last executing test programs: 1m23.523730624s ago: executing program 4 (id=12338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000000004008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 1m23.460609414s ago: executing program 4 (id=12339): socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 1m23.334651644s ago: executing program 4 (id=12340): socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x40c0) 1m23.108199315s ago: executing program 4 (id=12344): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1m22.858435858s ago: executing program 4 (id=12346): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socket$igmp(0x2, 0x3, 0x2) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000440)=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38) 1m19.605838197s ago: executing program 4 (id=12372): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r1 = epoll_create1(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @short}, 0xb, &(0x7f0000000080)={0x0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000000000)={0x10000000}) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 1m4.47171528s ago: executing program 32 (id=12372): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r1 = epoll_create1(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @short}, 0xb, &(0x7f0000000080)={0x0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1a000, r2, &(0x7f0000000000)={0x10000000}) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) 7.918854261s ago: executing program 5 (id=12873): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0xffff0000, 0x10}, 0x4000) 7.652126205s ago: executing program 2 (id=12876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r2, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e25, @empty}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000a00000000070000008500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000440)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 7.475019704s ago: executing program 5 (id=12878): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x5, 0x4, 0x28, @private1, @mcast1, 0x8000, 0x80, 0x8, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8, 0x40, 0x7, 0x3ff, {{0x23, 0x4, 0x0, 0x17, 0x8c, 0x65, 0x0, 0x3c, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@cipso={0x86, 0x14, 0x2, [{0x0, 0xe, "b1144ab8aa8e9858d516ff15"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x35, 0x3, [{0x1, 0x9, "230d56dc76bb5b"}, {0x0, 0x4, "b113"}, {0x5, 0x10, "f658d046bdbe711ed98ceb91ace3"}, {0x6, 0x12, "fead5a3aed2aa0aff066bf82927716be"}]}, @timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0x0, [{@local, 0x5}, {@multicast1, 0x1}, {@loopback, 0xba}, {@rand_addr=0x64010101, 0x8db}]}]}}}}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x34, 0x26, 0x909750c252560f32, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf, 0xb}, {0x0, 0xfdef22b0e9226457}, {0x181f33e3c925104, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x2, 0x0, 0x24, @remote, @empty, 0x8000, 0x40, 0x400, 0x8}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'geneve1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) r12 = socket$inet(0x10, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth1_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) (async) r16 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r16, &(0x7f0000000300)={0x1d, r17}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_macvtap\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="cc080000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="c001028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f9ffffff0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="ec0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004006faa000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="640007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r8, @ANYBLOB="40000200010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003000600000004000400080006002532cb83582cb18eb257b4b83369ffe1177c34532b0f78c2593a70650e9347a236113a9e9450dbf14ba934ea108a128ab63da6931b7540bf9c844e00b986341bb851d28dd025aa29a10fb2b45bb1efdfd06394565320d41308af1f551ebbc1ea6e9bcfba1588e38e725c394ddba37cb67b96b037", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="8c01028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff7f000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000004000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r13, @ANYBLOB="e80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004006e000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r18, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff0f000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004004000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004001500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r20, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x8cc}, 0x1, 0x0, 0x0, 0x8045}, 0x4000) (async) r21 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r21, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000002b000701fefffffffbdbdf25037c00000c000180080000000000ffff100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2501000000499802cc5a88e2d3e21ee7bff80e53a85d6b000d6f710702ce007605dff371fe9acc099f51e092e3f840b811ad662ecdc0749a44078c629d3461b6152e70bc519fb4b2ef6797374f1b469f9ce5dd4afecfba568971ede1eafb2bcac79cf73629097ed7d7f2a1efc5efc9293a7522bd87359c7df1d941bbffdbc49eaffb66d92589260abc5eeb25ebc6a2836d1be9bd6ff6cef9f0f5ef687a8088c9975f9297f050944e426ecc84f230d2331ccb69a788a332b4e277f9d1d5ebf64166e3f79a9d2680f7c221080ee120fd"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) 7.158646736s ago: executing program 5 (id=12881): unshare(0x600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000380)=0x1, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000c04d823c185a084056d721b45453df517521415292a10914aa17dfa7b207a7de8e015b05acc39bf986453f0ff3493563e98e6b104b973078293e5ae01f9e0bda627b7ebd797b64b82201f6fe9b93b5a5ce93f5e13f5383a6ecd5038c5e2b14324ad22c0aea479f"], 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000001c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0xffffffffffffff79, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000019c0)={0x954, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x514, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "1b67e2327155d9179e7b6a61fdce2e0abd584d2c05baaea995946c92"}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "7c9955e62e8c0ad8693142790c88c4bb7b94611321892d5def31c7d5dc"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "432d04a291b682703e7e288df8bd075af8c03f0ebaca0c6af0a3df4f1a593e38b12ab519f14fa897e23c918a28649939fc6f9ebafb2f705fe356f4ec8a60cc9c05bb5c1ee2abf74122103777555e12e04ab404e69e6f3e444b1492891a0a999c6d0c64e2f0ada4090f6e2d222e65eb2fe195019e7aedc37eb81a7923fd81154ad59c672ee3a6d658626379de75c6cffd760b686740b2cf1836e4508154043c8efe7667643b5ac194be27d6f96e356cc09781295737e8542821370ef70748e20bbe2a011b3eba1fcbcc118915c12bb9476df178ddc8d482ff3023dd7794dd1a1f96858f2d35fe4c107ece0cc43a6d36637cb6e7"}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "2210f703a4d79c927ac79bd75698311d436ecb03244875bc645321fe284585e264e7937c84c6caa3a2935d0da9e8ab2c36b848a1b6f1f1afe06ab0ceed2d769245e9be195c3e166164473c38a04b01cca91d09056877ebe15acad789f8e13514d8e7402b5c7781aa372d7d606757cd79834f45154b15e4c386a2aedec5f4e714555881c81f2cf7e40d2420c242a0a149664af9d0fc7bf645780055aca9642e6cd8c1d955c25bdf34c9b4f765317a3dbfeafbcebcc55d16a80e3b091dfccbfa2b9f4aefac2ea843"}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "79fc4eb2f4d297ed4e65ed79aa511e8d3f7153543e0fdee3dc2ddced2a8f7263d423ed35d68891688457aa2f712f6e5fbf60007dda804f5970aeb782c496c290633662b601b6aca1f5363d95c01a8bea2213503a5ed6ae35969d4ed303ce8c5f2614b3ec2240e1a98980784c3827ca9ff939f86349d6c53b0bd71f3beb4319002fa6821b09a439adbe5238ea92"}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "39134ca4b55bbb18e6fc5c8d0b681fb33c65e0fd33b67042ea46e8476dd2487058d3699e5484c60f78a093fd875cd623a6e080e56158296682c71f4f32a284f83d52d5599d9981b2a297e201a4eb863fa450173867a2a59338af5366a376c652527415d95561cb230df12cb6c105da6858c27954985d89d90e75126bc10c3117c8d5f254ad38230255a78df8f4e6a1d4cd32b3d6aee0523945546a42427c0a073eb62b8ccef682cd1193ad8a30f37e88d77748b5bc1a0830e1d9fc7e16b8856d71ad08ff8fadb3613fb0ffd5abb5ee25d94f1f01677d038fc7b0cba30e"}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*(#\x12!*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '({%$-/\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xdd.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "5fd689f8120737624445f64df59a2c0b90ce8d141c094363e92e02dd955af1b957232f78324c8c0f19f61fa252724f7838e8cde578b1f6e28577deb4a9560b529e2c8d45b2fbadca4abfae3e4887e58d1a11531dd8ecc0c121b34d078a79ec233a945aabe74437a6dbb18bee4476a64bfd12f48b691262c8ff66b02b67646f91bd436eb0d1810a25b29ea69b77b0a51f52eb6b28ba11a84162ec0e998ca160d8d9072c43028d3cc407e1ae291f2c3824aafd7e8e06e1481d0a36dde5b4499df259b9584d81ccc0"}]}, @ETHTOOL_A_FEATURES_WANTED={0x2d8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!\'}-{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa053}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "84320280783b2e978d840aea922ac623185bc4c660dae3563c9cda240a1ee564ac38a2845fde189f67be71da4375eccc022dd49955c08ed322428adb47218ed866b5e303dbfd61ce02cc7325f378d4037608ce6854257c1cc96054526be69c4b167ed8658d2ed8fbebc28c91b3436898ab0ef99b28cfe5e7c631877dfe8cf069f84bbddbffc056e6e8783c97b62b91a9b5b6289f95cf1843df82d44f91a299341f9ba198bbd815554d0282b2"}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'/}\\:$(\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x300}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '^{%[*\x87\'.#*&$]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x4}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5947}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x91f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe, 0x5, "23f4617c20cad7344fec"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9cb}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '^'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '+$}:$-[\x8f-%!{(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x954}, 0x1, 0x0, 0x0, 0x40}, 0x804) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="d01986736357d309dd11f056484106dcc597d3e6089b3a7d3643627ba15822bb5739dbcb4fba806afd13e6fa62c2e1a19509d6512939c0aa5d64440928a22d6d6dcc6030b801966bf9a6c3d615fb9c9fc52a58179e3255af6dd684ccf290cbe0849f6adf7e2e7ec08d284fb9ca27d0b9a207c6f96785a8046e3ee85c083066a512aaf9a900566d915f99f5adc5c820251c5b978f027225696bef8b09c249a9d21efeee1d9fc2451568529c97b2762e40fbb5fbdecdfb62ad2c8e34da7c2868d89e7ea51c916dc6c71519dd171e44540e7a6a15353dd2b5d609b306186fcaed79787ac9e78f34383ab28b310a4b26", @ANYRES16, @ANYBLOB="000426bd7000ffdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8009}, 0x20040000) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x2, r4}, 0x10) 6.941730734s ago: executing program 0 (id=12883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x832b, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @private0, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) accept$inet(r1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) getpeername$ax25(r3, &(0x7f0000000540)={{0x3, @default}, [@netrom, @rose, @netrom, @netrom, @bcast, @bcast, @bcast, @bcast]}, &(0x7f0000000300)=0x48) write$cgroup_pid(r11, &(0x7f0000000c40), 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0xfffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x73}}}, &(0x7f0000000400)=0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x2a}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r8, 0x400, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) 6.464891127s ago: executing program 0 (id=12884): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000400)="bceaef4bb1fba63734c9c89de08cd1c13089806daaf388d3c6ee0cb85a7c87d883cdc5326597c514e198e9856434aeed90b8569111db8c67b1270eac776118b598ae5e90ecfc325770514c2fba61e62929f645a48ebf7b7406d0be670bbc86b1be57960bd6f6ccabc75270a62e790e738ffe5f7b637096df215ae308d0bcf8144d6db0bde96f11f733779137659348bd3b031acd9463ecb98427dafab0ab182fa2119c606e571b1eba2007268eecf9008b53e0dc8c4622b1c906d33bf337faebe6030f38d654bd707e65b8382d7f6e16") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 6.422718831s ago: executing program 5 (id=12885): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00050037d7ac"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0xfffffffa, 0x1, {{0x3c, 0x4, 0x0, 0x1, 0xf0, 0x64, 0x0, 0xb0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@end, @noop, @cipso={0x86, 0x4e, 0x1, [{0x5, 0x11, "f2252c8110827902b157270d54129d"}, {0x1, 0xe, "e76469f4b0b7d4fb3c2ab717"}, {0x0, 0x12, "9f6a5e3894c8a42280602e562a643e2f"}, {0x0, 0xe, "e5cf139517621ebecc640b02"}, {0x4, 0x9, "d2e01cf30fe1f4"}]}, @timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0x1, [{@private=0xa010101, 0x7}, {@broadcast, 0x7fff}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7}, {@multicast2, 0x4}, {@multicast1, 0x1}, {@multicast1, 0xe5}]}, @noop, @noop, @rr={0x7, 0x1f, 0x2c, [@loopback, @local, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @local, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x6}]}, @lsrr={0x83, 0x1b, 0xfa, [@rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0xfffffff0, 0x35, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x5, 0x7fffffff}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r4], 0x78}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$inet6(0xa, 0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 5.941794921s ago: executing program 0 (id=12886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2c060000) unshare(0x2c020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r2, 0x5450b000) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c"], 0x48}, 0x1, 0x0, 0x0, 0x240048d0}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x210600, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f00000000c0)=0x7fffffff) 5.866099233s ago: executing program 5 (id=12887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="cf", 0x1}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 5.556793386s ago: executing program 0 (id=12888): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aafe97198525940643f6bb155f44fdd308d88cdfc2710b5a", 0x18, 0x80a4, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="ea0f2a20b6c1b805a550d9f8ccc6ea3abbfbb94e2ee74557247f75a076c35581c1eea62982a64538252fc5d53930d240eafaefb0640e45343b3291ee06a690b34fd9f176fbc9f0d9a2cd1fbe1cf74edfe0bbbcca77792f9832fc", 0x5a}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000000000001400000000000000290000000800000003000000000000001f25fcd1bdb26028e2df091cf019c7e7ce6e019951f8c65e9186726d4a8d67f3ab36c3b613da849a55fc228666a86b5d64d407b08a1b65d47954421e984dfe80944b5f8e20b933f50cc8c4a83f46308f30123e98f20204e3e6e2c7c333bb36144d145f0cc03b6b6725339f0dade2c0df6263a12e3193e7932249c81b6badbf1dc2d8f099b3f2398c2a4e5db474644cf6aadb5e7e7d98989eda3f2e5e0af0edb84933036591bf86ead1e06094d1cc62d340bb3e2132fe9970dcb93b9fb9"], 0x30}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r2, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000002800)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x67, 0x0, 0x7f, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x40, 0x100}}}}}}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64090100}]}, &(0x7f0000000140)=0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1e, 0x1, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt(r8, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={0x0, 0x70}, 0x1, 0x7}, 0x0) 4.576682117s ago: executing program 0 (id=12892): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r2, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e25, @empty}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000a00000000070000008500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000440)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 4.554884545s ago: executing program 2 (id=12893): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x21, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 4.374492096s ago: executing program 2 (id=12894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 4.157282956s ago: executing program 2 (id=12895): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b2b, 0x0) 3.756338575s ago: executing program 1 (id=12898): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 3.610527782s ago: executing program 1 (id=12899): unshare(0x22020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0x1000000, 0xffffffff, 0x2d0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x4, 0x0, 0x28}, 0x0, 0x288, 0x2d0, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x3, 0x0, 0x2, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@unspec=@string={{0xc0}, {0x2, 0x1, 'fsm\x00', "9ec32ee45a5c6e2c7dff8279eecd535bd1b2e907379442112a7d95f532240f0474530bb9c77ce8f966d4fec687ede497680439dee539066cc36ea5f435f41abcb11995306190bd92f296db4a013b78c76e3b9d40b0fb0ad95fb4e71a6684a888d4255343c9958c533c037ad96a48f47905dcd9e67ea3690756cc902e972b2a3f", 0x2, 0x1, {0x9}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x5, 0xce, 'netbios-ns\x00', {0x1c}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x4, 0x1, 0x5, 0x3, 0x2, 0x6], 0x2, 0x1}}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0xe7, 'netbios-ns\x00', {0x3ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x4e0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) sendfile(r6, r6, &(0x7f00000001c0)=0x1000000000e17, 0x400000000004) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) setsockopt$inet_group_source_req(r0, 0x11, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) 3.420339893s ago: executing program 1 (id=12900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 3.382601973s ago: executing program 1 (id=12901): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r2, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x7e, {0x2, 0x4e25, @empty}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000440)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) 2.128047635s ago: executing program 1 (id=12904): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x4, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x4, 0x3}, {0x7, 0x6, 0x9}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0xe}, {0x7, 0x4}, {0x8}]}, @enum={0xf, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x7}, {0xb, 0x9}, {0x1, 0x6}]}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000580)=""/126, 0xb4, 0x7e, 0x0, 0xffffffc0, 0x10000, @value=r0}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r7, 0x701}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x44}}, 0x4000800) pipe(0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x41) 1.773884775s ago: executing program 3 (id=12905): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b9a2c6150c91a39bbc68b93edbb4c281049ffadb4a967c1d052934b0aa79926f5534d18ce96697c93e759d14b2736126b9368d409fa502444558e84802fd98013a8ada26034adf15a20e28070baf402e34e39c827750df11fcf82e76fe7d2ccedb84dda12c6a2f1aefe7d804a7a4577c9ed367f98f8b912cef3f28419e460d0cb57075ed03960703abcbfda1f5f0f7d3c00947c6edc562734cdbba9dde7435ce65413977db00407b76a8e11a7828121a94ac2e5cdd0b41e93dd11bee5cfbcde0", @ANYRES64=r4, @ANYBLOB], 0x24}}, 0x20000000) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x3, 0x80, 0x7}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'sit0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x2c, 0x2, 0x6, 0x62}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0x7, 0xfffffffa, 0x9bb, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0x32be, 0x0, '\x00', 'syz1\x00', {0xfffffffffffffff9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x3, 0x7, 0x1, 0x12, r1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x9}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r9, 0x0, 0x8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000900)={{0x87, @loopback, 0x4e21, 0x4, 'lblc\x00', 0x1, 0xf8b7, 0x6f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e24, 0x2000, 0x0, 0x5096f1e4, 0x4}}, 0x44) 1.661373768s ago: executing program 0 (id=12906): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socket$igmp(0x2, 0x3, 0x2) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000a0000000007000000850000002700000018010000202064250000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x4000090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000440)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) 1.560022183s ago: executing program 3 (id=12907): socket(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "1388"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x48c0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000149e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0xb9}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r7, 0x913e0000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020400) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r12, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r11, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000}) 1.257616206s ago: executing program 3 (id=12908): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0xe4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) 1.236992861s ago: executing program 5 (id=12909): bind$alg(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0xa0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xf0, 0x8, 0x2}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000480), &(0x7f0000000280)=@udp=r4, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r3, &(0x7f0000000380), 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}]}, &(0x7f0000000540)='GPL\x00', 0x7}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0xe3803000) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 1.158263906s ago: executing program 1 (id=12910): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xd, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004002}, 0x404d080) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) 1.051732478s ago: executing program 2 (id=12911): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000100005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 676.324991ms ago: executing program 2 (id=12912): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b2b, 0x0) 249.107184ms ago: executing program 3 (id=12913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000046c0)=ANY=[@ANYBLOB="7400000042000701feffffff00000000037c0000040042805c0003805800f4805400b3804d000c800400f3807693c5b5fd9c51c62465a5760020f40fde7b24f9bcb803e720fbcca540f9e38b59e11500e9a229047776f5cf823641f6b51ba6cfc0bb4e2e58cd03d84f277b4fce79dde3"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x4004044) 129.650362ms ago: executing program 3 (id=12914): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2000000, @loopback}, 0x1c) 0s ago: executing program 3 (id=12915): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x184, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0xe01}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@iv={0xe8, 0x117, 0x2, 0xcd, "e898b6318cd0bada158a04739641f8e86fd9afc39b47f65623b42ef00441224ae3414312594101c5f5a10425e1dc6e01df3e351db01daeb6a100be303636940baddd7772b192c4619e0bd1cec0a9829c2524db2f86d4d6a82527404be4e7746e9022b29ba69201bd1e0575a0722b8f0fdc66b27827e94c541c37f56a86a75d22b36753aa464e94229a0c9829e30f21d9ab71abb55b6ffa859951461516293be3ce165016be0bb62cccd0aca5a07257232d00055812ccc8763a3a1e2f5507c285dcf59f6cfb57e9a5f7b5379571"}, @iv={0x20, 0x117, 0x2, 0x8, "b1c733f05de616a7"}], 0x108, 0x41}, 0x28000054) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): ___sys_sendmsg+0x10/0x10 [ 2013.977324][T18206] ? __fget_files+0x2a/0x420 [ 2013.977348][T18206] ? __fget_files+0x3a0/0x420 [ 2013.977387][T18206] __x64_sys_sendmsg+0x19b/0x260 [ 2013.977412][T18206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2013.977445][T18206] ? __pfx_ksys_write+0x10/0x10 [ 2013.977474][T18206] ? do_syscall_64+0xbe/0xfa0 [ 2013.977525][T18206] do_syscall_64+0xfa/0xfa0 [ 2013.977544][T18206] ? lockdep_hardirqs_on+0x9c/0x150 [ 2013.977564][T18206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.977586][T18206] ? clear_bhb_loop+0x60/0xb0 [ 2013.977612][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.977631][T18206] RIP: 0033:0x7f9a86d8eec9 [ 2013.977649][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2013.977665][T18206] RSP: 002b:00007f9a87cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2013.977684][T18206] RAX: ffffffffffffffda RBX: 00007f9a86fe5fa0 RCX: 00007f9a86d8eec9 [ 2013.977697][T18206] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2013.977709][T18206] RBP: 00007f9a87cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2013.977719][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2013.977730][T18206] R13: 00007f9a86fe6038 R14: 00007f9a86fe5fa0 R15: 00007fffaf0e5a88 [ 2013.977765][T18206] [ 2014.579324][T18216] FAULT_INJECTION: forcing a failure. [ 2014.579324][T18216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2014.593314][T18216] CPU: 0 UID: 0 PID: 18216 Comm: syz.2.12173 Not tainted syzkaller #0 PREEMPT(full) [ 2014.593347][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2014.593359][T18216] Call Trace: [ 2014.593366][T18216] [ 2014.593375][T18216] dump_stack_lvl+0x189/0x250 [ 2014.593403][T18216] ? __pfx____ratelimit+0x10/0x10 [ 2014.593435][T18216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2014.593458][T18216] ? __pfx__printk+0x10/0x10 [ 2014.593481][T18216] ? __might_fault+0xb0/0x130 [ 2014.593518][T18216] should_fail_ex+0x414/0x560 [ 2014.593557][T18216] _copy_from_user+0x2d/0xb0 [ 2014.593586][T18216] do_ipv6_getsockopt+0x2b0/0x2300 [ 2014.593624][T18216] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 2014.593651][T18216] ? aa_label_sk_perm+0x4cd/0x630 [ 2014.593683][T18216] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2014.593748][T18216] ? __lock_acquire+0xab9/0xd20 [ 2014.593795][T18216] ipv6_getsockopt+0xbd/0x290 [ 2014.593826][T18216] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 2014.593859][T18216] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2014.593888][T18216] do_sock_getsockopt+0x372/0x450 [ 2014.593923][T18216] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2014.593951][T18216] ? do_syscall_64+0xa0/0xfa0 [ 2014.593985][T18216] __x64_sys_getsockopt+0x1a5/0x250 [ 2014.594014][T18216] ? do_syscall_64+0xa0/0xfa0 [ 2014.594035][T18216] ? do_syscall_64+0xa0/0xfa0 [ 2014.594060][T18216] do_syscall_64+0xfa/0xfa0 [ 2014.594079][T18216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2014.594099][T18216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.594120][T18216] ? clear_bhb_loop+0x60/0xb0 [ 2014.594146][T18216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.594165][T18216] RIP: 0033:0x7f56d8b8eec9 [ 2014.594184][T18216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2014.594203][T18216] RSP: 002b:00007f56d99ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2014.594226][T18216] RAX: ffffffffffffffda RBX: 00007f56d8de5fa0 RCX: 00007f56d8b8eec9 [ 2014.594241][T18216] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003 [ 2014.594254][T18216] RBP: 00007f56d99ba090 R08: 0000200000000380 R09: 0000000000000000 [ 2014.594268][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2014.594280][T18216] R13: 00007f56d8de6038 R14: 00007f56d8de5fa0 R15: 00007ffd15e0a738 [ 2014.594319][T18216] [ 2014.935239][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12172'. [ 2014.968286][T18221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12172'. [ 2015.001784][T18219] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12175'. [ 2015.032889][T18221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12172'. [ 2015.126496][T18228] pimreg: entered allmulticast mode [ 2015.141310][T18227] pimreg: left allmulticast mode [ 2015.466251][T18236] wg1 speed is unknown, defaulting to 1000 [ 2015.470194][T18240] netlink: 'syz.0.12184': attribute type 21 has an invalid length. [ 2015.505365][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12184'. [ 2015.537883][T18243] wg1 speed is unknown, defaulting to 1000 [ 2015.537940][T18236] lo speed is unknown, defaulting to 1000 [ 2015.551453][T18234] netlink: 'syz.2.12181': attribute type 1 has an invalid length. [ 2015.576018][T18243] lo speed is unknown, defaulting to 1000 [ 2015.576069][T18234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12181'. [ 2015.618233][T18236] wlan1 speed is unknown, defaulting to 1000 [ 2016.027233][T18243] wlan1 speed is unknown, defaulting to 1000 [ 2016.147817][T18260] FAULT_INJECTION: forcing a failure. [ 2016.147817][T18260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.247254][T18260] CPU: 1 UID: 0 PID: 18260 Comm: syz.2.12189 Not tainted syzkaller #0 PREEMPT(full) [ 2016.247287][T18260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2016.247300][T18260] Call Trace: [ 2016.247309][T18260] [ 2016.247318][T18260] dump_stack_lvl+0x189/0x250 [ 2016.247348][T18260] ? __pfx____ratelimit+0x10/0x10 [ 2016.247380][T18260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2016.247402][T18260] ? __pfx__printk+0x10/0x10 [ 2016.247439][T18260] should_fail_ex+0x414/0x560 [ 2016.247479][T18260] _copy_to_user+0x31/0xb0 [ 2016.247510][T18260] simple_read_from_buffer+0xe1/0x170 [ 2016.247541][T18260] proc_fail_nth_read+0x1b3/0x220 [ 2016.247576][T18260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2016.247612][T18260] ? rw_verify_area+0x2a6/0x4d0 [ 2016.247633][T18260] ? __lock_acquire+0xab9/0xd20 [ 2016.247658][T18260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2016.247690][T18260] vfs_read+0x200/0xa30 [ 2016.247710][T18260] ? fdget_pos+0x247/0x320 [ 2016.247738][T18260] ? __pfx___mutex_lock+0x10/0x10 [ 2016.247757][T18260] ? __pfx_vfs_read+0x10/0x10 [ 2016.247780][T18260] ? __fget_files+0x2a/0x420 [ 2016.247810][T18260] ? __fget_files+0x3a0/0x420 [ 2016.247834][T18260] ? __fget_files+0x2a/0x420 [ 2016.247870][T18260] ksys_read+0x145/0x250 [ 2016.247891][T18260] ? __fget_files+0x2a/0x420 [ 2016.247918][T18260] ? __pfx_ksys_read+0x10/0x10 [ 2016.247945][T18260] ? do_syscall_64+0xbe/0xfa0 [ 2016.247973][T18260] do_syscall_64+0xfa/0xfa0 [ 2016.248001][T18260] ? lockdep_hardirqs_on+0x9c/0x150 [ 2016.248022][T18260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.248043][T18260] ? clear_bhb_loop+0x60/0xb0 [ 2016.248070][T18260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.248090][T18260] RIP: 0033:0x7f56d8b8d8dc [ 2016.248110][T18260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2016.248129][T18260] RSP: 002b:00007f56d99ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2016.248153][T18260] RAX: ffffffffffffffda RBX: 00007f56d8de5fa0 RCX: 00007f56d8b8d8dc [ 2016.248169][T18260] RDX: 000000000000000f RSI: 00007f56d99ba0a0 RDI: 0000000000000003 [ 2016.248183][T18260] RBP: 00007f56d99ba090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.248197][T18260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.248210][T18260] R13: 00007f56d8de6038 R14: 00007f56d8de5fa0 R15: 00007ffd15e0a738 [ 2016.248250][T18260] [ 2017.169024][T18273] wg1 speed is unknown, defaulting to 1000 [ 2017.199770][T18273] lo speed is unknown, defaulting to 1000 [ 2017.289303][T18275] netlink: 'syz.2.12193': attribute type 1 has an invalid length. [ 2017.304419][T18275] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12193'. [ 2017.347474][T18273] wlan1 speed is unknown, defaulting to 1000 [ 2018.235932][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12200'. [ 2018.302582][T18302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12199'. [ 2018.313420][T18300] FAULT_INJECTION: forcing a failure. [ 2018.313420][T18300] name failslab, interval 1, probability 0, space 0, times 0 [ 2018.370556][T18300] CPU: 0 UID: 0 PID: 18300 Comm: syz.1.12200 Not tainted syzkaller #0 PREEMPT(full) [ 2018.370589][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2018.370601][T18300] Call Trace: [ 2018.370610][T18300] [ 2018.370620][T18300] dump_stack_lvl+0x189/0x250 [ 2018.370650][T18300] ? __pfx____ratelimit+0x10/0x10 [ 2018.370690][T18300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2018.370712][T18300] ? __pfx__printk+0x10/0x10 [ 2018.370740][T18300] ? __pfx___might_resched+0x10/0x10 [ 2018.370774][T18300] should_fail_ex+0x414/0x560 [ 2018.370811][T18300] should_failslab+0xa8/0x100 [ 2018.370842][T18300] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2018.370864][T18300] ? __alloc_skb+0x112/0x2d0 [ 2018.370891][T18300] ? nfnetlink_rcv+0x2074/0x2590 [ 2018.370923][T18300] __alloc_skb+0x112/0x2d0 [ 2018.370956][T18300] netlink_ack+0x146/0xa50 [ 2018.370982][T18300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2018.371027][T18300] nfnetlink_rcv+0x1fc3/0x2590 [ 2018.371080][T18300] ? __dev_queue_xmit+0x284/0x3740 [ 2018.371117][T18300] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2018.371163][T18300] ? ref_tracker_free+0x63a/0x7d0 [ 2018.371186][T18300] ? __asan_memcpy+0x40/0x70 [ 2018.371206][T18300] ? __pfx_ref_tracker_free+0x10/0x10 [ 2018.371248][T18300] ? skb_clone+0x246/0x3a0 [ 2018.371273][T18300] ? __netlink_deliver_tap+0x807/0x850 [ 2018.371301][T18300] ? netlink_deliver_tap+0x2e/0x1b0 [ 2018.371353][T18300] netlink_unicast+0x82f/0x9e0 [ 2018.371390][T18300] ? __pfx_netlink_unicast+0x10/0x10 [ 2018.371420][T18300] ? netlink_sendmsg+0x642/0xb30 [ 2018.371447][T18300] ? skb_put+0x11b/0x210 [ 2018.371481][T18300] netlink_sendmsg+0x805/0xb30 [ 2018.371521][T18300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2018.371561][T18300] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2018.371587][T18300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2018.371613][T18300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2018.371644][T18300] __sock_sendmsg+0x21c/0x270 [ 2018.371674][T18300] __sys_sendto+0x3bd/0x520 [ 2018.371761][T18300] ? __pfx___sys_sendto+0x10/0x10 [ 2018.371787][T18300] ? count_memcg_event_mm+0x21/0x260 [ 2018.371838][T18300] ? exc_page_fault+0x82/0x100 [ 2018.371863][T18300] ? do_user_addr_fault+0xc85/0x1380 [ 2018.371896][T18300] __x64_sys_sendto+0xde/0x100 [ 2018.371928][T18300] do_syscall_64+0xfa/0xfa0 [ 2018.371946][T18300] ? lockdep_hardirqs_on+0x9c/0x150 [ 2018.371966][T18300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.371986][T18300] ? clear_bhb_loop+0x60/0xb0 [ 2018.372011][T18300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.372030][T18300] RIP: 0033:0x7f9a86d90d5c [ 2018.372049][T18300] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 2018.372067][T18300] RSP: 002b:00007f9a87cafec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2018.372090][T18300] RAX: ffffffffffffffda RBX: 00007f9a87caffc0 RCX: 00007f9a86d90d5c [ 2018.372105][T18300] RDX: 0000000000000020 RSI: 00007f9a87cb0010 RDI: 0000000000000004 [ 2018.372118][T18300] RBP: 0000000000000000 R08: 00007f9a87caff14 R09: 000000000000000c [ 2018.372130][T18300] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 2018.372142][T18300] R13: 00007f9a87caff68 R14: 00007f9a87cb0010 R15: 0000000000000000 [ 2018.372177][T18300] [ 2018.957155][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12205'. [ 2018.959656][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12204'. [ 2019.057276][T18311] tipc: Enabled bearer , priority 0 [ 2019.100032][T18311] syzkaller0: entered promiscuous mode [ 2019.124332][T18311] syzkaller0: entered allmulticast mode [ 2019.217221][T18325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12207'. [ 2019.217770][T18311] tipc: Resetting bearer [ 2019.263140][T18310] tipc: Resetting bearer [ 2019.306133][T18310] tipc: Disabling bearer [ 2019.402203][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2019.520636][T18331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12210'. [ 2019.591060][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12210'. [ 2020.309240][T18368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12220'. [ 2020.321004][T18368] tipc: Enabled bearer , priority 0 [ 2020.329434][T18368] syzkaller0: entered promiscuous mode [ 2020.335511][T18368] syzkaller0: entered allmulticast mode [ 2020.395040][T18368] tipc: Resetting bearer [ 2020.414953][T18367] tipc: Resetting bearer [ 2020.435852][T18367] tipc: Disabling bearer [ 2020.457513][T18376] FAULT_INJECTION: forcing a failure. [ 2020.457513][T18376] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.470541][T18376] CPU: 0 UID: 0 PID: 18376 Comm: syz.4.12222 Not tainted syzkaller #0 PREEMPT(full) [ 2020.470565][T18376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2020.470576][T18376] Call Trace: [ 2020.470584][T18376] [ 2020.470591][T18376] dump_stack_lvl+0x189/0x250 [ 2020.470612][T18376] ? __pfx____ratelimit+0x10/0x10 [ 2020.470630][T18376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2020.470640][T18376] ? __pfx__printk+0x10/0x10 [ 2020.470652][T18376] ? __pfx___might_resched+0x10/0x10 [ 2020.470665][T18376] ? fs_reclaim_acquire+0x7d/0x100 [ 2020.470681][T18376] should_fail_ex+0x414/0x560 [ 2020.470698][T18376] should_failslab+0xa8/0x100 [ 2020.470711][T18376] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2020.470721][T18376] ? __alloc_skb+0x112/0x2d0 [ 2020.470734][T18376] ? netlink_autobind+0xdb/0x300 [ 2020.470750][T18376] __alloc_skb+0x112/0x2d0 [ 2020.470765][T18376] netlink_sendmsg+0x5c6/0xb30 [ 2020.470783][T18376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2020.470797][T18376] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2020.470810][T18376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2020.470822][T18376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2020.470835][T18376] __sock_sendmsg+0x21c/0x270 [ 2020.470848][T18376] ____sys_sendmsg+0x505/0x830 [ 2020.470872][T18376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2020.470896][T18376] ? import_iovec+0x74/0xa0 [ 2020.470914][T18376] ___sys_sendmsg+0x21f/0x2a0 [ 2020.470927][T18376] ? __pfx____sys_sendmsg+0x10/0x10 [ 2020.470962][T18376] ? __fget_files+0x2a/0x420 [ 2020.470977][T18376] ? __fget_files+0x3a0/0x420 [ 2020.470998][T18376] __x64_sys_sendmsg+0x19b/0x260 [ 2020.471012][T18376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2020.471030][T18376] ? __pfx_ksys_write+0x10/0x10 [ 2020.471045][T18376] ? do_syscall_64+0xbe/0xfa0 [ 2020.471060][T18376] do_syscall_64+0xfa/0xfa0 [ 2020.471072][T18376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.471083][T18376] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2020.471094][T18376] ? clear_bhb_loop+0x60/0xb0 [ 2020.471109][T18376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.471121][T18376] RIP: 0033:0x7faa8f38eec9 [ 2020.471133][T18376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2020.471145][T18376] RSP: 002b:00007faa9021d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2020.471159][T18376] RAX: ffffffffffffffda RBX: 00007faa8f5e5fa0 RCX: 00007faa8f38eec9 [ 2020.471168][T18376] RDX: 00000000000000c4 RSI: 0000200000000e80 RDI: 0000000000000003 [ 2020.471176][T18376] RBP: 00007faa9021d090 R08: 0000000000000000 R09: 0000000000000000 [ 2020.471184][T18376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2020.471191][T18376] R13: 00007faa8f5e6038 R14: 00007faa8f5e5fa0 R15: 00007ffd13fef058 [ 2020.471212][T18376] [ 2020.905887][T18382] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12225'. [ 2020.946493][T18382] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12225'. [ 2021.056851][T18382] Cannot find add_set index 1 as target [ 2021.085395][T18388] netlink: 'syz.4.12224': attribute type 1 has an invalid length. [ 2021.119887][T18388] netlink: 'syz.4.12224': attribute type 1 has an invalid length. [ 2021.138454][T18387] netlink: 'syz.0.12226': attribute type 9 has an invalid length. [ 2021.163518][T18387] netlink: 'syz.0.12226': attribute type 6 has an invalid length. [ 2021.416937][T18399] netlink: 'syz.2.12230': attribute type 4 has an invalid length. [ 2021.744124][T18408] wg1 speed is unknown, defaulting to 1000 [ 2021.764366][T18408] lo speed is unknown, defaulting to 1000 [ 2021.838339][T18417] FAULT_INJECTION: forcing a failure. [ 2021.838339][T18417] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.865310][T18408] wlan1 speed is unknown, defaulting to 1000 [ 2021.908463][T18417] CPU: 0 UID: 0 PID: 18417 Comm: syz.1.12237 Not tainted syzkaller #0 PREEMPT(full) [ 2021.908495][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2021.908507][T18417] Call Trace: [ 2021.908516][T18417] [ 2021.908525][T18417] dump_stack_lvl+0x189/0x250 [ 2021.908553][T18417] ? __pfx____ratelimit+0x10/0x10 [ 2021.908584][T18417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2021.908607][T18417] ? __pfx__printk+0x10/0x10 [ 2021.908645][T18417] should_fail_ex+0x414/0x560 [ 2021.908683][T18417] should_failslab+0xa8/0x100 [ 2021.908712][T18417] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2021.908734][T18417] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2021.908751][T18417] ? sctp_add_bind_addr+0x8c/0x370 [ 2021.908768][T18417] ? sctp_add_bind_addr+0xb0/0x370 [ 2021.908794][T18417] sctp_add_bind_addr+0x8c/0x370 [ 2021.908819][T18417] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2021.908843][T18417] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2021.908873][T18417] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2021.908901][T18417] ? sctp_v4_is_any+0x35/0x60 [ 2021.908921][T18417] ? sctp_copy_one_addr+0x93/0x360 [ 2021.908947][T18417] sctp_bind_addr_copy+0xb3/0x3c0 [ 2021.908970][T18417] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2021.909004][T18417] sctp_connect_new_asoc+0x2e0/0x690 [ 2021.909034][T18417] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2021.909057][T18417] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2021.909094][T18417] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2021.909121][T18417] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2021.909155][T18417] sctp_sendmsg+0x155c/0x2810 [ 2021.909197][T18417] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2021.909227][T18417] ? aa_sk_perm+0x81e/0x950 [ 2021.909256][T18417] ? __pfx_aa_sk_perm+0x10/0x10 [ 2021.909282][T18417] ? sock_rps_record_flow+0x19/0x410 [ 2021.909312][T18417] ? inet_sendmsg+0x2f4/0x370 [ 2021.909345][T18417] __sock_sendmsg+0x19c/0x270 [ 2021.909375][T18417] ____sys_sendmsg+0x52d/0x830 [ 2021.909403][T18417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2021.909446][T18417] ? import_iovec+0x74/0xa0 [ 2021.909484][T18417] ___sys_sendmsg+0x21f/0x2a0 [ 2021.909509][T18417] ? __pfx____sys_sendmsg+0x10/0x10 [ 2021.909575][T18417] ? __fget_files+0x2a/0x420 [ 2021.909599][T18417] ? __fget_files+0x3a0/0x420 [ 2021.909637][T18417] __sys_sendmmsg+0x227/0x430 [ 2021.909665][T18417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2021.909697][T18417] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2021.909741][T18417] ? ksys_write+0x22a/0x250 [ 2021.909766][T18417] ? __pfx_ksys_write+0x10/0x10 [ 2021.909794][T18417] __x64_sys_sendmmsg+0xa0/0xc0 [ 2021.909816][T18417] do_syscall_64+0xfa/0xfa0 [ 2021.909834][T18417] ? lockdep_hardirqs_on+0x9c/0x150 [ 2021.909854][T18417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.909881][T18417] ? clear_bhb_loop+0x60/0xb0 [ 2021.909907][T18417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.909927][T18417] RIP: 0033:0x7f9a86d8eec9 [ 2021.909946][T18417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2021.909964][T18417] RSP: 002b:00007f9a87cb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2021.909987][T18417] RAX: ffffffffffffffda RBX: 00007f9a86fe5fa0 RCX: 00007f9a86d8eec9 [ 2021.910003][T18417] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000006 [ 2021.910015][T18417] RBP: 00007f9a87cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2021.910027][T18417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.910039][T18417] R13: 00007f9a86fe6038 R14: 00007f9a86fe5fa0 R15: 00007fffaf0e5a88 [ 2021.910074][T18417] [ 2022.549622][T18427] sch_tbf: burst 2 is lower than device lo mtu (81) ! [ 2022.678518][T18430] atomic_op ffff888021bf3198 conn xmit_atomic 0000000000000000 [ 2022.755136][T18429] lo: entered promiscuous mode [ 2022.773922][T18429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2023.257134][T18440] netlink: 'syz.0.12244': attribute type 1 has an invalid length. [ 2023.296283][T18440] __nla_validate_parse: 7 callbacks suppressed [ 2023.296379][T18440] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12244'. [ 2023.641598][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12247'. [ 2024.038269][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12253'. [ 2024.068771][T18460] wg1 speed is unknown, defaulting to 1000 [ 2024.135923][T18460] lo speed is unknown, defaulting to 1000 [ 2024.196647][T18460] wlan1 speed is unknown, defaulting to 1000 [ 2024.657285][T18481] FAULT_INJECTION: forcing a failure. [ 2024.657285][T18481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2024.672084][T18481] CPU: 0 UID: 0 PID: 18481 Comm: syz.0.12258 Not tainted syzkaller #0 PREEMPT(full) [ 2024.672116][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2024.672129][T18481] Call Trace: [ 2024.672138][T18481] [ 2024.672147][T18481] dump_stack_lvl+0x189/0x250 [ 2024.672177][T18481] ? __pfx____ratelimit+0x10/0x10 [ 2024.672210][T18481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2024.672230][T18481] ? __pfx__printk+0x10/0x10 [ 2024.672252][T18481] ? __might_fault+0xb0/0x130 [ 2024.672287][T18481] should_fail_ex+0x414/0x560 [ 2024.672327][T18481] _copy_from_user+0x2d/0xb0 [ 2024.672355][T18481] do_arpt_set_ctl+0x6c3/0xf10 [ 2024.672387][T18481] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2024.672415][T18481] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2024.672443][T18481] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 2024.672468][T18481] ? rcu_is_watching+0x15/0xb0 [ 2024.672495][T18481] ? trace_contention_end+0x39/0x120 [ 2024.672545][T18481] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2024.672587][T18481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2024.672615][T18481] ? __pfx___mutex_lock+0x10/0x10 [ 2024.672652][T18481] nf_setsockopt+0x26f/0x290 [ 2024.672679][T18481] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2024.672708][T18481] smc_setsockopt+0x232/0xab0 [ 2024.672740][T18481] ? __pfx_smc_setsockopt+0x10/0x10 [ 2024.672760][T18481] ? aa_sock_opt_perm+0xff/0x1b0 [ 2024.672789][T18481] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2024.672812][T18481] ? __pfx_smc_setsockopt+0x10/0x10 [ 2024.672835][T18481] do_sock_setsockopt+0x17c/0x1b0 [ 2024.672872][T18481] __x64_sys_setsockopt+0x13f/0x1b0 [ 2024.672909][T18481] do_syscall_64+0xfa/0xfa0 [ 2024.672929][T18481] ? lockdep_hardirqs_on+0x9c/0x150 [ 2024.672950][T18481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.672971][T18481] ? clear_bhb_loop+0x60/0xb0 [ 2024.672994][T18481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.673013][T18481] RIP: 0033:0x7fc959b8eec9 [ 2024.673035][T18481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2024.673053][T18481] RSP: 002b:00007fc95a991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2024.673082][T18481] RAX: ffffffffffffffda RBX: 00007fc959de5fa0 RCX: 00007fc959b8eec9 [ 2024.673098][T18481] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 2024.673110][T18481] RBP: 00007fc95a991090 R08: 0000000000000430 R09: 0000000000000000 [ 2024.673124][T18481] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2024.673138][T18481] R13: 00007fc959de6038 R14: 00007fc959de5fa0 R15: 00007fffe8055158 [ 2024.673178][T18481] [ 2025.158654][T18488] FAULT_INJECTION: forcing a failure. [ 2025.158654][T18488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2025.203294][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12261'. [ 2025.248396][T18488] CPU: 0 UID: 0 PID: 18488 Comm: syz.4.12260 Not tainted syzkaller #0 PREEMPT(full) [ 2025.248428][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2025.248441][T18488] Call Trace: [ 2025.248450][T18488] [ 2025.248460][T18488] dump_stack_lvl+0x189/0x250 [ 2025.248489][T18488] ? __pfx____ratelimit+0x10/0x10 [ 2025.248521][T18488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2025.248543][T18488] ? __pfx__printk+0x10/0x10 [ 2025.248581][T18488] should_fail_ex+0x414/0x560 [ 2025.248620][T18488] _copy_to_user+0x31/0xb0 [ 2025.248650][T18488] simple_read_from_buffer+0xe1/0x170 [ 2025.248682][T18488] proc_fail_nth_read+0x1b3/0x220 [ 2025.248717][T18488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2025.248753][T18488] ? rw_verify_area+0x2a6/0x4d0 [ 2025.248774][T18488] ? __lock_acquire+0xab9/0xd20 [ 2025.248807][T18488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2025.248841][T18488] vfs_read+0x200/0xa30 [ 2025.248863][T18488] ? fdget_pos+0x247/0x320 [ 2025.248894][T18488] ? __pfx___mutex_lock+0x10/0x10 [ 2025.248917][T18488] ? __pfx_vfs_read+0x10/0x10 [ 2025.248942][T18488] ? __fget_files+0x2a/0x420 [ 2025.248974][T18488] ? __fget_files+0x3a0/0x420 [ 2025.248997][T18488] ? __fget_files+0x2a/0x420 [ 2025.249034][T18488] ksys_read+0x145/0x250 [ 2025.249060][T18488] ? __pfx_ksys_read+0x10/0x10 [ 2025.249087][T18488] ? do_syscall_64+0xbe/0xfa0 [ 2025.249115][T18488] do_syscall_64+0xfa/0xfa0 [ 2025.249134][T18488] ? lockdep_hardirqs_on+0x9c/0x150 [ 2025.249154][T18488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.249175][T18488] ? clear_bhb_loop+0x60/0xb0 [ 2025.249226][T18488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.249246][T18488] RIP: 0033:0x7faa8f38d8dc [ 2025.249266][T18488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2025.249286][T18488] RSP: 002b:00007faa9021d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2025.249309][T18488] RAX: ffffffffffffffda RBX: 00007faa8f5e5fa0 RCX: 00007faa8f38d8dc [ 2025.249326][T18488] RDX: 000000000000000f RSI: 00007faa9021d0a0 RDI: 0000000000000004 [ 2025.249339][T18488] RBP: 00007faa9021d090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.249353][T18488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2025.249367][T18488] R13: 00007faa8f5e6038 R14: 00007faa8f5e5fa0 R15: 00007ffd13fef058 [ 2025.249408][T18488] [ 2025.682944][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12262'. [ 2025.808447][T18493] wg1 speed is unknown, defaulting to 1000 [ 2025.817460][T18493] lo speed is unknown, defaulting to 1000 [ 2025.827865][T18493] wlan1 speed is unknown, defaulting to 1000 [ 2025.833496][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12265'. [ 2026.013927][T18505] FAULT_INJECTION: forcing a failure. [ 2026.013927][T18505] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.063964][T18505] CPU: 1 UID: 0 PID: 18505 Comm: syz.0.12267 Not tainted syzkaller #0 PREEMPT(full) [ 2026.063997][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2026.064010][T18505] Call Trace: [ 2026.064019][T18505] [ 2026.064030][T18505] dump_stack_lvl+0x189/0x250 [ 2026.064076][T18505] ? __pfx____ratelimit+0x10/0x10 [ 2026.064109][T18505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2026.064131][T18505] ? __pfx__printk+0x10/0x10 [ 2026.064162][T18505] ? __pfx___might_resched+0x10/0x10 [ 2026.064188][T18505] ? fs_reclaim_acquire+0x7d/0x100 [ 2026.064220][T18505] should_fail_ex+0x414/0x560 [ 2026.064259][T18505] should_failslab+0xa8/0x100 [ 2026.064289][T18505] __kmalloc_noprof+0xcb/0x7f0 [ 2026.064310][T18505] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2026.064335][T18505] ? rcu_is_watching+0x15/0xb0 [ 2026.064371][T18505] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2026.064405][T18505] genl_family_rcv_msg_doit+0xb8/0x300 [ 2026.064439][T18505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2026.064474][T18505] ? apparmor_capable+0x137/0x1b0 [ 2026.064505][T18505] ? bpf_lsm_capable+0x9/0x20 [ 2026.064523][T18505] ? security_capable+0x7e/0x2e0 [ 2026.064554][T18505] genl_rcv_msg+0x60e/0x790 [ 2026.064586][T18505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2026.064607][T18505] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 2026.064656][T18505] netlink_rcv_skb+0x208/0x470 [ 2026.064683][T18505] ? __lock_acquire+0xab9/0xd20 [ 2026.064710][T18505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2026.064735][T18505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2026.064798][T18505] ? down_read+0x1ad/0x2e0 [ 2026.064827][T18505] genl_rcv+0x28/0x40 [ 2026.064847][T18505] netlink_unicast+0x82f/0x9e0 [ 2026.064886][T18505] ? __pfx_netlink_unicast+0x10/0x10 [ 2026.064916][T18505] ? netlink_sendmsg+0x642/0xb30 [ 2026.064942][T18505] ? skb_put+0x11b/0x210 [ 2026.064982][T18505] netlink_sendmsg+0x805/0xb30 [ 2026.065025][T18505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2026.065059][T18505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2026.065086][T18505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2026.065111][T18505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2026.065143][T18505] __sock_sendmsg+0x21c/0x270 [ 2026.065173][T18505] ____sys_sendmsg+0x505/0x830 [ 2026.065203][T18505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2026.065247][T18505] ? import_iovec+0x74/0xa0 [ 2026.065280][T18505] ___sys_sendmsg+0x21f/0x2a0 [ 2026.065304][T18505] ? __pfx____sys_sendmsg+0x10/0x10 [ 2026.065373][T18505] ? __fget_files+0x2a/0x420 [ 2026.065398][T18505] ? __fget_files+0x3a0/0x420 [ 2026.065439][T18505] __x64_sys_sendmsg+0x19b/0x260 [ 2026.065464][T18505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2026.065498][T18505] ? __pfx_ksys_write+0x10/0x10 [ 2026.065526][T18505] ? do_syscall_64+0xbe/0xfa0 [ 2026.065552][T18505] do_syscall_64+0xfa/0xfa0 [ 2026.065571][T18505] ? lockdep_hardirqs_on+0x9c/0x150 [ 2026.065592][T18505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.065613][T18505] ? clear_bhb_loop+0x60/0xb0 [ 2026.065639][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.065658][T18505] RIP: 0033:0x7fc959b8eec9 [ 2026.065678][T18505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2026.065697][T18505] RSP: 002b:00007fc95a991038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2026.065722][T18505] RAX: ffffffffffffffda RBX: 00007fc959de5fa0 RCX: 00007fc959b8eec9 [ 2026.065736][T18505] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 2026.065750][T18505] RBP: 00007fc95a991090 R08: 0000000000000000 R09: 0000000000000000 [ 2026.065763][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2026.065783][T18505] R13: 00007fc959de6038 R14: 00007fc959de5fa0 R15: 00007fffe8055158 [ 2026.065824][T18505] [ 2027.079739][T18516] wg1 speed is unknown, defaulting to 1000 [ 2027.189755][T18516] lo speed is unknown, defaulting to 1000 [ 2027.214387][T18516] wlan1 speed is unknown, defaulting to 1000 [ 2027.588176][T18531] netlink: 'syz.3.12274': attribute type 1 has an invalid length. [ 2027.596702][T18531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12274'. [ 2027.810045][T18535] netlink: 'syz.0.12277': attribute type 6 has an invalid length. [ 2027.824178][T18535] netlink: 'syz.0.12277': attribute type 12 has an invalid length. [ 2027.832202][T18535] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.12277'. [ 2028.557126][T18551] netlink: zone id is out of range [ 2028.580348][T18551] netlink: zone id is out of range [ 2028.593089][T18551] netlink: zone id is out of range [ 2028.598487][T18551] netlink: zone id is out of range [ 2028.605063][T18551] netlink: zone id is out of range [ 2028.620444][T18551] netlink: zone id is out of range [ 2028.652622][T18551] netlink: zone id is out of range [ 2028.657812][T18551] netlink: get zone limit has 4 unknown bytes [ 2028.926196][T18559] macsec0: entered promiscuous mode [ 2029.348675][T18577] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2029.403690][T18579] netlink: 'syz.0.12293': attribute type 1 has an invalid length. [ 2029.444447][T18579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12293'. [ 2029.516663][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12295'. [ 2029.599611][T18585] tls_set_device_offload_rx: netdev not found [ 2029.835565][T18603] pim6reg1: entered promiscuous mode [ 2029.851297][T18603] pim6reg1: entered allmulticast mode [ 2029.944180][T18611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12302'. [ 2029.978211][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12302'. [ 2030.060193][T18616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12307'. [ 2030.073325][T18616] tipc: Enabled bearer , priority 0 [ 2030.081308][T18616] syzkaller0: entered promiscuous mode [ 2030.087462][T18616] syzkaller0: entered allmulticast mode [ 2030.153362][T18616] tipc: Resetting bearer [ 2030.181068][T18615] tipc: Resetting bearer [ 2030.209266][T18615] tipc: Disabling bearer [ 2030.221862][T18618] netlink: 'syz.0.12308': attribute type 9 has an invalid length. [ 2030.229874][T18618] netlink: 'syz.0.12308': attribute type 6 has an invalid length. [ 2030.318513][T18623] xt_recent: Unsupported userspace flags (000000b1) [ 2030.559659][T18637] wg1 speed is unknown, defaulting to 1000 [ 2030.573353][T18637] lo speed is unknown, defaulting to 1000 [ 2030.583576][T18637] wlan1 speed is unknown, defaulting to 1000 [ 2031.224232][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12323'. [ 2031.274058][T18660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12323'. [ 2031.321734][T18660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12323'. [ 2031.745884][T18656] wg1 speed is unknown, defaulting to 1000 [ 2031.789064][T18656] lo speed is unknown, defaulting to 1000 [ 2031.824556][T18656] wlan1 speed is unknown, defaulting to 1000 [ 2031.957242][T18686] tipc: Trying to set illegal importance in message [ 2032.020962][T18681] veth1_to_bond: entered allmulticast mode [ 2032.032134][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12332'. [ 2032.280870][T18689] veth1_to_bond (unregistering): left allmulticast mode [ 2032.513005][T18696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12336'. [ 2032.536000][T18696] tipc: Enabled bearer , priority 0 [ 2032.554147][T18696] syzkaller0: entered promiscuous mode [ 2032.559665][T18696] syzkaller0: entered allmulticast mode [ 2032.662994][T18696] tipc: Resetting bearer [ 2032.847790][T18695] tipc: Resetting bearer [ 2032.896611][T18695] tipc: Disabling bearer [ 2033.347217][T18709] netlink: 'syz.3.12342': attribute type 1 has an invalid length. [ 2033.565172][T18717] wg1 speed is unknown, defaulting to 1000 [ 2033.589934][T18717] lo speed is unknown, defaulting to 1000 [ 2033.596888][T18718] wg1 speed is unknown, defaulting to 1000 [ 2033.606952][T18717] wlan1 speed is unknown, defaulting to 1000 [ 2033.615995][T18718] lo speed is unknown, defaulting to 1000 [ 2033.663223][T18724] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2033.698887][T18720] wg1 speed is unknown, defaulting to 1000 [ 2033.738964][T18720] lo speed is unknown, defaulting to 1000 [ 2034.091540][T18718] wlan1 speed is unknown, defaulting to 1000 [ 2034.911638][T18720] wlan1 speed is unknown, defaulting to 1000 [ 2034.948391][T18753] FAULT_INJECTION: forcing a failure. [ 2034.948391][T18753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2034.982757][T18753] CPU: 1 UID: 0 PID: 18753 Comm: syz.3.12355 Not tainted syzkaller #0 PREEMPT(full) [ 2034.982795][T18753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2034.982808][T18753] Call Trace: [ 2034.982817][T18753] [ 2034.982826][T18753] dump_stack_lvl+0x189/0x250 [ 2034.982855][T18753] ? __pfx____ratelimit+0x10/0x10 [ 2034.982888][T18753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2034.982911][T18753] ? __pfx__printk+0x10/0x10 [ 2034.982933][T18753] ? __might_fault+0xb0/0x130 [ 2034.982970][T18753] should_fail_ex+0x414/0x560 [ 2034.983009][T18753] fpu__restore_sig+0x1bb/0x1100 [ 2034.983039][T18753] ? __lock_acquire+0xab9/0xd20 [ 2034.983071][T18753] ? __pfx_fpu__restore_sig+0x10/0x10 [ 2034.983131][T18753] __ia32_sys_rt_sigreturn+0x704/0x860 [ 2034.983169][T18753] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 2034.983192][T18753] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2034.983257][T18753] ? __task_pid_nr_ns+0x28/0x490 [ 2034.983285][T18753] ? do_syscall_64+0xbe/0xfa0 [ 2034.983310][T18753] do_syscall_64+0xfa/0xfa0 [ 2034.983329][T18753] ? lockdep_hardirqs_on+0x9c/0x150 [ 2034.983350][T18753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.983371][T18753] ? clear_bhb_loop+0x60/0xb0 [ 2034.983397][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2034.983417][T18753] RIP: 0033:0x7f4a12f8eec9 [ 2034.983436][T18753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2034.983454][T18753] RSP: 002b:00007f4a13da6038 EFLAGS: 00000246 [ 2034.983475][T18753] RAX: fffffffffffffff2 RBX: 00007f4a131e5fa0 RCX: 00007f4a12f8eec9 [ 2034.983491][T18753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2034.983503][T18753] RBP: 00007f4a13da6090 R08: 0000000000000000 R09: 0000000000000000 [ 2034.983516][T18753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2034.983529][T18753] R13: 00007f4a131e6038 R14: 00007f4a131e5fa0 R15: 00007ffe120034e8 [ 2034.983575][T18753] [ 2035.376710][T18761] __nla_validate_parse: 4 callbacks suppressed [ 2035.376731][T18761] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12358'. [ 2035.392998][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2035.415087][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12359'. [ 2035.701723][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12362'. [ 2035.768688][T18771] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2035.780312][T18771] syzkaller0: entered promiscuous mode [ 2035.787259][T18771] syzkaller0: entered allmulticast mode [ 2035.820910][T18774] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2035.889379][T18777] netlink: 'syz.1.12365': attribute type 9 has an invalid length. [ 2035.898869][T18777] netlink: 'syz.1.12365': attribute type 6 has an invalid length. [ 2036.254208][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12367'. [ 2037.567417][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12384'. [ 2037.701013][T18837] dummy0: mtu less than device minimum [ 2037.716223][T18837] netlink: 'syz.1.12389': attribute type 1 has an invalid length. [ 2037.724903][T18837] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12389'. [ 2037.833078][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12391'. [ 2038.266988][ T8027] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2038.303892][ T3085] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2038.303920][ T8027] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2038.464005][T18872] x_tables: duplicate underflow at hook 3 [ 2038.492219][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2038.814160][ T6241] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2038.814622][T18891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12407'. [ 2038.871510][T18891] netlink: 'syz.0.12407': attribute type 4 has an invalid length. [ 2039.133188][T18900] netlink: 'syz.3.12411': attribute type 8 has an invalid length. [ 2039.224744][T18904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12413'. [ 2039.611302][T18921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2039.626145][T18931] netlink: 'syz.2.12420': attribute type 4 has an invalid length. [ 2039.634200][T18923] wg1 speed is unknown, defaulting to 1000 [ 2039.654105][T18923] lo speed is unknown, defaulting to 1000 [ 2039.694576][T18923] wlan1 speed is unknown, defaulting to 1000 [ 2040.386245][T18946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12428'. [ 2040.436433][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12430'. [ 2040.462569][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12428'. [ 2040.474648][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12428'. [ 2041.045659][T18976] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12433'. [ 2041.673568][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12442'. [ 2042.025913][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12448'. [ 2042.052567][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12448'. [ 2042.071898][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12448'. [ 2042.112174][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2042.388043][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12454'. [ 2042.554964][T19036] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2042.583852][T19034] wg1 speed is unknown, defaulting to 1000 [ 2042.591780][T19034] lo speed is unknown, defaulting to 1000 [ 2042.662736][T19034] wlan1 speed is unknown, defaulting to 1000 [ 2042.833504][T19045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2045.994138][T19108] netlink: 'syz.1.12473': attribute type 24 has an invalid length. [ 2046.042351][T19108] __nla_validate_parse: 3 callbacks suppressed [ 2046.042375][T19108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12473'. [ 2046.128702][T19108] bond22: option ad_actor_sys_prio: invalid value (0) [ 2046.135686][T19108] bond22: option ad_actor_sys_prio: allowed values 1 - 65535 [ 2046.146136][T19108] bond22 (unregistering): Released all slaves [ 2047.193914][T19155] wg1 speed is unknown, defaulting to 1000 [ 2047.214217][T19155] lo speed is unknown, defaulting to 1000 [ 2047.227338][T19155] wlan1 speed is unknown, defaulting to 1000 [ 2047.303575][T19162] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12491'. [ 2047.668577][T19169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12494'. [ 2047.709286][T19171] dvmrp8: entered allmulticast mode [ 2047.808869][T19171] wg1 speed is unknown, defaulting to 1000 [ 2047.817281][T19171] lo speed is unknown, defaulting to 1000 [ 2047.834160][T19171] wlan1 speed is unknown, defaulting to 1000 [ 2048.580415][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12502'. [ 2048.671178][T19196] FAULT_INJECTION: forcing a failure. [ 2048.671178][T19196] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.698663][T19196] CPU: 1 UID: 0 PID: 19196 Comm: syz.2.12504 Not tainted syzkaller #0 PREEMPT(full) [ 2048.698696][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2048.698709][T19196] Call Trace: [ 2048.698718][T19196] [ 2048.698728][T19196] dump_stack_lvl+0x189/0x250 [ 2048.698758][T19196] ? __pfx____ratelimit+0x10/0x10 [ 2048.698792][T19196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2048.698815][T19196] ? __pfx__printk+0x10/0x10 [ 2048.698857][T19196] should_fail_ex+0x414/0x560 [ 2048.698897][T19196] should_failslab+0xa8/0x100 [ 2048.698927][T19196] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2048.698948][T19196] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 2048.698969][T19196] ? sctp_v6_cmp_addr+0x15/0xd0 [ 2048.698987][T19196] ? sctp_add_bind_addr+0x8c/0x370 [ 2048.699006][T19196] ? sctp_add_bind_addr+0xb0/0x370 [ 2048.699033][T19196] sctp_add_bind_addr+0x8c/0x370 [ 2048.699060][T19196] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2048.699087][T19196] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2048.699109][T19196] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2048.699134][T19196] ? sctp_v6_is_any+0x64/0x80 [ 2048.699159][T19196] ? sctp_copy_one_addr+0x93/0x360 [ 2048.699185][T19196] sctp_bind_addr_copy+0xb3/0x3c0 [ 2048.699208][T19196] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2048.699243][T19196] sctp_connect_new_asoc+0x2e0/0x690 [ 2048.699272][T19196] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2048.699299][T19196] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2048.699324][T19196] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2048.699347][T19196] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2048.699374][T19196] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2048.699401][T19196] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2048.699434][T19196] sctp_sendmsg+0x155c/0x2810 [ 2048.699476][T19196] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2048.699507][T19196] ? aa_sk_perm+0x81e/0x950 [ 2048.699536][T19196] ? __pfx_aa_sk_perm+0x10/0x10 [ 2048.699563][T19196] ? sock_rps_record_flow+0x19/0x410 [ 2048.699595][T19196] ? inet_sendmsg+0x2f4/0x370 [ 2048.699619][T19196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2048.699656][T19196] __sock_sendmsg+0x19c/0x270 [ 2048.699686][T19196] __sys_sendto+0x3bd/0x520 [ 2048.699717][T19196] ? __pfx___sys_sendto+0x10/0x10 [ 2048.699742][T19196] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2048.699781][T19196] ? __fget_files+0x3a0/0x420 [ 2048.699822][T19196] ? ksys_write+0x22a/0x250 [ 2048.699848][T19196] ? __pfx_ksys_write+0x10/0x10 [ 2048.699875][T19196] __x64_sys_sendto+0xde/0x100 [ 2048.699908][T19196] do_syscall_64+0xfa/0xfa0 [ 2048.699928][T19196] ? lockdep_hardirqs_on+0x9c/0x150 [ 2048.699948][T19196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.699969][T19196] ? clear_bhb_loop+0x60/0xb0 [ 2048.699994][T19196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2048.700013][T19196] RIP: 0033:0x7f56d8b8eec9 [ 2048.700033][T19196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2048.700051][T19196] RSP: 002b:00007f56d99ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2048.700075][T19196] RAX: ffffffffffffffda RBX: 00007f56d8de5fa0 RCX: 00007f56d8b8eec9 [ 2048.700090][T19196] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000005 [ 2048.700111][T19196] RBP: 00007f56d99ba090 R08: 000020000005ffe4 R09: 000000000000001c [ 2048.700125][T19196] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 2048.700138][T19196] R13: 00007f56d8de6038 R14: 00007f56d8de5fa0 R15: 00007ffd15e0a738 [ 2048.700179][T19196] [ 2049.133831][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12506'. [ 2049.184998][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12506'. [ 2049.472126][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2049.480956][T19216] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2049.694421][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12510'. [ 2049.705806][T19223] FAULT_INJECTION: forcing a failure. [ 2049.705806][T19223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.733484][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12510'. [ 2049.742205][T19223] CPU: 0 UID: 0 PID: 19223 Comm: syz.0.12509 Not tainted syzkaller #0 PREEMPT(full) [ 2049.742235][T19223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2049.742247][T19223] Call Trace: [ 2049.742256][T19223] [ 2049.742265][T19223] dump_stack_lvl+0x189/0x250 [ 2049.742291][T19223] ? __pfx____ratelimit+0x10/0x10 [ 2049.742320][T19223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2049.742340][T19223] ? __pfx__printk+0x10/0x10 [ 2049.742382][T19223] should_fail_ex+0x414/0x560 [ 2049.742417][T19223] _copy_to_user+0x31/0xb0 [ 2049.742443][T19223] finalize_log+0xe1/0x160 [ 2049.742470][T19223] ? __pfx_finalize_log+0x10/0x10 [ 2049.742491][T19223] ? btf_check_type_tags+0x679/0x680 [ 2049.742522][T19223] btf_new_fd+0x6ff/0xc90 [ 2049.742544][T19223] ? apparmor_capable+0x137/0x1b0 [ 2049.742578][T19223] ? __pfx_btf_new_fd+0x10/0x10 [ 2049.742604][T19223] ? bpf_token_put+0x143/0x160 [ 2049.742632][T19223] ? bpf_btf_load+0x126/0x190 [ 2049.742662][T19223] __sys_bpf+0x3ed/0x860 [ 2049.742691][T19223] ? __pfx___sys_bpf+0x10/0x10 [ 2049.742735][T19223] ? ksys_write+0x22a/0x250 [ 2049.742760][T19223] ? __pfx_ksys_write+0x10/0x10 [ 2049.742788][T19223] __x64_sys_bpf+0x7c/0x90 [ 2049.742812][T19223] do_syscall_64+0xfa/0xfa0 [ 2049.742831][T19223] ? lockdep_hardirqs_on+0x9c/0x150 [ 2049.742851][T19223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.742870][T19223] ? clear_bhb_loop+0x60/0xb0 [ 2049.742895][T19223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.742914][T19223] RIP: 0033:0x7fc959b8eec9 [ 2049.742934][T19223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2049.742952][T19223] RSP: 002b:00007fc95a991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2049.742975][T19223] RAX: ffffffffffffffda RBX: 00007fc959de5fa0 RCX: 00007fc959b8eec9 [ 2049.742990][T19223] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 2049.743004][T19223] RBP: 00007fc95a991090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.743017][T19223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2049.743029][T19223] R13: 00007fc959de6038 R14: 00007fc959de5fa0 R15: 00007fffe8055158 [ 2049.743066][T19223] [ 2049.806608][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12511'. [ 2049.836930][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12510'. [ 2050.322446][T19233] wg1 speed is unknown, defaulting to 1000 [ 2050.352542][T19233] lo speed is unknown, defaulting to 1000 [ 2050.381245][T19233] wlan1 speed is unknown, defaulting to 1000 [ 2050.593126][T19241] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2050.704099][T19238] wg1 speed is unknown, defaulting to 1000 [ 2050.734197][T19238] lo speed is unknown, defaulting to 1000 [ 2050.834413][T19238] wlan1 speed is unknown, defaulting to 1000 [ 2051.249473][T19258] netlink: 'syz.0.12523': attribute type 9 has an invalid length. [ 2051.261148][T19258] netlink: 'syz.0.12523': attribute type 6 has an invalid length. [ 2052.257377][T19275] wg1 speed is unknown, defaulting to 1000 [ 2052.266662][T19275] lo speed is unknown, defaulting to 1000 [ 2052.558016][T19275] wlan1 speed is unknown, defaulting to 1000 [ 2052.653366][T19277] wg1 speed is unknown, defaulting to 1000 [ 2052.715791][T19287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2052.727183][T19287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2052.744847][T19287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2052.754908][T19287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2052.766880][T19287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2052.875837][T19293] __nla_validate_parse: 2 callbacks suppressed [ 2052.875860][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12532'. [ 2052.937863][T19293] wg1 speed is unknown, defaulting to 1000 [ 2052.937882][T19277] lo speed is unknown, defaulting to 1000 [ 2052.957601][T19277] wlan1 speed is unknown, defaulting to 1000 [ 2052.976201][T19293] lo speed is unknown, defaulting to 1000 [ 2052.988049][T19286] wg1 speed is unknown, defaulting to 1000 [ 2053.040190][T19286] lo speed is unknown, defaulting to 1000 [ 2053.169282][T19299] netlink: 'syz.2.12533': attribute type 3 has an invalid length. [ 2053.177589][T19299] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12533'. [ 2053.186881][T19299] FAULT_INJECTION: forcing a failure. [ 2053.186881][T19299] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.202231][T19299] CPU: 0 UID: 0 PID: 19299 Comm: syz.2.12533 Not tainted syzkaller #0 PREEMPT(full) [ 2053.202261][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2053.202274][T19299] Call Trace: [ 2053.202283][T19299] [ 2053.202291][T19299] dump_stack_lvl+0x189/0x250 [ 2053.202318][T19299] ? __pfx____ratelimit+0x10/0x10 [ 2053.202361][T19299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2053.202382][T19299] ? __pfx__printk+0x10/0x10 [ 2053.202412][T19299] ? __pfx___might_resched+0x10/0x10 [ 2053.202447][T19299] should_fail_ex+0x414/0x560 [ 2053.202486][T19299] should_failslab+0xa8/0x100 [ 2053.202516][T19299] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2053.202539][T19299] ? __alloc_skb+0x112/0x2d0 [ 2053.202576][T19299] __alloc_skb+0x112/0x2d0 [ 2053.202609][T19299] netlink_ack+0x146/0xa50 [ 2053.202636][T19299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2053.202681][T19299] netlink_rcv_skb+0x28c/0x470 [ 2053.202707][T19299] ? __lock_acquire+0xab9/0xd20 [ 2053.202733][T19299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2053.202758][T19299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2053.202811][T19299] ? down_read+0x1ad/0x2e0 [ 2053.202839][T19299] genl_rcv+0x28/0x40 [ 2053.202860][T19299] netlink_unicast+0x82f/0x9e0 [ 2053.202897][T19299] ? __pfx_netlink_unicast+0x10/0x10 [ 2053.202926][T19299] ? netlink_sendmsg+0x642/0xb30 [ 2053.202953][T19299] ? skb_put+0x11b/0x210 [ 2053.202986][T19299] netlink_sendmsg+0x805/0xb30 [ 2053.203029][T19299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2053.203064][T19299] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2053.203090][T19299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2053.203115][T19299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2053.203146][T19299] __sock_sendmsg+0x21c/0x270 [ 2053.203176][T19299] ____sys_sendmsg+0x505/0x830 [ 2053.203203][T19299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2053.203248][T19299] ? import_iovec+0x74/0xa0 [ 2053.203280][T19299] ___sys_sendmsg+0x21f/0x2a0 [ 2053.203304][T19299] ? __pfx____sys_sendmsg+0x10/0x10 [ 2053.203380][T19299] ? __fget_files+0x2a/0x420 [ 2053.203404][T19299] ? __fget_files+0x3a0/0x420 [ 2053.203443][T19299] __x64_sys_sendmsg+0x19b/0x260 [ 2053.203468][T19299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2053.203502][T19299] ? __pfx_ksys_write+0x10/0x10 [ 2053.203530][T19299] ? do_syscall_64+0xbe/0xfa0 [ 2053.203556][T19299] do_syscall_64+0xfa/0xfa0 [ 2053.203574][T19299] ? lockdep_hardirqs_on+0x9c/0x150 [ 2053.203594][T19299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.203616][T19299] ? clear_bhb_loop+0x60/0xb0 [ 2053.203642][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.203662][T19299] RIP: 0033:0x7f56d8b8eec9 [ 2053.203683][T19299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2053.203701][T19299] RSP: 002b:00007f56d99ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2053.203724][T19299] RAX: ffffffffffffffda RBX: 00007f56d8de5fa0 RCX: 00007f56d8b8eec9 [ 2053.203740][T19299] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 2053.203753][T19299] RBP: 00007f56d99ba090 R08: 0000000000000000 R09: 0000000000000000 [ 2053.203766][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2053.203779][T19299] R13: 00007f56d8de6038 R14: 00007f56d8de5fa0 R15: 00007ffd15e0a738 [ 2053.203819][T19299] [ 2053.783739][T19293] wlan1 speed is unknown, defaulting to 1000 [ 2054.410132][T19286] wlan1 speed is unknown, defaulting to 1000 [ 2054.832212][ T8881] Bluetooth: hci5: command tx timeout [ 2055.819443][T19286] chnl_net:caif_netlink_parms(): no params data found [ 2056.013114][T19338] netlink: 'syz.1.12542': attribute type 1 has an invalid length. [ 2056.070620][T19286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.078364][T19286] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.099442][T19286] bridge_slave_0: entered allmulticast mode [ 2056.107243][T19343] netlink: 'syz.1.12542': attribute type 11 has an invalid length. [ 2056.157806][T19286] bridge_slave_0: entered promiscuous mode [ 2056.184988][T19286] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.194534][T19286] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.207370][T19286] bridge_slave_1: entered allmulticast mode [ 2056.216067][T19286] bridge_slave_1: entered promiscuous mode [ 2056.290199][T19286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2056.299886][T19346] wg1 speed is unknown, defaulting to 1000 [ 2056.314414][T19286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2056.343179][T19346] lo speed is unknown, defaulting to 1000 [ 2056.368467][T19346] wlan1 speed is unknown, defaulting to 1000 [ 2056.371775][T19286] team0: Port device team_slave_0 added [ 2056.385726][T19286] team0: Port device team_slave_1 added [ 2056.456016][T19286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.463705][T19286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.491866][T19286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2056.507047][T19286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2056.531050][T19286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2056.559911][T19286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2056.734447][T19286] hsr_slave_0: entered promiscuous mode [ 2056.741337][T19286] hsr_slave_1: entered promiscuous mode [ 2056.749644][T19286] debugfs: 'hsr0' already exists in 'hsr' [ 2056.758912][T19286] Cannot create hsr debugfs directory [ 2056.914834][ T8881] Bluetooth: hci5: command tx timeout [ 2056.953542][T19367] FAULT_INJECTION: forcing a failure. [ 2056.953542][T19367] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2056.972870][T19367] CPU: 0 UID: 0 PID: 19367 Comm: syz.3.12552 Not tainted syzkaller #0 PREEMPT(full) [ 2056.972901][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2056.972915][T19367] Call Trace: [ 2056.972924][T19367] [ 2056.972934][T19367] dump_stack_lvl+0x189/0x250 [ 2056.972964][T19367] ? __pfx____ratelimit+0x10/0x10 [ 2056.972996][T19367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2056.973018][T19367] ? __pfx__printk+0x10/0x10 [ 2056.973040][T19367] ? fs_reclaim_acquire+0x7d/0x100 [ 2056.973075][T19367] should_fail_ex+0x414/0x560 [ 2056.973112][T19367] prepare_alloc_pages+0x213/0x610 [ 2056.973145][T19367] __alloc_frozen_pages_noprof+0x123/0x370 [ 2056.973176][T19367] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2056.973212][T19367] ? policy_nodemask+0x27c/0x720 [ 2056.973244][T19367] alloc_pages_mpol+0x232/0x4a0 [ 2056.973275][T19367] alloc_pages_noprof+0xa9/0x190 [ 2056.973302][T19367] bpf_prog_test_run_xdp+0xbfe/0x10e0 [ 2056.973350][T19367] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2056.973384][T19367] ? __fget_files+0x2a/0x420 [ 2056.973415][T19367] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2056.973443][T19367] bpf_prog_test_run+0x2c7/0x340 [ 2056.973475][T19367] __sys_bpf+0x562/0x860 [ 2056.973502][T19367] ? __pfx___sys_bpf+0x10/0x10 [ 2056.973546][T19367] ? ksys_write+0x22a/0x250 [ 2056.973579][T19367] ? __pfx_ksys_write+0x10/0x10 [ 2056.973607][T19367] __x64_sys_bpf+0x7c/0x90 [ 2056.973631][T19367] do_syscall_64+0xfa/0xfa0 [ 2056.973650][T19367] ? lockdep_hardirqs_on+0x9c/0x150 [ 2056.973670][T19367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.973689][T19367] ? clear_bhb_loop+0x60/0xb0 [ 2056.973713][T19367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.973731][T19367] RIP: 0033:0x7f4a12f8eec9 [ 2056.973749][T19367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2056.973766][T19367] RSP: 002b:00007f4a13da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2056.973787][T19367] RAX: ffffffffffffffda RBX: 00007f4a131e5fa0 RCX: 00007f4a12f8eec9 [ 2056.973802][T19367] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2056.973815][T19367] RBP: 00007f4a13da6090 R08: 0000000000000000 R09: 0000000000000000 [ 2056.973827][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2056.973838][T19367] R13: 00007f4a131e6038 R14: 00007f4a131e5fa0 R15: 00007ffe120034e8 [ 2056.973874][T19367] [ 2058.344880][T19363] wg1 speed is unknown, defaulting to 1000 [ 2058.420973][T19363] lo speed is unknown, defaulting to 1000 [ 2058.449134][T19363] wlan1 speed is unknown, defaulting to 1000 [ 2058.606628][T19286] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2058.645339][T19286] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2058.646431][T19386] netlink: 'syz.3.12557': attribute type 1 has an invalid length. [ 2058.660083][T19386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12557'. [ 2058.702856][T19286] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2058.747535][T19286] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2058.800984][T19392] netlink: 'syz.0.12559': attribute type 1 has an invalid length. [ 2058.889180][T19392] bond16: entered promiscuous mode [ 2058.906604][T19392] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2058.992956][ T8881] Bluetooth: hci5: command tx timeout [ 2059.135821][T19392] 8021q: adding VLAN 0 to HW filter on device bond17 [ 2059.161287][T19392] bond16: (slave bond17): making interface the new active one [ 2059.169743][T19392] bond17: entered promiscuous mode [ 2059.180064][T19392] bond16: (slave bond17): Enslaving as an active interface with an up link [ 2059.322952][T19410] netlink: 'syz.3.12563': attribute type 1 has an invalid length. [ 2059.330842][T19410] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12563'. [ 2059.369578][T19286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2059.449246][T19414] xt_ecn: cannot match TCP bits for non-tcp packets [ 2059.733932][T19419] netlink: 'syz.3.12566': attribute type 13 has an invalid length. [ 2059.749282][T19419] netlink: 'syz.3.12566': attribute type 17 has an invalid length. [ 2059.764074][T19286] 8021q: adding VLAN 0 to HW filter on device team0 [ 2059.866270][T19419] veth19: left promiscuous mode [ 2059.926754][T19419] bond21: left promiscuous mode [ 2059.932501][T19419] bond22: left promiscuous mode [ 2059.944001][T19419] bridge39: left promiscuous mode [ 2060.100916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.108424][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2060.336350][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12568'. [ 2060.354696][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.361945][T16465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.482629][T19426] wg1 speed is unknown, defaulting to 1000 [ 2060.490634][T19426] lo speed is unknown, defaulting to 1000 [ 2060.602970][T19426] wlan1 speed is unknown, defaulting to 1000 [ 2061.021508][T19440] Bluetooth: hci0: unsupported parameter 512 [ 2061.028599][T19440] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 2061.073077][ T8881] Bluetooth: hci5: command tx timeout [ 2061.261114][T19286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2061.280368][T19445] sctp: [Deprecated]: syz.2.12572 (pid 19445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2061.280368][T19445] Use struct sctp_sack_info instead [ 2061.299908][T19445] netlink: 'syz.2.12572': attribute type 3 has an invalid length. [ 2061.307945][T19445] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12572'. [ 2061.803359][T19457] netlink: 'syz.2.12575': attribute type 1 has an invalid length. [ 2061.811370][T19457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12575'. [ 2062.048993][T19460] wg1 speed is unknown, defaulting to 1000 [ 2062.110188][T19460] lo speed is unknown, defaulting to 1000 [ 2062.147565][T19460] wlan1 speed is unknown, defaulting to 1000 [ 2062.258774][T19286] veth0_vlan: entered promiscuous mode [ 2062.301774][T19286] veth1_vlan: entered promiscuous mode [ 2062.415649][T19286] veth0_macvtap: entered promiscuous mode [ 2062.451823][T19286] veth1_macvtap: entered promiscuous mode [ 2062.525265][T19286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2062.588867][T19286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2062.626652][ T8027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.647453][ T8027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.685845][T19474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12579'. [ 2062.707104][ T8027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.722661][ T8027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.299206][T16465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.330925][T16465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.501415][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12586'. [ 2063.568708][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.580006][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2064.053599][T19521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12590'. [ 2064.053608][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12527'. [ 2064.095116][T19522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12527'. [ 2064.174067][T19522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12527'. [ 2064.271005][T19528] tipc: Failed to remove unknown binding: 66,1,1/2653207053:1134462789/1134462791 [ 2064.294883][T19528] tipc: Failed to remove unknown binding: 66,1,1/2653207053:1134462789/1134462791 [ 2064.496953][T19530] wg1 speed is unknown, defaulting to 1000 [ 2064.519692][T19530] lo speed is unknown, defaulting to 1000 [ 2064.549729][T19530] wlan1 speed is unknown, defaulting to 1000 [ 2065.106780][T19558] wg1 speed is unknown, defaulting to 1000 [ 2065.116271][T19558] lo speed is unknown, defaulting to 1000 [ 2065.180942][T19558] wlan1 speed is unknown, defaulting to 1000 [ 2065.685082][T19573] FAULT_INJECTION: forcing a failure. [ 2065.685082][T19573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.702529][T19573] CPU: 1 UID: 0 PID: 19573 Comm: syz.1.12604 Not tainted syzkaller #0 PREEMPT(full) [ 2065.702561][T19573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2065.702573][T19573] Call Trace: [ 2065.702582][T19573] [ 2065.702591][T19573] dump_stack_lvl+0x189/0x250 [ 2065.702620][T19573] ? __pfx____ratelimit+0x10/0x10 [ 2065.702652][T19573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2065.702673][T19573] ? __pfx__printk+0x10/0x10 [ 2065.702712][T19573] should_fail_ex+0x414/0x560 [ 2065.702751][T19573] _copy_from_user+0x2d/0xb0 [ 2065.702780][T19573] copy_from_sockptr+0x48/0x70 [ 2065.702805][T19573] ip_mroute_setsockopt+0x6a1/0xf60 [ 2065.702841][T19573] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 2065.702884][T19573] ? vfs_write+0x956/0xb30 [ 2065.702913][T19573] do_ip_setsockopt+0xf11/0x2d00 [ 2065.702949][T19573] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2065.702973][T19573] ? __lock_acquire+0xab9/0xd20 [ 2065.703009][T19573] ? aa_sk_perm+0x81e/0x950 [ 2065.703038][T19573] ? __pfx_aa_sk_perm+0x10/0x10 [ 2065.703062][T19573] ? aa_sock_opt_perm+0xff/0x1b0 [ 2065.703089][T19573] ip_setsockopt+0x66/0x110 [ 2065.703115][T19573] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2065.703145][T19573] do_sock_setsockopt+0x17c/0x1b0 [ 2065.703182][T19573] __x64_sys_setsockopt+0x13f/0x1b0 [ 2065.703218][T19573] do_syscall_64+0xfa/0xfa0 [ 2065.703259][T19573] ? lockdep_hardirqs_on+0x9c/0x150 [ 2065.703279][T19573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.703300][T19573] ? clear_bhb_loop+0x60/0xb0 [ 2065.703325][T19573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2065.703345][T19573] RIP: 0033:0x7f9a86d8eec9 [ 2065.703365][T19573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2065.703383][T19573] RSP: 002b:00007f9a87cb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2065.703407][T19573] RAX: ffffffffffffffda RBX: 00007f9a86fe5fa0 RCX: 00007f9a86d8eec9 [ 2065.703423][T19573] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 2065.703436][T19573] RBP: 00007f9a87cb1090 R08: 0000000000000010 R09: 0000000000000000 [ 2065.703449][T19573] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 2065.703462][T19573] R13: 00007f9a86fe6038 R14: 00007f9a86fe5fa0 R15: 00007fffaf0e5a88 [ 2065.703499][T19573] [ 2066.516538][T19287] Bluetooth: hci5: command 0x0405 tx timeout [ 2066.585234][T19600] netlink: 'syz.3.12614': attribute type 1 has an invalid length. [ 2066.594314][T19600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12614'. [ 2066.740866][T19607] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.12615'. [ 2066.752297][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2067.012986][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12617'. [ 2067.099650][T19619] FAULT_INJECTION: forcing a failure. [ 2067.099650][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.114807][T19619] CPU: 0 UID: 0 PID: 19619 Comm: syz.5.12620 Not tainted syzkaller #0 PREEMPT(full) [ 2067.114840][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2067.114852][T19619] Call Trace: [ 2067.114861][T19619] [ 2067.114871][T19619] dump_stack_lvl+0x189/0x250 [ 2067.114899][T19619] ? __pfx____ratelimit+0x10/0x10 [ 2067.114930][T19619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2067.114958][T19619] ? __pfx__printk+0x10/0x10 [ 2067.114987][T19619] ? __pfx___might_resched+0x10/0x10 [ 2067.115022][T19619] should_fail_ex+0x414/0x560 [ 2067.115061][T19619] should_failslab+0xa8/0x100 [ 2067.115089][T19619] __kmalloc_noprof+0xcb/0x7f0 [ 2067.115109][T19619] ? kfree+0x4d/0x6d0 [ 2067.115125][T19619] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2067.115158][T19619] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2067.115184][T19619] ? tomoyo_domain+0xd9/0x130 [ 2067.115216][T19619] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2067.115247][T19619] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2067.115281][T19619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2067.115360][T19619] ? __fget_files+0x2a/0x420 [ 2067.115392][T19619] ? __fget_files+0x3a0/0x420 [ 2067.115416][T19619] ? __fget_files+0x2a/0x420 [ 2067.115447][T19619] security_file_ioctl+0xcb/0x2d0 [ 2067.115480][T19619] __se_sys_ioctl+0x47/0x170 [ 2067.115503][T19619] do_syscall_64+0xfa/0xfa0 [ 2067.115523][T19619] ? lockdep_hardirqs_on+0x9c/0x150 [ 2067.115552][T19619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.115573][T19619] ? clear_bhb_loop+0x60/0xb0 [ 2067.115599][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.115619][T19619] RIP: 0033:0x7f93bad8eec9 [ 2067.115638][T19619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2067.115655][T19619] RSP: 002b:00007f93bbbe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2067.115678][T19619] RAX: ffffffffffffffda RBX: 00007f93bafe5fa0 RCX: 00007f93bad8eec9 [ 2067.115694][T19619] RDX: 0000200000000180 RSI: 0000000000008933 RDI: 0000000000000004 [ 2067.115707][T19619] RBP: 00007f93bbbe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.115720][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2067.115734][T19619] R13: 00007f93bafe6038 R14: 00007f93bafe5fa0 R15: 00007ffc235de1b8 [ 2067.115771][T19619] [ 2067.115858][T19619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2067.976696][T19650] wg1 speed is unknown, defaulting to 1000 [ 2067.990733][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12631'. [ 2067.993651][T19650] lo speed is unknown, defaulting to 1000 [ 2068.037379][T19650] wlan1 speed is unknown, defaulting to 1000 [ 2068.130620][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12632'. [ 2069.100923][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12641'. [ 2069.346032][T19686] wg1 speed is unknown, defaulting to 1000 [ 2069.389717][T19686] lo speed is unknown, defaulting to 1000 [ 2069.432659][T19686] wlan1 speed is unknown, defaulting to 1000 [ 2069.811715][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12645'. [ 2071.098811][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12653'. [ 2071.216534][T19724] vlan1: entered promiscuous mode [ 2071.248954][T19724] bond0: entered promiscuous mode [ 2071.264039][T19724] bond18: entered promiscuous mode [ 2071.346596][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12654'. [ 2071.365343][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12654'. [ 2071.411382][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12654'. [ 2071.790899][T19739] wg1 speed is unknown, defaulting to 1000 [ 2071.844189][T19739] lo speed is unknown, defaulting to 1000 [ 2071.932487][T19739] wlan1 speed is unknown, defaulting to 1000 [ 2072.528885][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12659'. [ 2072.724012][T19744] wg1 speed is unknown, defaulting to 1000 [ 2072.732998][T19744] lo speed is unknown, defaulting to 1000 [ 2073.528255][T19744] wlan1 speed is unknown, defaulting to 1000 [ 2073.965430][T19754] wg1 speed is unknown, defaulting to 1000 [ 2073.985446][T19754] lo speed is unknown, defaulting to 1000 [ 2074.017186][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12660'. [ 2074.062093][T19752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2074.069546][T19752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2074.143986][T19752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2074.151708][T19752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2074.349442][T19754] wlan1 speed is unknown, defaulting to 1000 [ 2075.904010][T19770] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12664'. [ 2075.985571][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12664'. [ 2076.021103][T19770] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12664'. [ 2076.030817][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12664'. [ 2076.041750][T19770] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12664'. [ 2076.046964][T19773] netlink: 'syz.0.12664': attribute type 1 has an invalid length. [ 2076.081555][T19773] netlink: 'syz.0.12664': attribute type 1 has an invalid length. [ 2076.313292][T19775] FAULT_INJECTION: forcing a failure. [ 2076.313292][T19775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2076.372201][T19775] CPU: 0 UID: 0 PID: 19775 Comm: syz.3.12666 Not tainted syzkaller #0 PREEMPT(full) [ 2076.372236][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2076.372249][T19775] Call Trace: [ 2076.372258][T19775] [ 2076.372267][T19775] dump_stack_lvl+0x189/0x250 [ 2076.372296][T19775] ? __pfx____ratelimit+0x10/0x10 [ 2076.372327][T19775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2076.372349][T19775] ? __pfx__printk+0x10/0x10 [ 2076.372396][T19775] should_fail_ex+0x414/0x560 [ 2076.372434][T19775] _copy_from_user+0x2d/0xb0 [ 2076.372463][T19775] copy_from_sockptr_offset+0x66/0xa0 [ 2076.372495][T19775] do_arpt_set_ctl+0x8db/0xf10 [ 2076.372529][T19775] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2076.372558][T19775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2076.372585][T19775] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 2076.372611][T19775] ? rcu_is_watching+0x15/0xb0 [ 2076.372641][T19775] ? trace_contention_end+0x39/0x120 [ 2076.372693][T19775] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2076.372724][T19775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2076.372753][T19775] ? __pfx___mutex_lock+0x10/0x10 [ 2076.372790][T19775] nf_setsockopt+0x26f/0x290 [ 2076.372814][T19775] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2076.372845][T19775] smc_setsockopt+0x232/0xab0 [ 2076.372880][T19775] ? __pfx_smc_setsockopt+0x10/0x10 [ 2076.372900][T19775] ? aa_sock_opt_perm+0xff/0x1b0 [ 2076.372928][T19775] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2076.372954][T19775] ? __pfx_smc_setsockopt+0x10/0x10 [ 2076.372977][T19775] do_sock_setsockopt+0x17c/0x1b0 [ 2076.373016][T19775] __x64_sys_setsockopt+0x13f/0x1b0 [ 2076.373053][T19775] do_syscall_64+0xfa/0xfa0 [ 2076.373073][T19775] ? lockdep_hardirqs_on+0x9c/0x150 [ 2076.373093][T19775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.373113][T19775] ? clear_bhb_loop+0x60/0xb0 [ 2076.373138][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.373158][T19775] RIP: 0033:0x7f4a12f8eec9 [ 2076.373177][T19775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2076.373195][T19775] RSP: 002b:00007f4a13da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2076.373219][T19775] RAX: ffffffffffffffda RBX: 00007f4a131e5fa0 RCX: 00007f4a12f8eec9 [ 2076.373235][T19775] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 2076.373248][T19775] RBP: 00007f4a13da6090 R08: 0000000000000430 R09: 0000000000000000 [ 2076.373261][T19775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2076.373274][T19775] R13: 00007f4a131e6038 R14: 00007f4a131e5fa0 R15: 00007ffe120034e8 [ 2076.373313][T19775] [ 2076.892479][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12669'. [ 2076.901583][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12669'. [ 2076.910740][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12669'. [ 2077.344285][T19792] macvlan0: entered promiscuous mode [ 2077.349861][T19792] netlink: 'syz.1.12674': attribute type 1 has an invalid length. [ 2077.358970][T19792] netlink: 'syz.1.12674': attribute type 2 has an invalid length. [ 2077.368966][T19794] wg1 speed is unknown, defaulting to 1000 [ 2077.410943][T19794] lo speed is unknown, defaulting to 1000 [ 2077.431097][T19801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12677'. [ 2077.446882][T19802] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12678'. [ 2077.454274][T19794] wlan1 speed is unknown, defaulting to 1000 [ 2077.847083][T19815] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 2078.735332][T19824] wg1 speed is unknown, defaulting to 1000 [ 2078.861053][T19824] lo speed is unknown, defaulting to 1000 [ 2079.073880][T19824] wlan1 speed is unknown, defaulting to 1000 [ 2079.451616][T19842] netlink: 'syz.3.12689': attribute type 1 has an invalid length. [ 2080.149015][T19873] wg1 speed is unknown, defaulting to 1000 [ 2080.158042][T19873] lo speed is unknown, defaulting to 1000 [ 2080.186211][T19873] wlan1 speed is unknown, defaulting to 1000 [ 2080.195439][T19876] FAULT_INJECTION: forcing a failure. [ 2080.195439][T19876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2080.212060][T19876] CPU: 0 UID: 0 PID: 19876 Comm: syz.3.12696 Not tainted syzkaller #0 PREEMPT(full) [ 2080.212092][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2080.212107][T19876] Call Trace: [ 2080.212115][T19876] [ 2080.212124][T19876] dump_stack_lvl+0x189/0x250 [ 2080.212152][T19876] ? __pfx____ratelimit+0x10/0x10 [ 2080.212183][T19876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2080.212205][T19876] ? __pfx__printk+0x10/0x10 [ 2080.212242][T19876] should_fail_ex+0x414/0x560 [ 2080.212279][T19876] _copy_to_user+0x31/0xb0 [ 2080.212309][T19876] simple_read_from_buffer+0xe1/0x170 [ 2080.212338][T19876] proc_fail_nth_read+0x1b3/0x220 [ 2080.212373][T19876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2080.212407][T19876] ? rw_verify_area+0x2a6/0x4d0 [ 2080.212436][T19876] ? __lock_acquire+0xab9/0xd20 [ 2080.212460][T19876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2080.212493][T19876] vfs_read+0x200/0xa30 [ 2080.212513][T19876] ? fdget_pos+0x247/0x320 [ 2080.212544][T19876] ? __pfx___mutex_lock+0x10/0x10 [ 2080.212567][T19876] ? __pfx_vfs_read+0x10/0x10 [ 2080.212591][T19876] ? __fget_files+0x2a/0x420 [ 2080.212621][T19876] ? __fget_files+0x3a0/0x420 [ 2080.212643][T19876] ? __fget_files+0x2a/0x420 [ 2080.212679][T19876] ksys_read+0x145/0x250 [ 2080.212705][T19876] ? __pfx_ksys_read+0x10/0x10 [ 2080.212731][T19876] ? do_syscall_64+0xbe/0xfa0 [ 2080.212762][T19876] do_syscall_64+0xfa/0xfa0 [ 2080.212780][T19876] ? lockdep_hardirqs_on+0x9c/0x150 [ 2080.212800][T19876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2080.212820][T19876] ? clear_bhb_loop+0x60/0xb0 [ 2080.212845][T19876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2080.212865][T19876] RIP: 0033:0x7f4a12f8d8dc [ 2080.212884][T19876] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2080.212901][T19876] RSP: 002b:00007f4a13da6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2080.212923][T19876] RAX: ffffffffffffffda RBX: 00007f4a131e5fa0 RCX: 00007f4a12f8d8dc [ 2080.212938][T19876] RDX: 000000000000000f RSI: 00007f4a13da60a0 RDI: 0000000000000004 [ 2080.212951][T19876] RBP: 00007f4a13da6090 R08: 0000000000000000 R09: 0000000000000000 [ 2080.212964][T19876] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 2080.212976][T19876] R13: 00007f4a131e6038 R14: 00007f4a131e5fa0 R15: 00007ffe120034e8 [ 2080.213015][T19876] [ 2080.804104][T19881] wg1 speed is unknown, defaulting to 1000 [ 2080.824410][T19881] lo speed is unknown, defaulting to 1000 [ 2080.865892][T19881] wlan1 speed is unknown, defaulting to 1000 [ 2080.871669][T19888] netlink: 'syz.2.12700': attribute type 1 has an invalid length. [ 2081.136055][T19888] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2081.236179][T19893] ip6erspan0: entered promiscuous mode [ 2081.265582][T19893] bond15: (slave ip6erspan0): making interface the new active one [ 2081.288331][T19893] bond15: (slave ip6erspan0): Enslaving as an active interface with an up link [ 2081.298382][T19898] netlink: 'syz.5.12701': attribute type 4 has an invalid length. [ 2081.750486][T19916] netlink: 'syz.2.12706': attribute type 1 has an invalid length. [ 2081.766093][T19916] __nla_validate_parse: 4 callbacks suppressed [ 2081.766117][T19916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12706'. [ 2082.320014][T19928] netlink: 'syz.0.12710': attribute type 1 has an invalid length. [ 2082.328685][T19928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12710'. [ 2082.725411][T19941] netlink: 'syz.5.12715': attribute type 3 has an invalid length. [ 2082.740767][T19941] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12715'. [ 2082.838559][T19944] netlink: 'syz.5.12716': attribute type 2 has an invalid length. [ 2082.854127][T19944] netlink: 'syz.5.12716': attribute type 3 has an invalid length. [ 2083.101667][T19948] wg1 speed is unknown, defaulting to 1000 [ 2083.110549][T19948] lo speed is unknown, defaulting to 1000 [ 2083.128882][T19948] wlan1 speed is unknown, defaulting to 1000 [ 2083.373843][T19951] wg1 speed is unknown, defaulting to 1000 [ 2083.433537][T19951] lo speed is unknown, defaulting to 1000 [ 2083.527498][T19958] wg1 speed is unknown, defaulting to 1000 [ 2083.579434][T19958] lo speed is unknown, defaulting to 1000 [ 2084.246651][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12723'. [ 2084.287137][T19969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12723'. [ 2084.373161][T19969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12723'. [ 2084.402612][T19951] wlan1 speed is unknown, defaulting to 1000 [ 2084.890160][T19958] wlan1 speed is unknown, defaulting to 1000 [ 2085.276091][T19994] sctp: [Deprecated]: syz.3.12728 (pid 19994) Use of int in max_burst socket option. [ 2085.276091][T19994] Use struct sctp_assoc_value instead [ 2086.488663][T20008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12732'. [ 2086.499374][T20008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12732'. [ 2086.594379][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12734'. [ 2086.745183][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12734'. [ 2086.960110][T20021] netlink: 'syz.0.12738': attribute type 10 has an invalid length. [ 2086.969380][T20027] netlink: 'syz.2.12740': attribute type 3 has an invalid length. [ 2087.015777][T20027] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12740'. [ 2087.054839][T20029] wg1 speed is unknown, defaulting to 1000 [ 2087.080981][T20029] lo speed is unknown, defaulting to 1000 [ 2087.127020][T20029] wlan1 speed is unknown, defaulting to 1000 [ 2087.865258][T20048] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12746'. [ 2088.266264][T20059] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12751'. [ 2088.796008][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12758'. [ 2088.900624][T20077] wg1 speed is unknown, defaulting to 1000 [ 2088.921865][T20077] lo speed is unknown, defaulting to 1000 [ 2088.935304][T20083] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12759'. [ 2088.948305][T20077] wlan1 speed is unknown, defaulting to 1000 [ 2089.251207][T20092] FAULT_INJECTION: forcing a failure. [ 2089.251207][T20092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.266154][T20092] CPU: 1 UID: 0 PID: 20092 Comm: syz.3.12762 Not tainted syzkaller #0 PREEMPT(full) [ 2089.266185][T20092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2089.266199][T20092] Call Trace: [ 2089.266209][T20092] [ 2089.266218][T20092] dump_stack_lvl+0x189/0x250 [ 2089.266247][T20092] ? __pfx____ratelimit+0x10/0x10 [ 2089.266280][T20092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2089.266303][T20092] ? __pfx__printk+0x10/0x10 [ 2089.266335][T20092] ? __might_fault+0xb0/0x130 [ 2089.266373][T20092] should_fail_ex+0x414/0x560 [ 2089.266411][T20092] _copy_from_user+0x2d/0xb0 [ 2089.266441][T20092] bpf_prog_test_run_xdp+0xd77/0x10e0 [ 2089.266491][T20092] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2089.266527][T20092] ? __fget_files+0x2a/0x420 [ 2089.266566][T20092] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2089.266598][T20092] bpf_prog_test_run+0x2c7/0x340 [ 2089.266631][T20092] __sys_bpf+0x562/0x860 [ 2089.266660][T20092] ? __pfx___sys_bpf+0x10/0x10 [ 2089.266706][T20092] ? ksys_write+0x22a/0x250 [ 2089.266734][T20092] ? __pfx_ksys_write+0x10/0x10 [ 2089.266764][T20092] __x64_sys_bpf+0x7c/0x90 [ 2089.266790][T20092] do_syscall_64+0xfa/0xfa0 [ 2089.266811][T20092] ? lockdep_hardirqs_on+0x9c/0x150 [ 2089.266833][T20092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.266854][T20092] ? clear_bhb_loop+0x60/0xb0 [ 2089.266880][T20092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.266900][T20092] RIP: 0033:0x7f4a12f8eec9 [ 2089.266919][T20092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2089.266936][T20092] RSP: 002b:00007f4a13da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2089.266961][T20092] RAX: ffffffffffffffda RBX: 00007f4a131e5fa0 RCX: 00007f4a12f8eec9 [ 2089.266977][T20092] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2089.266990][T20092] RBP: 00007f4a13da6090 R08: 0000000000000000 R09: 0000000000000000 [ 2089.267003][T20092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2089.267016][T20092] R13: 00007f4a131e6038 R14: 00007f4a131e5fa0 R15: 00007ffe120034e8 [ 2089.267055][T20092] [ 2089.678863][T20096] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2089.907249][T20106] FAULT_INJECTION: forcing a failure. [ 2089.907249][T20106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.936039][T20106] CPU: 0 UID: 0 PID: 20106 Comm: syz.3.12767 Not tainted syzkaller #0 PREEMPT(full) [ 2089.936071][T20106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2089.936084][T20106] Call Trace: [ 2089.936093][T20106] [ 2089.936102][T20106] dump_stack_lvl+0x189/0x250 [ 2089.936132][T20106] ? __pfx____ratelimit+0x10/0x10 [ 2089.936164][T20106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2089.936186][T20106] ? __pfx__printk+0x10/0x10 [ 2089.936208][T20106] ? __might_fault+0xb0/0x130 [ 2089.936245][T20106] should_fail_ex+0x414/0x560 [ 2089.936282][T20106] _copy_from_user+0x2d/0xb0 [ 2089.936312][T20106] sctp_setsockopt+0x19f/0x1200 [ 2089.936338][T20106] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2089.936368][T20106] do_sock_setsockopt+0x17c/0x1b0 [ 2089.936404][T20106] __x64_sys_setsockopt+0x13f/0x1b0 [ 2089.936441][T20106] do_syscall_64+0xfa/0xfa0 [ 2089.936461][T20106] ? lockdep_hardirqs_on+0x9c/0x150 [ 2089.936481][T20106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.936501][T20106] ? clear_bhb_loop+0x60/0xb0 [ 2089.936526][T20106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2089.936546][T20106] RIP: 0033:0x7f4a12f8eec9 [ 2089.936566][T20106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2089.936584][T20106] RSP: 002b:00007f4a13da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2089.936608][T20106] RAX: ffffffffffffffda RBX: 00007f4a131e5fa0 RCX: 00007f4a12f8eec9 [ 2089.936624][T20106] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 2089.936637][T20106] RBP: 00007f4a13da6090 R08: 0000000000000008 R09: 0000000000000000 [ 2089.936650][T20106] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 2089.936663][T20106] R13: 00007f4a131e6038 R14: 00007f4a131e5fa0 R15: 00007ffe120034e8 [ 2089.936702][T20106] [ 2089.973582][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12768'. [ 2090.228480][T20102] wg1 speed is unknown, defaulting to 1000 [ 2090.310380][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12771'. [ 2090.337318][T20102] lo speed is unknown, defaulting to 1000 [ 2090.526294][T20102] wlan1 speed is unknown, defaulting to 1000 [ 2090.533316][T20110] wg1 speed is unknown, defaulting to 1000 [ 2090.594737][T20115] wg1 speed is unknown, defaulting to 1000 [ 2090.604873][T20110] lo speed is unknown, defaulting to 1000 [ 2090.627873][T20121] netlink: 'syz.1.12772': attribute type 1 has an invalid length. [ 2090.652411][T20121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12772'. [ 2090.675838][T20115] lo speed is unknown, defaulting to 1000 [ 2091.145845][T20110] wlan1 speed is unknown, defaulting to 1000 [ 2091.688864][T20115] wlan1 speed is unknown, defaulting to 1000 [ 2092.030879][T20154] wg1 speed is unknown, defaulting to 1000 [ 2092.076102][T20154] lo speed is unknown, defaulting to 1000 [ 2092.185840][T20154] wlan1 speed is unknown, defaulting to 1000 [ 2092.348363][T20163] netlink: 'syz.1.12784': attribute type 1 has an invalid length. [ 2092.380436][T20163] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12784'. [ 2092.838380][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12789'. [ 2093.834960][T20191] wg1 speed is unknown, defaulting to 1000 [ 2093.938378][T20191] lo speed is unknown, defaulting to 1000 [ 2094.450483][T20191] wlan1 speed is unknown, defaulting to 1000 [ 2094.452166][T20195] wg1 speed is unknown, defaulting to 1000 [ 2094.670623][T20195] lo speed is unknown, defaulting to 1000 [ 2094.959009][T20222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12800'. [ 2095.196508][T20195] wlan1 speed is unknown, defaulting to 1000 [ 2095.786063][T20239] wg1 speed is unknown, defaulting to 1000 [ 2095.836193][T20239] lo speed is unknown, defaulting to 1000 [ 2095.932527][T20239] wlan1 speed is unknown, defaulting to 1000 [ 2096.509921][T20244] wg1 speed is unknown, defaulting to 1000 [ 2096.690225][T20244] lo speed is unknown, defaulting to 1000 [ 2096.750603][T20244] wlan1 speed is unknown, defaulting to 1000 [ 2096.875651][T20261] tun0: tun_chr_ioctl cmd 1074025675 [ 2096.881359][T20261] tun0: persist enabled [ 2096.897173][T20261] tun0: tun_chr_ioctl cmd 1074025675 [ 2096.911658][T20261] tun0: persist enabled [ 2097.115142][T20265] FAULT_INJECTION: forcing a failure. [ 2097.115142][T20265] name failslab, interval 1, probability 0, space 0, times 0 [ 2097.168332][T20265] CPU: 0 UID: 0 PID: 20265 Comm: syz.5.12812 Not tainted syzkaller #0 PREEMPT(full) [ 2097.168365][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2097.168379][T20265] Call Trace: [ 2097.168389][T20265] [ 2097.168399][T20265] dump_stack_lvl+0x189/0x250 [ 2097.168429][T20265] ? __pfx____ratelimit+0x10/0x10 [ 2097.168462][T20265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2097.168485][T20265] ? __pfx__printk+0x10/0x10 [ 2097.168516][T20265] ? __pfx___might_resched+0x10/0x10 [ 2097.168552][T20265] should_fail_ex+0x414/0x560 [ 2097.168592][T20265] should_failslab+0xa8/0x100 [ 2097.168622][T20265] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2097.168646][T20265] ? __alloc_skb+0x112/0x2d0 [ 2097.168683][T20265] __alloc_skb+0x112/0x2d0 [ 2097.168718][T20265] netlink_ack+0x146/0xa50 [ 2097.168745][T20265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2097.168768][T20265] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2097.168796][T20265] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2097.168826][T20265] ? __asan_memcpy+0x40/0x70 [ 2097.168847][T20265] ? __pfx_ref_tracker_free+0x10/0x10 [ 2097.168880][T20265] netlink_rcv_skb+0x28c/0x470 [ 2097.168907][T20265] ? __lock_acquire+0xab9/0xd20 [ 2097.168935][T20265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2097.168960][T20265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2097.169013][T20265] ? down_read+0x1ad/0x2e0 [ 2097.169042][T20265] genl_rcv+0x28/0x40 [ 2097.169063][T20265] netlink_unicast+0x82f/0x9e0 [ 2097.169102][T20265] ? __pfx_netlink_unicast+0x10/0x10 [ 2097.169132][T20265] ? netlink_sendmsg+0x642/0xb30 [ 2097.169159][T20265] ? skb_put+0x11b/0x210 [ 2097.169194][T20265] netlink_sendmsg+0x805/0xb30 [ 2097.169245][T20265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2097.169280][T20265] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2097.169307][T20265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2097.169339][T20265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2097.169369][T20265] __sock_sendmsg+0x21c/0x270 [ 2097.169400][T20265] ____sys_sendmsg+0x505/0x830 [ 2097.169429][T20265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2097.169475][T20265] ? import_iovec+0x74/0xa0 [ 2097.169508][T20265] ___sys_sendmsg+0x21f/0x2a0 [ 2097.169533][T20265] ? __pfx____sys_sendmsg+0x10/0x10 [ 2097.169601][T20265] ? __fget_files+0x2a/0x420 [ 2097.169627][T20265] ? __fget_files+0x3a0/0x420 [ 2097.169667][T20265] __x64_sys_sendmsg+0x19b/0x260 [ 2097.169692][T20265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2097.169726][T20265] ? __pfx_ksys_write+0x10/0x10 [ 2097.169755][T20265] ? do_syscall_64+0xbe/0xfa0 [ 2097.169782][T20265] do_syscall_64+0xfa/0xfa0 [ 2097.169801][T20265] ? lockdep_hardirqs_on+0x9c/0x150 [ 2097.169822][T20265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2097.169843][T20265] ? clear_bhb_loop+0x60/0xb0 [ 2097.169870][T20265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2097.169890][T20265] RIP: 0033:0x7f93bad8eec9 [ 2097.169910][T20265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2097.169928][T20265] RSP: 002b:00007f93bbbe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2097.169953][T20265] RAX: ffffffffffffffda RBX: 00007f93bafe5fa0 RCX: 00007f93bad8eec9 [ 2097.169969][T20265] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2097.169983][T20265] RBP: 00007f93bbbe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2097.169996][T20265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2097.170008][T20265] R13: 00007f93bafe6038 R14: 00007f93bafe5fa0 R15: 00007ffc235de1b8 [ 2097.170048][T20265] [ 2097.811509][T20269] netlink: 'syz.5.12814': attribute type 1 has an invalid length. [ 2097.857325][T20269] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12814'. [ 2098.513681][T20281] wg1 speed is unknown, defaulting to 1000 [ 2098.535477][T20281] lo speed is unknown, defaulting to 1000 [ 2098.561358][T20281] wlan1 speed is unknown, defaulting to 1000 [ 2098.830601][T20285] wg1 speed is unknown, defaulting to 1000 [ 2098.908881][T20285] lo speed is unknown, defaulting to 1000 [ 2099.043606][T20285] wlan1 speed is unknown, defaulting to 1000 [ 2099.052085][T20288] wg1 speed is unknown, defaulting to 1000 [ 2099.158482][T20288] lo speed is unknown, defaulting to 1000 [ 2099.534639][T20295] wg1 speed is unknown, defaulting to 1000 [ 2099.547615][T20295] lo speed is unknown, defaulting to 1000 [ 2099.594078][T20288] wlan1 speed is unknown, defaulting to 1000 [ 2100.107329][T20295] wlan1 speed is unknown, defaulting to 1000 [ 2100.523988][T20310] netlink: 'syz.5.12824': attribute type 1 has an invalid length. [ 2100.772760][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12825'. [ 2100.825141][T20313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12825'. [ 2100.873733][T20313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12825'. [ 2101.156039][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12826'. [ 2101.800602][T20333] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12831'. [ 2102.073497][T20338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12833'. [ 2102.112206][T20338] netlink: 'syz.1.12833': attribute type 4 has an invalid length. [ 2102.383827][T20329] wg1 speed is unknown, defaulting to 1000 [ 2102.447997][T20329] lo speed is unknown, defaulting to 1000 [ 2102.594594][T20329] wlan1 speed is unknown, defaulting to 1000 [ 2102.854934][T20353] wg1 speed is unknown, defaulting to 1000 [ 2103.198213][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12840'. [ 2103.339597][T20367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12840'. [ 2103.448475][T20353] lo speed is unknown, defaulting to 1000 [ 2103.481715][T20367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12840'. [ 2103.766915][T20373] FAULT_INJECTION: forcing a failure. [ 2103.766915][T20373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.861689][T20373] CPU: 0 UID: 0 PID: 20373 Comm: syz.1.12842 Not tainted syzkaller #0 PREEMPT(full) [ 2103.861722][T20373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2103.861735][T20373] Call Trace: [ 2103.861743][T20373] [ 2103.861753][T20373] dump_stack_lvl+0x189/0x250 [ 2103.861782][T20373] ? __pfx____ratelimit+0x10/0x10 [ 2103.861814][T20373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2103.861836][T20373] ? __pfx__printk+0x10/0x10 [ 2103.861874][T20373] should_fail_ex+0x414/0x560 [ 2103.861918][T20373] _copy_from_user+0x2d/0xb0 [ 2103.861946][T20373] __copy_msghdr+0x3c5/0x5b0 [ 2103.861981][T20373] ___sys_sendmsg+0x1a5/0x2a0 [ 2103.862004][T20373] ? __pfx____sys_sendmsg+0x10/0x10 [ 2103.862066][T20373] ? __fget_files+0x2a/0x420 [ 2103.862089][T20373] ? __fget_files+0x3a0/0x420 [ 2103.862126][T20373] __x64_sys_sendmsg+0x19b/0x260 [ 2103.862148][T20373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2103.862179][T20373] ? __pfx_ksys_write+0x10/0x10 [ 2103.862206][T20373] ? do_syscall_64+0xbe/0xfa0 [ 2103.862237][T20373] do_syscall_64+0xfa/0xfa0 [ 2103.862255][T20373] ? lockdep_hardirqs_on+0x9c/0x150 [ 2103.862275][T20373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2103.862294][T20373] ? clear_bhb_loop+0x60/0xb0 [ 2103.862319][T20373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2103.862337][T20373] RIP: 0033:0x7f9a86d8eec9 [ 2103.862355][T20373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2103.862373][T20373] RSP: 002b:00007f9a87cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.862396][T20373] RAX: ffffffffffffffda RBX: 00007f9a86fe5fa0 RCX: 00007f9a86d8eec9 [ 2103.862411][T20373] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2103.862426][T20373] RBP: 00007f9a87cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.862439][T20373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.862452][T20373] R13: 00007f9a86fe6038 R14: 00007f9a86fe5fa0 R15: 00007fffaf0e5a88 [ 2103.862484][T20373] [ 2104.332071][T20353] wlan1 speed is unknown, defaulting to 1000 [ 2104.671254][T20387] netlink: 'syz.1.12846': attribute type 1 has an invalid length. [ 2104.774736][T20387] bond22: entered promiscuous mode [ 2104.780420][T20387] 8021q: adding VLAN 0 to HW filter on device bond22 [ 2104.859851][T20392] bond22: (slave bridge35): making interface the new active one [ 2104.866748][T20387] Cannot find add_set index 1 as target [ 2104.870006][T20392] bridge35: entered promiscuous mode [ 2104.885101][T20392] bond22: (slave bridge35): Enslaving as an active interface with an up link [ 2104.894992][T20393] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12847'. [ 2106.081707][T20412] netlink: 'syz.5.12852': attribute type 1 has an invalid length. [ 2106.101362][T20412] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12852'. [ 2106.351246][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12856'. [ 2106.533447][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12854'. [ 2106.565876][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12859'. [ 2106.581161][T20431] netlink: 'syz.2.12859': attribute type 10 has an invalid length. [ 2106.593560][T19287] Bluetooth: hci5: command 0x0405 tx timeout [ 2106.661581][T20425] wg1 speed is unknown, defaulting to 1000 [ 2106.679637][T20425] lo speed is unknown, defaulting to 1000 [ 2106.698612][T20425] wlan1 speed is unknown, defaulting to 1000 [ 2106.716333][T20437] FAULT_INJECTION: forcing a failure. [ 2106.716333][T20437] name failslab, interval 1, probability 0, space 0, times 0 [ 2106.752592][T20437] CPU: 1 UID: 0 PID: 20437 Comm: syz.1.12860 Not tainted syzkaller #0 PREEMPT(full) [ 2106.752622][T20437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2106.752635][T20437] Call Trace: [ 2106.752644][T20437] [ 2106.752654][T20437] dump_stack_lvl+0x189/0x250 [ 2106.752682][T20437] ? __pfx____ratelimit+0x10/0x10 [ 2106.752714][T20437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2106.752736][T20437] ? __pfx__printk+0x10/0x10 [ 2106.752777][T20437] should_fail_ex+0x414/0x560 [ 2106.752817][T20437] should_failslab+0xa8/0x100 [ 2106.752846][T20437] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2106.752868][T20437] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2106.752886][T20437] ? sctp_add_bind_addr+0x8c/0x370 [ 2106.752915][T20437] sctp_add_bind_addr+0x8c/0x370 [ 2106.752941][T20437] sctp_copy_local_addr_list+0x30b/0x4e0 [ 2106.752967][T20437] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 2106.752988][T20437] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2106.753015][T20437] ? sctp_v4_is_any+0x35/0x60 [ 2106.753035][T20437] ? sctp_copy_one_addr+0x93/0x360 [ 2106.753061][T20437] sctp_bind_addr_copy+0xb3/0x3c0 [ 2106.753083][T20437] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2106.753116][T20437] sctp_connect_new_asoc+0x2e0/0x690 [ 2106.753155][T20437] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2106.753178][T20437] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2106.753213][T20437] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2106.753240][T20437] ? security_sctp_bind_connect+0x7e/0x2e0 [ 2106.753273][T20437] sctp_sendmsg+0x155c/0x2810 [ 2106.753312][T20437] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2106.753341][T20437] ? aa_sk_perm+0x81e/0x950 [ 2106.753361][T20437] ? __lock_acquire+0xab9/0xd20 [ 2106.753391][T20437] ? __pfx_aa_sk_perm+0x10/0x10 [ 2106.753417][T20437] ? sock_rps_record_flow+0x19/0x410 [ 2106.753448][T20437] ? inet_sendmsg+0x2f4/0x370 [ 2106.753482][T20437] __sock_sendmsg+0x19c/0x270 [ 2106.753511][T20437] ____sys_sendmsg+0x52d/0x830 [ 2106.753541][T20437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2106.753584][T20437] ? import_iovec+0x74/0xa0 [ 2106.753615][T20437] ___sys_sendmsg+0x21f/0x2a0 [ 2106.753638][T20437] ? __pfx____sys_sendmsg+0x10/0x10 [ 2106.753704][T20437] ? __fget_files+0x2a/0x420 [ 2106.753727][T20437] ? __fget_files+0x3a0/0x420 [ 2106.753765][T20437] __sys_sendmmsg+0x227/0x430 [ 2106.753794][T20437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2106.753827][T20437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2106.753873][T20437] ? ksys_write+0x22a/0x250 [ 2106.753899][T20437] ? __pfx_ksys_write+0x10/0x10 [ 2106.753929][T20437] __x64_sys_sendmmsg+0xa0/0xc0 [ 2106.753953][T20437] do_syscall_64+0xfa/0xfa0 [ 2106.753972][T20437] ? lockdep_hardirqs_on+0x9c/0x150 [ 2106.753994][T20437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.754015][T20437] ? clear_bhb_loop+0x60/0xb0 [ 2106.754041][T20437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2106.754061][T20437] RIP: 0033:0x7f9a86d8eec9 [ 2106.754081][T20437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2106.754098][T20437] RSP: 002b:00007f9a87cb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2106.754122][T20437] RAX: ffffffffffffffda RBX: 00007f9a86fe5fa0 RCX: 00007f9a86d8eec9 [ 2106.754146][T20437] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000006 [ 2106.754161][T20437] RBP: 00007f9a87cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2106.754175][T20437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2106.754188][T20437] R13: 00007f9a86fe6038 R14: 00007f9a86fe5fa0 R15: 00007fffaf0e5a88 [ 2106.754229][T20437] [ 2107.177035][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12861'. [ 2108.539356][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12873'. [ 2108.801196][T20485] wg1 speed is unknown, defaulting to 1000 [ 2108.859372][T20485] lo speed is unknown, defaulting to 1000 [ 2108.877061][T20485] wlan1 speed is unknown, defaulting to 1000 [ 2109.348021][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12882'. [ 2109.374362][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12881'. [ 2109.424877][T20511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12881'. [ 2109.438165][T20508] wg1 speed is unknown, defaulting to 1000 [ 2109.482279][T20511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12881'. [ 2109.503272][T20508] lo speed is unknown, defaulting to 1000 [ 2110.135176][T20508] wlan1 speed is unknown, defaulting to 1000 [ 2110.575534][T20533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12886'. [ 2110.585074][ T30] audit: type=1804 audit(1760686607.565:13): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12886" name="/newroot/2539/cgroup.controllers" dev="tmpfs" ino=12990 res=1 errno=0 [ 2110.674444][ T30] audit: type=1800 audit(1760686607.565:14): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12886" name="cgroup.controllers" dev="tmpfs" ino=12990 res=0 errno=0 [ 2110.842056][T19287] Bluetooth: hci5: command 0x0405 tx timeout [ 2111.269736][T20543] netlink: 'syz.1.12890': attribute type 2 has an invalid length. [ 2111.294227][T20543] netlink: 'syz.1.12890': attribute type 2 has an invalid length. [ 2111.839548][T20553] netlink: 'syz.2.12893': attribute type 1 has an invalid length. [ 2111.863053][T20553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12893'. [ 2111.910973][T20555] wg1 speed is unknown, defaulting to 1000 [ 2111.930576][T20555] lo speed is unknown, defaulting to 1000 [ 2111.959466][T20555] wlan1 speed is unknown, defaulting to 1000 [ 2112.386223][T20567] wg1 speed is unknown, defaulting to 1000 [ 2112.395087][T20567] lo speed is unknown, defaulting to 1000 [ 2112.709224][T20567] wlan1 speed is unknown, defaulting to 1000 [ 2112.767439][T20574] xt_hashlimit: overflow, try lower: 6/0 [ 2113.092680][T20579] wg1 speed is unknown, defaulting to 1000 [ 2113.126126][T20579] lo speed is unknown, defaulting to 1000 [ 2113.322566][T20579] wlan1 speed is unknown, defaulting to 1000 [ 2113.366910][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12902'. [ 2114.371206][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12904'. [ 2114.797613][T20601] netlink: 'syz.3.12907': attribute type 7 has an invalid length. [ 2114.863421][T20601] netlink: 'syz.3.12907': attribute type 8 has an invalid length. [ 2114.871721][T20601] netlink: 'syz.3.12907': attribute type 13 has an invalid length. [ 2115.101745][T20599] wg1 speed is unknown, defaulting to 1000 [ 2115.171016][T20599] lo speed is unknown, defaulting to 1000 [ 2115.257113][T20607] wg1 speed is unknown, defaulting to 1000 [ 2115.265506][T20599] wlan1 speed is unknown, defaulting to 1000 [ 2115.299896][T20607] lo speed is unknown, defaulting to 1000 [ 2115.471813][T20612] wg1 speed is unknown, defaulting to 1000 [ 2115.597259][T20612] lo speed is unknown, defaulting to 1000 [ 2115.914183][T20620] wg1 speed is unknown, defaulting to 1000 [ 2115.945060][T20620] lo speed is unknown, defaulting to 1000 [ 2116.131260][T20607] wlan1 speed is unknown, defaulting to 1000 [ 2116.497576][T20612] wlan1 speed is unknown, defaulting to 1000 [ 2116.950881][T20620] wlan1 speed is unknown, defaulting to 1000 [ 2117.213017][T19287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2117.223520][T19287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2117.233070][T19287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2117.242916][T19287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2117.250812][T19287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2117.600896][T20632] wg1 speed is unknown, defaulting to 1000 [ 2117.771178][T20632] lo speed is unknown, defaulting to 1000 [ 2117.929163][T20632] wlan1 speed is unknown, defaulting to 1000 [ 2118.105770][ T3528] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2118.114128][ T3528] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2118.170395][ T8027] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2118.251613][ T8027] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 2118.310057][T20635] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2118.499788][T20640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12918'. [ 2118.601198][T20644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12919'. [ 2118.618925][T20637] can: request_module (can-proto-0) failed. [ 2118.898569][ T13] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2118.910388][ T13] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2118.919519][ T13] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 26:3d:37:da:26:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2118.955833][ T13] bond13 (unregistering): (slave ip6gretap2): Releasing active interface [ 2118.964319][ T13] bond13 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - b2:8f:20:82:0b:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2119.183231][ T13] bond4 (unregistering): (slave gretap1): Releasing active interface [ 2119.207940][ T13] bond11 (unregistering): (slave gretap2): Releasing active interface [ 2119.233957][ T13] bond12 (unregistering): (slave gretap3): Releasing active interface [ 2119.286262][ T13] dvmrp0 (unregistering): left allmulticast mode [ 2119.305353][ T13] dvmrp8 (unregistering): left allmulticast mode [ 2119.312901][ T8881] Bluetooth: hci2: command tx timeout [ 2119.329445][ T13] bond10 (unregistering): (slave geneve7): Releasing active interface [ 2119.398326][ T13] bond3 (unregistering): (slave geneve2): Releasing active interface [ 2119.534430][ T13] bond2 (unregistering): (slave bridge3): Removing an active aggregator [ 2119.543462][ T13] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 2121.402425][ T8881] Bluetooth: hci2: command tx timeout [ 2121.897639][ T13] bond1 (unregistering): Released all slaves [ 2122.007799][ T13] bond2 (unregistering): Released all slaves [ 2122.111765][ T13] bond3 (unregistering): Released all slaves [ 2122.123698][ T13] bond4 (unregistering): Released all slaves [ 2122.233180][ T13] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 2122.242805][ T13] bond5 (unregistering): (slave wireguard1): Releasing backup interface [ 2122.252279][ T13] bond5 (unregistering): Released all slaves [ 2122.404229][ T13] bond0 (unregistering): (slave bond18): Releasing backup interface [ 2122.416223][ T13] bond18 (unregistering): left promiscuous mode [ 2122.423128][ T13] bond0 (unregistering): Released all slaves [ 2122.543787][ T13] bond6 (unregistering): (slave veth3): Releasing backup interface [ 2122.553142][ T13] bond6 (unregistering): Released all slaves [ 2122.666146][ T13] bond7 (unregistering): Released all slaves [ 2122.775055][ T13] bond8 (unregistering): Released all slaves [ 2122.884109][ T13] bond9 (unregistering): (slave veth11): Releasing active interface [ 2122.893051][ T13] bond9 (unregistering): Released all slaves [ 2123.003245][ T13] bond10 (unregistering): Released all slaves [ 2123.016489][ T13] bond11 (unregistering): Released all slaves [ 2123.028380][ T13] bond12 (unregistering): Released all slaves [ 2123.139613][ T13] bond13 (unregistering): (slave veth19): Releasing active interface [ 2123.148789][ T13] bond13 (unregistering): Released all slaves [ 2123.256844][ T13] bond14 (unregistering): Released all slaves [ 2123.361353][ T13] bond15 (unregistering): Released all slaves [ 2123.469136][ T13] bond16 (unregistering): Released all slaves [ 2123.472382][ T8881] Bluetooth: hci2: command tx timeout [ 2123.485893][ T13] bond17 (unregistering): Released all slaves [ 2123.593672][ T13] bond18 (unregistering): Released all slaves [ 2123.605680][ T13] bond19 (unregistering): Released all slaves [ 2123.625749][ T13] bond20 (unregistering): Released all slaves [ 2123.741033][ T13] bond21 (unregistering): (slave bond22): Releasing backup interface [ 2123.750845][ T13] bond21 (unregistering): Released all slaves [ 2123.854937][ T13] bond22 (unregistering): Released all slaves [ 2123.872547][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12919'. [ 2123.884316][T20644] bond0: ARP target 170.170.170.170 is already present [ 2123.891196][T20644] bond0: option arp_ip_target: invalid value (2863311530) [ 2124.357630][T20659] FAULT_INJECTION: forcing a failure. [ 2124.357630][T20659] name failslab, interval 1, probability 0, space 0, times 0 [ 2124.384464][T20659] CPU: 0 UID: 0 PID: 20659 Comm: syz.2.12923 Not tainted syzkaller #0 PREEMPT(full) [ 2124.384497][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2124.384509][T20659] Call Trace: [ 2124.384519][T20659] [ 2124.384529][T20659] dump_stack_lvl+0x189/0x250 [ 2124.384557][T20659] ? __pfx____ratelimit+0x10/0x10 [ 2124.384590][T20659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2124.384612][T20659] ? __pfx__printk+0x10/0x10 [ 2124.384641][T20659] ? __pfx___might_resched+0x10/0x10 [ 2124.384669][T20659] ? fs_reclaim_acquire+0x7d/0x100 [ 2124.384698][T20659] should_fail_ex+0x414/0x560 [ 2124.384733][T20659] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2124.384757][T20659] should_failslab+0xa8/0x100 [ 2124.384797][T20659] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2124.384817][T20659] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 2124.384839][T20659] ? alloc_inode+0x6a/0x1b0 [ 2124.384861][T20659] ? __pfx_simple_start_creating+0x10/0x10 [ 2124.384891][T20659] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2124.384912][T20659] alloc_inode+0x6a/0x1b0 [ 2124.384937][T20659] new_inode+0x22/0x170 [ 2124.384968][T20659] __debugfs_create_file+0x14d/0x4f0 [ 2124.384998][T20659] debugfs_create_file_full+0x3f/0x60 [ 2124.385025][T20659] ref_tracker_dir_debugfs+0x14e/0x270 [ 2124.385047][T20659] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2124.385104][T20659] ? trace_kmalloc+0x1f/0xd0 [ 2124.385122][T20659] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2124.385154][T20659] ? __raw_spin_lock_init+0x45/0x100 [ 2124.385180][T20659] alloc_netdev_mqs+0x272/0x11b0 [ 2124.385202][T20659] ? __pfx_macsec_setup+0x10/0x10 [ 2124.385235][T20659] rtnl_create_link+0x31f/0xd10 [ 2124.385269][T20659] rtnl_newlink_create+0x25c/0xb00 [ 2124.385306][T20659] ? __lock_acquire+0xab9/0xd20 [ 2124.385340][T20659] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2124.385376][T20659] ? __pfx___mutex_lock+0x10/0x10 [ 2124.385413][T20659] ? ns_capable+0x8a/0xf0 [ 2124.385448][T20659] rtnl_newlink+0x16e4/0x1c80 [ 2124.385478][T20659] ? ____sys_sendmsg+0x505/0x830 [ 2124.385515][T20659] ? __pfx_rtnl_newlink+0x10/0x10 [ 2124.385573][T20659] ? kasan_quarantine_put+0xdd/0x220 [ 2124.385595][T20659] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.385624][T20659] ? nlmon_xmit+0xb0/0x100 [ 2124.385648][T20659] ? kmem_cache_free+0x19b/0x690 [ 2124.385680][T20659] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2124.385709][T20659] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.385732][T20659] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2124.385768][T20659] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2124.385802][T20659] ? __dev_queue_xmit+0x284/0x3740 [ 2124.385827][T20659] ? __dev_queue_xmit+0x284/0x3740 [ 2124.385849][T20659] ? __dev_queue_xmit+0x1bfb/0x3740 [ 2124.385880][T20659] ? __lock_acquire+0xab9/0xd20 [ 2124.385938][T20659] ? __pfx_rtnl_newlink+0x10/0x10 [ 2124.385964][T20659] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2124.385998][T20659] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2124.386024][T20659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2124.386049][T20659] ? ref_tracker_free+0x63a/0x7d0 [ 2124.386070][T20659] ? __asan_memcpy+0x40/0x70 [ 2124.386090][T20659] ? __pfx_ref_tracker_free+0x10/0x10 [ 2124.386126][T20659] netlink_rcv_skb+0x208/0x470 [ 2124.386157][T20659] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2124.386187][T20659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2124.386233][T20659] ? netlink_deliver_tap+0x2e/0x1b0 [ 2124.386272][T20659] netlink_unicast+0x82f/0x9e0 [ 2124.386310][T20659] ? __pfx_netlink_unicast+0x10/0x10 [ 2124.386338][T20659] ? netlink_sendmsg+0x642/0xb30 [ 2124.386364][T20659] ? skb_put+0x11b/0x210 [ 2124.386399][T20659] netlink_sendmsg+0x805/0xb30 [ 2124.386442][T20659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2124.386477][T20659] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2124.386504][T20659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2124.386530][T20659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2124.386561][T20659] __sock_sendmsg+0x21c/0x270 [ 2124.386590][T20659] ____sys_sendmsg+0x505/0x830 [ 2124.386620][T20659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2124.386664][T20659] ? import_iovec+0x74/0xa0 [ 2124.386697][T20659] ___sys_sendmsg+0x21f/0x2a0 [ 2124.386723][T20659] ? __pfx____sys_sendmsg+0x10/0x10 [ 2124.386802][T20659] ? __fget_files+0x2a/0x420 [ 2124.386826][T20659] ? __fget_files+0x3a0/0x420 [ 2124.386865][T20659] __x64_sys_sendmsg+0x19b/0x260 [ 2124.386890][T20659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2124.386923][T20659] ? __pfx_ksys_write+0x10/0x10 [ 2124.386952][T20659] ? do_syscall_64+0xbe/0xfa0 [ 2124.386978][T20659] do_syscall_64+0xfa/0xfa0 [ 2124.386994][T20659] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.387010][T20659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.387028][T20659] ? clear_bhb_loop+0x60/0xb0 [ 2124.387049][T20659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2124.387066][T20659] RIP: 0033:0x7f56d8b8eec9 [ 2124.387082][T20659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2124.387099][T20659] RSP: 002b:00007f56d99ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2124.387119][T20659] RAX: ffffffffffffffda RBX: 00007f56d8de5fa0 RCX: 00007f56d8b8eec9 [ 2124.387132][T20659] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000005 [ 2124.387144][T20659] RBP: 00007f56d99ba090 R08: 0000000000000000 R09: 0000000000000000 [ 2124.387155][T20659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2124.387165][T20659] R13: 00007f56d8de6038 R14: 00007f56d8de5fa0 R15: 00007ffd15e0a738 [ 2124.387199][T20659] [ 2124.387213][T20659] debugfs: out of free dentries, can not create file 'netdev@ffff888056816610' [ 2124.958240][T20659] macsec0: entered promiscuous mode [ 2124.997797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2124.997968][ T13] : left promiscuous mode [ 2125.118430][T20632] chnl_net:caif_netlink_parms(): no params data found [ 2125.160907][ T13] 8ÿÖÿÿ: left promiscuous mode [ 2125.217348][T20632] bridge0: port 1(bridge_slave_0) entered blocking state [ 2125.224827][T20632] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.232434][T20632] bridge_slave_0: entered allmulticast mode [ 2125.240809][T20632] bridge_slave_0: entered promiscuous mode [ 2125.250481][T20632] bridge0: port 2(bridge_slave_1) entered blocking state [ 2125.259466][T20632] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.267317][T20632] bridge_slave_1: entered allmulticast mode [ 2125.275552][T20632] bridge_slave_1: entered promiscuous mode [ 2125.306995][ T13] tipc: Disabling bearer [ 2125.314650][ T13] tipc: Disabling bearer [ 2125.325652][ T13] tipc: Left network mode [ 2125.355898][ T13] IPVS: stopping master sync thread 22547 ... [ 2125.358572][T20632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.366107][ T13] IPVS: stopping backup sync thread 8628 ... [ 2125.382929][T20632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.437159][T20632] team0: Port device team_slave_0 added [ 2125.445123][T20632] team0: Port device team_slave_1 added [ 2125.507450][T20632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2125.514662][T20632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.541255][T20632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2125.552887][ T8881] Bluetooth: hci2: command tx timeout [ 2125.555552][T20632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2125.566784][T20632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.593269][T20632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2125.662899][T20632] hsr_slave_0: entered promiscuous mode [ 2125.669604][T20632] hsr_slave_1: entered promiscuous mode [ 2125.676553][T20632] debugfs: 'hsr0' already exists in 'hsr' [ 2125.682627][T20632] Cannot create hsr debugfs directory [ 2125.830370][T20632] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2125.890268][T20632] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2125.948421][T20632] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2126.020486][T20632] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2126.247321][T20632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2126.282972][T20632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2126.294009][T20632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2126.305327][T20632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2126.448190][ T13] ------------[ cut here ]------------ [ 2126.454337][ T13] WARNING: CPU: 1 PID: 13 at net/wireless/core.c:204 cfg80211_switch_netns+0x58a/0x5b0 [ 2126.464304][ T13] Modules linked in: [ 2126.468517][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 2126.478117][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2126.488401][ T13] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 2126.493544][ T13] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 2126.499633][ T13] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 d2 23 8b f7 eb 82 e8 3b 74 25 f7 e9 63 fe ff ff e8 31 74 25 f7 e9 59 fe ff ff e8 27 74 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 2126.519768][ T13] RSP: 0018:ffffc90000127840 EFLAGS: 00010293 [ 2126.526346][ T13] RAX: ffffffff8a9acfc9 RBX: ffff88806eda8da0 RCX: ffff88801c2c0000 [ 2126.535128][ T13] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 2126.543697][ T13] RBP: 00000000ffffffef R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 2126.552020][ T13] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: ffff88806eda8720 [ 2126.560018][ T13] R13: ffff88806d50ca80 R14: dffffc0000000000 R15: ffff88806eda8910 [ 2126.568901][ T13] FS: 0000000000000000(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 2126.578344][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2126.585448][ T13] CR2: 00007fa23cd135c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2126.594044][ T13] Call Trace: [ 2126.597353][ T13] [ 2126.600319][ T13] cfg80211_pernet_exit+0xa2/0x140 [ 2126.606012][ T13] ops_undo_list+0x49a/0x990 [ 2126.610654][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 2126.616398][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 2126.621632][ T13] cleanup_net+0x4d8/0x820 [ 2126.626583][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 2126.631560][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 2126.637294][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 2126.643559][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 2126.649656][ T13] process_scheduled_works+0xae1/0x17b0 [ 2126.656014][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 2126.662542][ T13] worker_thread+0x8a0/0xda0 [ 2126.667209][ T13] kthread+0x711/0x8a0 [ 2126.671313][ T13] ? __pfx_worker_thread+0x10/0x10 [ 2126.677070][ T13] ? __pfx_kthread+0x10/0x10 [ 2126.681698][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 2126.687564][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 2126.693492][ T13] ? __pfx_kthread+0x10/0x10 [ 2126.698122][ T13] ret_from_fork+0x4bc/0x870 [ 2126.703235][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 2126.708397][ T13] ? __switch_to_asm+0x39/0x70 [ 2126.713842][ T13] ? __switch_to_asm+0x33/0x70 [ 2126.718643][ T13] ? __pfx_kthread+0x10/0x10 [ 2126.723484][ T13] ret_from_fork_asm+0x1a/0x30 [ 2126.728309][ T13] [ 2126.731352][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2126.738656][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 2126.747967][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2126.758047][ T13] Workqueue: netns cleanup_net [ 2126.762834][ T13] Call Trace: [ 2126.766120][ T13] [ 2126.769146][ T13] dump_stack_lvl+0x99/0x250 [ 2126.773741][ T13] ? __asan_memcpy+0x40/0x70 [ 2126.778336][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2126.783541][ T13] ? __pfx__printk+0x10/0x10 [ 2126.788152][ T13] vpanic+0x237/0x6d0 [ 2126.792148][ T13] ? __pfx_vpanic+0x10/0x10 [ 2126.796672][ T13] panic+0xb9/0xc0 [ 2126.800417][ T13] ? __pfx_panic+0x10/0x10 [ 2126.804878][ T13] __warn+0x31b/0x4b0 [ 2126.808888][ T13] ? cfg80211_switch_netns+0x58a/0x5b0 [ 2126.814364][ T13] ? cfg80211_switch_netns+0x58a/0x5b0 [ 2126.819823][ T13] report_bug+0x2be/0x4f0 [ 2126.824156][ T13] ? cfg80211_switch_netns+0x58a/0x5b0 [ 2126.829621][ T13] ? cfg80211_switch_netns+0x58a/0x5b0 [ 2126.835081][ T13] ? cfg80211_switch_netns+0x58c/0x5b0 [ 2126.840544][ T13] handle_bug+0x84/0x160 [ 2126.844798][ T13] exc_invalid_op+0x1a/0x50 [ 2126.849304][ T13] asm_exc_invalid_op+0x1a/0x20 [ 2126.854161][ T13] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 2126.860236][ T13] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 d2 23 8b f7 eb 82 e8 3b 74 25 f7 e9 63 fe ff ff e8 31 74 25 f7 e9 59 fe ff ff e8 27 74 25 f7 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 2126.879845][ T13] RSP: 0018:ffffc90000127840 EFLAGS: 00010293 [ 2126.885921][ T13] RAX: ffffffff8a9acfc9 RBX: ffff88806eda8da0 RCX: ffff88801c2c0000 [ 2126.893901][ T13] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 2126.901874][ T13] RBP: 00000000ffffffef R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 2126.909856][ T13] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: ffff88806eda8720 [ 2126.917830][ T13] R13: ffff88806d50ca80 R14: dffffc0000000000 R15: ffff88806eda8910 [ 2126.925823][ T13] ? cfg80211_switch_netns+0x589/0x5b0 [ 2126.931305][ T13] cfg80211_pernet_exit+0xa2/0x140 [ 2126.936427][ T13] ops_undo_list+0x49a/0x990 [ 2126.941037][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 2126.946161][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 2126.951373][ T13] cleanup_net+0x4d8/0x820 [ 2126.955801][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 2126.960754][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 2126.965965][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 2126.971695][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 2126.977432][ T13] process_scheduled_works+0xae1/0x17b0 [ 2126.983034][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 2126.989060][ T13] worker_thread+0x8a0/0xda0 [ 2126.993705][ T13] kthread+0x711/0x8a0 [ 2126.997803][ T13] ? __pfx_worker_thread+0x10/0x10 [ 2127.002938][ T13] ? __pfx_kthread+0x10/0x10 [ 2127.007552][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 2127.012787][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 2127.018002][ T13] ? __pfx_kthread+0x10/0x10 [ 2127.022614][ T13] ret_from_fork+0x4bc/0x870 [ 2127.027227][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 2127.032368][ T13] ? __switch_to_asm+0x39/0x70 [ 2127.037137][ T13] ? __switch_to_asm+0x33/0x70 [ 2127.041921][ T13] ? __pfx_kthread+0x10/0x10 [ 2127.046523][ T13] ret_from_fork_asm+0x1a/0x30 [ 2127.051314][ T13] [ 2127.054640][ T13] Kernel Offset: disabled [ 2127.058954][ T13] Rebooting in 86400 seconds..