last executing test programs: 4m58.837535463s ago: executing program 0 (id=5674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (fail_nth: 7) 4m58.40149151s ago: executing program 0 (id=5675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (fail_nth: 6) 4m56.377450272s ago: executing program 0 (id=5684): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 4m56.270358524s ago: executing program 0 (id=5685): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, 0x0, 0x40810) 4m56.116718769s ago: executing program 0 (id=5687): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) (fail_nth: 7) 4m55.785213206s ago: executing program 0 (id=5691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="110000e703000000040000000900000000672cee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000000), &(0x7f0000000200)=@tcp, 0x3}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={0x0, 0x9, 0x2083, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000022c0)) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000010c0)={0x0, 0xa3, "3fe9a6bfd6a632ebc2209db7d512b8f6ade503e541ac089b5f731b0c7f74cc32a5234ae0cdb52b0ed33f7ca519deb71786b20e7de85d95b260aa14e9a78fc1cd8f9942249b1c705feff7ad4082e05dec63340aa5b11939d0a673a231b69d9b67167551b5700df5e8fb0e959f675198a6beb7114603c83bb7ee68a078b551fd6650a502834874974973a84f12663357a3315f1bfd7386a6aa0bee2c076946c3a098fc9f"}, &(0x7f00000011c0)=0xab) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0x8, &(0x7f0000000680)=""/203, &(0x7f0000000240)=0xcb) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740"], 0x558}}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0xffffffffffffff66, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 4m40.670477414s ago: executing program 32 (id=5691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="110000e703000000040000000900000000672cee", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000000), &(0x7f0000000200)=@tcp, 0x3}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={0x0, 0x9, 0x2083, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000022c0)) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000010c0)={0x0, 0xa3, "3fe9a6bfd6a632ebc2209db7d512b8f6ade503e541ac089b5f731b0c7f74cc32a5234ae0cdb52b0ed33f7ca519deb71786b20e7de85d95b260aa14e9a78fc1cd8f9942249b1c705feff7ad4082e05dec63340aa5b11939d0a673a231b69d9b67167551b5700df5e8fb0e959f675198a6beb7114603c83bb7ee68a078b551fd6650a502834874974973a84f12663357a3315f1bfd7386a6aa0bee2c076946c3a098fc9f"}, &(0x7f00000011c0)=0xab) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0x8, &(0x7f0000000680)=""/203, &(0x7f0000000240)=0xcb) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740"], 0x558}}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0xffffffffffffff66, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m42.055399585s ago: executing program 2 (id=6788): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x57, "1456b54f1e925d1490f75aaca17a6628e66977a28d87ada2aaa88268e8ba00f6c8b9f383b8487aa39ef8a609ccb6b4e5fef06a097836f59964c41c23591c5fc021338e8f4e98ef7524dbb89ac09b7be26aca0f5a33df8d"}, &(0x7f0000000100)=0x5f) 2m41.895930183s ago: executing program 2 (id=6790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r0}, "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"}) mmap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x5000007, 0x810, r0, 0x2802f000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r1, 0xff, 0x47a, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r7, 0x0, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES16=r3, @ANYBLOB="0380000000000000240012800c0001050000000000000000140002800800010008000000060002000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 2m41.686482726s ago: executing program 2 (id=6795): socket(0x80000000000000a, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc8, &(0x7f0000000040)=""/200}, 0x94) (async) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9ac, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @hopopts={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x78}}], 0x2, 0x2400c044) (async) shutdown(r1, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='cpu.weight\x00', 0x2, 0x0) (async) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r7, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r8 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) recvmmsg(r8, &(0x7f0000000480), 0x0, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000002000fddbdf250100000012000200776731000000000000000000000000000800050000000000"], 0x30}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) 2m41.552658493s ago: executing program 2 (id=6798): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, r5, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000070601080000000000000003000003"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x8}, &(0x7f0000000040)=0x8) 2m40.668363946s ago: executing program 2 (id=6809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x0, 0xfffffff9, 0x5, 0x12, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, &(0x7f0000000180)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa2d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m40.537163178s ago: executing program 2 (id=6810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000040)={0x0, 0x1, '\x00', [@pad1, @padn, @enc_lim={0x4, 0x1, 0x7}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) 2m25.188539268s ago: executing program 33 (id=6810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000040)={0x0, 0x1, '\x00', [@pad1, @padn, @enc_lim={0x4, 0x1, 0x7}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) 4.030257871s ago: executing program 1 (id=8232): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x20000000, 0xfffffff3, 0x5}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) connect$bt_sco(r1, &(0x7f0000000080), 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xffffffee}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dbdf2502000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) read(r4, &(0x7f0000000400)=""/100, 0x64) close(r0) 3.81314192s ago: executing program 1 (id=8235): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x44005) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) connect$caif(r2, &(0x7f00000000c0)=@dgm={0x25, 0x1, 0x7}, 0x18) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r4 = socket$kcm(0x2a, 0x2, 0x0) getpeername(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 3.181515219s ago: executing program 1 (id=8242): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="05", 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="3000000000000000840020000100000002200000450000000400000003000000020000000300000001000080", @ANYRES32=0x0], 0x30, 0x801}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x5, "009ba704b1"}, &(0x7f0000000200)=0x29) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000200)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet6_MCAST_MSFILTER(r1, 0x88, 0x30, 0x0, 0x210) 2.937401761s ago: executing program 3 (id=8245): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x12, 0x80000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x40, 0x31, 0xbf889f31a6573ca5, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe04d}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xe}}]}, 0xb0}}, 0x24040084) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0) 2.75544154s ago: executing program 3 (id=8248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010041000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0) 2.699600964s ago: executing program 3 (id=8249): syz_emit_ethernet(0x183, &(0x7f0000000180)={@local, @random="c68fda8326e0", @val={@void, {0x8100, 0x0, 0x1, 0xfff}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "7cc5dd", 0x149, 0x21, 0x1, @private0, @local, {[@srh={0x87, 0x6, 0x4, 0x3, 0x1, 0xc, 0x7ff, [@mcast1, @private0, @dev={0xfe, 0x80, '\x00', 0xb}]}, @hopopts={0x33, 0x15, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xf}, @generic={0x7, 0x75, "313e39b80ee661a2ffbde87a1b5bfe921cb1bca7cd61db2b3ca49cffabae9a9f49c1bad54b831186664f16638a58970a97a58046673878709ee7af04e441787ec2f738036e10c33b888004e7d6106d8430dd9fbc192108784dcacf147a660c440bc296689c74d19644641678b6ff5584a4691854d4"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x4, 0x1, 'r'}, @ra={0x5, 0x2, 0xff80}, @hao={0xc9, 0x10, @remote}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0xa, 0x1, "b4f64c", 0x7a, 'Y5\x00'}, "792e88bd657371e22d293b3d018a6a89f2b978edf7cbede4f81b42a64bfccd38f3f0b025759638c10f03c5dd9645f1481f8a91fa8b5dff5156cc53f61372a1b6f008a2d09624d33d09"}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ec0), &(0x7f0000001f00)=0xc) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000020c0)={{{@in=@broadcast, @in=@remote}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000001f40)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001f80)) getuid() getgid() r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f00000021c0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x17, 0x301, 0x270bd27, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) 2.606515251s ago: executing program 6 (id=8250): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x5, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.454614183s ago: executing program 3 (id=8254): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1004c801) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) unshare(0x24020400) 2.236997893s ago: executing program 6 (id=8256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x8, 0x4, 0x0, 0x6, 0x7}) accept4$x25(r1, 0x0, 0x0, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="18000000010003", 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0", 0xa8}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) close(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3e, 0x107, 0x70bd2b, 0x25dfdbfc, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x8000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r9) sendmsg$NLBL_CIPSOV4_C_LISTALL(r9, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r10, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 2.118139282s ago: executing program 4 (id=8257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x49}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x18800) r6 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) connect$l2tp(r6, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x2, 0x9, 0x204, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1ff}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x98000000}}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01022dbd700003dcdf252100000009001f0070687931000000000a0001007770616ef42c6609"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.956741387s ago: executing program 4 (id=8258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r2, 0x201, 0x70bd2d, 0x25dfdc03, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (fail_nth: 13) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.956060571s ago: executing program 6 (id=8259): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80000000, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001580)={'erspan0\x00', &(0x7f00000014c0)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x4, 0x2, {{0xf, 0x4, 0x1, 0x7, 0x3c, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0x38, [@loopback, @broadcast, @multicast1]}, @ssrr={0x89, 0x17, 0xc0, [@multicast1, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@fwd={0x9}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x9, 0xb1da, 0x8}, {0xf, 0x10, 0x200}]}]}, {0x0, [0x2e]}}, &(0x7f00000016c0)=""/145, 0x57, 0x91, 0x1, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0x6, 0x5, 0x4, 0x8000, r2, 0x51a, '\x00', r3, r4, 0x4, 0x2, 0x3, 0xe, @value=r5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000000c0)={0x1, 0x2, {0x6, @usage=0x2, 0x0, 0xc0000, 0x5, 0x3, 0x6, 0x1, 0x9b, @struct={0x7fffffff, 0x5}, 0x6e, 0x400, [0x9, 0x5, 0xe2, 0x7920, 0x8, 0xf271]}, {0x8000, @usage=0x2, 0x0, 0x4, 0x1, 0x8, 0x80, 0x10000, 0x21, @usage=0x1, 0x401, 0xdc, [0x8001, 0x4, 0x1f, 0x844a, 0x2, 0x7]}, {0x0, @usage=0xfff, 0x0, 0x2, 0x3, 0x6, 0x2, 0x4, 0x4a0, @struct={0x7ff, 0x400}, 0x0, 0xd, [0x242d, 0x40, 0x81, 0x6, 0x1ff, 0x1]}, {0x4, 0x6, 0x6}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000004c0)={r6, "61beab4a744475492a758c252f280ba6"}) 1.548197696s ago: executing program 4 (id=8260): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "7ef72e5a7da3dac6", "f8488278e017234b51f412ac5f7282ff", "dc1e184c", "33d8cf5036da1c09"}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) bind(r0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x158, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xaf, 0x7, 0x1, 0x0, "35651e760c036bfb8d9206925fcfbb09ed2ce176362cc155573f820a50b4a10aea8223a2bd0782297bf8e3beea743e81ac530a6350145b614a49ab5455b84d4c1f5bcc2df924c2fb2c0af7dcd0da687e5b0eea2c4b94b770f06e08e096b777860ff28b1e149714143f5e77be9358778689dbaf8d89a5507678cb735586ce4ca8900ebc5046adb2a2d73a3859e7992652b923a3475086fce6381150ba652a0cb52a815768e4ebc053c88854"}, @NFTA_RULE_USERDATA={0x68, 0x7, 0x1, 0x0, "f95f02ba8b8b11b904597c10fee9217562caf8685a0f01616664fd273b0e67a4f223652e52440f11c2b56acb215de93c16c8cbd5aa3cd50b07dc2ef587167909dc9140620a9b25ae51209b5459d32396422cbd0b2f08b9231dfd2a8c89c6d9485ccad6f6"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x40, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x8050) socketpair$unix(0x1, 0x8b5d43dac763cd6, 0x0, &(0x7f0000000700)) r5 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x58, 0x5, 0x6, 0x100, 0x0, 0x400000, r6}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20900010}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x9c, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20040010) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xdc, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x636}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x67e}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x24}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8010}, 0x4004084) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000c00)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@ipv4_deladdr={0x48, 0x15, 0x410, 0x70bd2c, 0x25dfdbff, {0x2, 0x40, 0x20, 0xc8, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x0, 0x3, 0x10000}}, @IFA_FLAGS={0x8, 0x8, 0x1a5}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x3c5, 0x8, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x48840) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40881) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r11, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000011c0)={'vlan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f00000012c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0x31, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) pipe(&(0x7f0000001500)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1d, 0x12, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfedd, 0x0, 0x0, 0x0, 0xc14e}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000001100)='syzkaller\x00', 0x2, 0x50, &(0x7f0000001140)=""/80, 0x40f00, 0x2, '\x00', r12, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r14, 0x0, 0x0, 0x0, 0x10, 0x59}, 0x94) 1.365885396s ago: executing program 3 (id=8261): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x1, 0x2, 0x5, 0x0, 0x0, {0x11d99b92affdfcb9, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x1, 0x200, 0x62, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8, 0xfffffffe, 0xdc3}}) 1.245258078s ago: executing program 5 (id=8262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a08000200", @ANYRESOCT=r1], 0x88}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x15}]}, 0x20}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000200)={0x7, 'dvmrp1\x00', {0x1000}, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000001400)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) 1.244650169s ago: executing program 4 (id=8263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xe000000, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, 0x0) 1.186167422s ago: executing program 5 (id=8264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x34, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2, 0x2}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117000000000008510000002000000850000008c00000095000000000000009500ad0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.165448076s ago: executing program 1 (id=8265): syz_emit_ethernet(0x5e, &(0x7f0000002280)=ANY=[@ANYBLOB], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x400, 0x3, 0x1e80114}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095b2000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x8004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {0x0}], 0x48}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000017c0)=ANY=[@ANYRES64=r3, @ANYBLOB="1328f9a5f40687d4cdf1fbab3c4fd73cec5a0e5c14c03a4830bceb9959289aac22c21578c9d592739139e48a327eeb5d899cd1b436db436740e722a40544504598cdf014f5e06fdd56bd00bcc3a2721e9901766bb63b930d4f78c20fbd0c970e3a7aaacdc25bfd6aeb6b050000000000000015545af6e7522322bb2457a459911d0b576d108e91bbce1d4212ee382a1ac2cf7bc496e4902620225b05f018ea71ea607fa9e96eafd01d16ddfa4a51b87ac20eb2bac6e6d7fc1b0e74aca1a24cb24bb3908befebb6791cd882f68574b1cdb4ead5", @ANYRES16=r3, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES16=r6], 0x18}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r12, &(0x7f0000000000), 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.124182387s ago: executing program 6 (id=8266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) connect(r2, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb9f}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1411, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000040}, 0x24000005) 1.0091124s ago: executing program 1 (id=8267): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="05", 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="3000000000000000840020000100000002200000450000000400000003000000020000000300000001000080", @ANYRES32=0x0], 0x30, 0x801}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x5, "009ba704b1"}, &(0x7f0000000200)=0x29) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000200)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet6_MCAST_MSFILTER(r1, 0x88, 0x30, 0x0, 0x210) 945.294689ms ago: executing program 4 (id=8268): close(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456500000000caaf6c", 0x3b, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000300000000000000000000bbdf214fa85017423f0d5492c2891ca3a3917271a47fcd9e20afdf1342169cd48197bd80563e11f07849cfe1b73da4694d844ba2428bd434286765948085cf8c106cef13d06ccb64df2d36895e77fc73890effe6ae069baee1e6c3d53f59b02c60664bfcb05eb570883ab6dbdd339da46a2137fd37e39dcfe3d82f96e3dd6929ac12fa2016127c41a1bfadc9727b6c61854d020181956f338e834290e3a7e3086191fd6c777ce6cdd4743be131305a31ba5c06a98a171853847dc2897e44792657d9647904e65a344d458af5779d1e1e"], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa7, @any, 0x7f, 0x2}, 0xe) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) recvfrom$ax25(r2, &(0x7f0000000440)=""/145, 0x91, 0x20120, &(0x7f0000000500)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x840) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r7, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40180, 0x0) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000106223004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000b663fd027cebcfa700012f753eb4503523bdfef8f9d04757cd778f54a5f7ab4f00437825eb37fdcdb0ffbcef9320970c75673e5db385fb3e3b62184e016544ebc053db5a7b4d9a395216a92cfaf638f41e2c12619f88985d60f400eb3a3ce1389c3ed1bd063e7e038d687e27900ec9ba6d53317f546c291d8f4ce0e9eb3fe41fdcb50f6635950fe61d9e8d141d7b65cb6da5d06e605904626e63c33a2de44b50a6b918ad9845"], 0xffe) 938.283176ms ago: executing program 5 (id=8269): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001940)={r1, 0x1, 0x3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 918.68663ms ago: executing program 3 (id=8270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e20, @private=0xa010101}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"fc4785c597483fa74fb65c385ece907b", 0x0, 0x0, {0x1, 0x6}, {0x8001, 0x2}, 0x5, [0x100000000, 0x1f, 0x0, 0x8, 0xfffffffffffffff8, 0x100000002, 0x5, 0x9, 0x200000000, 0x0, 0x5bc, 0x45d855e4, 0x5, 0x400, 0x5, 0x2]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0xcd9d}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000003c0)={{r0}, r5, 0x1e, @unused=[0x4, 0xfffffffffffffffa, 0x1, 0x1ab], @subvolid=0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4000854) r9 = socket$kcm(0x2, 0xa, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800080003000000000014000000456d00300066000107"], 0x3e) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) writev(r4, &(0x7f0000003080)=[{&(0x7f0000001cc0)="8e887197b5fce79a820f29dfb0e7d4d140af7e17a9c147a063aec4e99b70e92cbc8deb2920dc2fa735c62e56f460ab35d013f6d72f27e14ac6311a58f5f192a731ba0b86f12cf2e1c47580997a734a82b02a42c0f9646001ed3b53212f0ad2fe5f3b99e2bf795187f3b45d50866473a4bffd8344f6350d93aa6a2210bf3deb35d04dc5c76c15e84c6be0fbda8da7355112195e3ef77338ed5b0c5d8dde4439c384326b480b6c3cdb5e27b366f588c633e7057cbccaf7e4ba6b9dd5c7867dc334daa35fba770b865b335f0faa1c022f0342dcd0f5b45256dff46484cd6e347b89ab4f2c1ae7bcea", 0xe7}, {&(0x7f0000001dc0)="aafb116cf8babea831e3619c8c6293f0d6e09b929dc562a20a6917345437c78e62584cc8db952be380306a380f3f0595f2d735b0afcc698242085e06044c1b55cb4850ab794499075725b9ba0293a484e6a9869457bba5e9c59c8d2f9eb6b395531b48f9a77090aeaa42b8411a77ad369f92a51770910891c28b00a0b3165e265a22b2aa851f0900aabd06db71c6df136edbe94ada49169f4a7a0a7b81b66aa3f3cbfb021e2223a1648bf91bffad99897261f6a55ac16b41b6d4b35fa424093c0cdbb959bb112596898841bce4", 0xcd}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000000180)="0d27df24ef565e8b6dd6ca85b6c7053cb584b21974a489295f892c4f0b16ec72ebdd0f57341b6c0186f27f6d7c90c6eae89df0ce5986ed5dc7d048", 0x3b}, {&(0x7f0000002ec0)="9bf77ab85e59065313584ed70e36ca3b021fd86b1d305ae98f06a3d73bbf33e9d9ff09e1f63b3bdc0320ddabd43007e1b727a3ef8eced3b40eaa04e131c0847c5c420801e87c219cca1b186697960786586d9f943611ec4d81321f71fb69c308037c5d0080f12321adaed19b6955afb60fbf8f3e78a13ae8ce9800399880abd7384e9c6ca6896b49565e7aa9f1570605384aa90b7c7032c5afd927a8777da4e3209abbac5026d6e06cc488924f454f27903d1117c79b6312aee44ec80207169cd7f7a562a5d2e092796f3ba17644511d4d8755d2b46b72dadf", 0xd9}, {&(0x7f0000002fc0)="93fef86b1ad514bf374916ba2a73af2daee5867e49261354f54d9accaa2f24985cba4f21e3a226860502bd6837127a10e0490332cf4b4bf1554f3597d7f78f99ca602b70d276ee64d221907fc9a9b6075fc92f8395fcd9315aa0d6b0e1984a4a1a4ca1b991d69ab37a7708f54fef4fa7ed140f034a81bda64cd0702ef035a02cbde7d041ac38a0d7e33550ef2d775007fd93f0a3eb5cc03ee529193ec620cea2c69a245a35f60d9fd248d5190593d006505e38795bdc53be6ff0d31c", 0xbc}, {&(0x7f0000003100)="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"/274, 0x112}], 0x7) 837.50821ms ago: executing program 6 (id=8271): syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1004c801) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) unshare(0x24020400) 677.195221ms ago: executing program 5 (id=8272): r0 = socket(0x11, 0xa, 0x8) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfd1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x8000) 658.50512ms ago: executing program 6 (id=8273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x18, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000060005"], 0x48}}, 0x0) read(r1, &(0x7f0000000140)=""/171, 0xab) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xe, 0x9, 0xff, 0x1000}, 0x10) 240.714026ms ago: executing program 5 (id=8274): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0xb, @empty, 0x7}, @in6={0xa, 0x4e24, 0x2, @empty, 0x4}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x100, @mcast2, 0x101}], 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x9b, &(0x7f00000001c0)="b6c5ea35c7864622d1209f29d81e9c3e12ad1c8595662899285f4eb8b8f1842b92dde534e5c0b23db01a89c615bff5e87722aeb72957a259b3eae67d1459aba6bd879cbe6bedb191cf03d54ccf4a58e9b740ad834e8bb1d0bfca8fa0a3180888330d3b5b05d90742afa0ac541ef2221608b71d389b1b3ae8b03abced330e6f945983d35993f274162330c608fa109f79a012f1096e62605cdc8c0a", 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=@mpls_getnetconf={0x14, 0x52, 0xd03, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x1e4afafb7a4d4514, 0x2, 0x2, 0x6, 0x6c}, 0x20) getsockname$l2tp(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x24}}, 0x4000000) 166.749594ms ago: executing program 5 (id=8275): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="05", 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="3000000000000000840020000100000002200000450000000400000003000000020000000300000001000080", @ANYRES32=0x0], 0x30, 0x801}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x5, "009ba704b1"}, &(0x7f0000000200)=0x29) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000200)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet6_MCAST_MSFILTER(r1, 0x88, 0x30, 0x0, 0x210) 24.542429ms ago: executing program 4 (id=8276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1200, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 1 (id=8277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1004, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 0000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1701.598874][T31044] RBP: 00007f17dec13f91 R08: 0000000000000004 R09: 0000000000000000 [ 1701.598889][T31044] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.598905][T31044] R13: 00007f17dede6128 R14: 00007f17dede6090 R15: 00007ffd53273868 [ 1701.598944][T31044] [ 1701.599036][T31044] Mem-Info: [ 1701.897138][T31044] active_anon:7383 inactive_anon:0 isolated_anon:0 [ 1701.897138][T31044] active_file:3735 inactive_file:40513 isolated_file:0 [ 1701.897138][T31044] unevictable:768 dirty:293 writeback:0 [ 1701.897138][T31044] slab_reclaimable:13220 slab_unreclaimable:163456 [ 1701.897138][T31044] mapped:42986 shmem:1351 pagetables:1202 [ 1701.897138][T31044] sec_pagetables:0 bounce:0 [ 1701.897138][T31044] kernel_misc_reclaimable:0 [ 1701.897138][T31044] free:1239885 free_pcp:9521 free_cma:0 [ 1701.943508][T31044] Node 0 active_anon:29532kB inactive_anon:0kB active_file:14940kB inactive_file:161852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171944kB dirty:1168kB writeback:0kB shmem:3868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14136kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1702.003687][T31044] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1702.039422][T31044] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.083851][T31044] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 1702.154256][T31044] Node 0 DMA32 free:1029124kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29832kB inactive_anon:0kB active_file:14940kB inactive_file:161852kB unevictable:1536kB writepending:1168kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:38620kB local_pcp:18640kB free_cma:0kB [ 1702.196344][T31044] lowmem_reserve[]: 0 0 0 0 0 [ 1702.201371][T31044] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.231607][T31044] lowmem_reserve[]: 0 0 0 0 0 [ 1702.239768][T31044] Node 1 Normal free:3910516kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1172kB local_pcp:692kB free_cma:0kB [ 1702.286835][T31044] lowmem_reserve[]: 0 0 0 0 0 [ 1702.354196][T31054] lo speed is unknown, defaulting to 1000 [ 1702.361331][T31044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1702.376342][T31054] wg1 speed is unknown, defaulting to 1000 [ 1702.434078][T31044] Node 0 DMA32: 318*4kB (UM) 1652*8kB (UM) 692*16kB (UME) 282*32kB (UME) 122*64kB (UME) 95*128kB (UME) 53*256kB (UME) 20*512kB (UME) 9*1024kB (UME) 5*2048kB (UM) 227*4096kB (UM) = 1027608kB [ 1702.457861][T31044] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1702.471211][T31044] Node 1 Normal: 173*4kB (UME) 44*8kB (UME) 52*16kB (UME) 223*32kB (UME) 81*64kB (UME) 34*128kB (UME) 13*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3910516kB [ 1702.490401][T31044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1702.536573][T31044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1702.587436][T31044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1702.635424][T31044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1702.675868][T31044] 45596 total pagecache pages [ 1702.691388][T31044] 0 pages in swap cache [ 1702.704192][T31044] Free swap = 124996kB [ 1702.720855][T31044] Total swap = 124996kB [ 1702.729567][T31044] 2097051 pages RAM [ 1702.737316][T31044] 0 pages HighMem/MovableOnly [ 1702.764064][T31044] 424134 pages reserved [ 1702.768285][T31044] 0 pages cma reserved [ 1702.829914][T31061] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7429'. [ 1702.979958][T31066] netlink: 88 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1703.043408][T31069] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1703.056094][T31070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7430'. [ 1703.782635][T31091] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1703.998285][T31083] lo speed is unknown, defaulting to 1000 [ 1704.006215][T31083] wg1 speed is unknown, defaulting to 1000 [ 1704.395208][T31105] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7441'. [ 1704.536907][T31109] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 1704.647157][T31115] netlink: 'syz.6.7443': attribute type 1 has an invalid length. [ 1704.726768][T31118] FAULT_INJECTION: forcing a failure. [ 1704.726768][T31118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.788456][T31118] CPU: 1 UID: 0 PID: 31118 Comm: syz.6.7443 Not tainted syzkaller #0 PREEMPT(full) [ 1704.788488][T31118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1704.788501][T31118] Call Trace: [ 1704.788511][T31118] [ 1704.788521][T31118] dump_stack_lvl+0x189/0x250 [ 1704.788557][T31118] ? __pfx____ratelimit+0x10/0x10 [ 1704.788580][T31118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1704.788610][T31118] ? __pfx__printk+0x10/0x10 [ 1704.788633][T31118] ? __might_fault+0xb0/0x130 [ 1704.788678][T31118] should_fail_ex+0x414/0x560 [ 1704.788717][T31118] _copy_from_iter+0x1de/0x1790 [ 1704.788741][T31118] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 1704.788772][T31118] ? kmalloc_reserve+0xbd/0x290 [ 1704.788811][T31118] ? __pfx__copy_from_iter+0x10/0x10 [ 1704.788833][T31118] ? __alloc_skb+0x2f1/0x430 [ 1704.788859][T31118] ? __pfx___alloc_skb+0x10/0x10 [ 1704.788885][T31118] ? netlink_sendmsg+0x642/0xb30 [ 1704.788910][T31118] ? skb_put+0x11b/0x210 [ 1704.788938][T31118] netlink_sendmsg+0x6b2/0xb30 [ 1704.788972][T31118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.789010][T31118] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1704.789041][T31118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1704.789060][T31118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.789084][T31118] __sock_sendmsg+0x21c/0x270 [ 1704.789116][T31118] ____sys_sendmsg+0x505/0x830 [ 1704.789145][T31118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.789177][T31118] ? import_iovec+0x74/0xa0 [ 1704.789205][T31118] ___sys_sendmsg+0x21f/0x2a0 [ 1704.789231][T31118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.789288][T31118] ? __fget_files+0x2a/0x420 [ 1704.789307][T31118] ? __fget_files+0x3a0/0x420 [ 1704.789336][T31118] __x64_sys_sendmsg+0x19b/0x260 [ 1704.789363][T31118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1704.789397][T31118] ? __pfx_ksys_write+0x10/0x10 [ 1704.789429][T31118] ? do_syscall_64+0xbe/0xfa0 [ 1704.789455][T31118] do_syscall_64+0xfa/0xfa0 [ 1704.789473][T31118] ? lockdep_hardirqs_on+0x9c/0x150 [ 1704.789499][T31118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.789519][T31118] ? clear_bhb_loop+0x60/0xb0 [ 1704.789542][T31118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.789561][T31118] RIP: 0033:0x7fa96cf8f749 [ 1704.789580][T31118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.789597][T31118] RSP: 002b:00007fa96ddea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.789618][T31118] RAX: ffffffffffffffda RBX: 00007fa96d1e6090 RCX: 00007fa96cf8f749 [ 1704.789633][T31118] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1704.789646][T31118] RBP: 00007fa96ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.789658][T31118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.789670][T31118] R13: 00007fa96d1e6128 R14: 00007fa96d1e6090 R15: 00007ffc5cb601a8 [ 1704.789703][T31118] [ 1704.919618][T31115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1705.142475][T31125] __nla_validate_parse: 5 callbacks suppressed [ 1705.142498][T31125] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7444'. [ 1705.200812][T31127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7444'. [ 1706.020403][T31145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7451'. [ 1706.089480][T31147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7451'. [ 1706.216052][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7452'. [ 1706.380435][T31154] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7454'. [ 1706.404795][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7454'. [ 1706.424448][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7454'. [ 1706.643857][T31163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1706.677395][T31163] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1706.888645][T31169] syzkaller1: entered promiscuous mode [ 1706.909537][T31169] syzkaller1: entered allmulticast mode [ 1706.939458][T31171] netlink: 'syz.4.7462': attribute type 21 has an invalid length. [ 1707.069866][T31150] lo speed is unknown, defaulting to 1000 [ 1707.104575][T31150] wg1 speed is unknown, defaulting to 1000 [ 1707.483496][T31179] netlink: 'syz.6.7464': attribute type 10 has an invalid length. [ 1707.510828][T31179] team0: Port device geneve0 added [ 1707.540221][ T62] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.578934][ T62] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.620376][ T62] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.659650][ T62] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.505139][T31214] syzkaller1: entered promiscuous mode [ 1708.517045][T31214] syzkaller1: entered allmulticast mode [ 1708.538563][T31215] xfrm0: entered promiscuous mode [ 1708.642644][T31217] netlink: 'syz.1.7476': attribute type 21 has an invalid length. [ 1708.872356][T31212] lo speed is unknown, defaulting to 1000 [ 1708.880319][T31212] wg1 speed is unknown, defaulting to 1000 [ 1709.402841][T31234] syzkaller1: entered promiscuous mode [ 1709.408825][T31234] syzkaller1: entered allmulticast mode [ 1709.428253][T31245] FAULT_INJECTION: forcing a failure. [ 1709.428253][T31245] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.461215][T31246] netlink: 'syz.1.7482': attribute type 4 has an invalid length. [ 1709.472044][T31245] CPU: 0 UID: 0 PID: 31245 Comm: syz.6.7484 Not tainted syzkaller #0 PREEMPT(full) [ 1709.472079][T31245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1709.472094][T31245] Call Trace: [ 1709.472104][T31245] [ 1709.472114][T31245] dump_stack_lvl+0x189/0x250 [ 1709.472153][T31245] ? __pfx____ratelimit+0x10/0x10 [ 1709.472177][T31245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1709.472209][T31245] ? __pfx__printk+0x10/0x10 [ 1709.472241][T31245] ? __pfx___might_resched+0x10/0x10 [ 1709.472266][T31245] ? fs_reclaim_acquire+0x7d/0x100 [ 1709.472295][T31245] should_fail_ex+0x414/0x560 [ 1709.472335][T31245] should_failslab+0xa8/0x100 [ 1709.472359][T31245] __kvmalloc_node_noprof+0x158/0x910 [ 1709.472391][T31245] ? bpf_test_run_xdp_live+0x1ba/0x1b10 [ 1709.472417][T31245] ? unwind_get_return_address+0x4d/0x90 [ 1709.472453][T31245] bpf_test_run_xdp_live+0x1ba/0x1b10 [ 1709.472489][T31245] ? stack_trace_save+0x9c/0xe0 [ 1709.472520][T31245] ? __pfx_stack_trace_save+0x10/0x10 [ 1709.472553][T31245] ? stack_depot_save_flags+0x40/0x860 [ 1709.472599][T31245] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1709.472624][T31245] ? __kasan_kmalloc+0x93/0xb0 [ 1709.472656][T31245] ? __kmalloc_noprof+0x411/0x7f0 [ 1709.472687][T31245] ? bpf_test_init+0x9f/0x150 [ 1709.472716][T31245] ? bpf_prog_test_run_xdp+0x503/0x10e0 [ 1709.472772][T31245] ? __lock_acquire+0xab9/0xd20 [ 1709.472808][T31245] ? __might_fault+0xb0/0x130 [ 1709.472848][T31245] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1709.472890][T31245] ? _copy_from_user+0x94/0xb0 [ 1709.472920][T31245] ? bpf_test_init+0x113/0x150 [ 1709.472942][T31245] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1709.472972][T31245] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 1709.473016][T31245] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1709.473049][T31245] ? __fget_files+0x2a/0x420 [ 1709.473077][T31245] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1709.473105][T31245] bpf_prog_test_run+0x2c7/0x340 [ 1709.473135][T31245] __sys_bpf+0x562/0x860 [ 1709.473160][T31245] ? __pfx___sys_bpf+0x10/0x10 [ 1709.473200][T31245] ? ksys_write+0x22a/0x250 [ 1709.473236][T31245] ? __pfx_ksys_write+0x10/0x10 [ 1709.473276][T31245] __x64_sys_bpf+0x7c/0x90 [ 1709.473311][T31245] do_syscall_64+0xfa/0xfa0 [ 1709.473334][T31245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1709.473359][T31245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.473382][T31245] ? clear_bhb_loop+0x60/0xb0 [ 1709.473410][T31245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.473433][T31245] RIP: 0033:0x7fa96cf8f749 [ 1709.473454][T31245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1709.473474][T31245] RSP: 002b:00007fa96de0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1709.473499][T31245] RAX: ffffffffffffffda RBX: 00007fa96d1e5fa0 RCX: 00007fa96cf8f749 [ 1709.473517][T31245] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1709.473532][T31245] RBP: 00007fa96de0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.473547][T31245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.473561][T31245] R13: 00007fa96d1e6038 R14: 00007fa96d1e5fa0 R15: 00007ffc5cb601a8 [ 1709.473600][T31245] [ 1709.494749][T31246] netlink: 'syz.1.7482': attribute type 4 has an invalid length. [ 1710.029764][ T79] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.055541][ T79] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.077527][ T79] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.165032][ T1115] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1710.990772][T31281] xfrm0: left promiscuous mode [ 1711.013142][T31281] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 1711.042571][T31281] __nla_validate_parse: 8 callbacks suppressed [ 1711.042595][T31281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7493'. [ 1711.342538][T31291] netlink: 'syz.1.7495': attribute type 10 has an invalid length. [ 1711.364436][T31291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7495'. [ 1711.379254][T31293] syzkaller1: entered promiscuous mode [ 1711.404256][T31293] syzkaller1: entered allmulticast mode [ 1711.704906][T31302] FAULT_INJECTION: forcing a failure. [ 1711.704906][T31302] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.749900][T31302] CPU: 0 UID: 0 PID: 31302 Comm: syz.5.7499 Not tainted syzkaller #0 PREEMPT(full) [ 1711.749934][T31302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1711.749950][T31302] Call Trace: [ 1711.749959][T31302] [ 1711.749969][T31302] dump_stack_lvl+0x189/0x250 [ 1711.750008][T31302] ? __pfx____ratelimit+0x10/0x10 [ 1711.750032][T31302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1711.750064][T31302] ? __pfx__printk+0x10/0x10 [ 1711.750091][T31302] ? __pfx___might_resched+0x10/0x10 [ 1711.750117][T31302] ? fs_reclaim_acquire+0x7d/0x100 [ 1711.750146][T31302] should_fail_ex+0x414/0x560 [ 1711.750187][T31302] should_failslab+0xa8/0x100 [ 1711.750213][T31302] __kmalloc_noprof+0xcb/0x7f0 [ 1711.750245][T31302] ? bpf_test_init+0x9f/0x150 [ 1711.750277][T31302] bpf_test_init+0x9f/0x150 [ 1711.750307][T31302] bpf_prog_test_run_xdp+0x503/0x10e0 [ 1711.750352][T31302] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1711.750385][T31302] ? __fget_files+0x2a/0x420 [ 1711.750413][T31302] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1711.750441][T31302] bpf_prog_test_run+0x2c7/0x340 [ 1711.750471][T31302] __sys_bpf+0x562/0x860 [ 1711.750496][T31302] ? __pfx___sys_bpf+0x10/0x10 [ 1711.750536][T31302] ? ksys_write+0x22a/0x250 [ 1711.750572][T31302] ? __pfx_ksys_write+0x10/0x10 [ 1711.750611][T31302] __x64_sys_bpf+0x7c/0x90 [ 1711.750647][T31302] do_syscall_64+0xfa/0xfa0 [ 1711.750670][T31302] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.750694][T31302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.750717][T31302] ? clear_bhb_loop+0x60/0xb0 [ 1711.750753][T31302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.750776][T31302] RIP: 0033:0x7f76b978f749 [ 1711.750796][T31302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.750816][T31302] RSP: 002b:00007f76ba697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1711.750840][T31302] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978f749 [ 1711.750856][T31302] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1711.750871][T31302] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.750886][T31302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1711.750900][T31302] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1711.750937][T31302] [ 1712.307223][T31280] lo speed is unknown, defaulting to 1000 [ 1712.336773][T31280] wg1 speed is unknown, defaulting to 1000 [ 1712.363799][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7505'. [ 1712.444721][T31321] FAULT_INJECTION: forcing a failure. [ 1712.444721][T31321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.464899][T31321] CPU: 0 UID: 0 PID: 31321 Comm: syz.4.7507 Not tainted syzkaller #0 PREEMPT(full) [ 1712.464933][T31321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1712.464948][T31321] Call Trace: [ 1712.464957][T31321] [ 1712.464968][T31321] dump_stack_lvl+0x189/0x250 [ 1712.465006][T31321] ? __pfx____ratelimit+0x10/0x10 [ 1712.465030][T31321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.465061][T31321] ? __pfx__printk+0x10/0x10 [ 1712.465100][T31321] should_fail_ex+0x414/0x560 [ 1712.465141][T31321] _copy_to_user+0x31/0xb0 [ 1712.465174][T31321] simple_read_from_buffer+0xe1/0x170 [ 1712.465216][T31321] proc_fail_nth_read+0x1b3/0x220 [ 1712.465252][T31321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1712.465285][T31321] ? rw_verify_area+0x2a6/0x4d0 [ 1712.465316][T31321] ? __lock_acquire+0xab9/0xd20 [ 1712.465337][T31321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1712.465369][T31321] vfs_read+0x200/0xa30 [ 1712.465398][T31321] ? fdget_pos+0x247/0x320 [ 1712.465427][T31321] ? __pfx___mutex_lock+0x10/0x10 [ 1712.465455][T31321] ? __pfx_vfs_read+0x10/0x10 [ 1712.465488][T31321] ? __fget_files+0x2a/0x420 [ 1712.465515][T31321] ? __fget_files+0x3a0/0x420 [ 1712.465536][T31321] ? __fget_files+0x2a/0x420 [ 1712.465569][T31321] ksys_read+0x145/0x250 [ 1712.465605][T31321] ? __pfx_ksys_read+0x10/0x10 [ 1712.465648][T31321] ? do_syscall_64+0xbe/0xfa0 [ 1712.465677][T31321] do_syscall_64+0xfa/0xfa0 [ 1712.465700][T31321] ? lockdep_hardirqs_on+0x9c/0x150 [ 1712.465724][T31321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.465747][T31321] ? clear_bhb_loop+0x60/0xb0 [ 1712.465775][T31321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.465797][T31321] RIP: 0033:0x7f6ed338e15c [ 1712.465818][T31321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1712.465840][T31321] RSP: 002b:00007f6ed41c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1712.465864][T31321] RAX: ffffffffffffffda RBX: 00007f6ed35e5fa0 RCX: 00007f6ed338e15c [ 1712.465882][T31321] RDX: 000000000000000f RSI: 00007f6ed41c80a0 RDI: 0000000000000003 [ 1712.465897][T31321] RBP: 00007f6ed41c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1712.465912][T31321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1712.465926][T31321] R13: 00007f6ed35e6038 R14: 00007f6ed35e5fa0 R15: 00007fff9907c5e8 [ 1712.465966][T31321] [ 1712.734138][T31324] netlink: 'syz.6.7508': attribute type 11 has an invalid length. [ 1712.890636][T31333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1713.122736][T31336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7513'. [ 1713.142960][T31337] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7512'. [ 1713.886430][T31342] FAULT_INJECTION: forcing a failure. [ 1713.886430][T31342] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.899450][T31342] CPU: 1 UID: 0 PID: 31342 Comm: syz.1.7515 Not tainted syzkaller #0 PREEMPT(full) [ 1713.899478][T31342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1713.899491][T31342] Call Trace: [ 1713.899500][T31342] [ 1713.899508][T31342] dump_stack_lvl+0x189/0x250 [ 1713.899541][T31342] ? __pfx____ratelimit+0x10/0x10 [ 1713.899568][T31342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1713.899594][T31342] ? __pfx__printk+0x10/0x10 [ 1713.899629][T31342] should_fail_ex+0x414/0x560 [ 1713.899665][T31342] should_failslab+0xa8/0x100 [ 1713.899688][T31342] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1713.899717][T31342] ? tipc_crypto_start+0x99/0x640 [ 1713.899745][T31342] ? __kasan_kmalloc+0x93/0xb0 [ 1713.899778][T31342] tipc_crypto_start+0x99/0x640 [ 1713.899804][T31342] ? tipc_nodeid2string+0x63d/0x890 [ 1713.899839][T31342] tipc_node_create+0x3b1/0x1da0 [ 1713.899868][T31342] ? crypto_has_alg+0x15c/0x190 [ 1713.899902][T31342] tipc_nl_node_set_key+0x6a0/0x9a0 [ 1713.899932][T31342] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 1713.899963][T31342] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1713.900002][T31342] genl_family_rcv_msg_doit+0x215/0x300 [ 1713.900038][T31342] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1713.900076][T31342] ? __pfx_stack_trace_save+0x10/0x10 [ 1713.900114][T31342] genl_rcv_msg+0x60e/0x790 [ 1713.900156][T31342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1713.900183][T31342] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 1713.900221][T31342] netlink_rcv_skb+0x208/0x470 [ 1713.900248][T31342] ? __lock_acquire+0xab9/0xd20 [ 1713.900268][T31342] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1713.900297][T31342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1713.900340][T31342] ? down_read+0x1ad/0x2e0 [ 1713.900368][T31342] genl_rcv+0x28/0x40 [ 1713.900392][T31342] netlink_unicast+0x82f/0x9e0 [ 1713.900421][T31342] ? __pfx_netlink_unicast+0x10/0x10 [ 1713.900442][T31342] ? netlink_sendmsg+0x642/0xb30 [ 1713.900462][T31342] ? skb_put+0x11b/0x210 [ 1713.900488][T31342] netlink_sendmsg+0x805/0xb30 [ 1713.900521][T31342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1713.900553][T31342] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1713.900585][T31342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1713.900604][T31342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1713.900628][T31342] __sock_sendmsg+0x21c/0x270 [ 1713.900661][T31342] ____sys_sendmsg+0x505/0x830 [ 1713.900690][T31342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1713.900723][T31342] ? import_iovec+0x74/0xa0 [ 1713.900752][T31342] ___sys_sendmsg+0x21f/0x2a0 [ 1713.900778][T31342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1713.900839][T31342] ? __fget_files+0x2a/0x420 [ 1713.900856][T31342] ? __fget_files+0x3a0/0x420 [ 1713.900885][T31342] __x64_sys_sendmsg+0x19b/0x260 [ 1713.900912][T31342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1713.900946][T31342] ? __pfx_ksys_write+0x10/0x10 [ 1713.900978][T31342] ? do_syscall_64+0xbe/0xfa0 [ 1713.901002][T31342] do_syscall_64+0xfa/0xfa0 [ 1713.901020][T31342] ? lockdep_hardirqs_on+0x9c/0x150 [ 1713.901040][T31342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.901059][T31342] ? clear_bhb_loop+0x60/0xb0 [ 1713.901083][T31342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.901101][T31342] RIP: 0033:0x7f17deb8f749 [ 1713.901120][T31342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1713.901136][T31342] RSP: 002b:00007f17dcdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.901157][T31342] RAX: ffffffffffffffda RBX: 00007f17dede5fa0 RCX: 00007f17deb8f749 [ 1713.901171][T31342] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 000000000000000b [ 1713.901184][T31342] RBP: 00007f17dcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.901197][T31342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.901208][T31342] R13: 00007f17dede6038 R14: 00007f17dede5fa0 R15: 00007ffd53273868 [ 1713.901241][T31342] [ 1713.901250][T31342] tipc: Failed to start crypto RX(5f598c919a39dba071af8f2abeda2d41)! [ 1714.932088][T31362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7522'. [ 1714.976303][T31362] netlink: 'syz.1.7522': attribute type 21 has an invalid length. [ 1715.415690][T31360] xfrm0: left promiscuous mode [ 1715.462768][T31374] netlink: 'syz.3.7526': attribute type 31 has an invalid length. [ 1715.492877][T31360] vlan0: left promiscuous mode [ 1715.501891][T31360] macvlan3: left promiscuous mode [ 1715.513512][T31364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7521'. [ 1715.535270][T31340] lo speed is unknown, defaulting to 1000 [ 1715.560117][T31340] wg1 speed is unknown, defaulting to 1000 [ 1715.648865][T31376] syzkaller1: entered promiscuous mode [ 1715.663813][T31376] syzkaller1: entered allmulticast mode [ 1715.737592][T31383] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7528'. [ 1715.853334][T31384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7530'. [ 1716.078504][T31399] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7534'. [ 1716.429332][T31407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7537'. [ 1716.648659][T31394] lo speed is unknown, defaulting to 1000 [ 1716.656626][T31394] wg1 speed is unknown, defaulting to 1000 [ 1716.761094][T31415] syzkaller1: entered promiscuous mode [ 1716.799643][T31415] syzkaller1: entered allmulticast mode [ 1717.742965][T31423] syzkaller0: entered promiscuous mode [ 1717.749141][T31423] syzkaller0: entered allmulticast mode [ 1717.756805][T31429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7544'. [ 1718.255336][T31457] netlink: 'syz.3.7549': attribute type 10 has an invalid length. [ 1720.310592][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7553'. [ 1720.536912][T31478] team0: Port device bridge1 added [ 1720.596983][T31478] bridge0: port 3(team0) entered blocking state [ 1720.614979][T31478] bridge0: port 3(team0) entered disabled state [ 1720.621569][T31478] team0: entered allmulticast mode [ 1720.627618][T31478] team_slave_0: entered allmulticast mode [ 1720.633595][T31478] team_slave_1: entered allmulticast mode [ 1720.640039][T31478] geneve0: entered allmulticast mode [ 1720.645588][T31478] bridge1: entered allmulticast mode [ 1720.653519][T31478] team0: entered promiscuous mode [ 1720.659130][T31478] team_slave_0: entered promiscuous mode [ 1720.670282][T31478] team_slave_1: entered promiscuous mode [ 1720.676549][T31478] geneve0: entered promiscuous mode [ 1720.687223][T31478] bridge1: entered promiscuous mode [ 1720.756653][T31485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1720.782358][T31487] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7560'. [ 1720.791579][T31485] netlink: 'syz.3.7559': attribute type 12 has an invalid length. [ 1720.803292][T31489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7561'. [ 1720.856206][T31493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7560'. [ 1720.871174][T31485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1720.890293][T31485] netlink: 'syz.3.7559': attribute type 12 has an invalid length. [ 1720.942191][T31485] tipc: Enabled bearer , priority 0 [ 1720.993777][T31485] syzkaller0: entered promiscuous mode [ 1721.002914][T31485] syzkaller0: entered allmulticast mode [ 1721.013650][T31487] syzkaller1: entered promiscuous mode [ 1721.025647][T31487] syzkaller1: entered allmulticast mode [ 1721.117747][T31485] tipc: Resetting bearer [ 1721.147578][T31485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7559'. [ 1721.255241][T31513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1721.272052][T31515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7566'. [ 1721.438840][T31484] tipc: Resetting bearer [ 1721.714675][T31484] tipc: Disabling bearer [ 1722.017142][T31546] x_tables: duplicate underflow at hook 3 [ 1722.124191][ T3531] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.149735][T31552] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1722.164209][ T3531] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.209995][ T3531] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.219779][T31547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7573'. [ 1722.239526][T31530] lo speed is unknown, defaulting to 1000 [ 1722.245517][ T3531] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.262432][T31530] wg1 speed is unknown, defaulting to 1000 [ 1722.527812][T31566] FAULT_INJECTION: forcing a failure. [ 1722.527812][T31566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.561604][T31566] CPU: 1 UID: 0 PID: 31566 Comm: syz.3.7581 Not tainted syzkaller #0 PREEMPT(full) [ 1722.561637][T31566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1722.561653][T31566] Call Trace: [ 1722.561662][T31566] [ 1722.561672][T31566] dump_stack_lvl+0x189/0x250 [ 1722.561709][T31566] ? __pfx____ratelimit+0x10/0x10 [ 1722.561731][T31566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1722.561762][T31566] ? __pfx__printk+0x10/0x10 [ 1722.561783][T31566] ? __might_fault+0xb0/0x130 [ 1722.561836][T31566] should_fail_ex+0x414/0x560 [ 1722.561877][T31566] _copy_from_user+0x2d/0xb0 [ 1722.561907][T31566] wext_handle_ioctl+0xba/0x1c0 [ 1722.562051][T31566] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1722.562098][T31566] sock_ioctl+0x15f/0x790 [ 1722.562133][T31566] ? __pfx_sock_ioctl+0x10/0x10 [ 1722.562169][T31566] ? __fget_files+0x3a0/0x420 [ 1722.562191][T31566] ? __fget_files+0x2a/0x420 [ 1722.562217][T31566] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1722.562243][T31566] ? __pfx_sock_ioctl+0x10/0x10 [ 1722.562274][T31566] __se_sys_ioctl+0xfc/0x170 [ 1722.562306][T31566] do_syscall_64+0xfa/0xfa0 [ 1722.562329][T31566] ? lockdep_hardirqs_on+0x9c/0x150 [ 1722.562353][T31566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.562375][T31566] ? clear_bhb_loop+0x60/0xb0 [ 1722.562403][T31566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.562424][T31566] RIP: 0033:0x7f71ad18f749 [ 1722.562444][T31566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.562463][T31566] RSP: 002b:00007f71ae098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1722.562486][T31566] RAX: ffffffffffffffda RBX: 00007f71ad3e5fa0 RCX: 00007f71ad18f749 [ 1722.562502][T31566] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 1722.562517][T31566] RBP: 00007f71ae098090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.562532][T31566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.562546][T31566] R13: 00007f71ad3e6038 R14: 00007f71ad3e5fa0 R15: 00007ffd7fd89758 [ 1722.562584][T31566] [ 1722.844841][T31572] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7582'. [ 1722.854361][T31572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7582'. [ 1722.863252][T31572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7582'. [ 1722.981740][T31574] netlink: 'syz.1.7583': attribute type 1 has an invalid length. [ 1723.045813][T31576] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1723.121327][T31585] netlink: 'syz.3.7585': attribute type 1 has an invalid length. [ 1723.157506][T31574] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1723.166792][T31577] FAULT_INJECTION: forcing a failure. [ 1723.166792][T31577] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.193252][T31577] CPU: 0 UID: 0 PID: 31577 Comm: syz.1.7583 Not tainted syzkaller #0 PREEMPT(full) [ 1723.193286][T31577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1723.193301][T31577] Call Trace: [ 1723.193310][T31577] [ 1723.193321][T31577] dump_stack_lvl+0x189/0x250 [ 1723.193358][T31577] ? __pfx____ratelimit+0x10/0x10 [ 1723.193381][T31577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1723.193413][T31577] ? __pfx__printk+0x10/0x10 [ 1723.193441][T31577] ? __pfx___might_resched+0x10/0x10 [ 1723.193467][T31577] ? fs_reclaim_acquire+0x7d/0x100 [ 1723.193521][T31577] should_fail_ex+0x414/0x560 [ 1723.193564][T31577] should_failslab+0xa8/0x100 [ 1723.193597][T31577] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1723.193629][T31577] ? security_inode_alloc+0x39/0x330 [ 1723.193672][T31577] security_inode_alloc+0x39/0x330 [ 1723.193710][T31577] inode_init_always_gfp+0x9ed/0xdc0 [ 1723.193753][T31577] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1723.193918][T31577] alloc_inode+0x82/0x1b0 [ 1723.193956][T31577] new_inode+0x22/0x170 [ 1723.193983][T31577] __debugfs_create_file+0x14d/0x4f0 [ 1723.194022][T31577] debugfs_create_file_full+0x3f/0x60 [ 1723.194060][T31577] ref_tracker_dir_debugfs+0x14e/0x270 [ 1723.194084][T31577] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1723.194139][T31577] ? trace_kmalloc+0x1f/0xd0 [ 1723.194167][T31577] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1723.194207][T31577] ? __raw_spin_lock_init+0x45/0x100 [ 1723.194241][T31577] alloc_netdev_mqs+0x272/0x11b0 [ 1723.194273][T31577] ? __pfx_geneve_setup+0x10/0x10 [ 1723.194370][T31577] rtnl_create_link+0x31f/0xd10 [ 1723.194409][T31577] rtnl_newlink_create+0x25c/0xb00 [ 1723.194441][T31577] ? __mutex_lock+0x5bb/0x1350 [ 1723.194472][T31577] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1723.194504][T31577] ? __pfx___mutex_lock+0x10/0x10 [ 1723.194543][T31577] ? ns_capable+0x8a/0xf0 [ 1723.194572][T31577] rtnl_newlink+0x16e4/0x1c80 [ 1723.194621][T31577] ? __pfx_rtnl_newlink+0x10/0x10 [ 1723.194652][T31577] ? __lock_acquire+0xab9/0xd20 [ 1723.194686][T31577] ? __lock_acquire+0xab9/0xd20 [ 1723.194731][T31577] ? is_bpf_text_address+0x26/0x2b0 [ 1723.194762][T31577] ? is_bpf_text_address+0x292/0x2b0 [ 1723.194787][T31577] ? is_bpf_text_address+0x26/0x2b0 [ 1723.194817][T31577] ? kernel_text_address+0xa5/0xe0 [ 1723.194853][T31577] ? __kernel_text_address+0xd/0x40 [ 1723.194886][T31577] ? unwind_get_return_address+0x4d/0x90 [ 1723.194913][T31577] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1723.194941][T31577] ? arch_stack_walk+0xfc/0x150 [ 1723.194974][T31577] ? __lock_acquire+0xab9/0xd20 [ 1723.195024][T31577] ? __pfx_rtnl_newlink+0x10/0x10 [ 1723.195045][T31577] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1723.195066][T31577] ? __lock_acquire+0xab9/0xd20 [ 1723.195089][T31577] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1723.195110][T31577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1723.195151][T31577] netlink_rcv_skb+0x208/0x470 [ 1723.195173][T31577] ? __lock_acquire+0xab9/0xd20 [ 1723.195194][T31577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1723.195217][T31577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1723.195254][T31577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1723.195287][T31577] netlink_unicast+0x82f/0x9e0 [ 1723.195322][T31577] ? __pfx_netlink_unicast+0x10/0x10 [ 1723.195349][T31577] ? netlink_sendmsg+0x642/0xb30 [ 1723.195373][T31577] ? skb_put+0x11b/0x210 [ 1723.195403][T31577] netlink_sendmsg+0x805/0xb30 [ 1723.195441][T31577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.195472][T31577] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1723.195509][T31577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1723.195531][T31577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1723.195558][T31577] __sock_sendmsg+0x21c/0x270 [ 1723.195605][T31577] ____sys_sendmsg+0x505/0x830 [ 1723.195637][T31577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1723.195675][T31577] ? import_iovec+0x74/0xa0 [ 1723.195707][T31577] ___sys_sendmsg+0x21f/0x2a0 [ 1723.195738][T31577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1723.195811][T31577] ? __fget_files+0x2a/0x420 [ 1723.195832][T31577] ? __fget_files+0x3a0/0x420 [ 1723.195868][T31577] __x64_sys_sendmsg+0x19b/0x260 [ 1723.195900][T31577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1723.195941][T31577] ? __pfx_ksys_write+0x10/0x10 [ 1723.195977][T31577] ? do_syscall_64+0xbe/0xfa0 [ 1723.196007][T31577] do_syscall_64+0xfa/0xfa0 [ 1723.196030][T31577] ? lockdep_hardirqs_on+0x9c/0x150 [ 1723.196052][T31577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.196075][T31577] ? clear_bhb_loop+0x60/0xb0 [ 1723.196103][T31577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.196125][T31577] RIP: 0033:0x7f17deb8f749 [ 1723.196147][T31577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1723.196167][T31577] RSP: 002b:00007f17dcdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1723.196191][T31577] RAX: ffffffffffffffda RBX: 00007f17dede6090 RCX: 00007f17deb8f749 [ 1723.196207][T31577] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1723.196221][T31577] RBP: 00007f17dcdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.196236][T31577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.196249][T31577] R13: 00007f17dede6128 R14: 00007f17dede6090 R15: 00007ffd53273868 [ 1723.196285][T31577] [ 1723.196500][T31576] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1723.206275][T31577] debugfs: out of free dentries, can not create file 'netdev@ffff888058cc6618' [ 1723.376602][T31595] xt_recent: hitcount (4294967290) is larger than allowed maximum (65535) [ 1723.383384][T31535] lo speed is unknown, defaulting to 1000 [ 1723.432589][T31587] bridge_slave_1: left allmulticast mode [ 1723.536918][T31600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7588'. [ 1723.586607][T31600] netlink: 'syz.1.7588': attribute type 21 has an invalid length. [ 1723.620881][T31587] bridge_slave_1: left promiscuous mode [ 1723.809189][T31587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.917476][T31535] wg1 speed is unknown, defaulting to 1000 [ 1724.130410][T31611] xt_bpf: check failed: parse error [ 1724.145389][T31611] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7592'. [ 1724.250164][T31615] xfrm0: left promiscuous mode [ 1724.382886][T31614] syzkaller1: entered promiscuous mode [ 1724.394716][T31614] syzkaller1: entered allmulticast mode [ 1724.412790][T31619] team0: left allmulticast mode [ 1724.424381][T31619] team_slave_0: left allmulticast mode [ 1724.429935][T31619] team_slave_1: left allmulticast mode [ 1724.454428][T31619] geneve0: left allmulticast mode [ 1724.472095][T31619] bridge1: left allmulticast mode [ 1724.484734][T31619] team0: left promiscuous mode [ 1724.500005][T31619] team_slave_0: left promiscuous mode [ 1724.517964][T31619] team_slave_1: left promiscuous mode [ 1724.525077][T31619] geneve0: left promiscuous mode [ 1724.530310][T31619] bridge1: left promiscuous mode [ 1724.537116][T31619] bridge0: port 3(team0) entered disabled state [ 1724.547116][T31619] bridge_slave_0: left allmulticast mode [ 1724.552907][T31619] bridge_slave_0: left promiscuous mode [ 1724.559092][T31619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.572957][T31619] bond0: (slave bond_slave_0): Releasing backup interface [ 1724.586470][T31619] bond0: (slave bond_slave_1): Releasing backup interface [ 1724.597893][T31619] team0: Port device team_slave_0 removed [ 1724.608394][T31619] team0: Port device team_slave_1 removed [ 1724.615640][T31619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.624117][T31619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.632875][T31619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1725.102287][T31651] netlink: 'syz.6.7600': attribute type 1 has an invalid length. [ 1725.339611][T31636] syzkaller1: entered promiscuous mode [ 1725.346013][T31636] syzkaller1: entered allmulticast mode [ 1725.513474][T31663] sctp: [Deprecated]: syz.1.7606 (pid 31663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1725.513474][T31663] Use struct sctp_sack_info instead [ 1725.852985][T31672] netlink: 'syz.5.7609': attribute type 10 has an invalid length. [ 1725.986288][T31685] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1726.124699][T31689] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1726.204835][T31693] syzkaller1: entered promiscuous mode [ 1726.210477][T31693] syzkaller1: entered allmulticast mode [ 1726.237789][T31702] FAULT_INJECTION: forcing a failure. [ 1726.237789][T31702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.262774][T31702] CPU: 1 UID: 0 PID: 31702 Comm: syz.5.7618 Not tainted syzkaller #0 PREEMPT(full) [ 1726.262807][T31702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1726.262821][T31702] Call Trace: [ 1726.262829][T31702] [ 1726.262838][T31702] dump_stack_lvl+0x189/0x250 [ 1726.262875][T31702] ? __pfx____ratelimit+0x10/0x10 [ 1726.262897][T31702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1726.262929][T31702] ? __pfx__printk+0x10/0x10 [ 1726.262967][T31702] should_fail_ex+0x414/0x560 [ 1726.263007][T31702] _copy_to_user+0x31/0xb0 [ 1726.263037][T31702] simple_read_from_buffer+0xe1/0x170 [ 1726.263076][T31702] proc_fail_nth_read+0x1b3/0x220 [ 1726.263109][T31702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1726.263143][T31702] ? rw_verify_area+0x2a6/0x4d0 [ 1726.263173][T31702] ? __lock_acquire+0xab9/0xd20 [ 1726.263195][T31702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1726.263228][T31702] vfs_read+0x200/0xa30 [ 1726.263258][T31702] ? fdget_pos+0x247/0x320 [ 1726.263286][T31702] ? __pfx___mutex_lock+0x10/0x10 [ 1726.263314][T31702] ? __pfx_vfs_read+0x10/0x10 [ 1726.263348][T31702] ? __fget_files+0x2a/0x420 [ 1726.263375][T31702] ? __fget_files+0x3a0/0x420 [ 1726.263394][T31702] ? __fget_files+0x2a/0x420 [ 1726.263427][T31702] ksys_read+0x145/0x250 [ 1726.263462][T31702] ? __pfx_ksys_read+0x10/0x10 [ 1726.263495][T31702] ? do_syscall_64+0xbe/0xfa0 [ 1726.263523][T31702] do_syscall_64+0xfa/0xfa0 [ 1726.263544][T31702] ? lockdep_hardirqs_on+0x9c/0x150 [ 1726.263578][T31702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.263601][T31702] ? clear_bhb_loop+0x60/0xb0 [ 1726.263628][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.263650][T31702] RIP: 0033:0x7f76b978e15c [ 1726.263671][T31702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1726.263691][T31702] RSP: 002b:00007f76ba697030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1726.263716][T31702] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978e15c [ 1726.263733][T31702] RDX: 000000000000000f RSI: 00007f76ba6970a0 RDI: 0000000000000005 [ 1726.263748][T31702] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.263763][T31702] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1726.263777][T31702] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1726.263816][T31702] [ 1726.801012][T31718] __nla_validate_parse: 16 callbacks suppressed [ 1726.801036][T31718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1726.930010][T31725] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7626'. [ 1726.939942][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7626'. [ 1726.949445][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7626'. [ 1727.293250][T31741] syzkaller1: entered promiscuous mode [ 1727.305127][T31741] syzkaller1: entered allmulticast mode [ 1727.811600][T31750] syzkaller1: entered promiscuous mode [ 1727.824992][T31750] syzkaller1: entered allmulticast mode [ 1727.905289][T31759] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7639'. [ 1728.248666][T31768] vxcan1: entered allmulticast mode [ 1728.362296][T31777] netlink: 'syz.4.7645': attribute type 11 has an invalid length. [ 1728.760545][T31773] team0: No ports can be present during mode change [ 1728.799464][T31792] syzkaller1: entered promiscuous mode [ 1728.823788][T31792] syzkaller1: entered allmulticast mode [ 1728.978894][T31801] vlan2: entered promiscuous mode [ 1729.036050][T31804] FAULT_INJECTION: forcing a failure. [ 1729.036050][T31804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1729.051123][T31804] CPU: 1 UID: 0 PID: 31804 Comm: syz.1.7652 Not tainted syzkaller #0 PREEMPT(full) [ 1729.051156][T31804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1729.051171][T31804] Call Trace: [ 1729.051181][T31804] [ 1729.051191][T31804] dump_stack_lvl+0x189/0x250 [ 1729.051228][T31804] ? __pfx____ratelimit+0x10/0x10 [ 1729.051251][T31804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1729.051282][T31804] ? __pfx__printk+0x10/0x10 [ 1729.051317][T31804] ? fs_reclaim_acquire+0x7d/0x100 [ 1729.051348][T31804] should_fail_ex+0x414/0x560 [ 1729.051388][T31804] prepare_alloc_pages+0x213/0x610 [ 1729.051419][T31804] __alloc_frozen_pages_noprof+0x123/0x370 [ 1729.051448][T31804] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1729.051481][T31804] ? policy_nodemask+0x27c/0x720 [ 1729.051510][T31804] alloc_pages_mpol+0x232/0x4a0 [ 1729.051540][T31804] alloc_pages_noprof+0xa9/0x190 [ 1729.051566][T31804] pte_alloc_one+0x23/0x310 [ 1729.051592][T31804] ? __handle_mm_fault+0x1d74/0x5400 [ 1729.051628][T31804] __handle_mm_fault+0x2767/0x5400 [ 1729.051678][T31804] ? __pfx___handle_mm_fault+0x10/0x10 [ 1729.051733][T31804] ? find_vma+0xe7/0x160 [ 1729.051762][T31804] ? __pfx_find_vma+0x10/0x10 [ 1729.051796][T31804] handle_mm_fault+0x40a/0x8e0 [ 1729.051838][T31804] do_user_addr_fault+0x764/0x1380 [ 1729.051882][T31804] exc_page_fault+0x82/0x100 [ 1729.051909][T31804] asm_exc_page_fault+0x26/0x30 [ 1729.051930][T31804] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1729.051962][T31804] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 1729.051982][T31804] RSP: 0018:ffffc90003f7fd18 EFLAGS: 00050202 [ 1729.052004][T31804] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1729.052019][T31804] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffc90003f7fdd0 [ 1729.052035][T31804] RBP: ffffc90003f7fe38 R08: 0000000000000003 R09: 0000000000000004 [ 1729.052050][T31804] R10: dffffc0000000000 R11: fffff520007effba R12: ffff88804c904000 [ 1729.052068][T31804] R13: 0000000000000000 R14: ffffc90003f7fdd0 R15: 00002000000001c0 [ 1729.052105][T31804] _copy_from_user+0x7a/0xb0 [ 1729.052137][T31804] raw_setsockopt+0x548/0x1290 [ 1729.052173][T31804] ? __pfx_raw_setsockopt+0x10/0x10 [ 1729.052198][T31804] ? do_sys_openat2+0x154/0x1c0 [ 1729.052227][T31804] ? aa_sock_opt_perm+0xff/0x1b0 [ 1729.052265][T31804] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1729.052289][T31804] ? __pfx_raw_setsockopt+0x10/0x10 [ 1729.052325][T31804] do_sock_setsockopt+0x17c/0x1b0 [ 1729.052359][T31804] __x64_sys_setsockopt+0x13f/0x1b0 [ 1729.052392][T31804] do_syscall_64+0xfa/0xfa0 [ 1729.052415][T31804] ? lockdep_hardirqs_on+0x9c/0x150 [ 1729.052438][T31804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.052461][T31804] ? clear_bhb_loop+0x60/0xb0 [ 1729.052490][T31804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.052512][T31804] RIP: 0033:0x7f17deb8f749 [ 1729.052533][T31804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1729.052553][T31804] RSP: 002b:00007f17dcdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1729.052574][T31804] RAX: ffffffffffffffda RBX: 00007f17dede5fa0 RCX: 00007f17deb8f749 [ 1729.052591][T31804] RDX: 0000000000000007 RSI: 0000000000000065 RDI: 0000000000000004 [ 1729.052605][T31804] RBP: 00007f17dcdf6090 R08: 0000000000000004 R09: 0000000000000000 [ 1729.052619][T31804] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1729.052634][T31804] R13: 00007f17dede6038 R14: 00007f17dede5fa0 R15: 00007ffd53273868 [ 1729.052672][T31804] [ 1729.531498][T31811] syzkaller0: entered promiscuous mode [ 1729.553831][T31811] syzkaller0: entered allmulticast mode [ 1729.716451][T31811] tipc: Enabled bearer , priority 0 [ 1729.730466][T31810] tipc: Resetting bearer [ 1729.836727][T31810] tipc: Disabling bearer [ 1729.856100][T31822] netlink: 'syz.1.7657': attribute type 1 has an invalid length. [ 1729.903394][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7657'. [ 1729.929423][T31825] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7659'. [ 1729.950619][T31825] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7659'. [ 1729.960365][T31825] tipc: Invalid UDP bearer configuration [ 1729.960424][T31825] tipc: Enabling of bearer rejected, failed to enable media [ 1730.039995][T31826] 8021q: adding VLAN 0 to HW filter on device .` [ 1730.074772][T31826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1730.354304][T31841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7664'. [ 1730.399836][T31843] syzkaller1: entered promiscuous mode [ 1730.405754][T31843] syzkaller1: entered allmulticast mode [ 1730.477668][T31847] netlink: 'syz.3.7667': attribute type 1 has an invalid length. [ 1730.559915][T31857] netlink: 'syz.4.7669': attribute type 10 has an invalid length. [ 1730.612607][T31847] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1730.632857][T31850] syzkaller1: entered promiscuous mode [ 1730.642623][T31850] syzkaller1: entered allmulticast mode [ 1730.697494][T31862] netlink: 'syz.1.7671': attribute type 1 has an invalid length. [ 1730.708490][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7671'. [ 1730.804616][T31865] syzkaller1: entered promiscuous mode [ 1730.810367][T31865] syzkaller1: entered allmulticast mode [ 1730.954752][T29627] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1731.013094][T31874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1731.038780][T31874] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1731.065008][T31874] bridge6: entered allmulticast mode [ 1731.164153][T31879] hsr_slave_0: left promiscuous mode [ 1731.184082][T31879] hsr_slave_1: left promiscuous mode [ 1731.356902][T31888] netlink: 'syz.5.7681': attribute type 10 has an invalid length. [ 1731.365176][ T79] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1731.866118][T29627] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1732.000777][T31919] netlink: 'syz.3.7695': attribute type 10 has an invalid length. [ 1732.001737][T31922] __nla_validate_parse: 10 callbacks suppressed [ 1732.001759][T31922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7692'. [ 1732.034422][T31919] batman_adv: batadv0: Removing interface: dummy0 [ 1732.059592][T31916] netlink: 'syz.6.7694': attribute type 9 has an invalid length. [ 1732.399918][T31938] FAULT_INJECTION: forcing a failure. [ 1732.399918][T31938] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1732.422117][T31938] CPU: 1 UID: 0 PID: 31938 Comm: syz.3.7701 Not tainted syzkaller #0 PREEMPT(full) [ 1732.422152][T31938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1732.422168][T31938] Call Trace: [ 1732.422177][T31938] [ 1732.422188][T31938] dump_stack_lvl+0x189/0x250 [ 1732.422226][T31938] ? __pfx____ratelimit+0x10/0x10 [ 1732.422249][T31938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1732.422281][T31938] ? __pfx__printk+0x10/0x10 [ 1732.422307][T31938] ? fs_reclaim_acquire+0x7d/0x100 [ 1732.422339][T31938] should_fail_ex+0x414/0x560 [ 1732.422381][T31938] prepare_alloc_pages+0x213/0x610 [ 1732.422414][T31938] __alloc_frozen_pages_noprof+0x123/0x370 [ 1732.422443][T31938] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1732.422479][T31938] ? policy_nodemask+0x27c/0x720 [ 1732.422499][T31938] ? __lock_acquire+0xab9/0xd20 [ 1732.422529][T31938] alloc_pages_mpol+0x232/0x4a0 [ 1732.422559][T31938] vma_alloc_folio_noprof+0xe4/0x200 [ 1732.422583][T31938] ? page_table_check_set+0x18d/0x730 [ 1732.422618][T31938] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1732.422657][T31938] folio_prealloc+0x30/0x180 [ 1732.422694][T31938] __handle_mm_fault+0x2a8b/0x5400 [ 1732.422745][T31938] ? __pfx___handle_mm_fault+0x10/0x10 [ 1732.422794][T31938] ? follow_page_pte+0x7ef/0x13e0 [ 1732.422846][T31938] handle_mm_fault+0x40a/0x8e0 [ 1732.422890][T31938] __get_user_pages+0x165c/0x2a00 [ 1732.422960][T31938] __gup_longterm_locked+0x3dc/0x1660 [ 1732.423013][T31938] ? trace_kmalloc+0x1f/0xd0 [ 1732.423041][T31938] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1732.423080][T31938] pin_user_pages+0x9e/0xd0 [ 1732.423113][T31938] xdp_umem_pin_pages+0x11c/0x350 [ 1732.423143][T31938] xdp_umem_create+0x677/0x8e0 [ 1732.423176][T31938] xsk_setsockopt+0x7b0/0x8d0 [ 1732.423213][T31938] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1732.423249][T31938] ? __pfx_aa_sk_perm+0x10/0x10 [ 1732.423277][T31938] ? do_sys_openat2+0x154/0x1c0 [ 1732.423306][T31938] ? aa_sock_opt_perm+0xff/0x1b0 [ 1732.423344][T31938] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1732.423367][T31938] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1732.423402][T31938] do_sock_setsockopt+0x17c/0x1b0 [ 1732.423436][T31938] __x64_sys_setsockopt+0x13f/0x1b0 [ 1732.423469][T31938] do_syscall_64+0xfa/0xfa0 [ 1732.423491][T31938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1732.423516][T31938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.423539][T31938] ? clear_bhb_loop+0x60/0xb0 [ 1732.423572][T31938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.423595][T31938] RIP: 0033:0x7f71ad18f749 [ 1732.423615][T31938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.423635][T31938] RSP: 002b:00007f71ae098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1732.423659][T31938] RAX: ffffffffffffffda RBX: 00007f71ad3e5fa0 RCX: 00007f71ad18f749 [ 1732.423677][T31938] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1732.423691][T31938] RBP: 00007f71ae098090 R08: 000000000000001c R09: 0000000000000000 [ 1732.423705][T31938] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1732.423720][T31938] R13: 00007f71ad3e6038 R14: 00007f71ad3e5fa0 R15: 00007ffd7fd89758 [ 1732.423764][T31938] [ 1732.739252][ T1115] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1732.780248][ T1115] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1732.828546][T31921] lo speed is unknown, defaulting to 1000 [ 1732.840455][T31921] wg1 speed is unknown, defaulting to 1000 [ 1733.081992][T31955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7707'. [ 1733.228421][T31959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7706'. [ 1733.556579][T29636] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1733.705552][T31976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7712'. [ 1733.837566][T31977] netlink: 'syz.5.7714': attribute type 2 has an invalid length. [ 1733.847558][T31977] netlink: 'syz.5.7714': attribute type 1 has an invalid length. [ 1733.857724][T31977] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7714'. [ 1733.885468][T31986] syzkaller1: entered promiscuous mode [ 1733.894281][T31986] syzkaller1: entered allmulticast mode [ 1734.038138][T31997] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1734.055713][T31991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7718'. [ 1734.062802][T31995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7719'. [ 1734.242199][T32002] netlink: 'syz.6.7721': attribute type 1 has an invalid length. [ 1734.298091][T32002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1734.309251][T32005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7724'. [ 1734.352007][T32011] bond3: (slave gretap1): making interface the new active one [ 1734.354489][T32002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7721'. [ 1734.363161][T32011] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1734.412568][T32016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7726'. [ 1734.558289][T32002] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1734.578941][T32002] bond3 (unregistering): Released all slaves [ 1734.620420][T32005] geneve4: entered promiscuous mode [ 1734.627317][T32005] geneve4: entered allmulticast mode [ 1734.671833][T32019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1734.691804][T32023] bond1: (slave geneve2): making interface the new active one [ 1734.701146][T32023] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1734.719126][ T1115] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 33229 - 0 [ 1734.739178][ T1115] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 33229 - 0 [ 1734.754879][ T1115] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 33229 - 0 [ 1734.763239][ T1115] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 33229 - 0 [ 1734.808173][ T1115] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.820147][ T1115] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.855501][ T1115] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.866938][ T1115] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.072112][T32043] syzkaller1: entered promiscuous mode [ 1735.090556][T32043] syzkaller1: entered allmulticast mode [ 1735.297749][T32057] validate_nla: 1 callbacks suppressed [ 1735.297772][T32057] netlink: 'syz.5.7738': attribute type 1 has an invalid length. [ 1735.398028][T32062] netlink: 'syz.1.7740': attribute type 21 has an invalid length. [ 1735.484598][T32066] sctp: [Deprecated]: syz.3.7742 (pid 32066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1735.484598][T32066] Use struct sctp_sack_info instead [ 1735.752369][T32077] netlink: 'syz.4.7746': attribute type 10 has an invalid length. [ 1735.777533][T32077] team0: Device geneve0 failed to register rx_handler [ 1735.837363][T32077] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1735.997855][T32090] netlink: 'syz.5.7751': attribute type 1 has an invalid length. [ 1736.259915][T32105] netlink: 'syz.1.7759': attribute type 10 has an invalid length. [ 1736.272633][T32105] bridge0: port 1(macsec0) entered blocking state [ 1736.279688][T32105] bridge0: port 1(macsec0) entered disabled state [ 1736.286846][T32105] macsec0: entered allmulticast mode [ 1736.308723][T32105] veth1_macvtap: entered allmulticast mode [ 1736.470872][T32114] syzkaller1: entered promiscuous mode [ 1736.476609][T32114] syzkaller1: entered allmulticast mode [ 1736.534974][T32118] netlink: 'syz.6.7764': attribute type 1 has an invalid length. [ 1736.547176][T32120] FAULT_INJECTION: forcing a failure. [ 1736.547176][T32120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.614284][T32120] CPU: 1 UID: 0 PID: 32120 Comm: syz.5.7763 Not tainted syzkaller #0 PREEMPT(full) [ 1736.614317][T32120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1736.614333][T32120] Call Trace: [ 1736.614343][T32120] [ 1736.614353][T32120] dump_stack_lvl+0x189/0x250 [ 1736.614391][T32120] ? __pfx____ratelimit+0x10/0x10 [ 1736.614414][T32120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1736.614444][T32120] ? __pfx__printk+0x10/0x10 [ 1736.614480][T32120] should_fail_ex+0x414/0x560 [ 1736.614522][T32120] _copy_to_user+0x31/0xb0 [ 1736.614554][T32120] bpf_test_finish+0x1ab/0x700 [ 1736.614591][T32120] ? __pfx_bpf_test_finish+0x10/0x10 [ 1736.614623][T32120] ? bpf_test_init+0x113/0x150 [ 1736.614651][T32120] bpf_prog_test_run_xdp+0x88c/0x10e0 [ 1736.614697][T32120] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1736.614729][T32120] ? __fget_files+0x2a/0x420 [ 1736.614766][T32120] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1736.614793][T32120] bpf_prog_test_run+0x2c7/0x340 [ 1736.614824][T32120] __sys_bpf+0x562/0x860 [ 1736.614848][T32120] ? __pfx___sys_bpf+0x10/0x10 [ 1736.614889][T32120] ? ksys_write+0x22a/0x250 [ 1736.614924][T32120] ? __pfx_ksys_write+0x10/0x10 [ 1736.614963][T32120] __x64_sys_bpf+0x7c/0x90 [ 1736.614997][T32120] do_syscall_64+0xfa/0xfa0 [ 1736.615021][T32120] ? lockdep_hardirqs_on+0x9c/0x150 [ 1736.615045][T32120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.615067][T32120] ? clear_bhb_loop+0x60/0xb0 [ 1736.615095][T32120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.615117][T32120] RIP: 0033:0x7f76b978f749 [ 1736.615138][T32120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.615158][T32120] RSP: 002b:00007f76ba697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1736.615183][T32120] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978f749 [ 1736.615201][T32120] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1736.615216][T32120] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.615231][T32120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.615245][T32120] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1736.615282][T32120] [ 1736.949720][T32121] syzkaller1: entered promiscuous mode [ 1736.955997][T32121] syzkaller1: entered allmulticast mode [ 1737.156814][T32141] siw: device registration error -23 [ 1737.208590][T32143] FAULT_INJECTION: forcing a failure. [ 1737.208590][T32143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.222473][T32143] CPU: 1 UID: 0 PID: 32143 Comm: syz.6.7772 Not tainted syzkaller #0 PREEMPT(full) [ 1737.222505][T32143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1737.222520][T32143] Call Trace: [ 1737.222530][T32143] [ 1737.222540][T32143] dump_stack_lvl+0x189/0x250 [ 1737.222577][T32143] ? __pfx____ratelimit+0x10/0x10 [ 1737.222601][T32143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1737.222632][T32143] ? __pfx__printk+0x10/0x10 [ 1737.222679][T32143] should_fail_ex+0x414/0x560 [ 1737.222721][T32143] _copy_to_user+0x31/0xb0 [ 1737.222755][T32143] simple_read_from_buffer+0xe1/0x170 [ 1737.222798][T32143] proc_fail_nth_read+0x1b3/0x220 [ 1737.222833][T32143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1737.222867][T32143] ? rw_verify_area+0x2a6/0x4d0 [ 1737.222897][T32143] ? __lock_acquire+0xab9/0xd20 [ 1737.222918][T32143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1737.222950][T32143] vfs_read+0x200/0xa30 [ 1737.222981][T32143] ? fdget_pos+0x247/0x320 [ 1737.223009][T32143] ? __pfx___mutex_lock+0x10/0x10 [ 1737.223037][T32143] ? __pfx_vfs_read+0x10/0x10 [ 1737.223071][T32143] ? __fget_files+0x2a/0x420 [ 1737.223098][T32143] ? __fget_files+0x3a0/0x420 [ 1737.223119][T32143] ? __fget_files+0x2a/0x420 [ 1737.223152][T32143] ksys_read+0x145/0x250 [ 1737.223188][T32143] ? __pfx_ksys_read+0x10/0x10 [ 1737.223225][T32143] ? do_syscall_64+0xbe/0xfa0 [ 1737.223254][T32143] do_syscall_64+0xfa/0xfa0 [ 1737.223276][T32143] ? lockdep_hardirqs_on+0x9c/0x150 [ 1737.223298][T32143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.223320][T32143] ? clear_bhb_loop+0x60/0xb0 [ 1737.223348][T32143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.223370][T32143] RIP: 0033:0x7fa96cf8e15c [ 1737.223391][T32143] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1737.223411][T32143] RSP: 002b:00007fa96de0b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1737.223436][T32143] RAX: ffffffffffffffda RBX: 00007fa96d1e5fa0 RCX: 00007fa96cf8e15c [ 1737.223453][T32143] RDX: 000000000000000f RSI: 00007fa96de0b0a0 RDI: 0000000000000005 [ 1737.223468][T32143] RBP: 00007fa96de0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.223482][T32143] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.223497][T32143] R13: 00007fa96d1e6038 R14: 00007fa96d1e5fa0 R15: 00007ffc5cb601a8 [ 1737.223536][T32143] [ 1737.478603][T32146] netlink: 'syz.4.7773': attribute type 9 has an invalid length. [ 1737.596965][T32152] netlink: 'syz.1.7776': attribute type 1 has an invalid length. [ 1737.622744][T32151] xfrm0: entered promiscuous mode [ 1737.913526][T32167] vetè0_virt_wif: renamed from lo (while UP) [ 1737.963344][T32167] syzkaller1: entered promiscuous mode [ 1737.977516][T32167] syzkaller1: entered allmulticast mode [ 1738.017961][T32176] __nla_validate_parse: 16 callbacks suppressed [ 1738.017986][T32176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7784'. [ 1738.107796][T32180] netlink: 'syz.3.7788': attribute type 1 has an invalid length. [ 1738.180823][T32180] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1738.229280][T32185] team0: No ports can be present during mode change [ 1738.415711][T32194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7793'. [ 1738.452409][T32194] netlink: 'syz.6.7793': attribute type 21 has an invalid length. [ 1738.475829][T32198] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7796'. [ 1738.617355][T32205] syzkaller0: entered promiscuous mode [ 1738.622926][T32205] syzkaller0: entered allmulticast mode [ 1738.702014][T32205] tipc: Started in network mode [ 1738.707592][T32205] tipc: Node identity fae6f59aa4a3, cluster identity 4711 [ 1738.715836][T32205] tipc: Enabled bearer , priority 0 [ 1738.729610][T32204] tipc: Resetting bearer [ 1738.755347][T32204] tipc: Disabling bearer [ 1739.305405][T32207] lo speed is unknown, defaulting to 1000 [ 1739.324213][T32207] wg1 speed is unknown, defaulting to 1000 [ 1739.393273][T32238] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7812'. [ 1739.762006][T32260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7819'. [ 1740.115435][T32271] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7822'. [ 1740.359933][T32268] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1740.395886][T32268] bond3 (unregistering): Released all slaves [ 1740.506828][T32260] syzkaller1: entered promiscuous mode [ 1740.524375][T32260] syzkaller1: entered allmulticast mode [ 1740.727127][T32286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7827'. [ 1740.780274][T32286] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7827'. [ 1740.848779][T32286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7827'. [ 1741.392741][T32305] netlink: 212 bytes leftover after parsing attributes in process `syz.5.7834'. [ 1741.531336][T32307] lo: Master is either lo or non-ether device [ 1741.714778][T32313] xt_hashlimit: max too large, truncated to 1048576 [ 1741.756486][T32318] FAULT_INJECTION: forcing a failure. [ 1741.756486][T32318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.820443][T32318] CPU: 1 UID: 0 PID: 32318 Comm: syz.5.7838 Not tainted syzkaller #0 PREEMPT(full) [ 1741.820475][T32318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1741.820490][T32318] Call Trace: [ 1741.820499][T32318] [ 1741.820509][T32318] dump_stack_lvl+0x189/0x250 [ 1741.820544][T32318] ? __pfx____ratelimit+0x10/0x10 [ 1741.820566][T32318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1741.820596][T32318] ? __pfx__printk+0x10/0x10 [ 1741.820631][T32318] should_fail_ex+0x414/0x560 [ 1741.820672][T32318] _copy_to_user+0x31/0xb0 [ 1741.820704][T32318] bpf_test_finish+0x24e/0x700 [ 1741.820741][T32318] ? __pfx_bpf_test_finish+0x10/0x10 [ 1741.820773][T32318] ? bpf_test_init+0x113/0x150 [ 1741.820801][T32318] bpf_prog_test_run_xdp+0x88c/0x10e0 [ 1741.820846][T32318] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1741.820879][T32318] ? __fget_files+0x2a/0x420 [ 1741.820908][T32318] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1741.820936][T32318] bpf_prog_test_run+0x2c7/0x340 [ 1741.820963][T32318] __sys_bpf+0x562/0x860 [ 1741.820987][T32318] ? __pfx___sys_bpf+0x10/0x10 [ 1741.821027][T32318] ? ksys_write+0x22a/0x250 [ 1741.821060][T32318] ? __pfx_ksys_write+0x10/0x10 [ 1741.821110][T32318] __x64_sys_bpf+0x7c/0x90 [ 1741.821143][T32318] do_syscall_64+0xfa/0xfa0 [ 1741.821164][T32318] ? lockdep_hardirqs_on+0x9c/0x150 [ 1741.821187][T32318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.821208][T32318] ? clear_bhb_loop+0x60/0xb0 [ 1741.821234][T32318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.821256][T32318] RIP: 0033:0x7f76b978f749 [ 1741.821275][T32318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1741.821295][T32318] RSP: 002b:00007f76ba697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1741.821318][T32318] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978f749 [ 1741.821336][T32318] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1741.821350][T32318] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.821364][T32318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.821377][T32318] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1741.821412][T32318] [ 1742.099385][T32322] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1742.133786][T32322] bond10 (unregistering): Released all slaves [ 1742.247070][T32336] netlink: 'syz.3.7841': attribute type 10 has an invalid length. [ 1742.255489][T32336] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1742.934286][T32370] team0: Unable to change to the same mode the team is in [ 1742.950265][T32368] xfrm0: left promiscuous mode [ 1743.036991][T32372] team0: No ports can be present during mode change [ 1743.043804][T32373] __nla_validate_parse: 3 callbacks suppressed [ 1743.043822][T32373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7853'. [ 1743.063888][T32375] netlink: 'syz.3.7855': attribute type 1 has an invalid length. [ 1743.085709][ T152] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.221102][T32375] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1743.250835][ T152] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.272723][ T152] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.305903][ T152] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.323459][T32393] netlink: 'syz.1.7860': attribute type 10 has an invalid length. [ 1743.352066][T32393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7860'. [ 1743.498356][T32396] netlink: 'syz.5.7863': attribute type 31 has an invalid length. [ 1743.567150][T32405] netlink: zone id is out of range [ 1743.607717][T32405] netlink: zone id is out of range [ 1743.612906][T32405] netlink: zone id is out of range [ 1743.655604][T32405] netlink: zone id is out of range [ 1743.666959][T32405] netlink: zone id is out of range [ 1743.672152][T32405] netlink: zone id is out of range [ 1743.741294][T32405] netlink: zone id is out of range [ 1743.768601][T32405] netlink: zone id is out of range [ 1743.787497][T32405] netlink: zone id is out of range [ 1743.916517][T32418] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7871'. [ 1743.949123][T32418] syzkaller1: entered promiscuous mode [ 1743.957084][T32418] syzkaller1: entered allmulticast mode [ 1744.341223][T32413] lo speed is unknown, defaulting to 1000 [ 1744.356274][T32413] wg1 speed is unknown, defaulting to 1000 [ 1744.420066][T32431] syzkaller0: entered promiscuous mode [ 1744.425747][T32431] syzkaller0: entered allmulticast mode [ 1744.485443][T32431] tipc: Enabled bearer , priority 0 [ 1744.510801][T32430] tipc: Resetting bearer [ 1744.561349][T32430] tipc: Disabling bearer [ 1744.605010][T32437] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1744.809760][T32446] netlink: 'syz.1.7879': attribute type 10 has an invalid length. [ 1744.825091][T32446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7879'. [ 1745.108639][T32459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7882'. [ 1745.418800][T32466] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1745.528378][T32466] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 1745.630967][T32470] batadv_slave_0: entered promiscuous mode [ 1745.662268][T32466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1745.701053][T32466] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1745.712879][T32466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7884'. [ 1745.870261][T32490] netlink: 'syz.4.7890': attribute type 1 has an invalid length. [ 1745.952038][T32494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7893'. [ 1745.997815][T32490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1746.074882][T32494] can: request_module (can-proto-0) failed. [ 1746.263282][T32506] FAULT_INJECTION: forcing a failure. [ 1746.263282][T32506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1746.287878][T32506] CPU: 1 UID: 0 PID: 32506 Comm: syz.1.7897 Not tainted syzkaller #0 PREEMPT(full) [ 1746.287916][T32506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1746.287939][T32506] Call Trace: [ 1746.287949][T32506] [ 1746.287959][T32506] dump_stack_lvl+0x189/0x250 [ 1746.287998][T32506] ? __pfx____ratelimit+0x10/0x10 [ 1746.288021][T32506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1746.288052][T32506] ? __pfx__printk+0x10/0x10 [ 1746.288079][T32506] ? fs_reclaim_acquire+0x7d/0x100 [ 1746.288113][T32506] should_fail_ex+0x414/0x560 [ 1746.288155][T32506] prepare_alloc_pages+0x213/0x610 [ 1746.288188][T32506] __alloc_frozen_pages_noprof+0x123/0x370 [ 1746.288218][T32506] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1746.288254][T32506] ? policy_nodemask+0x27c/0x720 [ 1746.288274][T32506] ? __lock_acquire+0xab9/0xd20 [ 1746.288309][T32506] alloc_pages_mpol+0x232/0x4a0 [ 1746.288340][T32506] vma_alloc_folio_noprof+0xe4/0x200 [ 1746.288364][T32506] ? page_table_check_set+0x18d/0x730 [ 1746.288404][T32506] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1746.288444][T32506] folio_prealloc+0x30/0x180 [ 1746.288480][T32506] __handle_mm_fault+0x2a8b/0x5400 [ 1746.288533][T32506] ? __pfx___handle_mm_fault+0x10/0x10 [ 1746.288582][T32506] ? follow_page_pte+0x7ef/0x13e0 [ 1746.288626][T32506] handle_mm_fault+0x40a/0x8e0 [ 1746.288671][T32506] __get_user_pages+0x165c/0x2a00 [ 1746.288742][T32506] __gup_longterm_locked+0x3dc/0x1660 [ 1746.288795][T32506] ? trace_kmalloc+0x1f/0xd0 [ 1746.288824][T32506] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1746.288865][T32506] pin_user_pages+0x9e/0xd0 [ 1746.288899][T32506] xdp_umem_pin_pages+0x11c/0x350 [ 1746.288937][T32506] xdp_umem_create+0x677/0x8e0 [ 1746.288973][T32506] xsk_setsockopt+0x7b0/0x8d0 [ 1746.289010][T32506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1746.289049][T32506] ? __pfx_aa_sk_perm+0x10/0x10 [ 1746.289078][T32506] ? do_sys_openat2+0x154/0x1c0 [ 1746.289108][T32506] ? aa_sock_opt_perm+0xff/0x1b0 [ 1746.289147][T32506] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1746.289171][T32506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1746.289206][T32506] do_sock_setsockopt+0x17c/0x1b0 [ 1746.289240][T32506] __x64_sys_setsockopt+0x13f/0x1b0 [ 1746.289273][T32506] do_syscall_64+0xfa/0xfa0 [ 1746.289305][T32506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.289330][T32506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.289353][T32506] ? clear_bhb_loop+0x60/0xb0 [ 1746.289381][T32506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.289404][T32506] RIP: 0033:0x7f17deb8f749 [ 1746.289426][T32506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1746.289446][T32506] RSP: 002b:00007f17dcdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1746.289470][T32506] RAX: ffffffffffffffda RBX: 00007f17dede5fa0 RCX: 00007f17deb8f749 [ 1746.289488][T32506] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1746.289502][T32506] RBP: 00007f17dcdf6090 R08: 000000000000001c R09: 0000000000000000 [ 1746.289517][T32506] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1746.289531][T32506] R13: 00007f17dede6038 R14: 00007f17dede5fa0 R15: 00007ffd53273868 [ 1746.289571][T32506] [ 1746.672705][T32511] syzkaller0: entered promiscuous mode [ 1746.679358][T32511] syzkaller0: entered allmulticast mode [ 1747.241933][T32532] netlink: 'syz.4.7906': attribute type 1 has an invalid length. [ 1749.500116][T32532] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1749.510440][T32541] __nla_validate_parse: 5 callbacks suppressed [ 1749.510465][T32541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7909'. [ 1749.592748][T32545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1749.622845][T32547] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1749.860895][T32559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7915'. [ 1749.945493][T32567] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7918'. [ 1749.961867][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7918'. [ 1749.975013][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7918'. [ 1750.174912][T32574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7923'. [ 1750.190963][T32574] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7923'. [ 1750.416172][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1750.458720][T32592] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7930'. [ 1750.530796][T32600] netlink: 'syz.4.7932': attribute type 3 has an invalid length. [ 1750.549431][T32600] netlink: 'syz.4.7932': attribute type 7 has an invalid length. [ 1750.564885][T32600] netlink: 'syz.4.7932': attribute type 8 has an invalid length. [ 1750.653062][T32605] netlink: 'syz.1.7935': attribute type 21 has an invalid length. [ 1750.832485][T32615] netlink: 'syz.3.7934': attribute type 10 has an invalid length. [ 1750.849734][T32615] net_ratelimit: 41 callbacks suppressed [ 1750.849758][T32615] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1751.422968][T32628] netlink: 'syz.4.7941': attribute type 1 has an invalid length. [ 1751.563786][T32639] FAULT_INJECTION: forcing a failure. [ 1751.563786][T32639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1751.644465][T32639] CPU: 0 UID: 0 PID: 32639 Comm: syz.3.7944 Not tainted syzkaller #0 PREEMPT(full) [ 1751.644496][T32639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1751.644510][T32639] Call Trace: [ 1751.644518][T32639] [ 1751.644528][T32639] dump_stack_lvl+0x189/0x250 [ 1751.644561][T32639] ? __pfx____ratelimit+0x10/0x10 [ 1751.644581][T32639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1751.644608][T32639] ? __pfx__printk+0x10/0x10 [ 1751.644630][T32639] ? fs_reclaim_acquire+0x7d/0x100 [ 1751.644658][T32639] should_fail_ex+0x414/0x560 [ 1751.644695][T32639] prepare_alloc_pages+0x213/0x610 [ 1751.644723][T32639] __alloc_frozen_pages_noprof+0x123/0x370 [ 1751.644754][T32639] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1751.644784][T32639] ? policy_nodemask+0x27c/0x720 [ 1751.644801][T32639] ? __lock_acquire+0xab9/0xd20 [ 1751.644826][T32639] alloc_pages_mpol+0x232/0x4a0 [ 1751.644852][T32639] vma_alloc_folio_noprof+0xe4/0x200 [ 1751.644872][T32639] ? page_table_check_set+0x18d/0x730 [ 1751.644902][T32639] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1751.644935][T32639] folio_prealloc+0x30/0x180 [ 1751.644967][T32639] __handle_mm_fault+0x2a8b/0x5400 [ 1751.645012][T32639] ? __pfx___handle_mm_fault+0x10/0x10 [ 1751.645054][T32639] ? follow_page_pte+0x7ef/0x13e0 [ 1751.645092][T32639] handle_mm_fault+0x40a/0x8e0 [ 1751.645131][T32639] __get_user_pages+0x165c/0x2a00 [ 1751.645192][T32639] __gup_longterm_locked+0x3dc/0x1660 [ 1751.645237][T32639] ? trace_kmalloc+0x1f/0xd0 [ 1751.645271][T32639] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1751.645306][T32639] pin_user_pages+0x9e/0xd0 [ 1751.645336][T32639] xdp_umem_pin_pages+0x11c/0x350 [ 1751.645363][T32639] xdp_umem_create+0x677/0x8e0 [ 1751.645394][T32639] xsk_setsockopt+0x7b0/0x8d0 [ 1751.645427][T32639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1751.645459][T32639] ? __pfx_aa_sk_perm+0x10/0x10 [ 1751.645484][T32639] ? do_sys_openat2+0x154/0x1c0 [ 1751.645511][T32639] ? aa_sock_opt_perm+0xff/0x1b0 [ 1751.645545][T32639] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1751.645565][T32639] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1751.645596][T32639] do_sock_setsockopt+0x17c/0x1b0 [ 1751.645625][T32639] __x64_sys_setsockopt+0x13f/0x1b0 [ 1751.645654][T32639] do_syscall_64+0xfa/0xfa0 [ 1751.645674][T32639] ? lockdep_hardirqs_on+0x9c/0x150 [ 1751.645696][T32639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.645716][T32639] ? clear_bhb_loop+0x60/0xb0 [ 1751.645741][T32639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.645761][T32639] RIP: 0033:0x7f71ad18f749 [ 1751.645779][T32639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1751.645797][T32639] RSP: 002b:00007f71ae098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1751.645819][T32639] RAX: ffffffffffffffda RBX: 00007f71ad3e5fa0 RCX: 00007f71ad18f749 [ 1751.645833][T32639] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1751.645846][T32639] RBP: 00007f71ae098090 R08: 000000000000001c R09: 0000000000000000 [ 1751.645858][T32639] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1751.645871][T32639] R13: 00007f71ad3e6038 R14: 00007f71ad3e5fa0 R15: 00007ffd7fd89758 [ 1751.645906][T32639] [ 1752.083761][T32646] netlink: 'syz.3.7947': attribute type 31 has an invalid length. [ 1752.279280][T32654] syzkaller1: entered promiscuous mode [ 1752.285058][T32654] syzkaller1: entered allmulticast mode [ 1752.513850][T32669] vlan6: entered promiscuous mode [ 1752.547610][T32669] bond0: entered promiscuous mode [ 1753.230509][T32700] FAULT_INJECTION: forcing a failure. [ 1753.230509][T32700] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.254130][T32700] CPU: 1 UID: 0 PID: 32700 Comm: syz.4.7963 Not tainted syzkaller #0 PREEMPT(full) [ 1753.254162][T32700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1753.254177][T32700] Call Trace: [ 1753.254186][T32700] [ 1753.254197][T32700] dump_stack_lvl+0x189/0x250 [ 1753.254235][T32700] ? __pfx____ratelimit+0x10/0x10 [ 1753.254259][T32700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1753.254291][T32700] ? __pfx__printk+0x10/0x10 [ 1753.254323][T32700] ? __pfx___might_resched+0x10/0x10 [ 1753.254348][T32700] ? fs_reclaim_acquire+0x7d/0x100 [ 1753.254377][T32700] should_fail_ex+0x414/0x560 [ 1753.254428][T32700] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1753.254464][T32700] should_failslab+0xa8/0x100 [ 1753.254488][T32700] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1753.254521][T32700] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1753.254554][T32700] ? alloc_inode+0x6a/0x1b0 [ 1753.254588][T32700] ? __pfx_simple_start_creating+0x10/0x10 [ 1753.254616][T32700] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1753.254650][T32700] alloc_inode+0x6a/0x1b0 [ 1753.254687][T32700] new_inode+0x22/0x170 [ 1753.254716][T32700] __debugfs_create_file+0x14d/0x4f0 [ 1753.254757][T32700] debugfs_create_file_full+0x3f/0x60 [ 1753.254796][T32700] ref_tracker_dir_debugfs+0x14e/0x270 [ 1753.254821][T32700] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1753.254874][T32700] ? trace_kmalloc+0x1f/0xd0 [ 1753.254903][T32700] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1753.254944][T32700] ? __raw_spin_lock_init+0x45/0x100 [ 1753.254979][T32700] alloc_netdev_mqs+0x272/0x11b0 [ 1753.255011][T32700] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 1753.255143][T32700] ieee802154_if_add+0xe4/0xfd0 [ 1753.255176][T32700] ? ieee802154_add_iface_deprecated+0x2f/0x70 [ 1753.255212][T32700] ? __pfx_ieee802154_if_add+0x10/0x10 [ 1753.255241][T32700] ? __pfx___mutex_lock+0x10/0x10 [ 1753.255269][T32700] ? __asan_memset+0x22/0x50 [ 1753.255307][T32700] ? genlmsg_put+0x137/0x2e0 [ 1753.255346][T32700] ieee802154_add_iface_deprecated+0x43/0x70 [ 1753.255384][T32700] ieee802154_add_iface+0x451/0x7d0 [ 1753.255484][T32700] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 1753.255519][T32700] ? rcu_is_watching+0x15/0xb0 [ 1753.255551][T32700] ? __nla_parse+0x40/0x60 [ 1753.255581][T32700] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1753.255626][T32700] genl_family_rcv_msg_doit+0x215/0x300 [ 1753.255669][T32700] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1753.255720][T32700] ? bpf_lsm_capable+0x9/0x20 [ 1753.255748][T32700] ? security_capable+0x7e/0x2e0 [ 1753.255790][T32700] genl_rcv_msg+0x60e/0x790 [ 1753.255831][T32700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1753.255863][T32700] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 1753.255917][T32700] netlink_rcv_skb+0x208/0x470 [ 1753.255941][T32700] ? __lock_acquire+0xab9/0xd20 [ 1753.255965][T32700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1753.256000][T32700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1753.256051][T32700] ? down_read+0x1ad/0x2e0 [ 1753.256082][T32700] genl_rcv+0x28/0x40 [ 1753.256112][T32700] netlink_unicast+0x82f/0x9e0 [ 1753.256147][T32700] ? __pfx_netlink_unicast+0x10/0x10 [ 1753.256174][T32700] ? netlink_sendmsg+0x642/0xb30 [ 1753.256198][T32700] ? skb_put+0x11b/0x210 [ 1753.256228][T32700] netlink_sendmsg+0x805/0xb30 [ 1753.256268][T32700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1753.256299][T32700] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1753.256336][T32700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1753.256358][T32700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1753.256386][T32700] __sock_sendmsg+0x21c/0x270 [ 1753.256433][T32700] ____sys_sendmsg+0x505/0x830 [ 1753.256468][T32700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1753.256508][T32700] ? import_iovec+0x74/0xa0 [ 1753.256543][T32700] ___sys_sendmsg+0x21f/0x2a0 [ 1753.256575][T32700] ? __pfx____sys_sendmsg+0x10/0x10 [ 1753.256651][T32700] ? __fget_files+0x2a/0x420 [ 1753.256672][T32700] ? __fget_files+0x3a0/0x420 [ 1753.256708][T32700] __x64_sys_sendmsg+0x19b/0x260 [ 1753.256740][T32700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1753.256782][T32700] ? __pfx_ksys_write+0x10/0x10 [ 1753.256819][T32700] ? do_syscall_64+0xbe/0xfa0 [ 1753.256849][T32700] do_syscall_64+0xfa/0xfa0 [ 1753.256871][T32700] ? lockdep_hardirqs_on+0x9c/0x150 [ 1753.256895][T32700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.256918][T32700] ? clear_bhb_loop+0x60/0xb0 [ 1753.256947][T32700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.256969][T32700] RIP: 0033:0x7f6ed338f749 [ 1753.256991][T32700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1753.257011][T32700] RSP: 002b:00007f6ed41c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1753.257037][T32700] RAX: ffffffffffffffda RBX: 00007f6ed35e5fa0 RCX: 00007f6ed338f749 [ 1753.257054][T32700] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1753.257069][T32700] RBP: 00007f6ed41c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.257083][T32700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.257097][T32700] R13: 00007f6ed35e6038 R14: 00007f6ed35e5fa0 R15: 00007fff9907c5e8 [ 1753.257138][T32700] [ 1753.257150][T32700] debugfs: out of free dentries, can not create file 'netdev@ffff88807b9f0618' [ 1753.390724][T32706] netlink: 'syz.5.7964': attribute type 1 has an invalid length. [ 1753.851137][T32706] netlink: 'syz.5.7964': attribute type 6 has an invalid length. [ 1753.864198][T32658] lo speed is unknown, defaulting to 1000 [ 1753.871850][T32658] wg1 speed is unknown, defaulting to 1000 [ 1753.891998][T32706] netlink: 'syz.5.7964': attribute type 3 has an invalid length. [ 1754.065671][T32721] vlan2: left promiscuous mode [ 1754.078898][T32721] geneve4: left promiscuous mode [ 1754.135952][ T3464] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 33229 - 0 [ 1754.157578][ T3464] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 33229 - 0 [ 1754.247689][ T3464] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 33229 - 0 [ 1754.294398][ T3464] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 33229 - 0 [ 1754.428357][T32730] syzkaller1: entered promiscuous mode [ 1754.445936][T32730] syzkaller1: entered allmulticast mode [ 1754.564873][T32749] __nla_validate_parse: 13 callbacks suppressed [ 1754.564896][T32749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7970'. [ 1754.601640][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7970'. [ 1754.602373][T32749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7970'. [ 1754.992270][T32765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1755.017539][T32765] syzkaller1: entered promiscuous mode [ 1755.033847][T32765] syzkaller1: entered allmulticast mode [ 1755.141796][T32741] lo speed is unknown, defaulting to 1000 [ 1755.163616][T32741] wg1 speed is unknown, defaulting to 1000 [ 1755.402832][ T308] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7983'. [ 1755.464781][ T309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7983'. [ 1755.598902][ T308] syzkaller1: entered promiscuous mode [ 1755.606491][ T308] syzkaller1: entered allmulticast mode [ 1755.663509][ T313] syzkaller1: entered promiscuous mode [ 1755.671091][ T313] syzkaller1: entered allmulticast mode [ 1755.997249][ T322] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7990'. [ 1756.055948][ T322] syzkaller1: entered promiscuous mode [ 1756.076346][ T322] syzkaller1: entered allmulticast mode [ 1756.112275][ T327] hsr0: entered promiscuous mode [ 1756.118859][ T327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7993'. [ 1756.199027][ T327] hsr_slave_0: left promiscuous mode [ 1756.206218][ T327] hsr_slave_1: left promiscuous mode [ 1756.227263][ T332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7994'. [ 1756.239358][ T327] hsr0 (unregistering): left promiscuous mode [ 1756.489573][ T350] netlink: 'syz.6.7996': attribute type 10 has an invalid length. [ 1756.517156][ T332] syzkaller1: entered promiscuous mode [ 1756.526129][ T332] syzkaller1: entered allmulticast mode [ 1756.534020][ T350] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7996'. [ 1756.637187][ T349] netlink: 'syz.5.7997': attribute type 1 has an invalid length. [ 1756.704354][ T360] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 1756.886723][ T363] syzkaller1: entered promiscuous mode [ 1756.892288][ T363] syzkaller1: entered allmulticast mode [ 1758.067505][ T407] netlink: 'syz.5.8016': attribute type 1 has an invalid length. [ 1759.936251][ T416] syzkaller1: entered promiscuous mode [ 1759.941856][ T416] syzkaller1: entered allmulticast mode [ 1760.139107][ T424] __nla_validate_parse: 1 callbacks suppressed [ 1760.139133][ T424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8021'. [ 1760.231522][ T431] bridge6: entered promiscuous mode [ 1760.299438][ T431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8026'. [ 1760.490546][ T446] netlink: 424 bytes leftover after parsing attributes in process `syz.5.8030'. [ 1760.493232][ T450] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1760.512417][ T445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8031'. [ 1760.531989][ T451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8031'. [ 1760.558303][ T453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8030'. [ 1760.562270][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1760.582032][ T450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1760.588897][ T446] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8030'. [ 1760.602822][ T451] syzkaller0: mtu less than device minimum [ 1760.609613][ T445] syzkaller0: mtu less than device minimum [ 1761.023068][ T468] netlink: 'syz.1.8037': attribute type 10 has an invalid length. [ 1761.031761][ T462] syzkaller1: entered promiscuous mode [ 1761.046494][ T462] syzkaller1: entered allmulticast mode [ 1761.052800][ T467] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1761.578517][ T470] lo speed is unknown, defaulting to 1000 [ 1761.595938][ T470] wg1 speed is unknown, defaulting to 1000 [ 1761.808035][ T495] netlink: 'syz.3.8049': attribute type 1 has an invalid length. [ 1761.889794][ T495] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1762.070942][ T507] syzkaller1: entered promiscuous mode [ 1762.088190][ T507] syzkaller1: entered allmulticast mode [ 1762.943688][ T547] syzkaller1: entered promiscuous mode [ 1762.963258][ T547] syzkaller1: entered allmulticast mode [ 1763.666101][ T567] @ÿ: renamed from hsr0 [ 1763.916490][ T576] vlan2: entered promiscuous mode [ 1763.921605][ T576] bond0: entered promiscuous mode [ 1763.969123][ T576] bond_slave_0: entered promiscuous mode [ 1763.986356][ T576] bond_slave_1: entered promiscuous mode [ 1764.159509][ T589] pim6reg99999999: entered allmulticast mode [ 1764.225917][ T592] FAULT_INJECTION: forcing a failure. [ 1764.225917][ T592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.271582][ T592] CPU: 0 UID: 0 PID: 592 Comm: syz.5.8077 Not tainted syzkaller #0 PREEMPT(full) [ 1764.271615][ T592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1764.271629][ T592] Call Trace: [ 1764.271640][ T592] [ 1764.271650][ T592] dump_stack_lvl+0x189/0x250 [ 1764.271688][ T592] ? __pfx____ratelimit+0x10/0x10 [ 1764.271712][ T592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1764.271743][ T592] ? __pfx__printk+0x10/0x10 [ 1764.271767][ T592] ? __might_fault+0xb0/0x130 [ 1764.271813][ T592] should_fail_ex+0x414/0x560 [ 1764.271854][ T592] _copy_from_iter+0x1de/0x1790 [ 1764.271879][ T592] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 1764.271912][ T592] ? kmalloc_reserve+0xbd/0x290 [ 1764.271952][ T592] ? __pfx__copy_from_iter+0x10/0x10 [ 1764.271975][ T592] ? __alloc_skb+0x2f1/0x430 [ 1764.272002][ T592] ? __pfx___alloc_skb+0x10/0x10 [ 1764.272029][ T592] ? netlink_sendmsg+0x642/0xb30 [ 1764.272055][ T592] ? skb_put+0x11b/0x210 [ 1764.272084][ T592] netlink_sendmsg+0x6b2/0xb30 [ 1764.272122][ T592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1764.272154][ T592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1764.272190][ T592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1764.272213][ T592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1764.272242][ T592] __sock_sendmsg+0x21c/0x270 [ 1764.272289][ T592] ____sys_sendmsg+0x505/0x830 [ 1764.272323][ T592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1764.272362][ T592] ? import_iovec+0x74/0xa0 [ 1764.272396][ T592] ___sys_sendmsg+0x21f/0x2a0 [ 1764.272426][ T592] ? __pfx____sys_sendmsg+0x10/0x10 [ 1764.272492][ T592] ? __fget_files+0x2a/0x420 [ 1764.272513][ T592] ? __fget_files+0x3a0/0x420 [ 1764.272546][ T592] __x64_sys_sendmsg+0x19b/0x260 [ 1764.272576][ T592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1764.272614][ T592] ? __pfx_ksys_write+0x10/0x10 [ 1764.272650][ T592] ? do_syscall_64+0xbe/0xfa0 [ 1764.272678][ T592] do_syscall_64+0xfa/0xfa0 [ 1764.272699][ T592] ? lockdep_hardirqs_on+0x9c/0x150 [ 1764.272724][ T592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.272747][ T592] ? clear_bhb_loop+0x60/0xb0 [ 1764.272774][ T592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.272797][ T592] RIP: 0033:0x7f76b978f749 [ 1764.272817][ T592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1764.272837][ T592] RSP: 002b:00007f76ba697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1764.272862][ T592] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978f749 [ 1764.272879][ T592] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 1764.272894][ T592] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.272910][ T592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.272924][ T592] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1764.272962][ T592] [ 1764.707865][ T603] syzkaller1: entered promiscuous mode [ 1764.734074][ T603] syzkaller1: entered allmulticast mode [ 1765.227228][ T624] xfrm0: entered promiscuous mode [ 1765.398979][ T635] team0: No ports can be present during mode change [ 1765.406531][ T637] __nla_validate_parse: 6 callbacks suppressed [ 1765.406552][ T637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1765.477026][ T637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1765.695450][ T647] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8097'. [ 1765.715288][ T653] FAULT_INJECTION: forcing a failure. [ 1765.715288][ T653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1765.744656][ T653] CPU: 1 UID: 0 PID: 653 Comm: syz.6.8098 Not tainted syzkaller #0 PREEMPT(full) [ 1765.744690][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1765.744704][ T653] Call Trace: [ 1765.744714][ T653] [ 1765.744724][ T653] dump_stack_lvl+0x189/0x250 [ 1765.744762][ T653] ? __pfx____ratelimit+0x10/0x10 [ 1765.744785][ T653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1765.744816][ T653] ? __pfx__printk+0x10/0x10 [ 1765.744841][ T653] ? __might_fault+0xb0/0x130 [ 1765.744887][ T653] should_fail_ex+0x414/0x560 [ 1765.744928][ T653] _copy_from_user+0x2d/0xb0 [ 1765.744959][ T653] do_sock_getsockopt+0x17d/0x450 [ 1765.744991][ T653] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1765.745017][ T653] ? do_syscall_64+0xa0/0xfa0 [ 1765.745039][ T653] ? __fget_files+0x2a/0x420 [ 1765.745060][ T653] ? __fget_files+0x3a0/0x420 [ 1765.745080][ T653] ? __fget_files+0x2a/0x420 [ 1765.745109][ T653] __x64_sys_getsockopt+0x1a5/0x250 [ 1765.745137][ T653] ? do_syscall_64+0xa0/0xfa0 [ 1765.745163][ T653] ? do_syscall_64+0xa0/0xfa0 [ 1765.745191][ T653] do_syscall_64+0xfa/0xfa0 [ 1765.745213][ T653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1765.745237][ T653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.745259][ T653] ? clear_bhb_loop+0x60/0xb0 [ 1765.745287][ T653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.745309][ T653] RIP: 0033:0x7fa96cf8f749 [ 1765.745329][ T653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1765.745348][ T653] RSP: 002b:00007fa96de0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1765.745381][ T653] RAX: ffffffffffffffda RBX: 00007fa96d1e5fa0 RCX: 00007fa96cf8f749 [ 1765.745403][ T653] RDX: 0000000000000013 RSI: 0000000000000112 RDI: 0000000000000004 [ 1765.745418][ T653] RBP: 00007fa96de0b090 R08: 00002000000000c0 R09: 0000000000000000 [ 1765.745433][ T653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.745447][ T653] R13: 00007fa96d1e6038 R14: 00007fa96d1e5fa0 R15: 00007ffc5cb601a8 [ 1765.745484][ T653] [ 1766.012758][ T647] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8097'. [ 1766.156989][ T660] vlan7: entered promiscuous mode [ 1766.164309][ T647] syzkaller1: entered promiscuous mode [ 1766.172480][ T647] syzkaller1: entered allmulticast mode [ 1766.213261][ T663] netlink: 'syz.3.8100': attribute type 11 has an invalid length. [ 1766.225952][ T663] netlink: 'syz.3.8100': attribute type 11 has an invalid length. [ 1766.236352][ T661] ip6gretap1: entered promiscuous mode [ 1766.252092][ T663] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1766.585526][ T648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.815870][ T688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8111'. [ 1766.895427][ T691] netlink: 'syz.1.8112': attribute type 1 has an invalid length. [ 1766.998775][ T691] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1767.009939][ T697] netlink: 'syz.3.8113': attribute type 10 has an invalid length. [ 1767.299051][ T713] netlink: 'syz.5.8116': attribute type 10 has an invalid length. [ 1767.308088][ T713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8116'. [ 1767.430125][ T718] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8120'. [ 1767.684312][ T722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8123'. [ 1767.837722][ T733] syzkaller1: entered promiscuous mode [ 1767.854223][ T733] syzkaller1: entered allmulticast mode [ 1767.929647][ T739] x_tables: duplicate underflow at hook 1 [ 1767.963039][ T737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1768.034743][ T743] syzkaller0: entered promiscuous mode [ 1768.041098][ T743] syzkaller0: entered allmulticast mode [ 1768.090715][ T743] tipc: Enabled bearer , priority 0 [ 1768.101960][ T747] netlink: 'syz.1.8131': attribute type 1 has an invalid length. [ 1768.118741][ T747] netlink: 'syz.1.8131': attribute type 2 has an invalid length. [ 1768.127320][ T742] tipc: Resetting bearer [ 1768.166907][ T742] tipc: Disabling bearer [ 1768.519534][ T754] syzkaller1: entered promiscuous mode [ 1768.528728][ T754] syzkaller1: entered allmulticast mode [ 1768.992517][ T795] batadv_slave_0: left promiscuous mode [ 1769.070477][ T795] veth1_macvtap: left allmulticast mode [ 1769.128085][ T795] vlan6: left promiscuous mode [ 1769.138986][ T795] vlan7: left promiscuous mode [ 1769.148769][ T795] bond0: left promiscuous mode [ 1769.193812][ T769] lo speed is unknown, defaulting to 1000 [ 1769.201808][ T769] wg1 speed is unknown, defaulting to 1000 [ 1769.552377][ T817] FAULT_INJECTION: forcing a failure. [ 1769.552377][ T817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.654780][ T817] CPU: 1 UID: 0 PID: 817 Comm: syz.1.8145 Not tainted syzkaller #0 PREEMPT(full) [ 1769.654823][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1769.654839][ T817] Call Trace: [ 1769.654849][ T817] [ 1769.654859][ T817] dump_stack_lvl+0x189/0x250 [ 1769.654898][ T817] ? __pfx____ratelimit+0x10/0x10 [ 1769.654922][ T817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1769.654954][ T817] ? __pfx__printk+0x10/0x10 [ 1769.654979][ T817] ? __might_fault+0xb0/0x130 [ 1769.655025][ T817] should_fail_ex+0x414/0x560 [ 1769.655067][ T817] _copy_from_user+0x2d/0xb0 [ 1769.655098][ T817] __sys_bpf+0x1e3/0x860 [ 1769.655125][ T817] ? __pfx___sys_bpf+0x10/0x10 [ 1769.655167][ T817] ? ksys_write+0x22a/0x250 [ 1769.655202][ T817] ? __pfx_ksys_write+0x10/0x10 [ 1769.655247][ T817] __x64_sys_bpf+0x7c/0x90 [ 1769.655282][ T817] do_syscall_64+0xfa/0xfa0 [ 1769.655305][ T817] ? lockdep_hardirqs_on+0x9c/0x150 [ 1769.655329][ T817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.655352][ T817] ? clear_bhb_loop+0x60/0xb0 [ 1769.655380][ T817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.655403][ T817] RIP: 0033:0x7f17deb8f749 [ 1769.655424][ T817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.655444][ T817] RSP: 002b:00007f17dcdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1769.655467][ T817] RAX: ffffffffffffffda RBX: 00007f17dede6090 RCX: 00007f17deb8f749 [ 1769.655484][ T817] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000001 [ 1769.655499][ T817] RBP: 00007f17dcdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.655514][ T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.655527][ T817] R13: 00007f17dede6128 R14: 00007f17dede6090 R15: 00007ffd53273868 [ 1769.655565][ T817] [ 1770.560563][ T842] dvmrp0: left allmulticast mode [ 1770.566413][ T842] pimreg: left allmulticast mode [ 1770.727389][ T849] syzkaller1: entered promiscuous mode [ 1770.744214][ T849] syzkaller1: entered allmulticast mode [ 1770.923121][ T858] __nla_validate_parse: 3 callbacks suppressed [ 1770.923146][ T858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8157'. [ 1771.046250][ T864] tipc: Enabling of bearer rejected, failed to enable media [ 1771.118889][ T869] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8163'. [ 1771.262366][ T879] netlink: 'syz.4.8166': attribute type 31 has an invalid length. [ 1771.283222][ T874] bond3 (unregistering): Released all slaves [ 1771.502757][ T884] syzkaller1: entered promiscuous mode [ 1771.525881][ T884] syzkaller1: entered allmulticast mode [ 1771.817270][ T897] bridge7: entered promiscuous mode [ 1771.837723][ T897] bridge7: entered allmulticast mode [ 1771.876566][ T897] team0: Port device bridge7 added [ 1772.164656][ T905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8172'. [ 1772.180301][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8173'. [ 1772.233035][ T916] netlink: 'syz.1.8173': attribute type 14 has an invalid length. [ 1772.246616][ T916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8173'. [ 1772.437895][ T930] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8176'. [ 1772.453133][ T871] lo speed is unknown, defaulting to 1000 [ 1772.461641][ T871] wg1 speed is unknown, defaulting to 1000 [ 1772.608741][ T935] syzkaller0: entered promiscuous mode [ 1772.634558][ T935] syzkaller0: entered allmulticast mode [ 1774.996712][ T965] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8186'. [ 1775.059541][ T965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8186'. [ 1775.088349][ T966] team0: Port device bridge3 added [ 1775.288788][ T971] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1775.299290][ T971] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1775.341580][ T971] tipc: Enabling of bearer rejected, already enabled [ 1775.754591][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8198'. [ 1775.758421][ T1001] netlink: 'syz.5.8199': attribute type 31 has an invalid length. [ 1775.763649][ T1000] netlink: 'syz.1.8198': attribute type 21 has an invalid length. [ 1776.109340][ T1022] netlink: 428 bytes leftover after parsing attributes in process `syz.5.8205'. [ 1776.156924][ T1022] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8205'. [ 1776.292425][ T1023] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1776.664865][ T1027] lo speed is unknown, defaulting to 1000 [ 1776.672487][ T1027] wg1 speed is unknown, defaulting to 1000 [ 1776.694313][ T1056] FAULT_INJECTION: forcing a failure. [ 1776.694313][ T1056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.714220][ T1056] CPU: 0 UID: 0 PID: 1056 Comm: syz.1.8213 Not tainted syzkaller #0 PREEMPT(full) [ 1776.714252][ T1056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1776.714365][ T1056] Call Trace: [ 1776.714380][ T1056] [ 1776.714391][ T1056] dump_stack_lvl+0x189/0x250 [ 1776.714430][ T1056] ? __pfx____ratelimit+0x10/0x10 [ 1776.714453][ T1056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1776.714484][ T1056] ? __pfx__printk+0x10/0x10 [ 1776.714564][ T1056] should_fail_ex+0x414/0x560 [ 1776.714607][ T1056] _copy_to_user+0x31/0xb0 [ 1776.714641][ T1056] simple_read_from_buffer+0xe1/0x170 [ 1776.714684][ T1056] proc_fail_nth_read+0x1b3/0x220 [ 1776.714719][ T1056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1776.714758][ T1056] ? rw_verify_area+0x2a6/0x4d0 [ 1776.714789][ T1056] ? __lock_acquire+0xab9/0xd20 [ 1776.714810][ T1056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1776.714842][ T1056] vfs_read+0x200/0xa30 [ 1776.714874][ T1056] ? fdget_pos+0x247/0x320 [ 1776.714902][ T1056] ? __pfx___mutex_lock+0x10/0x10 [ 1776.714929][ T1056] ? __pfx_vfs_read+0x10/0x10 [ 1776.714962][ T1056] ? __fget_files+0x2a/0x420 [ 1776.714990][ T1056] ? __fget_files+0x3a0/0x420 [ 1776.715011][ T1056] ? __fget_files+0x2a/0x420 [ 1776.715045][ T1056] ksys_read+0x145/0x250 [ 1776.715081][ T1056] ? __pfx_ksys_read+0x10/0x10 [ 1776.715115][ T1056] ? do_syscall_64+0xbe/0xfa0 [ 1776.715144][ T1056] do_syscall_64+0xfa/0xfa0 [ 1776.715168][ T1056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.715191][ T1056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.715215][ T1056] ? clear_bhb_loop+0x60/0xb0 [ 1776.715244][ T1056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.715268][ T1056] RIP: 0033:0x7f17deb8e15c [ 1776.715287][ T1056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1776.715303][ T1056] RSP: 002b:00007f17dcdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1776.715324][ T1056] RAX: ffffffffffffffda RBX: 00007f17dede5fa0 RCX: 00007f17deb8e15c [ 1776.715342][ T1056] RDX: 000000000000000f RSI: 00007f17dcdf60a0 RDI: 0000000000000007 [ 1776.715356][ T1056] RBP: 00007f17dcdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.715370][ T1056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1776.715386][ T1056] R13: 00007f17dede6038 R14: 00007f17dede5fa0 R15: 00007ffd53273868 [ 1776.715427][ T1056] [ 1777.069234][ T1066] dvmrp0: entered allmulticast mode [ 1777.510891][ T1091] FAULT_INJECTION: forcing a failure. [ 1777.510891][ T1091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.528980][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: syz.5.8223 Not tainted syzkaller #0 PREEMPT(full) [ 1777.529015][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1777.529030][ T1091] Call Trace: [ 1777.529040][ T1091] [ 1777.529051][ T1091] dump_stack_lvl+0x189/0x250 [ 1777.529089][ T1091] ? __pfx____ratelimit+0x10/0x10 [ 1777.529145][ T1091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1777.529177][ T1091] ? __pfx__printk+0x10/0x10 [ 1777.529202][ T1091] ? __might_fault+0xb0/0x130 [ 1777.529248][ T1091] should_fail_ex+0x414/0x560 [ 1777.529289][ T1091] _copy_from_user+0x2d/0xb0 [ 1777.529321][ T1091] bpf_prog_test_run_xdp+0xd70/0x10e0 [ 1777.529368][ T1091] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1777.529399][ T1091] ? __fget_files+0x2a/0x420 [ 1777.529422][ T1091] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1777.529451][ T1091] bpf_prog_test_run+0x2c7/0x340 [ 1777.529481][ T1091] __sys_bpf+0x562/0x860 [ 1777.529507][ T1091] ? __pfx___sys_bpf+0x10/0x10 [ 1777.529548][ T1091] ? ksys_write+0x22a/0x250 [ 1777.529584][ T1091] ? __pfx_ksys_write+0x10/0x10 [ 1777.529623][ T1091] __x64_sys_bpf+0x7c/0x90 [ 1777.529658][ T1091] do_syscall_64+0xfa/0xfa0 [ 1777.529682][ T1091] ? lockdep_hardirqs_on+0x9c/0x150 [ 1777.529706][ T1091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.529729][ T1091] ? clear_bhb_loop+0x60/0xb0 [ 1777.529757][ T1091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.529779][ T1091] RIP: 0033:0x7f76b978f749 [ 1777.529799][ T1091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1777.529819][ T1091] RSP: 002b:00007f76ba697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.529844][ T1091] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978f749 [ 1777.529861][ T1091] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1777.529876][ T1091] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.529891][ T1091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.529905][ T1091] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1777.529943][ T1091] [ 1778.181394][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8229'. [ 1778.198205][ T1104] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8229'. [ 1778.233458][ T1108] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1778.521033][ T1121] netlink: 'syz.5.8233': attribute type 6 has an invalid length. [ 1778.672320][ T1124] FAULT_INJECTION: forcing a failure. [ 1778.672320][ T1124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.714118][ T1124] CPU: 0 UID: 0 PID: 1124 Comm: syz.4.8234 Not tainted syzkaller #0 PREEMPT(full) [ 1778.714153][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1778.714169][ T1124] Call Trace: [ 1778.714178][ T1124] [ 1778.714189][ T1124] dump_stack_lvl+0x189/0x250 [ 1778.714227][ T1124] ? __pfx____ratelimit+0x10/0x10 [ 1778.714250][ T1124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1778.714282][ T1124] ? __pfx__printk+0x10/0x10 [ 1778.714311][ T1124] ? __might_fault+0xb0/0x130 [ 1778.714356][ T1124] should_fail_ex+0x414/0x560 [ 1778.714397][ T1124] _copy_from_iter+0x1de/0x1790 [ 1778.714422][ T1124] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 1778.714455][ T1124] ? kmalloc_reserve+0xbd/0x290 [ 1778.714494][ T1124] ? __pfx__copy_from_iter+0x10/0x10 [ 1778.714518][ T1124] ? __alloc_skb+0x2f1/0x430 [ 1778.714544][ T1124] ? __pfx___alloc_skb+0x10/0x10 [ 1778.714571][ T1124] ? netlink_sendmsg+0x642/0xb30 [ 1778.714595][ T1124] ? skb_put+0x11b/0x210 [ 1778.714623][ T1124] netlink_sendmsg+0x6b2/0xb30 [ 1778.714658][ T1124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.714686][ T1124] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1778.714721][ T1124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1778.714742][ T1124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.714769][ T1124] __sock_sendmsg+0x21c/0x270 [ 1778.714807][ T1124] ____sys_sendmsg+0x505/0x830 [ 1778.714839][ T1124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1778.714876][ T1124] ? import_iovec+0x74/0xa0 [ 1778.714908][ T1124] ___sys_sendmsg+0x21f/0x2a0 [ 1778.714937][ T1124] ? __pfx____sys_sendmsg+0x10/0x10 [ 1778.715006][ T1124] ? __fget_files+0x2a/0x420 [ 1778.715027][ T1124] ? __fget_files+0x3a0/0x420 [ 1778.715062][ T1124] __x64_sys_sendmsg+0x19b/0x260 [ 1778.715103][ T1124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1778.715142][ T1124] ? __pfx_ksys_write+0x10/0x10 [ 1778.715179][ T1124] ? do_syscall_64+0xbe/0xfa0 [ 1778.715208][ T1124] do_syscall_64+0xfa/0xfa0 [ 1778.715230][ T1124] ? lockdep_hardirqs_on+0x9c/0x150 [ 1778.715255][ T1124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.715278][ T1124] ? clear_bhb_loop+0x60/0xb0 [ 1778.715306][ T1124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.715327][ T1124] RIP: 0033:0x7f6ed338f749 [ 1778.715348][ T1124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1778.715369][ T1124] RSP: 002b:00007f6ed41c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1778.715393][ T1124] RAX: ffffffffffffffda RBX: 00007f6ed35e5fa0 RCX: 00007f6ed338f749 [ 1778.715411][ T1124] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1778.715425][ T1124] RBP: 00007f6ed41c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.715440][ T1124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.715454][ T1124] R13: 00007f6ed35e6038 R14: 00007f6ed35e5fa0 R15: 00007fff9907c5e8 [ 1778.715492][ T1124] [ 1779.663335][ T1165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1779.673597][ T1165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1779.748988][ T1168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8247'. [ 1780.046867][ T1178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8252'. [ 1780.520026][ T1195] FAULT_INJECTION: forcing a failure. [ 1780.520026][ T1195] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.555540][ T1195] CPU: 0 UID: 0 PID: 1195 Comm: syz.4.8258 Not tainted syzkaller #0 PREEMPT(full) [ 1780.555573][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1780.555586][ T1195] Call Trace: [ 1780.555595][ T1195] [ 1780.555605][ T1195] dump_stack_lvl+0x189/0x250 [ 1780.555643][ T1195] ? __pfx____ratelimit+0x10/0x10 [ 1780.555666][ T1195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.555696][ T1195] ? __pfx__printk+0x10/0x10 [ 1780.555727][ T1195] ? __pfx___might_resched+0x10/0x10 [ 1780.555751][ T1195] ? fs_reclaim_acquire+0x7d/0x100 [ 1780.555780][ T1195] should_fail_ex+0x414/0x560 [ 1780.555823][ T1195] should_failslab+0xa8/0x100 [ 1780.555848][ T1195] __kvmalloc_node_noprof+0x158/0x910 [ 1780.555886][ T1195] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 1780.555926][ T1195] alloc_netdev_mqs+0x8a6/0x11b0 [ 1780.555967][ T1195] ieee802154_if_add+0xe4/0xfd0 [ 1780.556001][ T1195] ? ieee802154_add_iface_deprecated+0x2f/0x70 [ 1780.556037][ T1195] ? __pfx_ieee802154_if_add+0x10/0x10 [ 1780.556066][ T1195] ? __pfx___mutex_lock+0x10/0x10 [ 1780.556095][ T1195] ? __asan_memset+0x22/0x50 [ 1780.556133][ T1195] ? genlmsg_put+0x137/0x2e0 [ 1780.556171][ T1195] ieee802154_add_iface_deprecated+0x43/0x70 [ 1780.556217][ T1195] ieee802154_add_iface+0x451/0x7d0 [ 1780.556260][ T1195] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 1780.556295][ T1195] ? rcu_is_watching+0x15/0xb0 [ 1780.556327][ T1195] ? __nla_parse+0x40/0x60 [ 1780.556357][ T1195] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1780.556401][ T1195] genl_family_rcv_msg_doit+0x215/0x300 [ 1780.556444][ T1195] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1780.556495][ T1195] ? bpf_lsm_capable+0x9/0x20 [ 1780.556523][ T1195] ? security_capable+0x7e/0x2e0 [ 1780.556569][ T1195] genl_rcv_msg+0x60e/0x790 [ 1780.556609][ T1195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1780.556637][ T1195] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 1780.556679][ T1195] netlink_rcv_skb+0x208/0x470 [ 1780.556699][ T1195] ? __lock_acquire+0xab9/0xd20 [ 1780.556718][ T1195] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1780.556745][ T1195] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1780.556784][ T1195] ? down_read+0x1ad/0x2e0 [ 1780.556808][ T1195] genl_rcv+0x28/0x40 [ 1780.556832][ T1195] netlink_unicast+0x82f/0x9e0 [ 1780.556859][ T1195] ? __pfx_netlink_unicast+0x10/0x10 [ 1780.556879][ T1195] ? netlink_sendmsg+0x642/0xb30 [ 1780.556899][ T1195] ? skb_put+0x11b/0x210 [ 1780.556923][ T1195] netlink_sendmsg+0x805/0xb30 [ 1780.556955][ T1195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1780.556980][ T1195] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1780.557009][ T1195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1780.557026][ T1195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1780.557049][ T1195] __sock_sendmsg+0x21c/0x270 [ 1780.557080][ T1195] ____sys_sendmsg+0x505/0x830 [ 1780.557108][ T1195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1780.557139][ T1195] ? import_iovec+0x74/0xa0 [ 1780.557166][ T1195] ___sys_sendmsg+0x21f/0x2a0 [ 1780.557197][ T1195] ? __pfx____sys_sendmsg+0x10/0x10 [ 1780.557255][ T1195] ? __fget_files+0x2a/0x420 [ 1780.557271][ T1195] ? __fget_files+0x3a0/0x420 [ 1780.557299][ T1195] __x64_sys_sendmsg+0x19b/0x260 [ 1780.557324][ T1195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1780.557356][ T1195] ? __pfx_ksys_write+0x10/0x10 [ 1780.557387][ T1195] ? do_syscall_64+0xbe/0xfa0 [ 1780.557410][ T1195] do_syscall_64+0xfa/0xfa0 [ 1780.557427][ T1195] ? lockdep_hardirqs_on+0x9c/0x150 [ 1780.557446][ T1195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.557464][ T1195] ? clear_bhb_loop+0x60/0xb0 [ 1780.557487][ T1195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.557504][ T1195] RIP: 0033:0x7f6ed338f749 [ 1780.557522][ T1195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.557539][ T1195] RSP: 002b:00007f6ed41c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1780.557558][ T1195] RAX: ffffffffffffffda RBX: 00007f6ed35e5fa0 RCX: 00007f6ed338f749 [ 1780.557572][ T1195] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1780.557584][ T1195] RBP: 00007f6ed41c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.557595][ T1195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1780.557605][ T1195] R13: 00007f6ed35e6038 R14: 00007f6ed35e5fa0 R15: 00007fff9907c5e8 [ 1780.557636][ T1195] [ 1781.191652][ T1202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8262'. [ 1781.339229][ T1208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8265'. [ 1781.453677][ T1214] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8266'. [ 1781.560595][ T1221] pim6reg: entered allmulticast mode [ 1781.810028][ T1234] FAULT_INJECTION: forcing a failure. [ 1781.810028][ T1234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1781.823741][ T1234] CPU: 0 UID: 0 PID: 1234 Comm: syz.5.8272 Not tainted syzkaller #0 PREEMPT(full) [ 1781.823773][ T1234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1781.823787][ T1234] Call Trace: [ 1781.823796][ T1234] [ 1781.823805][ T1234] dump_stack_lvl+0x189/0x250 [ 1781.823841][ T1234] ? __pfx____ratelimit+0x10/0x10 [ 1781.823864][ T1234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1781.823893][ T1234] ? __pfx__printk+0x10/0x10 [ 1781.823922][ T1234] ? fs_reclaim_acquire+0x7d/0x100 [ 1781.823954][ T1234] should_fail_ex+0x414/0x560 [ 1781.823993][ T1234] prepare_alloc_pages+0x213/0x610 [ 1781.824024][ T1234] __alloc_frozen_pages_noprof+0x123/0x370 [ 1781.824051][ T1234] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1781.824073][ T1234] ? lockdep_hardirqs_on+0x9c/0x150 [ 1781.824099][ T1234] ? exc_page_fault+0xab/0x100 [ 1781.824131][ T1234] ? policy_nodemask+0x27c/0x720 [ 1781.824159][ T1234] alloc_pages_mpol+0x232/0x4a0 [ 1781.824188][ T1234] alloc_pages_noprof+0xa9/0x190 [ 1781.824212][ T1234] bpf_prog_test_run_xdp+0xbf7/0x10e0 [ 1781.824256][ T1234] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1781.824286][ T1234] ? __fget_files+0x2a/0x420 [ 1781.824313][ T1234] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1781.824340][ T1234] bpf_prog_test_run+0x2c7/0x340 [ 1781.824369][ T1234] __sys_bpf+0x562/0x860 [ 1781.824394][ T1234] ? __pfx___sys_bpf+0x10/0x10 [ 1781.824435][ T1234] ? ksys_write+0x22a/0x250 [ 1781.824469][ T1234] ? __pfx_ksys_write+0x10/0x10 [ 1781.824507][ T1234] __x64_sys_bpf+0x7c/0x90 [ 1781.824541][ T1234] do_syscall_64+0xfa/0xfa0 [ 1781.824564][ T1234] ? lockdep_hardirqs_on+0x9c/0x150 [ 1781.824588][ T1234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.824609][ T1234] ? clear_bhb_loop+0x60/0xb0 [ 1781.824634][ T1234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.824654][ T1234] RIP: 0033:0x7f76b978f749 [ 1781.824673][ T1234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.824691][ T1234] RSP: 002b:00007f76ba697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1781.824714][ T1234] RAX: ffffffffffffffda RBX: 00007f76b99e5fa0 RCX: 00007f76b978f749 [ 1781.824729][ T1234] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1781.824744][ T1234] RBP: 00007f76ba697090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.824756][ T1234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.824770][ T1234] R13: 00007f76b99e6038 R14: 00007f76b99e5fa0 R15: 00007fffb425e5d8 [ 1781.824809][ T1234] [ 1782.105087][ T1238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8273'. [ 1782.121639][ T1238] geneve3: entered promiscuous mode [ 1782.126974][ T1238] geneve3: entered allmulticast mode [ 1782.141221][T32718] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 53868 - 0 [ 1782.154589][T32718] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 53868 - 0 [ 1782.163541][T32718] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 53868 - 0 [ 1782.172494][T32718] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 53868 - 0 [ 1782.432319][ T31] INFO: task syz.2.6810:29104 blocked for more than 143 seconds. [ 1782.464125][ T31] Not tainted syzkaller #0 [ 1782.470371][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1782.483429][ T31] task:syz.2.6810 state:D stack:26088 pid:29104 tgid:29103 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 1782.496641][ T31] Call Trace: [ 1782.503189][ T31] [ 1782.507043][ T31] __schedule+0x1798/0x4cc0 [ 1782.516163][ T31] ? __lock_acquire+0xab9/0xd20 [ 1782.526922][ T31] ? __lock_acquire+0xab9/0xd20 [ 1782.537607][ T31] ? __pfx___schedule+0x10/0x10 [ 1782.548394][ T31] ? schedule+0x91/0x360 [ 1782.558691][ T31] schedule+0x165/0x360 [ 1782.567510][ T31] schedule_preempt_disabled+0x13/0x30 [ 1782.579873][ T31] __mutex_lock+0x7e6/0x1350 [ 1782.589667][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1782.594926][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1782.609525][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1782.615704][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1782.620484][ T31] ? genlmsg_put+0x137/0x2e0 [ 1782.626589][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1782.638946][ T31] ? kernel_text_address+0xa5/0xe0 [ 1782.644470][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 1782.651029][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1782.656931][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1782.663221][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1782.668872][ T31] genl_rcv_msg+0x60e/0x790 [ 1782.673467][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1782.678799][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1782.685187][ T31] netlink_rcv_skb+0x208/0x470 [ 1782.690519][ T31] ? __lock_acquire+0xab9/0xd20 [ 1782.695641][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1782.700749][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1782.706232][ T31] ? down_read+0x1ad/0x2e0 [ 1782.710685][ T31] genl_rcv+0x28/0x40 [ 1782.714868][ T31] netlink_unicast+0x82f/0x9e0 [ 1782.719675][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1782.725051][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1782.730011][ T31] ? skb_put+0x11b/0x210 [ 1782.734491][ T31] netlink_sendmsg+0x805/0xb30 [ 1782.739310][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1782.744897][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1782.749903][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1782.755424][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1782.760764][ T31] __sock_sendmsg+0x21c/0x270 [ 1782.765561][ T31] ____sys_sendmsg+0x505/0x830 [ 1782.770386][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1782.776174][ T31] ? import_iovec+0x74/0xa0 [ 1782.780747][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1782.785585][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1782.790936][ T31] ? __fget_files+0x2a/0x420 [ 1782.795908][ T31] ? __fget_files+0x3a0/0x420 [ 1782.800624][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1782.805650][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1782.811145][ T31] ? do_syscall_64+0xbe/0xfa0 [ 1782.816043][ T31] do_syscall_64+0xfa/0xfa0 [ 1782.820663][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1782.825985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.832087][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1782.837086][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.843107][ T31] RIP: 0033:0x7f9e4118f749 [ 1782.847610][ T31] RSP: 002b:00007f9e41ff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1782.856213][ T31] RAX: ffffffffffffffda RBX: 00007f9e413e5fa0 RCX: 00007f9e4118f749 [ 1782.864274][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1782.872292][ T31] RBP: 00007f9e41213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1782.880492][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1782.888544][ T31] R13: 00007f9e413e6038 R14: 00007f9e413e5fa0 R15: 00007fff44618188 [ 1782.897356][ T31] [ 1782.900731][ T31] [ 1782.900731][ T31] Showing all locks held in the system: [ 1782.909066][ T31] 1 lock held by khungtaskd/31: [ 1782.915064][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1782.925637][ T31] 5 locks held by kworker/u8:5/79: [ 1782.930961][ T31] 3 locks held by kworker/u8:9/3531: [ 1782.942169][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1782.955066][ T31] #1: ffffc9000be17ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1782.967203][ T31] #2: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1782.976422][ T31] 2 locks held by getty/5591: [ 1782.981214][ T31] #0: ffff88814dc800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1782.991429][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1783.001993][ T31] 2 locks held by syz.0.5691/25652: [ 1783.007443][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.016066][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 1783.026488][ T31] 2 locks held by syz.2.6810/29104: [ 1783.031710][ T31] #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.040227][ T31] #1: ffffffff8e227168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1783.050459][ T31] 3 locks held by kworker/u8:2/32718: [ 1783.056054][ T31] #0: ffff88814c8a7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1783.068047][ T31] #1: ffffc9001a997ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1783.081214][ T31] #2: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1783.090900][ T31] 2 locks held by syz.3.8270/1220: [ 1783.096227][ T31] #0: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1783.105433][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1783.117257][ T31] 1 lock held by syz.5.8275/1245: [ 1783.122446][ T31] #0: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1783.131702][ T31] 1 lock held by syz.5.8275/1247: [ 1783.137377][ T31] #0: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 1783.147082][ T31] 2 locks held by syz.5.8275/1255: [ 1783.152229][ T31] #0: ffff888050ca16f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1783.162685][ T31] #1: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1783.171828][ T31] 2 locks held by syz.4.8276/1253: [ 1783.176996][ T31] #0: ffffffff8f2cfa28 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 1783.188513][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1783.199942][ T31] [ 1783.202413][ T31] ============================================= [ 1783.202413][ T31] [ 1783.211300][ T31] NMI backtrace for cpu 0 [ 1783.211320][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1783.211346][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1783.211360][ T31] Call Trace: [ 1783.211369][ T31] [ 1783.211379][ T31] dump_stack_lvl+0x189/0x250 [ 1783.211420][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1783.211452][ T31] ? __pfx__printk+0x10/0x10 [ 1783.211490][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1783.211602][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1783.211637][ T31] ? __pfx__printk+0x10/0x10 [ 1783.211666][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1783.211705][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1783.211741][ T31] watchdog+0xf60/0xfa0 [ 1783.211781][ T31] ? watchdog+0x1e2/0xfa0 [ 1783.211811][ T31] kthread+0x711/0x8a0 [ 1783.211846][ T31] ? __pfx_watchdog+0x10/0x10 [ 1783.211869][ T31] ? __pfx_kthread+0x10/0x10 [ 1783.211902][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1783.211936][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1783.211958][ T31] ? __pfx_kthread+0x10/0x10 [ 1783.211990][ T31] ret_from_fork+0x4bc/0x870 [ 1783.212017][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1783.212050][ T31] ? __switch_to_asm+0x39/0x70 [ 1783.212068][ T31] ? __switch_to_asm+0x33/0x70 [ 1783.212086][ T31] ? __pfx_kthread+0x10/0x10 [ 1783.212118][ T31] ret_from_fork_asm+0x1a/0x30 [ 1783.212162][ T31] [ 1783.212205][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1783.367729][ C1] NMI backtrace for cpu 1 [ 1783.367764][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1783.367785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1783.367798][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1783.367824][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 f1 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1783.367842][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1783.367861][ C1] RAX: fa66c82b560fca00 RBX: ffffffff81967b47 RCX: fa66c82b560fca00 [ 1783.367876][ C1] RDX: 0000000000000001 RSI: ffffffff8d7113f9 RDI: ffffffff8bbf08e0 [ 1783.367890][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1783.367905][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7d0470 [ 1783.367920][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003957b58 [ 1783.367939][ C1] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 1783.367955][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1783.367969][ C1] CR2: 00007f76ba5d1d58 CR3: 00000000772b0000 CR4: 00000000003526f0 [ 1783.367986][ C1] Call Trace: [ 1783.367994][ C1] [ 1783.368001][ C1] default_idle+0x13/0x20 [ 1783.368025][ C1] default_idle_call+0x73/0xb0 [ 1783.368049][ C1] do_idle+0x1e7/0x510 [ 1783.368075][ C1] ? __pfx_do_idle+0x10/0x10 [ 1783.368106][ C1] cpu_startup_entry+0x44/0x60 [ 1783.368127][ C1] start_secondary+0x101/0x110 [ 1783.368157][ C1] common_startup_64+0x13e/0x147 [ 1783.368194][ C1] [ 1783.593898][ T1245] syzkaller0: entered promiscuous mode [ 1783.601326][ T1245] syzkaller0: entered allmulticast mode