last executing test programs: 2m37.467272634s ago: executing program 4 (id=2181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d0}, 0x8000) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r7, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x3, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x3938700}) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 2m36.89878186s ago: executing program 1 (id=2190): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 2m36.817277161s ago: executing program 1 (id=2192): ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltaction={0x6c, 0x31, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10395751}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x6c}}, 0x4008000) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f00006dbffc)=0x17, 0x4) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x100000000000023d}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$PPPIOCGIDLE(r1, 0x4004743c, &(0x7f0000000040)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m36.532938402s ago: executing program 4 (id=2195): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0}], 0x4}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2m36.458123087s ago: executing program 1 (id=2198): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ac0)={r5, 0xe0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0, 0x0], 0x0, 0x22, &(0x7f00000028c0)=[{}], 0x8, 0x10, &(0x7f0000002900), &(0x7f0000002940), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000002980)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b00)={0x0, @initdev}, &(0x7f0000002b40)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002f00)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002b80)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002bc0)={0x0, @empty, @broadcast}, &(0x7f0000002c00)=0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000851}, 0x4000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002c40)={0x0, @multicast2}, &(0x7f0000002c80)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x1a0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 2m36.263354075s ago: executing program 1 (id=2201): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 2m36.213523352s ago: executing program 0 (id=2202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000410000009500000000000000b02ce74bf4935993fa53e188a5d499512b6180b10aedb35688185a32e66f39f192c343aa153253c7cca6753eac0f6f12a6a64aee48200bad1b56e89d5dde928106e01e14f7ec73a5bc28941ce7c5b90e73c11cb5baf5dd8479b57bb33d45180bc38b7f81d7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x2000, 0x1000, 0x1, 0x7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m36.212370121s ago: executing program 3 (id=2203): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 2m36.062267713s ago: executing program 3 (id=2205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d0}, 0x8000) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r7, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x3, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x3938700}) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 2m36.039124004s ago: executing program 0 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) 2m35.601290819s ago: executing program 4 (id=2208): ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltaction={0x6c, 0x31, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10395751}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x6c}}, 0x4008000) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f00006dbffc)=0x17, 0x4) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x100000000000023d}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$PPPIOCGIDLE(r1, 0x4004743c, &(0x7f0000000040)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m35.503625026s ago: executing program 2 (id=2209): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x26020480) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x1000000}, 0x10) 2m35.438606526s ago: executing program 2 (id=2210): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700a10000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m35.263028097s ago: executing program 2 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 2m35.131048951s ago: executing program 1 (id=2212): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000021, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast1, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m35.11266666s ago: executing program 4 (id=2213): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) 2m35.053839687s ago: executing program 0 (id=2214): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@remote, @private}, &(0x7f0000000040)=0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x46ce316d7fbf6386}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) unshare(0x26020480) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x1000000}, 0x10) 2m35.053020221s ago: executing program 3 (id=2215): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, r0}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000841) r7 = socket$kcm(0xa, 0x922000000003, 0x11) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000ec00000b0000001400"], 0x36) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) 2m35.026630094s ago: executing program 2 (id=2216): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 2m34.858245024s ago: executing program 0 (id=2217): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close(0x3) write(r1, &(0x7f0000000100)="5c4eaa0b55f5b8415f75e6ddfcbcd7e7dbd20afba5f4efada54df7faf987c816b8b6833cad2dc15983b2658b", 0x2c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}, 0x1, 0x7}, 0x0) 2m34.822789133s ago: executing program 3 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40800) 2m34.73869065s ago: executing program 0 (id=2219): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) 2m34.667823363s ago: executing program 2 (id=2220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x19465, 0x1a704}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m34.667381821s ago: executing program 3 (id=2221): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700a10000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 2m34.49387869s ago: executing program 3 (id=2222): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x7f) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000011c0), &(0x7f0000001200)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r5 = socket(0x1e, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r6 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001040)={@remote, @loopback, 0x0}, &(0x7f0000001080)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0xfffffffd, 0x3, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x5, 0x1, 0x80000000, 0x4140, r0, 0x8, '\x00', r7, r9, 0x5, 0x2, 0x5}, 0x50) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200000000001400000060000c00031adfce493b8d2578a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m34.48167621s ago: executing program 1 (id=2223): ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltaction={0x6c, 0x31, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10395751}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x6c}}, 0x4008000) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f00006dbffc)=0x17, 0x4) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x100000000000023d}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$PPPIOCGIDLE(r1, 0x4004743c, &(0x7f0000000040)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m34.410763408s ago: executing program 2 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d00000000000000000000000a02"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x18) 2m34.117188563s ago: executing program 0 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d00000000000000000000000a02"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 2m34.067354207s ago: executing program 4 (id=2226): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600008004000000080000000800000000040000f368d87377605b613f8163d420ff33b8257357a02bde254d114db717c63fd718723ac10e42714a1c196d187448acdd7294f6877c0094c56b0fb95d61b005a6dc4bd0bd3dd70d33d902d5fc4b795eb4755b926f6308060f9c5e48112a475f80d0b9b2963712a50d9d9a0148dabed2d75d13e5a9ceba6ea785d3823fa97787a4cb66e8a755ecc49626f638cfe3f36d4eda8486018726197d68acc994540296c069fc12fa399bbaeadec2a4a340a78799e2e58808", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001e001000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) pipe(&(0x7f0000000080)) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) 2m33.864518488s ago: executing program 4 (id=2227): unshare(0x26020480) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0680c2000000080045000000000000000000004e22004890780300000002000000173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd5c341f44cb"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, 0x0) 2m19.438244419s ago: executing program 32 (id=2223): ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@deltaction={0x6c, 0x31, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10395751}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x6c}}, 0x4008000) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f00006dbffc)=0x17, 0x4) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x100000000000023d}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$PPPIOCGIDLE(r1, 0x4004743c, &(0x7f0000000040)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m19.3897942s ago: executing program 33 (id=2222): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x7f) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000011c0), &(0x7f0000001200)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r5 = socket(0x1e, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r6 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000001040)={@remote, @loopback, 0x0}, &(0x7f0000001080)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0xfffffffd, 0x3, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x1b, 0x5, 0x1, 0x80000000, 0x4140, r0, 0x8, '\x00', r7, r9, 0x5, 0x2, 0x5}, 0x50) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200000000001400000060000c00031adfce493b8d2578a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m18.903951494s ago: executing program 34 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d00000000000000000000000a02"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 2m18.80919262s ago: executing program 35 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d00000000000000000000000a02"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x18) 2m17.923912048s ago: executing program 36 (id=2227): unshare(0x26020480) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0680c2000000080045000000000000000000004e22004890780300000002000000173e6335a79630de1125f32bfd49b77c2d01a8ac6334c2bd5c341f44cb"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, 0x0) 4.023059024s ago: executing program 8 (id=3268): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x80000, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x10008844) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r11, &(0x7f00000006c0)="0300f198aaae5a98ca0000850800", 0x36, 0x20044080, &(0x7f0000000200)={0x11, 0x2, r12, 0x1, 0xfe, 0x6, @random="5483ccb17b06"}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000a80)={0x1b0, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000055) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.835509746s ago: executing program 6 (id=3270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff01, 0x110c2300fe) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x870bd2a, 0x25dfdbf6, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x7}}, @TCA_RATE={0x6, 0x5, {0x40, 0xd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x10}, {0x0, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000340)={0xa, 0x4e22, 0x6, @private1, 0xbc}, 0x1c) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000300), 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000000d9ceb776c87b085a000100000000", @ANYRES32=r13, @ANYBLOB="140004006e696376663000000000000000000000080005000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x2400c890) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r12, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x10}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x48004) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0) 3.779450634s ago: executing program 5 (id=3271): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) accept4(r0, 0x0, 0x0, 0x80800) unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x80}}, 0x40) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 3.779064677s ago: executing program 8 (id=3272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) close(r2) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0xc, &(0x7f0000000240), 0x8}, 0x80000000}], 0x4, 0x4022, 0x0) 3.530730057s ago: executing program 8 (id=3274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/309], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x800000, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in6=@private1}}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x0, 0x1e}, 0x10102) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x800) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000002c0)="889c29d5efbaf3a2d9e01a4ae26efc751f827c32148a344dddd5539d7ba2578f20e4d76113579dea47d5fca1", 0x2c) shutdown(r2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3504000030000511d25a80648c63940d1124fc60040035400c0002000a00002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767306b74b4098e9e71fa51bde29f19b06fb9b3ba96da0e93d5a402dc7fe462a6cc4718c94c1747fff68092705b44bb48dd2db4f3127aab13b4af05549571a6c0e03db227b65d459fa5c1232d7b62f12b65354b7e70d32998da02ae0dc28942f682d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85c6711cd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee0493ffe3b72b508c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b9b0bba0ba2deac12f0257c64ceca8a0a62db179c7d9df7749da38624aab1865024e56a1b2a41e1c7e3a29c01adb31f1865bf6f44aa1e0fd6d827fbae1d57b5ff0026b580c890df83592aceb316fcd6ca200d007b786f9ae", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) 3.530186584s ago: executing program 5 (id=3275): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0xfffffff9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x38, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 3.036631647s ago: executing program 7 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) (fail_nth: 12) 2.76579426s ago: executing program 6 (id=3279): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\"k\x00\x00', @ANYRES16=r3, @ANYBLOB="13072bbd7000ffdbdf250d0000000800c3009a1e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x4, 0xf, 0x90, 0x8}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xb) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24004080) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.528747694s ago: executing program 5 (id=3280): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) 2.483101729s ago: executing program 7 (id=3281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000002140)="b9fe030768045cac989a14f088a870eeb2f686dda8c6e95bd97d3a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.378470659s ago: executing program 5 (id=3282): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x4b, 0x30, 0x10003, 0x1c, 0x9, 0x1000001, 0x87, 0xe, [0xfffffffd, 0x7fff]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x20000400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) 2.327413109s ago: executing program 8 (id=3283): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000001480)) (fail_nth: 1) 2.311803657s ago: executing program 6 (id=3284): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'rose0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) unshare(0x2040400) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0)=0x7, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r3, 0x800) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000000c0)=0xffff7f7f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r4], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$pppoe(0x18, 0x1, 0x0) 2.275364063s ago: executing program 7 (id=3285): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2e000800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r5, @ANYBLOB="048d25"], 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000300)={0x80}) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, 0x0, 0x1000000}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x52) 1.755475275s ago: executing program 8 (id=3286): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001840)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44400) (fail_nth: 3) 1.71837638s ago: executing program 6 (id=3288): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x162f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0xe0a2ff6baa7cc2d2}, {0xde, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffff}}]}}]}, 0x60}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042cbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c000020000280140003000000000000000000d5", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.667401067s ago: executing program 9 (id=3289): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ac0)={r5, 0xe0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0, 0x0], 0x0, 0x22, &(0x7f00000028c0)=[{}], 0x8, 0x10, &(0x7f0000002900), &(0x7f0000002940), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000002980)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b00)={0x0, @initdev}, &(0x7f0000002b40)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002f00)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002b80)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002bc0)={0x0, @empty, @broadcast}, &(0x7f0000002c00)=0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000851}, 0x4000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002c40)={0x0, @multicast2}, &(0x7f0000002c80)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x1a0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 1.551109617s ago: executing program 8 (id=3290): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x200008d0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x128}, 0x24004004) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendto(r6, &(0x7f0000000140)="d8e22679f5f78fb4266c64cb7969aaf62df8dbd8787b574a6e564eb1488fde1a026071f0b58404d868201b5d658c1c806057b35f5ae6192deddb1b683a525599fffc0d921962cffc0cce6d6e6051f17950424c0f22794a8a4a011f53b17eb22766f91cbe30485a28b4b96663a35522ab0f45f8627264ca8b4efcb6d3a247a62505339494591827e7", 0x88, 0x0, 0x0, 0x0) connect$can_bcm(r6, &(0x7f0000000180), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x122) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.458418447s ago: executing program 9 (id=3291): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r3], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, 0x80, 0x0, 0x3}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x401, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xded}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xe74f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000811) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, 0x8000, 0x0, 0x0, 0x300}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000000100)={'ip6gretap0\x00'}) setsockopt$packet_tx_ring(r8, 0x107, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000520000007b0000000000000095"], &(0x7f0000002dc0)='GPL\x00', 0x0, 0xffd6, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061299a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg(r9, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000280)="618522dd84549e047e7da26ab5f8972034b305ed4dcab7c82bca19eae22daf1681614d36d60663", 0x27}, {&(0x7f0000000480)="fa89ed56ac414e4341e0d4a8e7f736453010274025b335766d1947b06c1afde563285419662ce77a627d382ac7df9a83f7568fa6bac7cf271bd0a649ea9504710b79af7022d0f8c6b50636ac8ce6c33cf9ffa2c5b9dbc7c8fd3d9d6dcd8a2ea8a828e94afe7877e0124f830b6980c6831ba9", 0x72}], 0x3, &(0x7f0000000a40)=[{0xd8, 0x3a, 0x40451555, "2582c3437ee2d92cc19b8e263ec763b137236bcc56d52e06fa58976e6eef3758a623b94d2cc5c2016fa74f9a8d86496a9ec1f8a3aae3c379b73fdd20f1a83a170fc05acaa4c95b18cbef76462674bc467bfd91eb9d336851ecddffe49d565e4b4242772dd424c7cfecf8bd561a9afd45d3190229e224fba7d525e6a0f7b3d97d531ad969899baaa89ff1c243123486526ca0e43625fbf972e9985ef70fd5bf5993229ef000cb76fd4707bd94ec4cd3fc9127267fe16b29e3c0922ae0b3fae926fd"}, {0x60, 0x103, 0x0, "28bb984d9f8a50835bab88717b608bfcf31805a483d88b45c2a0bf0cfcfef91e2d1f033167b4ac8d44089be178a43a85a26cfc39dbad4e6a03a03b78f1a54846b922c9e11df5f433872e841b36"}, {0x90, 0x112, 0x0, "104c75be53bba735dda41124642e22d50705d93e40f7b8cfb380a973e4e680f4e258f1b1f1b7eef9e7fa4863c08f810d2f2b345c8e744478cc9adaf5cf1c4fbdd12b9ad32834adc9be77caf433326a89a8349ba090c1b030a7a3a03a1c1da2a3a42ebf63abf3424f100d25d7dc7c70cea9c543bf057812588ce55e80"}, {0x100, 0x103, 0xd, "b1ec8e64c256bb842312dd50cb9c4b853b375702cc93b15cda85cfb8f39a88bef5f99ddd16d5132a7f4cce83998ae2b7e847b2a9eef9e0d893c43c7f30597296d02c034045ca360d01b2dce86f7816fbdf8155741d98939c27f0c241c6a8583ebe7cf9fca2f4a37d7685d446856286a9ba5233d13903edeebae88e6530a71cdaae4b2b823d68d575450e8a122c2045d5de85cdfb6f62a799b619545d49a9787e53ce290d5c3d7bd485864db74397480de00b1509894352c48b1205611d2a036bb694fe8c2cf3881c14a65aa0ce80cb1c38adaf239b57ecb8b66df79d1037104abd2eec0ad8dd16454e88f138"}, {0xb0, 0x102, 0x0, "d73b7372205b8af4ee597e01a1a5fb2c77241a1006658b7311e48a074bdaa604cde95948d9ac3cc459a29fd6349cd6e696db3eff80768e198028b5a8d21a3031ae7db31af676238a4c25c91dcd04168fde17fe8fbdaf69c9b76aa5a6ec5dd36869270dcd29d92f7636abe82b54510545be137d921aa50158d338f1b96520f94b12a2152318fb9f6bd9d3d176ea8070c454714a6671ffe0903318cdc6"}, {0xa8, 0x1, 0x3, "0f2a1a6403fe89ff62230f34ddbfb536d5ede4fd21bfca63e90a8ce5d725c2c6a8e8e08fc703d4f6277f37854cba962097359c5597970bad86da6f99698a65ad5b75b6a9c049d21351bd2df3bd8fac3895c907c4ca67a2d0f059d2f89e4039e3f008e4b95c891c08cb68aa0766a8cfafd0cf6cbbf359f671c24bea4850b5e42f9a383dcf5c54fc7e0c108e751ef4e9696eedf401454010"}, {0x80, 0x10d, 0x0, "d0689136da80af97a1005842f6dafcee35e3d90b289dfdea4f0cbbb5132e54c069b66956340baeb38fed8c3aea1df4767bfc72e33f2d21e5b7a199984d4b0d408a17c8328f977cf50d7592eee3a6b1858223c21b8320d97a509de83686e6a25853270445d106969a3d23"}, {0x88, 0x102, 0x200, "a697f6bf37259f007cdf2e2ba2791bbc6c578d87036bab6c47292e929be1fad40efa156df16eda1fc7c8b40f4ba1c21948165b50b4a8f39d91cea14b952f8d454176f857e30d12edf5e20d475a92f475ff0e6c2e577fecf77d7b3816c5c47293a64b1e2c36196b09ecd9d33a234ff2e62364"}, {0x68, 0x107, 0x2, "757d0b7798d6f8c844e31592faa17f37b230324ae92fd1bed8c3fb377d173c33a9497d16674c6fdc73cb625264f0dd8e62daaccd992a617427cbbc78b9c8d24d4070a10eb1b3807846d513975ab9d01e9c4818dc"}, {0xc8, 0x114, 0x1ff, "cc7004aac8aea48a28ace55ac93cd2a7ecdfe988376859689b77f4354f6b10bdcdaa312edaff036431c2f6edfdb346d20e253aaa78eb560a3dc93f4502d5b2661d5cdf3bb5b76a2f9c2684a60cb203026412cb7b45d34f86b857dfd90058fbcddd11f193205e0a76879a758aadbce9054e94b88da864862d35a3c349c2e2c60a691a5c585e099b52057c41b29f665cc7ddc89969ba2582a378f0b08ca1227628d1ba5ba06cfed4e4d0895458b128670f15bf50"}], 0x658}}, {{&(0x7f0000000540)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)="a9430219d2023b4301c95c19fcde2785fbf590326685e2cff676431c9a1222345d9982bcd11e8fe414a9c4dcafeb12f206a2aa956d201ac241f5963bbe7d0647add264dc5969967c92b79cdefb452faa8f52e9a6f1b3426aaefdcc1f87e149ff20abb2157ce6738675141daea648f6b821791401b5e0e269ec909e1ce0eb6479afb9b54e535c902f8defa28a154d868dec7a98acf35b31c22dfc1d80cd352c8ed5c51ee733a4f6957037bc3e3d81325380ff12af18882d5d82ff429b68b39bd3e2e3eb", 0xc3}, {&(0x7f00000005c0)="249e24bd52d5a44028f00e698384d6c9afeb909ebeb1e888dccef8f7a8d79da864cf937412531078545631c1c994d4a4b6c84e898cc426e5265274fc3ea3059196c2ade7f999c18430350b03d5f78ed111a871584948107a5a609bc0ba02c6", 0x5f}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="af2687ecf66e81e875a2f483da4b13986e31619c78467c1fb50d05f7138b86d9accdb81f857f600296274298673a6b7a9816785c6bde389c67bd5900b14622c82f72ecd2278e82865fe31510d4fa9cdfda276010c90662eab610679363e23366b2b43ba434974c01cd2a57640cc26d88bc4eef744740b8eb9d57bb0ad64d56a902da9772fe35c2a407706a0d4ffe0caf", 0x90}, {&(0x7f00000008c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000980)="9f6fbd5b25cccdb967009596f4c0849a159c58fa34fe642e571abac656", 0x1d}, {&(0x7f00000010c0)="3cf120df4e5b5016f2af6ab34528dd6060ba8ab03aed7fee568c0f8b2ceb8fe99f31b0dbaa3b46e544f0ba2bad56e697", 0x30}, {&(0x7f0000001100)="c507cd54c9fd99b796bf96962f476f9ecd538f20fffe68b91c04ead2bef399491c624017c74df002540fab0caea493cf1740e196ca3454a85cb33e94f55c0590570b8f49966990ce956598cd2a2c90e89f0e9ea3229d77f698a89afabcc9b6dfa9981aca9569a3a5e05600", 0x6b}, {&(0x7f0000001180)="bffd7a9912f8c614a9bf5fe6cafc4ce5636d4657c46ec532870a98d264a2f102242551656f6c91b431427322f93a6a8548839d6d46d3aa939255cd171d40243382bf7552a4c1e6aa51de1c0dbace44c44a411a52977a770f850f21ca210feebf4ded770e153f57e41f6d0b7f", 0x6c}, {&(0x7f0000002240)="1c6e541e083c74cb78c348e5427c7821b2f402ae0acc16fedeea707137ae856e5d8ca242df8ddfad0bc1bed463ba1cc6e0280af3c013ca6704d97917f37c14988fe69d8f04cfdfea3d438f4aecf9af41665ecc18f5037ef65078b1284a09ba5d54faf5520f5c4398dc1f8a020b9e6bab5f368435f9458f348a692e648d692a6a239bdd0f9d50ff1089c9a4a1763392451c32590a072ff3e1bf1e7f65a219ddfdea7af2ca78be4832f1ce7adc9105d026da1c53549ebd", 0xb6}, {&(0x7f0000002300)="6d441de7720bf9d053499b380c9ffeb462d58e4806b334792ca40fe675b8f546a5c52758e0cae246ef893ba6558a03a4c8cd95c4faca42a98cf138351452940221fbc64205918b0bed6bc1f4b69eea4b0e21c00793d07872c14db6c5c3f1a2df3b", 0x61}], 0x7, &(0x7f0000002400)=[{0x98, 0x1, 0x8001, "54475d606ecc24dd1be7c80fad4646ada158b294e854326339233ff125412281bea0d0ed22ad508aafc5ebeb55e6d199a8f6d472ca5910fbf10f070575f1d5836003dd14daf3598e04d59f8d55418788964a3759f236a54fcbfc8b034e0e8ccd4100edfb239971d9c168319fbe50fd7942e5a98b48f286df654fbb4a1ef641d2c2"}, {0xc0, 0x116, 0xfffffff9, "0e887c86992a2e1a26fa2c2c6a745fe4e85436b52f03a9b5b49c378ab9f25839db2f3c75abfa7d2842c37dea58d53c29b00b2198ec861b28e1c237a14369234e9e1b9fac6428b360c147afa617d248fca4d9851c0cb9cd2be5f693af303fd1306047531c8d8243ba41fd55c0f55fbbfd996e85353409184a4891ab15f7c4f4cae958e0d6607055182fb2906f1f363a60892456ccbdc222d4a3d6147f50b13155317c2541efc91fba2ed9cabe"}, {0x68, 0x0, 0x80000000, "ebec0c04fd9f1ad41c74d0c0f4d13a8b994850e63147b52d6c034d49466aaef276b816ce59bebc9fceb513664758f46a0fbc285876516d017ea88d40088cd2a23b8959e4ac7e45bfc91547b983eabd99cb"}], 0x1c0}}], 0x3, 0x8000004) 1.260336603s ago: executing program 7 (id=3292): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x40020000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002ac0)={r5, 0xe0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0, 0x0], 0x0, 0x22, &(0x7f00000028c0)=[{}], 0x8, 0x10, &(0x7f0000002900), &(0x7f0000002940), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000002980)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002b00)={0x0, @initdev}, &(0x7f0000002b40)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002f00)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002b80)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002bc0)={0x0, @empty, @broadcast}, &(0x7f0000002c00)=0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000851}, 0x4000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002c40)={0x0, @multicast2}, &(0x7f0000002c80)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x1a0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 1.207478998s ago: executing program 6 (id=3293): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x22}}}]}, 0x58}}, 0x0) 1.127531202s ago: executing program 9 (id=3294): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) (fail_nth: 4) 1.085564722s ago: executing program 5 (id=3295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002140)="b9fe030768045cac989a14f088a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 654.863288ms ago: executing program 6 (id=3296): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 607.153981ms ago: executing program 9 (id=3297): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x40000003, 0x1083, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sendmmsg$unix(r3, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="93929e541e68a98616c51db24f59c6c75c4c06093fe85717ee6da907016a76e31b1cba5a3b50d95bec034da5204ce126d97540f363aac67baeef71ee24f958b10bec533af2d45b7bd86afbdf9f5fcae484a19618806c1de8c61216e299094991b7c0e99ec4fcbb395be6b408d5bec76d6a751ca833c0b1cbb88c1b23539dadcc0ed25a2962b835a4c1c9d2881363ab5ca5b4a747443ac390876c12997f223bdc63b60773897ad834bc483ce1635b2c1f", 0xb0}, {&(0x7f0000000000)="5d6a305a87cbd584602fa52b7c20e3df", 0x10}, {&(0x7f0000000440)="ef0369b0a00aff0b2bed7e6a6e92e8e0264926aff02ceb0b5c5a00937404e9b1b91af92cd70ff9b43bd845b05870f2a661ea37b00d1fc8b3262648dbcab0024302fa761d9dfa3d4d035586d3", 0x4c}, {&(0x7f0000000240)="ac0bd2507841f3984f0849623e9bd93c0d94b08cbff28a9b950b2110f48d", 0x1e}, {&(0x7f0000001800)="cc257665461c89cb16f9cbb581b8ea5a99afde19b9b3af9c8302b74197c549a4c68d92955c49c33cd2dff66d45cec6d13a18af05feb2b4543e81168fd1f6b7c9b8992c6d6e95f57fde4a140efb90882a89c13f1a74d59cefdfe6d3701507885de09d7e213a5d6f949b003c148acad33e9deff9efad65e08ec7de35d7f9586a6c644a642cc4309db9814f2f3c6c9828550608ac03b8f128fe9677d179d35d7599089201a67549e81466ab567ca291de3f5e", 0xb1}, {&(0x7f00000004c0)="f52dd529043a0e0247dfa521308783cb14fd5739d1b204522cf2ae", 0x1b}, {&(0x7f0000000540)}], 0x7, &(0x7f0000000040)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x40004}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b70200000800"], 0x0}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r7 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32=r8, @ANYRES16=r2], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) 606.299646ms ago: executing program 5 (id=3298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40010100, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x140, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}}, {0x24, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x1f, 0x1a, 'blkio.bfq.io_service_bytes\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8000000000000000}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffc545}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_COMMENT={0x1f, 0x1a, 'blkio.bfq.io_service_bytes\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x89}}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x24, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x1f, 0x1a, 'blkio.bfq.io_service_bytes\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x8000050) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6, 0x0, 0x11}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200d0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 523.005542ms ago: executing program 7 (id=3299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="247f000000000c0000000c000200010000000400"/36], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) syz_emit_ethernet(0x16, &(0x7f0000000040)={@broadcast, @random="000500", @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x3}}, {@generic={0x4305}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x14, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00221e"], 0x8c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES64=r2, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7, @ANYBLOB="ff880aa5076fea33c1278ceea9c5982252a99e86be218155106c548354c6630300be5e6d78d2fa812c1f72d2e013d6e1bbb8258babc11104e634c411e72b826c27078ffd5c524ca2976fa2484451ab1f263965cd764c6dfb62ec7045e931829cbbd7f6bb60eeae4fab5299f0155cb81461becb045081e72749950ef88d7be1a80c34"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800980010076657468000000000400028008000a00cddf82c0b70b4ce4f84f905cd75b1239094b345f2a263a8f9c2f8b7385d2c58284f6b81e629329971a4819199524268599fba019aa6d5c0bf648177c55883565639d8695d3dd7079ebf90de5e70c51054ca6ac570e3662339ecc3917d136924e95d9e7022e749886952e728a05b8fa5a9272eca38b08e2acf99bf81ff2c8365a7f22944582368fdddbad94a725bf6df8d9f1e6d5914bb6ca32d9ef6238030d3e2555a5603cd02bfd5d0a5a43cc69a9e0e930b2a2", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) 211.130324ms ago: executing program 9 (id=3300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x19465, 0x1a704}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x294, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x20c, 0x1, [@m_ctinfo={0x118, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xe9, 0x6, "eb0e48b9b3387e86cbb2b0fe5c9988b0ea82132d71196202c47fc92b5fa205c707050abb36510bfedcc3056b157a00b9a4da46aec58df5b5d40860add8ff9f796719e2c6d9041acb8e4e7725e80a4ab02dcf6d0f13acd9dc6b00a1d802ce419bf4b55d77a23c63ffd55c4f469e37cfe526d68f35e9a2a5ea403cb4ad134db40098a96000742066f75de18722fc884d3fe91a57fedd53e1161551b471c47a17f29751e8a875179c444fcaa95929d6819ca4fe885a00e01c5dacb6c8a6c0a90bef6c5d49cb5a68ecf43789bfe044fc4f14e791e934503017dc7b4d195d28ac5fa70086dd8afb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xc0, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x74, 0x1, [@m_gact={0x70, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x41, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a27434"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 47.652478ms ago: executing program 9 (id=3301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x118c, &(0x7f0000001d40)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=3302): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000771122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0xfffffffffffffef1, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}], 0x4000000000001b7, 0x120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000280)=0x7fffffff, 0x4) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x8}, 0x80000000}], 0x4, 0x4022, 0x0) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.6.2624'. [ 385.010800][T14587] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.091650][T14600] netlink: 'syz.7.2625': attribute type 1 has an invalid length. [ 385.121935][T14600] netlink: 'syz.7.2625': attribute type 1 has an invalid length. [ 385.170920][T14595] lo speed is unknown, defaulting to 1000 [ 385.183054][T14595] lo speed is unknown, defaulting to 1000 [ 385.409137][T14613] netlink: 'syz.7.2625': attribute type 1 has an invalid length. [ 385.480249][T14617] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.2629'. [ 385.925588][T14628] lo speed is unknown, defaulting to 1000 [ 385.934801][T14628] lo speed is unknown, defaulting to 1000 [ 386.028930][T14635] FAULT_INJECTION: forcing a failure. [ 386.028930][T14635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.058858][T14635] CPU: 0 UID: 0 PID: 14635 Comm: syz.5.2638 Not tainted syzkaller #0 PREEMPT(full) [ 386.058888][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.058898][T14635] Call Trace: [ 386.058905][T14635] [ 386.058913][T14635] dump_stack_lvl+0x189/0x250 [ 386.058941][T14635] ? __pfx____ratelimit+0x10/0x10 [ 386.058963][T14635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.058986][T14635] ? __pfx__printk+0x10/0x10 [ 386.059012][T14635] ? __might_fault+0xb0/0x130 [ 386.059052][T14635] should_fail_ex+0x414/0x560 [ 386.059084][T14635] _copy_from_iter+0x1de/0x1790 [ 386.059114][T14635] ? rcu_is_watching+0x15/0xb0 [ 386.059136][T14635] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 386.059164][T14635] ? __pfx__copy_from_iter+0x10/0x10 [ 386.059186][T14635] ? __build_skb_around+0x257/0x3e0 [ 386.059211][T14635] ? netlink_sendmsg+0x642/0xb30 [ 386.059230][T14635] ? skb_put+0x11b/0x210 [ 386.059255][T14635] netlink_sendmsg+0x6b2/0xb30 [ 386.059288][T14635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.059312][T14635] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.059334][T14635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.059354][T14635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.059376][T14635] __sock_sendmsg+0x21c/0x270 [ 386.059408][T14635] ____sys_sendmsg+0x505/0x830 [ 386.059439][T14635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.059483][T14635] ? import_iovec+0x74/0xa0 [ 386.059510][T14635] ___sys_sendmsg+0x21f/0x2a0 [ 386.059536][T14635] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.059602][T14635] ? __fget_files+0x2a/0x420 [ 386.059620][T14635] ? __fget_files+0x3a0/0x420 [ 386.059650][T14635] __x64_sys_sendmsg+0x19b/0x260 [ 386.059678][T14635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.059711][T14635] ? __pfx_ksys_write+0x10/0x10 [ 386.059734][T14635] ? rcu_is_watching+0x15/0xb0 [ 386.059759][T14635] ? do_syscall_64+0xbe/0x3b0 [ 386.059784][T14635] do_syscall_64+0xfa/0x3b0 [ 386.059803][T14635] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.059823][T14635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.059840][T14635] ? clear_bhb_loop+0x60/0xb0 [ 386.059863][T14635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.059880][T14635] RIP: 0033:0x7f203798eba9 [ 386.059898][T14635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.059913][T14635] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.059935][T14635] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 386.059948][T14635] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 386.059960][T14635] RBP: 00007f2038732090 R08: 0000000000000000 R09: 0000000000000000 [ 386.059972][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.059983][T14635] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 386.060016][T14635] [ 386.952486][T14652] netlink: 'syz.7.2641': attribute type 1 has an invalid length. [ 386.960755][T14652] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2641'. [ 386.970386][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2641'. [ 387.207837][T14657] FAULT_INJECTION: forcing a failure. [ 387.207837][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 387.233454][ T30] audit: type=1804 audit(1757606727.607:3): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2645" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=375 res=1 errno=0 [ 387.251462][T14657] CPU: 1 UID: 0 PID: 14657 Comm: syz.5.2644 Not tainted syzkaller #0 PREEMPT(full) [ 387.251491][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.251501][T14657] Call Trace: [ 387.251508][T14657] [ 387.251516][T14657] dump_stack_lvl+0x189/0x250 [ 387.251543][T14657] ? __pfx____ratelimit+0x10/0x10 [ 387.251562][T14657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.251582][T14657] ? __pfx__printk+0x10/0x10 [ 387.251607][T14657] ? __lock_acquire+0xab9/0xd20 [ 387.251641][T14657] should_fail_ex+0x414/0x560 [ 387.251669][T14657] should_failslab+0xa8/0x100 [ 387.251696][T14657] kmem_cache_alloc_noprof+0x73/0x3c0 [ 387.251725][T14657] ? skb_clone+0x212/0x3a0 [ 387.251751][T14657] skb_clone+0x212/0x3a0 [ 387.251775][T14657] __netlink_deliver_tap+0x404/0x850 [ 387.251807][T14657] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.251827][T14657] netlink_deliver_tap+0x19c/0x1b0 [ 387.251847][T14657] netlink_unicast+0x7fa/0x9e0 [ 387.251881][T14657] ? __pfx_netlink_unicast+0x10/0x10 [ 387.251908][T14657] ? netlink_sendmsg+0x642/0xb30 [ 387.251924][T14657] ? skb_put+0x11b/0x210 [ 387.251947][T14657] netlink_sendmsg+0x805/0xb30 [ 387.251976][T14657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.251998][T14657] ? aa_sock_msg_perm+0xf1/0x1d0 [ 387.252018][T14657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.252035][T14657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.252054][T14657] __sock_sendmsg+0x21c/0x270 [ 387.252082][T14657] ____sys_sendmsg+0x52d/0x830 [ 387.252109][T14657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.252140][T14657] ? import_iovec+0x74/0xa0 [ 387.252164][T14657] ___sys_sendmsg+0x21f/0x2a0 [ 387.252187][T14657] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.252247][T14657] ? __fget_files+0x2a/0x420 [ 387.252262][T14657] ? __fget_files+0x3a0/0x420 [ 387.252289][T14657] __sys_sendmmsg+0x227/0x430 [ 387.252315][T14657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.252333][T14657] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 387.252382][T14657] ? ksys_write+0x22a/0x250 [ 387.252406][T14657] ? __pfx_ksys_write+0x10/0x10 [ 387.252425][T14657] ? rcu_is_watching+0x15/0xb0 [ 387.252450][T14657] __x64_sys_sendmmsg+0xa0/0xc0 [ 387.252480][T14657] do_syscall_64+0xfa/0x3b0 [ 387.252498][T14657] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.252515][T14657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.252532][T14657] ? clear_bhb_loop+0x60/0xb0 [ 387.252552][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.252569][T14657] RIP: 0033:0x7f203798eba9 [ 387.252585][T14657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.252599][T14657] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.252618][T14657] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 387.252630][T14657] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 387.252642][T14657] RBP: 00007f2038732090 R08: 0000000000000000 R09: 0000000000000000 [ 387.252652][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.252662][T14657] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 387.252693][T14657] [ 387.584038][ T30] audit: type=1800 audit(1757606727.607:4): pid=14658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2645" name="cgroup.controllers" dev="tmpfs" ino=375 res=0 errno=0 [ 388.193951][T14693] FAULT_INJECTION: forcing a failure. [ 388.193951][T14693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.217517][T14693] CPU: 0 UID: 0 PID: 14693 Comm: syz.5.2658 Not tainted syzkaller #0 PREEMPT(full) [ 388.217546][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.217558][T14693] Call Trace: [ 388.217566][T14693] [ 388.217575][T14693] dump_stack_lvl+0x189/0x250 [ 388.217603][T14693] ? __pfx____ratelimit+0x10/0x10 [ 388.217624][T14693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.217646][T14693] ? __pfx__printk+0x10/0x10 [ 388.217673][T14693] ? __might_fault+0xb0/0x130 [ 388.217713][T14693] should_fail_ex+0x414/0x560 [ 388.217743][T14693] _copy_from_iter+0x1de/0x1790 [ 388.217772][T14693] ? rcu_is_watching+0x15/0xb0 [ 388.217794][T14693] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 388.217823][T14693] ? __pfx__copy_from_iter+0x10/0x10 [ 388.217846][T14693] ? __build_skb_around+0x257/0x3e0 [ 388.217872][T14693] ? netlink_sendmsg+0x642/0xb30 [ 388.217890][T14693] ? skb_put+0x11b/0x210 [ 388.217916][T14693] netlink_sendmsg+0x6b2/0xb30 [ 388.217947][T14693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.217972][T14693] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.217994][T14693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.218014][T14693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.218036][T14693] __sock_sendmsg+0x21c/0x270 [ 388.218068][T14693] ____sys_sendmsg+0x505/0x830 [ 388.218097][T14693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.218132][T14693] ? import_iovec+0x74/0xa0 [ 388.218158][T14693] ___sys_sendmsg+0x21f/0x2a0 [ 388.218184][T14693] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.218251][T14693] ? __fget_files+0x2a/0x420 [ 388.218268][T14693] ? __fget_files+0x3a0/0x420 [ 388.218298][T14693] __x64_sys_sendmsg+0x19b/0x260 [ 388.218324][T14693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.218359][T14693] ? __pfx_ksys_write+0x10/0x10 [ 388.218381][T14693] ? rcu_is_watching+0x15/0xb0 [ 388.218406][T14693] ? do_syscall_64+0xbe/0x3b0 [ 388.218432][T14693] do_syscall_64+0xfa/0x3b0 [ 388.218452][T14693] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.218473][T14693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.218500][T14693] ? clear_bhb_loop+0x60/0xb0 [ 388.218524][T14693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.218542][T14693] RIP: 0033:0x7f203798eba9 [ 388.218561][T14693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.218577][T14693] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.218600][T14693] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 388.218615][T14693] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 388.218626][T14693] RBP: 00007f2038732090 R08: 0000000000000000 R09: 0000000000000000 [ 388.218639][T14693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.218649][T14693] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 388.218683][T14693] [ 388.546220][T14697] netlink: 'syz.8.2659': attribute type 12 has an invalid length. [ 388.687489][T14702] netlink: 'syz.8.2662': attribute type 10 has an invalid length. [ 388.694806][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2661'. [ 388.699413][T14702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 388.751797][T14702] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.787957][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2663'. [ 388.870952][T14702] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2662'. [ 388.965068][T14715] syz_tun: entered allmulticast mode [ 388.980519][T14715] dvmrp8: entered allmulticast mode [ 389.093106][T14714] syz_tun: left allmulticast mode [ 389.111596][T14714] dvmrp8: left allmulticast mode [ 389.141449][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2670'. [ 389.638449][T14754] netlink: 'syz.7.2675': attribute type 1 has an invalid length. [ 389.657606][T14754] netlink: 'syz.7.2675': attribute type 1 has an invalid length. [ 389.831722][T14757] IPVS: rr: FWM 3 0x00000003 - no destination available [ 389.860100][ T8558] IPVS: starting estimator thread 0... [ 389.955797][T14763] IPVS: using max 25 ests per chain, 60000 per kthread [ 390.001305][T14770] netlink: 'syz.7.2675': attribute type 1 has an invalid length. [ 390.302445][T14778] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2689'. [ 390.669200][T14793] FAULT_INJECTION: forcing a failure. [ 390.669200][T14793] name failslab, interval 1, probability 0, space 0, times 0 [ 390.708056][T14793] CPU: 1 UID: 0 PID: 14793 Comm: syz.7.2696 Not tainted syzkaller #0 PREEMPT(full) [ 390.708086][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.708098][T14793] Call Trace: [ 390.708106][T14793] [ 390.708114][T14793] dump_stack_lvl+0x189/0x250 [ 390.708144][T14793] ? __pfx____ratelimit+0x10/0x10 [ 390.708165][T14793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.708188][T14793] ? __pfx__printk+0x10/0x10 [ 390.708221][T14793] ? __pfx___might_resched+0x10/0x10 [ 390.708246][T14793] should_fail_ex+0x414/0x560 [ 390.708277][T14793] should_failslab+0xa8/0x100 [ 390.708307][T14793] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 390.708334][T14793] ? __alloc_skb+0x112/0x2d0 [ 390.708359][T14793] __alloc_skb+0x112/0x2d0 [ 390.708385][T14793] netlink_sendmsg+0x5c6/0xb30 [ 390.708418][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.708444][T14793] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.708465][T14793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.708485][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.708507][T14793] __sock_sendmsg+0x21c/0x270 [ 390.708540][T14793] ____sys_sendmsg+0x505/0x830 [ 390.708571][T14793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.708603][T14793] ? import_iovec+0x74/0xa0 [ 390.708631][T14793] ___sys_sendmsg+0x21f/0x2a0 [ 390.708656][T14793] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.708731][T14793] ? __fget_files+0x2a/0x420 [ 390.708747][T14793] ? __fget_files+0x3a0/0x420 [ 390.708776][T14793] __x64_sys_sendmsg+0x19b/0x260 [ 390.708802][T14793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.708837][T14793] ? __pfx_ksys_write+0x10/0x10 [ 390.708859][T14793] ? rcu_is_watching+0x15/0xb0 [ 390.708884][T14793] ? do_syscall_64+0xbe/0x3b0 [ 390.708915][T14793] do_syscall_64+0xfa/0x3b0 [ 390.708934][T14793] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.708954][T14793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.708972][T14793] ? clear_bhb_loop+0x60/0xb0 [ 390.708996][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.709013][T14793] RIP: 0033:0x7fe32918eba9 [ 390.709030][T14793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.709046][T14793] RSP: 002b:00007fe329fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.709067][T14793] RAX: ffffffffffffffda RBX: 00007fe3293d5fa0 RCX: 00007fe32918eba9 [ 390.709080][T14793] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 390.709093][T14793] RBP: 00007fe329fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 390.709104][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.709115][T14793] R13: 00007fe3293d6038 R14: 00007fe3293d5fa0 R15: 00007fffb784bec8 [ 390.709149][T14793] [ 391.228171][T14810] FAULT_INJECTION: forcing a failure. [ 391.228171][T14810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.266015][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.5.2702 Not tainted syzkaller #0 PREEMPT(full) [ 391.266047][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.266059][T14810] Call Trace: [ 391.266067][T14810] [ 391.266076][T14810] dump_stack_lvl+0x189/0x250 [ 391.266105][T14810] ? __pfx____ratelimit+0x10/0x10 [ 391.266127][T14810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.266148][T14810] ? __pfx__printk+0x10/0x10 [ 391.266175][T14810] ? fs_reclaim_acquire+0x7d/0x100 [ 391.266204][T14810] should_fail_ex+0x414/0x560 [ 391.266234][T14810] prepare_alloc_pages+0x213/0x610 [ 391.266263][T14810] __alloc_frozen_pages_noprof+0x123/0x370 [ 391.266286][T14810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.266317][T14810] ? policy_nodemask+0x27c/0x720 [ 391.266340][T14810] ? __lock_acquire+0xab9/0xd20 [ 391.266374][T14810] alloc_pages_mpol+0x232/0x4a0 [ 391.266406][T14810] vma_alloc_folio_noprof+0xe4/0x200 [ 391.266444][T14810] ? page_table_check_set+0x18d/0x730 [ 391.266468][T14810] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 391.266509][T14810] folio_prealloc+0x30/0x180 [ 391.266538][T14810] __handle_mm_fault+0x2ab9/0x5440 [ 391.266583][T14810] ? __pfx___handle_mm_fault+0x10/0x10 [ 391.266626][T14810] ? follow_page_pte+0x7ef/0x13e0 [ 391.266661][T14810] handle_mm_fault+0x40a/0x8e0 [ 391.266697][T14810] __get_user_pages+0x1699/0x2ce0 [ 391.266717][T14810] ? __lock_acquire+0xab9/0xd20 [ 391.266782][T14810] __gup_longterm_locked+0xde9/0x1660 [ 391.266822][T14810] ? sanity_check_pinned_pages+0x1241/0x1300 [ 391.266843][T14810] ? gup_fast_fallback+0x195f/0x2010 [ 391.266864][T14810] gup_fast_fallback+0x1e6a/0x2010 [ 391.266913][T14810] ? __pfx_gup_fast_fallback+0x10/0x10 [ 391.266938][T14810] ? rcu_is_watching+0x15/0xb0 [ 391.266953][T14810] ? is_valid_gup_args+0x11f/0x200 [ 391.266973][T14810] ? pin_user_pages_fast+0x4d/0xb0 [ 391.266993][T14810] rds_info_getsockopt+0x1fb/0x470 [ 391.267015][T14810] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 391.267040][T14810] ? __might_fault+0xb0/0x130 [ 391.267064][T14810] ? rds_getsockopt+0x2b4/0x500 [ 391.267082][T14810] ? __pfx_rds_getsockopt+0x10/0x10 [ 391.267102][T14810] do_sock_getsockopt+0x36f/0x450 [ 391.267123][T14810] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 391.267140][T14810] ? write_ibpb+0x30/0x40 [ 391.267155][T14810] ? __fget_files+0x3a0/0x420 [ 391.267169][T14810] ? __fget_files+0x2a/0x420 [ 391.267188][T14810] __x64_sys_getsockopt+0x1a5/0x250 [ 391.267205][T14810] ? write_ibpb+0x30/0x40 [ 391.267222][T14810] ? write_ibpb+0x30/0x40 [ 391.267241][T14810] do_syscall_64+0xfa/0x3b0 [ 391.267256][T14810] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.267271][T14810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.267286][T14810] ? clear_bhb_loop+0x60/0xb0 [ 391.267304][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.267318][T14810] RIP: 0033:0x7f203798eba9 [ 391.267334][T14810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.267349][T14810] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 391.267368][T14810] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 391.267389][T14810] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 391.267399][T14810] RBP: 00007f2038732090 R08: 0000200000000000 R09: 0000000000000000 [ 391.267408][T14810] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 391.267424][T14810] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 391.267452][T14810] [ 391.814144][T14815] lo speed is unknown, defaulting to 1000 [ 391.821947][T14815] lo speed is unknown, defaulting to 1000 [ 391.857998][T14821] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2708'. [ 392.211110][T14836] FAULT_INJECTION: forcing a failure. [ 392.211110][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 392.247111][T14838] FAULT_INJECTION: forcing a failure. [ 392.247111][T14838] name failslab, interval 1, probability 0, space 0, times 0 [ 392.273942][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.6.2711 Not tainted syzkaller #0 PREEMPT(full) [ 392.273972][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.273984][T14836] Call Trace: [ 392.273992][T14836] [ 392.274001][T14836] dump_stack_lvl+0x189/0x250 [ 392.274030][T14836] ? __pfx____ratelimit+0x10/0x10 [ 392.274053][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.274077][T14836] ? __pfx__printk+0x10/0x10 [ 392.274106][T14836] ? __lock_acquire+0xab9/0xd20 [ 392.274146][T14836] should_fail_ex+0x414/0x560 [ 392.274180][T14836] should_failslab+0xa8/0x100 [ 392.274210][T14836] kmem_cache_alloc_noprof+0x73/0x3c0 [ 392.274235][T14836] ? skb_clone+0x212/0x3a0 [ 392.274265][T14836] skb_clone+0x212/0x3a0 [ 392.274294][T14836] __netlink_deliver_tap+0x404/0x850 [ 392.274332][T14836] ? netlink_deliver_tap+0x2e/0x1b0 [ 392.274355][T14836] netlink_deliver_tap+0x19c/0x1b0 [ 392.274377][T14836] netlink_unicast+0x7fa/0x9e0 [ 392.274417][T14836] ? __pfx_netlink_unicast+0x10/0x10 [ 392.274449][T14836] ? netlink_sendmsg+0x642/0xb30 [ 392.274475][T14836] ? skb_put+0x11b/0x210 [ 392.274502][T14836] netlink_sendmsg+0x805/0xb30 [ 392.274535][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.274560][T14836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 392.274582][T14836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.274602][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.274625][T14836] __sock_sendmsg+0x21c/0x270 [ 392.274659][T14836] ____sys_sendmsg+0x505/0x830 [ 392.274690][T14836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.274725][T14836] ? import_iovec+0x74/0xa0 [ 392.274753][T14836] ___sys_sendmsg+0x21f/0x2a0 [ 392.274780][T14836] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.274851][T14836] ? __fget_files+0x2a/0x420 [ 392.274867][T14836] ? __fget_files+0x3a0/0x420 [ 392.274898][T14836] __x64_sys_sendmsg+0x19b/0x260 [ 392.274925][T14836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.274962][T14836] ? __pfx_ksys_write+0x10/0x10 [ 392.274985][T14836] ? rcu_is_watching+0x15/0xb0 [ 392.275011][T14836] ? do_syscall_64+0xbe/0x3b0 [ 392.275038][T14836] do_syscall_64+0xfa/0x3b0 [ 392.275057][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.275077][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.275096][T14836] ? clear_bhb_loop+0x60/0xb0 [ 392.275120][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.275138][T14836] RIP: 0033:0x7f709078eba9 [ 392.275155][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.275172][T14836] RSP: 002b:00007f70916ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.275195][T14836] RAX: ffffffffffffffda RBX: 00007f70909d5fa0 RCX: 00007f709078eba9 [ 392.275209][T14836] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 392.275222][T14836] RBP: 00007f70916ef090 R08: 0000000000000000 R09: 0000000000000000 [ 392.275234][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.275246][T14836] R13: 00007f70909d6038 R14: 00007f70909d5fa0 R15: 00007ffe9db92f78 [ 392.275282][T14836] [ 392.298831][T14838] CPU: 0 UID: 0 PID: 14838 Comm: syz.8.2713 Not tainted syzkaller #0 PREEMPT(full) [ 392.298857][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.298868][T14838] Call Trace: [ 392.298876][T14838] [ 392.298883][T14838] dump_stack_lvl+0x189/0x250 [ 392.298908][T14838] ? __pfx____ratelimit+0x10/0x10 [ 392.298927][T14838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.298947][T14838] ? __pfx__printk+0x10/0x10 [ 392.298976][T14838] ? __pfx___might_resched+0x10/0x10 [ 392.298998][T14838] should_fail_ex+0x414/0x560 [ 392.299025][T14838] ? map_get_next_key+0x22a/0x5f0 [ 392.299045][T14838] should_failslab+0xa8/0x100 [ 392.299070][T14838] __kvmalloc_node_noprof+0x161/0x5f0 [ 392.299094][T14838] ? map_get_next_key+0x22a/0x5f0 [ 392.299114][T14838] ? _copy_from_user+0x94/0xb0 [ 392.299137][T14838] map_get_next_key+0x22a/0x5f0 [ 392.299159][T14838] ? bpf_lsm_bpf+0x9/0x20 [ 392.299184][T14838] __sys_bpf+0x65e/0x870 [ 392.299207][T14838] ? __pfx___sys_bpf+0x10/0x10 [ 392.299242][T14838] ? ksys_write+0x22a/0x250 [ 392.299266][T14838] ? __pfx_ksys_write+0x10/0x10 [ 392.299296][T14838] __x64_sys_bpf+0x7c/0x90 [ 392.299316][T14838] do_syscall_64+0xfa/0x3b0 [ 392.299334][T14838] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.299351][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.299367][T14838] ? clear_bhb_loop+0x60/0xb0 [ 392.299392][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.299408][T14838] RIP: 0033:0x7f042a38eba9 [ 392.299424][T14838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.299438][T14838] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.299456][T14838] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 392.299469][T14838] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 392.299479][T14838] RBP: 00007f042b266090 R08: 0000000000000000 R09: 0000000000000000 [ 392.299489][T14838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.299499][T14838] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 392.299528][T14838] [ 392.953807][T14841] lo speed is unknown, defaulting to 1000 [ 392.961787][T14841] lo speed is unknown, defaulting to 1000 [ 393.341199][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2720'. [ 393.385972][T14865] lo speed is unknown, defaulting to 1000 [ 393.399825][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2720'. [ 393.424888][T14865] lo speed is unknown, defaulting to 1000 [ 393.656656][T14881] netlink: 'syz.8.2725': attribute type 13 has an invalid length. [ 393.665124][T14881] netlink: 'syz.8.2725': attribute type 17 has an invalid length. [ 394.072238][T14888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.112272][T14881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.337465][T14892] netlink: 380 bytes leftover after parsing attributes in process `syz.7.2728'. [ 396.658200][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2729'. [ 396.771144][T14917] netlink: 'syz.6.2734': attribute type 1 has an invalid length. [ 396.786477][T14917] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2734'. [ 396.871089][T14916] RDS: rds_bind could not find a transport for ::ffff:172.30.1.10, load rds_tcp or rds_rdma? [ 396.885060][T14916] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2735'. [ 396.899286][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2736'. [ 397.244399][T14916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.264733][T14916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.282239][T14916] bond0 (unregistering): (slave team0): Releasing backup interface [ 397.320975][T14916] bond0 (unregistering): Released all slaves [ 397.657211][T14938] netlink: 'syz.8.2741': attribute type 1 has an invalid length. [ 397.747220][T14932] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 397.975026][T14953] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2749'. [ 398.128472][T14961] FAULT_INJECTION: forcing a failure. [ 398.128472][T14961] name failslab, interval 1, probability 0, space 0, times 0 [ 398.163033][T14961] CPU: 0 UID: 0 PID: 14961 Comm: syz.6.2753 Not tainted syzkaller #0 PREEMPT(full) [ 398.163070][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.163081][T14961] Call Trace: [ 398.163089][T14961] [ 398.163098][T14961] dump_stack_lvl+0x189/0x250 [ 398.163127][T14961] ? __pfx____ratelimit+0x10/0x10 [ 398.163150][T14961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.163174][T14961] ? __pfx__printk+0x10/0x10 [ 398.163205][T14961] ? __pfx___might_resched+0x10/0x10 [ 398.163223][T14961] ? fs_reclaim_acquire+0x7d/0x100 [ 398.163246][T14961] should_fail_ex+0x414/0x560 [ 398.163277][T14961] should_failslab+0xa8/0x100 [ 398.163307][T14961] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 398.163344][T14961] ? __alloc_skb+0x112/0x2d0 [ 398.163369][T14961] __alloc_skb+0x112/0x2d0 [ 398.163395][T14961] netlink_ack+0x146/0xa50 [ 398.163412][T14961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.163431][T14961] ? ref_tracker_free+0x63a/0x7d0 [ 398.163458][T14961] ? __asan_memcpy+0x40/0x70 [ 398.163479][T14961] ? __pfx_ref_tracker_free+0x10/0x10 [ 398.163519][T14961] netlink_rcv_skb+0x28c/0x470 [ 398.163540][T14961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 398.163562][T14961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.163595][T14961] ? netlink_deliver_tap+0x2e/0x1b0 [ 398.163625][T14961] netlink_unicast+0x82f/0x9e0 [ 398.163665][T14961] ? __pfx_netlink_unicast+0x10/0x10 [ 398.163696][T14961] ? netlink_sendmsg+0x642/0xb30 [ 398.163714][T14961] ? skb_put+0x11b/0x210 [ 398.163739][T14961] netlink_sendmsg+0x805/0xb30 [ 398.163772][T14961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.163797][T14961] ? aa_sock_msg_perm+0xf1/0x1d0 [ 398.163818][T14961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.163839][T14961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.163861][T14961] __sock_sendmsg+0x21c/0x270 [ 398.163894][T14961] ____sys_sendmsg+0x505/0x830 [ 398.163924][T14961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.163959][T14961] ? import_iovec+0x74/0xa0 [ 398.163988][T14961] ___sys_sendmsg+0x21f/0x2a0 [ 398.164014][T14961] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.164080][T14961] ? __fget_files+0x2a/0x420 [ 398.164098][T14961] ? __fget_files+0x3a0/0x420 [ 398.164128][T14961] __x64_sys_sendmsg+0x19b/0x260 [ 398.164155][T14961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.164189][T14961] ? __pfx_ksys_write+0x10/0x10 [ 398.164212][T14961] ? rcu_is_watching+0x15/0xb0 [ 398.164237][T14961] ? do_syscall_64+0xbe/0x3b0 [ 398.164265][T14961] do_syscall_64+0xfa/0x3b0 [ 398.164285][T14961] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.164305][T14961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.164323][T14961] ? clear_bhb_loop+0x60/0xb0 [ 398.164357][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.164375][T14961] RIP: 0033:0x7f709078eba9 [ 398.164393][T14961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.164410][T14961] RSP: 002b:00007f70916ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.164433][T14961] RAX: ffffffffffffffda RBX: 00007f70909d5fa0 RCX: 00007f709078eba9 [ 398.164447][T14961] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000003 [ 398.164459][T14961] RBP: 00007f70916ef090 R08: 0000000000000000 R09: 0000000000000000 [ 398.164471][T14961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.164482][T14961] R13: 00007f70909d6038 R14: 00007f70909d5fa0 R15: 00007ffe9db92f78 [ 398.164516][T14961] [ 398.576134][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2754'. [ 398.669667][T14966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2754'. [ 398.688786][T14966] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2754'. [ 398.861224][T14978] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2761'. [ 398.983801][T14976] tipc: Enabled bearer , priority 0 [ 398.998669][T14985] syzkaller0: entered promiscuous mode [ 399.007079][T14985] syzkaller0: entered allmulticast mode [ 399.072475][T14976] tipc: Resetting bearer [ 399.288348][T14973] tipc: Resetting bearer [ 399.372806][T14973] tipc: Disabling bearer [ 399.408876][T14994] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 399.446637][T14994] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 399.487787][T14999] lo speed is unknown, defaulting to 1000 [ 399.499824][T14999] lo speed is unknown, defaulting to 1000 [ 399.623961][T15011] netlink: 'syz.5.2772': attribute type 1 has an invalid length. [ 399.648179][T15011] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2772'. [ 401.700511][T15029] bond0: (slave wlan1): Releasing backup interface [ 401.805234][T15044] dvmrp8: entered allmulticast mode [ 401.881615][T15041] syz_tun: entered allmulticast mode [ 401.996397][T15036] syz_tun: left allmulticast mode [ 402.210533][T15056] FAULT_INJECTION: forcing a failure. [ 402.210533][T15056] name failslab, interval 1, probability 0, space 0, times 0 [ 402.249225][T15058] siw: device registration error -23 [ 402.259667][T15056] CPU: 0 UID: 0 PID: 15056 Comm: syz.8.2786 Not tainted syzkaller #0 PREEMPT(full) [ 402.259700][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.259712][T15056] Call Trace: [ 402.259720][T15056] [ 402.259729][T15056] dump_stack_lvl+0x189/0x250 [ 402.259759][T15056] ? __pfx____ratelimit+0x10/0x10 [ 402.259781][T15056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.259804][T15056] ? __pfx__printk+0x10/0x10 [ 402.259834][T15056] ? __lock_acquire+0xab9/0xd20 [ 402.259873][T15056] should_fail_ex+0x414/0x560 [ 402.259906][T15056] should_failslab+0xa8/0x100 [ 402.259935][T15056] kmem_cache_alloc_noprof+0x73/0x3c0 [ 402.259967][T15056] ? skb_clone+0x212/0x3a0 [ 402.259997][T15056] skb_clone+0x212/0x3a0 [ 402.260025][T15056] __netlink_deliver_tap+0x404/0x850 [ 402.260062][T15056] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.260085][T15056] netlink_deliver_tap+0x19c/0x1b0 [ 402.260107][T15056] netlink_unicast+0x7fa/0x9e0 [ 402.260144][T15056] ? __pfx_netlink_unicast+0x10/0x10 [ 402.260174][T15056] ? netlink_sendmsg+0x642/0xb30 [ 402.260191][T15056] ? skb_put+0x11b/0x210 [ 402.260214][T15056] netlink_sendmsg+0x805/0xb30 [ 402.260247][T15056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.260272][T15056] ? aa_sock_msg_perm+0xf1/0x1d0 [ 402.260293][T15056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.260313][T15056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.260333][T15056] __sock_sendmsg+0x21c/0x270 [ 402.260380][T15056] ____sys_sendmsg+0x505/0x830 [ 402.260412][T15056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.260448][T15056] ? import_iovec+0x74/0xa0 [ 402.260476][T15056] ___sys_sendmsg+0x21f/0x2a0 [ 402.260504][T15056] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.260575][T15056] ? __fget_files+0x2a/0x420 [ 402.260592][T15056] ? __fget_files+0x3a0/0x420 [ 402.260622][T15056] __x64_sys_sendmsg+0x19b/0x260 [ 402.260648][T15056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.260683][T15056] ? __pfx_ksys_write+0x10/0x10 [ 402.260706][T15056] ? rcu_is_watching+0x15/0xb0 [ 402.260732][T15056] ? do_syscall_64+0xbe/0x3b0 [ 402.260760][T15056] do_syscall_64+0xfa/0x3b0 [ 402.260779][T15056] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.260799][T15056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.260818][T15056] ? clear_bhb_loop+0x60/0xb0 [ 402.260842][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.260861][T15056] RIP: 0033:0x7f042a38eba9 [ 402.260879][T15056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.260895][T15056] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.260918][T15056] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 402.260933][T15056] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 402.260945][T15056] RBP: 00007f042b266090 R08: 0000000000000000 R09: 0000000000000000 [ 402.260957][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.260968][T15056] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 402.261003][T15056] [ 402.290420][T15058] netlink: 'syz.6.2787': attribute type 12 has an invalid length. [ 402.616606][T15067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.782915][T15075] netlink: 'syz.5.2792': attribute type 1 has an invalid length. [ 402.957234][T15084] netlink: 'syz.5.2794': attribute type 1 has an invalid length. [ 402.999129][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.095834][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.117171][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.394694][T13314] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.415467][T13314] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.522435][T13314] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.551645][T13314] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.623762][T15098] pimreg: tun_chr_ioctl cmd 1074025675 [ 403.629289][T15098] pimreg: persist disabled [ 403.661208][T15098] __nla_validate_parse: 2 callbacks suppressed [ 403.661227][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2798'. [ 403.752818][T15107] netlink: 71 bytes leftover after parsing attributes in process `syz.8.2798'. [ 403.762962][T15107] netlink: 'syz.8.2798': attribute type 39 has an invalid length. [ 403.883738][T15114] IPVS: rr: FWM 3 0x00000003 - no destination available [ 403.962961][T15118] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2807'. [ 404.019118][T15118] netlink: 'syz.5.2807': attribute type 1 has an invalid length. [ 404.043419][T15118] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2807'. [ 404.361511][T15130] netlink: 'syz.7.2811': attribute type 2 has an invalid length. [ 404.369545][T15130] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2811'. [ 406.062910][T15136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.137327][T15134] lo speed is unknown, defaulting to 1000 [ 406.167719][T15134] lo speed is unknown, defaulting to 1000 [ 406.184558][T15141] netlink: 'syz.6.2814': attribute type 12 has an invalid length. [ 406.562533][ T5943] IPVS: starting estimator thread 0... [ 406.589720][T15157] IPVS: rr: FWM 3 0x00000003 - no destination available [ 406.743621][T15158] IPVS: using max 23 ests per chain, 55200 per kthread [ 407.176918][T15163] syzkaller0: entered promiscuous mode [ 407.194652][T15163] syzkaller0: entered allmulticast mode [ 407.364652][T15173] netlink: 'syz.8.2822': attribute type 4 has an invalid length. [ 409.058923][T15178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.119459][T15175] lo speed is unknown, defaulting to 1000 [ 409.203760][T15175] lo speed is unknown, defaulting to 1000 [ 409.229286][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2829'. [ 409.283020][T15196] nicvf0: entered promiscuous mode [ 409.299210][T13758] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 409.342921][T13758] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 409.350584][T15199] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.2828'. [ 409.455982][T13758] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 409.477925][T13758] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 409.623093][T15212] netlink: 'syz.9.2831': attribute type 1 has an invalid length. [ 409.636476][T15212] netlink: 'syz.9.2831': attribute type 1 has an invalid length. [ 409.783996][ T30] audit: type=1800 audit(1757606750.167:5): pid=15220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2836" name="blkio.bfq.time_recursive" dev="tmpfs" ino=805 res=0 errno=0 [ 409.947936][T15227] netlink: 'syz.9.2831': attribute type 1 has an invalid length. [ 410.149948][T15232] FAULT_INJECTION: forcing a failure. [ 410.149948][T15232] name failslab, interval 1, probability 0, space 0, times 0 [ 410.156945][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2839'. [ 410.171864][T15232] CPU: 0 UID: 0 PID: 15232 Comm: syz.7.2840 Not tainted syzkaller #0 PREEMPT(full) [ 410.171893][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.171904][T15232] Call Trace: [ 410.171911][T15232] [ 410.171919][T15232] dump_stack_lvl+0x189/0x250 [ 410.171949][T15232] ? __pfx____ratelimit+0x10/0x10 [ 410.171971][T15232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.171994][T15232] ? __pfx__printk+0x10/0x10 [ 410.172024][T15232] ? __pfx___might_resched+0x10/0x10 [ 410.172043][T15232] ? fs_reclaim_acquire+0x7d/0x100 [ 410.172067][T15232] should_fail_ex+0x414/0x560 [ 410.172099][T15232] should_failslab+0xa8/0x100 [ 410.172126][T15232] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 410.172153][T15232] ? __alloc_skb+0x112/0x2d0 [ 410.172179][T15232] __alloc_skb+0x112/0x2d0 [ 410.172205][T15232] alloc_skb_with_frags+0xca/0x890 [ 410.172226][T15232] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 410.172254][T15232] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 410.172282][T15232] ? aa_label_sk_perm+0x4cd/0x630 [ 410.172316][T15232] sock_alloc_send_pskb+0x857/0x990 [ 410.172366][T15232] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 410.172399][T15232] ? dev_get_by_index+0x22/0x2e0 [ 410.172426][T15232] ? dev_get_by_index+0x22/0x2e0 [ 410.172461][T15232] raw_sendmsg+0x25b/0x1180 [ 410.172497][T15232] ? __pfx_raw_sendmsg+0x10/0x10 [ 410.172538][T15232] ? __lock_acquire+0xab9/0xd20 [ 410.172564][T15232] ? aa_sock_msg_perm+0xf1/0x1d0 [ 410.172586][T15232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.172607][T15232] ? __pfx_raw_sendmsg+0x10/0x10 [ 410.172633][T15232] __sock_sendmsg+0x21c/0x270 [ 410.172666][T15232] ____sys_sendmsg+0x505/0x830 [ 410.172697][T15232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.172729][T15232] ? import_iovec+0x74/0xa0 [ 410.172758][T15232] ___sys_sendmsg+0x21f/0x2a0 [ 410.172785][T15232] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.172852][T15232] ? __fget_files+0x2a/0x420 [ 410.172869][T15232] ? __fget_files+0x3a0/0x420 [ 410.172900][T15232] __x64_sys_sendmsg+0x19b/0x260 [ 410.172928][T15232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.172963][T15232] ? __pfx_ksys_write+0x10/0x10 [ 410.172987][T15232] ? rcu_is_watching+0x15/0xb0 [ 410.173013][T15232] ? do_syscall_64+0xbe/0x3b0 [ 410.173041][T15232] do_syscall_64+0xfa/0x3b0 [ 410.173061][T15232] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.173081][T15232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.173099][T15232] ? clear_bhb_loop+0x60/0xb0 [ 410.173123][T15232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.173142][T15232] RIP: 0033:0x7fe32918eba9 [ 410.173160][T15232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.173183][T15232] RSP: 002b:00007fe329fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.173206][T15232] RAX: ffffffffffffffda RBX: 00007fe3293d5fa0 RCX: 00007fe32918eba9 [ 410.173220][T15232] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 410.173232][T15232] RBP: 00007fe329fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 410.173245][T15232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.173256][T15232] R13: 00007fe3293d6038 R14: 00007fe3293d5fa0 R15: 00007fffb784bec8 [ 410.173289][T15232] [ 410.706220][T15243] tipc: Enabling of bearer rejected, failed to enable media [ 410.826760][T15243] syzkaller0: entered promiscuous mode [ 410.832381][T15243] syzkaller0: entered allmulticast mode [ 413.062915][T15264] tipc: Enabling of bearer rejected, failed to enable media [ 413.127822][T15266] syzkaller0: entered promiscuous mode [ 413.133786][T15266] syzkaller0: entered allmulticast mode [ 413.356971][T15276] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2851'. [ 413.578761][T15283] netlink: 'syz.8.2854': attribute type 1 has an invalid length. [ 415.301555][T15291] IPVS: rr: FWM 3 0x00000003 - no destination available [ 415.397828][T15289] netlink: 'syz.5.2856': attribute type 1 has an invalid length. [ 415.417540][T15289] netlink: 'syz.5.2856': attribute type 1 has an invalid length. [ 415.484032][T15299] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2856'. [ 415.588177][T15302] syz_tun: entered allmulticast mode [ 415.655564][T15300] syz_tun: left allmulticast mode [ 415.894257][T15316] openvswitch: netlink: Flow actions attr not present in new flow. [ 415.990823][T15314] lo speed is unknown, defaulting to 1000 [ 416.059646][T15314] lo speed is unknown, defaulting to 1000 [ 416.091721][T15319] tipc: Enabling of bearer rejected, failed to enable media [ 416.220295][T15319] syzkaller0: entered promiscuous mode [ 416.225976][T15319] syzkaller0: entered allmulticast mode [ 419.084936][T15350] tipc: Started in network mode [ 419.111697][T15350] tipc: Node identity 62a41dddcb56, cluster identity 4711 [ 419.115107][T15355] openvswitch: netlink: Flow actions attr not present in new flow. [ 419.136333][T15350] tipc: Enabled bearer , priority 0 [ 419.202528][T15343] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 419.221534][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2879'. [ 419.264629][T15350] bridge_slave_0: left allmulticast mode [ 419.282043][T15350] bridge_slave_0: left promiscuous mode [ 419.295599][T15350] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.330416][T15350] bridge_slave_1: left allmulticast mode [ 419.342622][T15350] bridge_slave_1: left promiscuous mode [ 419.364702][T15350] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.370614][T15365] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2882'. [ 419.410406][T15350] bond0: (slave bond_slave_0): Releasing backup interface [ 419.431164][T15350] bond0: (slave bond_slave_1): Releasing backup interface [ 419.481892][T15350] team0: Port device team_slave_0 removed [ 419.514377][T15350] team0: Port device team_slave_1 removed [ 419.520988][T15350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.541892][T15350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.551806][T15350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.594861][T15342] tipc: Disabling bearer [ 419.698031][T15375] FAULT_INJECTION: forcing a failure. [ 419.698031][T15375] name failslab, interval 1, probability 0, space 0, times 0 [ 419.712875][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.8.2885 Not tainted syzkaller #0 PREEMPT(full) [ 419.712904][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.712916][T15375] Call Trace: [ 419.712925][T15375] [ 419.712933][T15375] dump_stack_lvl+0x189/0x250 [ 419.712960][T15375] ? __pfx____ratelimit+0x10/0x10 [ 419.712980][T15375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.713002][T15375] ? __pfx__printk+0x10/0x10 [ 419.713031][T15375] ? __lock_acquire+0xab9/0xd20 [ 419.713070][T15375] should_fail_ex+0x414/0x560 [ 419.713103][T15375] should_failslab+0xa8/0x100 [ 419.713132][T15375] kmem_cache_alloc_noprof+0x73/0x3c0 [ 419.713156][T15375] ? skb_clone+0x212/0x3a0 [ 419.713191][T15375] skb_clone+0x212/0x3a0 [ 419.713219][T15375] __netlink_deliver_tap+0x404/0x850 [ 419.713264][T15375] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.713287][T15375] netlink_deliver_tap+0x19c/0x1b0 [ 419.713308][T15375] netlink_unicast+0x7fa/0x9e0 [ 419.713349][T15375] ? __pfx_netlink_unicast+0x10/0x10 [ 419.713380][T15375] ? netlink_sendmsg+0x642/0xb30 [ 419.713397][T15375] ? skb_put+0x11b/0x210 [ 419.713422][T15375] netlink_sendmsg+0x805/0xb30 [ 419.713454][T15375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.713478][T15375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.713499][T15375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.713519][T15375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.713541][T15375] __sock_sendmsg+0x21c/0x270 [ 419.713574][T15375] ____sys_sendmsg+0x505/0x830 [ 419.713606][T15375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.713642][T15375] ? import_iovec+0x74/0xa0 [ 419.713670][T15375] ___sys_sendmsg+0x21f/0x2a0 [ 419.713696][T15375] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.713765][T15375] ? __fget_files+0x2a/0x420 [ 419.713781][T15375] ? __fget_files+0x3a0/0x420 [ 419.713811][T15375] __x64_sys_sendmsg+0x19b/0x260 [ 419.713839][T15375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.713875][T15375] ? __pfx_ksys_write+0x10/0x10 [ 419.713897][T15375] ? rcu_is_watching+0x15/0xb0 [ 419.713924][T15375] ? do_syscall_64+0xbe/0x3b0 [ 419.713949][T15375] do_syscall_64+0xfa/0x3b0 [ 419.713967][T15375] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.713986][T15375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.714005][T15375] ? clear_bhb_loop+0x60/0xb0 [ 419.714028][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.714046][T15375] RIP: 0033:0x7f042a38eba9 [ 419.714063][T15375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.714079][T15375] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.714100][T15375] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 419.714114][T15375] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 419.714125][T15375] RBP: 00007f042b266090 R08: 0000000000000000 R09: 0000000000000000 [ 419.714137][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.714148][T15375] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 419.714184][T15375] [ 420.121775][T15381] IPVS: rr: FWM 3 0x00000003 - no destination available [ 420.129350][ T8744] IPVS: starting estimator thread 0... [ 420.208731][T15380] tipc: Enabling of bearer rejected, failed to enable media [ 420.253511][T15382] IPVS: using max 25 ests per chain, 60000 per kthread [ 420.376936][T15380] syzkaller0: entered promiscuous mode [ 420.382617][T15380] syzkaller0: entered allmulticast mode [ 420.577602][T15400] FAULT_INJECTION: forcing a failure. [ 420.577602][T15400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.591526][T15400] CPU: 1 UID: 0 PID: 15400 Comm: syz.8.2894 Not tainted syzkaller #0 PREEMPT(full) [ 420.591555][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.591567][T15400] Call Trace: [ 420.591575][T15400] [ 420.591584][T15400] dump_stack_lvl+0x189/0x250 [ 420.591612][T15400] ? __pfx____ratelimit+0x10/0x10 [ 420.591632][T15400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.591653][T15400] ? __pfx__printk+0x10/0x10 [ 420.591679][T15400] ? __might_fault+0xb0/0x130 [ 420.591718][T15400] should_fail_ex+0x414/0x560 [ 420.591749][T15400] _copy_from_user+0x2d/0xb0 [ 420.591771][T15400] ___sys_recvmsg+0x12e/0x510 [ 420.591801][T15400] ? __pfx____sys_recvmsg+0x10/0x10 [ 420.591854][T15400] ? __fget_files+0x3a0/0x420 [ 420.591884][T15400] do_recvmmsg+0x307/0x770 [ 420.591916][T15400] ? __pfx_do_recvmmsg+0x10/0x10 [ 420.591954][T15400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.591997][T15400] __x64_sys_recvmmsg+0x190/0x240 [ 420.592024][T15400] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 420.592044][T15400] ? rcu_is_watching+0x15/0xb0 [ 420.592069][T15400] ? do_syscall_64+0xbe/0x3b0 [ 420.592094][T15400] do_syscall_64+0xfa/0x3b0 [ 420.592114][T15400] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.592132][T15400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.592151][T15400] ? clear_bhb_loop+0x60/0xb0 [ 420.592174][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.592192][T15400] RIP: 0033:0x7f042a38eba9 [ 420.592211][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.592226][T15400] RSP: 002b:00007f042b245038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 420.592247][T15400] RAX: ffffffffffffffda RBX: 00007f042a5d6090 RCX: 00007f042a38eba9 [ 420.592260][T15400] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 420.592272][T15400] RBP: 00007f042b245090 R08: 0000000000000000 R09: 0000000000000000 [ 420.592284][T15400] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000001 [ 420.592296][T15400] R13: 00007f042a5d6128 R14: 00007f042a5d6090 R15: 00007ffc1cb3c0f8 [ 420.592330][T15400] [ 422.656079][T15394] syz_tun: entered allmulticast mode [ 422.661819][T15397] syz_tun: left allmulticast mode [ 422.705805][T15406] syzkaller1: entered promiscuous mode [ 422.711602][T15406] syzkaller1: entered allmulticast mode [ 422.740324][T15411] tipc: Started in network mode [ 422.764194][T15411] tipc: Node identity 080211000001, cluster identity 4711 [ 422.791524][T15411] tipc: Enabled bearer , priority 0 [ 422.829176][T15412] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 422.841790][T15412] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 422.925890][T15426] IPVS: rr: FWM 3 0x00000003 - no destination available [ 423.087151][T15431] FAULT_INJECTION: forcing a failure. [ 423.087151][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 423.135058][T15431] CPU: 1 UID: 0 PID: 15431 Comm: syz.5.2903 Not tainted syzkaller #0 PREEMPT(full) [ 423.135088][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.135101][T15431] Call Trace: [ 423.135109][T15431] [ 423.135117][T15431] dump_stack_lvl+0x189/0x250 [ 423.135145][T15431] ? __pfx____ratelimit+0x10/0x10 [ 423.135165][T15431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.135186][T15431] ? __pfx__printk+0x10/0x10 [ 423.135213][T15431] ? __lock_acquire+0xab9/0xd20 [ 423.135257][T15431] should_fail_ex+0x414/0x560 [ 423.135290][T15431] should_failslab+0xa8/0x100 [ 423.135319][T15431] kmem_cache_alloc_noprof+0x73/0x3c0 [ 423.135342][T15431] ? skb_clone+0x212/0x3a0 [ 423.135370][T15431] skb_clone+0x212/0x3a0 [ 423.135398][T15431] __netlink_deliver_tap+0x404/0x850 [ 423.135434][T15431] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.135456][T15431] netlink_deliver_tap+0x19c/0x1b0 [ 423.135478][T15431] netlink_unicast+0x7fa/0x9e0 [ 423.135517][T15431] ? __pfx_netlink_unicast+0x10/0x10 [ 423.135547][T15431] ? netlink_sendmsg+0x642/0xb30 [ 423.135565][T15431] ? skb_put+0x11b/0x210 [ 423.135590][T15431] netlink_sendmsg+0x805/0xb30 [ 423.135622][T15431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.135647][T15431] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.135669][T15431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.135689][T15431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.135711][T15431] __sock_sendmsg+0x21c/0x270 [ 423.135742][T15431] ____sys_sendmsg+0x505/0x830 [ 423.135773][T15431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.135807][T15431] ? import_iovec+0x74/0xa0 [ 423.135835][T15431] ___sys_sendmsg+0x21f/0x2a0 [ 423.135861][T15431] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.135930][T15431] ? __fget_files+0x2a/0x420 [ 423.135947][T15431] ? __fget_files+0x3a0/0x420 [ 423.135978][T15431] __x64_sys_sendmsg+0x19b/0x260 [ 423.136004][T15431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.136039][T15431] ? __pfx_ksys_write+0x10/0x10 [ 423.136067][T15431] ? rcu_is_watching+0x15/0xb0 [ 423.136093][T15431] ? do_syscall_64+0xbe/0x3b0 [ 423.136120][T15431] do_syscall_64+0xfa/0x3b0 [ 423.136139][T15431] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.136158][T15431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.136175][T15431] ? clear_bhb_loop+0x60/0xb0 [ 423.136198][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.136228][T15431] RIP: 0033:0x7f203798eba9 [ 423.136246][T15431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.136263][T15431] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.136284][T15431] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 423.136297][T15431] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.136310][T15431] RBP: 00007f2038732090 R08: 0000000000000000 R09: 0000000000000000 [ 423.136322][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.136334][T15431] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 423.136369][T15431] [ 423.874994][T15437] openvswitch: netlink: Message has 8 unknown bytes. [ 423.881810][T15437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.904846][ T5943] tipc: Node number set to 134418688 [ 424.196868][T15456] netlink: 'syz.7.2911': attribute type 8 has an invalid length. [ 424.297373][T15460] IPVS: rr: FWM 3 0x00000003 - no destination available [ 424.546912][T15469] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2917'. [ 424.552715][T15475] FAULT_INJECTION: forcing a failure. [ 424.552715][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 424.622125][T15475] CPU: 1 UID: 0 PID: 15475 Comm: syz.6.2916 Not tainted syzkaller #0 PREEMPT(full) [ 424.622152][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.622163][T15475] Call Trace: [ 424.622171][T15475] [ 424.622179][T15475] dump_stack_lvl+0x189/0x250 [ 424.622208][T15475] ? __pfx____ratelimit+0x10/0x10 [ 424.622227][T15475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.622250][T15475] ? __pfx__printk+0x10/0x10 [ 424.622272][T15475] ? trace_contention_end+0x39/0x120 [ 424.622310][T15475] should_fail_ex+0x414/0x560 [ 424.622343][T15475] should_failslab+0xa8/0x100 [ 424.622373][T15475] kmem_cache_alloc_noprof+0x73/0x3c0 [ 424.622396][T15475] ? skb_clone+0x212/0x3a0 [ 424.622426][T15475] skb_clone+0x212/0x3a0 [ 424.622453][T15475] __netlink_deliver_tap+0x404/0x850 [ 424.622497][T15475] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.622520][T15475] netlink_deliver_tap+0x19c/0x1b0 [ 424.622541][T15475] netlink_dump+0x92b/0xe90 [ 424.622576][T15475] ? __pfx_netlink_dump+0x10/0x10 [ 424.622629][T15475] netlink_recvmsg+0x676/0xa30 [ 424.622663][T15475] ? __pfx_netlink_recvmsg+0x10/0x10 [ 424.622686][T15475] ? __lock_acquire+0xab9/0xd20 [ 424.622709][T15475] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.622729][T15475] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 424.622752][T15475] ? __pfx_netlink_recvmsg+0x10/0x10 [ 424.622774][T15475] sock_recvmsg_nosec+0x183/0x1c0 [ 424.622808][T15475] ____sys_recvmsg+0x3aa/0x460 [ 424.622842][T15475] ? __pfx_____sys_recvmsg+0x10/0x10 [ 424.622885][T15475] ? import_iovec+0x74/0xa0 [ 424.622913][T15475] ___sys_recvmsg+0x1b5/0x510 [ 424.622945][T15475] ? __pfx____sys_recvmsg+0x10/0x10 [ 424.623006][T15475] ? __might_fault+0xb0/0x130 [ 424.623036][T15475] do_recvmmsg+0x307/0x770 [ 424.623072][T15475] ? __pfx_do_recvmmsg+0x10/0x10 [ 424.623110][T15475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 424.623159][T15475] __x64_sys_recvmmsg+0x190/0x240 [ 424.623186][T15475] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 424.623206][T15475] ? rcu_is_watching+0x15/0xb0 [ 424.623230][T15475] ? do_syscall_64+0xbe/0x3b0 [ 424.623254][T15475] do_syscall_64+0xfa/0x3b0 [ 424.623272][T15475] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.623290][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.623307][T15475] ? clear_bhb_loop+0x60/0xb0 [ 424.623329][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.623346][T15475] RIP: 0033:0x7f709078eba9 [ 424.623364][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.623380][T15475] RSP: 002b:00007f70916ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 424.623402][T15475] RAX: ffffffffffffffda RBX: 00007f70909d5fa0 RCX: 00007f709078eba9 [ 424.623416][T15475] RDX: 0000000000000004 RSI: 0000200000006880 RDI: 0000000000000003 [ 424.623428][T15475] RBP: 00007f70916ef090 R08: 0000000000000000 R09: 0000000000000000 [ 424.623440][T15475] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000001 [ 424.623452][T15475] R13: 00007f70909d6038 R14: 00007f70909d5fa0 R15: 00007ffe9db92f78 [ 424.623515][T15475] [ 424.945803][T15486] FAULT_INJECTION: forcing a failure. [ 424.945803][T15486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.982960][T15486] CPU: 1 UID: 0 PID: 15486 Comm: syz.9.2922 Not tainted syzkaller #0 PREEMPT(full) [ 424.982990][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.983001][T15486] Call Trace: [ 424.983009][T15486] [ 424.983017][T15486] dump_stack_lvl+0x189/0x250 [ 424.983047][T15486] ? __pfx____ratelimit+0x10/0x10 [ 424.983068][T15486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.983090][T15486] ? __pfx__printk+0x10/0x10 [ 424.983117][T15486] ? __might_fault+0xb0/0x130 [ 424.983157][T15486] should_fail_ex+0x414/0x560 [ 424.983201][T15486] _copy_from_user+0x2d/0xb0 [ 424.983226][T15486] kstrtouint_from_user+0xc4/0x170 [ 424.983248][T15486] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 424.983287][T15486] proc_fail_nth_write+0x88/0x200 [ 424.983310][T15486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 424.983339][T15486] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 424.983360][T15486] vfs_write+0x27b/0xb30 [ 424.983394][T15486] ? __pfx_vfs_write+0x10/0x10 [ 424.983419][T15486] ? __fget_files+0x2a/0x420 [ 424.983441][T15486] ? __fget_files+0x3a0/0x420 [ 424.983456][T15486] ? __fget_files+0x2a/0x420 [ 424.983484][T15486] ksys_write+0x145/0x250 [ 424.983510][T15486] ? __pfx_ksys_write+0x10/0x10 [ 424.983531][T15486] ? rcu_is_watching+0x15/0xb0 [ 424.983557][T15486] ? do_syscall_64+0xbe/0x3b0 [ 424.983583][T15486] do_syscall_64+0xfa/0x3b0 [ 424.983601][T15486] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.983620][T15486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.983638][T15486] ? clear_bhb_loop+0x60/0xb0 [ 424.983662][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.983680][T15486] RIP: 0033:0x7f15d338d65f [ 424.983697][T15486] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 424.983712][T15486] RSP: 002b:00007f15d42b6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 424.983732][T15486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15d338d65f [ 424.983745][T15486] RDX: 0000000000000001 RSI: 00007f15d42b60a0 RDI: 0000000000000004 [ 424.983756][T15486] RBP: 00007f15d42b6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.983767][T15486] R10: 00002000000003c0 R11: 0000000000000293 R12: 0000000000000001 [ 424.983778][T15486] R13: 00007f15d35d6038 R14: 00007f15d35d5fa0 R15: 00007fffef765b68 [ 424.983813][T15486] [ 425.415634][T15496] lo speed is unknown, defaulting to 1000 [ 425.427388][T15496] lo speed is unknown, defaulting to 1000 [ 425.466935][T15499] syz_tun: entered allmulticast mode [ 425.644939][T15504] dvmrp8: entered allmulticast mode [ 425.690437][T15495] syz_tun: left allmulticast mode [ 425.696192][T15495] dvmrp8: left allmulticast mode [ 425.775083][T15513] FAULT_INJECTION: forcing a failure. [ 425.775083][T15513] name failslab, interval 1, probability 0, space 0, times 0 [ 425.797184][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.5.2930 Not tainted syzkaller #0 PREEMPT(full) [ 425.797214][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 425.797225][T15513] Call Trace: [ 425.797233][T15513] [ 425.797242][T15513] dump_stack_lvl+0x189/0x250 [ 425.797272][T15513] ? __pfx____ratelimit+0x10/0x10 [ 425.797292][T15513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.797312][T15513] ? __pfx__printk+0x10/0x10 [ 425.797344][T15513] ? __pfx___might_resched+0x10/0x10 [ 425.797368][T15513] should_fail_ex+0x414/0x560 [ 425.797396][T15513] should_failslab+0xa8/0x100 [ 425.797436][T15513] __kmalloc_noprof+0xcb/0x4f0 [ 425.797458][T15513] ? __kasan_kmalloc+0x93/0xb0 [ 425.797479][T15513] ? nla_strdup+0x9d/0x140 [ 425.797500][T15513] nla_strdup+0x9d/0x140 [ 425.797519][T15513] nf_tables_newtable+0x491/0x1890 [ 425.797541][T15513] ? nfnl_pernet+0x11/0x240 [ 425.797589][T15513] nfnetlink_rcv+0x112f/0x2520 [ 425.797653][T15513] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 425.797699][T15513] ? ref_tracker_free+0x63a/0x7d0 [ 425.797759][T15513] ? __netlink_deliver_tap+0x807/0x850 [ 425.797777][T15513] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.797815][T15513] netlink_unicast+0x82f/0x9e0 [ 425.797857][T15513] ? __pfx_netlink_unicast+0x10/0x10 [ 425.797886][T15513] ? netlink_sendmsg+0x642/0xb30 [ 425.797903][T15513] ? skb_put+0x11b/0x210 [ 425.797929][T15513] netlink_sendmsg+0x805/0xb30 [ 425.797963][T15513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.797988][T15513] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.798008][T15513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.798028][T15513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.798050][T15513] __sock_sendmsg+0x21c/0x270 [ 425.798083][T15513] ____sys_sendmsg+0x505/0x830 [ 425.798113][T15513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.798147][T15513] ? import_iovec+0x74/0xa0 [ 425.798170][T15513] ___sys_sendmsg+0x21f/0x2a0 [ 425.798190][T15513] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.798252][T15513] ? __fget_files+0x2a/0x420 [ 425.798267][T15513] ? __fget_files+0x3a0/0x420 [ 425.798294][T15513] __x64_sys_sendmsg+0x19b/0x260 [ 425.798315][T15513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.798342][T15513] ? __pfx_ksys_write+0x10/0x10 [ 425.798373][T15513] ? do_syscall_64+0xbe/0x3b0 [ 425.798513][T15513] do_syscall_64+0xfa/0x3b0 [ 425.798549][T15513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.798567][T15513] ? asm_sysvec_call_function_single+0x1a/0x20 [ 425.798585][T15513] ? clear_bhb_loop+0x60/0xb0 [ 425.798607][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.798625][T15513] RIP: 0033:0x7f203798eba9 [ 425.798643][T15513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.798658][T15513] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.798679][T15513] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 425.798693][T15513] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 425.798704][T15513] RBP: 00007f2038732090 R08: 0000000000000000 R09: 0000000000000000 [ 425.798715][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.798732][T15513] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 425.798765][T15513] [ 426.204815][T15516] netlink: 'syz.7.2929': attribute type 1 has an invalid length. [ 426.301833][T15516] netlink: 'syz.7.2929': attribute type 1 has an invalid length. [ 426.417607][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2923'. [ 426.424935][T15519] netlink: 'syz.5.2931': attribute type 1 has an invalid length. [ 426.476918][T15519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2931'. [ 426.526432][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2931'. [ 426.943858][T15533] netlink: 'syz.7.2929': attribute type 1 has an invalid length. [ 427.577981][T15551] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 429.206188][T15556] debugfs: 'netdev:nicvf0' already exists in 'phy19' [ 429.555740][T15569] lo speed is unknown, defaulting to 1000 [ 429.561475][T15577] netlink: 'syz.8.2945': attribute type 1 has an invalid length. [ 429.591479][T15577] netlink: 'syz.8.2945': attribute type 1 has an invalid length. [ 429.604477][T15569] lo speed is unknown, defaulting to 1000 [ 429.662363][T15582] netlink: 'syz.9.2950': attribute type 1 has an invalid length. [ 429.872491][T15587] netlink: 'syz.8.2945': attribute type 1 has an invalid length. [ 430.085911][T15590] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 430.111759][T15595] syz_tun: entered allmulticast mode [ 430.201108][T15597] dvmrp8: entered allmulticast mode [ 430.249952][T15601] netlink: 'syz.5.2954': attribute type 83 has an invalid length. [ 430.250981][T15602] netlink: 'syz.5.2954': attribute type 83 has an invalid length. [ 430.304518][T15588] syz_tun: left allmulticast mode [ 430.309733][T15588] dvmrp8: left allmulticast mode [ 430.504846][T15601] syzkaller1: entered promiscuous mode [ 430.523771][T15601] syzkaller1: entered allmulticast mode [ 430.858395][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2960'. [ 431.435479][T15636] netlink: 'syz.6.2962': attribute type 1 has an invalid length. [ 431.451204][T15633] lo speed is unknown, defaulting to 1000 [ 431.503343][T15633] lo speed is unknown, defaulting to 1000 [ 432.234798][T15658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.337525][T15661] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2973'. [ 432.434552][T15665] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2974'. [ 432.540736][T15671] netlink: 'syz.6.2978': attribute type 19 has an invalid length. [ 432.550317][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2978'. [ 432.608352][T13758] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.608582][T15671] netlink: 'syz.6.2978': attribute type 19 has an invalid length. [ 432.625520][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2978'. [ 432.648788][T13758] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.680935][T13758] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.726369][T13758] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.784932][T15687] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2979'. [ 433.418696][T15704] netlink: 'syz.8.2986': attribute type 31 has an invalid length. [ 433.585383][T15708] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 433.731829][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027580400: rx timeout, send abort [ 433.742122][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027580400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 434.129104][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2991'. [ 434.182544][T15724] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2991'. [ 434.318526][T15726] IPVS: rr: FWM 3 0x00000003 - no destination available [ 434.836115][T15741] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2998'. [ 434.871418][T15737] lo speed is unknown, defaulting to 1000 [ 434.916751][T15737] lo speed is unknown, defaulting to 1000 [ 435.127652][T15749] FAULT_INJECTION: forcing a failure. [ 435.127652][T15749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.186589][T15749] CPU: 1 UID: 0 PID: 15749 Comm: syz.8.3000 Not tainted syzkaller #0 PREEMPT(full) [ 435.186620][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.186632][T15749] Call Trace: [ 435.186640][T15749] [ 435.186649][T15749] dump_stack_lvl+0x189/0x250 [ 435.186680][T15749] ? __pfx____ratelimit+0x10/0x10 [ 435.186702][T15749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.186725][T15749] ? __pfx__printk+0x10/0x10 [ 435.186752][T15749] ? __might_fault+0xb0/0x130 [ 435.186791][T15749] should_fail_ex+0x414/0x560 [ 435.186823][T15749] _copy_from_user+0x2d/0xb0 [ 435.186848][T15749] ___sys_recvmsg+0x12e/0x510 [ 435.186880][T15749] ? __pfx____sys_recvmsg+0x10/0x10 [ 435.186942][T15749] ? __might_fault+0xb0/0x130 [ 435.186971][T15749] do_recvmmsg+0x307/0x770 [ 435.187006][T15749] ? __pfx_do_recvmmsg+0x10/0x10 [ 435.187044][T15749] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.187089][T15749] __x64_sys_recvmmsg+0x190/0x240 [ 435.187125][T15749] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 435.187147][T15749] ? rcu_is_watching+0x15/0xb0 [ 435.187172][T15749] ? do_syscall_64+0xbe/0x3b0 [ 435.187198][T15749] do_syscall_64+0xfa/0x3b0 [ 435.187217][T15749] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.187238][T15749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.187257][T15749] ? clear_bhb_loop+0x60/0xb0 [ 435.187287][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.187306][T15749] RIP: 0033:0x7f042a38eba9 [ 435.187324][T15749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.187341][T15749] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 435.187363][T15749] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 435.187376][T15749] RDX: 0000000000000004 RSI: 0000200000006880 RDI: 0000000000000003 [ 435.187389][T15749] RBP: 00007f042b266090 R08: 0000000000000000 R09: 0000000000000000 [ 435.187407][T15749] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000001 [ 435.187419][T15749] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 435.187463][T15749] [ 435.216606][T15746] lo speed is unknown, defaulting to 1000 [ 435.447324][T15746] lo speed is unknown, defaulting to 1000 [ 436.021746][T15757] lo speed is unknown, defaulting to 1000 [ 436.092088][T15757] lo speed is unknown, defaulting to 1000 [ 436.333116][T15771] validate_nla: 1 callbacks suppressed [ 436.333139][T15771] netlink: 'syz.6.3008': attribute type 1 has an invalid length. [ 436.580403][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3012'. [ 436.598901][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3012'. [ 437.010436][T15794] netlink: 'syz.6.3015': attribute type 11 has an invalid length. [ 437.283531][T15804] netlink: 'syz.9.3016': attribute type 1 has an invalid length. [ 437.303567][T15804] netlink: 'syz.9.3016': attribute type 1 has an invalid length. [ 437.489756][T15811] @0Ù: renamed from bond_slave_1 (while UP) [ 437.575248][T15814] FAULT_INJECTION: forcing a failure. [ 437.575248][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.606957][T15820] netlink: 'syz.9.3016': attribute type 1 has an invalid length. [ 437.633765][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.5.3022 Not tainted syzkaller #0 PREEMPT(full) [ 437.633794][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.633806][T15814] Call Trace: [ 437.633814][T15814] [ 437.633823][T15814] dump_stack_lvl+0x189/0x250 [ 437.633851][T15814] ? __pfx____ratelimit+0x10/0x10 [ 437.633873][T15814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.633896][T15814] ? __pfx__printk+0x10/0x10 [ 437.633923][T15814] ? __might_fault+0xb0/0x130 [ 437.633962][T15814] should_fail_ex+0x414/0x560 [ 437.633994][T15814] _copy_from_user+0x2d/0xb0 [ 437.634017][T15814] ___sys_sendmsg+0x158/0x2a0 [ 437.634044][T15814] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.634110][T15814] ? __fget_files+0x2a/0x420 [ 437.634137][T15814] ? __fget_files+0x3a0/0x420 [ 437.634167][T15814] __x64_sys_sendmsg+0x19b/0x260 [ 437.634194][T15814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.634229][T15814] ? __pfx_ksys_write+0x10/0x10 [ 437.634252][T15814] ? rcu_is_watching+0x15/0xb0 [ 437.634278][T15814] ? do_syscall_64+0xbe/0x3b0 [ 437.634304][T15814] do_syscall_64+0xfa/0x3b0 [ 437.634322][T15814] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.634342][T15814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.634360][T15814] ? clear_bhb_loop+0x60/0xb0 [ 437.634382][T15814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.634400][T15814] RIP: 0033:0x7f203798eba9 [ 437.634418][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.634434][T15814] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.634455][T15814] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 437.634468][T15814] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 437.634480][T15814] RBP: 00007f2038732090 R08: 0000000000000000 R09: 0000000000000000 [ 437.634492][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.634503][T15814] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 437.634535][T15814] [ 437.971532][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3024'. [ 438.002347][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3024'. [ 438.092710][T15831] IPVS: rr: FWM 3 0x00000003 - no destination available [ 438.117493][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3027'. [ 438.148599][T15832] vlan2: entered promiscuous mode [ 438.159952][T15832] bridge0: entered promiscuous mode [ 438.280890][T15839] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 438.289762][T15842] netlink: 'syz.5.3027': attribute type 29 has an invalid length. [ 438.315995][T15834] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 438.447482][T15845] syz_tun: entered allmulticast mode [ 438.505956][T15845] dvmrp8: entered allmulticast mode [ 438.549234][T15832] netlink: 'syz.5.3027': attribute type 29 has an invalid length. [ 438.578969][T15832] netlink: 516 bytes leftover after parsing attributes in process `syz.5.3027'. [ 438.615714][T15844] syz_tun: left allmulticast mode [ 438.632970][T15844] dvmrp8: left allmulticast mode [ 438.813470][T15850] syzkaller0: entered promiscuous mode [ 438.819306][T15850] syzkaller0: entered allmulticast mode [ 438.846013][T15855] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 441.645131][T15859] lo speed is unknown, defaulting to 1000 [ 441.683693][T15859] lo speed is unknown, defaulting to 1000 [ 441.802315][T15884] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3038'. [ 442.037128][T15896] netlink: 'syz.9.3039': attribute type 1 has an invalid length. [ 442.050699][T15896] netlink: 'syz.9.3039': attribute type 1 has an invalid length. [ 442.108954][T15898] IPVS: rr: FWM 3 0x00000003 - no destination available [ 442.313720][T15906] netlink: 'syz.9.3039': attribute type 1 has an invalid length. [ 442.784128][T15917] syzkaller0: entered promiscuous mode [ 442.803568][T15917] syzkaller0: entered allmulticast mode [ 443.609809][T15942] netlink: 'syz.7.3053': attribute type 1 has an invalid length. [ 443.620899][T15942] netlink: 'syz.7.3053': attribute type 1 has an invalid length. [ 443.808053][T15944] netlink: 'syz.7.3053': attribute type 1 has an invalid length. [ 445.502311][T15952] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3057'. [ 445.580160][T15956] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 445.926076][T15966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.985606][T15966] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3063'. [ 446.094234][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'. [ 446.123624][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'. [ 446.160687][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3068'. [ 447.047858][T16008] netlink: 'syz.9.3078': attribute type 12 has an invalid length. [ 447.081813][T16007] vxcan1: entered allmulticast mode [ 447.104952][T16007] vxcan1: left allmulticast mode [ 447.205412][T16007] raw_sendmsg: syz.8.3077 forgot to set AF_INET. Fix it! [ 447.474932][T16022] FAULT_INJECTION: forcing a failure. [ 447.474932][T16022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.543141][T16022] CPU: 0 UID: 0 PID: 16022 Comm: syz.8.3081 Not tainted syzkaller #0 PREEMPT(full) [ 447.543176][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 447.543188][T16022] Call Trace: [ 447.543196][T16022] [ 447.543205][T16022] dump_stack_lvl+0x189/0x250 [ 447.543234][T16022] ? __pfx____ratelimit+0x10/0x10 [ 447.543256][T16022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.543279][T16022] ? __pfx__printk+0x10/0x10 [ 447.543306][T16022] ? __might_fault+0xb0/0x130 [ 447.543346][T16022] should_fail_ex+0x414/0x560 [ 447.543379][T16022] _copy_from_user+0x2d/0xb0 [ 447.543403][T16022] ___sys_sendmsg+0x158/0x2a0 [ 447.543431][T16022] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.543499][T16022] ? __fget_files+0x2a/0x420 [ 447.543517][T16022] ? __fget_files+0x3a0/0x420 [ 447.543547][T16022] __x64_sys_sendmsg+0x19b/0x260 [ 447.543573][T16022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.543609][T16022] ? __pfx_ksys_write+0x10/0x10 [ 447.543632][T16022] ? rcu_is_watching+0x15/0xb0 [ 447.543658][T16022] ? do_syscall_64+0xbe/0x3b0 [ 447.543684][T16022] do_syscall_64+0xfa/0x3b0 [ 447.543704][T16022] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.543724][T16022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.543742][T16022] ? clear_bhb_loop+0x60/0xb0 [ 447.543767][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.543784][T16022] RIP: 0033:0x7f042a38eba9 [ 447.543803][T16022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.543820][T16022] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.543842][T16022] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 447.543856][T16022] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 447.543869][T16022] RBP: 00007f042b266090 R08: 0000000000000000 R09: 0000000000000000 [ 447.543881][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.543891][T16022] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 447.543925][T16022] [ 447.918721][T16029] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3085'. [ 447.924283][T16027] netlink: 'syz.7.3083': attribute type 12 has an invalid length. [ 448.587092][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3091'. [ 448.596278][T16053] netlink: 'syz.6.3090': attribute type 39 has an invalid length. [ 448.862551][T16056] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3092'. [ 449.077017][T16061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.103831][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3094'. [ 449.178498][T16070] bridge_slave_0: left promiscuous mode [ 449.191717][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3094'. [ 449.198350][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.226511][T16070] bridge_slave_1: left allmulticast mode [ 449.247924][T16070] bridge_slave_1: left promiscuous mode [ 449.258297][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.283158][T16070] bond0: (slave bond_slave_0): Releasing backup interface [ 449.298729][T16070] bond0: (slave bond_slave_1): Releasing backup interface [ 449.327795][T16070] team0: Port device team_slave_0 removed [ 449.351574][T16070] team0: Port device team_slave_1 removed [ 449.369692][T16070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.382739][T16070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.403089][T16070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.419825][T16070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.441899][T16070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 449.740041][T16087] netlink: 'syz.8.3098': attribute type 12 has an invalid length. [ 449.800035][T16091] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3100'. [ 450.052579][T16103] netlink: 'syz.6.3104': attribute type 10 has an invalid length. [ 450.084316][T16103] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.121185][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3104'. [ 450.130113][T16103] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.130262][T16103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.152239][T16103] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 450.253721][T16108] bridge_slave_1: left allmulticast mode [ 450.285634][T16113] FAULT_INJECTION: forcing a failure. [ 450.285634][T16113] name failslab, interval 1, probability 0, space 0, times 0 [ 450.307601][T16108] bridge_slave_1: left promiscuous mode [ 450.338127][T16108] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.356272][T16113] CPU: 1 UID: 0 PID: 16113 Comm: syz.7.3106 Not tainted syzkaller #0 PREEMPT(full) [ 450.356302][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.356313][T16113] Call Trace: [ 450.356321][T16113] [ 450.356330][T16113] dump_stack_lvl+0x189/0x250 [ 450.356359][T16113] ? __pfx____ratelimit+0x10/0x10 [ 450.356379][T16113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.356402][T16113] ? __pfx__printk+0x10/0x10 [ 450.356432][T16113] ? __pfx___might_resched+0x10/0x10 [ 450.356450][T16113] ? fs_reclaim_acquire+0x7d/0x100 [ 450.356474][T16113] should_fail_ex+0x414/0x560 [ 450.356505][T16113] should_failslab+0xa8/0x100 [ 450.356533][T16113] kmem_cache_alloc_noprof+0x73/0x3c0 [ 450.356556][T16113] ? __anon_vma_prepare+0xcb/0x4a0 [ 450.356590][T16113] __anon_vma_prepare+0xcb/0x4a0 [ 450.356625][T16113] __handle_mm_fault+0x4ca8/0x5440 [ 450.356672][T16113] ? __pfx___handle_mm_fault+0x10/0x10 [ 450.356722][T16113] ? __pfx___might_resched+0x10/0x10 [ 450.356744][T16113] handle_mm_fault+0x40a/0x8e0 [ 450.356782][T16113] __get_user_pages+0x1699/0x2ce0 [ 450.356848][T16113] populate_vma_page_range+0x29f/0x3a0 [ 450.356875][T16113] ? __pfx_populate_vma_page_range+0x10/0x10 [ 450.356895][T16113] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 450.356927][T16113] ? down_read+0x1ad/0x2e0 [ 450.356953][T16113] __mm_populate+0x24c/0x380 [ 450.356979][T16113] ? __pfx___mm_populate+0x10/0x10 [ 450.357005][T16113] ? up_write+0x1c4/0x420 [ 450.357033][T16113] vm_mmap_pgoff+0x387/0x4d0 [ 450.357074][T16113] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 450.357100][T16113] ? __fget_files+0x2a/0x420 [ 450.357124][T16113] ? __fget_files+0x3a0/0x420 [ 450.357141][T16113] ? __fget_files+0x2a/0x420 [ 450.357163][T16113] ksys_mmap_pgoff+0x51f/0x760 [ 450.357197][T16113] do_syscall_64+0xfa/0x3b0 [ 450.357216][T16113] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.357235][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.357259][T16113] ? clear_bhb_loop+0x60/0xb0 [ 450.357283][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.357300][T16113] RIP: 0033:0x7fe32918eba9 [ 450.357316][T16113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.357332][T16113] RSP: 002b:00007fe329f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 450.357352][T16113] RAX: ffffffffffffffda RBX: 00007fe3293d6090 RCX: 00007fe32918eba9 [ 450.357366][T16113] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 450.357378][T16113] RBP: 00007fe329f94090 R08: 0000000000000003 R09: 0000000000000000 [ 450.357389][T16113] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 450.357406][T16113] R13: 00007fe3293d6128 R14: 00007fe3293d6090 R15: 00007fffb784bec8 [ 450.357441][T16113] [ 450.705866][T16108] bridge_slave_0: left allmulticast mode [ 450.713375][T16108] bridge_slave_0: left promiscuous mode [ 450.719256][T16108] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.778964][T16122] netlink: 'syz.9.3103': attribute type 1 has an invalid length. [ 450.791175][T16108] bond0: (slave bridge0): Releasing backup interface [ 451.050610][T16128] netlink: 'syz.8.3109': attribute type 12 has an invalid length. [ 451.244839][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3113'. [ 451.267017][T16141] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3113'. [ 451.449582][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3115'. [ 451.471212][T16145] nbd: must specify a size in bytes for the device [ 451.869626][T16158] netlink: 'syz.9.3119': attribute type 1 has an invalid length. [ 451.989043][T16159] lo speed is unknown, defaulting to 1000 [ 452.034734][T16159] lo speed is unknown, defaulting to 1000 [ 452.962331][T16201] __nla_validate_parse: 1 callbacks suppressed [ 452.962355][T16201] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3132'. [ 453.225115][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3136'. [ 453.455747][T16221] siw: device registration error -23 [ 453.462510][T16219] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3137'. [ 453.475259][T16219] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.491750][T16221] netlink: 'syz.6.3140': attribute type 12 has an invalid length. [ 453.737090][T16229] lo speed is unknown, defaulting to 1000 [ 453.762669][T16229] lo speed is unknown, defaulting to 1000 [ 454.032460][T16239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.137485][T16223] lo speed is unknown, defaulting to 1000 [ 454.146717][T16223] lo speed is unknown, defaulting to 1000 [ 454.201029][T16237] lo speed is unknown, defaulting to 1000 [ 454.326693][T16237] lo speed is unknown, defaulting to 1000 [ 454.543852][T16260] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.3148'. [ 454.831088][T16267] lo speed is unknown, defaulting to 1000 [ 454.882891][T16267] lo speed is unknown, defaulting to 1000 [ 454.922846][T16272] FAULT_INJECTION: forcing a failure. [ 454.922846][T16272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.947713][T16272] CPU: 0 UID: 0 PID: 16272 Comm: syz.7.3155 Not tainted syzkaller #0 PREEMPT(full) [ 454.947742][T16272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.947754][T16272] Call Trace: [ 454.947762][T16272] [ 454.947770][T16272] dump_stack_lvl+0x189/0x250 [ 454.947798][T16272] ? __pfx____ratelimit+0x10/0x10 [ 454.947819][T16272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.947842][T16272] ? __pfx__printk+0x10/0x10 [ 454.947884][T16272] should_fail_ex+0x414/0x560 [ 454.947913][T16272] _copy_to_user+0x31/0xb0 [ 454.947938][T16272] simple_read_from_buffer+0xe1/0x170 [ 454.947973][T16272] proc_fail_nth_read+0x1b3/0x220 [ 454.947999][T16272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.948024][T16272] ? rw_verify_area+0x2a6/0x4d0 [ 454.948044][T16272] ? __lock_acquire+0xab9/0xd20 [ 454.948066][T16272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.948087][T16272] vfs_read+0x200/0xa30 [ 454.948108][T16272] ? fdget_pos+0x247/0x320 [ 454.948126][T16272] ? __pfx___mutex_lock+0x10/0x10 [ 454.948144][T16272] ? __pfx_vfs_read+0x10/0x10 [ 454.948164][T16272] ? __fget_files+0x2a/0x420 [ 454.948180][T16272] ? __fget_files+0x3a0/0x420 [ 454.948193][T16272] ? __fget_files+0x2a/0x420 [ 454.948221][T16272] ksys_read+0x145/0x250 [ 454.948248][T16272] ? __pfx_ksys_read+0x10/0x10 [ 454.948266][T16272] ? rcu_is_watching+0x15/0xb0 [ 454.948302][T16272] ? do_syscall_64+0xbe/0x3b0 [ 454.948327][T16272] do_syscall_64+0xfa/0x3b0 [ 454.948345][T16272] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.948362][T16272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.948380][T16272] ? clear_bhb_loop+0x60/0xb0 [ 454.948404][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.948422][T16272] RIP: 0033:0x7fe32918d5bc [ 454.948441][T16272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.948457][T16272] RSP: 002b:00007fe329fb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.948480][T16272] RAX: ffffffffffffffda RBX: 00007fe3293d5fa0 RCX: 00007fe32918d5bc [ 454.948494][T16272] RDX: 000000000000000f RSI: 00007fe329fb50a0 RDI: 000000000000000a [ 454.948506][T16272] RBP: 00007fe329fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 454.948518][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.948528][T16272] R13: 00007fe3293d6038 R14: 00007fe3293d5fa0 R15: 00007fffb784bec8 [ 454.948562][T16272] [ 455.012225][T16276] siw: device registration error -23 [ 455.175627][T16275] netlink: 'syz.8.3156': attribute type 12 has an invalid length. [ 455.272505][T16279] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3158'. [ 455.999021][T16311] FAULT_INJECTION: forcing a failure. [ 455.999021][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 456.073973][T16311] CPU: 0 UID: 0 PID: 16311 Comm: syz.9.3165 Not tainted syzkaller #0 PREEMPT(full) [ 456.074004][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.074015][T16311] Call Trace: [ 456.074023][T16311] [ 456.074050][T16311] dump_stack_lvl+0x189/0x250 [ 456.074080][T16311] ? __pfx____ratelimit+0x10/0x10 [ 456.074101][T16311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.074124][T16311] ? __pfx__printk+0x10/0x10 [ 456.074146][T16311] ? netlink_unicast+0x82f/0x9e0 [ 456.074174][T16311] ? ___sys_sendmsg+0x21f/0x2a0 [ 456.074195][T16311] ? do_syscall_64+0xfa/0x3b0 [ 456.074231][T16311] should_fail_ex+0x414/0x560 [ 456.074262][T16311] should_failslab+0xa8/0x100 [ 456.074288][T16311] kmem_cache_alloc_noprof+0x73/0x3c0 [ 456.074310][T16311] ? skb_clone+0x212/0x3a0 [ 456.074338][T16311] skb_clone+0x212/0x3a0 [ 456.074365][T16311] __netlink_deliver_tap+0x404/0x850 [ 456.074401][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.074423][T16311] netlink_deliver_tap+0x19c/0x1b0 [ 456.074444][T16311] netlink_sendskb+0x68/0x140 [ 456.074476][T16311] netlink_unicast+0x397/0x9e0 [ 456.074500][T16311] ? __asan_memcpy+0x40/0x70 [ 456.074532][T16311] ? __pfx_netlink_unicast+0x10/0x10 [ 456.074572][T16311] netlink_rcv_skb+0x28c/0x470 [ 456.074593][T16311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.074616][T16311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.074651][T16311] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.074681][T16311] netlink_unicast+0x82f/0x9e0 [ 456.074718][T16311] ? __pfx_netlink_unicast+0x10/0x10 [ 456.074748][T16311] ? netlink_sendmsg+0x642/0xb30 [ 456.074766][T16311] ? skb_put+0x11b/0x210 [ 456.074791][T16311] netlink_sendmsg+0x805/0xb30 [ 456.074822][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.074847][T16311] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.074868][T16311] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.074889][T16311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.074907][T16311] __sock_sendmsg+0x21c/0x270 [ 456.074937][T16311] ____sys_sendmsg+0x505/0x830 [ 456.074970][T16311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.075003][T16311] ? import_iovec+0x74/0xa0 [ 456.075038][T16311] ___sys_sendmsg+0x21f/0x2a0 [ 456.075065][T16311] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.075132][T16311] ? __fget_files+0x2a/0x420 [ 456.075149][T16311] ? __fget_files+0x3a0/0x420 [ 456.075179][T16311] __x64_sys_sendmsg+0x19b/0x260 [ 456.075205][T16311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.075242][T16311] ? __pfx_ksys_write+0x10/0x10 [ 456.075262][T16311] ? rcu_is_watching+0x15/0xb0 [ 456.075287][T16311] ? do_syscall_64+0xbe/0x3b0 [ 456.075312][T16311] do_syscall_64+0xfa/0x3b0 [ 456.075332][T16311] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.075350][T16311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.075369][T16311] ? clear_bhb_loop+0x60/0xb0 [ 456.075392][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.075411][T16311] RIP: 0033:0x7f15d338eba9 [ 456.075429][T16311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.075445][T16311] RSP: 002b:00007f15d42b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.075467][T16311] RAX: ffffffffffffffda RBX: 00007f15d35d5fa0 RCX: 00007f15d338eba9 [ 456.075481][T16311] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 456.075492][T16311] RBP: 00007f15d42b6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.075504][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.075516][T16311] R13: 00007f15d35d6038 R14: 00007f15d35d5fa0 R15: 00007fffef765b68 [ 456.075550][T16311] [ 456.975023][T16329] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3169'. [ 457.138426][T16310] syz.7.3163 (16310) used greatest stack depth: 17864 bytes left [ 457.147812][T16331] netlink: 'syz.8.3170': attribute type 1 has an invalid length. [ 457.207269][T16331] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3170'. [ 457.381115][T16336] siw: device registration error -23 [ 457.581269][T16343] netlink: 'syz.7.3172': attribute type 12 has an invalid length. [ 457.664189][T16344] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 457.751954][T16340] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 457.828255][T16345] lo speed is unknown, defaulting to 1000 [ 457.947643][T16345] lo speed is unknown, defaulting to 1000 [ 458.391426][T16368] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3179'. [ 458.452921][T16368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.657030][T16384] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 458.881024][T16374] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.068582][T16374] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.280857][T16374] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.392953][T16392] lo speed is unknown, defaulting to 1000 [ 459.465778][T16374] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.511499][T16392] lo speed is unknown, defaulting to 1000 [ 459.762312][T13758] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.025602][ T5972] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.044800][ T5972] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.162092][T16374] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.262087][T16374] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.299181][T16409] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3188'. [ 460.357569][T16374] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.455001][T16411] siw: device registration error -23 [ 460.463017][T16411] netlink: 'syz.7.3189': attribute type 12 has an invalid length. [ 460.793884][T16421] FAULT_INJECTION: forcing a failure. [ 460.793884][T16421] name failslab, interval 1, probability 0, space 0, times 0 [ 460.863440][T16421] CPU: 1 UID: 0 PID: 16421 Comm: syz.6.3194 Not tainted syzkaller #0 PREEMPT(full) [ 460.863472][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.863483][T16421] Call Trace: [ 460.863491][T16421] [ 460.863500][T16421] dump_stack_lvl+0x189/0x250 [ 460.863528][T16421] ? __pfx____ratelimit+0x10/0x10 [ 460.863549][T16421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.863572][T16421] ? __pfx__printk+0x10/0x10 [ 460.863605][T16421] ? __pfx___might_resched+0x10/0x10 [ 460.863630][T16421] should_fail_ex+0x414/0x560 [ 460.863661][T16421] should_failslab+0xa8/0x100 [ 460.863691][T16421] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.863719][T16421] ? __alloc_skb+0x112/0x2d0 [ 460.863745][T16421] __alloc_skb+0x112/0x2d0 [ 460.863770][T16421] netlink_sendmsg+0x5c6/0xb30 [ 460.863804][T16421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.863829][T16421] ? aa_sock_msg_perm+0xf1/0x1d0 [ 460.863851][T16421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.863872][T16421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.863894][T16421] __sock_sendmsg+0x21c/0x270 [ 460.863926][T16421] ____sys_sendmsg+0x505/0x830 [ 460.863957][T16421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.863992][T16421] ? import_iovec+0x74/0xa0 [ 460.864020][T16421] ___sys_sendmsg+0x21f/0x2a0 [ 460.864045][T16421] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.864112][T16421] ? __fget_files+0x2a/0x420 [ 460.864129][T16421] ? __fget_files+0x3a0/0x420 [ 460.864159][T16421] __x64_sys_sendmsg+0x19b/0x260 [ 460.864186][T16421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.864221][T16421] ? __pfx_ksys_write+0x10/0x10 [ 460.864254][T16421] ? do_syscall_64+0xbe/0x3b0 [ 460.864293][T16421] do_syscall_64+0xfa/0x3b0 [ 460.864313][T16421] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.864333][T16421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.864352][T16421] ? clear_bhb_loop+0x60/0xb0 [ 460.864376][T16421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.864394][T16421] RIP: 0033:0x7f709078eba9 [ 460.864413][T16421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.864429][T16421] RSP: 002b:00007f70916ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.864451][T16421] RAX: ffffffffffffffda RBX: 00007f70909d5fa0 RCX: 00007f709078eba9 [ 460.864465][T16421] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 460.864478][T16421] RBP: 00007f70916ef090 R08: 0000000000000000 R09: 0000000000000000 [ 460.864490][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.864501][T16421] R13: 00007f70909d6038 R14: 00007f70909d5fa0 R15: 00007ffe9db92f78 [ 460.864535][T16421] [ 461.288017][T16431] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3198'. [ 461.302876][T16431] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3198'. [ 461.412100][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3198'. [ 461.472485][T16435] 8021q: VLANs not supported on sit0 [ 461.892203][T16449] FAULT_INJECTION: forcing a failure. [ 461.892203][T16449] name failslab, interval 1, probability 0, space 0, times 0 [ 461.930336][T16449] CPU: 0 UID: 0 PID: 16449 Comm: syz.8.3204 Not tainted syzkaller #0 PREEMPT(full) [ 461.930367][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.930379][T16449] Call Trace: [ 461.930387][T16449] [ 461.930397][T16449] dump_stack_lvl+0x189/0x250 [ 461.930427][T16449] ? __pfx____ratelimit+0x10/0x10 [ 461.930448][T16449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.930470][T16449] ? __pfx__printk+0x10/0x10 [ 461.930504][T16449] ? __pfx___might_resched+0x10/0x10 [ 461.930522][T16449] ? fs_reclaim_acquire+0x7d/0x100 [ 461.930547][T16449] should_fail_ex+0x414/0x560 [ 461.930579][T16449] should_failslab+0xa8/0x100 [ 461.930608][T16449] __kmalloc_cache_noprof+0x70/0x3d0 [ 461.930634][T16449] ? __request_module+0x2b5/0x5e0 [ 461.930667][T16449] __request_module+0x2b5/0x5e0 [ 461.930703][T16449] ? __pfx___request_module+0x10/0x10 [ 461.930728][T16449] ? __up_read+0x280/0x680 [ 461.930753][T16449] ? __pfx___up_read+0x10/0x10 [ 461.930794][T16449] crypto_alg_mod_lookup+0xa5/0x5f0 [ 461.930827][T16449] crypto_alloc_tfm_node+0x13e/0x3f0 [ 461.930865][T16449] alg_bind+0x2fa/0x570 [ 461.930897][T16449] __sys_bind+0x2c3/0x3e0 [ 461.930920][T16449] ? __pfx___sys_bind+0x10/0x10 [ 461.930978][T16449] ? __pfx_ksys_write+0x10/0x10 [ 461.931001][T16449] ? rcu_is_watching+0x15/0xb0 [ 461.931030][T16449] __x64_sys_bind+0x7a/0x90 [ 461.931050][T16449] do_syscall_64+0xfa/0x3b0 [ 461.931074][T16449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.931091][T16449] ? asm_sysvec_call_function_single+0x1a/0x20 [ 461.931110][T16449] ? clear_bhb_loop+0x60/0xb0 [ 461.931133][T16449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.931152][T16449] RIP: 0033:0x7f042a38eba9 [ 461.931171][T16449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.931187][T16449] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 461.931217][T16449] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 461.931231][T16449] RDX: 0000000000000058 RSI: 00002000000001c0 RDI: 0000000000000003 [ 461.931243][T16449] RBP: 00007f042b266090 R08: 0000000000000000 R09: 0000000000000000 [ 461.931255][T16449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.931267][T16449] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 461.931301][T16449] [ 462.409831][T16461] FAULT_INJECTION: forcing a failure. [ 462.409831][T16461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.445854][T16461] CPU: 0 UID: 0 PID: 16461 Comm: syz.6.3208 Not tainted syzkaller #0 PREEMPT(full) [ 462.445886][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.445898][T16461] Call Trace: [ 462.445906][T16461] [ 462.445915][T16461] dump_stack_lvl+0x189/0x250 [ 462.445945][T16461] ? __pfx____ratelimit+0x10/0x10 [ 462.445968][T16461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.446000][T16461] ? __pfx__printk+0x10/0x10 [ 462.446028][T16461] ? __might_fault+0xb0/0x130 [ 462.446069][T16461] should_fail_ex+0x414/0x560 [ 462.446102][T16461] _copy_from_user+0x2d/0xb0 [ 462.446127][T16461] ___sys_recvmsg+0x12e/0x510 [ 462.446161][T16461] ? __pfx____sys_recvmsg+0x10/0x10 [ 462.446222][T16461] ? __might_fault+0xb0/0x130 [ 462.446251][T16461] do_recvmmsg+0x307/0x770 [ 462.446287][T16461] ? __pfx_do_recvmmsg+0x10/0x10 [ 462.446326][T16461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.446371][T16461] __x64_sys_recvmmsg+0x190/0x240 [ 462.446399][T16461] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 462.446422][T16461] ? rcu_is_watching+0x15/0xb0 [ 462.446449][T16461] ? do_syscall_64+0xbe/0x3b0 [ 462.446476][T16461] do_syscall_64+0xfa/0x3b0 [ 462.446496][T16461] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.446516][T16461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.446536][T16461] ? clear_bhb_loop+0x60/0xb0 [ 462.446560][T16461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.446579][T16461] RIP: 0033:0x7f709078eba9 [ 462.446598][T16461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.446615][T16461] RSP: 002b:00007f70916ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 462.446637][T16461] RAX: ffffffffffffffda RBX: 00007f70909d5fa0 RCX: 00007f709078eba9 [ 462.446652][T16461] RDX: 0000000000000004 RSI: 0000200000006880 RDI: 0000000000000003 [ 462.446665][T16461] RBP: 00007f70916ef090 R08: 0000000000000000 R09: 0000000000000000 [ 462.446678][T16461] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000002 [ 462.446691][T16461] R13: 00007f70909d6038 R14: 00007f70909d5fa0 R15: 00007ffe9db92f78 [ 462.446725][T16461] [ 462.954872][T16473] netlink: 'syz.8.3213': attribute type 11 has an invalid length. [ 463.186530][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3215'. [ 463.207839][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'. [ 463.530807][T16498] netlink: 'syz.7.3222': attribute type 1 has an invalid length. [ 463.560174][T16500] netlink: 'syz.8.3219': attribute type 1 has an invalid length. [ 463.604774][T16500] netlink: 'syz.8.3219': attribute type 1 has an invalid length. [ 463.631050][T16498] bond5: (slave geneve2): making interface the new active one [ 463.655285][T16498] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 463.664534][T13758] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.680197][T13758] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.732493][T13760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.754666][T13760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 464.427238][T16520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.520928][T16520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.597951][T16517] lo speed is unknown, defaulting to 1000 [ 464.635590][T16517] lo speed is unknown, defaulting to 1000 [ 464.758003][T16531] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 465.160034][T16554] netlink: 'syz.6.3239': attribute type 1 has an invalid length. [ 465.168587][T16554] netlink: 'syz.6.3239': attribute type 1 has an invalid length. [ 465.299101][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.351688][T16556] netlink: 'syz.7.3242': attribute type 8 has an invalid length. [ 467.624638][T16586] FAULT_INJECTION: forcing a failure. [ 467.624638][T16586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.686700][T16586] CPU: 0 UID: 0 PID: 16586 Comm: syz.5.3252 Not tainted syzkaller #0 PREEMPT(full) [ 467.686729][T16586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.686742][T16586] Call Trace: [ 467.686751][T16586] [ 467.686760][T16586] dump_stack_lvl+0x189/0x250 [ 467.686790][T16586] ? __pfx____ratelimit+0x10/0x10 [ 467.686812][T16586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.686835][T16586] ? __pfx__printk+0x10/0x10 [ 467.686875][T16586] should_fail_ex+0x414/0x560 [ 467.686904][T16586] _copy_to_user+0x31/0xb0 [ 467.686940][T16586] do_ipv6_getsockopt+0x110b/0x2300 [ 467.686974][T16586] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 467.687006][T16586] ? __might_fault+0xb0/0x130 [ 467.687034][T16586] ? _parse_integer_limit+0x1ae/0x1f0 [ 467.687063][T16586] ? aa_label_sk_perm+0x4cd/0x630 [ 467.687094][T16586] ? __lock_acquire+0xab9/0xd20 [ 467.687124][T16586] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 467.687183][T16586] ipv6_getsockopt+0xbd/0x290 [ 467.687209][T16586] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 467.687235][T16586] ? __might_fault+0xb0/0x130 [ 467.687265][T16586] rawv6_getsockopt+0x298/0x580 [ 467.687290][T16586] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 467.687316][T16586] ? sock_common_getsockopt+0x2d/0xb0 [ 467.687344][T16586] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 467.687375][T16586] do_sock_getsockopt+0x36f/0x450 [ 467.687404][T16586] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 467.687432][T16586] ? write_ibpb+0x30/0x40 [ 467.687456][T16586] ? ksys_write+0x1e1/0x250 [ 467.687490][T16586] __x64_sys_getsockopt+0x1a5/0x250 [ 467.687513][T16586] ? write_ibpb+0x30/0x40 [ 467.687537][T16586] ? write_ibpb+0x30/0x40 [ 467.687562][T16586] do_syscall_64+0xfa/0x3b0 [ 467.687581][T16586] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.687602][T16586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.687623][T16586] ? clear_bhb_loop+0x60/0xb0 [ 467.687646][T16586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.687666][T16586] RIP: 0033:0x7f203798eba9 [ 467.687685][T16586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.687702][T16586] RSP: 002b:00007f2038732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 467.687724][T16586] RAX: ffffffffffffffda RBX: 00007f2037bd5fa0 RCX: 00007f203798eba9 [ 467.687737][T16586] RDX: 000000000000003a RSI: 0000000000000029 RDI: 0000000000000003 [ 467.687748][T16586] RBP: 00007f2038732090 R08: 0000200000000280 R09: 0000000000000000 [ 467.687761][T16586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.687773][T16586] R13: 00007f2037bd6038 R14: 00007f2037bd5fa0 R15: 00007ffcc7a1c098 [ 467.687806][T16586] [ 468.106246][T16601] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 468.109609][T16602] netlink: 'syz.8.3255': attribute type 1 has an invalid length. [ 468.124550][T16602] netlink: 'syz.8.3255': attribute type 1 has an invalid length. [ 468.125076][T16598] netlink: 'syz.7.3256': attribute type 12 has an invalid length. [ 468.574853][T16621] netlink: 'syz.7.3262': attribute type 1 has an invalid length. [ 468.636307][T16617] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3261'. [ 468.757051][T16625] lo speed is unknown, defaulting to 1000 [ 468.772782][T16625] lo speed is unknown, defaulting to 1000 [ 468.812775][T16620] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 469.028195][T16638] tipc: Resetting bearer [ 469.300979][T16651] netlink: 'syz.7.3273': attribute type 12 has an invalid length. [ 469.532664][T16659] FAULT_INJECTION: forcing a failure. [ 469.532664][T16659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.567964][T16659] CPU: 0 UID: 0 PID: 16659 Comm: syz.9.3276 Not tainted syzkaller #0 PREEMPT(full) [ 469.567994][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.568007][T16659] Call Trace: [ 469.568015][T16659] [ 469.568024][T16659] dump_stack_lvl+0x189/0x250 [ 469.568054][T16659] ? __pfx____ratelimit+0x10/0x10 [ 469.568078][T16659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.568099][T16659] ? __pfx__printk+0x10/0x10 [ 469.568138][T16659] should_fail_ex+0x414/0x560 [ 469.568178][T16659] _copy_from_user+0x2d/0xb0 [ 469.568202][T16659] ___bpf_copy_key+0xa5/0x110 [ 469.568231][T16659] map_delete_elem+0x1a9/0x560 [ 469.568255][T16659] ? bpf_lsm_bpf+0x9/0x20 [ 469.568278][T16659] ? security_bpf+0x7e/0x300 [ 469.568305][T16659] __sys_bpf+0x4d0/0x870 [ 469.568333][T16659] ? __pfx___sys_bpf+0x10/0x10 [ 469.568373][T16659] ? ksys_write+0x1e1/0x250 [ 469.568403][T16659] ? __pfx_ksys_write+0x10/0x10 [ 469.568425][T16659] ? rcu_is_watching+0x15/0xb0 [ 469.568454][T16659] __x64_sys_bpf+0x7c/0x90 [ 469.568479][T16659] do_syscall_64+0xfa/0x3b0 [ 469.568500][T16659] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.568519][T16659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.568538][T16659] ? clear_bhb_loop+0x60/0xb0 [ 469.568562][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.568581][T16659] RIP: 0033:0x7f15d338eba9 [ 469.568600][T16659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.568616][T16659] RSP: 002b:00007f15d42b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.568639][T16659] RAX: ffffffffffffffda RBX: 00007f15d35d5fa0 RCX: 00007f15d338eba9 [ 469.568653][T16659] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000003 [ 469.568671][T16659] RBP: 00007f15d42b6090 R08: 0000000000000000 R09: 0000000000000000 [ 469.568683][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.568695][T16659] R13: 00007f15d35d6038 R14: 00007f15d35d5fa0 R15: 00007fffef765b68 [ 469.568730][T16659] [ 469.872526][T16664] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.3274'. [ 469.941281][T16673] FAULT_INJECTION: forcing a failure. [ 469.941281][T16673] name failslab, interval 1, probability 0, space 0, times 0 [ 469.955667][T16673] CPU: 0 UID: 0 PID: 16673 Comm: syz.7.3278 Not tainted syzkaller #0 PREEMPT(full) [ 469.955694][T16673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.955707][T16673] Call Trace: [ 469.955716][T16673] [ 469.955725][T16673] dump_stack_lvl+0x189/0x250 [ 469.955754][T16673] ? __pfx____ratelimit+0x10/0x10 [ 469.955778][T16673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.955802][T16673] ? __pfx__printk+0x10/0x10 [ 469.955837][T16673] ? __pfx___might_resched+0x10/0x10 [ 469.955863][T16673] should_fail_ex+0x414/0x560 [ 469.955897][T16673] should_failslab+0xa8/0x100 [ 469.955927][T16673] __kmalloc_noprof+0xcb/0x4f0 [ 469.955951][T16673] ? nf_tables_newset+0x132b/0x2530 [ 469.955986][T16673] ? nla_strdup+0x9d/0x140 [ 469.956002][T16673] ? trace_kmalloc+0x1f/0xd0 [ 469.956031][T16673] nla_strdup+0x9d/0x140 [ 469.956047][T16673] ? nft_hash_privsize+0x2f/0xf0 [ 469.956071][T16673] nf_tables_newset+0x136a/0x2530 [ 469.956112][T16673] ? __pfx_nf_tables_newset+0x10/0x10 [ 469.956167][T16673] ? __nla_parse+0x40/0x60 [ 469.956191][T16673] nfnetlink_rcv+0x112f/0x2520 [ 469.956257][T16673] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 469.956307][T16673] ? ref_tracker_free+0x63a/0x7d0 [ 469.956372][T16673] ? __netlink_deliver_tap+0x807/0x850 [ 469.956393][T16673] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.956437][T16673] netlink_unicast+0x82f/0x9e0 [ 469.956478][T16673] ? __pfx_netlink_unicast+0x10/0x10 [ 469.956510][T16673] ? netlink_sendmsg+0x642/0xb30 [ 469.956529][T16673] ? skb_put+0x11b/0x210 [ 469.956562][T16673] netlink_sendmsg+0x805/0xb30 [ 469.956596][T16673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.956630][T16673] ? aa_sock_msg_perm+0xf1/0x1d0 [ 469.956652][T16673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.956674][T16673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.956696][T16673] __sock_sendmsg+0x21c/0x270 [ 469.956730][T16673] ____sys_sendmsg+0x505/0x830 [ 469.956762][T16673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.956798][T16673] ? import_iovec+0x74/0xa0 [ 469.956827][T16673] ___sys_sendmsg+0x21f/0x2a0 [ 469.956854][T16673] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.956924][T16673] ? __fget_files+0x2a/0x420 [ 469.956943][T16673] ? __fget_files+0x3a0/0x420 [ 469.956982][T16673] __x64_sys_sendmsg+0x19b/0x260 [ 469.957010][T16673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.957047][T16673] ? __pfx_ksys_write+0x10/0x10 [ 469.957070][T16673] ? rcu_is_watching+0x15/0xb0 [ 469.957097][T16673] ? do_syscall_64+0xbe/0x3b0 [ 469.957125][T16673] do_syscall_64+0xfa/0x3b0 [ 469.957146][T16673] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.957166][T16673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.957185][T16673] ? clear_bhb_loop+0x60/0xb0 [ 469.957210][T16673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.957227][T16673] RIP: 0033:0x7fe32918eba9 [ 469.957246][T16673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.957263][T16673] RSP: 002b:00007fe329fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.957285][T16673] RAX: ffffffffffffffda RBX: 00007fe3293d5fa0 RCX: 00007fe32918eba9 [ 469.957299][T16673] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 469.957312][T16673] RBP: 00007fe329fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 469.957325][T16673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.957338][T16673] R13: 00007fe3293d6038 R14: 00007fe3293d5fa0 R15: 00007fffb784bec8 [ 469.957373][T16673] [ 470.764662][T16696] FAULT_INJECTION: forcing a failure. [ 470.764662][T16696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.798991][T16696] CPU: 0 UID: 0 PID: 16696 Comm: syz.8.3283 Not tainted syzkaller #0 PREEMPT(full) [ 470.799022][T16696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.799034][T16696] Call Trace: [ 470.799043][T16696] [ 470.799051][T16696] dump_stack_lvl+0x189/0x250 [ 470.799081][T16696] ? __pfx____ratelimit+0x10/0x10 [ 470.799102][T16696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.799124][T16696] ? __pfx__printk+0x10/0x10 [ 470.799155][T16696] ? __might_fault+0xb0/0x130 [ 470.799193][T16696] should_fail_ex+0x414/0x560 [ 470.799224][T16696] _copy_from_user+0x2d/0xb0 [ 470.799247][T16696] do_sock_getsockopt+0x17d/0x450 [ 470.799273][T16696] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 470.799296][T16696] ? write_ibpb+0x30/0x40 [ 470.799317][T16696] ? __fget_files+0x3a0/0x420 [ 470.799334][T16696] ? __fget_files+0x2a/0x420 [ 470.799362][T16696] __x64_sys_getsockopt+0x1a5/0x250 [ 470.799390][T16696] ? write_ibpb+0x30/0x40 [ 470.799414][T16696] ? write_ibpb+0x30/0x40 [ 470.799438][T16696] do_syscall_64+0xfa/0x3b0 [ 470.799457][T16696] ? lockdep_hardirqs_on+0x9c/0x150 [ 470.799475][T16696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.799495][T16696] ? clear_bhb_loop+0x60/0xb0 [ 470.799518][T16696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.799536][T16696] RIP: 0033:0x7f042a38eba9 [ 470.799554][T16696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.799571][T16696] RSP: 002b:00007f042b266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 470.799593][T16696] RAX: ffffffffffffffda RBX: 00007f042a5d5fa0 RCX: 00007f042a38eba9 [ 470.799608][T16696] RDX: 0000000000000022 RSI: 0000000000000001 RDI: 0000000000000003 [ 470.799620][T16696] RBP: 00007f042b266090 R08: 0000200000001480 R09: 0000000000000000 [ 470.799634][T16696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.799646][T16696] R13: 00007f042a5d6038 R14: 00007f042a5d5fa0 R15: 00007ffc1cb3c0f8 [ 470.799681][T16696] [ 471.240962][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3287'. [ 471.390570][T16714] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 471.418896][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3288'. [ 471.443518][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3288'. [ 471.508463][T16714] ip6tnl2: entered promiscuous mode [ 471.531583][T16714] ip6tnl2: entered allmulticast mode [ 471.607574][T16721] netlink: 292 bytes leftover after parsing attributes in process `syz.9.3291'. [ 471.682972][T16720] lo speed is unknown, defaulting to 1000 [ 471.722042][T16720] lo speed is unknown, defaulting to 1000 [ 471.870364][T16730] FAULT_INJECTION: forcing a failure. [ 471.870364][T16730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.926070][T16730] CPU: 1 UID: 0 PID: 16730 Comm: syz.9.3294 Not tainted syzkaller #0 PREEMPT(full) [ 471.926100][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 471.926111][T16730] Call Trace: [ 471.926118][T16730] [ 471.926126][T16730] dump_stack_lvl+0x189/0x250 [ 471.926154][T16730] ? __pfx____ratelimit+0x10/0x10 [ 471.926174][T16730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.926195][T16730] ? __pfx__printk+0x10/0x10 [ 471.926219][T16730] ? __might_fault+0xb0/0x130 [ 471.926254][T16730] should_fail_ex+0x414/0x560 [ 471.926285][T16730] _copy_from_iter+0x1de/0x1790 [ 471.926315][T16730] ? rcu_is_watching+0x15/0xb0 [ 471.926337][T16730] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 471.926363][T16730] ? __pfx__copy_from_iter+0x10/0x10 [ 471.926384][T16730] ? __build_skb_around+0x257/0x3e0 [ 471.926407][T16730] ? netlink_sendmsg+0x642/0xb30 [ 471.926424][T16730] ? skb_put+0x11b/0x210 [ 471.926447][T16730] netlink_sendmsg+0x6b2/0xb30 [ 471.926478][T16730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.926502][T16730] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.926522][T16730] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.926540][T16730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.926561][T16730] __sock_sendmsg+0x21c/0x270 [ 471.926590][T16730] ____sys_sendmsg+0x505/0x830 [ 471.926619][T16730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.926651][T16730] ? import_iovec+0x74/0xa0 [ 471.926678][T16730] ___sys_sendmsg+0x21f/0x2a0 [ 471.926705][T16730] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.926772][T16730] ? __fget_files+0x2a/0x420 [ 471.926790][T16730] ? __fget_files+0x3a0/0x420 [ 471.926821][T16730] __x64_sys_sendmsg+0x19b/0x260 [ 471.926847][T16730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.926882][T16730] ? __pfx_ksys_write+0x10/0x10 [ 471.926916][T16730] ? do_syscall_64+0xbe/0x3b0 [ 471.926953][T16730] do_syscall_64+0xfa/0x3b0 [ 471.926974][T16730] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.926994][T16730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.927013][T16730] ? clear_bhb_loop+0x60/0xb0 [ 471.927038][T16730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.927062][T16730] RIP: 0033:0x7f15d338eba9 [ 471.927078][T16730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.927096][T16730] RSP: 002b:00007f15d42b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.927119][T16730] RAX: ffffffffffffffda RBX: 00007f15d35d5fa0 RCX: 00007f15d338eba9 [ 471.927134][T16730] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 471.927147][T16730] RBP: 00007f15d42b6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.927159][T16730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.927171][T16730] R13: 00007f15d35d6038 R14: 00007f15d35d5fa0 R15: 00007fffef765b68 [ 471.927205][T16730] [ 472.497702][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3298'. [ 472.525188][T16745] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3299'. [ 472.667255][T16755] netlink: 'syz.7.3299': attribute type 1 has an invalid length. [ 472.745933][T16749] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3299'. [ 472.782475][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3299'. [ 472.883842][ T31] INFO: task syz.3.2222:13196 blocked for more than 143 seconds. [ 472.894188][ T31] Not tainted syzkaller #0 [ 472.899275][ T31] Blocked by coredump. [ 472.905061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.922157][ T31] task:syz.3.2222 state:D stack:24216 pid:13196 tgid:13196 ppid:5871 task_flags:0x40004c flags:0x00004000 [ 472.934718][ T31] Call Trace: [ 472.938140][ T31] [ 472.941200][ T31] __schedule+0x1798/0x4cc0 [ 472.946044][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.951028][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.956254][ T31] ? __pfx___schedule+0x10/0x10 [ 472.961239][ T31] ? schedule+0x91/0x360 [ 472.965713][ T31] schedule+0x165/0x360 [ 472.970167][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.997087][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 473.013075][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 473.032701][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 473.058869][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.067529][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.076762][ T31] ? exit_mmap+0x28e/0xb50 [ 473.087654][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.093229][ T31] down_write+0x1ab/0x1f0 [ 473.101844][ T31] ? __pfx_down_write+0x10/0x10 [ 473.107078][ T31] exit_mmap+0x28e/0xb50 [ 473.111543][ T31] ? uprobe_clear_state+0x20f/0x290 [ 473.116907][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 473.121515][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.122064][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 473.135984][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.144948][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.153606][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.161603][ T31] ? __pfx_exit_aio+0x10/0x10 [ 473.168004][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.176034][ T31] ? uprobe_clear_state+0x274/0x290 [ 473.181493][ T31] __mmput+0x118/0x420 [ 473.186072][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.194150][ T31] exit_mm+0x1da/0x2c0 [ 473.198360][ T31] ? __pfx_exit_mm+0x10/0x10 [ 473.203067][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.214091][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.222464][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.230703][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.239055][T16760] netlink: 'syz.7.3302': attribute type 29 has an invalid length. [ 473.253804][ T31] do_exit+0x648/0x2300 [ 473.258114][ T31] ? preempt_schedule_common+0x83/0xd0 [ 473.263989][ T31] ? preempt_schedule+0xae/0xc0 [ 473.268953][ T31] ? __pfx_do_exit+0x10/0x10 [ 473.273813][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 473.279437][ T31] do_group_exit+0x21c/0x2d0 [ 473.284924][ T31] __x64_sys_exit_group+0x3f/0x40 [ 473.290228][ T31] x64_sys_call+0x21f7/0x2200 [ 473.295075][ T31] do_syscall_64+0xfa/0x3b0 [ 473.299674][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.306044][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.312319][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.317339][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.323428][ T31] RIP: 0033:0x7f14c038eba9 [ 473.328079][ T31] RSP: 002b:00007ffdacdbcbf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 473.336880][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14c038eba9 [ 473.345120][ T31] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.353282][ T31] RBP: 00007ffdacdbcc5c R08: 00000015acdbccef R09: 00000000000927c0 [ 473.361448][ T31] R10: 0000000000000180 R11: 0000000000000246 R12: 00000000000001c8 [ 473.369692][ T31] R13: 00000000000927c0 R14: 000000000004db7d R15: 00007ffdacdbccb0 [ 473.384361][ T31] [ 473.387521][ T31] INFO: task syz.1.2223:13212 blocked for more than 143 seconds. [ 473.406390][ T31] Not tainted syzkaller #0 [ 473.411383][ T31] Blocked by coredump. [ 473.421069][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.433554][ T31] task:syz.1.2223 state:D stack:26888 pid:13212 tgid:13198 ppid:5875 task_flags:0x40044c flags:0x00004000 [ 473.453047][ T31] Call Trace: [ 473.456670][ T31] [ 473.459643][ T31] __schedule+0x1798/0x4cc0 [ 473.464585][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.469495][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.474517][ T31] ? __pfx___schedule+0x10/0x10 [ 473.479414][ T31] ? schedule+0x91/0x360 [ 473.485440][ T31] schedule+0x165/0x360 [ 473.489758][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.495428][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 473.501180][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 473.507252][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 473.513722][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.518631][ T31] ? exit_mmap+0x28e/0xb50 [ 473.523085][ T31] down_write+0x1ab/0x1f0 [ 473.530341][ T31] ? __pfx_down_write+0x10/0x10 [ 473.537014][ T31] exit_mmap+0x28e/0xb50 [ 473.541424][ T31] ? uprobe_clear_state+0x20f/0x290 [ 473.547182][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 473.551978][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 473.557655][ T31] ? __pfx_exit_aio+0x10/0x10 [ 473.562365][ T31] ? uprobe_clear_state+0x274/0x290 [ 473.567791][ T31] __mmput+0x118/0x420 [ 473.571891][ T31] exit_mm+0x1da/0x2c0 [ 473.576145][ T31] ? __pfx_exit_mm+0x10/0x10 [ 473.580753][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.585644][ T31] do_exit+0x648/0x2300 [ 473.589830][ T31] ? do_raw_spin_lock+0x121/0x290 [ 473.597812][ T31] ? __pfx_do_exit+0x10/0x10 [ 473.602579][ T31] do_group_exit+0x21c/0x2d0 [ 473.608525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.615854][ T31] get_signal+0x1286/0x1340 [ 473.620643][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 473.626374][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 473.632576][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 473.638627][ T31] exit_to_user_mode_loop+0x75/0x110 [ 473.644295][ T31] do_syscall_64+0x2bd/0x3b0 [ 473.648917][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.654206][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.660288][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.665161][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.671054][ T31] RIP: 0033:0x7fc5a6d8eba9 [ 473.675515][ T31] RSP: 002b:00007fc5a7cc00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 473.684780][ T31] RAX: fffffffffffffe00 RBX: 00007fc5a6fd6188 RCX: 00007fc5a6d8eba9 [ 473.692795][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc5a6fd6188 [ 473.700966][ T31] RBP: 00007fc5a6fd6180 R08: 0000000000000000 R09: 0000000000000000 [ 473.708992][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.717205][ T31] R13: 00007fc5a6fd6218 R14: 00007ffe85967cd0 R15: 00007ffe85967db8 [ 473.726784][ T31] [ 473.731511][ T31] INFO: task syz.2.2224:13211 blocked for more than 144 seconds. [ 473.744339][ T31] Not tainted syzkaller #0 [ 473.757078][ T31] Blocked by coredump. [ 473.761767][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.771365][ T31] task:syz.2.2224 state:D stack:23160 pid:13211 tgid:13203 ppid:5864 task_flags:0x40044c flags:0x00004002 [ 473.783996][ T31] Call Trace: [ 473.787313][ T31] [ 473.790271][ T31] __schedule+0x1798/0x4cc0 [ 473.795121][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.800124][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.805222][ T31] ? __pfx___schedule+0x10/0x10 [ 473.810170][ T31] ? schedule+0x91/0x360 [ 473.815188][ T31] schedule+0x165/0x360 [ 473.819400][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.824974][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 473.830653][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 473.836600][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 473.842789][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.847974][ T31] ? exit_mmap+0x28e/0xb50 [ 473.852446][ T31] down_write+0x1ab/0x1f0 [ 473.856901][ T31] ? __pfx_down_write+0x10/0x10 [ 473.861804][ T31] exit_mmap+0x28e/0xb50 [ 473.866155][ T31] ? uprobe_clear_state+0x20f/0x290 [ 473.871406][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 473.876316][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 473.882006][ T31] ? __pfx_exit_aio+0x10/0x10 [ 473.886883][ T31] ? uprobe_clear_state+0x274/0x290 [ 473.892139][ T31] __mmput+0x118/0x420 [ 473.896382][ T31] exit_mm+0x1da/0x2c0 [ 473.900494][ T31] ? __pfx_exit_mm+0x10/0x10 [ 473.906325][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.911224][ T31] do_exit+0x648/0x2300 [ 473.919603][ T31] ? do_raw_spin_lock+0x121/0x290 [ 473.925928][ T31] ? __pfx_do_exit+0x10/0x10 [ 473.930568][ T31] do_group_exit+0x21c/0x2d0 [ 473.935619][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.940855][ T31] get_signal+0x1286/0x1340 [ 473.946595][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 473.952187][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 473.958679][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 473.964904][ T31] exit_to_user_mode_loop+0x75/0x110 [ 473.970270][ T31] do_syscall_64+0x2bd/0x3b0 [ 473.975267][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.980501][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.986769][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.991475][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.997472][ T31] RIP: 0033:0x7f030c18eba9 [ 474.001918][ T31] RSP: 002b:00007f030cfb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.010534][ T31] RAX: 00000000001eeee0 RBX: 00007f030c3d6090 RCX: 00007f030c18eba9 [ 474.019842][ T31] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 474.028227][ T31] RBP: 00007f030c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 474.036476][ T31] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000000 [ 474.044607][ T31] R13: 00007f030c3d6128 R14: 00007f030c3d6090 R15: 00007ffccb5b1b88 [ 474.052616][ T31] [ 474.057502][ T31] INFO: task syz.0.2225:13221 blocked for more than 144 seconds. [ 474.073432][ T31] Not tainted syzkaller #0 [ 474.080524][ T31] Blocked by coredump. [ 474.085736][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.095176][ T31] task:syz.0.2225 state:D stack:21816 pid:13221 tgid:13215 ppid:5858 task_flags:0x40044c flags:0x00004002 [ 474.107324][ T31] Call Trace: [ 474.110665][ T31] [ 474.114170][ T31] __schedule+0x1798/0x4cc0 [ 474.118715][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.123776][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.128759][ T31] ? __pfx___schedule+0x10/0x10 [ 474.133722][ T31] ? schedule+0x91/0x360 [ 474.137989][ T31] schedule+0x165/0x360 [ 474.142150][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.147989][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 474.153927][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 474.159816][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 474.170362][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.175703][ T31] ? exit_mmap+0x28e/0xb50 [ 474.180220][ T31] down_write+0x1ab/0x1f0 [ 474.184937][ T31] ? __pfx_down_write+0x10/0x10 [ 474.189819][ T31] exit_mmap+0x28e/0xb50 [ 474.194215][ T31] ? uprobe_clear_state+0x20f/0x290 [ 474.199435][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 474.204559][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 474.210225][ T31] ? __pfx_exit_aio+0x10/0x10 [ 474.214962][ T31] ? uprobe_clear_state+0x274/0x290 [ 474.220185][ T31] __mmput+0x118/0x420 [ 474.224361][ T31] exit_mm+0x1da/0x2c0 [ 474.228452][ T31] ? __pfx_exit_mm+0x10/0x10 [ 474.233043][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.238175][ T31] do_exit+0x648/0x2300 [ 474.242383][ T31] ? do_raw_spin_lock+0x121/0x290 [ 474.247491][ T31] ? __pfx_do_exit+0x10/0x10 [ 474.252130][ T31] do_group_exit+0x21c/0x2d0 [ 474.256857][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.262109][ T31] get_signal+0x1286/0x1340 [ 474.266876][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 474.272454][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 474.278743][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 474.284380][ T31] exit_to_user_mode_loop+0x75/0x110 [ 474.289695][ T31] do_syscall_64+0x2bd/0x3b0 [ 474.294785][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.300007][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.306242][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.310922][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.316843][ T31] RIP: 0033:0x7f7b8cb8eba9 [ 474.321261][ T31] RSP: 002b:00007f7b8d982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.329967][ T31] RAX: 000000000031ccc0 RBX: 00007f7b8cdd6090 RCX: 00007f7b8cb8eba9 [ 474.338022][ T31] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 474.346101][ T31] RBP: 00007f7b8cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 474.354404][ T31] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000000 [ 474.362486][ T31] R13: 00007f7b8cdd6128 R14: 00007f7b8cdd6090 R15: 00007ffcc3116868 [ 474.370560][ T31] [ 474.373881][ T31] INFO: task syz.4.2227:13223 blocked for more than 144 seconds. [ 474.381623][ T31] Not tainted syzkaller #0 [ 474.396315][ T31] Blocked by coredump. [ 474.400945][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.410633][ T31] task:syz.4.2227 state:D stack:26888 pid:13223 tgid:13223 ppid:5862 task_flags:0x40044c flags:0x00004004 [ 474.424840][ T31] Call Trace: [ 474.428165][ T31] [ 474.431125][ T31] __schedule+0x1798/0x4cc0 [ 474.435715][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.440584][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.446806][ T31] ? __pfx___schedule+0x10/0x10 [ 474.451700][ T31] ? schedule+0x91/0x360 [ 474.456078][ T31] schedule+0x165/0x360 [ 474.460234][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.466957][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 474.472714][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 474.478681][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 474.486241][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.491162][ T31] ? exit_mmap+0x28e/0xb50 [ 474.495699][ T31] down_write+0x1ab/0x1f0 [ 474.500061][ T31] ? __pfx_down_write+0x10/0x10 [ 474.505200][ T31] exit_mmap+0x28e/0xb50 [ 474.509485][ T31] ? uprobe_clear_state+0x20f/0x290 [ 474.514766][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 474.519553][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 474.525453][ T31] ? __pfx_exit_aio+0x10/0x10 [ 474.530164][ T31] ? uprobe_clear_state+0x274/0x290 [ 474.536796][ T31] __mmput+0x118/0x420 [ 474.540901][ T31] exit_mm+0x1da/0x2c0 [ 474.545121][ T31] ? __pfx_exit_mm+0x10/0x10 [ 474.549738][ T31] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 474.555309][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.560135][ T31] do_exit+0x648/0x2300 [ 474.564530][ T31] ? do_raw_spin_lock+0x121/0x290 [ 474.569593][ T31] ? __pfx_do_exit+0x10/0x10 [ 474.574437][ T31] do_group_exit+0x21c/0x2d0 [ 474.579089][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.584573][ T31] get_signal+0x1286/0x1340 [ 474.589114][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 474.594847][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 474.600014][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 474.606428][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 474.611921][ T31] exit_to_user_mode_loop+0x75/0x110 [ 474.617292][ T31] do_syscall_64+0x2bd/0x3b0 [ 474.621907][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.627203][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.633582][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.638336][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.651292][ T31] RIP: 0033:0x7f7624f8ebe3 [ 474.656018][ T31] RSP: 002b:00007ffc558a2278 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 474.664550][ T31] RAX: fffffffffffffffc RBX: 0000001b32d64000 RCX: 00007f7624f8ebe3 [ 474.672551][ T31] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32d64000 [ 474.681022][ T31] RBP: 0000000000400000 R08: 0000000000000004 R09: 0000000000040000 [ 474.689356][ T31] R10: 0000000000100001 R11: 0000000000000246 R12: 00000000000001ba [ 474.697384][ T31] R13: 00000000000927c0 R14: 000000000004dde1 R15: 00007ffc558a2560 [ 474.705487][ T31] [ 474.708560][ T31] [ 474.708560][ T31] Showing all locks held in the system: [ 474.720057][ T31] 1 lock held by ksoftirqd/0/15: [ 474.726779][ T31] 1 lock held by khungtaskd/31: [ 474.731776][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 474.742023][ T31] 2 locks held by getty/5619: [ 474.746853][ T31] #0: ffff88814cf940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.756900][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 474.767244][ T31] 1 lock held by syz-executor/5858: [ 474.772457][ T31] #0: ffff88802ea257e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.781634][ T31] 1 lock held by syz-executor/5862: [ 474.786906][ T31] #0: ffff8880785c37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.796568][ T31] 1 lock held by syz-executor/5864: [ 474.801871][ T31] #0: ffff8880785c1760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.814810][ T31] 1 lock held by syz-executor/5871: [ 474.820220][ T31] #0: ffff88807ab537a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.830354][ T31] 1 lock held by syz-executor/5875: [ 474.836059][ T31] #0: ffff88802ea262a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.845761][ T31] 2 locks held by kworker/u8:8/5972: [ 474.851078][ T31] 1 lock held by syz.3.2222/13196: [ 474.856304][ T31] #0: ffff8880745e6d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.865801][ T31] 1 lock held by syz.1.2223/13212: [ 474.870944][ T31] #0: ffff88807ab56d60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.880055][ T31] 1 lock held by syz.2.2224/13211: [ 474.885245][ T31] #0: ffff88807ba14260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.894655][ T31] 1 lock held by syz.0.2225/13221: [ 474.899780][ T31] #0: ffff88807a84d7e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.908914][ T31] 1 lock held by syz.4.2227/13223: [ 474.914137][ T31] #0: ffff88807ab562a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 474.923623][ T31] 4 locks held by kworker/u8:9/13314: [ 474.929017][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 474.940246][ T31] #1: ffffc9002a367bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 474.953411][ T31] #2: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 474.962798][ T31] #3: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 474.974888][ T31] 2 locks held by kworker/u8:10/13748: [ 474.980470][ T31] [ 474.982829][ T31] ============================================= [ 474.982829][ T31] [ 474.991341][ T31] NMI backtrace for cpu 1 [ 474.991363][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 474.991386][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.991398][ T31] Call Trace: [ 474.991406][ T31] [ 474.991415][ T31] dump_stack_lvl+0x189/0x250 [ 474.991442][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.991461][ T31] ? __pfx__printk+0x10/0x10 [ 474.991492][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 474.991517][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 474.991541][ T31] ? __pfx__printk+0x10/0x10 [ 474.991567][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.991592][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 474.991616][ T31] watchdog+0xf93/0xfe0 [ 474.991647][ T31] ? watchdog+0x1de/0xfe0 [ 474.991675][ T31] kthread+0x70e/0x8a0 [ 474.991701][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.991724][ T31] ? __pfx_kthread+0x10/0x10 [ 474.991748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.991766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.991783][ T31] ? __pfx_kthread+0x10/0x10 [ 474.991807][ T31] ret_from_fork+0x3fc/0x770 [ 474.991831][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.991857][ T31] ? __switch_to_asm+0x39/0x70 [ 474.991878][ T31] ? __switch_to_asm+0x33/0x70 [ 474.991899][ T31] ? __pfx_kthread+0x10/0x10 [ 474.991935][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.991978][ T31] [ 474.991986][ T31] Sending NMI from CPU 1 to CPUs 0: [ 475.138274][ C0] NMI backtrace for cpu 0 [ 475.138294][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 475.138312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.138323][ C0] Workqueue: bat_events batadv_nc_worker [ 475.138351][ C0] RIP: 0010:__lock_acquire+0x6dc/0xd20 [ 475.138382][ C0] Code: 00 83 3d 36 ab 0e 18 00 75 13 48 63 44 24 20 48 0f a3 05 a7 1b 0b 12 0f 83 15 05 00 00 31 ed 48 8b 3c 24 4c 8b bf e0 0a 00 00 <48> 83 7c 24 28 00 75 1e 83 3d 05 ab 0e 18 00 0f 95 c0 49 83 ff ff [ 475.138395][ C0] RSP: 0018:ffffc900001278f0 EFLAGS: 00000046 [ 475.138409][ C0] RAX: 0000000000000007 RBX: 0000000000000002 RCX: ffffffff93498888 [ 475.138420][ C0] RDX: 0000000000000008 RSI: ffff88801cea8b40 RDI: ffff88801cea8000 [ 475.138430][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b481f32 [ 475.138440][ C0] R10: dffffc0000000000 R11: ffffffff8b481e60 R12: 00000000ffffff05 [ 475.138451][ C0] R13: 0000000000000001 R14: ffff88801cea8b40 R15: 16a72601b02ccdc3 [ 475.138462][ C0] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 475.138475][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.138486][ C0] CR2: 00007fffb784aff8 CR3: 000000007c41e000 CR4: 00000000003526f0 [ 475.138502][ C0] Call Trace: [ 475.138509][ C0] [ 475.138520][ C0] ? batadv_nc_worker+0xd2/0x610 [ 475.138548][ C0] lock_acquire+0x120/0x360 [ 475.138568][ C0] ? batadv_nc_worker+0xd2/0x610 [ 475.138591][ C0] ? batadv_nc_worker+0xd2/0x610 [ 475.138611][ C0] ? batadv_nc_worker+0xd2/0x610 [ 475.138631][ C0] batadv_nc_worker+0xef/0x610 [ 475.138651][ C0] ? batadv_nc_worker+0xd2/0x610 [ 475.138672][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 475.138688][ C0] process_scheduled_works+0xae1/0x17b0 [ 475.138720][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.138741][ C0] worker_thread+0x8a0/0xda0 [ 475.138766][ C0] kthread+0x70e/0x8a0 [ 475.138785][ C0] ? __pfx_worker_thread+0x10/0x10 [ 475.138800][ C0] ? __pfx_kthread+0x10/0x10 [ 475.138818][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.138833][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.138848][ C0] ? __pfx_kthread+0x10/0x10 [ 475.138865][ C0] ret_from_fork+0x3fc/0x770 [ 475.138882][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 475.138899][ C0] ? __switch_to_asm+0x39/0x70 [ 475.138918][ C0] ? __switch_to_asm+0x33/0x70 [ 475.138936][ C0] ? __pfx_kthread+0x10/0x10 [ 475.138953][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.138977][ C0] [ 475.139556][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 475.392736][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 475.402024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 475.412086][ T31] Call Trace: [ 475.415382][ T31] [ 475.418337][ T31] dump_stack_lvl+0x99/0x250 [ 475.422964][ T31] ? __asan_memcpy+0x40/0x70 [ 475.427569][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.432858][ T31] ? __pfx__printk+0x10/0x10 [ 475.437464][ T31] vpanic+0x281/0x750 [ 475.441453][ T31] ? __pfx_vpanic+0x10/0x10 [ 475.445990][ T31] ? preempt_schedule+0xae/0xc0 [ 475.450945][ T31] ? preempt_schedule_common+0x83/0xd0 [ 475.456415][ T31] panic+0xb9/0xc0 [ 475.460140][ T31] ? __pfx_panic+0x10/0x10 [ 475.464562][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.469968][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 475.476222][ T31] watchdog+0xfd2/0xfe0 [ 475.480390][ T31] ? watchdog+0x1de/0xfe0 [ 475.484733][ T31] kthread+0x70e/0x8a0 [ 475.488830][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.493513][ T31] ? __pfx_kthread+0x10/0x10 [ 475.498126][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.503323][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.508525][ T31] ? __pfx_kthread+0x10/0x10 [ 475.513123][ T31] ret_from_fork+0x3fc/0x770 [ 475.517718][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.522832][ T31] ? __switch_to_asm+0x39/0x70 [ 475.527605][ T31] ? __switch_to_asm+0x33/0x70 [ 475.532383][ T31] ? __pfx_kthread+0x10/0x10 [ 475.536979][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.541760][ T31] [ 475.545050][ T31] Kernel Offset: disabled [ 475.549369][ T31] Rebooting in 86400 seconds..