys_recvmsg+0x1c9/0x460 [ 576.211070][T18905] ? ___sys_recvmsg+0x1b5/0x510 [ 576.211093][T18905] ? __x64_sys_recvmsg+0x198/0x260 [ 576.211121][T18905] ? pin_user_pages_fast+0x4d/0xb0 [ 576.211146][T18905] iov_iter_extract_pages+0x35a/0x5e0 [ 576.211179][T18905] extract_iter_to_sg+0xe46/0x24e0 [ 576.211218][T18905] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 576.211238][T18905] ? sock_kmalloc+0xd6/0x160 [ 576.211266][T18905] ? rcu_is_watching+0x15/0xb0 [ 576.211284][T18905] ? trace_kmalloc+0x1f/0xd0 [ 576.211304][T18905] ? __kmalloc_noprof+0x29b/0x4f0 [ 576.211333][T18905] ? __asan_memset+0x22/0x50 [ 576.211356][T18905] af_alg_get_rsgl+0x436/0x810 [ 576.211406][T18905] skcipher_recvmsg+0x3c0/0x11c0 [ 576.211439][T18905] ? aa_sk_perm+0x81e/0x950 [ 576.211484][T18905] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 576.211516][T18905] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 576.211535][T18905] ? security_socket_recvmsg+0x7e/0x2e0 [ 576.211559][T18905] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 576.211587][T18905] sock_recvmsg+0x22c/0x270 [ 576.211633][T18905] ____sys_recvmsg+0x1c9/0x460 [ 576.211669][T18905] ? __pfx_____sys_recvmsg+0x10/0x10 [ 576.211717][T18905] ? import_iovec+0x74/0xa0 [ 576.211746][T18905] ___sys_recvmsg+0x1b5/0x510 [ 576.211780][T18905] ? __pfx____sys_recvmsg+0x10/0x10 [ 576.211841][T18905] ? __fget_files+0x3a0/0x420 [ 576.211885][T18905] __x64_sys_recvmsg+0x198/0x260 [ 576.211923][T18905] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 576.211960][T18905] ? __pfx_ksys_write+0x10/0x10 [ 576.211981][T18905] ? rcu_is_watching+0x15/0xb0 [ 576.212004][T18905] ? do_syscall_64+0xbe/0x3b0 [ 576.212029][T18905] do_syscall_64+0xfa/0x3b0 [ 576.212047][T18905] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.212075][T18905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.212096][T18905] ? clear_bhb_loop+0x60/0xb0 [ 576.212120][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.212139][T18905] RIP: 0033:0x7f3afe98eec9 [ 576.212159][T18905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.212176][T18905] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 576.212197][T18905] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 576.212212][T18905] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 000000000000000b [ 576.212224][T18905] RBP: 00007f3aff828090 R08: 0000000000000000 R09: 0000000000000000 [ 576.212235][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.212246][T18905] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 576.212281][T18905] [ 576.414153][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3904'. [ 576.701934][T18908] bond0: (slave gretap1): making interface the new active one [ 576.711643][T18908] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 576.820323][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3908'. [ 576.838426][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3908'. [ 577.103359][ T7405] IPVS: starting estimator thread 0... [ 577.113331][T18947] netlink: 'syz.8.3913': attribute type 6 has an invalid length. [ 577.194888][T18951] lo speed is unknown, defaulting to 1000 [ 577.196588][T18949] IPVS: using max 26 ests per chain, 62400 per kthread [ 577.205275][T18951] lo speed is unknown, defaulting to 1000 [ 577.371983][T18956] netlink: 'syz.9.3918': attribute type 1 has an invalid length. [ 577.559777][T18970] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3921'. [ 577.775333][T18939] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 577.960371][T18982] lo speed is unknown, defaulting to 1000 [ 577.971054][T18982] lo speed is unknown, defaulting to 1000 [ 578.004100][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3927'. [ 578.063229][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'. [ 578.652240][T19003] netlink: 'syz.7.3932': attribute type 1 has an invalid length. [ 579.051898][T19012] vlan3: entered promiscuous mode [ 579.058017][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.082334][T19015] netlink: 'syz.9.3935': attribute type 1 has an invalid length. [ 579.102451][T19015] netlink: 244 bytes leftover after parsing attributes in process `syz.9.3935'. [ 579.801648][T19016] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 579.894551][T19029] tipc: Enabling of bearer rejected, failed to enable media [ 579.928743][T19032] syzkaller0: entered promiscuous mode [ 579.946252][T19032] syzkaller0: entered allmulticast mode [ 580.195310][T19038] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 580.376673][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3945'. [ 580.514414][T19053] rdma_rxe: rxe_newlink: failed to add lo [ 580.593118][T19053] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.618044][T19053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.668962][T19059] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.3950'. [ 580.930891][T19065] lo speed is unknown, defaulting to 1000 [ 580.963307][T19065] lo speed is unknown, defaulting to 1000 [ 580.983464][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3950'. [ 581.277891][T19080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.334513][ T7405] lo speed is unknown, defaulting to 1000 [ 581.433468][T19085] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3955'. [ 581.461198][T19080] netlink: 'syz.8.3954': attribute type 10 has an invalid length. [ 581.506745][T19085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.514059][T19085] IPv6: NLM_F_CREATE should be set when creating new route [ 581.521640][T19085] IPv6: NLM_F_CREATE should be set when creating new route [ 581.688645][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3956'. [ 581.822424][T19093] FAULT_INJECTION: forcing a failure. [ 581.822424][T19093] name failslab, interval 1, probability 0, space 0, times 0 [ 581.835670][T19093] CPU: 1 UID: 0 PID: 19093 Comm: syz.7.3957 Not tainted syzkaller #0 PREEMPT(full) [ 581.835698][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.835710][T19093] Call Trace: [ 581.835719][T19093] [ 581.835728][T19093] dump_stack_lvl+0x189/0x250 [ 581.835757][T19093] ? __pfx____ratelimit+0x10/0x10 [ 581.835789][T19093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.835812][T19093] ? __pfx__printk+0x10/0x10 [ 581.835842][T19093] ? __pfx_skb_network_protocol+0x10/0x10 [ 581.835879][T19093] should_fail_ex+0x414/0x560 [ 581.835913][T19093] should_failslab+0xa8/0x100 [ 581.835943][T19093] kmem_cache_alloc_noprof+0x73/0x3c0 [ 581.835966][T19093] ? skb_clone+0x212/0x3a0 [ 581.835990][T19093] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 581.836020][T19093] skb_clone+0x212/0x3a0 [ 581.836044][T19093] ? dev_queue_xmit_nit+0x26f/0xcc0 [ 581.836070][T19093] dev_queue_xmit_nit+0x416/0xcc0 [ 581.836092][T19093] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 581.836134][T19093] dev_hard_start_xmit+0x1be/0x830 [ 581.836179][T19093] sch_direct_xmit+0x241/0x4b0 [ 581.836206][T19093] ? __pfx_sch_direct_xmit+0x10/0x10 [ 581.836247][T19093] __dev_queue_xmit+0x1857/0x3b50 [ 581.836287][T19093] ? __dev_queue_xmit+0x27b/0x3b50 [ 581.836323][T19093] ? ip_vs_in_hook+0xbde/0x1b50 [ 581.836341][T19093] ? ip_vs_in_hook+0xc13/0x1b50 [ 581.836364][T19093] ? __pfx___dev_queue_xmit+0x10/0x10 [ 581.836392][T19093] ? look_up_lock_class+0x74/0x170 [ 581.836423][T19093] ? register_lock_class+0x51/0x320 [ 581.836457][T19093] ? __lock_acquire+0xab9/0xd20 [ 581.836506][T19093] ? ip_finish_output2+0xae7/0x1160 [ 581.836540][T19093] ip_finish_output2+0xd03/0x1160 [ 581.836576][T19093] ? ip_finish_output2+0x452/0x1160 [ 581.836604][T19093] ? __pfx_ip_finish_output2+0x10/0x10 [ 581.836638][T19093] ? ip_skb_dst_mtu+0x18d/0xb70 [ 581.836663][T19093] ? ip_skb_dst_mtu+0x917/0xb70 [ 581.836691][T19093] ? ip_finish_output+0x33a/0x3f0 [ 581.836718][T19093] ip_output+0x29f/0x450 [ 581.836743][T19093] ? ip_output+0x5b/0x450 [ 581.836771][T19093] ip_send_skb+0x74/0x100 [ 581.836800][T19093] udp_send_skb+0xaf1/0x14c0 [ 581.836846][T19093] udp_sendmsg+0x195a/0x2170 [ 581.836882][T19093] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 581.836913][T19093] ? __pfx_udp_sendmsg+0x10/0x10 [ 581.836943][T19093] ? count_memcg_event_mm+0x21/0x260 [ 581.836979][T19093] ? count_memcg_event_mm+0x21/0x260 [ 581.837030][T19093] ? sock_rps_record_flow+0x19/0x410 [ 581.837056][T19093] ? inet_sendmsg+0x29c/0x370 [ 581.837074][T19093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 581.837101][T19093] __sock_sendmsg+0x19c/0x270 [ 581.837135][T19093] ____sys_sendmsg+0x52d/0x830 [ 581.837169][T19093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.837208][T19093] ? import_iovec+0x74/0xa0 [ 581.837239][T19093] ___sys_sendmsg+0x21f/0x2a0 [ 581.837269][T19093] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.837348][T19093] ? __might_fault+0xb0/0x130 [ 581.837382][T19093] __sys_sendmmsg+0x227/0x430 [ 581.837414][T19093] ? __pfx___sys_sendmmsg+0x10/0x10 [ 581.837437][T19093] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 581.837493][T19093] ? ksys_write+0x22a/0x250 [ 581.837523][T19093] ? __pfx_ksys_write+0x10/0x10 [ 581.837558][T19093] __x64_sys_sendmmsg+0xa0/0xc0 [ 581.837587][T19093] do_syscall_64+0xfa/0x3b0 [ 581.837606][T19093] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.837644][T19093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.837664][T19093] ? clear_bhb_loop+0x60/0xb0 [ 581.837691][T19093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.837711][T19093] RIP: 0033:0x7f4c1bd8eec9 [ 581.837732][T19093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.837751][T19093] RSP: 002b:00007f4c1cb46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.837775][T19093] RAX: ffffffffffffffda RBX: 00007f4c1bfe6090 RCX: 00007f4c1bd8eec9 [ 581.837790][T19093] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 000000000000000b [ 581.837804][T19093] RBP: 00007f4c1cb46090 R08: 0000000000000000 R09: 0000000000000000 [ 581.837818][T19093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.837830][T19093] R13: 00007f4c1bfe6128 R14: 00007f4c1bfe6090 R15: 00007ffcc188cca8 [ 581.837866][T19093] [ 582.031843][T19092] !: renamed from dummy0 [ 582.775070][T19104] tipc: Enabled bearer , priority 0 [ 582.794216][T19104] syzkaller0: entered promiscuous mode [ 582.838951][T19104] syzkaller0: entered allmulticast mode [ 582.886856][T19109] netlink: 'syz.5.3962': attribute type 6 has an invalid length. [ 582.900701][T19104] tipc: Resetting bearer [ 582.938276][T19103] tipc: Resetting bearer [ 583.047391][T19103] tipc: Disabling bearer [ 583.164747][T19116] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 583.433997][T19125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.795577][T19151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3976'. [ 583.823853][T19151] netlink: 'syz.5.3976': attribute type 1 has an invalid length. [ 583.978343][T19156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3979'. [ 584.013660][T19156] FAULT_INJECTION: forcing a failure. [ 584.013660][T19156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.041455][T19161] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3981'. [ 584.063097][T19156] CPU: 0 UID: 0 PID: 19156 Comm: syz.9.3979 Not tainted syzkaller #0 PREEMPT(full) [ 584.063128][T19156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 584.063141][T19156] Call Trace: [ 584.063151][T19156] [ 584.063160][T19156] dump_stack_lvl+0x189/0x250 [ 584.063190][T19156] ? __pfx____ratelimit+0x10/0x10 [ 584.063228][T19156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.063251][T19156] ? __pfx__printk+0x10/0x10 [ 584.063278][T19156] ? __might_fault+0xb0/0x130 [ 584.063317][T19156] should_fail_ex+0x414/0x560 [ 584.063351][T19156] _copy_from_user+0x2d/0xb0 [ 584.063378][T19156] ___sys_sendmsg+0x158/0x2a0 [ 584.063409][T19156] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.063478][T19156] ? __fget_files+0x2a/0x420 [ 584.063505][T19156] ? __fget_files+0x3a0/0x420 [ 584.063546][T19156] __x64_sys_sendmsg+0x19b/0x260 [ 584.063574][T19156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.063613][T19156] ? rcu_is_watching+0x15/0xb0 [ 584.063655][T19156] ? do_syscall_64+0xbe/0x3b0 [ 584.063680][T19156] do_syscall_64+0xfa/0x3b0 [ 584.063697][T19156] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.063723][T19156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.063743][T19156] ? clear_bhb_loop+0x60/0xb0 [ 584.063768][T19156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.063789][T19156] RIP: 0033:0x7f0daa78eec9 [ 584.063808][T19156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.063825][T19156] RSP: 002b:00007f0dab615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.063849][T19156] RAX: ffffffffffffffda RBX: 00007f0daa9e5fa0 RCX: 00007f0daa78eec9 [ 584.063863][T19156] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 584.063875][T19156] RBP: 00007f0dab615090 R08: 0000000000000000 R09: 0000000000000000 [ 584.063887][T19156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.063899][T19156] R13: 00007f0daa9e6038 R14: 00007f0daa9e5fa0 R15: 00007ffe63d75388 [ 584.063931][T19156] [ 584.435184][T19169] tipc: Enabled bearer , priority 0 [ 584.499992][T19169] syzkaller0: entered promiscuous mode [ 584.505529][T19169] syzkaller0: entered allmulticast mode [ 584.581867][T19176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.634854][T19184] FAULT_INJECTION: forcing a failure. [ 584.634854][T19184] name failslab, interval 1, probability 0, space 0, times 0 [ 584.650177][T19184] CPU: 0 UID: 0 PID: 19184 Comm: syz.5.3987 Not tainted syzkaller #0 PREEMPT(full) [ 584.650206][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 584.650218][T19184] Call Trace: [ 584.650227][T19184] [ 584.650235][T19184] dump_stack_lvl+0x189/0x250 [ 584.650262][T19184] ? __pfx____ratelimit+0x10/0x10 [ 584.650293][T19184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.650316][T19184] ? __pfx__printk+0x10/0x10 [ 584.650348][T19184] ? __pfx___might_resched+0x10/0x10 [ 584.650383][T19184] should_fail_ex+0x414/0x560 [ 584.650417][T19184] should_failslab+0xa8/0x100 [ 584.650444][T19184] __kmalloc_cache_noprof+0x70/0x3d0 [ 584.650468][T19184] ? sctp_association_new+0x89/0x25f0 [ 584.650493][T19184] ? __asan_memcpy+0x40/0x70 [ 584.650516][T19184] sctp_association_new+0x89/0x25f0 [ 584.650542][T19184] ? sctp_do_bind+0x65a/0x940 [ 584.650572][T19184] ? __ipv6_addr_type+0x10c/0x2f0 [ 584.650599][T19184] sctp_connect_new_asoc+0x2c5/0x690 [ 584.650646][T19184] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 584.650670][T19184] ? __local_bh_enable_ip+0x12d/0x1c0 [ 584.650709][T19184] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 584.650729][T19184] ? security_sctp_bind_connect+0x7e/0x2e0 [ 584.650759][T19184] sctp_sendmsg+0x155c/0x2810 [ 584.650800][T19184] ? __pfx_sctp_sendmsg+0x10/0x10 [ 584.650830][T19184] ? aa_sk_perm+0x81e/0x950 [ 584.650864][T19184] ? __pfx_aa_sk_perm+0x10/0x10 [ 584.650895][T19184] ? sock_rps_record_flow+0x19/0x410 [ 584.650918][T19184] ? inet_sendmsg+0x2f4/0x370 [ 584.650942][T19184] __sock_sendmsg+0x19c/0x270 [ 584.650976][T19184] ____sys_sendmsg+0x52d/0x830 [ 584.651008][T19184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.651044][T19184] ? import_iovec+0x74/0xa0 [ 584.651074][T19184] ___sys_sendmsg+0x21f/0x2a0 [ 584.651101][T19184] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.651171][T19184] ? __fget_files+0x2a/0x420 [ 584.651196][T19184] ? __fget_files+0x3a0/0x420 [ 584.651237][T19184] __sys_sendmmsg+0x227/0x430 [ 584.651268][T19184] ? __pfx___sys_sendmmsg+0x10/0x10 [ 584.651290][T19184] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 584.651342][T19184] ? ksys_write+0x22a/0x250 [ 584.651370][T19184] ? __pfx_ksys_write+0x10/0x10 [ 584.651390][T19184] ? rcu_is_watching+0x15/0xb0 [ 584.651417][T19184] __x64_sys_sendmmsg+0xa0/0xc0 [ 584.651444][T19184] do_syscall_64+0xfa/0x3b0 [ 584.651462][T19184] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.651490][T19184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.651510][T19184] ? clear_bhb_loop+0x60/0xb0 [ 584.651534][T19184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.651553][T19184] RIP: 0033:0x7fbfd318eec9 [ 584.651571][T19184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.651587][T19184] RSP: 002b:00007fbfd4041038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 584.651609][T19184] RAX: ffffffffffffffda RBX: 00007fbfd33e5fa0 RCX: 00007fbfd318eec9 [ 584.651631][T19184] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 584.651643][T19184] RBP: 00007fbfd4041090 R08: 0000000000000000 R09: 0000000000000000 [ 584.651657][T19184] R10: 000000000004c851 R11: 0000000000000246 R12: 0000000000000001 [ 584.651669][T19184] R13: 00007fbfd33e6038 R14: 00007fbfd33e5fa0 R15: 00007ffca2833da8 [ 584.651704][T19184] [ 584.654333][T19169] tipc: Resetting bearer [ 584.898602][T19191] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3990'. [ 585.009312][T19191] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3990'. [ 585.018736][T19191] netlink: 59 bytes leftover after parsing attributes in process `syz.5.3990'. [ 585.018784][T19168] tipc: Resetting bearer [ 585.078573][T19168] tipc: Disabling bearer [ 585.291074][T19206] netlink: 'syz.5.3997': attribute type 11 has an invalid length. [ 585.329989][T19210] FAULT_INJECTION: forcing a failure. [ 585.329989][T19210] name failslab, interval 1, probability 0, space 0, times 0 [ 585.347198][T19210] CPU: 0 UID: 0 PID: 19210 Comm: syz.8.3998 Not tainted syzkaller #0 PREEMPT(full) [ 585.347226][T19210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.347238][T19210] Call Trace: [ 585.347246][T19210] [ 585.347256][T19210] dump_stack_lvl+0x189/0x250 [ 585.347285][T19210] ? __pfx____ratelimit+0x10/0x10 [ 585.347315][T19210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.347337][T19210] ? __pfx__printk+0x10/0x10 [ 585.347366][T19210] ? __pfx___might_resched+0x10/0x10 [ 585.347392][T19210] ? fs_reclaim_acquire+0x7d/0x100 [ 585.347427][T19210] should_fail_ex+0x414/0x560 [ 585.347461][T19210] should_failslab+0xa8/0x100 [ 585.347490][T19210] __kmalloc_cache_noprof+0x70/0x3d0 [ 585.347514][T19210] ? resv_map_alloc+0x51/0x2c0 [ 585.347541][T19210] resv_map_alloc+0x51/0x2c0 [ 585.347564][T19210] hugetlb_reserve_pages+0x395/0xec0 [ 585.347605][T19210] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 585.347646][T19210] hugetlbfs_file_mmap+0x490/0x680 [ 585.347684][T19210] mmap_region+0x18ae/0x20c0 [ 585.347731][T19210] ? __pfx_mmap_region+0x10/0x10 [ 585.347750][T19210] ? is_bpf_text_address+0x26/0x2b0 [ 585.347781][T19210] ? kernel_text_address+0xa5/0xe0 [ 585.347816][T19210] ? __kernel_text_address+0xd/0x40 [ 585.347839][T19210] ? unwind_get_return_address+0x4d/0x90 [ 585.347955][T19210] ? bpf_lsm_capable+0x9/0x20 [ 585.347977][T19210] ? security_capable+0x7e/0x2e0 [ 585.348002][T19210] ? shmem_mapping+0xd/0x50 [ 585.348020][T19210] ? memfd_check_seals_mmap+0x165/0x200 [ 585.348043][T19210] do_mmap+0xc45/0x10d0 [ 585.348096][T19210] ? __pfx_do_mmap+0x10/0x10 [ 585.348116][T19210] ? down_write_killable+0x178/0x230 [ 585.348142][T19210] ? __pfx_down_write_killable+0x10/0x10 [ 585.348162][T19210] ? common_file_perm+0x1b5/0x230 [ 585.348198][T19210] vm_mmap_pgoff+0x2a6/0x4d0 [ 585.348231][T19210] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 585.348250][T19210] ? rcu_is_watching+0x15/0xb0 [ 585.348277][T19210] ? hugetlbfs_get_inode+0x448/0x660 [ 585.348312][T19210] ? hugetlb_file_setup+0x42c/0x630 [ 585.348341][T19210] ksys_mmap_pgoff+0x587/0x760 [ 585.348374][T19210] do_syscall_64+0xfa/0x3b0 [ 585.348392][T19210] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.348419][T19210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.348440][T19210] ? clear_bhb_loop+0x60/0xb0 [ 585.348465][T19210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.348484][T19210] RIP: 0033:0x7f3afe98eec9 [ 585.348504][T19210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.348519][T19210] RSP: 002b:00007f3aff828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 585.348542][T19210] RAX: ffffffffffffffda RBX: 00007f3afebe5fa0 RCX: 00007f3afe98eec9 [ 585.348556][T19210] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 585.348569][T19210] RBP: 00007f3aff828090 R08: ffffffffffffffff R09: 0000000000000000 [ 585.348582][T19210] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 585.348594][T19210] R13: 00007f3afebe6038 R14: 00007f3afebe5fa0 R15: 00007ffd33ac1038 [ 585.348631][T19210] [ 585.813211][T19214] tipc: Enabled bearer , priority 0 [ 585.830711][T19194] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 585.859371][T19214] syzkaller0: entered promiscuous mode [ 585.883860][T19214] syzkaller0: entered allmulticast mode [ 585.945505][T19214] tipc: Resetting bearer [ 585.982989][T19220] tipc: Enabling of bearer rejected, failed to enable media [ 586.013889][T19220] syzkaller0: entered promiscuous mode [ 586.022217][T19220] syzkaller0: entered allmulticast mode [ 586.031561][T19226] tipc: Resetting bearer [ 586.050557][T19226] tipc: Disabling bearer [ 586.128037][T19229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.147915][T19232] netlink: 'syz.9.4006': attribute type 10 has an invalid length. [ 586.345870][T19238] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 586.363273][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4010'. [ 586.365277][T19245] FAULT_INJECTION: forcing a failure. [ 586.365277][T19245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.414153][T19245] CPU: 0 UID: 0 PID: 19245 Comm: syz.6.4012 Not tainted syzkaller #0 PREEMPT(full) [ 586.414185][T19245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.414196][T19245] Call Trace: [ 586.414206][T19245] [ 586.414215][T19245] dump_stack_lvl+0x189/0x250 [ 586.414243][T19245] ? __pfx____ratelimit+0x10/0x10 [ 586.414272][T19245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.414294][T19245] ? __pfx__printk+0x10/0x10 [ 586.414336][T19245] should_fail_ex+0x414/0x560 [ 586.414377][T19245] _copy_to_user+0x31/0xb0 [ 586.414405][T19245] simple_read_from_buffer+0xe1/0x170 [ 586.414439][T19245] proc_fail_nth_read+0x1b3/0x220 [ 586.414465][T19245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.414491][T19245] ? rw_verify_area+0x2a6/0x4d0 [ 586.414514][T19245] ? __lock_acquire+0xab9/0xd20 [ 586.414538][T19245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 586.414561][T19245] vfs_read+0x1fd/0xa30 [ 586.414584][T19245] ? fdget_pos+0x247/0x320 [ 586.414618][T19245] ? __pfx___mutex_lock+0x10/0x10 [ 586.414638][T19245] ? __pfx_vfs_read+0x10/0x10 [ 586.414664][T19245] ? __fget_files+0x2a/0x420 [ 586.414697][T19245] ? __fget_files+0x3a0/0x420 [ 586.414723][T19245] ? __fget_files+0x2a/0x420 [ 586.414762][T19245] ksys_read+0x145/0x250 [ 586.414789][T19245] ? __pfx_ksys_read+0x10/0x10 [ 586.414811][T19245] ? rcu_is_watching+0x15/0xb0 [ 586.414836][T19245] ? do_syscall_64+0xbe/0x3b0 [ 586.414861][T19245] do_syscall_64+0xfa/0x3b0 [ 586.414879][T19245] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.414917][T19245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.414936][T19245] ? clear_bhb_loop+0x60/0xb0 [ 586.414961][T19245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.414980][T19245] RIP: 0033:0x7fe5b818d8dc [ 586.415000][T19245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 586.415017][T19245] RSP: 002b:00007fe5b90ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.415039][T19245] RAX: ffffffffffffffda RBX: 00007fe5b83e5fa0 RCX: 00007fe5b818d8dc [ 586.415054][T19245] RDX: 000000000000000f RSI: 00007fe5b90ed0a0 RDI: 0000000000000004 [ 586.415067][T19245] RBP: 00007fe5b90ed090 R08: 0000000000000000 R09: 0000000000000000 [ 586.415080][T19245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.415092][T19245] R13: 00007fe5b83e6038 R14: 00007fe5b83e5fa0 R15: 00007ffe8222fc28 [ 586.415128][T19245] [ 586.436778][T19247] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4013'. [ 586.801144][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4017'. [ 586.936931][T19271] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4020'. [ 587.040246][T19277] FAULT_INJECTION: forcing a failure. [ 587.040246][T19277] name failslab, interval 1, probability 0, space 0, times 0 [ 587.054222][T19277] CPU: 0 UID: 0 PID: 19277 Comm: syz.9.4023 Not tainted syzkaller #0 PREEMPT(full) [ 587.054252][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 587.054265][T19277] Call Trace: [ 587.054274][T19277] [ 587.054283][T19277] dump_stack_lvl+0x189/0x250 [ 587.054312][T19277] ? __pfx____ratelimit+0x10/0x10 [ 587.054342][T19277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.054364][T19277] ? __pfx__printk+0x10/0x10 [ 587.054396][T19277] ? __pfx___might_resched+0x10/0x10 [ 587.054421][T19277] ? fs_reclaim_acquire+0x7d/0x100 [ 587.054454][T19277] should_fail_ex+0x414/0x560 [ 587.054488][T19277] should_failslab+0xa8/0x100 [ 587.054518][T19277] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 587.054544][T19277] ? __alloc_skb+0x112/0x2d0 [ 587.054572][T19277] __alloc_skb+0x112/0x2d0 [ 587.054600][T19277] sock_omalloc+0xd8/0x1e0 [ 587.054641][T19277] msg_zerocopy_realloc+0x9c/0x850 [ 587.054678][T19277] __ip_append_data+0x98d/0x40c0 [ 587.054723][T19277] ? __lock_acquire+0xab9/0xd20 [ 587.054756][T19277] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 587.054813][T19277] ? __pfx___ip_append_data+0x10/0x10 [ 587.054847][T19277] ? __local_bh_enable_ip+0x12d/0x1c0 [ 587.054877][T19277] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.054909][T19277] ip_append_data+0x10e/0x190 [ 587.054941][T19277] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 587.054972][T19277] udp_sendmsg+0x541/0x2170 [ 587.055000][T19277] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 587.055039][T19277] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 587.055070][T19277] ? __pfx_udp_sendmsg+0x10/0x10 [ 587.055097][T19277] ? __lock_acquire+0xab9/0xd20 [ 587.055155][T19277] ? __pfx_aa_sk_perm+0x10/0x10 [ 587.055178][T19277] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 587.055202][T19277] ? __fget_files+0x2a/0x420 [ 587.055229][T19277] ? sock_rps_record_flow+0x19/0x410 [ 587.055252][T19277] ? inet_sendmsg+0x29c/0x370 [ 587.055270][T19277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.055296][T19277] __sock_sendmsg+0x19c/0x270 [ 587.055331][T19277] __sys_sendto+0x3bd/0x520 [ 587.055357][T19277] ? __pfx___sys_sendto+0x10/0x10 [ 587.055376][T19277] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 587.055413][T19277] ? __fget_files+0x3a0/0x420 [ 587.055454][T19277] ? ksys_write+0x22a/0x250 [ 587.055480][T19277] ? __pfx_ksys_write+0x10/0x10 [ 587.055502][T19277] ? rcu_is_watching+0x15/0xb0 [ 587.055527][T19277] __x64_sys_sendto+0xde/0x100 [ 587.055553][T19277] do_syscall_64+0xfa/0x3b0 [ 587.055571][T19277] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.055598][T19277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.055619][T19277] ? clear_bhb_loop+0x60/0xb0 [ 587.055654][T19277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.055673][T19277] RIP: 0033:0x7f0daa78eec9 [ 587.055692][T19277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.055710][T19277] RSP: 002b:00007f0dab615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 587.055732][T19277] RAX: ffffffffffffffda RBX: 00007f0daa9e5fa0 RCX: 00007f0daa78eec9 [ 587.055747][T19277] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000004 [ 587.055760][T19277] RBP: 00007f0dab615090 R08: 0000000000000000 R09: 0000000011000a00 [ 587.055774][T19277] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 587.055786][T19277] R13: 00007f0daa9e6038 R14: 00007f0daa9e5fa0 R15: 00007ffe63d75388 [ 587.055823][T19277] [ 587.854115][T19307] netlink: 'syz.7.4032': attribute type 1 has an invalid length. [ 587.966701][T19310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.974008][T19310] IPv6: NLM_F_CREATE should be set when creating new route [ 587.993225][T19310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 588.000541][T19310] IPv6: NLM_F_CREATE should be set when creating new route [ 588.241347][T19328] lo speed is unknown, defaulting to 1000 [ 588.285210][T19328] lo speed is unknown, defaulting to 1000 [ 588.537059][T19332] netlink: 'syz.7.4040': attribute type 1 has an invalid length. [ 588.548918][T19332] netlink: 'syz.7.4040': attribute type 1 has an invalid length. [ 588.918980][T19347] netlink: 'syz.6.4044': attribute type 6 has an invalid length. [ 589.050207][T19351] __nla_validate_parse: 5 callbacks suppressed [ 589.050227][T19351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4046'. [ 589.325410][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4048'. [ 589.643797][T19374] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4054'. [ 589.662805][T19359] macvlan1 (unregistering): left allmulticast mode [ 589.675516][T19359] macvlan1 (unregistering): left promiscuous mode [ 589.682900][T19359] bridge0: port 1(macvlan1) entered disabled state [ 589.850439][T19379] nbd5: detected capacity change from 0 to 63 [ 589.898847][T19381] block nbd5: NBD_DISCONNECT [ 589.905725][T19381] block nbd5: Disconnected due to user request. [ 589.935197][T19381] block nbd5: shutting down sockets [ 589.976945][ C0] blk_print_req_error: 27 callbacks suppressed [ 589.976970][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.991712][ C1] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 589.992280][ C0] buffer_io_error: 27 callbacks suppressed [ 589.992295][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 590.001334][ C1] Buffer I/O error on dev nbd5, logical block 1, async page read [ 590.025210][ C1] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.034478][ C1] Buffer I/O error on dev nbd5, logical block 2, async page read [ 590.042379][ C1] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.051508][ C1] Buffer I/O error on dev nbd5, logical block 3, async page read [ 590.059572][ T6010] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.076892][ T6010] Buffer I/O error on dev nbd5, logical block 0, async page read [ 590.085142][ T6010] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.109145][ T6010] Buffer I/O error on dev nbd5, logical block 1, async page read [ 590.148010][ T6010] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.161377][ T6010] Buffer I/O error on dev nbd5, logical block 2, async page read [ 590.170597][ T6010] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.182182][ T6010] Buffer I/O error on dev nbd5, logical block 3, async page read [ 590.209521][ T6010] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.229947][ T6010] Buffer I/O error on dev nbd5, logical block 0, async page read [ 590.259478][ T6010] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.280439][ T6010] Buffer I/O error on dev nbd5, logical block 1, async page read [ 590.283058][T19392] FAULT_INJECTION: forcing a failure. [ 590.283058][T19392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.304301][ T6010] ldm_validate_partition_table(): Disk read failed. [ 590.335007][T19392] CPU: 0 UID: 0 PID: 19392 Comm: syz.6.4059 Not tainted syzkaller #0 PREEMPT(full) [ 590.335036][T19392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 590.335048][T19392] Call Trace: [ 590.335057][T19392] [ 590.335066][T19392] dump_stack_lvl+0x189/0x250 [ 590.335093][T19392] ? __pfx____ratelimit+0x10/0x10 [ 590.335123][T19392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.335145][T19392] ? __pfx__printk+0x10/0x10 [ 590.335170][T19392] ? __might_fault+0xb0/0x130 [ 590.335211][T19392] should_fail_ex+0x414/0x560 [ 590.335251][T19392] _copy_from_user+0x2d/0xb0 [ 590.335276][T19392] csum_and_copy_from_iter_full+0x4a1/0x1ed0 [ 590.335300][T19392] ? rcu_is_watching+0x15/0xb0 [ 590.335341][T19392] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 590.335371][T19392] ? policy_nodemask+0x27c/0x720 [ 590.335412][T19392] ip_generic_getfrag+0x12f/0x2b0 [ 590.335444][T19392] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 590.335471][T19392] ? skb_page_frag_refill+0x199/0x320 [ 590.335506][T19392] __ip6_append_data+0x205e/0x3f30 [ 590.335567][T19392] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 590.335617][T19392] ? __pfx___ip6_append_data+0x10/0x10 [ 590.335633][T19392] ? __pfx_ip6_mtu+0x10/0x10 [ 590.335665][T19392] ip6_append_data+0x1c1/0x380 [ 590.335690][T19392] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 590.335720][T19392] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 590.335764][T19392] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 590.335825][T19392] ? __pfx_aa_sk_perm+0x10/0x10 [ 590.335850][T19392] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 590.335881][T19392] ? inet_sendmsg+0x2f4/0x370 [ 590.335900][T19392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.335924][T19392] __sock_sendmsg+0x19c/0x270 [ 590.335955][T19392] ____sys_sendmsg+0x505/0x830 [ 590.335985][T19392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.336021][T19392] ? import_iovec+0x74/0xa0 [ 590.336049][T19392] ___sys_sendmsg+0x21f/0x2a0 [ 590.336076][T19392] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.336139][T19392] ? __fget_files+0x2a/0x420 [ 590.336162][T19392] ? __fget_files+0x3a0/0x420 [ 590.336199][T19392] __x64_sys_sendmsg+0x19b/0x260 [ 590.336227][T19392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.336263][T19392] ? __pfx_ksys_write+0x10/0x10 [ 590.336284][T19392] ? rcu_is_watching+0x15/0xb0 [ 590.336310][T19392] ? do_syscall_64+0xbe/0x3b0 [ 590.336336][T19392] do_syscall_64+0xfa/0x3b0 [ 590.336353][T19392] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.336379][T19392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.336400][T19392] ? clear_bhb_loop+0x60/0xb0 [ 590.336424][T19392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.336442][T19392] RIP: 0033:0x7fe5b818eec9 [ 590.336461][T19392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.336478][T19392] RSP: 002b:00007fe5b90ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.336501][T19392] RAX: ffffffffffffffda RBX: 00007fe5b83e5fa0 RCX: 00007fe5b818eec9 [ 590.336515][T19392] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 590.336529][T19392] RBP: 00007fe5b90ed090 R08: 0000000000000000 R09: 0000000000000000 [ 590.336540][T19392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.336552][T19392] R13: 00007fe5b83e6038 R14: 00007fe5b83e5fa0 R15: 00007ffe8222fc28 [ 590.336590][T19392] [ 590.344985][ T6010] Dev nbd5: unable to read RDB block 0 [ 590.482546][T19398] netlink: 'syz.5.4058': attribute type 6 has an invalid length. [ 590.490869][ T6010] nbd5: unable to read partition table [ 590.732893][ T6010] ldm_validate_partition_table(): Disk read failed. [ 590.819303][ T6010] Dev nbd5: unable to read RDB block 0 [ 590.837485][ T6010] nbd5: unable to read partition table [ 590.906723][T19410] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4065'. [ 591.044637][T19418] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4069'. [ 591.081687][T19421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4070'. [ 591.119772][T19425] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4071'. [ 591.217381][ T31] INFO: task udevd:6099 blocked for more than 143 seconds. [ 591.228212][ T31] Not tainted syzkaller #0 [ 591.241569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.311558][ T31] task:udevd state:D stack:20872 pid:6099 tgid:6099 ppid:5231 task_flags:0x400140 flags:0x00004006 [ 591.339265][ T31] Call Trace: [ 591.347021][ T31] [ 591.350944][ T31] __schedule+0x1798/0x4cc0 [ 591.355787][ T31] ? __pfx___schedule+0x10/0x10 [ 591.362446][ T31] ? schedule+0x91/0x360 [ 591.367701][ T31] schedule+0x165/0x360 [ 591.372630][ T31] io_schedule+0x80/0xd0 [ 591.379030][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 591.385102][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 591.391653][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 591.397605][ T31] ? __filemap_get_folio+0x6e0/0xaf0 [ 591.403122][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 591.409498][ T31] do_read_cache_folio+0x1aa/0x590 [ 591.414920][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 591.421381][ T31] read_part_sector+0xb6/0x2b0 [ 591.427029][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 591.432833][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 591.439294][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 591.445710][ T31] bdev_disk_changed+0x75c/0x14b0 [ 591.451732][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 591.457988][ T31] ? wait_on_inode+0xc0/0x230 [ 591.462907][ T31] blkdev_get_whole+0x380/0x510 [ 591.468644][ T31] bdev_open+0x31e/0xd30 [ 591.473113][ T31] blkdev_open+0x457/0x600 [ 591.478124][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 591.483114][ T31] do_dentry_open+0x950/0x13f0 [ 591.488436][ T31] vfs_open+0x3b/0x340 [ 591.492541][ T31] ? path_openat+0x2ecd/0x3830 [ 591.497775][ T31] path_openat+0x2ee5/0x3830 [ 591.502404][ T31] ? arch_stack_walk+0xfc/0x150 [ 591.507846][ T31] ? stack_depot_save_flags+0x40/0x860 [ 591.513391][ T31] ? __pfx_path_openat+0x10/0x10 [ 591.518842][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.524968][ T31] do_filp_open+0x1fa/0x410 [ 591.530304][ T31] ? __lock_acquire+0xab9/0xd20 [ 591.535387][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 591.540855][ T31] ? _raw_spin_unlock+0x28/0x50 [ 591.545738][ T31] ? alloc_fd+0x64c/0x6c0 [ 591.550475][ T31] do_sys_openat2+0x121/0x1c0 [ 591.555302][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 591.561239][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.566986][ T31] ? rcu_is_watching+0x15/0xb0 [ 591.572031][ T31] __x64_sys_openat+0x138/0x170 [ 591.577294][ T31] do_syscall_64+0xfa/0x3b0 [ 591.581825][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.588375][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 591.594011][ T31] ? clear_bhb_loop+0x60/0xb0 [ 591.599552][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.605468][ T31] RIP: 0033:0x7f0a7f9cf407 [ 591.610291][ T31] RSP: 002b:00007ffe63adc5e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 591.619037][ T31] RAX: ffffffffffffffda RBX: 00007f0a7f943880 RCX: 00007f0a7f9cf407 [ 591.627441][ T31] RDX: 00000000000a0800 RSI: 00005571efa83900 RDI: ffffffffffffff9c [ 591.635576][ T31] RBP: 00005571efa72910 R08: 0000000000000000 R09: 0000000000000000 [ 591.644264][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005571efb55090 [ 591.652948][ T31] R13: 00005571efa80190 R14: 0000000000000000 R15: 00005571efb55090 [ 591.661447][ T31] [ 591.664570][ T31] [ 591.664570][ T31] Showing all locks held in the system: [ 591.674608][ T31] 1 lock held by khungtaskd/31: [ 591.680602][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 591.701275][ T31] 2 locks held by getty/5621: [ 591.707595][ T31] #0: ffff88802f7280a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 591.717910][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 591.728660][ T31] 1 lock held by udevd/6099: [ 591.733712][ T31] #0: ffff88807e356358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 591.743843][ T31] 3 locks held by syz.6.4068/19415: [ 591.749617][ T31] [ 591.752130][ T31] ============================================= [ 591.752130][ T31] [ 591.762141][ T31] NMI backtrace for cpu 1 [ 591.762161][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 591.762184][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 591.762196][ T31] Call Trace: [ 591.762204][ T31] [ 591.762213][ T31] dump_stack_lvl+0x189/0x250 [ 591.762244][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.762266][ T31] ? __pfx__printk+0x10/0x10 [ 591.762304][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 591.762333][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 591.762359][ T31] ? __pfx__printk+0x10/0x10 [ 591.762387][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 591.762418][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 591.762447][ T31] watchdog+0xf93/0xfe0 [ 591.762476][ T31] ? watchdog+0x1de/0xfe0 [ 591.762516][ T31] kthread+0x70e/0x8a0 [ 591.762543][ T31] ? __pfx_watchdog+0x10/0x10 [ 591.762568][ T31] ? __pfx_kthread+0x10/0x10 [ 591.762593][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.762621][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.762659][ T31] ? __pfx_kthread+0x10/0x10 [ 591.762683][ T31] ret_from_fork+0x439/0x7d0 [ 591.762706][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 591.762732][ T31] ? __switch_to_asm+0x39/0x70 [ 591.762754][ T31] ? __switch_to_asm+0x33/0x70 [ 591.762775][ T31] ? __pfx_kthread+0x10/0x10 [ 591.762799][ T31] ret_from_fork_asm+0x1a/0x30 [ 591.762840][ T31] [ 591.762847][ T31] Sending NMI from CPU 1 to CPUs 0: [ 591.910988][ C0] NMI backtrace for cpu 0 [ 591.911007][ C0] CPU: 0 UID: 0 PID: 16953 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 591.911025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 591.911036][ C0] Workqueue: events free_obj_work [ 591.911062][ C0] RIP: 0010:memset_orig+0x70/0xb0 [ 591.911081][ C0] Code: 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d [ 591.911095][ C0] RSP: 0018:ffffc90003bdf540 EFLAGS: 00000202 [ 591.911109][ C0] RAX: 0000000000000000 RBX: ffffc90003bdf5a8 RCX: 0000000000000001 [ 591.911121][ C0] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc90003bdf600 [ 591.911132][ C0] RBP: ffffc90003bdf630 R08: ffffc90003bdf607 R09: 0000000000000000 [ 591.911143][ C0] R10: ffffc90003bdf5a8 R11: fffff5200077bec1 R12: 0000000000000000 [ 591.911154][ C0] R13: ffff8880548abc00 R14: dffffc0000000000 R15: 0000000000000000 [ 591.911165][ C0] FS: 0000000000000000(0000) GS:ffff888125c3d000(0000) knlGS:0000000000000000 [ 591.911178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.911189][ C0] CR2: 000000110c2ffdb5 CR3: 0000000077d4a000 CR4: 00000000003526f0 [ 591.911206][ C0] Call Trace: [ 591.911214][ C0] [ 591.911220][ C0] __unwind_start+0x36/0x760 [ 591.911242][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 591.911261][ C0] arch_stack_walk+0xe4/0x150 [ 591.911283][ C0] stack_trace_save+0x9c/0xe0 [ 591.911299][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 591.911316][ C0] ? stack_depot_save_flags+0x40/0x860 [ 591.911339][ C0] kasan_save_track+0x3e/0x80 [ 591.911379][ C0] ? free_obj_work+0x377/0x4a0 [ 591.911397][ C0] kasan_save_free_info+0x46/0x50 [ 591.911412][ C0] __kasan_slab_free+0x5b/0x80 [ 591.911430][ C0] kmem_cache_free+0x18f/0x400 [ 591.911450][ C0] free_obj_work+0x377/0x4a0 [ 591.911472][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 591.911492][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.911512][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 591.911533][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 591.911554][ C0] process_scheduled_works+0xae1/0x17b0 [ 591.911587][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.911615][ C0] worker_thread+0x8a0/0xda0 [ 591.911640][ C0] kthread+0x70e/0x8a0 [ 591.911658][ C0] ? __pfx_worker_thread+0x10/0x10 [ 591.911673][ C0] ? __pfx_kthread+0x10/0x10 [ 591.911690][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.911710][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.911729][ C0] ? __pfx_kthread+0x10/0x10 [ 591.911746][ C0] ret_from_fork+0x439/0x7d0 [ 591.911762][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 591.911778][ C0] ? __switch_to_asm+0x39/0x70 [ 591.911795][ C0] ? __switch_to_asm+0x33/0x70 [ 591.911812][ C0] ? __pfx_kthread+0x10/0x10 [ 591.911829][ C0] ret_from_fork_asm+0x1a/0x30 [ 591.911853][ C0] [ 592.208048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 592.214957][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 592.224180][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.234256][ T31] Call Trace: [ 592.237550][ T31] [ 592.240500][ T31] dump_stack_lvl+0x99/0x250 [ 592.245186][ T31] ? __asan_memcpy+0x40/0x70 [ 592.249962][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.255169][ T31] ? __pfx__printk+0x10/0x10 [ 592.259885][ T31] vpanic+0x281/0x750 [ 592.263886][ T31] ? __pfx_vpanic+0x10/0x10 [ 592.268483][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 592.274037][ T31] ? preempt_schedule+0xae/0xc0 [ 592.278899][ T31] ? preempt_schedule_common+0x83/0xd0 [ 592.284460][ T31] panic+0xb9/0xc0 [ 592.288184][ T31] ? __pfx_panic+0x10/0x10 [ 592.292610][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 592.297998][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 592.304161][ T31] watchdog+0xfd2/0xfe0 [ 592.308330][ T31] ? watchdog+0x1de/0xfe0 [ 592.312679][ T31] kthread+0x70e/0x8a0 [ 592.316959][ T31] ? __pfx_watchdog+0x10/0x10 [ 592.321639][ T31] ? __pfx_kthread+0x10/0x10 [ 592.326246][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.331464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.336673][ T31] ? __pfx_kthread+0x10/0x10 [ 592.341271][ T31] ret_from_fork+0x439/0x7d0 [ 592.345866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 592.350997][ T31] ? __switch_to_asm+0x39/0x70 [ 592.355769][ T31] ? __switch_to_asm+0x33/0x70 [ 592.360540][ T31] ? __pfx_kthread+0x10/0x10 [ 592.365142][ T31] ret_from_fork_asm+0x1a/0x30 [ 592.369952][ T31] [ 592.373858][ T31] Kernel Offset: disabled [ 592.378181][ T31] Rebooting in 86400 seconds..