last executing test programs: 5.777497348s ago: executing program 1 (id=1811): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r12, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 4.861332989s ago: executing program 2 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x8912, &(0x7f0000000000)="13c70b4435779630379a2693a6256d") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xac, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x42}, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf70", 0x2, 0x8000}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r6, 0x25, 0x8, @val=@tracing={r9, 0x6}}, 0x20) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r13, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) sendto$inet6(r11, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 4.764590685s ago: executing program 0 (id=1822): unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x1173, 0xa2, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xe}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'ip6tnl0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r6, &(0x7f0000001300)="2d7f", 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 4.56934315s ago: executing program 1 (id=1824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r5 = accept(r0, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJ', 0x2}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x14, 0x0, 0x701, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 4.301370899s ago: executing program 2 (id=1827): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000380)={0x0, r2, 0x0, 0x80000000, 0x7d8}) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r11, @ANYRES16=r10, @ANYBLOB="010025bd7000360200000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESOCT=r8, @ANYRES32=0x0, @ANYRES8=r11, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x404c094) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x1, r5, 0x1b}, 0x80, &(0x7f0000000440)}, 0x4011) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="4503040701c106001400128009000100626f6e6400050000008b868611b5e2d3221d4a45486c5939cd7dcfa1cf346eb813c83de71430527ca04e43ae030090a51990278ee0be44ab4b8d5dc9235a7500"/90], 0x3c}, 0x1, 0x0, 0x0, 0x48811}, 0x34048851) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r12, 0xf505, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x10}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48084}, 0x80) 4.157418112s ago: executing program 0 (id=1828): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000006c0)={r1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x8140, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x13, &(0x7f0000000380)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000005c0)={{r2, &(0x7f0000000280)='\x00', 0x70800, &(0x7f00000002c0)={@align=0x7, {0x215, 0x2, 0x80000000, 0xd}}, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4}, {[0x3ff, 0x7f, 0x1000]}, 0x1, 0x12, &(0x7f0000000580)=""/18}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r8, 0x2b, 0x0, @void}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, 0x0, 0x0) listen(r10, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)}, 0x10) 4.069563903s ago: executing program 4 (id=1829): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000001a80)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = accept$nfc_llcp(r1, &(0x7f00000017c0), &(0x7f0000001840)=0x60) recvfrom(r6, &(0x7f0000001b00), 0x0, 0x140, &(0x7f0000001b40)=@llc={0x1a, 0x307, 0x7, 0x0, 0x0, 0x87, @multicast}, 0x80) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001a40)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)=@deltclass={0x160, 0x29, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0x6, 0xf}, {0x0, 0x8}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @c_atm={{0x8}, {0x70, 0x2, [@TCA_ATM_HDR={0x3a, 0x3, "991407790ebb5fb8fcfdc0f5f6f213f41bff72cccf0dab6f8990bf7b9a979d95056ba1a1f6048e554875b1038f09138b583c7f39d743"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0xc}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0xf}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfffd}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}]}}, @c_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x78, 0x8, 0xf, 0x9, 0x101, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10}, 0x3ff, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xfd, 0x8, 0x5, 0x40, 0x6, 0x40}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x7, 0x9, 0x40, 0x1, 0x61}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x2, 0x0, 0x8, 0x2, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xfffd}, 0x10001, 0xe6}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x39, 0x1, 0x17, 0x5, 0x926b, 0x6, 0x0, 0x6000000}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) recvfrom(r3, &(0x7f0000000700)=""/4096, 0x1000, 0x1, &(0x7f0000001700)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x1}}, 0x80) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) close(0x3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x80000000, 0x9, {{0x14, 0x4, 0x0, 0x2d, 0x50, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@lsrr={0x83, 0x17, 0xcc, [@remote, @private=0xa010101, @empty, @broadcast, @empty]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x1, 0xc, "c65fbd6d63a79562c4ba"}]}, @cipso={0x86, 0x11, 0x3, [{0x1, 0xb, "6a037f408a6052cc85"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xee, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xe, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000008000000000000000500000085100000f9ffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000950000000058975834797f9817c608a7161130120c272c57e6a5f181577b46f905ec741f32a45e3f81ff7f990975d87dbe92f717af1cfc9759dd9fa1af2fbd39c84f280a02339e1c6c8888dd858eaa0cb98f48b22fd9f1595e6fbea581b11f4b0ca692ba6657f3c1153df612ff6e2d95d1c9562d9e4ecc6e325222d70a778aefa42beac6158a5f9d9da6e83ebc41986ec43136d5d352cc1ff33a6822a79c32432de5d1afe989"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x21, '\x00', r10, @fallback, r1, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0xfffffff8}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[r1, r0], &(0x7f0000000600)=[{0x4, 0x1, 0x10, 0x1}], 0x10, 0x5709}, 0x94) 3.960230565s ago: executing program 0 (id=1831): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x62, 0x5, 0x4c8, 0x0, 0x198, 0xffffffff, 0x0, 0x240, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @remote, @empty, @gre_key=0x6, @gre_key=0xfea}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x250, 0x7fffffe}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa110100, @private=0xa010101, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x11, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf25030000002bc367098937756d7ec890c6a59ec727469c2cadf822ce26119c9accb57c65232a0ac00ddcf87cf8e472a5d35455c2"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x70bd2c, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd49920d356510752}, 0x4000000) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4040000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newlink={0x68, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x93}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x68}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) r15 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r15, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30000}}]}, 0x110) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c00000010001ffffcffffff000000000710000093ec754f303831020120c8f384c90b8f3fb0fa676a1b959b1dbdcf94a979a759885c0b811518f4f3ab8019161dd8c76e3d09d2461b12d91fc2b18b602399508e", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40) 3.745824422s ago: executing program 3 (id=1832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25670000007800c50004c133215d09e47ef3d25601c86c01ce23a3e5463a0e7ef6a1d92e52c112de0fd5b1189a4940843b5ab743bfddc316e660879ac4035ea31d1836cf8a1ffca1521e99e94191edac17c8968a18d4cc61ae608c77a6ec1558bc04da80006736e6d60f65f036452ee9c2ef4cbd7635e4ac37bbbb607c0800c4000b930000"], 0x94}, 0x1, 0x0, 0x0, 0x240080c5}, 0x4048002) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000011c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001700)=ANY=[@ANYBLOB="94070000", @ANYRES16=r2, @ANYBLOB="000205bdf5adfedbdf258914f539629407000300"/32, @ANYRES32=r5, @ANYBLOB="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"], 0x794}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008040) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x2) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f200"/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r11, @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056070000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES32=r9, @ANYRES16=r13, @ANYRES8=r12, @ANYRESOCT=r10, @ANYRESHEX=r11, @ANYRESOCT, @ANYRESHEX=r9, @ANYRESDEC=r9, @ANYRES64=r13], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt(r9, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 3.745183053s ago: executing program 0 (id=1833): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000001000010600000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b512000006000200"], 0x60}}, 0x0) 3.64652521s ago: executing program 3 (id=1834): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)) 3.628822666s ago: executing program 1 (id=1835): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x5, 0x0, 0x0, @binary}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xb8, r6, 0x410, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x4040010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) close(r3) 3.405443397s ago: executing program 3 (id=1836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000004c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de9900000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0xa00, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3.387235535s ago: executing program 3 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x8912, &(0x7f0000000000)="13c70b4435779630379a2693a6256d") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xac, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x42}, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf70", 0x2, 0x8000}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r6, 0x25, 0x8, @val=@tracing={r9, 0x6}}, 0x20) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r13, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) sendto$inet6(r11, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 2.935765403s ago: executing program 4 (id=1838): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x21, 0x0, &(0x7f0000001440)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="43210098") r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000021401"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4850) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 1.67945644s ago: executing program 0 (id=1839): socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002177fbac141516e000000107080511b180008994040006845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r2 = socket$can_raw(0x1d, 0x3, 0x1) splice(r2, &(0x7f0000000000)=0x10000, r0, &(0x7f00000002c0)=0xffff, 0x7, 0x0) 1.670165296s ago: executing program 2 (id=1840): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB="1c000000000601"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05080000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31f5ff00000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000064000380600000"], 0x114}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x20, 0x300, 0x1c, 0x1c, 0x5, [@fwd={0x9}, @int={0x4000000b, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0x53, 0x5}]}, {0x0, [0x2e, 0x0, 0x61]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x12, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098e00008100568186dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 1.618000817s ago: executing program 1 (id=1841): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000006c0)={r1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x8140, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x13, &(0x7f0000000380)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000005c0)={{r2, &(0x7f0000000280)='\x00', 0x70800, &(0x7f00000002c0)={@align=0x7, {0x215, 0x2, 0x80000000, 0xd}}, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4}, {[0x3ff, 0x7f, 0x1000]}, 0x1, 0x12, &(0x7f0000000580)=""/18}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r7, r8, 0x2b, 0x0, @void}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, 0x0, 0x0) listen(r10, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)}, 0x10) 1.604727451s ago: executing program 4 (id=1842): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.487503101s ago: executing program 3 (id=1843): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) accept4(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0x80000) 1.444008102s ago: executing program 1 (id=1844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={0x0, 0x24, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20008014) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="e8fcf64e", @ANYRES16=r3, @ANYBLOB="00040d000000ffdbdf25210000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x1a, 0x8, @private=0xa010102}]}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth0_to_bond\x00', @multicast}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000100039067fffffff00000000bf2e29fa03439bd4fc58d964c003000000", @ANYRES32=0x0, @ANYBLOB="01980000131300003000128008000100677265002400028008000500433900000800040008000000050009000200000006000200ffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) unshare(0x2020600) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0x531358766fc2dd3f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000006c0)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000d40)={0x2000}) connect$bt_sco(r6, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0400000004000000040000000000000000300400", @ANYRES32, @ANYBLOB="00000000135100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000200200"/28], 0x50) sendmsg$nl_route(r9, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_getaddrlabel={0x38, 0x4a, 0x8, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1005}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 1.320732831s ago: executing program 4 (id=1845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf25670000007800c50004c133215d09e47ef3d25601c86c01ce23a3e5463a0e7ef6a1d92e52c112de0fd5b1189a4940843b5ab743bfddc316e660879ac4035ea31d1836cf8a1ffca1521e99e94191edac17c8968a18d4cc61ae608c77a6ec1558bc04da80006736e6d60f65f036452ee9c2ef4cbd7635e4ac37bbbb607c0800c4000b930000"], 0x94}, 0x1, 0x0, 0x0, 0x240080c5}, 0x4048002) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r2], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000011c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001700)=ANY=[@ANYBLOB="94070000", @ANYRES16=r2, @ANYBLOB="000205bdf5adfedbdf258914f539629407000300"/32, @ANYRES32=r5, @ANYBLOB="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"], 0x794}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008040) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x2400800c) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x2) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000f200"/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r11, @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056070000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYRES32=r9, @ANYRES16=r13, @ANYRES8=r12, @ANYRESOCT=r10, @ANYRESHEX=r11, @ANYRESOCT, @ANYRESHEX=r9, @ANYRESDEC=r9, @ANYRES64=r13], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt(r9, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 1.281521048s ago: executing program 2 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, 0x0, 0x0) r5 = accept(r0, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x80) sendmsg$NFNL_MSG_ACCT_DEL(r5, 0x0, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJ', 0x2}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x14, 0x0, 0x701, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) 1.277066671s ago: executing program 3 (id=1847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="f80000001a000100fefffffffddbdf25fe880000000000000000000000000101fc010000000000000000000000000000000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0xd, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x80000003, 0xa1, 0xffc, 0x9, 0x701, 0x1, 0x40001, 0xfffffffa, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7, 0x4, 0x7, 0x7, 0x10, 0x57df5d62, 0xdb, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x7, 0x4, 0x7, 0x4009, 0x2, 0x4, 0x0, 0x401, 0x752, 0x3, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfe000000, 0x5a3, 0x100002, 0x84, 0x100, 0x5, 0x253, 0x81, 0xb, 0x5, 0x20006, 0x4005, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x7, 0x4, 0x2, 0x3c, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000018000280140001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0xb0000001}) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'team_slave_0\x00', 0x400}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) 1.124083318s ago: executing program 4 (id=1848): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="02040000", @ANYRES16=r2, @ANYBLOB="050029bd7000fddbdf250101000044000180060001000a00000006000200060000000800080000000000060004000050000008000b0073697000060004004e2000000800080000000000080005000000000004000280080005000700000008000400ffff000038000280060002004e24000014000100ff020000000000000000000000000001080005000000200106000e004e2300000800050072490d10"], 0xa4}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x20, r2, 0x5, 0x870bd28, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0xfffffffffffffefc, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40054}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3, 0x2, 0x4}, 0x1c) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca900334dea00b0c760b5184f123d6da2f1acfac0ee2dd2b184b27db1f302de3326c018139c7c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab2d67683f7bb11c9cab3b3eedaa8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d004900c606f93f6b8199f926000000000000"], 0xe0}], 0x1}, 0x40040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000000c0)=""/30, 0x1e, 0x0, &(0x7f0000000200)=""/48, 0x30}}, 0x10) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042001100000000000000000003010000000000002600010000112233445566778899aabb08004500001400000000011700000102fc040506070800000c0002000600060088a800000c0003000800170004000000"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800070125bd7000000000000f7c3f0008000180040005000c00d7000600000000260004"], 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0x4001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x7000000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.081883587s ago: executing program 1 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}]}, 0x34}}, 0x4044890) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback=0x36, r2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r4}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x840, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4000000) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r7 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async, rerun: 64) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) r10 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000001840), 0x3b, 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) (rerun: 64) 641.028324ms ago: executing program 4 (id=1850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@delchain={0xa48, 0x65, 0x100, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0x9, 0xd}, {0x6, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4a0}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_matchall={{0xd}, {0xa04, 0x2, [@TCA_MATCHALL_ACT={0x9f8, 0x2, [@m_nat={0x1b8, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x0, 0x2, 0x5}, @multicast1, @private=0xa010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x5, 0x8, 0x3}, @private=0xa010102, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xad, 0x1, 0x7fffffff, 0x4}, @local, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0x1, 0x1, 0xc}, @local, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x93b, 0x3, 0x7, 0x81}, @multicast1, @empty, 0xffffff00}}]}, {0xc5, 0x6, "f9c3754782a4f4ecc6ce8d5cfcfaf981d359b9b0d219c60f0bbd1edac021a88d2707210f13b82e4c3f337308ff6ce514acbaf58fd36f98ddf866910d8e140692ad1998ec92d4bf1b4cf0208f212ed85e2cf8d614d95dd6e84302df08cd668ce4ed91da58b4323cbe2b6e0681703acafde31d257806cf98f734d9abb4dae724d0e84cbaf0adc6da01e4b2aed4f5c347413aab08a53edea2fde47a04e51ff7cfadffeab2ccfad829c256af6f00aa3cbdeef63c9147e451340c2039d35bd7c6eb7aa8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xc4, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7fff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x7f, 0x6, "ce8ed8f5325cf2705ea381560c1e264d8abfa44bcebf6f6e7c74926c2e5d5ac9d0c357cf98ef272d306a6384381fde9f96471796f08a7f4c41860511509453ab46a553e8d1d1002133995f74a8d5fdce43e408533c7efd73a81a2cd13faeb9c100750e6e18c2a4a002273da662cf291def9d7606338560385a68ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x114, 0x12, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '/+!#\')\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}]}, {0xd3, 0x6, "37171399f1e9bbf4b5e4567e4328e119ff4025245188933448dfe2d395103d9a6ae6e491a7308c97116ab68aca023e62549bdc43245a7aa43000fda27682cda72bf18217ce9e73573e5f91abb6bbf264f5c52878153cf3f14170da2d9d544ceeabae47678bc19f42a4e614b0eb297642d41fa29d751dbc88fb7c7eeec411d843eae7703ce1a514e2954647a3d78d4c3a776259ca3edd89279638ad46c1e03bddfdcc9381211d9c9620e3b3b3bb5589e69543311d5b828ab2ee7bef0bc901cd27fc486a1fbda11e1baaf79c5eb439b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x518, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0xffffffff, 0x5, 0x7ff, 0x1, 0x5, 0x401, 0xa2, 0xff, 0x0, 0x3, 0x6, 0x6, 0x351, 0x7, 0x2, 0xef3, 0x846, 0x8001, 0x0, 0x0, 0x7, 0x3, 0x7, 0x6, 0x8, 0x8, 0x5, 0x7ff, 0x5, 0x7, 0x3, 0x5, 0x2, 0x1, 0x9, 0x3, 0xfffeffff, 0x5, 0x7, 0x9, 0xa, 0x0, 0x8, 0x7, 0x8, 0x5, 0x2, 0x5, 0x1, 0x5, 0x8, 0x4, 0x8, 0x2, 0x213f, 0x48, 0x2, 0x7d, 0x2, 0xfffffff9, 0x7c17, 0x7, 0x1, 0x5, 0x2, 0x7ff, 0x10, 0x80, 0x1, 0x3134, 0x3ff, 0x9, 0x9, 0x80000000, 0x7, 0x6, 0x2, 0xf, 0x1, 0x0, 0x4, 0x8, 0x50, 0x9, 0xf, 0x50, 0x7, 0x9, 0x6, 0x6, 0x543f, 0xff6f, 0x2, 0x1, 0xec0, 0x6, 0xb, 0x4, 0x5, 0x0, 0x1, 0x1000, 0x2, 0x5, 0x9, 0x2, 0x96c, 0xa, 0x9, 0x7, 0x5, 0xffffff7f, 0x1, 0x8, 0xfffffffd, 0x8, 0x7, 0xffffffff, 0xb66, 0xd1cf, 0x1, 0xd972d284, 0x2, 0xff, 0x6, 0x5, 0x8, 0x6, 0x6, 0x7, 0x4, 0x1, 0x9, 0x5, 0x9, 0x7, 0x1, 0x0, 0xf547, 0x8, 0x9, 0x5, 0x4, 0x8, 0x2, 0x9, 0x6, 0x810, 0xfffffffb, 0x8, 0x80000001, 0x8, 0x9, 0x9, 0x1, 0x890, 0x5, 0x2, 0x8, 0x89d, 0xfff, 0x1, 0x3, 0xfffffffb, 0xb, 0x7f, 0x7, 0xf, 0xb81e, 0x2, 0x9, 0x4, 0x6, 0x10, 0x8, 0x101, 0x7, 0xc, 0xb6, 0x3, 0xc234, 0x1, 0x2, 0x5, 0x8, 0x7, 0xffff, 0x7, 0xe5d, 0x9, 0x5, 0x2, 0xffff, 0x0, 0x1, 0x9, 0x100, 0x8, 0x8, 0x2, 0x1, 0xfffffffa, 0x8, 0x96, 0x2, 0x8f68, 0xffff, 0x4, 0x8, 0x9, 0x6, 0x8, 0x0, 0xfff, 0xb3, 0x6, 0xc1a, 0x2, 0x10, 0x7, 0x0, 0x6, 0x2, 0x9, 0x3, 0x1ff, 0x6, 0xe, 0x5, 0x4, 0xf6, 0x3, 0x9, 0x3, 0x1, 0x80000000, 0x2182f9a4, 0x4, 0xffffcdaf, 0x4, 0xc3, 0xe0, 0x1, 0xb, 0x3, 0x5, 0x932, 0x0, 0xffb, 0x8001, 0x5, 0x4c9, 0x5, 0x7, 0x9]}]]}, {0xe8, 0x6, "34b827145b69134d326e531655e95ce8c7e0f604f97a54896f2de008788b7df0c833d227e4737f25bc493237b789c135852455d4ee975a7caaf199f3667b22caa4ea023bccb6d1894e112d2b57990a858b1bfcccf8317e4660525b11e37db2191fdfe0b70f95754190743cb5ebb7471171e4280978deff06f8e69bcf8ba52772792eb17b824e17d67048dd3112cbe9b7560622f9ed503497f456d20e78ca77d20a1aff866c1477c205831ce38d19a21c07644312d2f2bc51192dedd779465e467a35729e607993b613aaac07ae84bc62372fef5d349806e6223857ac360b7ef5e4bad357"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x14c, 0x18, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x5, 0x5, 0x8}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x2, 0x8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0xcc, 0x4, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x2, 0x10000, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7ff, 0x5, 0x8, 0x101}, 0x6a2}}]}, {0x90, 0x6, "9f0a77dd64575cdf96bf72f5815f103e6593249cccd119f132534e24dd05b30a00bf99f6365b9d5252b405ed5ed03d67fa9b158f39d2c4ef255f545723df285f691849f1476b68b78ca56598a2a1c190b5230b78619ce1f6c8b22f3efb836be264722591862f1ca9cbd41d857046d4024b7870357699f0e062695e1ae6ad20c888ec2fc390c291e0da4d494a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0xa48}, 0x1, 0x0, 0x0, 0x50}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0x0, 0xffe0}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) (async, rerun: 64) connect$phonet_pipe(r7, 0x0, 0x0) (async, rerun: 64) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) (async, rerun: 64) r8 = socket(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000600)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7fdffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x8000}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff"], 0x110) (async, rerun: 32) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 64) r10 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 64) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (rerun: 64) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 639.706489ms ago: executing program 0 (id=1851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010400000000000000000500000508000240000000030900010073797a310000000020000000020a01070000000000000000050000040900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0100e00ffffffffffff0802110000005050505050509300fdff8c108302"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r4, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x68}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}}, 0x800) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000200)=0xce3f, 0x4) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000080)=ANY=[], 0x131c}], 0x1, 0x0, 0x0, 0x80}, 0x4040000) 252.080888ms ago: executing program 2 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000004c0)={{}, r1, 0x0, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x3, 0xfffffffffffffffd, {0xc, 0x0, 0x2, 0x1, 0x40}, [0x6]}}, @devid=r2}) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@o_path={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000001640)={r3, &(0x7f0000001540)='\x00', 0x20000, &(0x7f0000001580)={@align=0x2, {0x3, 0xd6b, 0x7, 0x5}}, 0x101, &(0x7f00000015c0)={@_ha_fsid}, &(0x7f0000001600)=0x101}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000016c0)={r4, r5, 0x11, 0x0, @void}, 0x10) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001840)={@map=r4, 0x15, 0x0, 0x7, &(0x7f0000001740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001880)={r4, r7, 0x13, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r9}}, 0x1c) accept4$nfc_llcp(r4, &(0x7f00000018c0)={0x27, 0x0}, &(0x7f0000001940)=0x60, 0x80000) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) ioctl$PPPIOCSMRU1(r12, 0x40047452, &(0x7f00000019c0)=0x7) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r13, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, r14, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000001b40)) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x7f3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_ERROR_CLEARALL(r15, 0x40085875) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001c00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c40)={r16}, 0x4) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=@bloom_filter={0x1e, 0x9, 0x0, 0x101, 0x10, r15, 0x0, '\x00', 0x0, r15, 0x3, 0x5, 0x3, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00)={r15, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001fc0)={'syztnl2\x00', &(0x7f0000001f40)={'syztnl1\x00', 0x0, 0x2f, 0xc, 0x7, 0x80000000, 0x4, @remote, @mcast1, 0x7800, 0x80, 0xfffffffc, 0x4}}) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002100)={{r8, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f00000020c0)='%-5lx \x00'}, 0x20) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002200)={0x11, 0x28, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='syzkaller\x00', 0xf6, 0x63, &(0x7f0000001ec0)=""/99, 0x40f00, 0x2, '\x00', r19, 0x0, r4, 0x8, &(0x7f0000002000)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002040)={0x3, 0x8, 0x3, 0xfffffffb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002140)=[r4, r3, r20, r3, r15, r3, r4], &(0x7f0000002180)=[{0x0, 0x3, 0x7, 0x2}, {0x5, 0x3, 0xd, 0x6}, {0x5, 0x1, 0x0, 0x4}, {0x1, 0x2, 0x5, 0x7}, {0x1, 0x4, 0x7, 0x4}], 0x10, 0xc63}, 0x94) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000003600)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000035c0)={&(0x7f0000002300)={0x12b4, 0x1, 0x5, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x1, 0x91}, 0x9, 0x5a, 0x7, 0x9, 0x24, 'syz1\x00', "11af674e96c4db3ff59a3c5da7cf58d92ffd2fa5cb4d0583c41e37df901629a9", "09633c28b7ab52703a508033a84f8d2b8b1ea00fa7bf8499e4199df5fc682c23", [{0x1, 0x7ff, {0x0, 0xe}}, {0x4, 0x0, {0x2, 0x2}}, {0x7, 0x3ff, {0x3, 0x4}}, {0xd506, 0xfff, {0x3, 0xffffff80}}, {0xfffc, 0x1400, {0x3, 0x8000}}, {0x14e, 0x1, {0x3, 0x46d2}}, {0x2, 0x3, {0x2, 0x81}}, {0x3, 0x0, {0x2, 0x5}}, {0xad, 0xda69, {0x0, 0x165}}, {0x2, 0x6, {0x0, 0x6}}, {0x401, 0x5}, {0x3, 0xa, {0x0, 0x8}}, {0x9, 0x8, {0x3, 0x7fff}}, {0x1000, 0xd8e, {0x3, 0x5}}, {0x4, 0x9, {0x1, 0x6}}, {0x0, 0x8, {0x2, 0x8001}}, {0x3, 0x7, {0x2, 0x3ff1}}, {0x32b, 0x0, {0x3, 0x7}}, {0xab6c, 0x80, {0x2, 0xa}}, {0x474e, 0x8, {0x0, 0xc}}, {0x6, 0x8, {0x0, 0x5}}, {0x6, 0x0, {0x2, 0x1}}, {0x100, 0x9, {0x0, 0x800}}, {0xc, 0x3, {0x0, 0xe38c}}, {0x0, 0x4, {0x0, 0x7f}}, {0x0, 0x83f, {0x1, 0x200}}, {0x66, 0x7, {0x0, 0x7fffffff}}, {0x0, 0xad5b, {0x2, 0x6}}, {0x1, 0x6, {0x2}}, {0x9, 0xfffb, {0x3, 0x101}}, {0x3ff, 0x0, {0x2, 0x3ff}}, {0x4, 0x9, {0x2, 0xfff}}, {0x55, 0x0, {0x3}}, {0x8, 0x4, {0x0, 0x4}}, {0x101, 0x80, {0x2, 0x3}}, {0x3, 0x0, {0x0, 0x8}}, {0x1, 0x8, {0x2, 0x2}}, {0x7, 0xff, {0x1, 0x3}}, {0x2, 0x6, {0x3, 0x9}}, {0x0, 0x1, {0x0, 0x1ff}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0xe, 0x8, 0x5, 0x8000, 0x9, 'syz1\x00', "dd1f9c93a1a87b472b007b8fdf0bcc66341634e0672170df69ac908c4b933d90", "c98007ddf6f0bdcc00d89a1c3236b849306d2ca56e0e456f552517b34a802bab", [{0x3bc, 0x5, {0x3, 0xfffffe00}}, {0x1298, 0xa, {0x2, 0x10000}}, {0x5, 0x7f, {0x0, 0x1}}, {0x9, 0x0, {0x3, 0xa372}}, {0x5, 0x5, {0x3, 0x18}}, {0x9, 0x7ff, {0x0, 0x8}}, {0x5, 0x0, {0x1, 0x746}}, {0x2, 0x8852, {0x0, 0x40}}, {0x10, 0x8, {0x2, 0xa}}, {0x2, 0x2, {0x2, 0x200}}, {0x4, 0x0, {0x3, 0x5}}, {0x8001, 0x4, {0x2, 0x4}}, {0x4, 0x40, {0x1, 0x1}}, {0x3, 0x5, {0x3, 0x6}}, {0xf800, 0x6, {0x3, 0x5a22}}, {0x8, 0x2, {0x3, 0x2}}, {0x7, 0x40, {0x3, 0x1ff}}, {0x6, 0x5, {0x3, 0x400}}, {0x8, 0x8, {0x3, 0xfffffffb}}, {0x8, 0x7ff, {0x3, 0x6}}, {0x3, 0x4, {0x2}}, {0x2, 0x9, {0x0, 0x3}}, {0x7, 0x4, {0x2, 0xa702}}, {0x7f, 0x4, {0x0, 0x4}}, {0xa4, 0x0, {0x3, 0x4}}, {0x5, 0x9, {0x0, 0x6c0e2631}}, {0x1, 0x1, {0x0, 0x6}}, {0x0, 0x6, {0x3, 0x1}}, {0xa, 0x1, {0x0, 0x3}}, {0x101, 0x3, {0x3, 0x6}}, {0xdda, 0x6, {0x2, 0x3}}, {0x9, 0xff51, {0x3, 0x80000001}}, {0x6, 0x3, {0x2, 0x3}}, {0x4, 0x9, {0x1, 0x6}}, {0x401, 0x9, {0x3, 0x4}}, {0x2, 0x0, {0x3, 0x8001}}, {0x8, 0x4, {0x3, 0x1}}, {0xfffd, 0x6f, {0x2, 0x10000000}}, {0x401, 0x7, {0x2, 0xe}}, {0xfff4, 0x5, {0x0, 0x100}}]}}}, {{0x254, 0x1, {{0x2, 0x80000000}, 0x2f, 0x58, 0x8000, 0xb, 0x11, 'syz0\x00', "cca332878431be53d22cf61f6288a38dcc41d52388f5175ed3518e8791ad7aca", "bbe6157b5cfe1f12ee2aad56b672db657514bfba74d6356a4b5afb5c019b3924", [{0x2, 0x9, {0x1, 0x8}}, {0x7f, 0x0, {0x3, 0x4}}, {0x6, 0x8, {0x3, 0x9}}, {0x9, 0x101, {0x2, 0xb707}}, {0x6, 0x401, {0x0, 0x8001}}, {0x0, 0x3634, {0x0, 0x1}}, {0x8d, 0x83a, {0x1, 0x9}}, {0x3, 0x89}, {0x6, 0x8, {0x3, 0x2}}, {0x3, 0x1, {0x2, 0x4}}, {0xe54, 0x8, {0x3, 0x177}}, {0xfaa, 0x7, {0x2, 0xf}}, {0x8000, 0x9, {0x3, 0x2}}, {0x153, 0x2b, {0x1, 0x3}}, {0x4, 0x7e7e}, {0x1, 0xc25, {0x0, 0xfffffff7}}, {0x6, 0x3, {0x0, 0x6}}, {0x10, 0xfff, {0x0, 0x6}}, {0x9, 0x2, {0x1, 0x3}}, {0x0, 0xffff, {0x3, 0x1}}, {0x2, 0xd9b9, {0x2, 0x7}}, {0x2, 0xf, {0x3, 0x17}}, {0xc, 0x2, {0x1, 0x401}}, {0x24a, 0x44c, {0x3, 0x10}}, {0x8, 0xd, {0x0, 0x8001}}, {0x81, 0x93a6, {0x2, 0x8001}}, {0xffff, 0x800, {0x2, 0x7}}, {0x3, 0x7}, {0x1, 0x1, {0x3, 0x4}}, {0xfbf, 0x0, {0x1, 0xa}}, {0x7, 0xd, {0x1, 0x100}}, {0x1, 0xb680, {0x3, 0xbd}}, {0x401, 0x3ff, {0x3, 0x2}}, {0x2, 0x1, {0x3, 0x1c000000}}, {0x7, 0x7, {0x2, 0x3ff}}, {0x6, 0x83, {0x2, 0x9}}, {0x7, 0x3a2, {0x2, 0x80}}, {0x9, 0x2, {0x0, 0x7}}, {0x80, 0x5, {0x3, 0xffff}}, {0x3, 0x6, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x3, 0x80, 0xffff, 0xa48a, 0xb, 'syz0\x00', "6aecd453235f56a3ff4168c9ee6daaf5a24e80af3ff777e5dd5a46ef25e6f4cf", "57db04eef176c1235f00c68682a3309fb0f695cc3b4a52f7a9ce5d4303581184", [{0x4, 0x0, {0x1, 0x4}}, {0x7, 0x98, {0x0, 0x6}}, {0x0, 0xa, {0x3, 0x100}}, {0x7, 0x447, {0x1, 0x4}}, {0x5, 0x0, {0x3, 0xfffffffa}}, {0x2, 0x80, {0x2, 0x1}}, {0x3ca5, 0x0, {0x4738252353f8b658, 0x4}}, {0x0, 0x200}, {0x5, 0xaa, {0x0, 0x7}}, {0xff, 0x9, {0x3, 0x80000000}}, {0x2, 0x0, {0x1, 0xffff}}, {0x6c, 0x4, {0x3, 0x5e57}}, {0x81, 0x8000, {0x1, 0x3}}, {0x2, 0x9ea, {0x1, 0x3}}, {0x1, 0x800, {0x1}}, {0x6, 0x1de, {0x1, 0x7}}, {0x400, 0x6, {0x0, 0x8}}, {0x7, 0x1, {0x2, 0xfffffff9}}, {0x4, 0xe536}, {0xfff7, 0xaab, {0x0, 0x9}}, {0x0, 0x9, {0x1, 0x2}}, {0x4, 0xb336, {0x3, 0x37}}, {0x3, 0x10, {0x3, 0x2}}, {0x5, 0x3, {0x2, 0x4}}, {0x2, 0xff, {0x1, 0x29b}}, {0x4, 0x980d, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0xbdd}}, {0x2, 0x6, {0x0, 0xffff}}, {0x8, 0x81, {0x0, 0x3c68}}, {0x6, 0x9, {0x2, 0x8}}, {0x7, 0x0, {0x0, 0x5}}, {0x7, 0x0, {0x2, 0x4}}, {0x5, 0x800, {0x0, 0x1}}, {0x40, 0x7, {0x3, 0x2}}, {0x8000, 0x8, {0x2, 0x81}}, {0x4, 0x40, {0x3, 0x4}}, {0x3, 0x5, {0x1, 0x8}}, {0x32, 0x5, {0x1, 0x2}}, {0x9c, 0x5, {0x0, 0xe47}}, {0x7, 0x3, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x7627}, 0x81, 0x0, 0xa, 0x8, 0x16, 'syz0\x00', "6c6109e19ee762e9fd758523e4a299162fb7271bd93e30435a0181cbea5ed744", "455584b4eb12c5fbd155fc926a9b0a20b8d3ba54e6c364fca0535fec51e40e96", [{0x81, 0x2, {0x3, 0x200}}, {0x8, 0x3f, {0x1, 0xda}}, {0x9, 0x9, {0x1, 0x3c448427}}, {0x5, 0x3, {0x0, 0x4}}, {0x6, 0x4, {0x2, 0x1}}, {0xc, 0x4, {0x0, 0x3}}, {0x3, 0x401, {0x0, 0x15de}}, {0x6, 0x200, {0x1, 0x10001}}, {0x6, 0x0, {0x0, 0xc122}}, {0x8, 0xfb51, {0x0, 0x7}}, {0x4, 0x3, {0x0, 0x9}}, {0xfff9, 0xa33, {0x0, 0x9}}, {0x8, 0xee, {0x1, 0x4}}, {0x1000, 0x1, {0x0, 0xff}}, {0x1, 0x6, {0x1, 0x2}}, {0x6, 0x1, {0x3, 0x285}}, {0x60, 0xf, {0x3, 0x7ff}}, {0x8, 0x5, {0x3, 0x2ad}}, {0x6607, 0x1ff, {0x2, 0x7}}, {0xfffc, 0x7, {0x3, 0x4}}, {0x7fff, 0x2, {0x2, 0x10}}, {0x8, 0x2, {0x3, 0xf7}}, {0xa9, 0x3, {0x0, 0x47}}, {0xc0, 0x682d, {0x7, 0xef}}, {0x5, 0x8e95, {0x0, 0x7}}, {0x6, 0x0, {0x0, 0xe0}}, {0x3, 0x3, {0x2}}, {0x8001, 0x14aa}, {0x0, 0x307, {0x3, 0x2}}, {0x2, 0x81, {0x1, 0xec01}}, {0x1d2, 0x8, {0x1, 0x7fff}}, {0xe, 0xf, {0x3, 0x6}}, {0x7, 0xfc4c, {0x3, 0x7}}, {0x1, 0x5, {0x1, 0xf}}, {0x8, 0xf86d, {0x1, 0x2}}, {0xbe9, 0x8, {0x1, 0x7}}, {0x3, 0x1, {0x2, 0x1ff}}, {0xfffc, 0x4, {0x0, 0x9}}, {0x2, 0x4, {0x2, 0x3}}, {0x8, 0x6, {0x0, 0x3ff}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x7b, 0x9, 0x2, 0xe, 0x22, 'syz0\x00', "5f6b4a4ab48ed95f010517d7b85bbb57b74cc3ce8ab743daa4ca40b39e79e267", "a6a9b8ca2034106c95367388032366f91ef652ecc96ba0704ba9103ae5af72cb", [{0x9, 0x0, {0x3}}, {0x800, 0x667, {0x1, 0x2}}, {0xde, 0x7, {0x3, 0x3}}, {0x101, 0x7, {0x0, 0x4}}, {0x5, 0x8, {0x0, 0xfffff75b}}, {0x4, 0xffff}, {0x9, 0x3, {0x2, 0x6f0}}, {0x8, 0xf30, {0x0, 0x8}}, {0x4eba, 0x2, {0x1, 0x9}}, {0x7, 0x7f, {0x0, 0x5083}}, {0x800, 0x8, {0x3, 0x7f}}, {0x9a, 0x49, {0x2, 0x9}}, {0x7, 0x3, {0x1, 0x6}}, {0x4, 0xfff, {0x1, 0x39}}, {0x6, 0x5, {0x1, 0xa}}, {0x1, 0x1, {0x1, 0xfffffffb}}, {0x4}, {0x1, 0xf19, {0x2, 0xfffff000}}, {0x1, 0x8, {0x1, 0x7}}, {0xffff, 0x2, {0x3, 0xfff}}, {0xf98, 0xfffa, {0x2, 0xc0}}, {0x5, 0x1, {0x1, 0x2}}, {0xcf, 0x61e, {0x0, 0x401}}, {0xd2, 0x4, {0x0, 0x6}}, {0x8, 0x9, {0x1, 0x8}}, {0xff00, 0x6551, {0x3}}, {0xb, 0x9, {0x0, 0x8}}, {0xfff9, 0x0, {0x1, 0x7ff}}, {0xbd, 0x1, {0x2, 0x7ffa}}, {0x0, 0x254, {0x1, 0x40}}, {0xe, 0xb, {0x2, 0x10001}}, {0x2, 0x0, {0x2, 0x6}}, {0x4, 0x3, {0x1, 0xfd2}}, {0x7, 0x80, {0x0, 0x200000}}, {0x0, 0x8, {0x3, 0x2}}, {0x7, 0x5, {0x1, 0x6256}}, {0x4, 0x0, {0x1, 0x495}}, {0x4, 0xfff, {0x1, 0x4}}, {0x7, 0x2, {0x3, 0xc0000000}}, {0x10, 0x7, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x81, 0x2, 0x7, 0x6, 0xc, 'syz0\x00', "6ac47d5b428cf6622f3ec27edfe09bb44ce8507390c06900d6c20eb48d4c8185", "ae22230cf185678b068b4ccad0eaf54243bf8bda54e8f5309d825ba94d71b565", [{0x7fff, 0x0, {0x0, 0x81a}}, {0x4, 0x5, {0x2, 0x3}}, {0x1, 0x6, {0x0, 0x9}}, {0x25, 0x5, {0x1, 0x5}}, {0x2, 0x9, {0x3, 0x101}}, {0xf, 0x8000, {0x3, 0xbf6}}, {0x2, 0x1, {0x2, 0xfffffff7}}, {0x6, 0x5, {0x1, 0x5}}, {0xb, 0x6, {0x1, 0x2}}, {0xfff, 0x0, {0x1, 0x3}}, {0x3, 0x1, {0x1}}, {0x200, 0x1, {0x2, 0x101}}, {0x9, 0x81, {0x0, 0x100}}, {0x9dbe, 0x5, {0x0, 0x5}}, {0x8000, 0x9, {0x2, 0x10001}}, {0x2, 0x862, {0x1, 0xa7}}, {0x4, 0xff, {0x1, 0xd10}}, {0x3, 0x5, {0x1, 0x200}}, {0x80, 0x4, {0x3, 0x6}}, {0xa, 0x80, {0x1, 0x2}}, {0x5, 0x7, {0x1, 0x80000000}}, {0x1, 0xfff, {0x1, 0x101}}, {0x200, 0xfff, {0x1, 0x58000000}}, {0xb5a, 0x1, {0x0, 0x6c8}}, {0x2, 0x8001, {0x2, 0x8}}, {0x101, 0x222, {0x3, 0x101}}, {0xff3b, 0xff, {0x1, 0x6}}, {0xb8, 0x5, {0x1, 0x10001}}, {0xff, 0x0, {0x1, 0xba}}, {0x7, 0x10, {0x3, 0x67}}, {0xdf4, 0xfff, {0x3, 0x8}}, {0x20, 0x7, {0x3, 0x3}}, {0x3ff, 0x200, {0x1, 0xfe4c}}, {0x309d, 0xd, {0x2, 0xfffffe01}}, {0x0, 0x5, {0x0, 0x5}}, {0x8, 0x1ff, {0x1, 0x80000001}}, {0x4, 0x3, {0x3, 0x3}}, {0x507f, 0x8, {0x3}}, {0x4, 0x7, {0x3, 0x7}}, {0x8, 0x0, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0xad9}, 0x1, 0x3, 0x101, 0x6b8d, 0x19, 'syz0\x00', "ae034b6cded972cbd42a81c817ae848915225782749e6565b8b1312791c18cfe", "958b9e4bf3dd22cf3239b35cc68de2e411fe1aa135b9817b482c64c34cca7fa4", [{0x49, 0x7, {0x3, 0xd}}, {0x4, 0x1, {0x0, 0x9}}, {0x4, 0x3, {0x2, 0x8}}, {0x545, 0x0, {0x2, 0xa}}, {0x4, 0x7df, {0x0, 0x5}}, {0xfff9, 0x8, {0x2, 0x92e}}, {0x6, 0x401, {0x2, 0x1}}, {0x178, 0x7, {0x1}}, {0x3, 0x5, {0x3, 0x1}}, {0x849c, 0x1a40, {0x0, 0xf}}, {0x4, 0xc5f4, {0x3, 0x1}}, {0x1, 0x8000, {0x0, 0x3}}, {0x4, 0x81, {0x3, 0x100}}, {0xd, 0x1, {0x1, 0x4}}, {0x800, 0x2, {0x2, 0xb4}}, {0x2, 0x0, {0x0, 0x4}}, {0x8, 0x7, {0x672c327ebfb789be, 0x4be364}}, {0x5, 0x1, {0x1, 0x5}}, {0x401, 0x9, {0x1, 0x7ff}}, {0x77a, 0x81, {0x2, 0x1}}, {0x7c8, 0x8, {0x0, 0x6}}, {0xf4a0, 0x7, {0x2, 0x1}}, {0xfff, 0x6, {0x2}}, {0x5, 0x4, {0x3, 0x4}}, {0x0, 0x8000, {0x3, 0xc2}}, {0xd, 0x9d21, {0x1, 0x200}}, {0xd99d, 0x0, {0x3, 0x7}}, {0x21, 0x1, {0x2, 0x1}}, {0x5, 0xfe88, {0x2, 0xfff}}, {0x0, 0x9, {0x0, 0x2}}, {0x2, 0x81, {0x2, 0xffff}}, {0x6, 0x6, {0x1, 0x101}}, {0x2, 0x62e2, {0x3, 0xffffffff}}, {0xf, 0x5, {0x3, 0x7}}, {0x4, 0x8000, {0x2, 0x1}}, {0xff80, 0x3, {0x0, 0x80000001}}, {0x6, 0x7, {0x2, 0xe1}}, {0xc, 0x9, {0x2, 0xfffffffa}}, {0x7, 0x40, {0x3, 0x7}}, {0x7, 0x8c9, {0x3, 0xff}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x40004}, 0xc001) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=1853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x8912, &(0x7f0000000000)="13c70b4435779630379a2693a6256d") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xac, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x42}, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf70", 0x2, 0x8000}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r7, r6, 0x25, 0x8, @val=@tracing={r9, 0x6}}, 0x20) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r13, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r13, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) sendto$inet6(r11, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) kernel console output (not intermixed with test programs): ve_registers+0x14f/0x1ff0 [ 195.745099][ T9805] bpf_compute_live_registers+0x8d3/0x1ff0 [ 195.745138][ T9805] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 195.745171][ T9805] bpf_check+0x25ed/0x2e10 [ 195.745204][ T9805] ? ktime_get_with_offset+0x93/0x2d0 [ 195.745227][ T9805] ? __pfx_bpf_check+0x10/0x10 [ 195.745250][ T9805] ? bpf_obj_name_cpy+0x194/0x1e0 [ 195.745281][ T9805] bpf_prog_load+0x14d6/0x1c20 [ 195.745315][ T9805] ? __pfx_bpf_prog_load+0x10/0x10 [ 195.745362][ T9805] __sys_bpf+0xd0d/0xd90 [ 195.745392][ T9805] ? __pfx___sys_bpf+0x10/0x10 [ 195.745424][ T9805] ? __fget_files+0x2a/0x420 [ 195.745467][ T9805] ? ksys_write+0x242/0x270 [ 195.745498][ T9805] ? __pfx_ksys_write+0x10/0x10 [ 195.745530][ T9805] __x64_sys_bpf+0xba/0xd0 [ 195.745552][ T9805] do_syscall_64+0x166/0x520 [ 195.745574][ T9805] ? trace_irq_disable+0x3b/0x140 [ 195.745593][ T9805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.745613][ T9805] ? clear_bhb_loop+0x70/0xc0 [ 195.745643][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.745663][ T9805] RIP: 0033:0x7f0b2d99e159 [ 195.745681][ T9805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.745698][ T9805] RSP: 002b:00007f0b2e818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.745719][ T9805] RAX: ffffffffffffffda RBX: 00007f0b2dc26090 RCX: 00007f0b2d99e159 [ 195.745733][ T9805] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 195.745746][ T9805] RBP: 00007f0b2e818090 R08: 0000000000000000 R09: 0000000000000000 [ 195.745757][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.745768][ T9805] R13: 00007f0b2dc26128 R14: 00007f0b2dc26090 R15: 00007ffc8b496d68 [ 195.745797][ T9805] [ 196.575312][ T9842] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 196.575354][ T9842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.695205][ T9846] netlink: 'syz.2.1112': attribute type 4 has an invalid length. [ 197.187712][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.189963][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.326479][ T9889] netlink: 'syz.2.1118': attribute type 4 has an invalid length. [ 197.622607][ T9893] openvswitch: netlink: Message has 8 unknown bytes. [ 197.634730][ T9893] netlink: 'syz.4.1120': attribute type 3 has an invalid length. [ 197.634754][ T9893] __nla_validate_parse: 6 callbacks suppressed [ 197.634765][ T9893] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1120'. [ 197.755691][ T1010] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.755743][ T1010] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.755779][ T1010] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.764644][ T1010] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.040761][ T9895] syz_tun: entered promiscuous mode [ 198.040784][ T9895] syz_tun: entered allmulticast mode [ 198.055739][ T9895] bridge0: port 3(syz_tun) entered blocking state [ 198.055840][ T9895] bridge0: port 3(syz_tun) entered disabled state [ 198.249601][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 198.254153][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 198.780091][ T9949] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 198.871574][ T9955] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1135'. [ 198.877747][ T9955] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1135'. [ 199.117757][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 199.329173][ T9958] macvtap1: entered promiscuous mode [ 199.340957][ T9958] vlan1: entered promiscuous mode [ 199.350753][ T9958] team0: Device macvtap1 failed to register rx_handler [ 199.365911][ T9958] vlan1: left promiscuous mode [ 199.801347][ T9955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.801385][ T9955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.803039][ T9996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.886810][ T9983] batadv_slave_1: entered promiscuous mode [ 199.954774][ T9982] batadv_slave_1: left promiscuous mode [ 200.188227][ T9955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.188265][ T9955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.217000][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 200.258187][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 200.327296][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'. [ 200.419780][T10016] netlink: 'syz.1.1147': attribute type 7 has an invalid length. [ 200.419803][T10016] netlink: 'syz.1.1147': attribute type 8 has an invalid length. [ 200.419816][T10016] netlink: 'syz.1.1147': attribute type 13 has an invalid length. [ 200.530993][ T9955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.531032][ T9955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.585274][T10014] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1145'. [ 200.661013][ T9955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.661052][ T9955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.697504][T10020] lo speed is unknown, defaulting to 1000 [ 201.129675][T10042] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 201.168379][ T43] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.168414][ T43] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.344479][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 201.360383][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 201.360456][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 201.554895][ T690] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.554932][ T690] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.555792][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.555819][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.555855][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.555878][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.939082][T10089] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 202.070226][T10090] lo speed is unknown, defaulting to 1000 [ 202.161754][T10095] bond4 (unregistering): Released all slaves [ 203.189977][T10149] __nla_validate_parse: 10 callbacks suppressed [ 203.189999][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 203.231300][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 203.231755][T10148] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1165'. [ 203.278909][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 203.610902][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 203.699795][T10172] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 203.699819][T10172] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1172'. [ 203.754062][T10172] team0: Device wg2 is of different type [ 204.734113][T10229] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1182'. [ 204.887730][T10233] FAULT_INJECTION: forcing a failure. [ 204.887730][T10233] name failslab, interval 1, probability 0, space 0, times 0 [ 204.887767][T10233] CPU: 0 UID: 0 PID: 10233 Comm: syz.0.1185 Not tainted syzkaller #0 PREEMPT(full) [ 204.887789][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.887801][T10233] Call Trace: [ 204.887809][T10233] [ 204.887818][T10233] dump_stack_lvl+0xe8/0x150 [ 204.887852][T10233] should_fail_ex+0x410/0x560 [ 204.887880][T10233] should_failslab+0xa8/0x100 [ 204.887907][T10233] __kmalloc_noprof+0xfe/0x720 [ 204.887926][T10233] ? bpf_build_state+0x19b/0x580 [ 204.887945][T10233] ? bpf_build_state+0x19b/0x580 [ 204.887973][T10233] bpf_build_state+0x19b/0x580 [ 204.887995][T10233] ? __pfx_bpf_build_state+0x10/0x10 [ 204.888013][T10233] ? lock_acquire+0x115/0x350 [ 204.888043][T10233] ? lwtunnel_build_state+0xe2/0x4c0 [ 204.888068][T10233] lwtunnel_build_state+0x384/0x4c0 [ 204.888091][T10233] ? lwtunnel_build_state+0xe2/0x4c0 [ 204.888114][T10233] fib_nh_common_init+0x130/0x3d0 [ 204.888143][T10233] ? __pfx_fib_nh_common_init+0x10/0x10 [ 204.888164][T10233] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 204.888190][T10233] ? __kmalloc_noprof+0x38c/0x720 [ 204.888212][T10233] fib_nh_init+0x9e/0x410 [ 204.888237][T10233] fib_create_info+0x1b9b/0x3170 [ 204.888265][T10233] ? trace_contention_end+0x3d/0x140 [ 204.888307][T10233] fib_table_insert+0xcb/0x1b10 [ 204.888331][T10233] ? __pfx___mutex_lock+0x10/0x10 [ 204.888362][T10233] ? fib_new_table+0x14b/0x3f0 [ 204.888392][T10233] inet_rtm_newroute+0x14f/0x250 [ 204.888427][T10233] ? __local_bh_enable_ip+0xd6/0x140 [ 204.888451][T10233] ? __dev_queue_xmit+0x29b/0x3820 [ 204.888480][T10233] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 204.888531][T10233] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 204.888560][T10233] rtnetlink_rcv_msg+0x802/0xc00 [ 204.888591][T10233] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 204.888613][T10233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.888634][T10233] ? ref_tracker_free+0x689/0x830 [ 204.888660][T10233] ? __pfx_ref_tracker_free+0x10/0x10 [ 204.888684][T10233] ? __asan_memcpy+0x40/0x70 [ 204.888711][T10233] ? __skb_clone+0x5c/0x6c0 [ 204.888743][T10233] netlink_rcv_skb+0x226/0x4a0 [ 204.888773][T10233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.888798][T10233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.888836][T10233] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.888862][T10233] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.888896][T10233] netlink_unicast+0x7bd/0x940 [ 204.888932][T10233] netlink_sendmsg+0x813/0xb40 [ 204.888970][T10233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.889007][T10233] ? apparmor_socket_sendmsg+0x98/0x360 [ 204.889028][T10233] ? lock_acquire+0x115/0x350 [ 204.889049][T10233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.889076][T10233] sock_sendmsg_nosec+0x13a/0x180 [ 204.889109][T10233] sock_write_iter+0x2de/0x3e0 [ 204.889140][T10233] ? __pfx_sock_write_iter+0x10/0x10 [ 204.889176][T10233] ? bpf_lsm_file_permission+0x9/0x20 [ 204.889202][T10233] ? security_file_permission+0x75/0x260 [ 204.889241][T10233] vfs_write+0x612/0xba0 [ 204.889279][T10233] ? __pfx_vfs_write+0x10/0x10 [ 204.889318][T10233] ? __fget_files+0x2a/0x420 [ 204.889354][T10233] ksys_write+0x150/0x270 [ 204.889385][T10233] ? __pfx_ksys_write+0x10/0x10 [ 204.889433][T10233] do_syscall_64+0x166/0x520 [ 204.889454][T10233] ? trace_irq_disable+0x3b/0x140 [ 204.889474][T10233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.889495][T10233] ? clear_bhb_loop+0x70/0xc0 [ 204.889520][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.889540][T10233] RIP: 0033:0x7fe07459e159 [ 204.889558][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.889576][T10233] RSP: 002b:00007fe0753ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 204.889598][T10233] RAX: ffffffffffffffda RBX: 00007fe074825fa0 RCX: 00007fe07459e159 [ 204.889613][T10233] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 204.889627][T10233] RBP: 00007fe0753ac090 R08: 0000000000000000 R09: 0000000000000000 [ 204.889640][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.889652][T10233] R13: 00007fe074826038 R14: 00007fe074825fa0 R15: 00007ffca69a15c8 [ 204.889699][T10233] [ 205.559304][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1190'. [ 205.559441][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 206.299812][T10279] netlink: Unknown conntrack attr (0) [ 206.459333][T10284] FAULT_INJECTION: forcing a failure. [ 206.459333][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 206.459364][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.2.1198 Not tainted syzkaller #0 PREEMPT(full) [ 206.459385][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.459407][T10284] Call Trace: [ 206.459415][T10284] [ 206.459423][T10284] dump_stack_lvl+0xe8/0x150 [ 206.459456][T10284] should_fail_ex+0x410/0x560 [ 206.459484][T10284] should_failslab+0xa8/0x100 [ 206.459510][T10284] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 206.459533][T10284] ? bpf_parse_prog+0x13e/0x2b0 [ 206.459552][T10284] ? bpf_parse_prog+0x13e/0x2b0 [ 206.459578][T10284] kmemdup_noprof+0x2b/0x70 [ 206.459601][T10284] bpf_parse_prog+0x13e/0x2b0 [ 206.459624][T10284] ? trace_kmalloc+0x2a/0xf0 [ 206.459653][T10284] ? __pfx_bpf_parse_prog+0x10/0x10 [ 206.459675][T10284] ? __kmalloc_noprof+0x1ab/0x720 [ 206.459691][T10284] ? bpf_build_state+0x19b/0x580 [ 206.459709][T10284] ? bpf_build_state+0x19b/0x580 [ 206.459736][T10284] bpf_build_state+0x211/0x580 [ 206.459760][T10284] ? __pfx_bpf_build_state+0x10/0x10 [ 206.459778][T10284] ? lock_acquire+0x115/0x350 [ 206.459808][T10284] ? lwtunnel_build_state+0xe2/0x4c0 [ 206.459831][T10284] lwtunnel_build_state+0x384/0x4c0 [ 206.459853][T10284] ? lwtunnel_build_state+0xe2/0x4c0 [ 206.459876][T10284] fib_nh_common_init+0x130/0x3d0 [ 206.459902][T10284] ? __pfx_fib_nh_common_init+0x10/0x10 [ 206.459922][T10284] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 206.459948][T10284] ? __kmalloc_noprof+0x38c/0x720 [ 206.459969][T10284] fib_nh_init+0x9e/0x410 [ 206.459991][T10284] fib_create_info+0x1b9b/0x3170 [ 206.460018][T10284] ? trace_contention_end+0x3d/0x140 [ 206.460057][T10284] fib_table_insert+0xcb/0x1b10 [ 206.460081][T10284] ? __pfx___mutex_lock+0x10/0x10 [ 206.460114][T10284] ? fib_new_table+0x14b/0x3f0 [ 206.460144][T10284] inet_rtm_newroute+0x14f/0x250 [ 206.460171][T10284] ? __local_bh_enable_ip+0xd6/0x140 [ 206.460194][T10284] ? __dev_queue_xmit+0x29b/0x3820 [ 206.460218][T10284] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 206.460270][T10284] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 206.460296][T10284] rtnetlink_rcv_msg+0x802/0xc00 [ 206.460321][T10284] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 206.460340][T10284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.460359][T10284] ? ref_tracker_free+0x689/0x830 [ 206.460385][T10284] ? __pfx_ref_tracker_free+0x10/0x10 [ 206.460413][T10284] ? __asan_memcpy+0x40/0x70 [ 206.460440][T10284] ? __skb_clone+0x5c/0x6c0 [ 206.460471][T10284] netlink_rcv_skb+0x226/0x4a0 [ 206.460500][T10284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.460524][T10284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.460565][T10284] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.460592][T10284] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.460625][T10284] netlink_unicast+0x7bd/0x940 [ 206.460662][T10284] netlink_sendmsg+0x813/0xb40 [ 206.460697][T10284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.460731][T10284] ? apparmor_socket_sendmsg+0x98/0x360 [ 206.460750][T10284] ? lock_acquire+0x115/0x350 [ 206.460770][T10284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.460797][T10284] sock_sendmsg_nosec+0x13a/0x180 [ 206.460830][T10284] sock_write_iter+0x2de/0x3e0 [ 206.460861][T10284] ? __pfx_sock_write_iter+0x10/0x10 [ 206.460896][T10284] ? bpf_lsm_file_permission+0x9/0x20 [ 206.460921][T10284] ? security_file_permission+0x75/0x260 [ 206.460960][T10284] vfs_write+0x612/0xba0 [ 206.460998][T10284] ? __pfx_vfs_write+0x10/0x10 [ 206.461035][T10284] ? __fget_files+0x2a/0x420 [ 206.461070][T10284] ksys_write+0x150/0x270 [ 206.461102][T10284] ? __pfx_ksys_write+0x10/0x10 [ 206.461142][T10284] do_syscall_64+0x166/0x520 [ 206.461163][T10284] ? trace_irq_disable+0x3b/0x140 [ 206.461181][T10284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.461201][T10284] ? clear_bhb_loop+0x70/0xc0 [ 206.461231][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.461251][T10284] RIP: 0033:0x7fd9b039e159 [ 206.461270][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.461287][T10284] RSP: 002b:00007fd9b12e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.461309][T10284] RAX: ffffffffffffffda RBX: 00007fd9b0625fa0 RCX: 00007fd9b039e159 [ 206.461324][T10284] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 206.461337][T10284] RBP: 00007fd9b12e8090 R08: 0000000000000000 R09: 0000000000000000 [ 206.461350][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.461362][T10284] R13: 00007fd9b0626038 R14: 00007fd9b0625fa0 R15: 00007ffdaf566f08 [ 206.461402][T10284] [ 206.944169][T10292] syzkaller0: entered promiscuous mode [ 206.944194][T10292] syzkaller0: entered allmulticast mode [ 207.025241][T10285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.057232][T10292] ip6tnl0: entered allmulticast mode [ 207.322415][T10306] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1204'. [ 207.421887][T10315] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.470542][T10352] netlink: 'syz.3.1221': attribute type 40 has an invalid length. [ 208.509720][T10352] netlink: 'syz.3.1221': attribute type 40 has an invalid length. [ 208.754551][T10357] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 208.754575][T10357] __nla_validate_parse: 2 callbacks suppressed [ 208.754585][T10357] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1222'. [ 208.812700][T10365] Bluetooth: hci0: unsupported parameter 5135 [ 208.812724][T10365] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 208.966385][T10378] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 209.034141][ T5624] Bluetooth: hci2: ISO packet too small [ 209.046047][T10384] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1228'. [ 209.077474][T10387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1230'. [ 209.140129][T10391] netlink: 'syz.0.1231': attribute type 5 has an invalid length. [ 209.170599][T10378] bond0: (slave bridge2): making interface the new active one [ 209.171482][T10378] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 209.389422][ T31] audit: type=1800 audit(1789476163.176:2): pid=10394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1231" name="memory.events" dev="tmpfs" ino=1306 res=0 errno=0 [ 209.391669][T10400] FAULT_INJECTION: forcing a failure. [ 209.391669][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 209.391698][T10400] CPU: 0 UID: 0 PID: 10400 Comm: syz.2.1232 Not tainted syzkaller #0 PREEMPT(full) [ 209.391720][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.391731][T10400] Call Trace: [ 209.391739][T10400] [ 209.391748][T10400] dump_stack_lvl+0xe8/0x150 [ 209.391781][T10400] should_fail_ex+0x410/0x560 [ 209.391807][T10400] should_failslab+0xa8/0x100 [ 209.391831][T10400] __kvmalloc_node_noprof+0x176/0x820 [ 209.391857][T10400] ? record_stack_access+0x8ac/0x1110 [ 209.391880][T10400] ? record_stack_access+0x8ac/0x1110 [ 209.391910][T10400] record_stack_access+0x8ac/0x1110 [ 209.391945][T10400] ? __pfx_record_stack_access+0x10/0x10 [ 209.391979][T10400] analyze_subprog+0x4544/0x9e00 [ 209.392000][T10400] ? probe_event_enable+0x6df/0xae0 [ 209.392070][T10400] ? __pfx_analyze_subprog+0x10/0x10 [ 209.392090][T10400] ? __x64_sys_bpf+0xba/0xd0 [ 209.392107][T10400] ? trace_rpcgss_svc_unwrap_failed+0x120/0x1f0 [ 209.392141][T10400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.392194][T10400] ? call_instance+0x263/0x560 [ 209.392214][T10400] ? rcu_is_watching+0x16/0xb0 [ 209.392237][T10400] ? call_instance+0x263/0x560 [ 209.392256][T10400] ? trace_kmalloc+0x2a/0xf0 [ 209.392287][T10400] ? call_instance+0x263/0x560 [ 209.392307][T10400] ? __kvmalloc_node_noprof+0x52f/0x820 [ 209.392330][T10400] ? __kvmalloc_node_noprof+0x345/0x820 [ 209.392350][T10400] ? call_instance+0x263/0x560 [ 209.392370][T10400] ? call_instance+0x263/0x560 [ 209.392407][T10400] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 209.392430][T10400] ? bpf_base_func_proto+0x22c/0xb00 [ 209.392455][T10400] ? __pfx_xdp_func_proto+0x10/0x10 [ 209.392503][T10400] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 209.392531][T10400] ? __kvmalloc_node_noprof+0x345/0x820 [ 209.392552][T10400] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 209.392574][T10400] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 209.392603][T10400] bpf_compute_live_registers+0x8d3/0x1ff0 [ 209.392648][T10400] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 209.392682][T10400] bpf_check+0x25ed/0x2e10 [ 209.392714][T10400] ? ktime_get_with_offset+0x93/0x2d0 [ 209.392739][T10400] ? __pfx_bpf_check+0x10/0x10 [ 209.392762][T10400] ? bpf_obj_name_cpy+0x194/0x1e0 [ 209.392793][T10400] bpf_prog_load+0x14d6/0x1c20 [ 209.392828][T10400] ? __pfx_bpf_prog_load+0x10/0x10 [ 209.392874][T10400] __sys_bpf+0xd0d/0xd90 [ 209.392904][T10400] ? __pfx___sys_bpf+0x10/0x10 [ 209.392936][T10400] ? __fget_files+0x2a/0x420 [ 209.392978][T10400] ? ksys_write+0x242/0x270 [ 209.393009][T10400] ? __pfx_ksys_write+0x10/0x10 [ 209.393043][T10400] __x64_sys_bpf+0xba/0xd0 [ 209.393065][T10400] do_syscall_64+0x166/0x520 [ 209.393085][T10400] ? trace_irq_disable+0x3b/0x140 [ 209.393105][T10400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.393125][T10400] ? clear_bhb_loop+0x70/0xc0 [ 209.393156][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.393176][T10400] RIP: 0033:0x7fd9b039e159 [ 209.393194][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.393211][T10400] RSP: 002b:00007fd9b12c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.393234][T10400] RAX: ffffffffffffffda RBX: 00007fd9b0626090 RCX: 00007fd9b039e159 [ 209.393248][T10400] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 209.393262][T10400] RBP: 00007fd9b12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.393274][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.393286][T10400] R13: 00007fd9b0626128 R14: 00007fd9b0626090 R15: 00007ffdaf566f08 [ 209.393317][T10400] [ 209.476670][T10359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.476692][T10359] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.610071][T10359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.610094][T10359] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 209.689451][T10359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.689472][T10359] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.706711][T10359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.706733][T10359] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 209.920184][T10409] FAULT_INJECTION: forcing a failure. [ 209.920184][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.920217][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.3.1234 Not tainted syzkaller #0 PREEMPT(full) [ 209.920240][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.920251][T10409] Call Trace: [ 209.920259][T10409] [ 209.920267][T10409] dump_stack_lvl+0xe8/0x150 [ 209.920300][T10409] should_fail_ex+0x410/0x560 [ 209.920328][T10409] _copy_from_user+0x2d/0xb0 [ 209.920354][T10409] kstrtouint_from_user+0xd6/0x180 [ 209.920378][T10409] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 209.920408][T10409] ? lock_acquire+0x115/0x350 [ 209.920434][T10409] proc_fail_nth_write+0x8e/0x210 [ 209.920454][T10409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.920493][T10409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 209.920523][T10409] vfs_write+0x296/0xba0 [ 209.920561][T10409] ? __pfx_vfs_write+0x10/0x10 [ 209.920591][T10409] ? __fget_files+0x2a/0x420 [ 209.920625][T10409] ? __fget_files+0x3a2/0x420 [ 209.920650][T10409] ? __fget_files+0x2a/0x420 [ 209.920685][T10409] ksys_write+0x150/0x270 [ 209.920716][T10409] ? __pfx_ksys_write+0x10/0x10 [ 209.920757][T10409] do_syscall_64+0x166/0x520 [ 209.920779][T10409] ? trace_irq_disable+0x3b/0x140 [ 209.920799][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.920820][T10409] ? clear_bhb_loop+0x70/0xc0 [ 209.920844][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.920864][T10409] RIP: 0033:0x7f612295e98e [ 209.920882][T10409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.920899][T10409] RSP: 002b:00007f612378cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 209.920922][T10409] RAX: ffffffffffffffda RBX: 00007f612378d6c0 RCX: 00007f612295e98e [ 209.920937][T10409] RDX: 0000000000000001 RSI: 00007f612378d0a0 RDI: 0000000000000004 [ 209.920949][T10409] RBP: 00007f612378d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.920962][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.920974][T10409] R13: 00007f6122c26038 R14: 00007f6122c25fa0 R15: 00007ffd8b2e1008 [ 209.921007][T10409] [ 210.710667][T10441] bridge6: entered promiscuous mode [ 210.710692][T10441] bridge6: entered allmulticast mode [ 210.962459][T10450] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1246'. [ 211.026520][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 211.026549][T10453] block nbd2: Unsupported socket: should be TCP or UNIX. [ 211.140697][T10458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.142181][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 211.177443][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 211.184921][ T137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.185778][ T137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.185816][ T137] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.185846][ T137] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.745578][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 211.958173][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1259'. [ 212.058769][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 212.536183][T10517] SET target dimension over the limit! [ 212.536382][T10517] SET target dimension over the limit! [ 212.536542][T10517] SET target dimension over the limit! [ 212.536716][T10517] SET target dimension over the limit! [ 212.536854][T10517] SET target dimension over the limit! [ 212.537009][T10517] SET target dimension over the limit! [ 212.537155][T10517] SET target dimension over the limit! [ 212.537303][T10517] SET target dimension over the limit! [ 212.586552][T10517] SET target dimension over the limit! [ 212.586731][T10517] SET target dimension over the limit! [ 214.296189][T10580] lo speed is unknown, defaulting to 1000 [ 214.939546][T10580] netlink: 'syz.3.1284': attribute type 15 has an invalid length. [ 214.939571][T10580] __nla_validate_parse: 7 callbacks suppressed [ 214.939582][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 214.943125][T10580] netlink: 'syz.3.1284': attribute type 4 has an invalid length. [ 215.205405][T10611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'. [ 215.593069][T10629] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1297'. [ 216.076144][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 216.401727][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1305'. [ 216.719896][T10674] netlink: 'syz.1.1311': attribute type 21 has an invalid length. [ 216.719917][T10674] netlink: 'syz.1.1311': attribute type 22 has an invalid length. [ 216.818005][T10679] xt_IDLETIMER: timeout value is zero [ 218.705472][T10637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.903895][T10696] FAULT_INJECTION: forcing a failure. [ 218.903895][T10696] name failslab, interval 1, probability 0, space 0, times 0 [ 218.903929][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.4.1318 Not tainted syzkaller #0 PREEMPT(full) [ 218.903952][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.903965][T10696] Call Trace: [ 218.903973][T10696] [ 218.903982][T10696] dump_stack_lvl+0xe8/0x150 [ 218.904015][T10696] should_fail_ex+0x410/0x560 [ 218.904043][T10696] should_failslab+0xa8/0x100 [ 218.904068][T10696] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 218.904091][T10696] ? bpf_push_jmp_history+0x26c/0x6d0 [ 218.904112][T10696] ? bpf_push_jmp_history+0x26c/0x6d0 [ 218.904135][T10696] ? bpf_push_jmp_history+0x26c/0x6d0 [ 218.904158][T10696] krealloc_node_align_noprof+0x19a/0x390 [ 218.904186][T10696] bpf_push_jmp_history+0x26c/0x6d0 [ 218.904216][T10696] do_check_common+0x2a0a/0x5d30 [ 218.904280][T10696] ? __pfx_do_check_common+0x10/0x10 [ 218.904301][T10696] ? __pfx_verbose+0x10/0x10 [ 218.904317][T10696] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 218.904343][T10696] bpf_check+0x2639/0x2e10 [ 218.904370][T10696] ? ktime_get_with_offset+0x93/0x2d0 [ 218.904394][T10696] ? __pfx_bpf_check+0x10/0x10 [ 218.904415][T10696] ? bpf_obj_name_cpy+0x194/0x1e0 [ 218.904442][T10696] bpf_prog_load+0x14d6/0x1c20 [ 218.904473][T10696] ? __pfx_bpf_prog_load+0x10/0x10 [ 218.904513][T10696] __sys_bpf+0xd0d/0xd90 [ 218.904539][T10696] ? __pfx___sys_bpf+0x10/0x10 [ 218.904571][T10696] ? __fget_files+0x2a/0x420 [ 218.904612][T10696] ? ksys_write+0x242/0x270 [ 218.904642][T10696] ? __pfx_ksys_write+0x10/0x10 [ 218.904675][T10696] __x64_sys_bpf+0xba/0xd0 [ 218.904696][T10696] do_syscall_64+0x166/0x520 [ 218.904716][T10696] ? trace_irq_disable+0x3b/0x140 [ 218.904735][T10696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.904755][T10696] ? clear_bhb_loop+0x70/0xc0 [ 218.904778][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.904796][T10696] RIP: 0033:0x7f0b2d99e159 [ 218.904814][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.904831][T10696] RSP: 002b:00007f0b2e818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.904853][T10696] RAX: ffffffffffffffda RBX: 00007f0b2dc26090 RCX: 00007f0b2d99e159 [ 218.904875][T10696] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 218.904886][T10696] RBP: 00007f0b2e818090 R08: 0000000000000000 R09: 0000000000000000 [ 218.904899][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.904911][T10696] R13: 00007f0b2dc26128 R14: 00007f0b2dc26090 R15: 00007ffc8b496d68 [ 218.904938][T10696] [ 219.091959][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1317'. [ 219.283545][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 219.283567][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'. [ 219.409398][T10710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.432070][T10710] bond3: (slave bond0): making interface the new active one [ 219.445295][T10710] bond3: (slave bond0): Enslaving as an active interface with an up link [ 219.790037][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1327'. [ 219.790065][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1327'. [ 219.814465][T10725] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 219.845073][T10723] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.929080][T10731] x_tables: duplicate underflow at hook 2 [ 219.942229][T10725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.964211][T10725] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 219.990078][T10733] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 220.008290][T10728] __nla_validate_parse: 2 callbacks suppressed [ 220.008310][T10728] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1329'. [ 220.029947][T10725] bond2: (slave geneve3): making interface the new active one [ 220.038592][T10725] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 220.491422][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 221.382989][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 221.746747][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 222.205006][T10800] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 222.478470][T10805] ip_tables: iptables: counters copy to user failed while replacing table [ 223.338520][T10822] syzkaller0: entered promiscuous mode [ 223.338543][T10822] syzkaller0: entered allmulticast mode [ 223.369989][T10822] netlink: 'syz.2.1360': attribute type 2 has an invalid length. [ 223.397114][T10822] þ: entered promiscuous mode [ 223.486620][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1365'. [ 223.543826][T10831] FAULT_INJECTION: forcing a failure. [ 223.543826][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 223.543859][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.3.1364 Not tainted syzkaller #0 PREEMPT(full) [ 223.543882][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.543893][T10831] Call Trace: [ 223.543901][T10831] [ 223.543910][T10831] dump_stack_lvl+0xe8/0x150 [ 223.543943][T10831] should_fail_ex+0x410/0x560 [ 223.543967][T10831] should_failslab+0xa8/0x100 [ 223.543992][T10831] __kmalloc_cache_noprof+0xa3/0x600 [ 223.544009][T10831] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 223.544038][T10831] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 223.544056][T10831] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 223.544082][T10831] bpf_is_state_visited+0x2d6b/0x47d0 [ 223.544105][T10831] ? __asan_memcpy+0x40/0x70 [ 223.544142][T10831] ? diag_append_history+0x12c/0x520 [ 223.544170][T10831] ? bpf_diag_record_branch+0x58/0x90 [ 223.544210][T10831] do_check_common+0x2848/0x5d30 [ 223.544268][T10831] ? __pfx_do_check_common+0x10/0x10 [ 223.544289][T10831] ? __pfx_verbose+0x10/0x10 [ 223.544304][T10831] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 223.544332][T10831] bpf_check+0x2639/0x2e10 [ 223.544364][T10831] ? ktime_get_with_offset+0x93/0x2d0 [ 223.544389][T10831] ? __pfx_bpf_check+0x10/0x10 [ 223.544412][T10831] ? bpf_obj_name_cpy+0x194/0x1e0 [ 223.544443][T10831] bpf_prog_load+0x14d6/0x1c20 [ 223.544478][T10831] ? __pfx_bpf_prog_load+0x10/0x10 [ 223.544525][T10831] __sys_bpf+0xd0d/0xd90 [ 223.544555][T10831] ? __pfx___sys_bpf+0x10/0x10 [ 223.544584][T10831] ? __fget_files+0x2a/0x420 [ 223.544622][T10831] ? ksys_write+0x242/0x270 [ 223.544652][T10831] ? __pfx_ksys_write+0x10/0x10 [ 223.544683][T10831] __x64_sys_bpf+0xba/0xd0 [ 223.544705][T10831] do_syscall_64+0x166/0x520 [ 223.544726][T10831] ? trace_irq_disable+0x3b/0x140 [ 223.544745][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.544765][T10831] ? clear_bhb_loop+0x70/0xc0 [ 223.544789][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.544809][T10831] RIP: 0033:0x7f612299e159 [ 223.544827][T10831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.544844][T10831] RSP: 002b:00007f6120bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.544865][T10831] RAX: ffffffffffffffda RBX: 00007f6122c26090 RCX: 00007f612299e159 [ 223.544880][T10831] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 223.544893][T10831] RBP: 00007f6120bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.544905][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.544917][T10831] R13: 00007f6122c26128 R14: 00007f6122c26090 R15: 00007ffd8b2e1008 [ 223.544946][T10831] [ 223.734401][T10835] ipvlan2: entered allmulticast mode [ 223.734421][T10835] virt_wifi0: entered allmulticast mode [ 223.765104][T10837] ipvlan3: entered allmulticast mode [ 223.881057][T10841] ip6gre1: entered promiscuous mode [ 223.881080][T10841] ip6gre1: entered allmulticast mode [ 223.898588][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 224.173931][T10855] syzkaller1: entered promiscuous mode [ 224.173955][T10855] syzkaller1: entered allmulticast mode [ 224.447083][ T690] tipc: Subscription rejected, illegal request [ 224.447905][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 224.447923][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 224.492123][T10867] netlink: 'syz.1.1375': attribute type 4 has an invalid length. [ 224.492146][T10867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1375'. [ 224.501750][T10870] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 224.531120][T10867] .`: renamed from bond0 [ 224.754100][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 224.772939][T10881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.940955][ T31] audit: type=1800 audit(1789476178.736:3): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1383" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1532 res=0 errno=0 [ 225.453008][T10909] lo speed is unknown, defaulting to 1000 [ 226.749071][T10945] __nla_validate_parse: 1 callbacks suppressed [ 226.749092][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1401'. [ 227.127519][T10970] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 227.243117][T10978] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 227.268222][T10978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.273339][T10978] team0: Port device netdevsim1 added [ 227.279990][T10970] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 227.295544][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 227.320687][T10970] team0: Port device netdevsim1 removed [ 227.338357][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.340843][T10970] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 227.375269][T10977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.684049][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'. [ 227.738727][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 227.738742][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 227.767627][T10990] netlink: 'syz.0.1418': attribute type 4 has an invalid length. [ 227.767649][T10990] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1418'. [ 227.790328][T10990] .`: renamed from bond0 [ 227.982709][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 227.982732][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 227.983431][T10998] netlink: 'syz.0.1420': attribute type 4 has an invalid length. [ 227.983449][T10998] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1420'. [ 228.035902][T10999] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1421'. [ 228.674518][ T1010] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.674564][ T1010] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.774853][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.774901][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.999864][T11040] tipc: Enabling of bearer rejected, already enabled [ 229.412483][T11060] FAULT_INJECTION: forcing a failure. [ 229.412483][T11060] name failslab, interval 1, probability 0, space 0, times 0 [ 229.412505][T11060] CPU: 1 UID: 0 PID: 11060 Comm: syz.2.1437 Not tainted syzkaller #0 PREEMPT(full) [ 229.412518][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.412525][T11060] Call Trace: [ 229.412529][T11060] [ 229.412534][T11060] dump_stack_lvl+0xe8/0x150 [ 229.412553][T11060] should_fail_ex+0x410/0x560 [ 229.412568][T11060] should_failslab+0xa8/0x100 [ 229.412582][T11060] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 229.412594][T11060] ? __asan_memcpy+0x40/0x70 [ 229.412614][T11060] ? bpf_push_jmp_history+0x26c/0x6d0 [ 229.412632][T11060] ? bpf_push_jmp_history+0x26c/0x6d0 [ 229.412655][T11060] ? bpf_push_jmp_history+0x26c/0x6d0 [ 229.412673][T11060] krealloc_node_align_noprof+0x19a/0x390 [ 229.412684][T11060] ? bpf_diag_record_branch+0x58/0x90 [ 229.412701][T11060] bpf_push_jmp_history+0x26c/0x6d0 [ 229.412719][T11060] do_check_common+0x2a0a/0x5d30 [ 229.412750][T11060] ? __pfx_do_check_common+0x10/0x10 [ 229.412762][T11060] ? __pfx_verbose+0x10/0x10 [ 229.412771][T11060] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 229.412786][T11060] bpf_check+0x2639/0x2e10 [ 229.412802][T11060] ? ktime_get_with_offset+0x93/0x2d0 [ 229.412815][T11060] ? __pfx_bpf_check+0x10/0x10 [ 229.412828][T11060] ? bpf_obj_name_cpy+0x194/0x1e0 [ 229.412845][T11060] bpf_prog_load+0x14d6/0x1c20 [ 229.412862][T11060] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.412886][T11060] __sys_bpf+0xd0d/0xd90 [ 229.412901][T11060] ? __pfx___sys_bpf+0x10/0x10 [ 229.412918][T11060] ? __fget_files+0x2a/0x420 [ 229.412940][T11060] ? ksys_write+0x242/0x270 [ 229.412969][T11060] ? __pfx_ksys_write+0x10/0x10 [ 229.413000][T11060] __x64_sys_bpf+0xba/0xd0 [ 229.413021][T11060] do_syscall_64+0x166/0x520 [ 229.413042][T11060] ? trace_irq_disable+0x3b/0x140 [ 229.413060][T11060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.413080][T11060] ? clear_bhb_loop+0x70/0xc0 [ 229.413100][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.413111][T11060] RIP: 0033:0x7fd9b039e159 [ 229.413121][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.413130][T11060] RSP: 002b:00007fd9b12c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.413143][T11060] RAX: ffffffffffffffda RBX: 00007fd9b0626090 RCX: 00007fd9b039e159 [ 229.413156][T11060] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 229.413163][T11060] RBP: 00007fd9b12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.413170][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.413176][T11060] R13: 00007fd9b0626128 R14: 00007fd9b0626090 R15: 00007ffdaf566f08 [ 229.413191][T11060] [ 229.445445][T11062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.927493][T11072] Bluetooth: MGMT ver 1.23 [ 230.028931][T11079] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 230.320570][T11095] netlink: 'syz.2.1451': attribute type 1 has an invalid length. [ 230.376651][T11098] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 230.404139][T11102] x_tables: duplicate underflow at hook 1 [ 230.522389][T11098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.548797][T11104] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 230.549944][T11110] bond3: entered promiscuous mode [ 230.549967][T11110] bond3: entered allmulticast mode [ 230.621092][T11109] tc_dump_action: action bad kind [ 230.712856][T11119] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 230.712878][T11119] netlink: 'syz.3.1456': attribute type 2 has an invalid length. [ 231.353611][T11140] syzkaller1: entered promiscuous mode [ 231.353635][T11140] syzkaller1: entered allmulticast mode [ 231.811023][T11160] __nla_validate_parse: 8 callbacks suppressed [ 231.811046][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 232.074500][T11171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1471'. [ 232.187463][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 232.854046][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'. [ 233.016402][T11191] netlink: 'syz.3.1479': attribute type 1 has an invalid length. [ 233.371249][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 233.371282][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'. [ 233.392126][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.412358][T11204] bond2: (slave bond0): making interface the new active one [ 233.413260][T11204] bond2: (slave bond0): Enslaving as an active interface with an up link [ 233.439729][T11204] netlink: 'syz.3.1483': attribute type 4 has an invalid length. [ 233.439750][T11204] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1483'. [ 233.529304][T11211] FAULT_INJECTION: forcing a failure. [ 233.529304][T11211] name failslab, interval 1, probability 0, space 0, times 0 [ 233.529336][T11211] CPU: 0 UID: 0 PID: 11211 Comm: syz.0.1486 Not tainted syzkaller #0 PREEMPT(full) [ 233.529357][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.529385][T11211] Call Trace: [ 233.529393][T11211] [ 233.529409][T11211] dump_stack_lvl+0xe8/0x150 [ 233.529440][T11211] should_fail_ex+0x410/0x560 [ 233.529464][T11211] should_failslab+0xa8/0x100 [ 233.529490][T11211] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 233.529512][T11211] ? copy_array+0x71/0x100 [ 233.529538][T11211] ? copy_array+0x71/0x100 [ 233.529565][T11211] ? copy_array+0x71/0x100 [ 233.529591][T11211] krealloc_node_align_noprof+0x19a/0x390 [ 233.529619][T11211] copy_array+0x71/0x100 [ 233.529647][T11211] bpf_copy_verifier_state+0xad/0x1170 [ 233.529676][T11211] ? push_stack+0x7e/0x380 [ 233.529701][T11211] ? push_stack+0x7e/0x380 [ 233.529732][T11211] push_stack+0x1b9/0x380 [ 233.529763][T11211] do_check_insn+0xb48b/0x18e70 [ 233.529812][T11211] ? __pfx_do_check_insn+0x10/0x10 [ 233.529844][T11211] ? vscnprintf+0x5c/0x90 [ 233.529872][T11211] ? bpf_verifier_vlog+0x3d1/0x900 [ 233.529910][T11211] ? verbose+0x11d/0x1a0 [ 233.529932][T11211] ? __pfx_verbose+0x10/0x10 [ 233.529952][T11211] ? bpf_push_jmp_history+0x27d/0x6d0 [ 233.529982][T11211] do_check_common+0x3c19/0x5d30 [ 233.530038][T11211] ? __pfx_do_check_common+0x10/0x10 [ 233.530062][T11211] ? __pfx_verbose+0x10/0x10 [ 233.530077][T11211] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 233.530107][T11211] bpf_check+0x2639/0x2e10 [ 233.530138][T11211] ? ktime_get_with_offset+0x93/0x2d0 [ 233.530162][T11211] ? __pfx_bpf_check+0x10/0x10 [ 233.530186][T11211] ? bpf_obj_name_cpy+0x194/0x1e0 [ 233.530216][T11211] bpf_prog_load+0x14d6/0x1c20 [ 233.530250][T11211] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.530295][T11211] __sys_bpf+0xd0d/0xd90 [ 233.530324][T11211] ? __pfx___sys_bpf+0x10/0x10 [ 233.530353][T11211] ? __fget_files+0x2a/0x420 [ 233.530402][T11211] ? ksys_write+0x242/0x270 [ 233.530433][T11211] ? __pfx_ksys_write+0x10/0x10 [ 233.530466][T11211] __x64_sys_bpf+0xba/0xd0 [ 233.530489][T11211] do_syscall_64+0x166/0x520 [ 233.530509][T11211] ? trace_irq_disable+0x3b/0x140 [ 233.530528][T11211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.530548][T11211] ? clear_bhb_loop+0x70/0xc0 [ 233.530573][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.530593][T11211] RIP: 0033:0x7fe07459e159 [ 233.530611][T11211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.530627][T11211] RSP: 002b:00007fe07538b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.530649][T11211] RAX: ffffffffffffffda RBX: 00007fe074826090 RCX: 00007fe07459e159 [ 233.530664][T11211] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 233.530677][T11211] RBP: 00007fe07538b090 R08: 0000000000000000 R09: 0000000000000000 [ 233.530689][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.530700][T11211] R13: 00007fe074826128 R14: 00007fe074826090 R15: 00007ffca69a15c8 [ 233.530731][T11211] [ 233.707914][T11217] FAULT_INJECTION: forcing a failure. [ 233.707914][T11217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.707946][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.4.1489 Not tainted syzkaller #0 PREEMPT(full) [ 233.707967][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.707978][T11217] Call Trace: [ 233.707985][T11217] [ 233.707993][T11217] dump_stack_lvl+0xe8/0x150 [ 233.708025][T11217] should_fail_ex+0x410/0x560 [ 233.708051][T11217] prepare_alloc_pages+0x223/0x600 [ 233.708078][T11217] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 233.708105][T11217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.708130][T11217] ? __pfx_policy_nodemask+0x10/0x10 [ 233.708151][T11217] ? __get_vm_area_node+0x155/0x2f0 [ 233.708175][T11217] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 233.708200][T11217] ? __vmalloc_noprof+0xd2/0x120 [ 233.708225][T11217] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 233.708245][T11217] ? bpf_prog_alloc+0x3c/0x1a0 [ 233.708264][T11217] ? __sys_bpf+0xd0d/0xd90 [ 233.708283][T11217] ? __x64_sys_bpf+0xba/0xd0 [ 233.708298][T11217] ? do_syscall_64+0x166/0x520 [ 233.708318][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.708341][T11217] alloc_pages_mpol+0x21e/0x390 [ 233.708369][T11217] alloc_pages_noprof+0xb1/0x2b0 [ 233.708395][T11217] get_free_pages_noprof+0xf/0x80 [ 233.708415][T11217] __kasan_populate_vmalloc+0x38/0x1c0 [ 233.708433][T11217] ? do_raw_spin_unlock+0xf5/0x200 [ 233.708463][T11217] alloc_vmap_area+0xd1a/0x1420 [ 233.708501][T11217] ? __pfx_alloc_vmap_area+0x10/0x10 [ 233.708523][T11217] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 233.708544][T11217] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 233.708562][T11217] ? __get_vm_area_node+0x155/0x2f0 [ 233.708592][T11217] __get_vm_area_node+0x200/0x2f0 [ 233.708623][T11217] __vmalloc_node_range_noprof+0x343/0x1540 [ 233.708650][T11217] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 233.708671][T11217] ? __lock_acquire+0x747/0x2de0 [ 233.708713][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.708749][T11217] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 233.708768][T11217] __vmalloc_noprof+0xd2/0x120 [ 233.708794][T11217] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 233.708818][T11217] bpf_prog_alloc_no_stats+0x47/0x560 [ 233.708837][T11217] ? bpf_prog_alloc+0x2a/0x1a0 [ 233.708860][T11217] bpf_prog_alloc+0x3c/0x1a0 [ 233.708889][T11217] bpf_prog_load+0x7f8/0x1c20 [ 233.708917][T11217] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.708961][T11217] __sys_bpf+0xd0d/0xd90 [ 233.708990][T11217] ? __pfx___sys_bpf+0x10/0x10 [ 233.709020][T11217] ? __fget_files+0x2a/0x420 [ 233.709062][T11217] ? ksys_write+0x242/0x270 [ 233.709092][T11217] ? __pfx_ksys_write+0x10/0x10 [ 233.709123][T11217] __x64_sys_bpf+0xba/0xd0 [ 233.709144][T11217] do_syscall_64+0x166/0x520 [ 233.709163][T11217] ? trace_irq_disable+0x3b/0x140 [ 233.709182][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.709201][T11217] ? clear_bhb_loop+0x70/0xc0 [ 233.709224][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.709242][T11217] RIP: 0033:0x7f0b2d99e159 [ 233.709259][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.709274][T11217] RSP: 002b:00007f0b2e839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.709295][T11217] RAX: ffffffffffffffda RBX: 00007f0b2dc25fa0 RCX: 00007f0b2d99e159 [ 233.709309][T11217] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 233.709322][T11217] RBP: 00007f0b2e839090 R08: 0000000000000000 R09: 0000000000000000 [ 233.709333][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.709344][T11217] R13: 00007f0b2dc26038 R14: 00007f0b2dc25fa0 R15: 00007ffc8b496d68 [ 233.709373][T11217] [ 233.709564][T11217] warn_alloc: 3 callbacks suppressed [ 233.709576][T11217] syz.4.1489: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.709650][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.4.1489 Not tainted syzkaller #0 PREEMPT(full) [ 233.709670][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.709681][T11217] Call Trace: [ 233.709688][T11217] [ 233.709695][T11217] dump_stack_lvl+0xe8/0x150 [ 233.709723][T11217] warn_alloc+0x24d/0x270 [ 233.709742][T11217] ? lockdep_hardirqs_on+0x7b/0x110 [ 233.709764][T11217] ? __pfx_warn_alloc+0x10/0x10 [ 233.709781][T11217] ? kfree+0x1c5/0x650 [ 233.709812][T11217] ? __get_vm_area_node+0x219/0x2f0 [ 233.709844][T11217] __vmalloc_node_range_noprof+0x36b/0x1540 [ 233.709872][T11217] ? __lock_acquire+0x747/0x2de0 [ 233.709918][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.709954][T11217] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 233.709972][T11217] __vmalloc_noprof+0xd2/0x120 [ 233.709996][T11217] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 233.710020][T11217] bpf_prog_alloc_no_stats+0x47/0x560 [ 233.710038][T11217] ? bpf_prog_alloc+0x2a/0x1a0 [ 233.710060][T11217] bpf_prog_alloc+0x3c/0x1a0 [ 233.710083][T11217] bpf_prog_load+0x7f8/0x1c20 [ 233.710114][T11217] ? __pfx_bpf_prog_load+0x10/0x10 [ 233.710159][T11217] __sys_bpf+0xd0d/0xd90 [ 233.710188][T11217] ? __pfx___sys_bpf+0x10/0x10 [ 233.710217][T11217] ? __fget_files+0x2a/0x420 [ 233.710258][T11217] ? ksys_write+0x242/0x270 [ 233.710287][T11217] ? __pfx_ksys_write+0x10/0x10 [ 233.710318][T11217] __x64_sys_bpf+0xba/0xd0 [ 233.710339][T11217] do_syscall_64+0x166/0x520 [ 233.710359][T11217] ? trace_irq_disable+0x3b/0x140 [ 233.710377][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.710395][T11217] ? clear_bhb_loop+0x70/0xc0 [ 233.710420][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.710439][T11217] RIP: 0033:0x7f0b2d99e159 [ 233.710456][T11217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.710470][T11217] RSP: 002b:00007f0b2e839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.710489][T11217] RAX: ffffffffffffffda RBX: 00007f0b2dc25fa0 RCX: 00007f0b2d99e159 [ 233.710503][T11217] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 233.710515][T11217] RBP: 00007f0b2e839090 R08: 0000000000000000 R09: 0000000000000000 [ 233.710527][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.710538][T11217] R13: 00007f0b2dc26038 R14: 00007f0b2dc25fa0 R15: 00007ffc8b496d68 [ 233.710568][T11217] [ 233.710835][T11217] Mem-Info: [ 233.710845][T11217] active_anon:9531 inactive_anon:0 isolated_anon:0 [ 233.710845][T11217] active_file:0 inactive_file:43581 isolated_file:0 [ 233.710845][T11217] unevictable:0 dirty:243 writeback:0 [ 233.710845][T11217] slab_reclaimable:11097 slab_unreclaimable:106894 [ 233.710845][T11217] mapped:29635 shmem:522 pagetables:1281 [ 233.710845][T11217] sec_pagetables:0 bounce:0 [ 233.710845][T11217] kernel_misc_reclaimable:0 [ 233.710845][T11217] free:1304252 free_pcp:11375 free_cma:0 [ 233.710903][T11217] Node 0 active_anon:38124kB inactive_anon:0kB active_file:0kB inactive_file:174112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118540kB dirty:968kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:4988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 233.710955][T11217] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 233.711005][T11217] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.711071][T11217] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 233.711106][T11217] Node 0 DMA32 free:1264660kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38124kB inactive_anon:0kB active_file:0kB inactive_file:174112kB unevictable:0kB writepending:968kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:45500kB local_pcp:22176kB free_cma:0kB [ 233.711163][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 233.711194][T11217] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.711246][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 233.711278][T11217] Node 1 Normal free:3936988kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.711333][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 233.711365][T11217] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.711473][T11217] Node 0 DMA32: 1373*4kB (UM) 552*8kB (UME) 270*16kB (UM) 362*32kB (UM) 100*64kB (UM) 57*128kB (UME) 34*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 5*2048kB (UME) 293*4096kB (UM) = 1264724kB [ 233.711767][T11217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 233.711861][T11217] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 4*16kB (UM) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936988kB [ 233.712015][T11217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.712030][T11217] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.712045][T11217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.712060][T11217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.712075][T11217] 44099 total pagecache pages [ 233.712082][T11217] 0 pages in swap cache [ 233.712089][T11217] Free swap = 124996kB [ 233.712096][T11217] Total swap = 124996kB [ 233.712103][T11217] 2097051 pages RAM [ 233.712110][T11217] 0 pages HighMem/MovableOnly [ 233.712116][T11217] 428781 pages reserved [ 233.712123][T11217] 0 pages cma reserved [ 233.938199][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 234.422927][T11231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.177049][T11250] netlink: 'syz.4.1499': attribute type 21 has an invalid length. [ 235.283104][T11250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1499'. [ 235.353278][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 235.698260][T11277] FAULT_INJECTION: forcing a failure. [ 235.698260][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 235.698294][T11277] CPU: 0 UID: 0 PID: 11277 Comm: syz.1.1507 Not tainted syzkaller #0 PREEMPT(full) [ 235.698315][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.698327][T11277] Call Trace: [ 235.698334][T11277] [ 235.698342][T11277] dump_stack_lvl+0xe8/0x150 [ 235.698376][T11277] should_fail_ex+0x410/0x560 [ 235.698402][T11277] should_failslab+0xa8/0x100 [ 235.698429][T11277] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 235.698451][T11277] ? copy_array+0x71/0x100 [ 235.698477][T11277] ? copy_array+0x71/0x100 [ 235.698507][T11277] ? copy_array+0x71/0x100 [ 235.698534][T11277] krealloc_node_align_noprof+0x19a/0x390 [ 235.698559][T11277] copy_array+0x71/0x100 [ 235.698587][T11277] bpf_copy_verifier_state+0xad/0x1170 [ 235.698626][T11277] ? push_stack+0x7e/0x380 [ 235.698651][T11277] ? push_stack+0x7e/0x380 [ 235.698683][T11277] push_stack+0x1b9/0x380 [ 235.698714][T11277] do_check_insn+0xb48b/0x18e70 [ 235.698764][T11277] ? __pfx_do_check_insn+0x10/0x10 [ 235.698796][T11277] ? vscnprintf+0x5c/0x90 [ 235.698821][T11277] ? bpf_verifier_vlog+0x3d1/0x900 [ 235.698858][T11277] ? verbose+0x11d/0x1a0 [ 235.698880][T11277] ? __pfx_verbose+0x10/0x10 [ 235.698899][T11277] ? bpf_push_jmp_history+0x27d/0x6d0 [ 235.698926][T11277] do_check_common+0x3c19/0x5d30 [ 235.698984][T11277] ? __pfx_do_check_common+0x10/0x10 [ 235.699007][T11277] ? __pfx_verbose+0x10/0x10 [ 235.699023][T11277] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 235.699052][T11277] bpf_check+0x2639/0x2e10 [ 235.699079][T11277] ? ktime_get_with_offset+0x93/0x2d0 [ 235.699103][T11277] ? __pfx_bpf_check+0x10/0x10 [ 235.699123][T11277] ? bpf_obj_name_cpy+0x194/0x1e0 [ 235.699151][T11277] bpf_prog_load+0x14d6/0x1c20 [ 235.699182][T11277] ? __pfx_bpf_prog_load+0x10/0x10 [ 235.699223][T11277] __sys_bpf+0xd0d/0xd90 [ 235.699251][T11277] ? __pfx___sys_bpf+0x10/0x10 [ 235.699281][T11277] ? __fget_files+0x2a/0x420 [ 235.699321][T11277] ? ksys_write+0x242/0x270 [ 235.699351][T11277] ? __pfx_ksys_write+0x10/0x10 [ 235.699380][T11277] __x64_sys_bpf+0xba/0xd0 [ 235.699399][T11277] do_syscall_64+0x166/0x520 [ 235.699420][T11277] ? trace_irq_disable+0x3b/0x140 [ 235.699439][T11277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.699455][T11277] ? clear_bhb_loop+0x70/0xc0 [ 235.699477][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.699495][T11277] RIP: 0033:0x7fe947d9e159 [ 235.699512][T11277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.699529][T11277] RSP: 002b:00007fe948ca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.699550][T11277] RAX: ffffffffffffffda RBX: 00007fe948026090 RCX: 00007fe947d9e159 [ 235.699563][T11277] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 235.699576][T11277] RBP: 00007fe948ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 235.699587][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.699598][T11277] R13: 00007fe948026128 R14: 00007fe948026090 R15: 00007ffd9968d4c8 [ 235.699633][T11277] [ 235.723963][T11281] netlink: 'syz.3.1508': attribute type 4 has an invalid length. [ 236.272610][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.330551][T11304] FAULT_INJECTION: forcing a failure. [ 236.330551][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 236.330592][T11304] CPU: 0 UID: 0 PID: 11304 Comm: syz.0.1516 Not tainted syzkaller #0 PREEMPT(full) [ 236.330617][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.330629][T11304] Call Trace: [ 236.330636][T11304] [ 236.330645][T11304] dump_stack_lvl+0xe8/0x150 [ 236.330678][T11304] should_fail_ex+0x410/0x560 [ 236.330704][T11304] should_failslab+0xa8/0x100 [ 236.330730][T11304] __kmalloc_node_noprof+0x100/0x720 [ 236.330748][T11304] ? __get_vm_area_node+0x200/0x2f0 [ 236.330774][T11304] ? __get_vm_area_node+0x283/0x2f0 [ 236.330798][T11304] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 236.330825][T11304] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 236.330859][T11304] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 236.330888][T11304] ? __lock_acquire+0x747/0x2de0 [ 236.330932][T11304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 236.330969][T11304] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.330991][T11304] __vmalloc_noprof+0xd2/0x120 [ 236.331018][T11304] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.331043][T11304] bpf_prog_alloc_no_stats+0x47/0x560 [ 236.331064][T11304] ? bpf_prog_alloc+0x2a/0x1a0 [ 236.331087][T11304] bpf_prog_alloc+0x3c/0x1a0 [ 236.331111][T11304] bpf_prog_load+0x7f8/0x1c20 [ 236.331146][T11304] ? __pfx_bpf_prog_load+0x10/0x10 [ 236.331194][T11304] __sys_bpf+0xd0d/0xd90 [ 236.331227][T11304] ? __pfx___sys_bpf+0x10/0x10 [ 236.331259][T11304] ? __fget_files+0x2a/0x420 [ 236.331303][T11304] ? ksys_write+0x242/0x270 [ 236.331334][T11304] ? __pfx_ksys_write+0x10/0x10 [ 236.331366][T11304] __x64_sys_bpf+0xba/0xd0 [ 236.331388][T11304] do_syscall_64+0x166/0x520 [ 236.331408][T11304] ? trace_irq_disable+0x3b/0x140 [ 236.331426][T11304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.331446][T11304] ? clear_bhb_loop+0x70/0xc0 [ 236.331469][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.331489][T11304] RIP: 0033:0x7fe07459e159 [ 236.331507][T11304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.331524][T11304] RSP: 002b:00007fe0753ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.331546][T11304] RAX: ffffffffffffffda RBX: 00007fe074825fa0 RCX: 00007fe07459e159 [ 236.331561][T11304] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 236.331574][T11304] RBP: 00007fe0753ac090 R08: 0000000000000000 R09: 0000000000000000 [ 236.331593][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.331605][T11304] R13: 00007fe074826038 R14: 00007fe074825fa0 R15: 00007ffca69a15c8 [ 236.331636][T11304] [ 236.740112][T11312] ip6gretap0: entered promiscuous mode [ 236.740290][T11312] macsec1: entered allmulticast mode [ 236.740305][T11312] ip6gretap0: entered allmulticast mode [ 236.743147][T11312] ip6gretap0: left allmulticast mode [ 236.743171][T11312] ip6gretap0: left promiscuous mode [ 236.812161][T11310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.887867][T11321] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 236.923276][T11321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.945013][T11321] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 236.950324][T11321] __nla_validate_parse: 4 callbacks suppressed [ 236.950341][T11321] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1522'. [ 237.110979][T11327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1526'. [ 237.126153][T11327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1526'. [ 237.161317][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 237.163164][T11333] veth0: entered promiscuous mode [ 237.179454][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1524'. [ 237.180937][T11328] veth0: left promiscuous mode [ 237.262538][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1527'. [ 237.537543][T11342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1530'. [ 237.682851][T11353] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 237.682875][T11353] netlink: 'syz.2.1536': attribute type 2 has an invalid length. [ 237.756277][T11355] C: renamed from veth1_to_team (while UP) [ 237.806131][T11355] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 237.806153][T11355] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1533'. [ 237.811090][T11355] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 238.222040][T11376] x_tables: unsorted underflow at hook 4 [ 238.331717][T11378] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 238.767537][T11419] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.1546'. [ 238.934002][T11428] FAULT_INJECTION: forcing a failure. [ 238.934002][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 238.934034][T11428] CPU: 0 UID: 0 PID: 11428 Comm: syz.4.1549 Not tainted syzkaller #0 PREEMPT(full) [ 238.934056][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.934068][T11428] Call Trace: [ 238.934076][T11428] [ 238.934085][T11428] dump_stack_lvl+0xe8/0x150 [ 238.934119][T11428] should_fail_ex+0x410/0x560 [ 238.934146][T11428] should_failslab+0xa8/0x100 [ 238.934173][T11428] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 238.934194][T11428] ? __asan_memcpy+0x40/0x70 [ 238.934219][T11428] ? bpf_push_jmp_history+0x26c/0x6d0 [ 238.934238][T11428] ? bpf_push_jmp_history+0x26c/0x6d0 [ 238.934259][T11428] ? bpf_push_jmp_history+0x26c/0x6d0 [ 238.934278][T11428] krealloc_node_align_noprof+0x19a/0x390 [ 238.934298][T11428] ? bpf_diag_record_branch+0x58/0x90 [ 238.934328][T11428] bpf_push_jmp_history+0x26c/0x6d0 [ 238.934356][T11428] do_check_common+0x2a0a/0x5d30 [ 238.934416][T11428] ? __pfx_do_check_common+0x10/0x10 [ 238.934440][T11428] ? __pfx_verbose+0x10/0x10 [ 238.934456][T11428] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 238.934486][T11428] bpf_check+0x2639/0x2e10 [ 238.934517][T11428] ? ktime_get_with_offset+0x93/0x2d0 [ 238.934542][T11428] ? __pfx_bpf_check+0x10/0x10 [ 238.934567][T11428] ? bpf_obj_name_cpy+0x194/0x1e0 [ 238.934598][T11428] bpf_prog_load+0x14d6/0x1c20 [ 238.934631][T11428] ? __pfx_bpf_prog_load+0x10/0x10 [ 238.934672][T11428] __sys_bpf+0xd0d/0xd90 [ 238.934699][T11428] ? __pfx___sys_bpf+0x10/0x10 [ 238.934730][T11428] ? __fget_files+0x2a/0x420 [ 238.934772][T11428] ? ksys_write+0x242/0x270 [ 238.934803][T11428] ? __pfx_ksys_write+0x10/0x10 [ 238.934835][T11428] __x64_sys_bpf+0xba/0xd0 [ 238.934855][T11428] do_syscall_64+0x166/0x520 [ 238.934884][T11428] ? trace_irq_disable+0x3b/0x140 [ 238.934902][T11428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.934922][T11428] ? clear_bhb_loop+0x70/0xc0 [ 238.934944][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.934962][T11428] RIP: 0033:0x7f0b2d99e159 [ 238.934980][T11428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.934997][T11428] RSP: 002b:00007f0b2e818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.935020][T11428] RAX: ffffffffffffffda RBX: 00007f0b2dc26090 RCX: 00007f0b2d99e159 [ 238.935033][T11428] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 238.935045][T11428] RBP: 00007f0b2e818090 R08: 0000000000000000 R09: 0000000000000000 [ 238.935057][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.935068][T11428] R13: 00007f0b2dc26128 R14: 00007f0b2dc26090 R15: 00007ffc8b496d68 [ 238.935093][T11428] [ 239.866334][T11444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1551'. [ 239.907221][T11446] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 240.596206][T11473] netlink: Conntrack attr has 1 unknown bytes [ 240.596240][T11473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.681197][T11479] netlink: Conntrack attr has 1 unknown bytes [ 240.681239][T11479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.940040][T11492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.953993][T11492] bond2: (slave bond0): making interface the new active one [ 240.955799][T11492] bond2: (slave bond0): Enslaving as an active interface with an up link [ 240.963023][T11492] netlink: 'syz.2.1569': attribute type 4 has an invalid length. [ 241.244054][T11499] lo speed is unknown, defaulting to 1000 [ 241.825041][T11520] unsupported nlmsg_type 40 [ 242.267603][T11534] __nla_validate_parse: 7 callbacks suppressed [ 242.267625][T11534] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1578'. [ 242.318415][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 242.318435][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 242.351656][T11534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1578'. [ 242.372980][T11539] netlink: 'syz.3.1580': attribute type 4 has an invalid length. [ 242.373003][T11539] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1580'. [ 242.579035][T11547] netlink: 'syz.0.1582': attribute type 23 has an invalid length. [ 242.677004][T11556] netlink: 'syz.3.1586': attribute type 4 has an invalid length. [ 242.682053][T11556] netlink: 'syz.3.1586': attribute type 4 has an invalid length. [ 242.777685][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1587'. [ 243.029096][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1590'. [ 243.047018][T11565] FAULT_INJECTION: forcing a failure. [ 243.047018][T11565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.047048][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.3.1589 Not tainted syzkaller #0 PREEMPT(full) [ 243.047070][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.047086][T11565] Call Trace: [ 243.047095][T11565] [ 243.047102][T11565] dump_stack_lvl+0xe8/0x150 [ 243.047133][T11565] should_fail_ex+0x410/0x560 [ 243.047157][T11565] _copy_from_user+0x2d/0xb0 [ 243.047184][T11565] ___sys_sendmsg+0x1c6/0x360 [ 243.047208][T11565] ? __lock_acquire+0x747/0x2de0 [ 243.047231][T11565] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.047286][T11565] ? __fget_files+0x2a/0x420 [ 243.047312][T11565] ? __fget_files+0x3a2/0x420 [ 243.047348][T11565] __x64_sys_sendmsg+0x1b1/0x290 [ 243.047375][T11565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.047416][T11565] do_syscall_64+0x166/0x520 [ 243.047436][T11565] ? trace_irq_disable+0x3b/0x140 [ 243.047455][T11565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.047474][T11565] ? clear_bhb_loop+0x70/0xc0 [ 243.047497][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.047515][T11565] RIP: 0033:0x7f612299e159 [ 243.047532][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.047547][T11565] RSP: 002b:00007f612378d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.047568][T11565] RAX: ffffffffffffffda RBX: 00007f6122c25fa0 RCX: 00007f612299e159 [ 243.047582][T11565] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 000000000000000d [ 243.047601][T11565] RBP: 00007f612378d090 R08: 0000000000000000 R09: 0000000000000000 [ 243.047613][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.047624][T11565] R13: 00007f6122c26038 R14: 00007f6122c25fa0 R15: 00007ffd8b2e1008 [ 243.047653][T11565] [ 243.247974][T11568] FAULT_INJECTION: forcing a failure. [ 243.247974][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 243.248005][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.1.1591 Not tainted syzkaller #0 PREEMPT(full) [ 243.248027][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.248038][T11568] Call Trace: [ 243.248045][T11568] [ 243.248053][T11568] dump_stack_lvl+0xe8/0x150 [ 243.248084][T11568] should_fail_ex+0x410/0x560 [ 243.248110][T11568] should_failslab+0xa8/0x100 [ 243.248135][T11568] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 243.248156][T11568] ? bpf_diag_mod_end+0x4cf/0x6e0 [ 243.248183][T11568] ? bpf_push_jmp_history+0x26c/0x6d0 [ 243.248202][T11568] ? bpf_push_jmp_history+0x26c/0x6d0 [ 243.248224][T11568] ? bpf_push_jmp_history+0x26c/0x6d0 [ 243.248245][T11568] krealloc_node_align_noprof+0x19a/0x390 [ 243.248271][T11568] bpf_push_jmp_history+0x26c/0x6d0 [ 243.248297][T11568] check_mem_access+0xf9e/0x2620 [ 243.248330][T11568] ? __pfx_check_mem_access+0x10/0x10 [ 243.248352][T11568] ? number+0xc60/0xed0 [ 243.248381][T11568] ? __kmalloc_cache_noprof+0x14d/0x600 [ 243.248400][T11568] ? __pfx_number+0x10/0x10 [ 243.248423][T11568] ? print_verifier_state+0x18a7/0x1a40 [ 243.248447][T11568] check_store_reg+0x664/0xe20 [ 243.248483][T11568] do_check_insn+0x9df/0x18e70 [ 243.248510][T11568] ? vscnprintf+0x5c/0x90 [ 243.248536][T11568] ? bpf_verifier_vlog+0x3d1/0x900 [ 243.248569][T11568] ? format_decode+0xdc/0xda0 [ 243.248601][T11568] ? vsnprintf+0x3a0/0xef0 [ 243.248626][T11568] ? __asan_memcpy+0x40/0x70 [ 243.248656][T11568] ? __pfx_do_check_insn+0x10/0x10 [ 243.248689][T11568] ? vscnprintf+0x5c/0x90 [ 243.248714][T11568] ? bpf_verifier_vlog+0x3d1/0x900 [ 243.248752][T11568] ? verbose+0x11d/0x1a0 [ 243.248773][T11568] ? __pfx_verbose+0x10/0x10 [ 243.248801][T11568] do_check_common+0x3c19/0x5d30 [ 243.248857][T11568] ? __pfx_do_check_common+0x10/0x10 [ 243.248879][T11568] ? __pfx_verbose+0x10/0x10 [ 243.248894][T11568] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 243.248922][T11568] bpf_check+0x2639/0x2e10 [ 243.248952][T11568] ? ktime_get_with_offset+0x93/0x2d0 [ 243.248976][T11568] ? __pfx_bpf_check+0x10/0x10 [ 243.248998][T11568] ? bpf_obj_name_cpy+0x194/0x1e0 [ 243.249028][T11568] bpf_prog_load+0x14d6/0x1c20 [ 243.249060][T11568] ? __pfx_bpf_prog_load+0x10/0x10 [ 243.249104][T11568] __sys_bpf+0xd0d/0xd90 [ 243.249132][T11568] ? __pfx___sys_bpf+0x10/0x10 [ 243.249162][T11568] ? __fget_files+0x2a/0x420 [ 243.249202][T11568] ? ksys_write+0x242/0x270 [ 243.249231][T11568] ? __pfx_ksys_write+0x10/0x10 [ 243.249262][T11568] __x64_sys_bpf+0xba/0xd0 [ 243.249283][T11568] do_syscall_64+0x166/0x520 [ 243.249302][T11568] ? trace_irq_disable+0x3b/0x140 [ 243.249320][T11568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.249339][T11568] ? clear_bhb_loop+0x70/0xc0 [ 243.249361][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.249380][T11568] RIP: 0033:0x7fe947d9e159 [ 243.249398][T11568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.249413][T11568] RSP: 002b:00007fe948ca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.249433][T11568] RAX: ffffffffffffffda RBX: 00007fe948026090 RCX: 00007fe947d9e159 [ 243.249448][T11568] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 243.249460][T11568] RBP: 00007fe948ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 243.249475][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.249487][T11568] R13: 00007fe948026128 R14: 00007fe948026090 R15: 00007ffd9968d4c8 [ 243.249516][T11568] [ 243.628992][T11578] netlink: 17644 bytes leftover after parsing attributes in process `syz.4.1592'. [ 243.630881][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 243.745815][ T996] wlan0: Trigger new scan to find an IBSS to join [ 243.922632][T11594] ip6gretap1: entered allmulticast mode [ 244.534066][T11621] syzkaller1: entered promiscuous mode [ 244.534102][T11621] syzkaller1: entered allmulticast mode [ 245.082491][T11642] netlink: 'syz.1.1608': attribute type 12 has an invalid length. [ 245.989907][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1615'. [ 246.785236][ T996] wlan0: Trigger new scan to find an IBSS to join [ 247.342933][T11719] netlink: 'syz.1.1628': attribute type 1 has an invalid length. [ 247.457646][T11723] bond0: (slave veth3): Enslaving as an active interface with a down link [ 247.476257][T11725] __nla_validate_parse: 3 callbacks suppressed [ 247.476276][T11725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1630'. [ 247.521101][T11719] bond0: (slave veth5): Enslaving as an active interface with a down link [ 247.570462][T11719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1628'. [ 247.865381][T11733] FAULT_INJECTION: forcing a failure. [ 247.865381][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 247.869145][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz.4.1632 Not tainted syzkaller #0 PREEMPT(full) [ 247.869173][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.869184][T11733] Call Trace: [ 247.869192][T11733] [ 247.869213][T11733] dump_stack_lvl+0xe8/0x150 [ 247.869247][T11733] should_fail_ex+0x410/0x560 [ 247.869273][T11733] should_failslab+0xa8/0x100 [ 247.869299][T11733] __kmalloc_noprof+0xfe/0x720 [ 247.869317][T11733] ? rcu_is_watching+0x16/0xb0 [ 247.869340][T11733] ? tomoyo_realpath_from_path+0xef/0x640 [ 247.869365][T11733] ? tomoyo_realpath_from_path+0xef/0x640 [ 247.869397][T11733] tomoyo_realpath_from_path+0xef/0x640 [ 247.869429][T11733] ? tomoyo_path_number_perm+0x219/0x5f0 [ 247.869451][T11733] tomoyo_path_number_perm+0x246/0x5f0 [ 247.869475][T11733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.869496][T11733] ? __lock_acquire+0x747/0x2de0 [ 247.869531][T11733] ? hook_file_ioctl+0x1f2/0x600 [ 247.869573][T11733] ? __fget_files+0x2a/0x420 [ 247.869605][T11733] ? __fget_files+0x2a/0x420 [ 247.869630][T11733] ? __fget_files+0x3a2/0x420 [ 247.869655][T11733] ? __fget_files+0x2a/0x420 [ 247.869685][T11733] security_file_ioctl+0xc3/0x2a0 [ 247.869708][T11733] __se_sys_ioctl+0x47/0x170 [ 247.869732][T11733] do_syscall_64+0x166/0x520 [ 247.869753][T11733] ? trace_irq_disable+0x3b/0x140 [ 247.869773][T11733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.869793][T11733] ? clear_bhb_loop+0x70/0xc0 [ 247.869816][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.869835][T11733] RIP: 0033:0x7f0b2d99e159 [ 247.869854][T11733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.869871][T11733] RSP: 002b:00007f0b2e839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.869893][T11733] RAX: ffffffffffffffda RBX: 00007f0b2dc25fa0 RCX: 00007f0b2d99e159 [ 247.869907][T11733] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000007 [ 247.869918][T11733] RBP: 00007f0b2e839090 R08: 0000000000000000 R09: 0000000000000000 [ 247.869930][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.869940][T11733] R13: 00007f0b2dc26038 R14: 00007f0b2dc25fa0 R15: 00007ffc8b496d68 [ 247.869967][T11733] [ 247.871620][T11733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.964070][T11732] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 248.034889][T11738] netlink: 'syz.3.1634': attribute type 11 has an invalid length. [ 248.087538][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 248.230222][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1634'. [ 248.269845][T11730] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 249.121366][T11783] x_tables: duplicate underflow at hook 1 [ 249.206855][T11785] FAULT_INJECTION: forcing a failure. [ 249.206855][T11785] name failslab, interval 1, probability 0, space 0, times 0 [ 249.206890][T11785] CPU: 1 UID: 0 PID: 11785 Comm: syz.4.1648 Not tainted syzkaller #0 PREEMPT(full) [ 249.206911][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.206923][T11785] Call Trace: [ 249.206932][T11785] [ 249.206940][T11785] dump_stack_lvl+0xe8/0x150 [ 249.206977][T11785] should_fail_ex+0x410/0x560 [ 249.207004][T11785] should_failslab+0xa8/0x100 [ 249.207029][T11785] __kmalloc_noprof+0xfe/0x720 [ 249.207049][T11785] ? tomoyo_encode+0x2ad/0x570 [ 249.207070][T11785] ? tomoyo_encode+0x2ad/0x570 [ 249.207105][T11785] tomoyo_encode+0x2ad/0x570 [ 249.207141][T11785] tomoyo_realpath_from_path+0x5fa/0x640 [ 249.207174][T11785] ? tomoyo_path_number_perm+0x219/0x5f0 [ 249.207195][T11785] tomoyo_path_number_perm+0x246/0x5f0 [ 249.207217][T11785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.207237][T11785] ? __lock_acquire+0x747/0x2de0 [ 249.207270][T11785] ? hook_file_ioctl+0x1f2/0x600 [ 249.207314][T11785] ? __fget_files+0x2a/0x420 [ 249.207345][T11785] ? __fget_files+0x2a/0x420 [ 249.207369][T11785] ? __fget_files+0x3a2/0x420 [ 249.207393][T11785] ? __fget_files+0x2a/0x420 [ 249.207421][T11785] security_file_ioctl+0xc3/0x2a0 [ 249.207444][T11785] __se_sys_ioctl+0x47/0x170 [ 249.207469][T11785] do_syscall_64+0x166/0x520 [ 249.207491][T11785] ? trace_irq_disable+0x3b/0x140 [ 249.207511][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.207532][T11785] ? clear_bhb_loop+0x70/0xc0 [ 249.207556][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.207577][T11785] RIP: 0033:0x7f0b2d99e159 [ 249.207595][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.207612][T11785] RSP: 002b:00007f0b2e839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.207634][T11785] RAX: ffffffffffffffda RBX: 00007f0b2dc25fa0 RCX: 00007f0b2d99e159 [ 249.207654][T11785] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000007 [ 249.207667][T11785] RBP: 00007f0b2e839090 R08: 0000000000000000 R09: 0000000000000000 [ 249.207680][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.207692][T11785] R13: 00007f0b2dc26038 R14: 00007f0b2dc25fa0 R15: 00007ffc8b496d68 [ 249.207725][T11785] [ 249.207960][T11785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.238818][T11784] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 249.347892][T11797] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1650'. [ 249.568927][T11788] lo speed is unknown, defaulting to 1000 [ 249.745087][ T137] wlan0: Trigger new scan to find an IBSS to join [ 250.007352][T11823] Bluetooth: ISO socket layer initialized [ 252.867963][T11405] wlan0: Creating new IBSS network, BSSID 1a:c3:d0:b6:a3:1b [ 253.231899][T11846] FAULT_INJECTION: forcing a failure. [ 253.231899][T11846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.231932][T11846] CPU: 1 UID: 0 PID: 11846 Comm: syz.3.1663 Not tainted syzkaller #0 PREEMPT(full) [ 253.231955][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.231967][T11846] Call Trace: [ 253.231974][T11846] [ 253.231983][T11846] dump_stack_lvl+0xe8/0x150 [ 253.232015][T11846] should_fail_ex+0x410/0x560 [ 253.232042][T11846] _copy_from_user+0x2d/0xb0 [ 253.232067][T11846] ___sys_sendmsg+0x1c6/0x360 [ 253.232091][T11846] ? __lock_acquire+0x747/0x2de0 [ 253.232115][T11846] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.232173][T11846] ? __fget_files+0x2a/0x420 [ 253.232198][T11846] ? __fget_files+0x3a2/0x420 [ 253.232236][T11846] __x64_sys_sendmsg+0x1b1/0x290 [ 253.232263][T11846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.232304][T11846] do_syscall_64+0x166/0x520 [ 253.232325][T11846] ? trace_irq_disable+0x3b/0x140 [ 253.232344][T11846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.232363][T11846] ? clear_bhb_loop+0x70/0xc0 [ 253.232393][T11846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.232413][T11846] RIP: 0033:0x7f612299e159 [ 253.232431][T11846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.232448][T11846] RSP: 002b:00007f612378d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.232469][T11846] RAX: ffffffffffffffda RBX: 00007f6122c25fa0 RCX: 00007f612299e159 [ 253.232484][T11846] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 253.232496][T11846] RBP: 00007f612378d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.232509][T11846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.232520][T11846] R13: 00007f6122c26038 R14: 00007f6122c25fa0 R15: 00007ffd8b2e1008 [ 253.232550][T11846] [ 253.284554][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1662'. [ 253.442356][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1662'. [ 253.593141][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'. [ 253.661955][T11858] dvmrp0: entered allmulticast mode [ 253.747386][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 253.747408][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 253.747433][T11867] netlink: 'syz.0.1671': attribute type 11 has an invalid length. [ 253.747447][T11867] netlink: 'syz.0.1671': attribute type 13 has an invalid length. [ 253.902435][T11872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1672'. [ 254.097973][T11880] xt_hashlimit: size too large, truncated to 1048576 [ 254.458037][T11895] tipc: Enabling of bearer rejected, already enabled [ 254.535147][T11899] syzkaller1: entered promiscuous mode [ 254.535170][T11899] syzkaller1: entered allmulticast mode [ 254.897267][T11921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1682'. [ 255.016846][T11920] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1684'. [ 255.062928][T11928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.062946][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 255.063057][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 255.153635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d2a000: rx timeout, send abort [ 255.321111][T11932] bridge7: entered promiscuous mode [ 255.321136][T11932] bridge7: entered allmulticast mode [ 255.524479][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 255.524504][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 255.528365][T11946] netlink: 'syz.0.1690': attribute type 4 has an invalid length. [ 255.594763][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.654067][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a92800: rx timeout, send abort [ 255.655212][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d2a000: abort rx timeout. Force session deactivation [ 255.817362][T11960] netlink: 'syz.3.1696': attribute type 32 has an invalid length. [ 255.823618][T11955] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 255.965226][T11969] FAULT_INJECTION: forcing a failure. [ 255.965226][T11969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.965260][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.1.1698 Not tainted syzkaller #0 PREEMPT(full) [ 255.965282][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.965293][T11969] Call Trace: [ 255.965301][T11969] [ 255.965309][T11969] dump_stack_lvl+0xe8/0x150 [ 255.965341][T11969] should_fail_ex+0x410/0x560 [ 255.965367][T11969] prepare_alloc_pages+0x223/0x600 [ 255.965395][T11969] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 255.965421][T11969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.965442][T11969] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 255.965469][T11969] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.965495][T11969] ? __pfx_policy_nodemask+0x10/0x10 [ 255.965523][T11969] __alloc_pages_noprof+0x10/0x100 [ 255.965545][T11969] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 255.965574][T11969] ? alloc_pages_noprof+0x140/0x2b0 [ 255.965602][T11969] __kasan_populate_vmalloc+0xb7/0x1c0 [ 255.965628][T11969] alloc_vmap_area+0xd1a/0x1420 [ 255.965677][T11969] ? __pfx_alloc_vmap_area+0x10/0x10 [ 255.965700][T11969] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 255.965721][T11969] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 255.965739][T11969] ? __get_vm_area_node+0x155/0x2f0 [ 255.965769][T11969] __get_vm_area_node+0x200/0x2f0 [ 255.965801][T11969] __vmalloc_node_range_noprof+0x343/0x1540 [ 255.965830][T11969] ? bpf_check+0x10ee/0x2e10 [ 255.965896][T11969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.965924][T11969] ? __kasan_kmalloc+0x93/0xb0 [ 255.965947][T11969] ? __kmalloc_cache_noprof+0x321/0x600 [ 255.965966][T11969] ? __kmalloc_cache_noprof+0x14d/0x600 [ 255.965983][T11969] ? bpf_diag_init+0x87/0x140 [ 255.966005][T11969] ? bpf_diag_init+0x87/0x140 [ 255.966029][T11969] ? bpf_check+0x10ee/0x2e10 [ 255.966048][T11969] __vmalloc_noprof+0xd2/0x120 [ 255.966075][T11969] ? bpf_check+0x10ee/0x2e10 [ 255.966098][T11969] bpf_check+0x10ee/0x2e10 [ 255.966129][T11969] ? ktime_get_with_offset+0x93/0x2d0 [ 255.966153][T11969] ? __pfx_bpf_check+0x10/0x10 [ 255.966177][T11969] ? bpf_obj_name_cpy+0x194/0x1e0 [ 255.966208][T11969] bpf_prog_load+0x14d6/0x1c20 [ 255.966241][T11969] ? __pfx_bpf_prog_load+0x10/0x10 [ 255.966287][T11969] __sys_bpf+0xd0d/0xd90 [ 255.966317][T11969] ? __pfx___sys_bpf+0x10/0x10 [ 255.966349][T11969] ? __fget_files+0x2a/0x420 [ 255.966393][T11969] ? ksys_write+0x242/0x270 [ 255.966424][T11969] ? __pfx_ksys_write+0x10/0x10 [ 255.966457][T11969] __x64_sys_bpf+0xba/0xd0 [ 255.966480][T11969] do_syscall_64+0x166/0x520 [ 255.966501][T11969] ? trace_irq_disable+0x3b/0x140 [ 255.966520][T11969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.966540][T11969] ? clear_bhb_loop+0x70/0xc0 [ 255.966565][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.966583][T11969] RIP: 0033:0x7fe947d9e159 [ 255.966601][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.966618][T11969] RSP: 002b:00007fe948cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.966647][T11969] RAX: ffffffffffffffda RBX: 00007fe948025fa0 RCX: 00007fe947d9e159 [ 255.966662][T11969] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 255.966674][T11969] RBP: 00007fe948cc1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.966687][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.966699][T11969] R13: 00007fe948026038 R14: 00007fe948025fa0 R15: 00007ffd9968d4c8 [ 255.966730][T11969] [ 255.966824][T11969] warn_alloc: 1 callbacks suppressed [ 255.966836][T11969] syz.1.1698: vmalloc error: size 3128, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 255.966894][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.1.1698 Not tainted syzkaller #0 PREEMPT(full) [ 255.966915][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.966927][T11969] Call Trace: [ 255.966934][T11969] [ 255.966942][T11969] dump_stack_lvl+0xe8/0x150 [ 255.966969][T11969] warn_alloc+0x24d/0x270 [ 255.966989][T11969] ? lockdep_hardirqs_on+0x7b/0x110 [ 255.967013][T11969] ? __pfx_warn_alloc+0x10/0x10 [ 255.967031][T11969] ? kfree+0x1c5/0x650 [ 255.967067][T11969] ? __get_vm_area_node+0x219/0x2f0 [ 255.967102][T11969] __vmalloc_node_range_noprof+0x36b/0x1540 [ 255.967153][T11969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 255.967180][T11969] ? __kasan_kmalloc+0x93/0xb0 [ 255.967200][T11969] ? __kmalloc_cache_noprof+0x321/0x600 [ 255.967220][T11969] ? __kmalloc_cache_noprof+0x14d/0x600 [ 255.967237][T11969] ? bpf_diag_init+0x87/0x140 [ 255.967257][T11969] ? bpf_diag_init+0x87/0x140 [ 255.967280][T11969] ? bpf_check+0x10ee/0x2e10 [ 255.967297][T11969] __vmalloc_noprof+0xd2/0x120 [ 255.967323][T11969] ? bpf_check+0x10ee/0x2e10 [ 255.967345][T11969] bpf_check+0x10ee/0x2e10 [ 255.967374][T11969] ? ktime_get_with_offset+0x93/0x2d0 [ 255.967398][T11969] ? __pfx_bpf_check+0x10/0x10 [ 255.967421][T11969] ? bpf_obj_name_cpy+0x194/0x1e0 [ 255.967449][T11969] bpf_prog_load+0x14d6/0x1c20 [ 255.967481][T11969] ? __pfx_bpf_prog_load+0x10/0x10 [ 255.967527][T11969] __sys_bpf+0xd0d/0xd90 [ 255.967556][T11969] ? __pfx___sys_bpf+0x10/0x10 [ 255.967588][T11969] ? __fget_files+0x2a/0x420 [ 255.967629][T11969] ? ksys_write+0x242/0x270 [ 255.967669][T11969] ? __pfx_ksys_write+0x10/0x10 [ 255.967701][T11969] __x64_sys_bpf+0xba/0xd0 [ 255.967723][T11969] do_syscall_64+0x166/0x520 [ 255.967743][T11969] ? trace_irq_disable+0x3b/0x140 [ 255.967762][T11969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.967781][T11969] ? clear_bhb_loop+0x70/0xc0 [ 255.967805][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.967824][T11969] RIP: 0033:0x7fe947d9e159 [ 255.967841][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.967857][T11969] RSP: 002b:00007fe948cc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.967878][T11969] RAX: ffffffffffffffda RBX: 00007fe948025fa0 RCX: 00007fe947d9e159 [ 255.967892][T11969] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 255.967905][T11969] RBP: 00007fe948cc1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.967918][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.967929][T11969] R13: 00007fe948026038 R14: 00007fe948025fa0 R15: 00007ffd9968d4c8 [ 255.967960][T11969] [ 255.968284][T11969] Mem-Info: [ 255.968295][T11969] active_anon:9642 inactive_anon:0 isolated_anon:0 [ 255.968295][T11969] active_file:0 inactive_file:43807 isolated_file:0 [ 255.968295][T11969] unevictable:0 dirty:505 writeback:0 [ 255.968295][T11969] slab_reclaimable:11241 slab_unreclaimable:114141 [ 255.968295][T11969] mapped:29829 shmem:653 pagetables:1229 [ 255.968295][T11969] sec_pagetables:0 bounce:0 [ 255.968295][T11969] kernel_misc_reclaimable:0 [ 255.968295][T11969] free:1291906 free_pcp:15490 free_cma:0 [ 255.968336][T11969] Node 0 active_anon:38568kB inactive_anon:0kB active_file:0kB inactive_file:175016kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119316kB dirty:2016kB writeback:0kB shmem:2612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13836kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 255.968376][T11969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 255.968412][T11969] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.968518][T11969] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 255.968550][T11969] Node 0 DMA32 free:1215280kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38568kB inactive_anon:0kB active_file:0kB inactive_file:175016kB unevictable:0kB writepending:2016kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:61960kB local_pcp:40668kB free_cma:0kB [ 255.968620][T11969] lowmem_reserve[]: 0 0 0 0 0 [ 255.968653][T11969] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.968692][T11969] lowmem_reserve[]: 0 0 0 0 0 [ 255.968717][T11969] Node 1 Normal free:3936984kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.968759][T11969] lowmem_reserve[]: 0 0 0 0 0 [ 255.968785][T11969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.968874][T11969] Node 0 DMA32: 861*4kB (UME) 658*8kB (UME) 308*16kB (UME) 397*32kB (UME) 52*64kB (UME) 15*128kB (UM) 20*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 7*2048kB (UME) 283*4096kB (UM) = 1215332kB [ 255.969000][T11969] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 255.969083][T11969] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 4*16kB (UM) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936984kB [ 255.969202][T11969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.969216][T11969] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.969228][T11969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.969239][T11969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.969250][T11969] 44456 total pagecache pages [ 255.969257][T11969] 0 pages in swap cache [ 255.969262][T11969] Free swap = 124996kB [ 255.969268][T11969] Total swap = 124996kB [ 255.969274][T11969] 2097051 pages RAM [ 255.969280][T11969] 0 pages HighMem/MovableOnly [ 255.969286][T11969] 428781 pages reserved [ 255.969292][T11969] 0 pages cma reserved [ 256.154116][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058a92800: abort rx timeout. Force session deactivation [ 257.110826][T11984] tipc: Enabling of bearer rejected, already enabled [ 257.540741][T12015] FAULT_INJECTION: forcing a failure. [ 257.540741][T12015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.540772][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.3.1708 Not tainted syzkaller #0 PREEMPT(full) [ 257.540793][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.540804][T12015] Call Trace: [ 257.540811][T12015] [ 257.540819][T12015] dump_stack_lvl+0xe8/0x150 [ 257.540852][T12015] should_fail_ex+0x410/0x560 [ 257.540878][T12015] _copy_from_iter+0x1d3/0x1660 [ 257.540899][T12015] ? __alloc_skb+0x27a/0x7a0 [ 257.540923][T12015] ? __alloc_skb+0x27a/0x7a0 [ 257.540946][T12015] ? __alloc_skb+0x27a/0x7a0 [ 257.540966][T12015] ? __pfx__copy_from_iter+0x10/0x10 [ 257.540984][T12015] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 257.541033][T12015] ? __alloc_skb+0x27a/0x7a0 [ 257.541051][T12015] ? __alloc_skb+0x27a/0x7a0 [ 257.541076][T12015] ? netlink_sendmsg+0x650/0xb40 [ 257.541103][T12015] ? skb_put+0x112/0x210 [ 257.541126][T12015] netlink_sendmsg+0x6c0/0xb40 [ 257.541163][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.541198][T12015] ? apparmor_socket_sendmsg+0x98/0x360 [ 257.541227][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.541252][T12015] sock_sendmsg_nosec+0x13a/0x180 [ 257.541282][T12015] ____sys_sendmsg+0x54e/0x850 [ 257.541310][T12015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.541341][T12015] ? import_iovec+0x73/0xa0 [ 257.541367][T12015] ___sys_sendmsg+0x2a5/0x360 [ 257.541388][T12015] ? __lock_acquire+0x747/0x2de0 [ 257.541412][T12015] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.541477][T12015] ? __fget_files+0x2a/0x420 [ 257.541501][T12015] ? __fget_files+0x3a2/0x420 [ 257.541534][T12015] __x64_sys_sendmsg+0x1b1/0x290 [ 257.541561][T12015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.541609][T12015] do_syscall_64+0x166/0x520 [ 257.541629][T12015] ? trace_irq_disable+0x3b/0x140 [ 257.541653][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.541672][T12015] ? clear_bhb_loop+0x70/0xc0 [ 257.541694][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.541712][T12015] RIP: 0033:0x7f612299e159 [ 257.541729][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.541746][T12015] RSP: 002b:00007f612378d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.541766][T12015] RAX: ffffffffffffffda RBX: 00007f6122c25fa0 RCX: 00007f612299e159 [ 257.541780][T12015] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 257.541792][T12015] RBP: 00007f612378d090 R08: 0000000000000000 R09: 0000000000000000 [ 257.541804][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.541816][T12015] R13: 00007f6122c26038 R14: 00007f6122c25fa0 R15: 00007ffd8b2e1008 [ 257.541847][T12015] [ 257.752599][T12012] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 257.814049][T11994] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 257.868893][T12026] sctp: [Deprecated]: syz.3.1711 (pid 12026) Use of int in max_burst socket option. [ 257.868893][T12026] Use struct sctp_assoc_value instead [ 258.470324][ T6172] udevd[6172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 258.867608][T12058] FAULT_INJECTION: forcing a failure. [ 258.867608][T12058] name failslab, interval 1, probability 0, space 0, times 0 [ 258.867641][T12058] CPU: 1 UID: 0 PID: 12058 Comm: syz.3.1720 Not tainted syzkaller #0 PREEMPT(full) [ 258.867663][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.867674][T12058] Call Trace: [ 258.867681][T12058] [ 258.867689][T12058] dump_stack_lvl+0xe8/0x150 [ 258.867720][T12058] should_fail_ex+0x410/0x560 [ 258.867746][T12058] should_failslab+0xa8/0x100 [ 258.867772][T12058] __kmalloc_cache_noprof+0xa3/0x600 [ 258.867791][T12058] ? rtnl_newlink+0x147/0x1c30 [ 258.867810][T12058] ? rtnl_newlink+0x147/0x1c30 [ 258.867832][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.867854][T12058] rtnl_newlink+0x147/0x1c30 [ 258.867880][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.867904][T12058] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.867925][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.867948][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.867974][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.868005][T12058] ? lock_acquire+0x115/0x350 [ 258.868031][T12058] ? lock_acquire+0x115/0x350 [ 258.868059][T12058] ? is_bpf_text_address+0x26/0x2b0 [ 258.868089][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.868114][T12058] ? __kernel_text_address+0xd/0x30 [ 258.868135][T12058] ? unwind_get_return_address+0x4d/0x90 [ 258.868158][T12058] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.868178][T12058] ? arch_stack_walk+0xfb/0x150 [ 258.868210][T12058] ? lock_acquire+0x115/0x350 [ 258.868232][T12058] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.868268][T12058] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.868289][T12058] rtnetlink_rcv_msg+0x802/0xc00 [ 258.868310][T12058] ? netlink_sendmsg+0x5d4/0xb40 [ 258.868341][T12058] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 258.868363][T12058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.868387][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.868427][T12058] netlink_rcv_skb+0x226/0x4a0 [ 258.868456][T12058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.868480][T12058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.868520][T12058] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.868547][T12058] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.868580][T12058] netlink_unicast+0x7bd/0x940 [ 258.868615][T12058] netlink_sendmsg+0x813/0xb40 [ 258.868651][T12058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.868686][T12058] ? apparmor_socket_sendmsg+0x98/0x360 [ 258.868711][T12058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.868738][T12058] sock_sendmsg_nosec+0x13a/0x180 [ 258.868770][T12058] ____sys_sendmsg+0x54e/0x850 [ 258.868800][T12058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.868835][T12058] ? import_iovec+0x73/0xa0 [ 258.868862][T12058] ___sys_sendmsg+0x2a5/0x360 [ 258.868886][T12058] ? __lock_acquire+0x747/0x2de0 [ 258.868908][T12058] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.868969][T12058] ? __fget_files+0x2a/0x420 [ 258.868995][T12058] ? __fget_files+0x3a2/0x420 [ 258.869031][T12058] __x64_sys_sendmsg+0x1b1/0x290 [ 258.869059][T12058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.869103][T12058] do_syscall_64+0x166/0x520 [ 258.869124][T12058] ? trace_irq_disable+0x3b/0x140 [ 258.869143][T12058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.869162][T12058] ? clear_bhb_loop+0x70/0xc0 [ 258.869186][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.869205][T12058] RIP: 0033:0x7f612299e159 [ 258.869224][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.869241][T12058] RSP: 002b:00007f612378d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.869262][T12058] RAX: ffffffffffffffda RBX: 00007f6122c25fa0 RCX: 00007f612299e159 [ 258.869277][T12058] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 258.869290][T12058] RBP: 00007f612378d090 R08: 0000000000000000 R09: 0000000000000000 [ 258.869302][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.869314][T12058] R13: 00007f6122c26038 R14: 00007f6122c25fa0 R15: 00007ffd8b2e1008 [ 258.869346][T12058] [ 259.789449][T12089] __nla_validate_parse: 9 callbacks suppressed [ 259.790659][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 259.813456][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1728'. [ 259.833747][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 260.096299][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1732'. [ 260.097265][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1732'. [ 260.098917][T12105] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1732'. [ 262.553634][T12076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.791474][T12120] Bluetooth: MGMT ver 1.23 [ 263.066027][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 263.272904][T12140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1742'. [ 263.312776][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 263.719597][T12167] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 263.969496][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 263.969536][T12180] netlink: 'syz.0.1758': attribute type 3 has an invalid length. [ 263.987157][T12180] geneve2: entered promiscuous mode [ 263.987178][T12180] geneve2: entered allmulticast mode [ 264.177527][T12191] bridge0: port 3(syz_tun) entered blocking state [ 264.177667][T12191] bridge0: port 3(syz_tun) entered forwarding state [ 264.178052][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.178177][T12191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.178400][T12191] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.178523][T12191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.183986][T12191] bridge0: entered promiscuous mode [ 264.239656][T12191] 8021q: adding VLAN 0 to HW filter on device .` [ 264.253760][T12198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.371215][T12191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.382483][T12191] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 264.410970][T12191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.652571][T12213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.835955][T12216] macsec1: entered promiscuous mode [ 264.920093][T12226] __nla_validate_parse: 3 callbacks suppressed [ 264.920113][T12226] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1770'. [ 265.159492][T12247] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 265.538596][T12266] FAULT_INJECTION: forcing a failure. [ 265.538596][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 265.538627][T12266] CPU: 1 UID: 0 PID: 12266 Comm: syz.2.1777 Not tainted syzkaller #0 PREEMPT(full) [ 265.538646][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.538655][T12266] Call Trace: [ 265.538662][T12266] [ 265.538669][T12266] dump_stack_lvl+0xe8/0x150 [ 265.538699][T12266] should_fail_ex+0x410/0x560 [ 265.538720][T12266] should_failslab+0xa8/0x100 [ 265.538740][T12266] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 265.538757][T12266] ? copy_array+0x71/0x100 [ 265.538777][T12266] ? copy_array+0x71/0x100 [ 265.538799][T12266] ? copy_array+0x71/0x100 [ 265.538820][T12266] krealloc_node_align_noprof+0x19a/0x390 [ 265.538836][T12266] ? __kmalloc_cache_noprof+0x14d/0x600 [ 265.538849][T12266] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 265.538873][T12266] copy_array+0x71/0x100 [ 265.538895][T12266] bpf_copy_verifier_state+0x9b0/0x1170 [ 265.538925][T12266] bpf_is_state_visited+0x377d/0x47d0 [ 265.538968][T12266] do_check_common+0x2848/0x5d30 [ 265.539027][T12266] ? __pfx_do_check_common+0x10/0x10 [ 265.539044][T12266] ? __pfx_verbose+0x10/0x10 [ 265.539057][T12266] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 265.539081][T12266] bpf_check+0x2639/0x2e10 [ 265.539108][T12266] ? ktime_get_with_offset+0x93/0x2d0 [ 265.539130][T12266] ? __pfx_bpf_check+0x10/0x10 [ 265.539149][T12266] ? bpf_obj_name_cpy+0x194/0x1e0 [ 265.539177][T12266] bpf_prog_load+0x14d6/0x1c20 [ 265.539206][T12266] ? __pfx_bpf_prog_load+0x10/0x10 [ 265.539241][T12266] __sys_bpf+0xd0d/0xd90 [ 265.539264][T12266] ? __pfx___sys_bpf+0x10/0x10 [ 265.539290][T12266] ? __fget_files+0x2a/0x420 [ 265.539330][T12266] ? rcu_is_watching+0x16/0xb0 [ 265.539352][T12266] __x64_sys_bpf+0xba/0xd0 [ 265.539370][T12266] do_syscall_64+0x166/0x520 [ 265.539388][T12266] ? trace_irq_disable+0x3b/0x140 [ 265.539405][T12266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.539427][T12266] ? clear_bhb_loop+0x70/0xc0 [ 265.539449][T12266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.539466][T12266] RIP: 0033:0x7fd9b039e159 [ 265.539481][T12266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.539495][T12266] RSP: 002b:00007fd9b12c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.539514][T12266] RAX: ffffffffffffffda RBX: 00007fd9b0626090 RCX: 00007fd9b039e159 [ 265.539527][T12266] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 265.539539][T12266] RBP: 00007fd9b12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 265.539550][T12266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.539561][T12266] R13: 00007fd9b0626128 R14: 00007fd9b0626090 R15: 00007ffdaf566f08 [ 265.539589][T12266] [ 265.792188][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 266.257258][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 266.293093][T12288] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 266.391356][T12287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1783'. [ 266.607911][T12303] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1785'. [ 266.969104][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 267.394004][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1790'. [ 267.447423][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 267.447446][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 267.492515][T12339] bond2: (slave bond0): Releasing backup interface [ 267.500831][T12339] netlink: 'syz.3.1792': attribute type 4 has an invalid length. [ 267.500860][T12339] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1792'. [ 267.640362][T12346] FAULT_INJECTION: forcing a failure. [ 267.640362][T12346] name failslab, interval 1, probability 0, space 0, times 0 [ 267.640396][T12346] CPU: 1 UID: 0 PID: 12346 Comm: syz.1.1794 Not tainted syzkaller #0 PREEMPT(full) [ 267.640418][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.640430][T12346] Call Trace: [ 267.640437][T12346] [ 267.640446][T12346] dump_stack_lvl+0xe8/0x150 [ 267.640477][T12346] should_fail_ex+0x410/0x560 [ 267.640503][T12346] should_failslab+0xa8/0x100 [ 267.640528][T12346] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 267.640551][T12346] ? copy_array+0x71/0x100 [ 267.640577][T12346] ? copy_array+0x71/0x100 [ 267.640605][T12346] ? copy_array+0x71/0x100 [ 267.640631][T12346] krealloc_node_align_noprof+0x19a/0x390 [ 267.640652][T12346] ? __kmalloc_cache_noprof+0x14d/0x600 [ 267.640670][T12346] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 267.640701][T12346] copy_array+0x71/0x100 [ 267.640732][T12346] bpf_copy_verifier_state+0x9b0/0x1170 [ 267.640766][T12346] bpf_is_state_visited+0x377d/0x47d0 [ 267.640820][T12346] do_check_common+0x2848/0x5d30 [ 267.640884][T12346] ? __pfx_do_check_common+0x10/0x10 [ 267.640905][T12346] ? __pfx_verbose+0x10/0x10 [ 267.640921][T12346] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 267.640948][T12346] bpf_check+0x2639/0x2e10 [ 267.640980][T12346] ? ktime_get_with_offset+0x93/0x2d0 [ 267.641005][T12346] ? __pfx_bpf_check+0x10/0x10 [ 267.641028][T12346] ? bpf_obj_name_cpy+0x194/0x1e0 [ 267.641059][T12346] bpf_prog_load+0x14d6/0x1c20 [ 267.641093][T12346] ? __pfx_bpf_prog_load+0x10/0x10 [ 267.641133][T12346] __sys_bpf+0xd0d/0xd90 [ 267.641163][T12346] ? __pfx___sys_bpf+0x10/0x10 [ 267.641194][T12346] ? __fget_files+0x2a/0x420 [ 267.641237][T12346] ? ksys_write+0x242/0x270 [ 267.641268][T12346] ? __pfx_ksys_write+0x10/0x10 [ 267.641301][T12346] __x64_sys_bpf+0xba/0xd0 [ 267.641323][T12346] do_syscall_64+0x166/0x520 [ 267.641344][T12346] ? trace_irq_disable+0x3b/0x140 [ 267.641362][T12346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.641383][T12346] ? clear_bhb_loop+0x70/0xc0 [ 267.641408][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.641427][T12346] RIP: 0033:0x7fe947d9e159 [ 267.641446][T12346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.641463][T12346] RSP: 002b:00007fe948ca0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.641484][T12346] RAX: ffffffffffffffda RBX: 00007fe948026090 RCX: 00007fe947d9e159 [ 267.641499][T12346] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 267.641512][T12346] RBP: 00007fe948ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 267.641525][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.641537][T12346] R13: 00007fe948026128 R14: 00007fe948026090 R15: 00007ffd9968d4c8 [ 267.641567][T12346] [ 267.948963][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.948991][T12356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.950659][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.950678][T12356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.765823][T12397] netlink: 'syz.1.1806': attribute type 4 has an invalid length. [ 269.301437][T12416] syzkaller0: entered promiscuous mode [ 269.301460][T12416] syzkaller0: entered allmulticast mode [ 269.359383][T12422] FAULT_INJECTION: forcing a failure. [ 269.359383][T12422] name failslab, interval 1, probability 0, space 0, times 0 [ 269.359416][T12422] CPU: 1 UID: 0 PID: 12422 Comm: syz.0.1813 Not tainted syzkaller #0 PREEMPT(full) [ 269.359438][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.359450][T12422] Call Trace: [ 269.359458][T12422] [ 269.359466][T12422] dump_stack_lvl+0xe8/0x150 [ 269.359499][T12422] should_fail_ex+0x410/0x560 [ 269.359526][T12422] should_failslab+0xa8/0x100 [ 269.359552][T12422] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 269.359575][T12422] ? copy_array+0x71/0x100 [ 269.359601][T12422] ? copy_array+0x71/0x100 [ 269.359630][T12422] ? copy_array+0x71/0x100 [ 269.359659][T12422] krealloc_node_align_noprof+0x19a/0x390 [ 269.359680][T12422] ? __kmalloc_cache_noprof+0x14d/0x600 [ 269.359698][T12422] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 269.359739][T12422] copy_array+0x71/0x100 [ 269.359768][T12422] bpf_copy_verifier_state+0x9b0/0x1170 [ 269.359807][T12422] bpf_is_state_visited+0x377d/0x47d0 [ 269.359860][T12422] do_check_common+0x2848/0x5d30 [ 269.359919][T12422] ? __pfx_do_check_common+0x10/0x10 [ 269.359942][T12422] ? __pfx_verbose+0x10/0x10 [ 269.359958][T12422] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 269.359988][T12422] bpf_check+0x2639/0x2e10 [ 269.360020][T12422] ? ktime_get_with_offset+0x93/0x2d0 [ 269.360044][T12422] ? __pfx_bpf_check+0x10/0x10 [ 269.360071][T12422] ? bpf_obj_name_cpy+0x194/0x1e0 [ 269.360102][T12422] bpf_prog_load+0x14d6/0x1c20 [ 269.360135][T12422] ? __pfx_bpf_prog_load+0x10/0x10 [ 269.360181][T12422] __sys_bpf+0xd0d/0xd90 [ 269.360210][T12422] ? __pfx___sys_bpf+0x10/0x10 [ 269.360241][T12422] ? __fget_files+0x2a/0x420 [ 269.360283][T12422] ? ksys_write+0x242/0x270 [ 269.360314][T12422] ? __pfx_ksys_write+0x10/0x10 [ 269.360347][T12422] __x64_sys_bpf+0xba/0xd0 [ 269.360369][T12422] do_syscall_64+0x166/0x520 [ 269.360389][T12422] ? trace_irq_disable+0x3b/0x140 [ 269.360409][T12422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.360429][T12422] ? clear_bhb_loop+0x70/0xc0 [ 269.360452][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.360472][T12422] RIP: 0033:0x7fe07459e159 [ 269.360490][T12422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.360507][T12422] RSP: 002b:00007fe07538b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.360528][T12422] RAX: ffffffffffffffda RBX: 00007fe074826090 RCX: 00007fe07459e159 [ 269.360543][T12422] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 269.360556][T12422] RBP: 00007fe07538b090 R08: 0000000000000000 R09: 0000000000000000 [ 269.360569][T12422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.360580][T12422] R13: 00007fe074826128 R14: 00007fe074826090 R15: 00007ffca69a15c8 [ 269.360610][T12422] [ 269.861442][T12435] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 270.099701][T12446] __nla_validate_parse: 6 callbacks suppressed [ 270.099723][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 270.366524][T12450] ipvlan2: entered promiscuous mode [ 270.370709][T12450] bridge0: port 4(ipvlan2) entered blocking state [ 270.370884][T12450] bridge0: port 4(ipvlan2) entered disabled state [ 270.371018][T12450] ipvlan2: entered allmulticast mode [ 270.371033][T12450] bridge0: entered allmulticast mode [ 270.417869][T12450] ipvlan2: left allmulticast mode [ 270.417888][T12450] bridge0: left allmulticast mode [ 270.591638][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1825'. [ 271.020818][T12471] syzkaller0: entered promiscuous mode [ 271.020840][T12471] syzkaller0: entered allmulticast mode [ 271.040682][T12487] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 271.056137][T12487] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 271.057512][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 271.093273][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.109898][T12487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1831'. [ 271.173204][T12491] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1832'. [ 271.316712][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1833'. [ 271.316749][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 271.464799][T12498] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 271.626903][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 272.077326][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1838'. [ 272.132521][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 274.301265][T12548] bridge0: port 4(dummy0) entered disabled state [ 274.301420][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.302905][T12548] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.923839][T12548] ------------[ cut here ]------------ [ 274.923853][T12548] !chanctx_conf [ 274.923864][T12548] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: syz.1.1849/12548 [ 274.943782][T12548] Modules linked in: [ 274.948260][T12548] CPU: 1 UID: 0 PID: 12548 Comm: syz.1.1849 Not tainted syzkaller #0 PREEMPT(full) [ 274.957693][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.967806][T12548] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.973822][T12548] Code: 14 43 f6 e9 b1 fe ff ff e8 85 69 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 77 69 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 69 69 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 274.993485][T12548] RSP: 0018:ffffc90002546498 EFLAGS: 00010293 [ 274.999590][T12548] RAX: ffffffff8b606147 RBX: ffffffff8b605dbf RCX: ffff888020be1f40 [ 275.007699][T12548] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 275.015707][T12548] RBP: 00000000ffffffff R08: ffffffff8b605dbf R09: 0000000000000000 [ 275.023720][T12548] R10: dffffc0000000000 R11: ffffed100ce1fef6 R12: ffff88801eb88ec0 [ 275.031741][T12548] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 275.039749][T12548] FS: 00007fe948cc16c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 275.048740][T12548] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.055361][T12548] CR2: 00007fd9b12a6d58 CR3: 000000002595e000 CR4: 00000000003526f0 [ 275.063345][T12548] Call Trace: [ 275.066667][T12548] [ 275.069610][T12548] mesh_plink_frame_tx+0x73d/0xc30 [ 275.074793][T12548] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 275.080436][T12548] ? mesh_plink_block+0x70/0xd0 [ 275.085353][T12548] mesh_plink_deactivate+0x18b/0x2f0 [ 275.090655][T12548] mesh_sta_cleanup+0x42/0x150 [ 275.095487][T12548] cleanup_single_sta+0x3ff/0x660 [ 275.100536][T12548] __sta_info_flush+0x5bb/0x700 [ 275.105460][T12548] ? __pfx___sta_info_flush+0x10/0x10 [ 275.110857][T12548] ieee80211_do_stop+0x3cd/0x2410 [ 275.115972][T12548] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 275.121493][T12548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.127373][T12548] ieee80211_stop+0x1ab/0x200 [ 275.132065][T12548] ? __pfx_ieee80211_stop+0x10/0x10 [ 275.137334][T12548] __dev_close_many+0x366/0x6e0 [ 275.142211][T12548] ? __pfx___dev_close_many+0x10/0x10 [ 275.147634][T12548] ? __dev_change_flags+0x2e2/0x820 [ 275.152860][T12548] __dev_change_flags+0x3f5/0x820 [ 275.157958][T12548] ? __pfx___dev_change_flags+0x10/0x10 [ 275.163540][T12548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.169594][T12548] netif_change_flags+0x7c/0x1b0 [ 275.174585][T12548] do_setlink+0xdd6/0x47a0 [ 275.179039][T12548] ? __pfx_do_setlink+0x10/0x10 [ 275.183913][T12548] ? rcu_is_watching+0x16/0xb0 [ 275.188745][T12548] ? trace_sched_exit_tp+0x3a/0x130 [ 275.193967][T12548] ? kasan_save_track+0x4f/0x80 [ 275.198894][T12548] ? __pfx___schedule+0x10/0x10 [ 275.203866][T12548] ? __mutex_lock+0x30b/0x1550 [ 275.207581][T12587] __nla_validate_parse: 7 callbacks suppressed [ 275.207596][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 275.223687][T12548] ? irqentry_exit+0x218/0x910 [ 275.228471][T12548] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.233673][T12548] ? irqentry_exit+0x218/0x910 [ 275.238455][T12548] ? trace_irq_disable+0x3b/0x140 [ 275.243523][T12548] rtnl_newlink+0x147c/0x1c30 [ 275.248250][T12548] ? __pfx_rtnl_newlink+0x10/0x10 [ 275.253290][T12548] ? sock_sendmsg_nosec+0x13a/0x180 [ 275.258521][T12548] ? ____sys_sendmsg+0x54e/0x850 [ 275.263467][T12548] ? ___sys_sendmsg+0x2a5/0x360 [ 275.268355][T12548] ? __x64_sys_sendmsg+0x1b1/0x290 [ 275.273473][T12548] ? do_syscall_64+0x166/0x520 [ 275.278279][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.284388][T12548] ? kasan_quarantine_put+0xbb/0x1f0 [ 275.289670][T12548] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.294891][T12548] ? nlmon_xmit+0xb0/0x100 [ 275.299315][T12548] ? kmem_cache_free+0x182/0x650 [ 275.304318][T12548] ? __lock_acquire+0x747/0x2de0 [ 275.309294][T12548] ? __local_bh_enable_ip+0xd6/0x140 [ 275.314615][T12548] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.319826][T12548] ? __dev_queue_xmit+0x29b/0x3820 [ 275.324998][T12548] ? __local_bh_enable_ip+0xd6/0x140 [ 275.330291][T12548] ? __dev_queue_xmit+0x29b/0x3820 [ 275.335433][T12548] ? lock_acquire+0x115/0x350 [ 275.340117][T12548] ? __pfx_rtnl_newlink+0x10/0x10 [ 275.345191][T12548] ? __pfx_rtnl_newlink+0x10/0x10 [ 275.350225][T12548] rtnetlink_rcv_msg+0x802/0xc00 [ 275.355217][T12548] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 275.360347][T12548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.365829][T12548] ? ref_tracker_free+0x689/0x830 [ 275.370869][T12548] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.376311][T12548] ? __asan_memcpy+0x40/0x70 [ 275.380922][T12548] ? __skb_clone+0x5c/0x6c0 [ 275.385487][T12548] netlink_rcv_skb+0x226/0x4a0 [ 275.390273][T12548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.395791][T12548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.401111][T12548] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.406373][T12548] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.411594][T12548] netlink_unicast+0x7bd/0x940 [ 275.416425][T12548] netlink_sendmsg+0x813/0xb40 [ 275.421219][T12548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.426574][T12548] ? apparmor_socket_sendmsg+0x98/0x360 [ 275.432133][T12548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.437476][T12548] sock_sendmsg_nosec+0x13a/0x180 [ 275.442524][T12548] ____sys_sendmsg+0x54e/0x850 [ 275.447352][T12548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.452667][T12548] ? import_iovec+0x73/0xa0 [ 275.457238][T12548] ___sys_sendmsg+0x2a5/0x360 [ 275.461934][T12548] ? __lock_acquire+0x747/0x2de0 [ 275.466924][T12548] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.472141][T12548] ? futex_wait+0x2a2/0x390 [ 275.476732][T12548] ? __fget_files+0x2a/0x420 [ 275.481331][T12548] ? __fget_files+0x3a2/0x420 [ 275.486076][T12548] __x64_sys_sendmsg+0x1b1/0x290 [ 275.491031][T12548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.496566][T12548] do_syscall_64+0x166/0x520 [ 275.501165][T12548] ? trace_irq_disable+0x3b/0x140 [ 275.506241][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.512325][T12548] ? clear_bhb_loop+0x70/0xc0 [ 275.517072][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.522976][T12548] RIP: 0033:0x7fe947d9e159 [ 275.527448][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.547071][T12548] RSP: 002b:00007fe948cc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.555502][T12548] RAX: ffffffffffffffda RBX: 00007fe948025fa0 RCX: 00007fe947d9e159 [ 275.563472][T12548] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000047 [ 275.571470][T12548] RBP: 00007fe947e3503b R08: 0000000000000000 R09: 0000000000000000 [ 275.579461][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.587459][T12548] R13: 00007fe948026038 R14: 00007fe948025fa0 R15: 00007ffd9968d4c8 [ 275.595465][T12548] [ 275.598502][T12548] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 275.605778][T12548] CPU: 1 UID: 0 PID: 12548 Comm: syz.1.1849 Not tainted syzkaller #0 PREEMPT(full) [ 275.615126][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.625168][T12548] Call Trace: [ 275.628449][T12548] [ 275.631366][T12548] vpanic+0x56d/0xa60 [ 275.635342][T12548] ? __pfx__printk+0x10/0x10 [ 275.639918][T12548] ? __pfx_vpanic+0x10/0x10 [ 275.644412][T12548] ? is_bpf_text_address+0x292/0x2b0 [ 275.649730][T12548] ? is_bpf_text_address+0x26/0x2b0 [ 275.654953][T12548] panic+0xc5/0xd0 [ 275.658668][T12548] ? __pfx_panic+0x10/0x10 [ 275.663082][T12548] __warn+0x315/0x4c0 [ 275.667052][T12548] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 275.672415][T12548] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 275.677796][T12548] __report_bug+0x276/0x570 [ 275.682288][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.688358][T12548] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 275.693757][T12548] ? __pfx___report_bug+0x10/0x10 [ 275.698855][T12548] ? __lock_acquire+0x747/0x2de0 [ 275.703786][T12548] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 275.709153][T12548] report_bug+0x16b/0x220 [ 275.713471][T12548] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 275.718827][T12548] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 275.724185][T12548] handle_bug+0x9c/0x200 [ 275.728417][T12548] exc_invalid_op+0x1a/0x50 [ 275.732907][T12548] asm_exc_invalid_op+0x1a/0x20 [ 275.737742][T12548] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 275.743708][T12548] Code: 14 43 f6 e9 b1 fe ff ff e8 85 69 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 77 69 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 69 69 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 275.763301][T12548] RSP: 0018:ffffc90002546498 EFLAGS: 00010293 [ 275.769371][T12548] RAX: ffffffff8b606147 RBX: ffffffff8b605dbf RCX: ffff888020be1f40 [ 275.777339][T12548] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 275.785298][T12548] RBP: 00000000ffffffff R08: ffffffff8b605dbf R09: 0000000000000000 [ 275.793253][T12548] R10: dffffc0000000000 R11: ffffed100ce1fef6 R12: ffff88801eb88ec0 [ 275.801211][T12548] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 275.809184][T12548] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 275.814463][T12548] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 275.819761][T12548] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 275.825144][T12548] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 275.830505][T12548] mesh_plink_frame_tx+0x73d/0xc30 [ 275.835625][T12548] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 275.841250][T12548] ? mesh_plink_block+0x70/0xd0 [ 275.846090][T12548] mesh_plink_deactivate+0x18b/0x2f0 [ 275.851365][T12548] mesh_sta_cleanup+0x42/0x150 [ 275.856134][T12548] cleanup_single_sta+0x3ff/0x660 [ 275.861154][T12548] __sta_info_flush+0x5bb/0x700 [ 275.866008][T12548] ? __pfx___sta_info_flush+0x10/0x10 [ 275.871401][T12548] ieee80211_do_stop+0x3cd/0x2410 [ 275.876446][T12548] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 275.881912][T12548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.887711][T12548] ieee80211_stop+0x1ab/0x200 [ 275.892395][T12548] ? __pfx_ieee80211_stop+0x10/0x10 [ 275.897580][T12548] __dev_close_many+0x366/0x6e0 [ 275.902418][T12548] ? __pfx___dev_close_many+0x10/0x10 [ 275.907772][T12548] ? __dev_change_flags+0x2e2/0x820 [ 275.912969][T12548] __dev_change_flags+0x3f5/0x820 [ 275.917983][T12548] ? __pfx___dev_change_flags+0x10/0x10 [ 275.923515][T12548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.929482][T12548] netif_change_flags+0x7c/0x1b0 [ 275.934415][T12548] do_setlink+0xdd6/0x47a0 [ 275.938844][T12548] ? __pfx_do_setlink+0x10/0x10 [ 275.943692][T12548] ? rcu_is_watching+0x16/0xb0 [ 275.948462][T12548] ? trace_sched_exit_tp+0x3a/0x130 [ 275.953660][T12548] ? kasan_save_track+0x4f/0x80 [ 275.958524][T12548] ? __pfx___schedule+0x10/0x10 [ 275.963403][T12548] ? __mutex_lock+0x30b/0x1550 [ 275.968158][T12548] ? irqentry_exit+0x218/0x910 [ 275.972912][T12548] ? lockdep_hardirqs_on+0x7b/0x110 [ 275.978101][T12548] ? irqentry_exit+0x218/0x910 [ 275.982871][T12548] ? trace_irq_disable+0x3b/0x140 [ 275.987891][T12548] rtnl_newlink+0x147c/0x1c30 [ 275.992563][T12548] ? __pfx_rtnl_newlink+0x10/0x10 [ 275.997572][T12548] ? sock_sendmsg_nosec+0x13a/0x180 [ 276.002758][T12548] ? ____sys_sendmsg+0x54e/0x850 [ 276.007691][T12548] ? ___sys_sendmsg+0x2a5/0x360 [ 276.012524][T12548] ? __x64_sys_sendmsg+0x1b1/0x290 [ 276.017616][T12548] ? do_syscall_64+0x166/0x520 [ 276.022367][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.028435][T12548] ? kasan_quarantine_put+0xbb/0x1f0 [ 276.033711][T12548] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.038904][T12548] ? nlmon_xmit+0xb0/0x100 [ 276.043304][T12548] ? kmem_cache_free+0x182/0x650 [ 276.048251][T12548] ? __lock_acquire+0x747/0x2de0 [ 276.053179][T12548] ? __local_bh_enable_ip+0xd6/0x140 [ 276.058450][T12548] ? lockdep_hardirqs_on+0x7b/0x110 [ 276.063637][T12548] ? __dev_queue_xmit+0x29b/0x3820 [ 276.068734][T12548] ? __local_bh_enable_ip+0xd6/0x140 [ 276.074003][T12548] ? __dev_queue_xmit+0x29b/0x3820 [ 276.079135][T12548] ? lock_acquire+0x115/0x350 [ 276.083796][T12548] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.088813][T12548] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.093822][T12548] rtnetlink_rcv_msg+0x802/0xc00 [ 276.098770][T12548] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 276.103885][T12548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.109326][T12548] ? ref_tracker_free+0x689/0x830 [ 276.114346][T12548] ? __pfx_ref_tracker_free+0x10/0x10 [ 276.119722][T12548] ? __asan_memcpy+0x40/0x70 [ 276.124306][T12548] ? __skb_clone+0x5c/0x6c0 [ 276.128813][T12548] netlink_rcv_skb+0x226/0x4a0 [ 276.133565][T12548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.139016][T12548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.144323][T12548] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.149539][T12548] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.154726][T12548] netlink_unicast+0x7bd/0x940 [ 276.159483][T12548] netlink_sendmsg+0x813/0xb40 [ 276.164266][T12548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.169559][T12548] ? apparmor_socket_sendmsg+0x98/0x360 [ 276.175090][T12548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.180366][T12548] sock_sendmsg_nosec+0x13a/0x180 [ 276.185391][T12548] ____sys_sendmsg+0x54e/0x850 [ 276.190142][T12548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.195442][T12548] ? import_iovec+0x73/0xa0 [ 276.199954][T12548] ___sys_sendmsg+0x2a5/0x360 [ 276.204631][T12548] ? __lock_acquire+0x747/0x2de0 [ 276.209574][T12548] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.214773][T12548] ? futex_wait+0x2a2/0x390 [ 276.219297][T12548] ? __fget_files+0x2a/0x420 [ 276.223877][T12548] ? __fget_files+0x3a2/0x420 [ 276.228585][T12548] __x64_sys_sendmsg+0x1b1/0x290 [ 276.233519][T12548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.238975][T12548] do_syscall_64+0x166/0x520 [ 276.243554][T12548] ? trace_irq_disable+0x3b/0x140 [ 276.248577][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.254634][T12548] ? clear_bhb_loop+0x70/0xc0 [ 276.259296][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.265170][T12548] RIP: 0033:0x7fe947d9e159 [ 276.269593][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.289189][T12548] RSP: 002b:00007fe948cc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.297608][T12548] RAX: ffffffffffffffda RBX: 00007fe948025fa0 RCX: 00007fe947d9e159 [ 276.305567][T12548] RDX: 0000000004000000 RSI: 00002000000001c0 RDI: 0000000000000047 [ 276.313559][T12548] RBP: 00007fe947e3503b R08: 0000000000000000 R09: 0000000000000000 [ 276.321517][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.329493][T12548] R13: 00007fe948026038 R14: 00007fe948025fa0 R15: 00007ffd9968d4c8 [ 276.337460][T12548] [ 276.340731][T12548] Kernel Offset: disabled [ 276.345049][T12548] Rebooting in 86400 seconds..