last executing test programs: 2.01402094s ago: executing program 2 (id=7893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_newneigh={0x24, 0x1c, 0x200, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x0, r4, 0x4, 0x8a, 0x7}, [@NDA_LINK_NETNSID={0x8}]}, 0x24}, 0x1, 0xba01, 0x0, 0x8004}, 0x20000804) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0x24}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd98, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x0, 0x46, 0x4f, 0x0, &(0x7f0000000500)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xa0, 0x2]}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) connect$unix(r7, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000380)) 2.013452694s ago: executing program 3 (id=7894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5c, r3, 0x400, 0x70bd2c, 0x25dfdc01, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc010) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000e40)={0xaa0, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xa58, 0x8, 0x0, 0x1, [{0x260, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8a13be83787c82b18e6aec0ff3371fa940f6ef78de29d78e1277f298e0fcd6ed"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "06b357be22b3564c0a86262de48f69333dd1bb8fe0f5337d146a421b48e9ca4f"}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x764, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @mcast1, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5078030e24dcfca675e734b4f2c33e53eaa333153730b7020ab896d98914f2a6"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2178726ac67c9a4787c95a8c66670a1aca1ad67a6bc2c100563cf975e761ce28"}, @WGPEER_A_ALLOWEDIPS={0x520, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa602, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6aa5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b76394440a54b31bd3cc9075896a882d08008a433b6f6a08fa66126a41793c3a"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000001010400000000000000000200"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 1.767724171s ago: executing program 3 (id=7897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0xfffffffe, 0x4) 1.687423145s ago: executing program 2 (id=7898): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x20, 0xa57, 0xd, {{0x10, 0x4, 0x0, 0x1d, 0x40, 0x64, 0x0, 0x7, 0x2b, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0x49, 0x0, 0x4, [0x10]}, @timestamp={0x44, 0x1c, 0xf, 0x0, 0x9, [0x5, 0x8, 0x1, 0x93, 0x0, 0x10]}, @lsrr={0x83, 0x7, 0xd, [@multicast1]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.619986149s ago: executing program 0 (id=7899): pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000280), 0x0}, 0x20) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0xfffffffffffffed4, 0x3, r8}, @val={0x0, 0x99, {0x102, 0x18}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 1.550519275s ago: executing program 1 (id=7900): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e23}}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom$inet(r2, &(0x7f00000001c0)=""/8, 0x8, 0x3c8, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x4, 0x3, 0x7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_MULTICAST_SPEC={0xfffffc4c, 0x3, 0x5}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0xa1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170a29bd7000fedbdf2510000000140001800600010002000000080005000300000086e6dbeec0031f6e1e7a5ba19c"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) socket(0x1, 0x800, 0x5) 1.495480196s ago: executing program 3 (id=7901): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000010003b0c00fcff0000000000000000000615745dd5ebb7e475f20eb806080910afe7ee79c9c2404dfe241eccf40131e3e74ffca915164750004e8823cb55612cb8794d188c125a83641be22be8bd93bbed88536e84d30ca3d8b94e7ebae1fac92f61abc22caec443badab6e745b9fa13c0069f60e1a9e2ee232eb88b1c6a4c492725d812b055cc149de790174c7ea40d5a08d0180e7ebc7a4af42d8ce0517fe88985febae3b324a31d11e5ec386a2767750d79195af955e7efff24960624cabf85d89376", @ANYRES32=r3, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000800150015f70c00"], 0x40}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r6, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) bind$qrtr(r6, &(0x7f0000001000)={0x2a, 0x1, 0x7fff}, 0xc) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x1}, 0x20) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="cdce2e41", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000104000002000000e8005a802400018005000400000000001500010060301205021630180c0401481618030301000000900003801400050001000800010449001000060002000700050004000200000005000600000000003d0002001a381e532030484749444b2a1f0b001f1d202e1745142a06024a26385541212107084123080c2f083b4e1e0740531145544504573e4d281e1300000005000600000000000900010018500109360000001400050003000700ce00b49c02000100010080003000038005000700000000000500070002000000190001003648016c0b2448041b011b160c0d2448001209303000000060005a805c0000801a0001000424023630480601480c12023648000218060300247200001400030006000c0002000300f7ff070000000700050006000200000018000100360612360c48160c011b0501360401042f01036005000700020000002c015a800c000180050004000100000018000280140003000900030009000100050007000100060090000080140005000010ff0f0600090007000400320002000500060001000000240001000c161b160312030136300c0c78361b161b063605241b60051b1104601616246c1400030006000400060001009cecf2000500ff000500060002000000050007000000000004000100050006000100000005000400000000001400050080ff0f000f0003007f000000ffff37007400008017000200063b310909123046203f503915422108193d2300040001001a00020002013417533d0e123e153b35541f4a1f5512192d0f29000014000300fbff0900040f09000001080005000010140003000600ff000400fdff050000006a9b0000060002000e0f00000500040001000000"], 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480), 0x10) 1.481617821s ago: executing program 2 (id=7902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000000740)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r5, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x1, 0xa, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @multicast, @local, @random="2c2fd5875365", @empty, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @remote]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) writev(r7, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0xf3a, 0x6) 1.404554126s ago: executing program 3 (id=7903): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r0, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockname$ax25(r0, 0x0, 0x0) 1.351021821s ago: executing program 4 (id=7904): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xd}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK={0x14, 0xfe, "71c4aaeafefb01e84a21a10e6ac58f4e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x400}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "3f140b531843ce3a3194ae99d7f9e308"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0fcb77f76618247ce8993885b4d53b75"}]}, 0x78}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0xffff0794, 0x4, 0x4, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x68}]}, 0x70}}, 0x8090) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000380)="a7e8bc8198372d623aeb29f6ddd61a4bd1e5f22bded8ccb61c13efd8201ce50baa93ef04677b3c2064ef70ad60876bee51fb565ce9f01e22b43500cf8aa5b7001643e3dc10c054666b490176c7c05a8712afc532401da30a6d2f2910e35f2f7a3240e427d592f63d1fe5a13da95383b218128092aa2ad07df1a3b87ef494e29eb74c78dd8216660b8cbe5d3995bf506e93f22f2e8a451515dba6eae678f74b52a9e605e5f6f39f787773b52cd77371f30800b3fe7696472f2e9e48ec388c5fb0cdfb0cc264f2ddc8fae14736aecc124682e4e3c00f10cb9e8738d8bdf0151f7e", 0xe0}, {&(0x7f0000000480)="7cd7acb1eb699790d47f440feacde70d4890619ab151b74652c24184e1048c862cdd463e9d3ef274225720f281dd14dc80369dc799677f2ef054fe8fb2b1dcf67db2fc66200c5fe5eb801b0fbf2f46675d23f5a489694d4dbca64d37d0fe27d450558ba9c4e46dbec9587d3deaefb54a45ad87e55fd82ff3eb75c3c2", 0x7c}], 0x2, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x50}, 0x8000) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480d4}, 0x8004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000740)={0xc, 0x0, 0x5a4daebc, 0x7, 0x80000001}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000780)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "44cca0dc36cea4"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001780)={{r6, 0xf2a, 0xf3, 0xfffffffffffff801, 0x7, 0x12000000000000, 0x69, 0x4, 0x81, 0x256, 0x10, 0x9, 0x1f6, 0x7f, 0x1}}) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000001880)={0x3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001b40)={&(0x7f00000018c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001940)={0x198, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee4f426c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31f}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc52d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r9 = accept(r2, &(0x7f0000001b80)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000001c00)=0x80) bind$can_raw(r9, &(0x7f0000001c40)={0x1d, r4}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000001c80)={'ip_vti0\x00', {0x2, 0x0, @private}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r10, &(0x7f0000002180)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002140)={&(0x7f0000001d00)={0x428, r0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0xe}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xd8, 0x111, 0x0, 0x1, {0xd4, 0x5, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x177}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x138}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2e8, 0x111, 0x0, 0x1, {0x2e4, 0x5, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x428}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040810) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f00000021c0)={{r2}, "aea6838c6b4802ef596322ab4c24c02e76a684c42fa819e33749886ec80fdaf1f9a704dc8dc0628eb8bebcc7eac7fbc1474cff9dbe6df4f91ff4b9aa5a651d189613944a5c37e6b1be12fbd11aca2b9895665cb591458fb0f6d9686c30cf352e137c66e5e3433c23b41bee4573dbea70bcd1984f6b1f1b9ab53286a4bfa77ce3548c8abe6eb8c2bc20d372d74158d097d29252ed6e03e8a06272584118937afa7c7cfe7c6e5c4ca418187902cdb344b5c479fd23fc6eac1ac29c14d1cd24b365171510a07567e54f241aaa289dbdd494904ce6ee0ae49875bce475769016921fc66afc97e6189ccc2d8232be229c54cee14fb96f5eacbd731b24c98a4553599493c2a6f090cfa6722adcca39435018a8f287741282cd204434fe9e7c0213e9e0ffe438c921419b3b8ffa6711deb1f283b8553b29cb0fb61fed1a0ead1a3cea4c1a58818c01122044940a9c1c5e1bb814da890cbb04d62d28416b2b880c3ad1f08bd2035f93783603fb07373b1fbd07519fc6faf27223862e85b8eefe7f6fa09f8d64e53677f37fedfe5bef6da49bbcc02acdb1cb91700f75a7b3e2ba26c8be4cdc99f4765e837f7dce41fa543e62e7e75ab88e1eb1f71fe8e29e52f6d8b5824f5d6032c6537a3bcbdb83d4410cec334de37c5ef985f416c1db1a6e76a0e4d81a2bf3faa67ffbaf3e318e07b63814b9e5fb3b585d095b0f0d9fbf6a0864175f2f1a4a5841587aff705e0265280027b291375ef8cfe922d3631c2ef33c3a4e096bfc511d9e45573ed8c3f81356013e7d1806ced6901e0908d0b099b004cd884f94c37b7b2edbe4b7b0399c54b464d676b6a87324bbd8641207d695a36c97a1cb66bb5d15780307c6868b641678adcc6947960f973208ac5c6d4d8475004bf9ae00f8a4a387b3d4b23eed417fd8c67b30e7ec8c01a3a36ced9ee1b8054ad2c2b453d3bf180d027822cd87a384fc85526153b3394f86bbee34755737ad2b247391fb64c09e7261ee1bd303d1e4c5d1c2263e21f5af9ee66f15f0fe612794e989cf87da6e3acdb247b136954df1b0ce707caaac7de069aa689c12b08acf1f4ab20f3561fab8c7ba5500282618c138bca8cc23a9186e55b00494c20c73d4334cb48ccaa747fe6e37cf72f77ec75791fa0fe299b7e3402882ddcdfbbd386fa46c945e43820266bca9bad53653e257d3a0215731e47deadada9958d2d403269908bd6a0a784e63b58b7fd73ce3a1cfe7bdb049bded2f6f9845244cfa852ae1188c96ad682ccfd9b874a4e8ec68b59554b13e7d675634cd6e976af4a059fbee9a15b0c84b406d1903b6c3b181a97ed464668bd68edcdf7a1ce430a06439b32b91375642ec25b699e3fff1f22f7d8e73cce82bc531c15eb21096e71ca08bf2d064357162b3a3062b2791655c134ceecfcc30a649fa558b39cc3ec1bd58ea770818788cbd5944a1f33fed29e56b53aadf0d82319a69edf0186abed93de3c6780e9aee3ef72a84dbdec1d0ebd07045e0b4e01f7f017047054183624d914d11ec3ef775d22a0d8db28ac024311cfe89c4efa7b825795a7fda606f18b8c874f5beebbbeb0051717b3cbf4254d909b7d53a2b27c1ba4fa268711e4dd85ee2f46bd7dd0a35c71b460f0bceb5ef84fc0ff39980e25709aeb337025ff8c27d74988519b962dd01d341e3d262a9534e1a2d3cadb053708c6770bf6529f167c8ca88164ceb6c0532f191ecf1587e23aab62cc84f2cd85ea19dd9fcbde8a1905b5f3fb4f28fbec6972cbdd565e566e448260ae20bcb96df66594e3fa5a9ce937e033ecb5139a28ee4f91cba6e993c44608f44fb6e748d6bdae070939327af2d219e3ca201d60381132dfe298b627959daac41b5aa3edf5d147d191f3379c531e5dbcfd26d759e6aef07dcdf81d3f3cb1384269a039c0c68f27dd78b6d1b3428c043cc8959e4395ac75bda5438a21ac518e0ee8cb7f6a763b824fa89ea926f47e99c162aa96d77db4e85f6e967df561d4a5661bbc268d7191760d32a4f345193bc7fb948623ded77b64d30b69dbf09b297b3c87bddec59843433b7bfcdac3d42ac20ee306347b811db96e0bf231ab4703f04ae29e633a81c4fefdfc15c899da26fa43b56a968b86f0c09caa8d5755d467848c7f44a4740fc43fe82f2a2d37dd0d8e87f05d1a5e047a7b19abc58a85f924400acbca0b69f2d6573d5fc348a7d6ce5c4c8f82700abe3adc705262c7626a020511bcb15cebe2f4644ef5cdb9cf960767b3733850e7451c0c8211f4b5b0b2a8df927bea23aa544b3e95d67184d11b4886c6e9ea21c1599254bc1787fad085d0d2b97776967666bf43048ca6da360f303fca7679b52e4e65be2a8d668ab625a185ae1f7df8a8df7ddbfccfc2beb42a4ae97684ef9badeaa4325ed85b40f5883afbb097e3709f613f011cd0b160cd7c27a0ca9866698d75ad5a5aff37e1001164c63f5285b8a0973607dfe51de71f21353336f8607f0696f3895ffeb8f1179229e7f98d5d78cc0c21dc041cc08ce38daba10cee1aeac2442cf85e155554b27cbea06252cb625156caf1871ffe54a10275dcc17f9a80cbbd21ff660c754b2ae2823118c1725005f4c8187c3c30fce0782005f060e5bd395555b0419544241804186805d43ff1beedaab0e07c6c919ee8a2eccc479f744c88a3dd0a3cb0055927143cd68dd123087f07995df559f2eda2afc4ace994d6de87a98f359d42de6fc3b9f44b151a67aaff9637401dc502ddd4836e72d4f6c7df47cffba9e4ecf1eb65628d5326bea0623d0271ab15ba0e83719c77b4562627064be6eca6506ad30d2f0a36999607c0dfc907ed02f9986ed57ebb2638e9f96d36657f857676630348e3d69b4ef32eede0a80d00bbf4e1fe0a436a158c7fa12c40376104e76df8b1180cf8d838babcd083159758644af01928ed3ecd93788736e36f0038fd8941a9abb4f2c0bf6fd2d50290bc1ffb7bc51f2551ecd5f68367fde6f6b564b2f99386d147fcac85450569cd0d854def6bc28c012592a05862fe8df63968c45ca606f28ab338ada89643097722dfd13cdd8567ec277360cc590debd1335b77fbc0bccc6cffa7c1716e3670b9c2ebe87503570264773b6d77836601acc6fc185934c375b576b415da6cf8912c2a8665c21b79be1d33ec29773d58800a0481ce9933008a94645455ef3aec9c9db58efb795d3a90e24d5ec4ad034b261f3577226a69745e8486f46945a6d2924cb4417c553925172d83dd4d102e9edcd894ea6be90745e786453f1abd6fe0409d8f387dd598cec63d3fbdc3609f244a56206fe257ac2bf03a9db36e20292137ce1976d02e1b6050dad0e839b91fdee96c061a1c0ea47cdca14f49e65343fc240a08d2b971837677047cf8f99a902fd7ade9f5d36334b084f8cfc5f4f323c54fd4c12affd45b0aa7f500800a1d43171eb6991245eda228b05a7e589c223eb903d0995bc7a42ccdad348cf5a822571b7fd61f732d8dc9277f167cdf3141b77524ef4777ec84c5c6625e5863705d79d13529c00790928220c2e52170c2b7585050ff11adefc3f335ee3d3429013f8401bb143744b498cc2b9a649c3199e9c77af625a57cc7302f7c522307e5773e4c7eb1ea0cafeb51323b008c80113063dedef109eb0695719315c96922bcf360d396f68c746beede407bdbe537665769786ff4036e0d72ebe00b016ef5c3fc481996679d4daeed46811eb944a17c372ce80dcf917916c600f0a287200b64c655f4704c6b6b1dba277a448e840d5521b44770b2ed35426a1e535de972278d596d7a5aa8aed4fa18791604a66cf7c14f79f02829af72b90dc1a2b14e0237445f1f9a3c9ffa860e1eb147b39ee521397afd27b0d87d5b5d629950453894a92d379430356b6e581bd4929bb8512597061c16a0735867f9a1346e17ea1cfa58823d2bb53431944a89a9b070bf92dde5059a6f7604cb8e002fc9b7efde80019009b91d5fc917cd11bdc5fc039531d8d72dcfd426dd9adc70626206caf0484468b9986dbc6ee9059ba9afc8721daa2dbd889c2e5d7024ac0b6fe53c08e15e1933fc136aa4ae8f398a8077ec603e9f88635f19932abbd31bdeb9f4266b984c4d11fe9c65bbb4d6647bd4ffdd56d838cc6f26123646350dcb93e8f342e63081ce31d0c5c0d891d6d35d279a164a4398773595ad829ea228c225b51823e976df8745218a6f58d9843fb98ec7b23e8f629d4c1d97930bbe36a8dd4f8fa227bec81bee2ad41b2cff6ec2733eb09749d53df86aae105b59801a2c8947e02f9d43bd61b5a1135f2dcf39e17a4f8ee696d8348b52e4b47bd4c904dae0023dd67e2df42fd38d27f18ae5dadb012dbd82ef6ee50ce0d14b608274b86f34fe428bc265f39a3c478b49b56bf76ae40104e4279dd579b53b70e0ce1d5dfaa37b7d92fe605aee46bec8103018845bf0c008a167a355fa5adde5dad5aac424a641c09758b251a77dea8d5611ec95efbbca1b36617c14dc6e42627b44bcceb16b115692e310315b795296e5cd3cb1823782c733ceb215b934993a3e20dc9534d0c0137a214bb28e3b21edc719064f7671130b9942a2bb80f38c5e626d187b0d468f9fc854c5bf7df212739c035819a1b68766f9f6b632d5611fef2b8bdfeca404ed5d03e523576575c41b8ab6022eff26a1b1062443a0a522f51b1377576eacaa88013197d4da7bcfa1f44ea864c39ad90ec3758a1d1325695e7a5fb25353263863c70dc818038e2a28658ba5fdd3107b1990ee44238b9a90486e3bbd0dc3f10c187f2cde44882e0bf2573614ffa1a8845d3bee52914e3fe3e12e3e150b96947bba87e87fe7b4f60413fb35a3ed67e5e27c4dc43c8a9b38c54dbeb423acb916522dc0d626b9c08d95f6b02eda3dc25a6b1ad9d8a08d4dfed41580f465e1e8ccf21cbed0152cdb59b547f3eeeca0061fb548ac73b8c0d425dd44c50872ec122e30753977319eefcd8f9ff21a27437ce6d2466ce6a08d921ea40448b9d11113bd9ab9da5d2a788474a626d0b7bd62a339cb9ef3a7577daa8cfb2346aa3ceed454a43ed5aa7d03caf5d6bd5463ed0b97283b623a4fc10a6226996745000cef1d90da58b0eb245228f1403d69a75f2115d664e8fb10e2f6006e3c3a73cf0bb02a6c586b392e21f185313bb3a79bfaf6ff4e308aff05f512cfeb12c06e2bff19ca91aab223aa1c46c111bd1be2a913efe697b2293d675764f4a5c74f748dba5c5cace43508103a3014c780508764202b07ad175711f873fc2385b916e77e3c383875d5d8add8390b6b94adac35c10cea4dd98cface16836b1726279b12c989b0d4ac5175eff5361a6842006a9ad6e518cbdde84babaae3567b5e1fe20b46c6f604e80838d94006e1e90b713afa15e692935b4051ed991f4031b90dd065018442978409df1924e30a0bd5aed8fa5fa07c654567afd8284d2894ce82252fc18c6808edb7cb3a9f15707864390d0348582680d4183142a7a167278a113f58f5774bc52ab3c1fce0443a5b862247c539d13aaf410e19616d71c2a6b83656c72ee369a399d641cc96eadf8e9f8d171f1690b2a4a3a06e27bdc72f6c2a60377b950c77161f0b8937058f5af32ece3cdb2a7b8d6cc7b675134c33b5dab51fee8c4471e42c13b58683e03d0c2a2f78004d0c7dedd0bcc301c6f079773b5f85cbda5acc937ec98404e34e0e38511b3a12c0b6b6f1a6c7189f4a2c8fc1433d8fbf2ece83ae3f1dfbb921d254b3d41144c010e57489506ff2e20189dd44d0cd20f22f5007cf5f8577ff3202b5ea99e6f101cf41b"}) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000003400)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003200)={0x1bc, 0x2, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x10, 0x6, 0x3, 0x39d6, 0x6, 0x3, 0xb100, 0x4, 0xc54a]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x26adf9b2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_LABELS_MASK={0x2c, 0x17, [0x4, 0x0, 0x0, 0x8001, 0x7, 0x9b, 0xd2e, 0x80000001, 0x6, 0x9d1]}, @CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xcf}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x76}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x5, 0x5}}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc0}, 0x40c0841) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000003500)={&(0x7f0000003440), 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x20, 0x1412, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003680)={&(0x7f0000003540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f0000003580)=""/235, 0x2d, 0xeb, 0x0, 0x6}, 0x28) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x583432e634476e94}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40040) 1.346362208s ago: executing program 1 (id=7905): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x55, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd73) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) 1.262077305s ago: executing program 0 (id=7906): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f00000000c0)={'wlan0\x00'}) (fail_nth: 5) 1.246394967s ago: executing program 3 (id=7907): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5c, r3, 0x400, 0x70bd2c, 0x25dfdc01, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0xc010) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000e40)={0xaa0, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xa58, 0x8, 0x0, 0x1, [{0x260, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8a13be83787c82b18e6aec0ff3371fa940f6ef78de29d78e1277f298e0fcd6ed"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "06b357be22b3564c0a86262de48f69333dd1bb8fe0f5337d146a421b48e9ca4f"}, @WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x764, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @mcast1, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_ALLOWEDIPS={0x16c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5078030e24dcfca675e734b4f2c33e53eaa333153730b7020ab896d98914f2a6"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2178726ac67c9a4787c95a8c66670a1aca1ad67a6bc2c100563cf975e761ce28"}, @WGPEER_A_ALLOWEDIPS={0x520, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x6}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa602, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6aa5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b76394440a54b31bd3cc9075896a882d08008a433b6f6a08fa66126a41793c3a"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000001010400000000000000000200"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 1.199449837s ago: executing program 2 (id=7908): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) r3 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) sendmsg$netlink(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)={0x50c, 0x12, 0x100, 0x70bd27, 0x25dfdbff, "", [@nested={0x19f, 0x2e, 0x0, 0x1, [@generic="5dd36f46c7e17edf30ab437f3e5b9911f0aa341df45fedfb4d3e3af08359267da0575be1a9b536d6f4532afc5969bd96af5d055998b9a834d73a41553a7b0f29f2128980e1878062afb5f5a8ed9d4797c0d79bff83d0c814456dbe26dd1aa458348e4722b424c7bda0ec006c555a96b7486cdcd19aad368d39ac", @nested={0x4, 0x151}, @nested={0x4, 0xc4}, @typed={0x5d, 0x4, 0x0, 0x0, @binary="0953887cecd98a6310ecb8bbcedad2f46ab1fc83fcdc6b59ee5556c89e13883fc2521222e5c5f9dcef734e05bda5802b133133991c02fcd90a71683fddd63bb6063a9ba7403c9c0e2c084b06463e371ecaaa82e1c6cdeeb7ba"}, @typed={0x8, 0x7c, 0x0, 0x0, @fd=r0}, @generic="141053d78174e9e1ec57aad5e77223da81ce87eff75bfe2ad5888f17f8dd3cbf241c4d275a3e63f183a88617eb9ca9f34bd2c861fc108f0f279de09369915892310b6306b1f55a4d2be5ac091b7e0390c1ba23ba454bd2f3cb3d457ee87903eb79200ee1da3a9d9accc53c3514613aa0a8b690e30bbbfab6427623063cf740aa7ac4bb57e027a82d6ff193c404c6c15d2247dfc978519f3d050629ef6e5243d343384ba7c03fa33912571d4a2c", @nested={0x4, 0xe9}]}, @generic="2eb2415fba5cd1570b084e21dc2f6630808f5a758c0c8e4bb67a7292e2c5caed557b7ebf8359d505173fceccf5e3155d00be79fe4a355f21e08411aee0d6f9d40630b76edbeb18929c7abcfb773be0a4c647d85333e24f72754be203f0ef402ebb1a380e7fb4104206ce39bbf751cede54c7bda11982a0dce3457223f892eda540a602930deab3936b3d4029235e80fcab693775f7bc3ccb0a16584c9bbc5e29d2aacdee634032e0c68b83b9d9fc5d11f7c0663dbce452d1a2ba8f5f11baa35d3e66ede86554b45f764d5e4792", @nested={0x270, 0x7b, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @pid=r2}, @typed={0xfb, 0x118, 0x0, 0x0, @binary="0a4b99dcf09ef105ba5d315632af96c2d9fdfb67a973d11fd8db0d53092c08548359615ce896dcacca0ab4f4eb685f454023481a2624f7a904fbab5ce4391504f7899bd0b609c8b1bbfcfa27a0b90f36dbda4df45e39975943d954a1e5f4820fc8c2b81dbc0bb7f77a726f35de287ce6b322e1c72af735f6b6df4fbb501f6f0f1a40023688eda8fe499f68e67158968ae49e33cd0b6f874680693f87468c8e05305761d072905082ebab5fd9a99375e0fdcb6f763d2db1c2a229ed8e16bb70de8461f698217a5f1f1ba5a1ad67fb57baa52c08040676269f62fe77747b514009b7ef9f2463c71eaa67c33cae34155adabdc7bd3c7418c8"}, @generic="ad4a993510b180a97e867d47158c7dc08e3d050c6b853984a72ed4117557e898a8d39cffd13da6e16e2e29ffff833bc2fac0cd58491abe7e2f76a6251caaf1f9f1914fb393671b5e5e709e69439ee56f3b5660317e1fa30a735749127681743029e67bf8ea7fd4c18debd8b8fe3625f8f0fdd031a5f11f4d3c9a116d067ffd8094a3ef7996e8abb57f73b4b5393824c0685e3edc1023179389ab22fd94d4c807", @typed={0xb9, 0xeb, 0x0, 0x0, @binary="5b555719e2064a01a893427539d828d51e8dae4c1fdf58e3eebab0a4f947e9d021ddfed01d89aa9a7bb2c57775411cc0342741894a40cade9dbef6a9461c28336fe82b08e68f8133db4e20210f3155205f7f787a3f2bb22659841b6647c39661b0436a4c6739ce520e0c0e91a03fecbb04f9df4e6248cc651d262997c20d1cbd76c90b480ff631e49103f9618524fc0b6108b3e8939c098704fd796437372d0b9df11af6143e28fd48c2c693facb4b8d4c3667e63f"}, @nested={0x4, 0xd3}, @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x14, 0xeb, 0x0, 0x1, [@nested={0x4, 0x151}, @nested={0x4, 0x123}, @nested={0x4, 0x11a}, @nested={0x4, 0x18}]}, @nested={0x8, 0xd6, 0x0, 0x1, [@nested={0x4, 0xe8}]}]}, 0x50c}, {&(0x7f0000000b40)={0x12c, 0x36, 0x400, 0x70bd27, 0x25dfdbfd, "", [@nested={0x8c, 0x130, 0x0, 0x1, [@typed={0xc, 0xb9, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x5c}, @generic="7d96cfc249180965bf4f3e5a26bc45bd3048a72e89f0bf5a925cb160daa51deef86e212c9fbd616f1b", @nested={0x4, 0xce}, @generic="0f3dc8436e59d1444172922dab8531430991c841ad7338afc86b44197813601acaf7f623443fcd3103deb770d18a87fe2c665df863ea91b69b329777bdacc33701143a13ce9dca", @nested={0x4, 0xb3}]}, @nested={0x84, 0xf1, 0x0, 0x1, [@typed={0x7d, 0xa9, 0x0, 0x0, @binary="a54ddda06ceb9e679380a2025b7c60511124e14e2ff52a496c2374fed9128ce83e9e591a42d4017bb87f2964706a641a8ea63701449d967c7e09b40eb445c55d4271208ff122ea77c80feadc3e0ddc056f42f8e6ca1011bee1ed676cd721fa899a673b8e2e8448eb480317374774bc9101d9879d4d0f77b067"}]}, @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="60f32c"]}, 0x12c}], 0x2, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x20, 0x40001}, 0x24008881) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, 0x80646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x41}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x3fe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.199206332s ago: executing program 1 (id=7909): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x10, 0x5e, 0xe25}, 0x10}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x5, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x10001, 0x10, 0x28000, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xd, @value=r1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$FIONCLEX(r1, 0x5450) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x5000000) 1.198644416s ago: executing program 4 (id=7910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c"], 0x34}}, 0x0) 892.884273ms ago: executing program 0 (id=7911): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) (fail_nth: 49) 865.154087ms ago: executing program 4 (id=7912): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x700, 0x20, 0x9, 0x8, {{0x7, 0x4, 0x1, 0x10, 0x1c, 0x4, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0x7, 0x11, [@dev={0xac, 0x14, 0x14, 0x17}]}]}}}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0000001803010300dfffc400100060a057a200b02100ff0200000074785646000000000000000000000001200100000000000000000000000000024e214e2104d190781299e0a20662aa26a2c19499501ce6ec38ffc380b39e7ec54e2de359b35febd551123ddf4aaf823259d065564684b1431e4d9745323b06ddc496405007bb0d00043ae2e832815bec7e2a25981882e27fc4a957b405c23c8292f23f2db0b77edd6dd1720a1b60408c8c909c55f76279472bd512ad730eeb8ac8e008f73e32c4bbf970702bf500545592a8cfff8d00caa0b29ec85f1f14ffa41357df006206cfd9fd8ca9"], 0xe6) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'rose0\x00', {}, 0x5}) 765.010432ms ago: executing program 2 (id=7913): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c0483b6b8ce89e56", "4a03639d8d99a58f5b25367849f165e72228fc8a4e87c95b54c413d19ff43059", "5b2b1757", "54f5bf23d64b69c7"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x14, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0xe, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r14, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 763.88024ms ago: executing program 3 (id=7914): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe0, 0x3}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xfffffff9}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000001}]}}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140006000000900010073797a30"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_POLICE={0x88, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xec, 0x7, 0x7fff, 0x9, 0x100, {0x0, 0x1, 0x0, 0x101, 0x5, 0x6}, {0x6, 0x0, 0x6, 0xf1, 0x6, 0x1}, 0x8, 0xfffffffe, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x86, 0x5, 0x200, 0x400, 0x2000002, {0x10, 0x1, 0x5, 0x983, 0xc, 0x3}, {0x5, 0x0, 0xf, 0x6, 0x4, 0x73b}, 0x40, 0x4, 0x7}}]}]}}]}, 0xbc}}, 0x2004c840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x80044942, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r6, 0x3}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x3}}, 0x0, 0x1, 0x3, 0xb0, 0xb}, &(0x7f0000000000)=0x98) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000840)={'filter\x00', 0x0, 0x0, 0x0, [0xcfcd, 0x0, 0x100, 0x9, 0x3, 0x2], 0x5, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000940)=ANY=[@ANYBLOB="52430fc1ebe70f8870a56ecbdf79c112113ed3c96e595c064a143008633e201b5ee4f2b38a7cf84ec1a17db942050f5b5dd4c31cc7504bb49998597dab7de27289b01bf4480f68d79ac47a95746545963f42e5dc8852888e7d95733c001c208f147513d0640e77c0d414ff1754f13e27c09904b6cd52c65808cdf8b6a370311046732eee6759431a80a6e81ebb5a4812b240e325a550b3e645351a2b7edcb88103fc8b00"/176, @ANYRES16=r13, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00012abd7000fcdbdf253d00000008005d000000000008005d000100000008005d000100000008005d000000000008005d000000000008005d000000000008005d0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES16=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000080)={r10, 0x9, 0x6, [0x2, 0x4, 0xffff, 0xb, 0x0, 0x12]}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="64ecbf8e550e2d1c9170d366d59aa9b6265f26e8fc4ec843281c865acc2b8bedc0cb1958912d80bfe55aa8a0dc8c85e4a1d6a89afda9825d5648c7a4c2faeb2414ce07da3b067edd3aba102c154031547cd8953cd0c1912aa11eed91a0020a8a91aab12f62f9fe5175475f", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 371.477644ms ago: executing program 0 (id=7915): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3ff, @default, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0x1, 0x2}], 0x80) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) 362.52757ms ago: executing program 4 (id=7916): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300)=0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x8}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x2, 0x0, 0x5dfdbfb, {0x0, 0x0, 0x0, r7}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0xc004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x6, 0xf4, 0x2, 0x5, 0x69, @mcast2, @mcast2, 0x1, 0x10, 0xfffffff9, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x8004) write(r0, &(0x7f0000000080)="7addd2246ea39cff32c58f86ef3bed2ec2ce13fa01b73aff88b05aaae4f8d581b2169c591a992c1f096fe960ef7ae91262ca249b85cab0bdf1b2b16dc742f3edfff7a118ba252b7f3211b555b163354970422e822bd44c7479b4b113137af568a06750", 0x63) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200)=0x6, 0x4) (rerun: 64) 273.22622ms ago: executing program 0 (id=7917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x2000000, 0xb5}, {0x8000000000000000, 0x8, 0x0, 0x300}}}, 0xb8}}, 0x0) 223.538702ms ago: executing program 4 (id=7918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) write(r3, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x8) 170.69071ms ago: executing program 1 (id=7919): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 152.475457ms ago: executing program 4 (id=7920): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f00000000c0)=0xe) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 79.537424ms ago: executing program 2 (id=7921): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) 78.889129ms ago: executing program 0 (id=7922): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000600000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 65.7632ms ago: executing program 1 (id=7923): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 1 (id=7924): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32=r0], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 6698] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 651.847026][T26698] ? __pfx_vfs_write+0x10/0x10 [ 651.847072][T26698] ? __fget_files+0x2a/0x420 [ 651.847106][T26698] ksys_write+0x145/0x250 [ 651.847142][T26698] ? __pfx_ksys_write+0x10/0x10 [ 651.847179][T26698] ? do_syscall_64+0xbe/0xfa0 [ 651.847218][T26698] do_syscall_64+0xfa/0xfa0 [ 651.847249][T26698] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.847281][T26698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.847304][T26698] ? clear_bhb_loop+0x60/0xb0 [ 651.847332][T26698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.847354][T26698] RIP: 0033:0x7f0a18d8f749 [ 651.847375][T26698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.847396][T26698] RSP: 002b:00007f0a19c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.847420][T26698] RAX: ffffffffffffffda RBX: 00007f0a18fe5fa0 RCX: 00007f0a18d8f749 [ 651.847437][T26698] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 651.847452][T26698] RBP: 00007f0a19c74090 R08: 0000000000000000 R09: 0000000000000000 [ 651.847466][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.847481][T26698] R13: 00007f0a18fe6038 R14: 00007f0a18fe5fa0 R15: 00007ffd3a014a28 [ 651.847521][T26698] [ 652.313943][T26701] bond14: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 652.336976][T26701] bond14: entered promiscuous mode [ 652.393690][T26701] bond14: entered allmulticast mode [ 652.400855][T26701] 8021q: adding VLAN 0 to HW filter on device bond14 [ 652.547567][T26718] netlink: 'syz.2.6921': attribute type 1 has an invalid length. [ 652.566939][T26720] sctp: [Deprecated]: syz.0.6923 (pid 26720) Use of int in maxseg socket option. [ 652.566939][T26720] Use struct sctp_assoc_value instead [ 652.582381][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6921'. [ 652.593951][T26722] sctp: [Deprecated]: syz.0.6923 (pid 26722) Use of int in maxseg socket option. [ 652.593951][T26722] Use struct sctp_assoc_value instead [ 653.136240][T26746] FAULT_INJECTION: forcing a failure. [ 653.136240][T26746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.182895][T26746] CPU: 1 UID: 0 PID: 26746 Comm: syz.3.6936 Not tainted syzkaller #0 PREEMPT(full) [ 653.182929][T26746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.182944][T26746] Call Trace: [ 653.182953][T26746] [ 653.182964][T26746] dump_stack_lvl+0x189/0x250 [ 653.183001][T26746] ? __pfx____ratelimit+0x10/0x10 [ 653.183034][T26746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.183066][T26746] ? __pfx__printk+0x10/0x10 [ 653.183090][T26746] ? __might_fault+0xb0/0x130 [ 653.183138][T26746] should_fail_ex+0x414/0x560 [ 653.183178][T26746] _copy_from_iter+0x1de/0x1790 [ 653.183207][T26746] ? __lock_acquire+0xab9/0xd20 [ 653.183245][T26746] ? __pfx__copy_from_iter+0x10/0x10 [ 653.183290][T26746] tun_get_user+0x488/0x3e90 [ 653.183343][T26746] ? aa_file_perm+0x44d/0x1550 [ 653.183366][T26746] ? __pfx_tun_get_user+0x10/0x10 [ 653.183393][T26746] ? _parse_integer_limit+0x1ae/0x1f0 [ 653.183425][T26746] ? __lock_acquire+0xab9/0xd20 [ 653.183455][T26746] ? ref_tracker_alloc+0x318/0x460 [ 653.183475][T26746] ? __lock_acquire+0xab9/0xd20 [ 653.183499][T26746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 653.183528][T26746] ? tun_get+0x1c/0x2f0 [ 653.183561][T26746] ? tun_get+0x1c/0x2f0 [ 653.183587][T26746] ? tun_get+0x1c/0x2f0 [ 653.183621][T26746] tun_chr_write_iter+0x113/0x200 [ 653.183651][T26746] vfs_write+0x5c9/0xb30 [ 653.183697][T26746] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 653.183726][T26746] ? __pfx_vfs_write+0x10/0x10 [ 653.183770][T26746] ? __fget_files+0x2a/0x420 [ 653.183805][T26746] ksys_write+0x145/0x250 [ 653.183840][T26746] ? __pfx_ksys_write+0x10/0x10 [ 653.183878][T26746] ? do_syscall_64+0xbe/0xfa0 [ 653.183916][T26746] do_syscall_64+0xfa/0xfa0 [ 653.183947][T26746] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.183980][T26746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.184003][T26746] ? clear_bhb_loop+0x60/0xb0 [ 653.184030][T26746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.184052][T26746] RIP: 0033:0x7fecadd8f749 [ 653.184071][T26746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.184090][T26746] RSP: 002b:00007fecaec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.184120][T26746] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8f749 [ 653.184137][T26746] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 653.184152][T26746] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000000 [ 653.184167][T26746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.184181][T26746] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 653.184221][T26746] [ 653.476306][T26756] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 654.036500][T26786] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 654.114895][T26794] FAULT_INJECTION: forcing a failure. [ 654.114895][T26794] name failslab, interval 1, probability 0, space 0, times 0 [ 654.151806][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6956'. [ 654.170754][T26794] CPU: 0 UID: 0 PID: 26794 Comm: syz.3.6955 Not tainted syzkaller #0 PREEMPT(full) [ 654.170787][T26794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.170802][T26794] Call Trace: [ 654.170812][T26794] [ 654.170822][T26794] dump_stack_lvl+0x189/0x250 [ 654.170860][T26794] ? __pfx____ratelimit+0x10/0x10 [ 654.170892][T26794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.170923][T26794] ? __pfx__printk+0x10/0x10 [ 654.170955][T26794] ? __pfx___might_resched+0x10/0x10 [ 654.170979][T26794] ? fs_reclaim_acquire+0x7d/0x100 [ 654.171022][T26794] should_fail_ex+0x414/0x560 [ 654.171064][T26794] should_failslab+0xa8/0x100 [ 654.171090][T26794] kmem_cache_alloc_node_noprof+0x77/0x710 [ 654.171123][T26794] ? __alloc_skb+0x112/0x2d0 [ 654.171153][T26794] __alloc_skb+0x112/0x2d0 [ 654.171180][T26794] alloc_skb_with_frags+0xca/0x890 [ 654.171223][T26794] sock_alloc_send_pskb+0x84d/0x980 [ 654.171275][T26794] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 654.171331][T26794] ? iov_iter_advance+0x8b/0x1c0 [ 654.171363][T26794] tun_get_user+0xa43/0x3e90 [ 654.171416][T26794] ? aa_file_perm+0x44d/0x1550 [ 654.171439][T26794] ? __pfx_tun_get_user+0x10/0x10 [ 654.171467][T26794] ? _parse_integer_limit+0x1ae/0x1f0 [ 654.171501][T26794] ? __lock_acquire+0xab9/0xd20 [ 654.171532][T26794] ? ref_tracker_alloc+0x318/0x460 [ 654.171553][T26794] ? __lock_acquire+0xab9/0xd20 [ 654.171578][T26794] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 654.171608][T26794] ? tun_get+0x1c/0x2f0 [ 654.171643][T26794] ? tun_get+0x1c/0x2f0 [ 654.171670][T26794] ? tun_get+0x1c/0x2f0 [ 654.171703][T26794] tun_chr_write_iter+0x113/0x200 [ 654.171736][T26794] vfs_write+0x5c9/0xb30 [ 654.171781][T26794] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 654.171811][T26794] ? __pfx_vfs_write+0x10/0x10 [ 654.171857][T26794] ? __fget_files+0x2a/0x420 [ 654.171891][T26794] ksys_write+0x145/0x250 [ 654.171927][T26794] ? __pfx_ksys_write+0x10/0x10 [ 654.171964][T26794] ? do_syscall_64+0xbe/0xfa0 [ 654.172003][T26794] do_syscall_64+0xfa/0xfa0 [ 654.172035][T26794] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.172069][T26794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.172092][T26794] ? clear_bhb_loop+0x60/0xb0 [ 654.172121][T26794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.172144][T26794] RIP: 0033:0x7fecadd8f749 [ 654.172165][T26794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.172185][T26794] RSP: 002b:00007fecaec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.172209][T26794] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8f749 [ 654.172227][T26794] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 654.172242][T26794] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000000 [ 654.172256][T26794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.172270][T26794] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 654.172317][T26794] [ 654.712800][T26810] FAULT_INJECTION: forcing a failure. [ 654.712800][T26810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.774788][T26810] CPU: 0 UID: 0 PID: 26810 Comm: syz.1.6961 Not tainted syzkaller #0 PREEMPT(full) [ 654.774820][T26810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.774834][T26810] Call Trace: [ 654.774843][T26810] [ 654.774853][T26810] dump_stack_lvl+0x189/0x250 [ 654.774889][T26810] ? __pfx____ratelimit+0x10/0x10 [ 654.774922][T26810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.774953][T26810] ? __pfx__printk+0x10/0x10 [ 654.774980][T26810] ? fs_reclaim_acquire+0x7d/0x100 [ 654.775027][T26810] should_fail_ex+0x414/0x560 [ 654.775069][T26810] prepare_alloc_pages+0x213/0x610 [ 654.775101][T26810] __alloc_frozen_pages_noprof+0x123/0x370 [ 654.775132][T26810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 654.775168][T26810] ? policy_nodemask+0x27c/0x720 [ 654.775211][T26810] alloc_pages_mpol+0x232/0x4a0 [ 654.775241][T26810] vma_alloc_folio_noprof+0xe4/0x200 [ 654.775267][T26810] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 654.775295][T26810] ? do_raw_spin_unlock+0x122/0x240 [ 654.775336][T26810] folio_prealloc+0x30/0x180 [ 654.775374][T26810] __handle_mm_fault+0x2a8b/0x5400 [ 654.775427][T26810] ? __pfx___handle_mm_fault+0x10/0x10 [ 654.775483][T26810] ? __pfx___might_resched+0x10/0x10 [ 654.775515][T26810] handle_mm_fault+0x40a/0x8e0 [ 654.775559][T26810] __get_user_pages+0x165c/0x2a00 [ 654.775639][T26810] __gup_longterm_locked+0xde4/0x1660 [ 654.775686][T26810] ? sanity_check_pinned_pages+0x1241/0x1300 [ 654.775719][T26810] ? gup_fast_fallback+0x1b86/0x22d0 [ 654.775754][T26810] gup_fast_fallback+0x1d65/0x22d0 [ 654.775835][T26810] ? __pfx_gup_fast_fallback+0x10/0x10 [ 654.775867][T26810] ? rds_info_getsockopt+0x1db/0x470 [ 654.775903][T26810] ? rcu_is_watching+0x15/0xb0 [ 654.775931][T26810] ? is_valid_gup_args+0x11f/0x200 [ 654.775965][T26810] ? pin_user_pages_fast+0x4d/0xb0 [ 654.775998][T26810] rds_info_getsockopt+0x1fb/0x470 [ 654.776038][T26810] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 654.776073][T26810] ? __might_fault+0xb0/0x130 [ 654.776111][T26810] ? rds_getsockopt+0x2b4/0x500 [ 654.776135][T26810] ? __pfx_rds_getsockopt+0x10/0x10 [ 654.776162][T26810] do_sock_getsockopt+0x372/0x450 [ 654.776193][T26810] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 654.776218][T26810] ? do_syscall_64+0xa0/0xfa0 [ 654.776250][T26810] ? __fget_files+0x2a/0x420 [ 654.776271][T26810] ? __fget_files+0x3a0/0x420 [ 654.776292][T26810] ? __fget_files+0x2a/0x420 [ 654.776324][T26810] __x64_sys_getsockopt+0x1a5/0x250 [ 654.776348][T26810] ? do_syscall_64+0xa0/0xfa0 [ 654.776384][T26810] ? do_syscall_64+0xa0/0xfa0 [ 654.776422][T26810] do_syscall_64+0xfa/0xfa0 [ 654.776453][T26810] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.776486][T26810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.776509][T26810] ? clear_bhb_loop+0x60/0xb0 [ 654.776538][T26810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.776560][T26810] RIP: 0033:0x7f0a18d8f749 [ 654.776589][T26810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.776609][T26810] RSP: 002b:00007f0a19c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 654.776634][T26810] RAX: ffffffffffffffda RBX: 00007f0a18fe5fa0 RCX: 00007f0a18d8f749 [ 654.776651][T26810] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 654.776666][T26810] RBP: 00007f0a19c74090 R08: 0000200000000000 R09: 0000000000000000 [ 654.776682][T26810] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 654.776696][T26810] R13: 00007f0a18fe6038 R14: 00007f0a18fe5fa0 R15: 00007ffd3a014a28 [ 654.776737][T26810] [ 655.609839][T26848] netlink: 'syz.2.6973': attribute type 10 has an invalid length. [ 655.624087][T26848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6973'. [ 655.798127][T26858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6979'. [ 655.840433][T26858] : entered promiscuous mode [ 655.984045][T26866] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6982'. [ 656.232616][T26883] netlink: 'syz.0.6988': attribute type 10 has an invalid length. [ 656.264825][T26883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6988'. [ 656.307561][T26885] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6989'. [ 656.329980][T26885] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6989'. [ 656.775060][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6999'. [ 656.803644][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6999'. [ 656.938242][T26924] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7003'. [ 657.107842][T26930] netlink: 'syz.3.7006': attribute type 5 has an invalid length. [ 657.125166][T26930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7006'. [ 657.497745][T26952] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 657.540004][T26957] netlink: 324 bytes leftover after parsing attributes in process `syz.4.7015'. [ 657.733669][T26966] netlink: 'syz.1.7018': attribute type 10 has an invalid length. [ 658.795266][T27024] netlink: 'syz.0.7037': attribute type 3 has an invalid length. [ 659.142524][T27038] netlink: 'syz.4.7042': attribute type 83 has an invalid length. [ 659.304648][T27044] tipc: Enabling of bearer rejected, already enabled [ 659.317282][T27048] netlink: 'syz.4.7047': attribute type 1 has an invalid length. [ 659.326667][T27044] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 659.336682][T27044] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 659.360912][T27044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 659.412175][T27044] tipc: Resetting bearer [ 659.532035][T27059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 659.727953][T27073] openvswitch: netlink: IP tunnel dst address not specified [ 660.205591][T27101] Cannot find set identified by id 3 to match [ 660.411063][T27114] FAULT_INJECTION: forcing a failure. [ 660.411063][T27114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 660.434927][T27114] CPU: 1 UID: 0 PID: 27114 Comm: syz.3.7069 Not tainted syzkaller #0 PREEMPT(full) [ 660.434960][T27114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.434974][T27114] Call Trace: [ 660.434984][T27114] [ 660.434995][T27114] dump_stack_lvl+0x189/0x250 [ 660.435033][T27114] ? __pfx____ratelimit+0x10/0x10 [ 660.435065][T27114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.435102][T27114] ? __pfx__printk+0x10/0x10 [ 660.435127][T27114] ? fs_reclaim_acquire+0x7d/0x100 [ 660.435175][T27114] should_fail_ex+0x414/0x560 [ 660.435216][T27114] prepare_alloc_pages+0x213/0x610 [ 660.435249][T27114] __alloc_frozen_pages_noprof+0x123/0x370 [ 660.435279][T27114] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 660.435316][T27114] ? policy_nodemask+0x27c/0x720 [ 660.435336][T27114] ? __lock_acquire+0xab9/0xd20 [ 660.435366][T27114] alloc_pages_mpol+0x232/0x4a0 [ 660.435396][T27114] vma_alloc_folio_noprof+0xe4/0x200 [ 660.435420][T27114] ? page_table_check_set+0x18d/0x730 [ 660.435454][T27114] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 660.435494][T27114] folio_prealloc+0x30/0x180 [ 660.435531][T27114] __handle_mm_fault+0x2a8b/0x5400 [ 660.435584][T27114] ? __pfx___handle_mm_fault+0x10/0x10 [ 660.435634][T27114] ? follow_page_pte+0x7ef/0x13e0 [ 660.435676][T27114] handle_mm_fault+0x40a/0x8e0 [ 660.435721][T27114] __get_user_pages+0x165c/0x2a00 [ 660.435801][T27114] __gup_longterm_locked+0xde4/0x1660 [ 660.435850][T27114] ? sanity_check_pinned_pages+0x1241/0x1300 [ 660.435882][T27114] ? gup_fast_fallback+0x1b86/0x22d0 [ 660.435917][T27114] gup_fast_fallback+0x1d65/0x22d0 [ 660.435993][T27114] ? __pfx_gup_fast_fallback+0x10/0x10 [ 660.436025][T27114] ? rds_info_getsockopt+0x1db/0x470 [ 660.436061][T27114] ? rcu_is_watching+0x15/0xb0 [ 660.436088][T27114] ? is_valid_gup_args+0x11f/0x200 [ 660.436121][T27114] ? pin_user_pages_fast+0x4d/0xb0 [ 660.436155][T27114] rds_info_getsockopt+0x1fb/0x470 [ 660.436195][T27114] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 660.436231][T27114] ? __might_fault+0xb0/0x130 [ 660.436268][T27114] ? rds_getsockopt+0x2b4/0x500 [ 660.436292][T27114] ? __pfx_rds_getsockopt+0x10/0x10 [ 660.436320][T27114] do_sock_getsockopt+0x372/0x450 [ 660.436350][T27114] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 660.436375][T27114] ? do_syscall_64+0xa0/0xfa0 [ 660.436408][T27114] ? __fget_files+0x2a/0x420 [ 660.436429][T27114] ? __fget_files+0x3a0/0x420 [ 660.436450][T27114] ? __fget_files+0x2a/0x420 [ 660.436482][T27114] __x64_sys_getsockopt+0x1a5/0x250 [ 660.436506][T27114] ? do_syscall_64+0xa0/0xfa0 [ 660.436541][T27114] ? do_syscall_64+0xa0/0xfa0 [ 660.436579][T27114] do_syscall_64+0xfa/0xfa0 [ 660.436610][T27114] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.436644][T27114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.436668][T27114] ? clear_bhb_loop+0x60/0xb0 [ 660.436696][T27114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.436719][T27114] RIP: 0033:0x7fecadd8f749 [ 660.436740][T27114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.436760][T27114] RSP: 002b:00007fecaec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 660.436784][T27114] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8f749 [ 660.436808][T27114] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 660.436823][T27114] RBP: 00007fecaec17090 R08: 0000200000000000 R09: 0000000000000000 [ 660.436838][T27114] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 660.436853][T27114] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 660.436894][T27114] [ 661.063251][T27126] __nla_validate_parse: 6 callbacks suppressed [ 661.063273][T27126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7074'. [ 661.421162][T27142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7081'. [ 661.437776][T27147] netlink: 'syz.3.7083': attribute type 1 has an invalid length. [ 661.456188][T27142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7081'. [ 661.532992][T27151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7083'. [ 661.822384][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7088'. [ 661.963946][T27168] bond11: Removing last arp target with arp_interval on [ 662.145403][T27183] veth0: entered promiscuous mode [ 662.162005][T27178] veth0: left promiscuous mode [ 662.191789][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7096'. [ 662.217938][T27186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7096'. [ 662.262807][T27192] sch_fq: defrate 1024 ignored. [ 662.355716][T27201] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 662.482588][T27210] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7103'. [ 662.677743][T27226]  speed is unknown, defaulting to 1000 [ 662.705641][T27226] lo speed is unknown, defaulting to 1000 [ 662.866796][T27237] netlink: 'syz.0.7110': attribute type 13 has an invalid length. [ 662.885338][T27237] netlink: 'syz.0.7110': attribute type 17 has an invalid length. [ 662.915884][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7112'. [ 662.972876][T27241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7112'. [ 662.992319][T27237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.142395][T27243] netlink: 'syz.4.7114': attribute type 1 has an invalid length. [ 663.219771][T27243] bond16: entered promiscuous mode [ 663.225705][T27243] 8021q: adding VLAN 0 to HW filter on device bond16 [ 663.328129][T27255] netlink: 'syz.1.7117': attribute type 10 has an invalid length. [ 664.072552][T27293] netlink: 'syz.0.7127': attribute type 11 has an invalid length. [ 664.090087][T27289] netlink: 'syz.0.7127': attribute type 83 has an invalid length. [ 664.262716][T27298] netlink: 'syz.0.7130': attribute type 1 has an invalid length. [ 664.266955][T27258] warn_alloc: 1 callbacks suppressed [ 664.266983][T27258] syz.4.7119: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 664.298137][T27298] netlink: 'syz.0.7130': attribute type 2 has an invalid length. [ 664.306328][T27299] netlink: 'syz.1.7131': attribute type 64 has an invalid length. [ 664.320095][T27258] CPU: 1 UID: 0 PID: 27258 Comm: syz.4.7119 Not tainted syzkaller #0 PREEMPT(full) [ 664.320130][T27258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.320146][T27258] Call Trace: [ 664.320156][T27258] [ 664.320167][T27258] dump_stack_lvl+0x189/0x250 [ 664.320212][T27258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.320245][T27258] ? __pfx__printk+0x10/0x10 [ 664.320270][T27258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 664.320305][T27258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 664.320341][T27258] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 664.320379][T27258] warn_alloc+0x214/0x310 [ 664.320424][T27258] ? __pfx_warn_alloc+0x10/0x10 [ 664.320482][T27258] ? __get_vm_area_node+0x28f/0x300 [ 664.320517][T27258] ? translate_table+0x198/0x2000 [ 664.320551][T27258] __vmalloc_node_range_noprof+0x690/0x12d0 [ 664.320623][T27258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 664.320658][T27258] ? translate_table+0x198/0x2000 [ 664.320690][T27258] ? rcu_is_watching+0x15/0xb0 [ 664.320720][T27258] ? translate_table+0x198/0x2000 [ 664.320749][T27258] __kvmalloc_node_noprof+0x674/0x910 [ 664.320787][T27258] ? translate_table+0x198/0x2000 [ 664.320813][T27258] ? do_ipt_set_ctl+0x881/0xcd0 [ 664.320838][T27258] ? nf_setsockopt+0x26f/0x290 [ 664.320868][T27258] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 664.320892][T27258] ? do_syscall_64+0xfa/0xfa0 [ 664.320936][T27258] translate_table+0x198/0x2000 [ 664.320983][T27258] ? __lock_acquire+0xab9/0xd20 [ 664.321013][T27258] ? __pfx_translate_table+0x10/0x10 [ 664.321045][T27258] ? __might_fault+0xb0/0x130 [ 664.321105][T27258] ? _copy_from_user+0x94/0xb0 [ 664.321144][T27258] do_ipt_set_ctl+0x967/0xcd0 [ 664.321177][T27258] ? rcu_is_watching+0x15/0xb0 [ 664.321206][T27258] ? trace_contention_end+0x39/0x120 [ 664.321236][T27258] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 664.321294][T27258] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 664.321347][T27258] ? __pfx_aa_sk_perm+0x10/0x10 [ 664.321387][T27258] nf_setsockopt+0x26f/0x290 [ 664.321420][T27258] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 664.321464][T27258] do_sock_setsockopt+0x17c/0x1b0 [ 664.321495][T27258] __x64_sys_setsockopt+0x13f/0x1b0 [ 664.321527][T27258] do_syscall_64+0xfa/0xfa0 [ 664.321561][T27258] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.321596][T27258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.321620][T27258] ? clear_bhb_loop+0x60/0xb0 [ 664.321649][T27258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.321673][T27258] RIP: 0033:0x7f042798f749 [ 664.321696][T27258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.321717][T27258] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 664.321743][T27258] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 664.321761][T27258] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 664.321776][T27258] RBP: 00007f0427a13f91 R08: 00000000000002a8 R09: 0000000000000000 [ 664.321791][T27258] R10: 0000200000001a40 R11: 0000000000000246 R12: 0000000000000000 [ 664.321806][T27258] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 664.321848][T27258] [ 664.321858][T27258] Mem-Info: [ 664.346703][T27298] netlink: 'syz.0.7130': attribute type 2 has an invalid length. [ 664.358421][T27258] active_anon:4748 inactive_anon:0 isolated_anon:0 [ 664.358421][T27258] active_file:3795 inactive_file:40104 isolated_file:0 [ 664.358421][T27258] unevictable:768 dirty:125 writeback:0 [ 664.358421][T27258] slab_reclaimable:14595 slab_unreclaimable:161763 [ 664.358421][T27258] mapped:29641 shmem:1354 pagetables:1104 [ 664.358421][T27258] sec_pagetables:0 bounce:0 [ 664.358421][T27258] kernel_misc_reclaimable:0 [ 664.358421][T27258] free:1244173 free_pcp:9841 free_cma:0 [ 664.450599][T27301] syzkaller1: entered promiscuous mode [ 664.476177][T27258] Node 0 active_anon:19092kB inactive_anon:0kB active_file:15180kB inactive_file:160212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118764kB dirty:496kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14308kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 664.538709][T27301] syzkaller1: entered allmulticast mode [ 664.556301][T27258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 664.775158][T27258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.835644][T27310] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 664.873942][T27258] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 664.881148][T27258] Node 0 DMA32 free:1062876kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19192kB inactive_anon:0kB active_file:15180kB inactive_file:160212kB unevictable:1536kB writepending:496kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:27536kB local_pcp:14988kB free_cma:0kB [ 664.916369][T27258] lowmem_reserve[]: 0 0 0 0 0 [ 664.921792][T27258] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.986431][T27258] lowmem_reserve[]: 0 0 0 0 0 [ 664.998491][T27258] Node 1 Normal free:3898456kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10816kB local_pcp:4000kB free_cma:0kB [ 665.051572][T27258] lowmem_reserve[]: 0 0 0 0 0 [ 665.056986][T27258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 665.071732][T27258] Node 0 DMA32: 884*4kB (M) 294*8kB (UM) 248*16kB (UM) 126*32kB (UM) 43*64kB (ME) 26*128kB (ME) 3*256kB (M) 3*512kB (M) 16*1024kB (UM) 5*2048kB (UME) 244*4096kB (UM) = 1048320kB [ 665.102817][T27258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 665.116631][T27258] Node 1 Normal: 222*4kB (UME) 60*8kB (UME) 42*16kB (UME) 233*32kB (UME) 85*64kB (UME) 14*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3898456kB [ 665.137755][T27258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.232507][T27258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 665.249154][T27329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.256459][T27329] IPv6: NLM_F_CREATE should be set when creating new route [ 665.259718][T27258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.263804][T27329] IPv6: NLM_F_CREATE should be set when creating new route [ 665.334089][T27258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 665.362130][T27258] 45685 total pagecache pages [ 665.368253][T27258] 0 pages in swap cache [ 665.378832][T27258] Free swap = 124996kB [ 665.383287][T27258] Total swap = 124996kB [ 665.387495][T27258] 2097051 pages RAM [ 665.409612][T27258] 0 pages HighMem/MovableOnly [ 665.424682][T27258] 424122 pages reserved [ 665.434822][T27258] 0 pages cma reserved [ 665.660216][T27336] xt_limit: Overflow, try lower: 604147548/4200216962 [ 665.820832][T27339] tipc: Enabling of bearer rejected, already enabled [ 665.830530][T27339] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 665.839660][T27339] netem: change failed [ 666.670956][T27361] __nla_validate_parse: 9 callbacks suppressed [ 666.670981][T27361] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7154'. [ 666.807075][T27366] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7155'. [ 667.067397][T27377] bond8: left promiscuous mode [ 667.126182][T27377] bridge0: port 3(bond8) entered disabled state [ 667.145506][T27377] bridge_slave_0: left allmulticast mode [ 667.159639][T27380] FAULT_INJECTION: forcing a failure. [ 667.159639][T27380] name failslab, interval 1, probability 0, space 0, times 0 [ 667.164474][T27377] bridge_slave_0: left promiscuous mode [ 667.179383][T27380] CPU: 0 UID: 0 PID: 27380 Comm: syz.2.7158 Not tainted syzkaller #0 PREEMPT(full) [ 667.179411][T27380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.179425][T27380] Call Trace: [ 667.179433][T27380] [ 667.179441][T27380] dump_stack_lvl+0x189/0x250 [ 667.179483][T27380] ? __pfx____ratelimit+0x10/0x10 [ 667.179513][T27380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.179540][T27380] ? __pfx__printk+0x10/0x10 [ 667.179568][T27380] ? __pfx___might_resched+0x10/0x10 [ 667.179591][T27380] ? fs_reclaim_acquire+0x7d/0x100 [ 667.179628][T27380] should_fail_ex+0x414/0x560 [ 667.179664][T27380] should_failslab+0xa8/0x100 [ 667.179687][T27380] kmem_cache_alloc_node_noprof+0x77/0x710 [ 667.179717][T27380] ? __alloc_skb+0x112/0x2d0 [ 667.179736][T27380] ? netlink_autobind+0xdb/0x300 [ 667.179777][T27380] __alloc_skb+0x112/0x2d0 [ 667.179801][T27380] netlink_sendmsg+0x5c6/0xb30 [ 667.179833][T27380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.179859][T27380] ? aa_sock_msg_perm+0xf1/0x1d0 [ 667.179892][T27380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.179913][T27380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.179935][T27380] __sock_sendmsg+0x21c/0x270 [ 667.179974][T27380] ____sys_sendmsg+0x505/0x830 [ 667.180005][T27380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.180038][T27380] ? import_iovec+0x74/0xa0 [ 667.180069][T27380] ___sys_sendmsg+0x21f/0x2a0 [ 667.180094][T27380] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.180158][T27380] ? __fget_files+0x2a/0x420 [ 667.180177][T27380] ? __fget_files+0x3a0/0x420 [ 667.180209][T27380] __x64_sys_sendmsg+0x19b/0x260 [ 667.180236][T27380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.180270][T27380] ? __pfx_ksys_write+0x10/0x10 [ 667.180303][T27380] ? do_syscall_64+0xbe/0xfa0 [ 667.180337][T27380] do_syscall_64+0xfa/0xfa0 [ 667.180364][T27380] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.180398][T27380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.180419][T27380] ? clear_bhb_loop+0x60/0xb0 [ 667.180444][T27380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.180469][T27380] RIP: 0033:0x7f582ed8f749 [ 667.180487][T27380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.180506][T27380] RSP: 002b:00007f582fbd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.180528][T27380] RAX: ffffffffffffffda RBX: 00007f582efe5fa0 RCX: 00007f582ed8f749 [ 667.180543][T27380] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 667.180557][T27380] RBP: 00007f582fbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 667.180569][T27380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.180582][T27380] R13: 00007f582efe6038 R14: 00007f582efe5fa0 R15: 00007ffe7815f8d8 [ 667.180617][T27380] [ 667.217423][T27385] FAULT_INJECTION: forcing a failure. [ 667.217423][T27385] name failslab, interval 1, probability 0, space 0, times 0 [ 667.219817][T27377] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.238508][T27385] CPU: 1 UID: 0 PID: 27385 Comm: syz.0.7159 Not tainted syzkaller #0 PREEMPT(full) [ 667.238546][T27385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.238564][T27385] Call Trace: [ 667.238579][T27385] [ 667.238592][T27385] dump_stack_lvl+0x189/0x250 [ 667.238635][T27385] ? __pfx____ratelimit+0x10/0x10 [ 667.238671][T27385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.238707][T27385] ? __pfx__printk+0x10/0x10 [ 667.238741][T27385] ? __pfx___might_resched+0x10/0x10 [ 667.238768][T27385] ? fs_reclaim_acquire+0x7d/0x100 [ 667.238814][T27385] should_fail_ex+0x414/0x560 [ 667.238862][T27385] should_failslab+0xa8/0x100 [ 667.238892][T27385] __kmalloc_noprof+0xcb/0x7f0 [ 667.238928][T27385] ? tomoyo_encode+0x28b/0x550 [ 667.238975][T27385] tomoyo_encode+0x28b/0x550 [ 667.239022][T27385] tomoyo_realpath_from_path+0x58d/0x5d0 [ 667.239061][T27385] ? tomoyo_domain+0xd9/0x130 [ 667.239093][T27385] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 667.239123][T27385] tomoyo_path_number_perm+0x1e8/0x5a0 [ 667.239154][T27385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 667.239245][T27385] ? __fget_files+0x2a/0x420 [ 667.239278][T27385] ? __fget_files+0x3a0/0x420 [ 667.239303][T27385] ? __fget_files+0x2a/0x420 [ 667.239332][T27385] security_file_ioctl+0xcb/0x2d0 [ 667.239367][T27385] __se_sys_ioctl+0x47/0x170 [ 667.239405][T27385] do_syscall_64+0xfa/0xfa0 [ 667.239441][T27385] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.239477][T27385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.239502][T27385] ? clear_bhb_loop+0x60/0xb0 [ 667.239533][T27385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.239559][T27385] RIP: 0033:0x7fdd9578f749 [ 667.239583][T27385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.239608][T27385] RSP: 002b:00007fdd965eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.239635][T27385] RAX: ffffffffffffffda RBX: 00007fdd959e5fa0 RCX: 00007fdd9578f749 [ 667.239654][T27385] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 667.239671][T27385] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 667.239687][T27385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.239703][T27385] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 667.239749][T27385] [ 667.239953][T27385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.797082][T27393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7162'. [ 668.157834][T27408] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7167'. [ 668.240115][T27411] validate_nla: 4 callbacks suppressed [ 668.240140][T27411] netlink: 'syz.0.7169': attribute type 6 has an invalid length. [ 668.281376][T27411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7169'. [ 668.326632][T27420] FAULT_INJECTION: forcing a failure. [ 668.326632][T27420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.340368][T27420] CPU: 0 UID: 0 PID: 27420 Comm: syz.1.7173 Not tainted syzkaller #0 PREEMPT(full) [ 668.340411][T27420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.340427][T27420] Call Trace: [ 668.340436][T27420] [ 668.340447][T27420] dump_stack_lvl+0x189/0x250 [ 668.340484][T27420] ? __pfx____ratelimit+0x10/0x10 [ 668.340515][T27420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.340547][T27420] ? __pfx__printk+0x10/0x10 [ 668.340570][T27420] ? __might_fault+0xb0/0x130 [ 668.340612][T27420] should_fail_ex+0x414/0x560 [ 668.340652][T27420] _copy_from_user+0x2d/0xb0 [ 668.340682][T27420] nr_rt_ioctl+0x74f/0xd50 [ 668.340725][T27420] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 668.340750][T27420] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.340796][T27420] ? apparmor_capable+0x137/0x1b0 [ 668.340832][T27420] ? capable+0x89/0xe0 [ 668.340858][T27420] ? nr_ioctl+0x1b1/0x3b0 [ 668.340885][T27420] sock_do_ioctl+0xdc/0x300 [ 668.340919][T27420] ? __pfx_sock_do_ioctl+0x10/0x10 [ 668.340971][T27420] sock_ioctl+0x576/0x790 [ 668.341005][T27420] ? __pfx_sock_ioctl+0x10/0x10 [ 668.341038][T27420] ? __fget_files+0x3a0/0x420 [ 668.341060][T27420] ? __fget_files+0x2a/0x420 [ 668.341085][T27420] ? bpf_lsm_file_ioctl+0x9/0x20 [ 668.341111][T27420] ? __pfx_sock_ioctl+0x10/0x10 [ 668.341140][T27420] __se_sys_ioctl+0xfc/0x170 [ 668.341173][T27420] do_syscall_64+0xfa/0xfa0 [ 668.341205][T27420] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.341238][T27420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.341261][T27420] ? clear_bhb_loop+0x60/0xb0 [ 668.341291][T27420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.341313][T27420] RIP: 0033:0x7f0a18d8f749 [ 668.341334][T27420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.341355][T27420] RSP: 002b:00007f0a19c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.341388][T27420] RAX: ffffffffffffffda RBX: 00007f0a18fe5fa0 RCX: 00007f0a18d8f749 [ 668.341406][T27420] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 668.341421][T27420] RBP: 00007f0a19c74090 R08: 0000000000000000 R09: 0000000000000000 [ 668.341435][T27420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.341449][T27420] R13: 00007f0a18fe6038 R14: 00007f0a18fe5fa0 R15: 00007ffd3a014a28 [ 668.341488][T27420] [ 668.835904][T27442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7177'. [ 668.998022][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7182'. [ 669.044382][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7182'. [ 669.063518][T27451] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 669.079903][T27447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7182'. [ 669.108137][T27453] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7183'. [ 669.247028][T27462] tipc: Enabled bearer , priority 0 [ 669.255119][T27463] syzkaller0: entered promiscuous mode [ 669.279248][T27463] syzkaller0: entered allmulticast mode [ 669.298143][T27462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 669.309875][T27461] FAULT_INJECTION: forcing a failure. [ 669.309875][T27461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.323313][T27461] CPU: 0 UID: 0 PID: 27461 Comm: syz.4.7187 Not tainted syzkaller #0 PREEMPT(full) [ 669.323341][T27461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.323355][T27461] Call Trace: [ 669.323365][T27461] [ 669.323374][T27461] dump_stack_lvl+0x189/0x250 [ 669.323412][T27461] ? __pfx____ratelimit+0x10/0x10 [ 669.323445][T27461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.323477][T27461] ? __pfx__printk+0x10/0x10 [ 669.323502][T27461] ? __might_fault+0xb0/0x130 [ 669.323550][T27461] should_fail_ex+0x414/0x560 [ 669.323592][T27461] _copy_from_iter+0x1de/0x1790 [ 669.323626][T27461] ? rcu_is_watching+0x15/0xb0 [ 669.323658][T27461] ? kmalloc_reserve+0xbd/0x290 [ 669.323682][T27461] ? __pfx__copy_from_iter+0x10/0x10 [ 669.323711][T27461] ? __build_skb_around+0x262/0x3f0 [ 669.323738][T27461] ? netlink_sendmsg+0x642/0xb30 [ 669.323759][T27461] ? skb_put+0x11b/0x210 [ 669.323787][T27461] netlink_sendmsg+0x6b2/0xb30 [ 669.323823][T27461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.323851][T27461] ? aa_sock_msg_perm+0xf1/0x1d0 [ 669.323888][T27461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.323911][T27461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.323937][T27461] __sock_sendmsg+0x21c/0x270 [ 669.323973][T27461] ____sys_sendmsg+0x505/0x830 [ 669.324017][T27461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.324056][T27461] ? import_iovec+0x74/0xa0 [ 669.324090][T27461] ___sys_sendmsg+0x21f/0x2a0 [ 669.324120][T27461] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.324189][T27461] ? __fget_files+0x2a/0x420 [ 669.324211][T27461] ? __fget_files+0x3a0/0x420 [ 669.324245][T27461] __x64_sys_sendmsg+0x19b/0x260 [ 669.324274][T27461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.324312][T27461] ? __pfx_ksys_write+0x10/0x10 [ 669.324350][T27461] ? do_syscall_64+0xbe/0xfa0 [ 669.324388][T27461] do_syscall_64+0xfa/0xfa0 [ 669.324419][T27461] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.324453][T27461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.324475][T27461] ? clear_bhb_loop+0x60/0xb0 [ 669.324504][T27461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.324525][T27461] RIP: 0033:0x7f042798f749 [ 669.324547][T27461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.324567][T27461] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.324591][T27461] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 669.324608][T27461] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 669.324623][T27461] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 669.324638][T27461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.324652][T27461] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 669.324692][T27461] [ 669.328223][T27466] FAULT_INJECTION: forcing a failure. [ 669.328223][T27466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.620561][T27466] CPU: 0 UID: 0 PID: 27466 Comm: syz.0.7188 Not tainted syzkaller #0 PREEMPT(full) [ 669.620589][T27466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.620604][T27466] Call Trace: [ 669.620614][T27466] [ 669.620624][T27466] dump_stack_lvl+0x189/0x250 [ 669.620659][T27466] ? __pfx____ratelimit+0x10/0x10 [ 669.620691][T27466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.620722][T27466] ? __pfx__printk+0x10/0x10 [ 669.620760][T27466] should_fail_ex+0x414/0x560 [ 669.620800][T27466] _copy_to_user+0x31/0xb0 [ 669.620833][T27466] simple_read_from_buffer+0xe1/0x170 [ 669.620875][T27466] proc_fail_nth_read+0x1b3/0x220 [ 669.620907][T27466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.620938][T27466] ? rw_verify_area+0x2a6/0x4d0 [ 669.620968][T27466] ? __lock_acquire+0xab9/0xd20 [ 669.620988][T27466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.621019][T27466] vfs_read+0x200/0xa30 [ 669.621050][T27466] ? fdget_pos+0x247/0x320 [ 669.621077][T27466] ? __pfx___mutex_lock+0x10/0x10 [ 669.621113][T27466] ? __pfx_vfs_read+0x10/0x10 [ 669.621147][T27466] ? __fget_files+0x2a/0x420 [ 669.621173][T27466] ? __fget_files+0x3a0/0x420 [ 669.621192][T27466] ? __fget_files+0x2a/0x420 [ 669.621223][T27466] ksys_read+0x145/0x250 [ 669.621261][T27466] ? __fget_files+0x2a/0x420 [ 669.621285][T27466] ? __pfx_ksys_read+0x10/0x10 [ 669.621322][T27466] ? do_syscall_64+0xbe/0xfa0 [ 669.621358][T27466] do_syscall_64+0xfa/0xfa0 [ 669.621389][T27466] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.621420][T27466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.621443][T27466] ? clear_bhb_loop+0x60/0xb0 [ 669.621472][T27466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.621494][T27466] RIP: 0033:0x7fdd9578e15c [ 669.621513][T27466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 669.621532][T27466] RSP: 002b:00007fdd965eb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.621555][T27466] RAX: ffffffffffffffda RBX: 00007fdd959e5fa0 RCX: 00007fdd9578e15c [ 669.621572][T27466] RDX: 000000000000000f RSI: 00007fdd965eb0a0 RDI: 0000000000000003 [ 669.621585][T27466] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 669.621599][T27466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.621613][T27466] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 669.621650][T27466] [ 669.621661][T27463] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 669.952681][T27463] tipc: Resetting bearer [ 670.012123][T27463] tipc: Disabling bearer [ 670.049568][T27476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.225981][T27500] FAULT_INJECTION: forcing a failure. [ 670.225981][T27500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.274595][T27500] CPU: 1 UID: 0 PID: 27500 Comm: syz.3.7196 Not tainted syzkaller #0 PREEMPT(full) [ 670.274636][T27500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.274649][T27500] Call Trace: [ 670.274658][T27500] [ 670.274669][T27500] dump_stack_lvl+0x189/0x250 [ 670.274706][T27500] ? __pfx____ratelimit+0x10/0x10 [ 670.274738][T27500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.274770][T27500] ? __pfx__printk+0x10/0x10 [ 670.274794][T27500] ? __might_fault+0xb0/0x130 [ 670.274840][T27500] should_fail_ex+0x414/0x560 [ 670.274882][T27500] _copy_from_iter+0x1de/0x1790 [ 670.274912][T27500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 670.274947][T27500] ? policy_nodemask+0x27c/0x720 [ 670.274968][T27500] ? __pfx__copy_from_iter+0x10/0x10 [ 670.275002][T27500] ? set_page_refcounted+0xa0/0x1e0 [ 670.275025][T27500] ? page_copy_sane+0x4e/0x280 [ 670.275053][T27500] copy_page_from_iter+0xdd/0x170 [ 670.275086][T27500] tun_get_user+0x1d7b/0x3e90 [ 670.275130][T27500] ? tun_get_user+0x6f6/0x3e90 [ 670.275167][T27500] ? aa_file_perm+0x44d/0x1550 [ 670.275188][T27500] ? __pfx_tun_get_user+0x10/0x10 [ 670.275215][T27500] ? _parse_integer_limit+0x1ae/0x1f0 [ 670.275248][T27500] ? __lock_acquire+0xab9/0xd20 [ 670.275278][T27500] ? ref_tracker_alloc+0x318/0x460 [ 670.275299][T27500] ? __lock_acquire+0xab9/0xd20 [ 670.275323][T27500] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 670.275353][T27500] ? tun_get+0x1c/0x2f0 [ 670.275385][T27500] ? tun_get+0x1c/0x2f0 [ 670.275412][T27500] ? tun_get+0x1c/0x2f0 [ 670.275445][T27500] tun_chr_write_iter+0x113/0x200 [ 670.275477][T27500] vfs_write+0x5c9/0xb30 [ 670.275515][T27500] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 670.275544][T27500] ? __pfx_vfs_write+0x10/0x10 [ 670.275589][T27500] ? __fget_files+0x2a/0x420 [ 670.275624][T27500] ksys_write+0x145/0x250 [ 670.275659][T27500] ? __pfx_ksys_write+0x10/0x10 [ 670.275697][T27500] ? do_syscall_64+0xbe/0xfa0 [ 670.275735][T27500] do_syscall_64+0xfa/0xfa0 [ 670.275767][T27500] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.275800][T27500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.275823][T27500] ? clear_bhb_loop+0x60/0xb0 [ 670.275851][T27500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.275871][T27500] RIP: 0033:0x7fecadd8e1ff [ 670.275891][T27500] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 670.275911][T27500] RSP: 002b:00007fecaec17000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 670.275935][T27500] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8e1ff [ 670.275952][T27500] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 670.275968][T27500] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000000 [ 670.275982][T27500] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 670.275996][T27500] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 670.276035][T27500] [ 670.601686][T27504] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 670.620194][T27505] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 670.778555][T27515] netlink: 'syz.2.7203': attribute type 11 has an invalid length. [ 670.816478][T27521] FAULT_INJECTION: forcing a failure. [ 670.816478][T27521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.864662][T27521] CPU: 0 UID: 0 PID: 27521 Comm: syz.0.7205 Not tainted syzkaller #0 PREEMPT(full) [ 670.864696][T27521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.864711][T27521] Call Trace: [ 670.864721][T27521] [ 670.864731][T27521] dump_stack_lvl+0x189/0x250 [ 670.864768][T27521] ? __pfx____ratelimit+0x10/0x10 [ 670.864800][T27521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.864840][T27521] ? __pfx__printk+0x10/0x10 [ 670.864864][T27521] ? __might_fault+0xb0/0x130 [ 670.864911][T27521] should_fail_ex+0x414/0x560 [ 670.864952][T27521] _copy_from_iter+0x1de/0x1790 [ 670.864987][T27521] ? rcu_is_watching+0x15/0xb0 [ 670.865018][T27521] ? kmalloc_reserve+0xbd/0x290 [ 670.865040][T27521] ? __pfx__copy_from_iter+0x10/0x10 [ 670.865066][T27521] ? __build_skb_around+0x262/0x3f0 [ 670.865094][T27521] ? netlink_sendmsg+0x642/0xb30 [ 670.865116][T27521] ? skb_put+0x11b/0x210 [ 670.865143][T27521] netlink_sendmsg+0x6b2/0xb30 [ 670.865179][T27521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.865207][T27521] ? aa_sock_msg_perm+0xf1/0x1d0 [ 670.865244][T27521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.865267][T27521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.865293][T27521] __sock_sendmsg+0x21c/0x270 [ 670.865329][T27521] ____sys_sendmsg+0x505/0x830 [ 670.865362][T27521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.865400][T27521] ? import_iovec+0x74/0xa0 [ 670.865434][T27521] ___sys_sendmsg+0x21f/0x2a0 [ 670.865463][T27521] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.865535][T27521] ? __fget_files+0x2a/0x420 [ 670.865557][T27521] ? __fget_files+0x3a0/0x420 [ 670.865590][T27521] __x64_sys_sendmsg+0x19b/0x260 [ 670.865619][T27521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.865656][T27521] ? __pfx_ksys_write+0x10/0x10 [ 670.865692][T27521] ? do_syscall_64+0xbe/0xfa0 [ 670.865728][T27521] do_syscall_64+0xfa/0xfa0 [ 670.865758][T27521] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.865789][T27521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.865817][T27521] ? clear_bhb_loop+0x60/0xb0 [ 670.865846][T27521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.865868][T27521] RIP: 0033:0x7fdd9578f749 [ 670.865889][T27521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.865909][T27521] RSP: 002b:00007fdd965eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.865934][T27521] RAX: ffffffffffffffda RBX: 00007fdd959e5fa0 RCX: 00007fdd9578f749 [ 670.865951][T27521] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 670.865965][T27521] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 670.865979][T27521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.865993][T27521] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 670.866034][T27521] [ 671.326810][T27532] netlink: 'syz.0.7208': attribute type 16 has an invalid length. [ 671.334788][T27532] netlink: 'syz.0.7208': attribute type 17 has an invalid length. [ 671.380609][T27532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.434588][T27538] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 671.595341][T27546] FAULT_INJECTION: forcing a failure. [ 671.595341][T27546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.616536][T27545] IPVS: Error connecting to the multicast addr [ 671.623389][T27546] CPU: 1 UID: 0 PID: 27546 Comm: syz.4.7216 Not tainted syzkaller #0 PREEMPT(full) [ 671.623422][T27546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.623437][T27546] Call Trace: [ 671.623446][T27546] [ 671.623456][T27546] dump_stack_lvl+0x189/0x250 [ 671.623492][T27546] ? __pfx____ratelimit+0x10/0x10 [ 671.623523][T27546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.623552][T27546] ? __pfx__printk+0x10/0x10 [ 671.623576][T27546] ? __might_fault+0xb0/0x130 [ 671.623621][T27546] should_fail_ex+0x414/0x560 [ 671.623661][T27546] _copy_from_user+0x2d/0xb0 [ 671.623692][T27546] ___sys_recvmsg+0x12e/0x510 [ 671.623727][T27546] ? __pfx____sys_recvmsg+0x10/0x10 [ 671.623784][T27546] ? __fget_files+0x3a0/0x420 [ 671.623819][T27546] do_recvmmsg+0x307/0x770 [ 671.623856][T27546] ? __pfx_do_recvmmsg+0x10/0x10 [ 671.623897][T27546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 671.623953][T27546] __x64_sys_recvmmsg+0x190/0x240 [ 671.623984][T27546] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 671.624015][T27546] ? do_syscall_64+0xbe/0xfa0 [ 671.624052][T27546] do_syscall_64+0xfa/0xfa0 [ 671.624096][T27546] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.624128][T27546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.624151][T27546] ? clear_bhb_loop+0x60/0xb0 [ 671.624178][T27546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.624200][T27546] RIP: 0033:0x7f042798f749 [ 671.624221][T27546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.624240][T27546] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 671.624264][T27546] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 671.624281][T27546] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 671.624296][T27546] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 671.624311][T27546] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 671.624324][T27546] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 671.624365][T27546] [ 671.900469][T27556] __nla_validate_parse: 20 callbacks suppressed [ 671.900491][T27556] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7219'. [ 671.917884][T27556] FAULT_INJECTION: forcing a failure. [ 671.917884][T27556] name failslab, interval 1, probability 0, space 0, times 0 [ 671.931086][T27556] CPU: 1 UID: 0 PID: 27556 Comm: syz.3.7219 Not tainted syzkaller #0 PREEMPT(full) [ 671.931119][T27556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.931134][T27556] Call Trace: [ 671.931143][T27556] [ 671.931153][T27556] dump_stack_lvl+0x189/0x250 [ 671.931191][T27556] ? __pfx____ratelimit+0x10/0x10 [ 671.931223][T27556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.931255][T27556] ? __pfx__printk+0x10/0x10 [ 671.931286][T27556] ? __pfx___might_resched+0x10/0x10 [ 671.931318][T27556] should_fail_ex+0x414/0x560 [ 671.931360][T27556] should_failslab+0xa8/0x100 [ 671.931386][T27556] kmem_cache_alloc_node_noprof+0x77/0x710 [ 671.931418][T27556] ? __alloc_skb+0x112/0x2d0 [ 671.931447][T27556] __alloc_skb+0x112/0x2d0 [ 671.931475][T27556] netlink_ack+0x146/0xa50 [ 671.931499][T27556] ? rcu_is_watching+0x15/0xb0 [ 671.931527][T27556] ? trace_contention_end+0x39/0x120 [ 671.931568][T27556] netlink_rcv_skb+0x28c/0x470 [ 671.931591][T27556] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 671.931621][T27556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.931664][T27556] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.931686][T27556] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.931711][T27556] xfrm_netlink_rcv+0x79/0x90 [ 671.931739][T27556] netlink_unicast+0x82f/0x9e0 [ 671.931785][T27556] ? __pfx_netlink_unicast+0x10/0x10 [ 671.931821][T27556] ? netlink_sendmsg+0x642/0xb30 [ 671.931842][T27556] ? skb_put+0x11b/0x210 [ 671.931870][T27556] netlink_sendmsg+0x805/0xb30 [ 671.931907][T27556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.931935][T27556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 671.931972][T27556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.931995][T27556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.932021][T27556] __sock_sendmsg+0x21c/0x270 [ 671.932065][T27556] ____sys_sendmsg+0x505/0x830 [ 671.932098][T27556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.932137][T27556] ? import_iovec+0x74/0xa0 [ 671.932171][T27556] ___sys_sendmsg+0x21f/0x2a0 [ 671.932200][T27556] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.932273][T27556] ? __fget_files+0x2a/0x420 [ 671.932295][T27556] ? __fget_files+0x3a0/0x420 [ 671.932331][T27556] __x64_sys_sendmsg+0x19b/0x260 [ 671.932361][T27556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.932400][T27556] ? __pfx_ksys_write+0x10/0x10 [ 671.932439][T27556] ? do_syscall_64+0xbe/0xfa0 [ 671.932477][T27556] do_syscall_64+0xfa/0xfa0 [ 671.932509][T27556] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.932541][T27556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.932564][T27556] ? clear_bhb_loop+0x60/0xb0 [ 671.932592][T27556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.932614][T27556] RIP: 0033:0x7fecadd8f749 [ 671.932635][T27556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.932655][T27556] RSP: 002b:00007fecaec17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.932680][T27556] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8f749 [ 671.932698][T27556] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 671.932713][T27556] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000000 [ 671.932727][T27556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.932742][T27556] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 671.932782][T27556] [ 672.532182][T27578] netlink: 'syz.0.7226': attribute type 1 has an invalid length. [ 672.544356][T27568] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 672.667596][T27574] syzkaller1: entered promiscuous mode [ 672.674115][T27574] syzkaller1: entered allmulticast mode [ 672.739198][T27580] veth7: entered promiscuous mode [ 672.745062][T27585] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 672.787301][T27589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7230'. [ 673.151137][T27609] FAULT_INJECTION: forcing a failure. [ 673.151137][T27609] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.168770][T27609] CPU: 1 UID: 0 PID: 27609 Comm: syz.1.7238 Not tainted syzkaller #0 PREEMPT(full) [ 673.168804][T27609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.168819][T27609] Call Trace: [ 673.168829][T27609] [ 673.168840][T27609] dump_stack_lvl+0x189/0x250 [ 673.168886][T27609] ? __pfx____ratelimit+0x10/0x10 [ 673.168919][T27609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.168951][T27609] ? __pfx__printk+0x10/0x10 [ 673.168978][T27609] ? fs_reclaim_acquire+0x7d/0x100 [ 673.169026][T27609] should_fail_ex+0x414/0x560 [ 673.169068][T27609] prepare_alloc_pages+0x213/0x610 [ 673.169101][T27609] __alloc_frozen_pages_noprof+0x123/0x370 [ 673.169132][T27609] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.169168][T27609] ? policy_nodemask+0x27c/0x720 [ 673.169189][T27609] ? __lock_acquire+0xab9/0xd20 [ 673.169219][T27609] alloc_pages_mpol+0x232/0x4a0 [ 673.169249][T27609] vma_alloc_folio_noprof+0xe4/0x200 [ 673.169273][T27609] ? page_table_check_set+0x18d/0x730 [ 673.169307][T27609] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 673.169346][T27609] folio_prealloc+0x30/0x180 [ 673.169383][T27609] __handle_mm_fault+0x2a8b/0x5400 [ 673.169435][T27609] ? __pfx___handle_mm_fault+0x10/0x10 [ 673.169485][T27609] ? follow_page_pte+0x7ef/0x13e0 [ 673.169528][T27609] handle_mm_fault+0x40a/0x8e0 [ 673.169573][T27609] __get_user_pages+0x165c/0x2a00 [ 673.169646][T27609] __gup_longterm_locked+0xde4/0x1660 [ 673.169694][T27609] ? sanity_check_pinned_pages+0x1241/0x1300 [ 673.169726][T27609] ? gup_fast_fallback+0x1b86/0x22d0 [ 673.169760][T27609] gup_fast_fallback+0x1d65/0x22d0 [ 673.169838][T27609] ? __pfx_gup_fast_fallback+0x10/0x10 [ 673.169875][T27609] ? rds_info_getsockopt+0x1db/0x470 [ 673.169911][T27609] ? rcu_is_watching+0x15/0xb0 [ 673.169938][T27609] ? is_valid_gup_args+0x11f/0x200 [ 673.169969][T27609] ? pin_user_pages_fast+0x4d/0xb0 [ 673.170002][T27609] rds_info_getsockopt+0x1fb/0x470 [ 673.170048][T27609] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 673.170084][T27609] ? __might_fault+0xb0/0x130 [ 673.170122][T27609] ? rds_getsockopt+0x2b4/0x500 [ 673.170145][T27609] ? __pfx_rds_getsockopt+0x10/0x10 [ 673.170173][T27609] do_sock_getsockopt+0x372/0x450 [ 673.170202][T27609] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 673.170226][T27609] ? do_syscall_64+0xa0/0xfa0 [ 673.170258][T27609] ? __fget_files+0x2a/0x420 [ 673.170278][T27609] ? __fget_files+0x3a0/0x420 [ 673.170299][T27609] ? __fget_files+0x2a/0x420 [ 673.170330][T27609] __x64_sys_getsockopt+0x1a5/0x250 [ 673.170355][T27609] ? do_syscall_64+0xa0/0xfa0 [ 673.170389][T27609] ? do_syscall_64+0xa0/0xfa0 [ 673.170427][T27609] do_syscall_64+0xfa/0xfa0 [ 673.170459][T27609] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.170492][T27609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.170515][T27609] ? clear_bhb_loop+0x60/0xb0 [ 673.170548][T27609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.170570][T27609] RIP: 0033:0x7f0a18d8f749 [ 673.170592][T27609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.170613][T27609] RSP: 002b:00007f0a19c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 673.170637][T27609] RAX: ffffffffffffffda RBX: 00007f0a18fe5fa0 RCX: 00007f0a18d8f749 [ 673.170655][T27609] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 673.170671][T27609] RBP: 00007f0a19c74090 R08: 0000200000000000 R09: 0000000000000000 [ 673.170687][T27609] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 673.170702][T27609] R13: 00007f0a18fe6038 R14: 00007f0a18fe5fa0 R15: 00007ffd3a014a28 [ 673.170742][T27609] [ 673.602068][T27611] netlink: 'syz.4.7239': attribute type 10 has an invalid length. [ 673.606549][T27600] vlan0: entered allmulticast mode [ 673.610096][T27611] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7239'. [ 673.615562][T27600] bridge_slave_0: entered allmulticast mode [ 673.626232][T27611] FAULT_INJECTION: forcing a failure. [ 673.626232][T27611] name failslab, interval 1, probability 0, space 0, times 0 [ 673.643762][T27611] CPU: 1 UID: 0 PID: 27611 Comm: syz.4.7239 Not tainted syzkaller #0 PREEMPT(full) [ 673.643792][T27611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.643807][T27611] Call Trace: [ 673.643817][T27611] [ 673.643825][T27611] dump_stack_lvl+0x189/0x250 [ 673.643864][T27611] ? __pfx____ratelimit+0x10/0x10 [ 673.643892][T27611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.643918][T27611] ? __pfx__printk+0x10/0x10 [ 673.643943][T27611] ? __pfx___might_resched+0x10/0x10 [ 673.643970][T27611] should_fail_ex+0x414/0x560 [ 673.644005][T27611] should_failslab+0xa8/0x100 [ 673.644027][T27611] kmem_cache_alloc_node_noprof+0x77/0x710 [ 673.644054][T27611] ? __alloc_skb+0x112/0x2d0 [ 673.644077][T27611] __alloc_skb+0x112/0x2d0 [ 673.644099][T27611] netlink_ack+0x146/0xa50 [ 673.644115][T27611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.644156][T27611] netlink_rcv_skb+0x28c/0x470 [ 673.644173][T27611] ? __lock_acquire+0xab9/0xd20 [ 673.644191][T27611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.644217][T27611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.644261][T27611] ? down_read+0x1ad/0x2e0 [ 673.644283][T27611] genl_rcv+0x28/0x40 [ 673.644303][T27611] netlink_unicast+0x82f/0x9e0 [ 673.644337][T27611] ? __pfx_netlink_unicast+0x10/0x10 [ 673.644364][T27611] ? netlink_sendmsg+0x642/0xb30 [ 673.644380][T27611] ? skb_put+0x11b/0x210 [ 673.644405][T27611] netlink_sendmsg+0x805/0xb30 [ 673.644436][T27611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.644463][T27611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.644499][T27611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.644520][T27611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.644562][T27611] __sock_sendmsg+0x21c/0x270 [ 673.644596][T27611] ____sys_sendmsg+0x505/0x830 [ 673.644627][T27611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.644665][T27611] ? import_iovec+0x74/0xa0 [ 673.644699][T27611] ___sys_sendmsg+0x21f/0x2a0 [ 673.644727][T27611] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.644794][T27611] ? __fget_files+0x2a/0x420 [ 673.644816][T27611] ? __fget_files+0x3a0/0x420 [ 673.644858][T27611] __x64_sys_sendmsg+0x19b/0x260 [ 673.644889][T27611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.644924][T27611] ? __pfx_ksys_write+0x10/0x10 [ 673.644958][T27611] ? do_syscall_64+0xbe/0xfa0 [ 673.644995][T27611] do_syscall_64+0xfa/0xfa0 [ 673.645024][T27611] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.645055][T27611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.645077][T27611] ? clear_bhb_loop+0x60/0xb0 [ 673.645105][T27611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.645127][T27611] RIP: 0033:0x7f042798f749 [ 673.645147][T27611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.645167][T27611] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.645191][T27611] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 673.645208][T27611] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 673.645222][T27611] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 673.645234][T27611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.645245][T27611] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 673.645279][T27611] [ 674.321716][T27641] FAULT_INJECTION: forcing a failure. [ 674.321716][T27641] name failslab, interval 1, probability 0, space 0, times 0 [ 674.336283][T27641] CPU: 1 UID: 0 PID: 27641 Comm: syz.0.7248 Not tainted syzkaller #0 PREEMPT(full) [ 674.336316][T27641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.336331][T27641] Call Trace: [ 674.336342][T27641] [ 674.336352][T27641] dump_stack_lvl+0x189/0x250 [ 674.336390][T27641] ? __pfx____ratelimit+0x10/0x10 [ 674.336423][T27641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.336455][T27641] ? __pfx__printk+0x10/0x10 [ 674.336486][T27641] ? __lock_acquire+0xab9/0xd20 [ 674.336518][T27641] should_fail_ex+0x414/0x560 [ 674.336561][T27641] should_failslab+0xa8/0x100 [ 674.336587][T27641] kmem_cache_alloc_noprof+0x74/0x6e0 [ 674.336619][T27641] ? skb_clone+0x212/0x3a0 [ 674.336653][T27641] skb_clone+0x212/0x3a0 [ 674.336685][T27641] __netlink_deliver_tap+0x404/0x850 [ 674.336725][T27641] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.336750][T27641] netlink_deliver_tap+0x19c/0x1b0 [ 674.336783][T27641] netlink_unicast+0x7fa/0x9e0 [ 674.336828][T27641] ? __pfx_netlink_unicast+0x10/0x10 [ 674.336865][T27641] ? netlink_sendmsg+0x642/0xb30 [ 674.336886][T27641] ? skb_put+0x11b/0x210 [ 674.336914][T27641] netlink_sendmsg+0x805/0xb30 [ 674.336950][T27641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.336978][T27641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.337015][T27641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.337038][T27641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.337063][T27641] __sock_sendmsg+0x21c/0x270 [ 674.337099][T27641] ____sys_sendmsg+0x505/0x830 [ 674.337132][T27641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.337171][T27641] ? import_iovec+0x74/0xa0 [ 674.337206][T27641] ___sys_sendmsg+0x21f/0x2a0 [ 674.337235][T27641] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.337308][T27641] ? __fget_files+0x2a/0x420 [ 674.337329][T27641] ? __fget_files+0x3a0/0x420 [ 674.337365][T27641] __x64_sys_sendmsg+0x19b/0x260 [ 674.337396][T27641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.337434][T27641] ? __pfx_ksys_write+0x10/0x10 [ 674.337472][T27641] ? do_syscall_64+0xbe/0xfa0 [ 674.337511][T27641] do_syscall_64+0xfa/0xfa0 [ 674.337542][T27641] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.337575][T27641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.337598][T27641] ? clear_bhb_loop+0x60/0xb0 [ 674.337627][T27641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.337649][T27641] RIP: 0033:0x7fdd9578f749 [ 674.337670][T27641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.337690][T27641] RSP: 002b:00007fdd965eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.337714][T27641] RAX: ffffffffffffffda RBX: 00007fdd959e5fa0 RCX: 00007fdd9578f749 [ 674.337732][T27641] RDX: 0000000024008004 RSI: 0000200000000180 RDI: 0000000000000003 [ 674.337747][T27641] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 674.337762][T27641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.337784][T27641] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 674.337825][T27641] [ 674.749609][T27645] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 674.810605][T27651] FAULT_INJECTION: forcing a failure. [ 674.810605][T27651] name failslab, interval 1, probability 0, space 0, times 0 [ 674.837180][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7255'. [ 674.849101][T27651] CPU: 1 UID: 0 PID: 27651 Comm: syz.0.7253 Not tainted syzkaller #0 PREEMPT(full) [ 674.849133][T27651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.849147][T27651] Call Trace: [ 674.849157][T27651] [ 674.849166][T27651] dump_stack_lvl+0x189/0x250 [ 674.849204][T27651] ? __pfx____ratelimit+0x10/0x10 [ 674.849234][T27651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.849266][T27651] ? __pfx__printk+0x10/0x10 [ 674.849295][T27651] ? __lock_acquire+0xab9/0xd20 [ 674.849326][T27651] should_fail_ex+0x414/0x560 [ 674.849361][T27651] should_failslab+0xa8/0x100 [ 674.849382][T27651] kmem_cache_alloc_noprof+0x74/0x6e0 [ 674.849408][T27651] ? skb_clone+0x212/0x3a0 [ 674.849436][T27651] skb_clone+0x212/0x3a0 [ 674.849460][T27651] __netlink_deliver_tap+0x404/0x850 [ 674.849492][T27651] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.849512][T27651] netlink_deliver_tap+0x19c/0x1b0 [ 674.849533][T27651] netlink_dump+0x92b/0xe90 [ 674.849563][T27651] ? __pfx_netlink_dump+0x10/0x10 [ 674.849605][T27651] netlink_recvmsg+0x676/0xa30 [ 674.849635][T27651] ? __pfx_netlink_recvmsg+0x10/0x10 [ 674.849651][T27651] ? __up_read+0x280/0x680 [ 674.849677][T27651] ? __pfx___up_read+0x10/0x10 [ 674.849699][T27651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.849729][T27651] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 674.849746][T27651] ? security_socket_recvmsg+0x7e/0x2e0 [ 674.849765][T27651] ? __pfx_netlink_recvmsg+0x10/0x10 [ 674.849791][T27651] sock_recvmsg+0x22c/0x270 [ 674.849821][T27651] ____sys_recvmsg+0x1c9/0x460 [ 674.849851][T27651] ? __pfx_____sys_recvmsg+0x10/0x10 [ 674.849886][T27651] ? import_iovec+0x74/0xa0 [ 674.849913][T27651] ___sys_recvmsg+0x1b5/0x510 [ 674.849940][T27651] ? __pfx____sys_recvmsg+0x10/0x10 [ 674.849985][T27651] ? __fget_files+0x3a0/0x420 [ 674.850014][T27651] do_recvmmsg+0x307/0x770 [ 674.850043][T27651] ? __pfx_do_recvmmsg+0x10/0x10 [ 674.850076][T27651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 674.850122][T27651] __x64_sys_recvmmsg+0x190/0x240 [ 674.850147][T27651] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 674.850173][T27651] ? do_syscall_64+0xbe/0xfa0 [ 674.850203][T27651] do_syscall_64+0xfa/0xfa0 [ 674.850228][T27651] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.850254][T27651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.850272][T27651] ? clear_bhb_loop+0x60/0xb0 [ 674.850294][T27651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.850312][T27651] RIP: 0033:0x7fdd9578f749 [ 674.850328][T27651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.850344][T27651] RSP: 002b:00007fdd965eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 674.850363][T27651] RAX: ffffffffffffffda RBX: 00007fdd959e5fa0 RCX: 00007fdd9578f749 [ 674.850377][T27651] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 674.850389][T27651] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 674.850400][T27651] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 674.850411][T27651] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 674.850442][T27651] [ 675.233235][T27661] netlink: 'syz.1.7257': attribute type 10 has an invalid length. [ 675.241204][T27661] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7257'. [ 675.394432][T27668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7258'. [ 675.423005][T27670] netlink: 'syz.2.7260': attribute type 10 has an invalid length. [ 675.530601][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7262'. [ 675.667406][T27683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7263'. [ 675.688651][T27686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7265'. [ 675.691641][T27681] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 675.697589][T27686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7265'. [ 675.697628][T27686] netlink: 'syz.0.7265': attribute type 15 has an invalid length. [ 675.884532][T27700] FAULT_INJECTION: forcing a failure. [ 675.884532][T27700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.905145][T27700] CPU: 1 UID: 0 PID: 27700 Comm: syz.4.7269 Not tainted syzkaller #0 PREEMPT(full) [ 675.905178][T27700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.905193][T27700] Call Trace: [ 675.905203][T27700] [ 675.905213][T27700] dump_stack_lvl+0x189/0x250 [ 675.905249][T27700] ? __pfx____ratelimit+0x10/0x10 [ 675.905282][T27700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.905314][T27700] ? __pfx__printk+0x10/0x10 [ 675.905338][T27700] ? __might_fault+0xb0/0x130 [ 675.905386][T27700] should_fail_ex+0x414/0x560 [ 675.905426][T27700] _copy_from_user+0x2d/0xb0 [ 675.905463][T27700] ___sys_recvmsg+0x12e/0x510 [ 675.905506][T27700] ? __pfx____sys_recvmsg+0x10/0x10 [ 675.905572][T27700] ? __might_fault+0xb0/0x130 [ 675.905609][T27700] do_recvmmsg+0x307/0x770 [ 675.905647][T27700] ? __pfx_do_recvmmsg+0x10/0x10 [ 675.905697][T27700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 675.905756][T27700] __x64_sys_recvmmsg+0x190/0x240 [ 675.905787][T27700] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 675.905821][T27700] ? do_syscall_64+0xbe/0xfa0 [ 675.905859][T27700] do_syscall_64+0xfa/0xfa0 [ 675.905890][T27700] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.905922][T27700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.905945][T27700] ? clear_bhb_loop+0x60/0xb0 [ 675.905975][T27700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.905997][T27700] RIP: 0033:0x7f042798f749 [ 675.906018][T27700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.906038][T27700] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 675.906063][T27700] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 675.906080][T27700] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 675.906096][T27700] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 675.906111][T27700] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 675.906124][T27700] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 675.906164][T27700] [ 676.170892][T27702] netlink: 'syz.3.7268': attribute type 10 has an invalid length. [ 676.253198][T27707] netlink: 'syz.1.7272': attribute type 1 has an invalid length. [ 676.272712][T27707] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 676.310500][T27714] sctp: [Deprecated]: syz.2.7275 (pid 27714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.310500][T27714] Use struct sctp_sack_info instead [ 676.364838][T27719] : entered promiscuous mode [ 676.374766][T27719] netlink: 'syz.1.7277': attribute type 1 has an invalid length. [ 676.665814][T27735] netlink: 'syz.2.7283': attribute type 15 has an invalid length. [ 677.006777][T27752] __nla_validate_parse: 8 callbacks suppressed [ 677.006801][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7290'. [ 677.027896][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7290'. [ 677.082260][T27758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7289'. [ 677.114768][T27759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7291'. [ 677.132785][T27737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.144324][T27759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7291'. [ 677.185759][T27759] gretap1: entered promiscuous mode [ 677.194589][T27759] gretap1: entered allmulticast mode [ 677.264926][T27769] netlink: 'syz.1.7293': attribute type 10 has an invalid length. [ 677.334245][T27773] netlink: 544 bytes leftover after parsing attributes in process `syz.4.7295'. [ 677.394446][T27775] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 677.496903][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7301'. [ 677.547462][T27781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7301'. [ 677.547723][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7299'. [ 677.560437][T27781] netlink: 'syz.0.7301': attribute type 15 has an invalid length. [ 677.574871][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7299'. [ 677.823402][T27800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.841421][T27798]  speed is unknown, defaulting to 1000 [ 677.870624][T27798] lo speed is unknown, defaulting to 1000 [ 678.142792][T27820] syzkaller0: entered promiscuous mode [ 678.165102][T27820] syzkaller0: entered allmulticast mode [ 678.218167][T27824] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 678.980983][T27852] FAULT_INJECTION: forcing a failure. [ 678.980983][T27852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.019261][T27852] CPU: 1 UID: 0 PID: 27852 Comm: syz.3.7327 Not tainted syzkaller #0 PREEMPT(full) [ 679.019293][T27852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.019308][T27852] Call Trace: [ 679.019318][T27852] [ 679.019328][T27852] dump_stack_lvl+0x189/0x250 [ 679.019366][T27852] ? __pfx____ratelimit+0x10/0x10 [ 679.019398][T27852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.019431][T27852] ? __pfx__printk+0x10/0x10 [ 679.019456][T27852] ? __might_fault+0xb0/0x130 [ 679.019503][T27852] should_fail_ex+0x414/0x560 [ 679.019545][T27852] _copy_from_user+0x2d/0xb0 [ 679.019576][T27852] ___sys_recvmsg+0x12e/0x510 [ 679.019612][T27852] ? __pfx____sys_recvmsg+0x10/0x10 [ 679.019678][T27852] ? __might_fault+0xb0/0x130 [ 679.019715][T27852] do_recvmmsg+0x307/0x770 [ 679.019754][T27852] ? __pfx_do_recvmmsg+0x10/0x10 [ 679.019792][T27852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 679.019850][T27852] __x64_sys_recvmmsg+0x190/0x240 [ 679.019882][T27852] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 679.019914][T27852] ? do_syscall_64+0xbe/0xfa0 [ 679.019953][T27852] do_syscall_64+0xfa/0xfa0 [ 679.019981][T27852] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.020013][T27852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.020036][T27852] ? clear_bhb_loop+0x60/0xb0 [ 679.020064][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.020086][T27852] RIP: 0033:0x7fecadd8f749 [ 679.020106][T27852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.020126][T27852] RSP: 002b:00007fecaec17038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 679.020158][T27852] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8f749 [ 679.020175][T27852] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 679.020190][T27852] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000000 [ 679.020204][T27852] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 679.020217][T27852] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 679.020256][T27852] [ 679.996339][T27899] Cannot find set identified by id 3 to match [ 680.246778][ T52] Bluetooth: hci0: command tx timeout [ 681.615232][T27980] netlink: 'syz.3.7362': attribute type 10 has an invalid length. [ 682.477924][T28025]  speed is unknown, defaulting to 1000 [ 682.500601][T28025] lo speed is unknown, defaulting to 1000 [ 682.508769][T28027] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 682.516547][T28027] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 682.536598][T28035] __nla_validate_parse: 14 callbacks suppressed [ 682.536620][T28035] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7383'. [ 682.567272][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7382'. [ 682.996244][T28059] netlink: 'syz.2.7392': attribute type 19 has an invalid length. [ 683.047588][T28061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7392'. [ 683.066126][T28061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7392'. [ 683.325047][T28074] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7397'. [ 684.025976][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7410'. [ 684.039637][T28113] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 684.087637][T28119] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 684.111089][T28121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7410'. [ 684.192231][T28123] macvlan0: entered promiscuous mode [ 684.214038][T28123] macvlan0: entered allmulticast mode [ 684.241772][T28123] bond17: entered promiscuous mode [ 684.277966][T28123] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 684.292917][T28123] bond17: left promiscuous mode [ 684.320924][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7415'. [ 684.333716][T28131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7415'. [ 684.351859][T28135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7416'. [ 684.430836][T28129] syzkaller0: entered promiscuous mode [ 684.436378][T28129] syzkaller0: entered allmulticast mode [ 684.857002][T28165] sctp: [Deprecated]: syz.0.7424 (pid 28165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.857002][T28165] Use struct sctp_sack_info instead [ 684.981316][T28172] netlink: 'syz.4.7426': attribute type 10 has an invalid length. [ 685.394642][T28192] netlink: 'syz.1.7437': attribute type 29 has an invalid length. [ 685.624252][T28208] netlink: 'syz.3.7441': attribute type 11 has an invalid length. [ 685.843136][T28212] netlink: 'syz.1.7443': attribute type 10 has an invalid length. [ 685.860397][T28215] FAULT_INJECTION: forcing a failure. [ 685.860397][T28215] name failslab, interval 1, probability 0, space 0, times 0 [ 685.893256][T28215] CPU: 1 UID: 0 PID: 28215 Comm: syz.4.7446 Not tainted syzkaller #0 PREEMPT(full) [ 685.893299][T28215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.893315][T28215] Call Trace: [ 685.893326][T28215] [ 685.893337][T28215] dump_stack_lvl+0x189/0x250 [ 685.893375][T28215] ? __pfx____ratelimit+0x10/0x10 [ 685.893407][T28215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.893439][T28215] ? __pfx__printk+0x10/0x10 [ 685.893470][T28215] ? __pfx___might_resched+0x10/0x10 [ 685.893492][T28215] ? fs_reclaim_acquire+0x7d/0x100 [ 685.893534][T28215] should_fail_ex+0x414/0x560 [ 685.893576][T28215] should_failslab+0xa8/0x100 [ 685.893602][T28215] __kvmalloc_node_noprof+0x158/0x910 [ 685.893639][T28215] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 685.893673][T28215] bpf_test_run_xdp_live+0x18e/0x1b10 [ 685.893697][T28215] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 685.893747][T28215] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 685.893793][T28215] ? synchronize_rcu+0x11a/0x310 [ 685.893821][T28215] ? __pfx_synchronize_rcu+0x10/0x10 [ 685.893854][T28215] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 685.893880][T28215] ? bpf_dispatcher_xdp+0x800/0x1000 [ 685.893925][T28215] ? 0xffffffffa0203718 [ 685.893944][T28215] ? 0xffffffffa0203754 [ 685.893962][T28215] ? 0xffffffffa02037d8 [ 685.893981][T28215] ? 0xffffffffa0203898 [ 685.893999][T28215] ? 0xffffffffa0207b54 [ 685.894017][T28215] ? 0xffffffffa02087cc [ 685.894066][T28215] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 685.894105][T28215] ? _copy_from_user+0x94/0xb0 [ 685.894135][T28215] ? bpf_test_init+0x113/0x150 [ 685.894154][T28215] ? xdp_convert_md_to_buff+0x5b/0x330 [ 685.894181][T28215] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 685.894225][T28215] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 685.894255][T28215] ? __fget_files+0x2a/0x420 [ 685.894284][T28215] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 685.894309][T28215] bpf_prog_test_run+0x2c7/0x340 [ 685.894339][T28215] __sys_bpf+0x562/0x860 [ 685.894365][T28215] ? __pfx___sys_bpf+0x10/0x10 [ 685.894408][T28215] ? ksys_write+0x22a/0x250 [ 685.894444][T28215] ? __pfx_ksys_write+0x10/0x10 [ 685.894484][T28215] __x64_sys_bpf+0x7c/0x90 [ 685.894519][T28215] do_syscall_64+0xfa/0xfa0 [ 685.894551][T28215] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.894583][T28215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.894606][T28215] ? clear_bhb_loop+0x60/0xb0 [ 685.894634][T28215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.894657][T28215] RIP: 0033:0x7f042798f749 [ 685.894677][T28215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.894698][T28215] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.894724][T28215] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 685.894750][T28215] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 685.894765][T28215] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 685.894780][T28215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.894794][T28215] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 685.894834][T28215] [ 686.469501][T28239] openvswitch: netlink: EtherType 50a is less than min 600 [ 686.608725][T28244] tipc: Enabling of bearer rejected, failed to enable media [ 686.633663][T28245] netlink: 'syz.4.7456': attribute type 3 has an invalid length. [ 686.922283][T28262] 0{X功: renamed from gretap0 [ 686.940081][T28262] 0{X功: entered allmulticast mode [ 686.950193][T28262] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 686.974678][T28262] 1{X功: renamed from 30{X功 (while UP) [ 686.995116][T28262] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 687.069359][T28268] sit2: entered promiscuous mode [ 687.087763][T28268] sit2: entered allmulticast mode [ 687.545721][T28303] __nla_validate_parse: 13 callbacks suppressed [ 687.545745][T28303] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7476'. [ 687.599228][T28307] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 687.606461][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.993014][T28340] FAULT_INJECTION: forcing a failure. [ 687.993014][T28340] name failslab, interval 1, probability 0, space 0, times 0 [ 687.995384][T28330] macvtap1: entered promiscuous mode [ 688.012108][T28330] vlan0: entered promiscuous mode [ 688.017759][T28330] macvtap1: entered allmulticast mode [ 688.023670][T28330] vlan0: entered allmulticast mode [ 688.030473][T28340] CPU: 1 UID: 0 PID: 28340 Comm: syz.4.7488 Not tainted syzkaller #0 PREEMPT(full) [ 688.030505][T28340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.030521][T28340] Call Trace: [ 688.030530][T28340] [ 688.030540][T28340] dump_stack_lvl+0x189/0x250 [ 688.030578][T28340] ? __pfx____ratelimit+0x10/0x10 [ 688.030611][T28340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.030640][T28340] ? __pfx__printk+0x10/0x10 [ 688.030670][T28340] ? __pfx___might_resched+0x10/0x10 [ 688.030691][T28340] ? fs_reclaim_acquire+0x7d/0x100 [ 688.030732][T28340] should_fail_ex+0x414/0x560 [ 688.030773][T28340] should_failslab+0xa8/0x100 [ 688.030799][T28340] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 688.030835][T28340] ? page_pool_create_percpu+0x76/0xbc0 [ 688.030878][T28340] page_pool_create_percpu+0x76/0xbc0 [ 688.030907][T28340] ? bpf_test_run_xdp_live+0x1ba/0x1b10 [ 688.030940][T28340] bpf_test_run_xdp_live+0x1cf/0x1b10 [ 688.030964][T28340] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 688.031005][T28340] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 688.031050][T28340] ? synchronize_rcu+0x11a/0x310 [ 688.031078][T28340] ? __pfx_synchronize_rcu+0x10/0x10 [ 688.031111][T28340] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 688.031137][T28340] ? bpf_dispatcher_xdp+0x800/0x1000 [ 688.031182][T28340] ? 0xffffffffa0203718 [ 688.031201][T28340] ? 0xffffffffa0203758 [ 688.031220][T28340] ? 0xffffffffa02037d8 [ 688.031237][T28340] ? 0xffffffffa0203898 [ 688.031256][T28340] ? 0xffffffffa0207b54 [ 688.031274][T28340] ? 0xffffffffa02087cc [ 688.031323][T28340] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 688.031369][T28340] ? _copy_from_user+0x94/0xb0 [ 688.031400][T28340] ? bpf_test_init+0x113/0x150 [ 688.031419][T28340] ? xdp_convert_md_to_buff+0x5b/0x330 [ 688.031446][T28340] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 688.031489][T28340] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 688.031520][T28340] ? __fget_files+0x2a/0x420 [ 688.031549][T28340] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 688.031574][T28340] bpf_prog_test_run+0x2c7/0x340 [ 688.031604][T28340] __sys_bpf+0x562/0x860 [ 688.031629][T28340] ? __pfx___sys_bpf+0x10/0x10 [ 688.031672][T28340] ? ksys_write+0x22a/0x250 [ 688.031709][T28340] ? __pfx_ksys_write+0x10/0x10 [ 688.031749][T28340] __x64_sys_bpf+0x7c/0x90 [ 688.031785][T28340] do_syscall_64+0xfa/0xfa0 [ 688.031817][T28340] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.031850][T28340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.031874][T28340] ? clear_bhb_loop+0x60/0xb0 [ 688.031902][T28340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.031925][T28340] RIP: 0033:0x7f042798f749 [ 688.031944][T28340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.031964][T28340] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 688.031989][T28340] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 688.032006][T28340] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 688.032021][T28340] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 688.032036][T28340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.032050][T28340] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 688.032090][T28340] [ 688.534659][T28350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7492'. [ 688.649926][T28356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7495'. [ 688.783930][T28365] netlink: 412 bytes leftover after parsing attributes in process `syz.0.7497'. [ 688.794719][T28365] netlink: 'syz.0.7497': attribute type 3 has an invalid length. [ 688.803193][T28365] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7497'. [ 688.830163][T28367] netlink: 'syz.1.7499': attribute type 4 has an invalid length. [ 688.850889][T28368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7497'. [ 689.008016][T28376] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7503'. [ 689.054840][T28380] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7506'. [ 689.083458][T28380] x_tables: duplicate underflow at hook 1 [ 689.176050][T28389] netlink: 'syz.2.7509': attribute type 16 has an invalid length. [ 689.184318][T28389] netlink: 'syz.2.7509': attribute type 17 has an invalid length. [ 689.230927][T28392] xt_TPROXY: Can be used only with -p tcp or -p udp [ 689.251039][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7509'. [ 689.520390][T28389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 689.604452][T28416] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 689.616107][T28416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.694245][T28419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7516'. [ 689.964778][T28437] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 690.078092][T28447] netlink: 'syz.4.7524': attribute type 12 has an invalid length. [ 690.386907][T28457] Cannot find set identified by id 3 to match [ 690.633941][T28469] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 690.636161][T28470] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 691.258944][T28503] netlink: 'syz.1.7547': attribute type 24 has an invalid length. [ 691.295916][T28500] syzkaller0: entered promiscuous mode [ 691.304436][T28500] syzkaller0: entered allmulticast mode [ 691.439188][T28507] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 691.710983][T28527] FAULT_INJECTION: forcing a failure. [ 691.710983][T28527] name failslab, interval 1, probability 0, space 0, times 0 [ 691.742500][T28527] CPU: 0 UID: 0 PID: 28527 Comm: syz.2.7555 Not tainted syzkaller #0 PREEMPT(full) [ 691.742533][T28527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.742548][T28527] Call Trace: [ 691.742558][T28527] [ 691.742569][T28527] dump_stack_lvl+0x189/0x250 [ 691.742607][T28527] ? __pfx____ratelimit+0x10/0x10 [ 691.742640][T28527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.742671][T28527] ? __pfx__printk+0x10/0x10 [ 691.742702][T28527] ? __lock_acquire+0xab9/0xd20 [ 691.742734][T28527] should_fail_ex+0x414/0x560 [ 691.742776][T28527] should_failslab+0xa8/0x100 [ 691.742801][T28527] kmem_cache_alloc_noprof+0x74/0x6e0 [ 691.742834][T28527] ? skb_clone+0x212/0x3a0 [ 691.742868][T28527] skb_clone+0x212/0x3a0 [ 691.742900][T28527] __netlink_deliver_tap+0x404/0x850 [ 691.742940][T28527] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.742966][T28527] netlink_deliver_tap+0x19c/0x1b0 [ 691.742991][T28527] netlink_dump+0x92b/0xe90 [ 691.743029][T28527] ? __pfx_netlink_dump+0x10/0x10 [ 691.743084][T28527] netlink_recvmsg+0x676/0xa30 [ 691.743121][T28527] ? __pfx_netlink_recvmsg+0x10/0x10 [ 691.743144][T28527] ? irqentry_exit+0x74/0x90 [ 691.743175][T28527] ? exc_page_fault+0xab/0x100 [ 691.743220][T28527] ? __pfx_netlink_recvmsg+0x10/0x10 [ 691.743246][T28527] sock_recvmsg_nosec+0x186/0x1c0 [ 691.743284][T28527] ____sys_recvmsg+0x3aa/0x460 [ 691.743328][T28527] ? __pfx_____sys_recvmsg+0x10/0x10 [ 691.743374][T28527] ? import_iovec+0x74/0xa0 [ 691.743410][T28527] ___sys_recvmsg+0x1b5/0x510 [ 691.743444][T28527] ? __pfx____sys_recvmsg+0x10/0x10 [ 691.743511][T28527] ? __might_fault+0xb0/0x130 [ 691.743548][T28527] do_recvmmsg+0x307/0x770 [ 691.743587][T28527] ? __pfx_do_recvmmsg+0x10/0x10 [ 691.743630][T28527] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 691.743689][T28527] __x64_sys_recvmmsg+0x190/0x240 [ 691.743720][T28527] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 691.743753][T28527] ? do_syscall_64+0xbe/0xfa0 [ 691.743791][T28527] do_syscall_64+0xfa/0xfa0 [ 691.743823][T28527] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.743854][T28527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.743877][T28527] ? clear_bhb_loop+0x60/0xb0 [ 691.743906][T28527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.743928][T28527] RIP: 0033:0x7f582ed8f749 [ 691.743948][T28527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.743968][T28527] RSP: 002b:00007f582fbd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 691.743993][T28527] RAX: ffffffffffffffda RBX: 00007f582efe5fa0 RCX: 00007f582ed8f749 [ 691.744010][T28527] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 691.744030][T28527] RBP: 00007f582fbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 691.744044][T28527] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 691.744058][T28527] R13: 00007f582efe6038 R14: 00007f582efe5fa0 R15: 00007ffe7815f8d8 [ 691.744098][T28527] [ 692.385478][T28545] netlink: 'syz.3.7562': attribute type 10 has an invalid length. [ 692.410571][T28545] netlink: 'syz.3.7562': attribute type 31 has an invalid length. [ 693.073076][T28598] __nla_validate_parse: 11 callbacks suppressed [ 693.073099][T28598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7575'. [ 693.253361][T28612] FAULT_INJECTION: forcing a failure. [ 693.253361][T28612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.266801][T28612] CPU: 1 UID: 0 PID: 28612 Comm: syz.3.7581 Not tainted syzkaller #0 PREEMPT(full) [ 693.266832][T28612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.266847][T28612] Call Trace: [ 693.266856][T28612] [ 693.266875][T28612] dump_stack_lvl+0x189/0x250 [ 693.266913][T28612] ? __pfx____ratelimit+0x10/0x10 [ 693.266945][T28612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.266977][T28612] ? __pfx__printk+0x10/0x10 [ 693.267017][T28612] should_fail_ex+0x414/0x560 [ 693.267059][T28612] _copy_to_user+0x31/0xb0 [ 693.267092][T28612] simple_read_from_buffer+0xe1/0x170 [ 693.267134][T28612] proc_fail_nth_read+0x1b3/0x220 [ 693.267168][T28612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.267202][T28612] ? rw_verify_area+0x2a6/0x4d0 [ 693.267232][T28612] ? __lock_acquire+0xab9/0xd20 [ 693.267252][T28612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.267284][T28612] vfs_read+0x200/0xa30 [ 693.267315][T28612] ? fdget_pos+0x247/0x320 [ 693.267343][T28612] ? __pfx___mutex_lock+0x10/0x10 [ 693.267378][T28612] ? __pfx_vfs_read+0x10/0x10 [ 693.267412][T28612] ? __fget_files+0x2a/0x420 [ 693.267441][T28612] ? __fget_files+0x3a0/0x420 [ 693.267462][T28612] ? __fget_files+0x2a/0x420 [ 693.267496][T28612] ksys_read+0x145/0x250 [ 693.267531][T28612] ? __pfx_ksys_read+0x10/0x10 [ 693.267569][T28612] ? do_syscall_64+0xbe/0xfa0 [ 693.267608][T28612] do_syscall_64+0xfa/0xfa0 [ 693.267640][T28612] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.267680][T28612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.267703][T28612] ? clear_bhb_loop+0x60/0xb0 [ 693.267731][T28612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.267754][T28612] RIP: 0033:0x7fecadd8e15c [ 693.267775][T28612] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 693.267797][T28612] RSP: 002b:00007fecaec17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.267822][T28612] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8e15c [ 693.267840][T28612] RDX: 000000000000000f RSI: 00007fecaec170a0 RDI: 0000000000000003 [ 693.267856][T28612] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000048 [ 693.267878][T28612] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 693.267892][T28612] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 693.267934][T28612] [ 693.507076][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7578'. [ 693.971736][T28637] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7591'. [ 693.992851][T28639] pim6reg1: entered promiscuous mode [ 694.008238][T28639] pim6reg1: entered allmulticast mode [ 694.140396][T28649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7594'. [ 694.414814][T28668] IPVS: Error connecting to the multicast addr [ 694.427251][T28669] IPVS: Error connecting to the multicast addr [ 694.557617][T28677]  speed is unknown, defaulting to 1000 [ 694.566898][T28677] lo speed is unknown, defaulting to 1000 [ 694.595632][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7604'. [ 694.609262][T28680] netlink: 'syz.0.7604': attribute type 1 has an invalid length. [ 694.640854][T28680] 8021q: adding VLAN 0 to HW filter on device bond17 [ 694.675494][T28680] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 694.800971][T28687] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 694.827849][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7607'. [ 695.096010][T28700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7611'. [ 695.146370][T28703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7612'. [ 695.162914][T28703] C: renamed from lo [ 695.238798][T28707] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 695.265653][T28707] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 695.291465][T28709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7614'. [ 695.634600][T28733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7622'. [ 696.037708][T28748] sch_fq: defrate 0 ignored. [ 696.238563][T28760] openvswitch: netlink: Unknown key attributes 2 [ 696.847215][T28756] Cannot find set identified by id 3 to match [ 697.040440][T28792] vlan1: entered allmulticast mode [ 697.062154][T28792] bridge_slave_0: entered allmulticast mode [ 697.072667][T28799] netlink: 'syz.2.7644': attribute type 2 has an invalid length. [ 697.151624][T28799] 9: entered promiscuous mode [ 697.556490][T28831] netlink: 'syz.2.7651': attribute type 7 has an invalid length. [ 697.591458][T28831] netlink: 'syz.2.7651': attribute type 7 has an invalid length. [ 697.631078][T28831] 8021q: VLANs not supported on gre0 [ 698.253120][T28872] netlink: 'syz.3.7670': attribute type 10 has an invalid length. [ 698.261261][T28872] __nla_validate_parse: 11 callbacks suppressed [ 698.261289][T28872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7670'. [ 698.279570][T28878] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 698.286919][T28877] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7671'. [ 698.349322][T28872] dummy0: entered promiscuous mode [ 698.380277][T28872] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 698.532398][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.551724][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.571899][T28892] netlink: 'syz.1.7676': attribute type 5 has an invalid length. [ 698.588396][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.611866][T28892] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7676'. [ 698.621642][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.635742][T28892] netlink: 'syz.1.7676': attribute type 5 has an invalid length. [ 698.645019][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.669337][T28892] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7676'. [ 698.727477][T28892] netlink: 'syz.1.7676': attribute type 5 has an invalid length. [ 698.749760][T28892] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7676'. [ 698.760857][T28892] netlink: 'syz.1.7676': attribute type 5 has an invalid length. [ 698.766616][T28904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7680'. [ 698.794186][T28904] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7680'. [ 698.799642][T28892] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7676'. [ 698.831455][T28904] netlink: 'syz.2.7680': attribute type 5 has an invalid length. [ 698.843316][T28892] netlink: 'syz.1.7676': attribute type 5 has an invalid length. [ 698.869254][T28892] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7676'. [ 698.908557][T28892] netlink: 'syz.1.7676': attribute type 5 has an invalid length. [ 698.916611][T28892] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7676'. [ 699.472752][T28947] 8021q: VLANs not supported on ip6tnl0 [ 699.480726][T28948] tipc: Enabling of bearer rejected, already enabled [ 699.515570][T28948] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 699.533249][T28948] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 699.721587][T28956] veth7: entered allmulticast mode [ 699.746977][T28961] netlink: 'syz.4.7698': attribute type 11 has an invalid length. [ 700.152299][T28982] geneve3: entered promiscuous mode [ 700.167527][T28982] geneve3: entered allmulticast mode [ 700.194644][ T1320] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 700.218695][ T1320] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 700.257589][ T1320] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 700.301160][ T1320] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 700.763427][T29009] syzkaller0: entered promiscuous mode [ 700.769075][T29009] syzkaller0: entered allmulticast mode [ 700.923463][T29034] sctp: [Deprecated]: syz.1.7720 (pid 29034) Use of int in max_burst socket option. [ 700.923463][T29034] Use struct sctp_assoc_value instead [ 702.482676][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.071167][T29064] validate_nla: 30 callbacks suppressed [ 703.071191][T29064] netlink: 'syz.3.7726': attribute type 12 has an invalid length. [ 703.242224][T29076] netlink: 'syz.2.7732': attribute type 1 has an invalid length. [ 703.366772][T29080] __nla_validate_parse: 45 callbacks suppressed [ 703.366798][T29080] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7733'. [ 703.507278][T29084] tipc: Enabling of bearer rejected, already enabled [ 703.539957][T29084] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 703.547419][T29084] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 703.601812][T29084] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 703.994659][T29115] netlink: 'syz.1.7742': attribute type 16 has an invalid length. [ 704.011593][T29115] netlink: 'syz.1.7742': attribute type 3 has an invalid length. [ 704.020914][T29115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7742'. [ 704.216889][T29126] Cannot find set identified by id 3 to match [ 704.591200][T29146] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7752'. [ 704.625480][T29149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.822929][T29159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7756'. [ 704.996887][T29170] Cannot find set identified by id 3 to match [ 705.112968][T29174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.288740][T29187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7766'. [ 705.615956][T29206] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7771'. [ 705.629998][T29211] netlink: 'syz.0.7772': attribute type 10 has an invalid length. [ 705.659851][T29211] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7772'. [ 706.097194][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7785'. [ 706.469292][T29264] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7790'. [ 706.513420][T29264] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7790'. [ 707.010148][T29305] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 707.414383][T29328] Cannot find set identified by id 3 to match [ 707.535068][T29336] netlink: 'syz.2.7810': attribute type 3 has an invalid length. [ 707.682743][T29334] macsec4: entered promiscuous mode [ 707.688116][T29334] macsec4: entered allmulticast mode [ 707.694858][T29334] bond18: (slave macsec4): Error -34 calling dev_set_mtu [ 708.853486][T29401] __nla_validate_parse: 2 callbacks suppressed [ 708.853508][T29401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7830'. [ 709.838735][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.891089][T29421] netlink: zone id is out of range [ 710.896293][T29421] netlink: zone id is out of range [ 710.918607][T29421] netlink: zone id is out of range [ 710.924357][T29421] netlink: zone id is out of range [ 710.930607][T29421] netlink: zone id is out of range [ 710.936340][T29421] netlink: zone id is out of range [ 710.943458][T29421] netlink: zone id is out of range [ 710.950129][T29421] netlink: zone id is out of range [ 710.962142][T29421] netlink: zone id is out of range [ 710.983977][T29424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7837'. [ 711.090521][T29435] FAULT_INJECTION: forcing a failure. [ 711.090521][T29435] name failslab, interval 1, probability 0, space 0, times 0 [ 711.108753][T29435] CPU: 1 UID: 0 PID: 29435 Comm: syz.4.7842 Not tainted syzkaller #0 PREEMPT(full) [ 711.108785][T29435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.108799][T29435] Call Trace: [ 711.108809][T29435] [ 711.108819][T29435] dump_stack_lvl+0x189/0x250 [ 711.108857][T29435] ? __pfx____ratelimit+0x10/0x10 [ 711.108888][T29435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.108920][T29435] ? __pfx__printk+0x10/0x10 [ 711.108950][T29435] ? __pfx___might_resched+0x10/0x10 [ 711.108982][T29435] should_fail_ex+0x414/0x560 [ 711.109016][T29435] should_failslab+0xa8/0x100 [ 711.109037][T29435] __kmalloc_noprof+0xcb/0x7f0 [ 711.109062][T29435] ? kfree+0x4d/0x6d0 [ 711.109082][T29435] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 711.109117][T29435] tomoyo_realpath_from_path+0xe3/0x5d0 [ 711.109148][T29435] ? tomoyo_domain+0xd9/0x130 [ 711.109170][T29435] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 711.109194][T29435] tomoyo_path_number_perm+0x1e8/0x5a0 [ 711.109221][T29435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 711.109297][T29435] ? __fget_files+0x2a/0x420 [ 711.109320][T29435] ? __fget_files+0x3a0/0x420 [ 711.109335][T29435] ? __fget_files+0x2a/0x420 [ 711.109356][T29435] security_file_ioctl+0xcb/0x2d0 [ 711.109383][T29435] __se_sys_ioctl+0x47/0x170 [ 711.109408][T29435] do_syscall_64+0xfa/0xfa0 [ 711.109434][T29435] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.109460][T29435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.109478][T29435] ? clear_bhb_loop+0x60/0xb0 [ 711.109501][T29435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.109518][T29435] RIP: 0033:0x7f042798f749 [ 711.109535][T29435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.109550][T29435] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.109569][T29435] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 711.109583][T29435] RDX: 0000200000000540 RSI: 000000000000890c RDI: 0000000000000004 [ 711.109594][T29435] RBP: 00007f04288bd090 R08: 0000000000000000 R09: 0000000000000000 [ 711.109606][T29435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.109622][T29435] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 711.109678][T29435] [ 711.340351][T29435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 711.354830][T29437] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7843'. [ 711.364386][T29437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7843'. [ 711.459433][T29440] netlink: 'syz.0.7846': attribute type 2 has an invalid length. [ 711.469749][T29440] x_tables: unsorted underflow at hook 4 [ 711.574291][T29442] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7847'. [ 711.737615][T29454] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 711.915546][T29460] bridge0: Device is already in use. [ 711.971887][T29464] bond12: option all_slaves_active: invalid value (222) [ 712.004501][T29464] bond12 (unregistering): Released all slaves [ 712.075288][T29469] netlink: 'syz.0.7855': attribute type 3 has an invalid length. [ 712.193014][T29474]  speed is unknown, defaulting to 1000 [ 712.242852][T29474] C speed is unknown, defaulting to 1000 [ 712.956137][T29515] netlink: 'syz.0.7868': attribute type 3 has an invalid length. [ 712.969067][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'. [ 713.087557][T29525] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7870'. [ 713.211611][T29529] FAULT_INJECTION: forcing a failure. [ 713.211611][T29529] name failslab, interval 1, probability 0, space 0, times 0 [ 713.229799][T29529] CPU: 0 UID: 0 PID: 29529 Comm: syz.3.7873 Not tainted syzkaller #0 PREEMPT(full) [ 713.229832][T29529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.229847][T29529] Call Trace: [ 713.229856][T29529] [ 713.229868][T29529] dump_stack_lvl+0x189/0x250 [ 713.229904][T29529] ? __pfx____ratelimit+0x10/0x10 [ 713.229937][T29529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.229968][T29529] ? __pfx__printk+0x10/0x10 [ 713.230000][T29529] ? __pfx___might_resched+0x10/0x10 [ 713.230025][T29529] ? fs_reclaim_acquire+0x7d/0x100 [ 713.230067][T29529] should_fail_ex+0x414/0x560 [ 713.230109][T29529] should_failslab+0xa8/0x100 [ 713.230135][T29529] kmem_cache_alloc_node_noprof+0x77/0x710 [ 713.230168][T29529] ? __alloc_skb+0x112/0x2d0 [ 713.230205][T29529] __alloc_skb+0x112/0x2d0 [ 713.230233][T29529] netlink_dump+0x1b7/0xe90 [ 713.230255][T29529] ? __pfx__copy_to_iter+0x10/0x10 [ 713.230280][T29529] ? __skb_try_recv_from_queue+0x58f/0x730 [ 713.230319][T29529] ? __pfx_netlink_dump+0x10/0x10 [ 713.230376][T29529] netlink_recvmsg+0x676/0xa30 [ 713.230412][T29529] ? __pfx_netlink_recvmsg+0x10/0x10 [ 713.230441][T29529] ? irqentry_exit+0x74/0x90 [ 713.230472][T29529] ? exc_page_fault+0xab/0x100 [ 713.230518][T29529] ? __pfx_netlink_recvmsg+0x10/0x10 [ 713.230544][T29529] sock_recvmsg_nosec+0x186/0x1c0 [ 713.230582][T29529] ____sys_recvmsg+0x3aa/0x460 [ 713.230620][T29529] ? __pfx_____sys_recvmsg+0x10/0x10 [ 713.230667][T29529] ? import_iovec+0x74/0xa0 [ 713.230706][T29529] ___sys_recvmsg+0x1b5/0x510 [ 713.230739][T29529] ? __pfx____sys_recvmsg+0x10/0x10 [ 713.230803][T29529] ? __might_fault+0xb0/0x130 [ 713.230841][T29529] do_recvmmsg+0x307/0x770 [ 713.230878][T29529] ? __pfx_do_recvmmsg+0x10/0x10 [ 713.230920][T29529] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 713.230978][T29529] __x64_sys_recvmmsg+0x190/0x240 [ 713.231009][T29529] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 713.231042][T29529] ? do_syscall_64+0xbe/0xfa0 [ 713.231079][T29529] do_syscall_64+0xfa/0xfa0 [ 713.231110][T29529] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.231139][T29529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.231160][T29529] ? clear_bhb_loop+0x60/0xb0 [ 713.231187][T29529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.231209][T29529] RIP: 0033:0x7fecadd8f749 [ 713.231228][T29529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.231247][T29529] RSP: 002b:00007fecaec17038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 713.231271][T29529] RAX: ffffffffffffffda RBX: 00007fecadfe5fa0 RCX: 00007fecadd8f749 [ 713.231289][T29529] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 713.231303][T29529] RBP: 00007fecaec17090 R08: 0000000000000000 R09: 0000000000000000 [ 713.231318][T29529] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 713.231349][T29529] R13: 00007fecadfe6038 R14: 00007fecadfe5fa0 R15: 00007ffd813a0388 [ 713.231390][T29529] [ 713.556438][T29527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7872'. [ 713.750450][T29543] Cannot find set identified by id 3 to match [ 716.093551][T29595] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7894'. [ 716.255140][T29603] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7895'. [ 716.297380][T29607] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 716.511399][T29619] netlink: 'syz.1.7900': attribute type 3 has an invalid length. [ 716.790280][T29632] FAULT_INJECTION: forcing a failure. [ 716.790280][T29632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.818538][T29632] CPU: 1 UID: 0 PID: 29632 Comm: syz.0.7906 Not tainted syzkaller #0 PREEMPT(full) [ 716.818570][T29632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.818584][T29632] Call Trace: [ 716.818594][T29632] [ 716.818605][T29632] dump_stack_lvl+0x189/0x250 [ 716.818643][T29632] ? __pfx____ratelimit+0x10/0x10 [ 716.818677][T29632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.818709][T29632] ? __pfx__printk+0x10/0x10 [ 716.818735][T29632] ? __might_fault+0xb0/0x130 [ 716.818783][T29632] should_fail_ex+0x414/0x560 [ 716.818826][T29632] _copy_from_user+0x2d/0xb0 [ 716.818871][T29632] kstrtouint_from_user+0xc4/0x170 [ 716.818901][T29632] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 716.818948][T29632] proc_fail_nth_write+0x88/0x200 [ 716.818979][T29632] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 716.819018][T29632] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 716.819051][T29632] vfs_write+0x27e/0xb30 [ 716.819096][T29632] ? __pfx_vfs_write+0x10/0x10 [ 716.819130][T29632] ? __fget_files+0x2a/0x420 [ 716.819158][T29632] ? __fget_files+0x3a0/0x420 [ 716.819179][T29632] ? __fget_files+0x2a/0x420 [ 716.819213][T29632] ksys_write+0x145/0x250 [ 716.819244][T29632] ? __fget_files+0x2a/0x420 [ 716.819268][T29632] ? __pfx_ksys_write+0x10/0x10 [ 716.819306][T29632] ? do_syscall_64+0xbe/0xfa0 [ 716.819345][T29632] do_syscall_64+0xfa/0xfa0 [ 716.819377][T29632] ? lockdep_hardirqs_on+0x9c/0x150 [ 716.819410][T29632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.819439][T29632] ? clear_bhb_loop+0x60/0xb0 [ 716.819468][T29632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.819491][T29632] RIP: 0033:0x7fdd9578e1ff [ 716.819511][T29632] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 716.819531][T29632] RSP: 002b:00007fdd965eb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 716.819556][T29632] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdd9578e1ff [ 716.819572][T29632] RDX: 0000000000000001 RSI: 00007fdd965eb0a0 RDI: 0000000000000004 [ 716.819587][T29632] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 716.819601][T29632] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 716.819615][T29632] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 716.819656][T29632] [ 716.862182][T29636] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 716.962570][T29633] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7907'. [ 717.059546][T29636] bond12: entered allmulticast mode [ 717.220035][T29645] FAULT_INJECTION: forcing a failure. [ 717.220035][T29645] name failslab, interval 1, probability 0, space 0, times 0 [ 717.233229][T29645] CPU: 0 UID: 0 PID: 29645 Comm: syz.0.7911 Not tainted syzkaller #0 PREEMPT(full) [ 717.233259][T29645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.233274][T29645] Call Trace: [ 717.233284][T29645] [ 717.233294][T29645] dump_stack_lvl+0x189/0x250 [ 717.233332][T29645] ? __pfx____ratelimit+0x10/0x10 [ 717.233365][T29645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.233396][T29645] ? __pfx__printk+0x10/0x10 [ 717.233426][T29645] ? __lock_acquire+0xab9/0xd20 [ 717.233459][T29645] should_fail_ex+0x414/0x560 [ 717.233500][T29645] should_failslab+0xa8/0x100 [ 717.233525][T29645] kmem_cache_alloc_noprof+0x74/0x6e0 [ 717.233554][T29645] ? skb_clone+0x212/0x3a0 [ 717.233581][T29645] skb_clone+0x212/0x3a0 [ 717.233605][T29645] __netlink_deliver_tap+0x404/0x850 [ 717.233636][T29645] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.233656][T29645] netlink_deliver_tap+0x19c/0x1b0 [ 717.233675][T29645] netlink_dump+0x92b/0xe90 [ 717.233704][T29645] ? __pfx_netlink_dump+0x10/0x10 [ 717.233746][T29645] netlink_recvmsg+0x676/0xa30 [ 717.233783][T29645] ? __pfx_netlink_recvmsg+0x10/0x10 [ 717.233801][T29645] ? irqentry_exit+0x74/0x90 [ 717.233826][T29645] ? exc_page_fault+0xab/0x100 [ 717.233862][T29645] ? __pfx_netlink_recvmsg+0x10/0x10 [ 717.233882][T29645] sock_recvmsg_nosec+0x186/0x1c0 [ 717.233912][T29645] ____sys_recvmsg+0x3aa/0x460 [ 717.233942][T29645] ? __pfx_____sys_recvmsg+0x10/0x10 [ 717.233978][T29645] ? import_iovec+0x74/0xa0 [ 717.234007][T29645] ___sys_recvmsg+0x1b5/0x510 [ 717.234034][T29645] ? __pfx____sys_recvmsg+0x10/0x10 [ 717.234086][T29645] ? __might_fault+0xb0/0x130 [ 717.234116][T29645] do_recvmmsg+0x307/0x770 [ 717.234146][T29645] ? __pfx_do_recvmmsg+0x10/0x10 [ 717.234180][T29645] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 717.234226][T29645] __x64_sys_recvmmsg+0x190/0x240 [ 717.234251][T29645] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 717.234277][T29645] ? do_syscall_64+0xbe/0xfa0 [ 717.234308][T29645] do_syscall_64+0xfa/0xfa0 [ 717.234333][T29645] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.234359][T29645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.234377][T29645] ? clear_bhb_loop+0x60/0xb0 [ 717.234399][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.234417][T29645] RIP: 0033:0x7fdd9578f749 [ 717.234435][T29645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.234452][T29645] RSP: 002b:00007fdd965eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 717.234471][T29645] RAX: ffffffffffffffda RBX: 00007fdd959e5fa0 RCX: 00007fdd9578f749 [ 717.234485][T29645] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 717.234496][T29645] RBP: 00007fdd965eb090 R08: 0000000000000000 R09: 0000000000000000 [ 717.234506][T29645] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 717.234517][T29645] R13: 00007fdd959e6038 R14: 00007fdd959e5fa0 R15: 00007fff7f1d8ab8 [ 717.234548][T29645] [ 717.561255][T29649] mac80211_hwsim hwsim7 wlan0: Caught tx_queue_len zero misconfig [ 717.693840][T29659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7914'. [ 717.765044][T29663] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7917'. [ 717.854573][T29666] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7919'. [ 718.021792][T29669] [ 718.024195][T29669] ====================================================== [ 718.031239][T29669] WARNING: possible circular locking dependency detected [ 718.038493][T29669] syzkaller #0 Not tainted [ 718.042946][T29669] ------------------------------------------------------ [ 718.050008][T29669] syz.4.7920/29669 is trying to acquire lock: [ 718.056105][T29669] ffff888024bed468 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 718.065578][T29669] [ 718.065578][T29669] but task is already holding lock: [ 718.073065][T29669] ffff888024becf28 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 718.083333][T29669] [ 718.083333][T29669] which lock already depends on the new lock. [ 718.083333][T29669] [ 718.093783][T29669] [ 718.093783][T29669] the existing dependency chain (in reverse order) is: [ 718.102833][T29669] [ 718.102833][T29669] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 718.111603][T29669] lock_acquire+0x120/0x360 [ 718.116688][T29669] blk_alloc_queue+0x538/0x620 [ 718.122035][T29669] __blk_mq_alloc_disk+0x15c/0x340 [ 718.127730][T29669] nbd_dev_add+0x46c/0xae0 [ 718.132695][T29669] nbd_init+0x1c6/0x240 [ 718.137475][T29669] do_one_initcall+0x236/0x820 [ 718.142783][T29669] do_initcall_level+0x104/0x190 [ 718.148263][T29669] do_initcalls+0x59/0xa0 [ 718.153133][T29669] kernel_init_freeable+0x334/0x4b0 [ 718.158872][T29669] kernel_init+0x1d/0x1d0 [ 718.163751][T29669] ret_from_fork+0x4bc/0x870 [ 718.168880][T29669] ret_from_fork_asm+0x1a/0x30 [ 718.174182][T29669] [ 718.174182][T29669] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 718.181500][T29669] lock_acquire+0x120/0x360 [ 718.186539][T29669] fs_reclaim_acquire+0x72/0x100 [ 718.192034][T29669] kmem_cache_alloc_node_noprof+0x48/0x710 [ 718.198399][T29669] __alloc_skb+0x112/0x2d0 [ 718.203354][T29669] __ip6_append_data+0x2c16/0x3f30 [ 718.209014][T29669] ip6_append_data+0x1c1/0x380 [ 718.214324][T29669] rawv6_sendmsg+0x1286/0x1830 [ 718.219632][T29669] __sock_sendmsg+0x19c/0x270 [ 718.224882][T29669] ____sys_sendmsg+0x505/0x830 [ 718.230203][T29669] ___sys_sendmsg+0x21f/0x2a0 [ 718.235435][T29669] __x64_sys_sendmsg+0x19b/0x260 [ 718.240938][T29669] do_syscall_64+0xfa/0xfa0 [ 718.245998][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.252431][T29669] [ 718.252431][T29669] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 718.260191][T29669] lock_acquire+0x120/0x360 [ 718.265231][T29669] lock_sock_nested+0x48/0x100 [ 718.270537][T29669] inet_shutdown+0x6a/0x390 [ 718.275632][T29669] nbd_mark_nsock_dead+0x2e9/0x560 [ 718.281281][T29669] recv_work+0x1af4/0x1c10 [ 718.286274][T29669] process_scheduled_works+0xae1/0x17b0 [ 718.292441][T29669] worker_thread+0x8a0/0xda0 [ 718.297606][T29669] kthread+0x711/0x8a0 [ 718.302234][T29669] ret_from_fork+0x4bc/0x870 [ 718.307379][T29669] ret_from_fork_asm+0x1a/0x30 [ 718.312703][T29669] [ 718.312703][T29669] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 718.320381][T29669] lock_acquire+0x120/0x360 [ 718.325420][T29669] __mutex_lock+0x187/0x1350 [ 718.330560][T29669] nbd_queue_rq+0x257/0xf10 [ 718.335702][T29669] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 718.341799][T29669] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 718.348701][T29669] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 718.355228][T29669] blk_mq_run_hw_queue+0x348/0x4f0 [ 718.360880][T29669] blk_mq_dispatch_list+0xd0c/0xe00 [ 718.366623][T29669] blk_mq_flush_plug_list+0x469/0x550 [ 718.372573][T29669] __blk_flush_plug+0x3d3/0x4b0 [ 718.377973][T29669] __submit_bio+0x2d3/0x5a0 [ 718.383012][T29669] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 718.389190][T29669] block_read_full_folio+0x599/0x830 [ 718.395018][T29669] filemap_read_folio+0x117/0x380 [ 718.400607][T29669] do_read_cache_folio+0x350/0x590 [ 718.406260][T29669] read_part_sector+0xb6/0x2b0 [ 718.411566][T29669] adfspart_check_ICS+0xa4/0xa50 [ 718.417042][T29669] bdev_disk_changed+0x75f/0x14b0 [ 718.422612][T29669] blkdev_get_whole+0x380/0x510 [ 718.428011][T29669] bdev_open+0x31e/0xd30 [ 718.432796][T29669] blkdev_open+0x457/0x600 [ 718.437747][T29669] do_dentry_open+0x953/0x13f0 [ 718.443074][T29669] vfs_open+0x3b/0x340 [ 718.447701][T29669] path_openat+0x2ee5/0x3830 [ 718.452832][T29669] do_filp_open+0x1fa/0x410 [ 718.457874][T29669] do_sys_openat2+0x121/0x1c0 [ 718.463097][T29669] __x64_sys_openat+0x138/0x170 [ 718.468487][T29669] do_syscall_64+0xfa/0xfa0 [ 718.473531][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.479975][T29669] [ 718.479975][T29669] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 718.487209][T29669] lock_acquire+0x120/0x360 [ 718.492258][T29669] __mutex_lock+0x187/0x1350 [ 718.497395][T29669] nbd_queue_rq+0xc8/0xf10 [ 718.502369][T29669] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 718.508461][T29669] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 718.515345][T29669] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 718.521871][T29669] blk_mq_run_hw_queue+0x348/0x4f0 [ 718.527528][T29669] blk_mq_dispatch_list+0xd0c/0xe00 [ 718.533279][T29669] blk_mq_flush_plug_list+0x469/0x550 [ 718.539199][T29669] __blk_flush_plug+0x3d3/0x4b0 [ 718.544605][T29669] __submit_bio+0x2d3/0x5a0 [ 718.549655][T29669] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 718.555831][T29669] block_read_full_folio+0x599/0x830 [ 718.561665][T29669] filemap_read_folio+0x117/0x380 [ 718.567224][T29669] do_read_cache_folio+0x350/0x590 [ 718.572869][T29669] read_part_sector+0xb6/0x2b0 [ 718.578181][T29669] adfspart_check_ICS+0xa4/0xa50 [ 718.583676][T29669] bdev_disk_changed+0x75f/0x14b0 [ 718.589254][T29669] blkdev_get_whole+0x380/0x510 [ 718.594652][T29669] bdev_open+0x31e/0xd30 [ 718.599434][T29669] blkdev_open+0x457/0x600 [ 718.604381][T29669] do_dentry_open+0x953/0x13f0 [ 718.609677][T29669] vfs_open+0x3b/0x340 [ 718.614314][T29669] path_openat+0x2ee5/0x3830 [ 718.619442][T29669] do_filp_open+0x1fa/0x410 [ 718.624502][T29669] do_sys_openat2+0x121/0x1c0 [ 718.629717][T29669] __x64_sys_openat+0x138/0x170 [ 718.635107][T29669] do_syscall_64+0xfa/0xfa0 [ 718.640156][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.646588][T29669] [ 718.646588][T29669] -> #1 (set->srcu){.+.+}-{0:0}: [ 718.653765][T29669] lock_sync+0xba/0x160 [ 718.658455][T29669] __synchronize_srcu+0x96/0x3a0 [ 718.663921][T29669] elevator_switch+0x12b/0x640 [ 718.669251][T29669] elevator_change+0x315/0x4c0 [ 718.674679][T29669] elevator_set_default+0x186/0x260 [ 718.680437][T29669] blk_register_queue+0x34e/0x3f0 [ 718.686000][T29669] __add_disk+0x677/0xd50 [ 718.690864][T29669] add_disk_fwnode+0xfc/0x480 [ 718.696082][T29669] nbd_dev_add+0x717/0xae0 [ 718.701128][T29669] nbd_init+0x1c6/0x240 [ 718.705930][T29669] do_one_initcall+0x236/0x820 [ 718.711261][T29669] do_initcall_level+0x104/0x190 [ 718.716748][T29669] do_initcalls+0x59/0xa0 [ 718.721629][T29669] kernel_init_freeable+0x334/0x4b0 [ 718.727366][T29669] kernel_init+0x1d/0x1d0 [ 718.732230][T29669] ret_from_fork+0x4bc/0x870 [ 718.737361][T29669] ret_from_fork_asm+0x1a/0x30 [ 718.742660][T29669] [ 718.742660][T29669] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 718.750506][T29669] validate_chain+0xb9b/0x2140 [ 718.755830][T29669] __lock_acquire+0xab9/0xd20 [ 718.761045][T29669] lock_acquire+0x120/0x360 [ 718.766211][T29669] __mutex_lock+0x187/0x1350 [ 718.771352][T29669] elevator_change+0x1e5/0x4c0 [ 718.776658][T29669] elevator_set_none+0x42/0xb0 [ 718.781972][T29669] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 718.788317][T29669] nbd_start_device+0x17f/0xb10 [ 718.793708][T29669] nbd_genl_connect+0x135b/0x18f0 [ 718.799272][T29669] genl_family_rcv_msg_doit+0x215/0x300 [ 718.805359][T29669] genl_rcv_msg+0x60e/0x790 [ 718.810399][T29669] netlink_rcv_skb+0x208/0x470 [ 718.815695][T29669] genl_rcv+0x28/0x40 [ 718.820213][T29669] netlink_unicast+0x82f/0x9e0 [ 718.825519][T29669] netlink_sendmsg+0x805/0xb30 [ 718.830818][T29669] __sock_sendmsg+0x21c/0x270 [ 718.836038][T29669] ____sys_sendmsg+0x505/0x830 [ 718.841338][T29669] ___sys_sendmsg+0x21f/0x2a0 [ 718.846614][T29669] __x64_sys_sendmsg+0x19b/0x260 [ 718.852094][T29669] do_syscall_64+0xfa/0xfa0 [ 718.857226][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.863651][T29669] [ 718.863651][T29669] other info that might help us debug this: [ 718.863651][T29669] [ 718.873891][T29669] Chain exists of: [ 718.873891][T29669] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 718.873891][T29669] [ 718.887660][T29669] Possible unsafe locking scenario: [ 718.887660][T29669] [ 718.895141][T29669] CPU0 CPU1 [ 718.900526][T29669] ---- ---- [ 718.905905][T29669] lock(&q->q_usage_counter(io)#54); [ 718.911304][T29669] lock(fs_reclaim); [ 718.917816][T29669] lock(&q->q_usage_counter(io)#54); [ 718.925732][T29669] lock(&q->elevator_lock); [ 718.930338][T29669] [ 718.930338][T29669] *** DEADLOCK *** [ 718.930338][T29669] [ 718.938488][T29669] 6 locks held by syz.4.7920/29669: [ 718.943698][T29669] #0: ffffffff8f331bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 718.951913][T29669] #1: ffffffff8f3319e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 718.960909][T29669] #2: ffff888024dc41c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 718.972333][T29669] #3: ffff888024dc40d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 718.983321][T29669] #4: ffff888024becf28 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 718.993985][T29669] #5: ffff888024becf60 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 719.004919][T29669] [ 719.004919][T29669] stack backtrace: [ 719.010823][T29669] CPU: 0 UID: 0 PID: 29669 Comm: syz.4.7920 Not tainted syzkaller #0 PREEMPT(full) [ 719.010847][T29669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.010860][T29669] Call Trace: [ 719.010871][T29669] [ 719.010882][T29669] dump_stack_lvl+0x189/0x250 [ 719.010920][T29669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.010946][T29669] ? __pfx__printk+0x10/0x10 [ 719.010966][T29669] ? print_lock_name+0xde/0x100 [ 719.010986][T29669] print_circular_bug+0x2ee/0x310 [ 719.011013][T29669] check_noncircular+0x134/0x160 [ 719.011040][T29669] validate_chain+0xb9b/0x2140 [ 719.011075][T29669] __lock_acquire+0xab9/0xd20 [ 719.011096][T29669] ? elevator_change+0x1e5/0x4c0 [ 719.011123][T29669] lock_acquire+0x120/0x360 [ 719.011140][T29669] ? elevator_change+0x1e5/0x4c0 [ 719.011175][T29669] __mutex_lock+0x187/0x1350 [ 719.011204][T29669] ? elevator_change+0x1e5/0x4c0 [ 719.011232][T29669] ? xa_find_after+0xae/0x430 [ 719.011253][T29669] ? xa_find_after+0x402/0x430 [ 719.011270][T29669] ? elevator_change+0x1e5/0x4c0 [ 719.011295][T29669] ? xa_find_after+0xae/0x430 [ 719.011313][T29669] ? __pfx___mutex_lock+0x10/0x10 [ 719.011345][T29669] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 719.011369][T29669] elevator_change+0x1e5/0x4c0 [ 719.011400][T29669] elevator_set_none+0x42/0xb0 [ 719.011429][T29669] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 719.011460][T29669] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 719.011490][T29669] ? sysfs_add_file_mode_ns+0x259/0x300 [ 719.011516][T29669] nbd_start_device+0x17f/0xb10 [ 719.011540][T29669] ? device_create_file+0xf4/0x1c0 [ 719.011563][T29669] nbd_genl_connect+0x135b/0x18f0 [ 719.011586][T29669] ? __pfx_nbd_genl_connect+0x10/0x10 [ 719.011608][T29669] ? rcu_is_watching+0x15/0xb0 [ 719.011632][T29669] ? __nla_parse+0x40/0x60 [ 719.011653][T29669] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 719.011685][T29669] genl_family_rcv_msg_doit+0x215/0x300 [ 719.011714][T29669] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 719.011746][T29669] ? stack_trace_save+0x9c/0xe0 [ 719.011774][T29669] genl_rcv_msg+0x60e/0x790 [ 719.011800][T29669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 719.011823][T29669] ? __pfx_nbd_genl_connect+0x10/0x10 [ 719.011849][T29669] netlink_rcv_skb+0x208/0x470 [ 719.011865][T29669] ? __lock_acquire+0xab9/0xd20 [ 719.011883][T29669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 719.011913][T29669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 719.011941][T29669] ? down_read+0x1ad/0x2e0 [ 719.011959][T29669] genl_rcv+0x28/0x40 [ 719.011980][T29669] netlink_unicast+0x82f/0x9e0 [ 719.012012][T29669] ? __pfx_netlink_unicast+0x10/0x10 [ 719.012040][T29669] ? netlink_sendmsg+0x642/0xb30 [ 719.012057][T29669] ? skb_put+0x11b/0x210 [ 719.012077][T29669] netlink_sendmsg+0x805/0xb30 [ 719.012101][T29669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.012120][T29669] ? aa_sock_msg_perm+0xf1/0x1d0 [ 719.012150][T29669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 719.012168][T29669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.012187][T29669] __sock_sendmsg+0x21c/0x270 [ 719.012213][T29669] ____sys_sendmsg+0x505/0x830 [ 719.012236][T29669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.012261][T29669] ? import_iovec+0x74/0xa0 [ 719.012286][T29669] ___sys_sendmsg+0x21f/0x2a0 [ 719.012307][T29669] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.012346][T29669] ? __fget_files+0x2a/0x420 [ 719.012363][T29669] ? __fget_files+0x3a0/0x420 [ 719.012386][T29669] __x64_sys_sendmsg+0x19b/0x260 [ 719.012407][T29669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 719.012436][T29669] ? do_syscall_64+0xbe/0xfa0 [ 719.012466][T29669] do_syscall_64+0xfa/0xfa0 [ 719.012492][T29669] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.012518][T29669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.012536][T29669] ? clear_bhb_loop+0x60/0xb0 [ 719.012557][T29669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.012575][T29669] RIP: 0033:0x7f042798f749 [ 719.012593][T29669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.012610][T29669] RSP: 002b:00007f04288bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.012629][T29669] RAX: ffffffffffffffda RBX: 00007f0427be5fa0 RCX: 00007f042798f749 [ 719.012643][T29669] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 719.012656][T29669] RBP: 00007f0427a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 719.012669][T29669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.012680][T29669] R13: 00007f0427be6038 R14: 00007f0427be5fa0 R15: 00007fffc9063c68 [ 719.012704][T29669] [ 719.455424][T29647] delete_channel: no stack [ 719.522297][ T52] block nbd5: Receive control failed (result -32) [ 719.528967][ T52] block nbd5: Receive control failed (result -32) [ 719.548536][T29669] nbd5: detected capacity change from 0 to 127 [ 724.558598][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration