last executing test programs: 4m48.891745615s ago: executing program 1 (id=13): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x80001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a62e707f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23e2c6f868bca8b557e", 0xc4}, {&(0x7f00000003c0)="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", 0x1dc}, {&(0x7f0000000680)="e2e275e6df03f874026f99cb71504ba6a2d384a24bc787a5ec33677d1035199bada6710b39408937eaba5eb41341922ec892c294b642ccfeb15285298b4e3cfd4f89aa3b5d5dc3895369762b67a83e5baa5a7415979873d89ca48506d4eb53318e12a74d5e2376cf0e0592cd2e9d8530d86827bc7bb7c946c3f56fed143524f6c6f0bea47f7570df98c8d5387e1c17b3d5de4b0b643104ee77e352539908c48e1e69f3930c4ff647569cab9f143a83ddd01a9b9e253db2de43a2ede43b492e97913d8c8eeabccc2ba594368b632eeb1d97db1190627d995d4119616350dcdea3801eaeb508f23cc69d0be0a025aa48bc8d0f35e140e058a06caf480587860276e63b69eecdb5c95324d73e17865d8dccec9a8de62602a3dfd3e2f4fb17f6cc373de94d42d7c50c39ace02ff0736206e1dc44d33e6666f3a44e5e57581be22f131953a5ad3003e42f8637a7ac0324d47eddef3e4956d0352f5c8e95e6b1f373c9b0287fbe0c97bb55c97bd23e0b80f98a68d894962c78fefbe8e493a62036fe41976fc8162af176686f75829c4ff6f9b9f6656aa422a69fe0e4074536053e0ccd53ac8756c70aa1596d5f89e1520ef9c5cdc22281e3c2acd27658784f179d3779a52848d7d32c6491ce536e40c2c46d8d54835f5af9775d974642828cd009f944bbe93f2606d05918cbe44ba6df5815a95a1d7a7b7a2b97af60022d6b21259befef699936528355a888c4fcd2bd138a8b956b873e790f48cbee90db3517292068cdcb5b49c488a3e0b1dfc1e72c6708396fe33a006f1138850caa594448dca7975b6cab77670c897110a283ebf159be3580a97ba2f371346390bd30fda426aeb76052d51d4d4e45379ef5590637fc9a169c34cbcb85943ca88931f8e274241ba631dae3ced6b6afe9b64799a6e8b265c7d359037f59f7ef28baf49e0dea8bf44843a1a1c702e530f2495b32adde439ab627c7c11eee3ae33dfdf3665dcca53f88d7740f81a55992bbd70926a7ed9cce10e2cce4c38f9c7328873e418276e6bb337e1327decf6956f6601b7b01a8e8bcce2206f5a3580abed1fb1d38e4afa3e734134db187ca7173ed4c0ba142a6a4036c098b07bf740562984a76a8381cebaa1bc821fa71fa453bee5f241b3f640346b743df5bbec75ee6e5f9134211c40a0b89571e9843f3abd7d590ec4b7fee919835a7904eec58c0acf52158a80a71f3cfa570ea974857bdc5593aced5b75a31f29b51ee38fc1ff12e191992f171fd0334d7ffea77a29191cee888b9226c457b06f8eb04184a34ca5afe470da0b48917c67e1a790734", 0x3a4}], 0x4}, 0x0) 4m48.729164548s ago: executing program 0 (id=15): ioctl(0xffffffffffffffff, 0x8b1b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @mcast2, 0x1}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120011000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 4m48.411783215s ago: executing program 1 (id=18): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x328, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x314, 0x1, [@m_xt={0x154, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0xbc, 0x6, "8c3c93dcc535294d9b5b9d36771c1bffc8d943111f9699efba0420c6f61fd6b501d36e965d83a8f183b2c7397a7761518fa8548568129fa0338051b58cd21e8460a43dce6f37f55e3c42e0330801223f0400beb907f187a6bceb987e88d315e44b73f750afaf368e0b146a8195237b308892c6f17615a4c349abbaacaf3b05ed83380aa76d618116d7d7d33e93275de478aebb92e4e87519021955494bb7241535d97c58b6a42315524cb9bdcd4ba54641994a180865cc35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x5b, 0x6, "b21c50e1030b17ea54544df58a6baf7d0fbaa5481080be097d6968ab0cc0abad396f30973b0c8d0220a2db4934eb13d938d3453bc9333bfccc6590bc80cafe60d79c2896ce44cd8c4ecea3d747551ffcc36e75a41326c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_bpf={0x60, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x13, 0x6, "12df59202984a7d58c1b88abb79747"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x7c, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0x1, 0x8}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket(0x400000000010, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_vlan\x00', 0x10) 4m48.411128317s ago: executing program 3 (id=19): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002c8008"], 0x30}}, 0x44050) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) 4m48.319633144s ago: executing program 4 (id=5): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a810c0b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 4m48.253787168s ago: executing program 0 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000000206010800000000020000000000000005000100070000000900020073797a3000000000240007800800134000000001050015000900000008001340000004ff0800064000002b0c13000300686173683a6e65742c69666163650000050005000a00000005000400"], 0x70}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x64, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d0000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000c0900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b400000000008000b400000000224000480200001800e000100636f6e6e6c696d69740000000c0002800800014004503000140000001100010000000000000000000000000a"], 0xbc}}, 0x4800) r5 = socket(0x1e, 0x1, 0x0) listen(r5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xc, 0x9, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x1, 0x8001, 0x3}}) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x3, r6, 0x18}, 0x10) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 4m48.250320129s ago: executing program 3 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000028}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x44035) 4m48.141176479s ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000c00600000001204730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 4m48.140569781s ago: executing program 1 (id=23): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) (fail_nth: 22) 4m47.945102827s ago: executing program 3 (id=25): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3", 0x19}], 0x1, 0x0, 0x0, 0xc9e}, 0xa0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 4m47.855363759s ago: executing program 4 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x52) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000200)={'ip6gre0\x00', 0x1, 0xe}) listen(r1, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="1c00190008010000fc01080211000500"/28], 0x38}}, 0x800) 4m47.63994304s ago: executing program 1 (id=27): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cdbf188966208f5d74fa0168cff238000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf252e0000000c0099000a000000460000000a0006003ceab613d3fc00000a004f00ccc3d5f39fbf0000"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRES8=r2], 0x3c}}, 0x20000011) 4m47.591862354s ago: executing program 3 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m47.499766404s ago: executing program 0 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r0, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffc"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, 0x0, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4002) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 4m47.499528925s ago: executing program 4 (id=31): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002c8008"], 0x30}}, 0x44050) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) 4m47.408834819s ago: executing program 1 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0xc000) (fail_nth: 1) 4m47.333215538s ago: executing program 3 (id=33): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x328, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x314, 0x1, [@m_xt={0x154, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0xbc, 0x6, "8c3c93dcc535294d9b5b9d36771c1bffc8d943111f9699efba0420c6f61fd6b501d36e965d83a8f183b2c7397a7761518fa8548568129fa0338051b58cd21e8460a43dce6f37f55e3c42e0330801223f0400beb907f187a6bceb987e88d315e44b73f750afaf368e0b146a8195237b308892c6f17615a4c349abbaacaf3b05ed83380aa76d618116d7d7d33e93275de478aebb92e4e87519021955494bb7241535d97c58b6a42315524cb9bdcd4ba54641994a180865cc35"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x5b, 0x6, "b21c50e1030b17ea54544df58a6baf7d0fbaa5481080be097d6968ab0cc0abad396f30973b0c8d0220a2db4934eb13d938d3453bc9333bfccc6590bc80cafe60d79c2896ce44cd8c4ecea3d747551ffcc36e75a41326c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_bpf={0x60, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x13, 0x6, "12df59202984a7d58c1b88abb79747"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)={0x7c, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @broadcast, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0xa, 0x1, 0x8}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket(0x400000000010, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_vlan\x00', 0x10) 4m47.215902364s ago: executing program 4 (id=34): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0xd, 0x8982, 0x0, 0xa, 0x5, 0xa, 0x7f}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001fffc0000000000400000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d6163736563300000"], 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 4m47.215126248s ago: executing program 0 (id=35): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x401}, 0x14}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) 4m46.895009441s ago: executing program 3 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e22}, {@in=@dev, 0x10, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x3502, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x154}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e22}, {@in=@dev, 0x10, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x3502, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x154}}, 0x0) (async) 4m46.879467353s ago: executing program 4 (id=37): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) close(r0) 4m46.353924696s ago: executing program 32 (id=37): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) close(r0) 4m46.302340184s ago: executing program 0 (id=39): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x241}}], 0x2, 0x400c0) 4m46.207938756s ago: executing program 33 (id=39): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x241}}], 0x2, 0x400c0) 4m46.199269007s ago: executing program 1 (id=40): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback={0xe0ff}}, 0x1c) 4m46.198703193s ago: executing program 34 (id=40): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback={0xe0ff}}, 0x1c) 4m46.189279936s ago: executing program 35 (id=36): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e22}, {@in=@dev, 0x10, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x3502, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x154}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4e22}, {@in=@dev, 0x10, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x3502, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x154}}, 0x0) (async) 3.452127899s ago: executing program 5 (id=2939): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) (async) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x6) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44002c1310001fff000000000000000000000000610f59cac18eddce98eb49fa07a23e010831fb68b70898cb", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100030000000800150000000000"], 0x44}}, 0x0) 2.95596502s ago: executing program 5 (id=2946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0xd, 0x8982, 0x0, 0xa, 0x5, 0xa, 0x7f}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010000000000000040000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000140035006d6163736563300000"], 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 2.714393784s ago: executing program 5 (id=2949): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000280)) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24006004) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, 0xffffffffffffffff, 0xa773a000) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbfe80000000000000d3335654cf020f0000000000000000aa4e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e13808ca72381f41e5fff9620915b6f78670dfaf9a203808"], 0x0) 1.872106509s ago: executing program 6 (id=2960): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f774e1477e61ab1c08495488858ab8305c0fac1a8b554968cff19d67d3d0cc0aa69d044849611754dedf594349f427b30a1f7130b7586362ceb644e258461d7c69409babd9fc06713df02635727cc142695e2e52bce01444be3c4196ebb85cbd550ad9fa17d72f7f91fb70e7b3c409e97b2ef2b5dfa3594d79692d78a3f5"], 0xa) (async) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) (async) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) (async) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="2a5531074ff185024e32ea2859bd6d43e79b42f94e9f125f32e908c4569b4423ad5b149ea8bc676b442e359b7b164236ab9e9e799007d61d4dac0017bb5ab8e30bb2c581bc0918d02394cd66e7f0fe9089456f5775416dbd20a3a128aa8dba67db247105fd344b0061bb1e3cdf5b8d80344faf64424397e9d3cceb133a38eac26773eee62fa43c8b45528b0d106992c99ab8e75f8df8fdb06c54c0eb5445cde9e4432b840c5b5240d062a8120585db3e63a5d9aae27c72954eb6c9f97103d88107f0e64e5314ef466f574ae932fa499e774a9e7e991b5dfe31ff690880ab390771515b1d5077c1f6f7f902d04531e0a41355be554ca8ef8109d51709", 0xfc}, {&(0x7f0000000240)="08157c374c0b131884285587018e6a116604c01d94b7c9cb771117b378e624cd9090b36ccfbff241dc2d0e7db4f0c69621690641e6fc33be91fb230aa8988dba506a74dd272ddc2f71cbba01eba7bfee7ba7e1f304d3277e83095926e7e2034c60ecc195f35f558adc86c63bdb497a3809e7412b4b15cf41eff9ee57", 0x7c}], 0x2) write$cgroup_devices(r2, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1.755907821s ago: executing program 5 (id=2961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x100000000000000}, 0x10) 1.648067503s ago: executing program 6 (id=2963): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a000000000000020300000000000000aa2b031b87c60a33060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x6, 0xb, 0x80000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.646930055s ago: executing program 5 (id=2965): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000280012800a0001006d61637365630000180002800c0004000400000100c280000d0003000d000000"], 0x48}}, 0x0) 1.448002329s ago: executing program 6 (id=2968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100001414aa080006000100"/50], 0x38}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="243a1cdab482c250d7078459244743f9d059548dbb16c151cb86a8ae0fcaa46f1d9e461d059a7916631e63241bcac9548eddaabbf84ada90ed3fb74211bedd035e57b13c9267650f3fb9b458fff905c56282552b99b39fffe719004719c03c2808299d1707797761cb9baafd315616748a6089d8fdee369df1780af9645a0e88ecb63be43c72668a8c88b0189e044d54ba8fce8d2ee816f6dee1be8bfaf9e533b1cccbc01243637b918db92cf204c86477c65222a7f64bffab47167690dd8a53af75", 0xc2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="e8000000000000002900000036000000111900000000000004014401080000000000000000075f01de5ba30f50863e826a61dfff868947855a77829826e0dade87e50751498acb4a7bd172d13ab7fa4ba6e62a9a31edc4178d6b747de85b9fa95bfea840bfb081294cb32c59c8b22cb96458e59690803f339cf0135991a203766d3d7f66f8620502000905020d600740000000010e0c0900ffffffffffffffff0300000000000000040000000000000008000000000000000400000000000000fffffffffeffffff0400000000000000c910fc0100"/232], 0xe8}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0), 0x10000000000000b2, &(0x7f0000000780)=[@hopopts={{0x30, 0x29, 0x36, {0x62, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @padn, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0x400}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @dstopts={{0xe0, 0x29, 0x37, {0x87, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0x1, [0x5, 0x6, 0x7b0, 0x8, 0xfffffffffffffff7, 0x8, 0x3, 0x80000000, 0xffff]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x4, 0x9, [0x401, 0x5]}}, @calipso={0x7, 0x50, {0x1, 0x12, 0x94, 0x4, [0x80000001, 0x5, 0x100000001, 0x9b, 0x3, 0xfffffffffffffffc, 0xb, 0x3fd, 0x1]}}]}}}, @rthdrdstopts={{0xb0, 0x29, 0x37, {0x67, 0x12, '\x00', [@generic={0x0, 0x85, "97c28c19869a39bce3f729854c099e0787556a0f24085c363c1a03a09e843e694f94c9fe4950dcffda308f1d0b8803179d11ceb51b00770af5909cd06af3a04fcb02a753eb897de3d25b220feb94608ef88977ed809d6eaec6a02c7e1ae6c5cd15bb92590607cf3d70fa2ab1f55b9e84f76c9c3a713f382f3f2009fb56eda1a6784b43c20c"}, @pad1, @ra={0x5, 0x2, 0xd}, @pad1]}}}], 0x1e8}}], 0x2, 0xd842b17065bd16f5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) 1.44360648s ago: executing program 8 (id=2969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d29473e9b7b0627e7eb", 0x8a}, {&(0x7f00000002c0)="269e7a0e1b98b782853ff19fb64d658d9c850b93a9a55da438e14b5823cbd49eab0058b7b46d8c2e200ffeace4ff033ff36aa0d5056378c7c64326e53c68303c12713c419e30bf84012ba5fc074bb63c305620f1ef371f57f62f25782fd40f558e135c108dc2c6ffc7f415df", 0x6c}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4dc1eaf1444c9", 0x2f}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be51b420", 0xc0}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb1333cda45077f08cfb3ec7320b20f9d099c7378fa19a09ee54c6e3a80fe453a746260ec5bf8c0fd3545b2aec6ebc1087eae2e4be5e1a449d66552c09163dd4eb0790159cacf6c5a511879685100ca1fa2b65a6fd24be7cf3a0e7a095804b0b6beb8f0c58ae49a36d94f4689985be3ab4b46efb8711cd81b875e0f46f395e47e08", 0x8d}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5", 0x5e}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="ff3bc1090cb022cb1f5f739fda1c87920cf98b55c62ac8eaaff5bb9d52d146fbccacba6a99ad07a3ca5c2f663be3a44e35edb2188e903341c2b3fdb4d18e3de32ebe92681c8699a32934ab244c7b269cafe223d44c2fd88d89cf6c2a97bf4910853b6314f6b67ed07f080ddb6b956cad30", 0x71}, {&(0x7f0000000a80)="b930449b63feaa3c018431f152a43fd318ade55b7f2871c252c3d382df50db29b5272be91841e9f61be798008ab768b567cb6a0b5c22fe242c084f87ed3d17733e9551a021f2609a7b7206e887e036f490", 0x51}], 0x2}}], 0x2, 0x2010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.403150203s ago: executing program 5 (id=2970): ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'pimreg1\x00', {}, 0x7f}) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'wg0\x00', 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x200, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x55a, 0x55}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c51558c4325fd2a1ac87ffbd1a97c8f946a829c2f34677ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e4d9fef0cebb3a9b9b2a94fa95472580924de5bcc8c31e1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a1b515332f59d1749d32aaf4776d606b5166fcf09e7031e4"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a38531f38261b802c6fd17599ffad100189b11aa391097d1"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f84d325dd6a9288c122a51b178ab7fcf42b32d7c3ade17f0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b87ea54a6369fbe7a75126bfdebb385ee7414543838245b8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe489e22f1e11d7a9bf7bcf5a5d44fa659f74f34ec018068"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2996eed76642f455021267f020470e9574b47b8f2d7e76fb"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e78ceadaf67603107c02b05a9ded51c859bc3df0d782a099"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "92baff429a78bc6b342fe3855b1167dcf46c1d8828216325"}]]}, 0x200}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8, 0x700, 0x7e, 0x7cce, {{0x23, 0x4, 0x1, 0x18, 0x8c, 0x64, 0x0, 0x0, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x13, 0xb3, [@remote, @multicast1, @broadcast, @multicast2]}, @noop, @noop, @rr={0x7, 0x2b, 0x2e, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @private=0xa010100, @remote, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @noop, @rr={0x7, 0x2b, 0x76, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @local, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@ipv6_getroute={0x90, 0x1a, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x20, 0x14, 0x6, 0xfd, 0x4, 0x0, 0x0, 0x3400}, [@RTA_METRICS={0x3d, 0x8, 0x0, 0x1, "d7a842adc727d1ae8aef83ab9db5568afbd38cd23129e9d1094bd092d9498b479515518237504c673837c7dff2401fbb040a5816cc14deee26"}, @RTA_METRICS={0xd, 0x8, 0x0, 0x1, "68eae286f72641cbe3"}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0xff, 0x1, 0xf9, r4}}, @RTA_IIF={0x8, 0x3, r5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f00000006c0)=0x8, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000840)={@rand_addr=0x64010100, @remote, r5}, 0xc) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x0, 0x0, @empty}, &(0x7f00000008c0)=0x1c) getsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000900)=""/86, &(0x7f0000000980)=0x56) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r1) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r8, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000b00)={0x6, 0x8, 0x811}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000c80)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r2, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40040) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r13 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000003780)={&(0x7f0000000e00)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2, 0x4}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000e80)="3873f0ecf59e3bc352d99f7459ad2b6154a2ac10ff73eaf22165e94d11296be338704726114771f8c59864f18ed0bd5ad93310e1d55735c3b1", 0x39}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="495d85b932de5851ed47e465ed0e9a08de9c944fc9f415c4cf2269fa4c3dd1a97a2d3494d2126ccf3b866f99614738b6bf23c3e6739e32a0958e6514d0eb15b2f2001b931712037725daf803850ddcb71bbb17e2ca1881de0257377bf8edf09a9836e88b2d5ed8334064e997f95eefa18da95a13aab5a688023dcbb8e03e9ad5de00c5b8af59b07279f07ab41cc8297150979ad5fddd6392a7f746e2a5055af931e5620d31b14f4e13e5b567e4574ebac6f1e8af36a6af0c5f720a", 0xbb}, {&(0x7f0000001f80)="7728e86553b3fed906e518772853949b206feba6ee5959058ea969298d72e1ea66044ea5c31c60cd70cfc0e05d0d018acb78e731cb61d85de8", 0x39}, {&(0x7f0000001fc0)="a02ba37b932bbb645a89c968993388e52f48d6b4a84c715bf87062497fa438baa42e6bd0181f1e6822388fefaf0b729e70f952ae2a68a77bb6c2036af57092c64fdb7cf420b501d9dfb1738a0fdc7f227822218edd946ae0d6dc0501b5a71ae1bfbb6353a603cf3081e6b4ee116ae4a4be6d7139abed8d6b2b42733561ae6116d2c45ce192cdd6226b143aca113e6d57ab615b49687b55b31b3fdfac1f1c1f3879a371f7f33ab343e31086ffed8b206a19904b4bd5bf5087150694e76eecbae4b34222ff16fb9e3083a8e9dd6ea3ec583737e9d02b", 0xd5}, {&(0x7f00000020c0)="60b1434094b793a6411abff3c1ed7cf0bf48ee788733995f1590598ec469d65bd70eec8715ea4eda66d513c00ca84cdbab362093f8049acf7ef6aac465f79a047ed24e2e74f0bed9396510c4f0219d1ab8194dbf5e2548169798f43a4a7b456c1d0054d8e6eef6c4abc15674018711543b2a6521686d193db206ccc2afa98315a496790e7c78ab08b5abcd8f4a26f1ef9a08bb5d52a2efff47acc9fe5b859f64804adacab3e08d4d9f0baa43e3261bc200fd55df059c35d0b0340b959851f09a09dfb36d6ba7ccd36b7b4c71fc5b7c70473251e32344f7183cffb14eae0ef6cb25ad2807def0e258", 0xe8}, {&(0x7f00000021c0)="3be56ef5391342646d1aaf50a47bada112a1a3a5f9432d5d906670e1b811177583a5096011a10f0bf4b30da80d5b5de2e864118516c5bd25520a2f2be041ba95b387f54f386809bf3cd629cf04424b2c627ad399348ae2dcd09f5876a4ed8a2f22ec4d5cedb87cac54148d67e72dcd013133dbc88b74121fdc69c74ed689", 0x7e}, {&(0x7f0000002240)="3f982108887ecdc4a8a6ce53d2ac4c21ede8b8ddb514884ded7342b96956815fed6b0dde9f6efe1242045edb508c6076dbbb82ea60fc513a018a5d942db37ce21e7aedc19d103a8ad6257ffd46f1b9d5ab8aa1d18404674a4f9862", 0x5b}, {&(0x7f00000022c0)="282b4a992bd04b7d69c249ebca44f58d0a2905673c524c4c33078a3e26b6d3a05258517e3f78b1da9b3a72c2", 0x2c}, {&(0x7f0000002300)="574b2a2973da217b8678c51c7cc52368d88f33df77c6110e7df86fced3c88c1a6c61defffbbd7b5081bb2a11d24622b1cc55d623185568274cbd13dd2b9a44718d066b73d87d643ffdf02e29900d8347654b425e18031cdd74bf4a738cb1aedcd65a5b813935bc9ffcbd400ca733a901ecc1c31fafcc87d3638aa61003276366e20747c515f4f8167506e3aef6813528e56c59c939c36413d6a781518742c0b0131ae656886f8cb1ed9d730300dd97416150509779d63b03aebcb0604aa1f42c22eec65e63e7", 0xc6}], 0xa, &(0x7f00000024c0)=[{0xd0, 0x118, 0x6, "5cbcdedcfbe925d0b768d5158a78eed8d4ceafd066c58be63af5f37ff0c31d5450f656d65b07aa86a97a3d6e629d9faeddf0e3c0c28ca44e1a001034ad719a2e514436da1ed0657e62514c7557746d2785d011cff0c1eb64169ba6330866de5e397c6b05aea265df6f08ea8321631b04e519e37a1650549b04bf848056f0c9ecd9691291a7a36b0bde7a358830e877ece60312474a3a0426ba5445c2c5515a0064e14bd7cbaaf0714eb4b48f07e4d426d4a4c69145f9b595d63be3"}, {0x18, 0x107, 0x0, "d6"}, {0x80, 0x113, 0xffffff54, "4e46f0a746dac82c2f4be0360734b37528095d41b1016be70b654292842c5f044b4d228a2678af202a6db07e2d5f7f6b6f898fb591c74820bcd70cbd53a3159994f083361243fa223e6b0cd8dc43e2ad4e3f65d8cdea99d1440c5039f910d3e0b6d3ad42ac10070e6b21de80bd29"}, {0x1010, 0x118, 0x3, "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"}, {0xa8, 0x119, 0xfffffffa, "5cc312395a016b201166617a6bf2d21489b2e560366d097051e2b8992699d227e86a17f2f781d5ca0b1b66579d691c4f2fcc3b4df66bf523c8d1ee5cc18d5a11ad45b49804c3c7d95dd33b86b9d1827e3981c3c8f9b75575fb6626746d6f509a89c22875bd38693c8d279b50cf128ad6c74c02428891e7757d4496a4dca7c99a31800a63084df0ecec0777bdb7c22749f5a2b0435ff977"}, {0x58, 0x3a, 0x0, "b3bc269b1ce84bee8219ff63a9b1a766721f9705e881a24e1fbd0f6b1aa03444f78a141db5ef642f61599d86eb0e895a22ebfa9d15d840f38eada2a5270f8ec75c98fd3e7ab11158"}, {0x38, 0x0, 0x6, "0fc41fa3f411224e8e1d05d7fe9f40ae787304c4c138473eac241583f8cae33aa720282fa5df"}], 0x12b0}, 0x10) 1.356070609s ago: executing program 7 (id=2971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = epoll_create1(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000080)={0x0, 0x495d79af, [0x1, 0x1, 0x401, 0x7ff, 0x2, 0x80000001]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000100000022002c00128009000100626f6e64000100001c19028081328fc42510b391050010008f0000000600180000001dd1"], 0x4c}}, 0x10008084) 1.35596142s ago: executing program 2 (id=2972): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dvmrp0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES16=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.288688862s ago: executing program 8 (id=2973): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r0, 0x0, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1.253966706s ago: executing program 7 (id=2974): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x2100, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.131647979s ago: executing program 8 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x200000000000000}, 0x10) 1.061941368s ago: executing program 7 (id=2977): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 894.921025ms ago: executing program 2 (id=2978): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socket$packet(0x11, 0x0, 0x300) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000080)=0x21, 0x4) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x70}}, 0xeb64d656001f6f32) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="07b868beed063863274e4215a33b1d489b05d1fd42e9f992beba8bb723eb940deddc146ad2646412fcfdbc0f3e2561b537af879832cad6541d8df4ef5ed0b1f2d344de9ce912cc8f1d87e85e9252df5073db4d051fffdb44546377bf198f07f4b92f39057bf78a50a86bc02ec83b8572d6cfa932", 0x74}], 0x1, 0x8001, 0x80) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r8, 0x29, 0x4e, &(0x7f0000000400), 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async) sendfile(r7, r6, 0x0, 0xf03a0005) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x46, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x11, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x1, 0xc, 0x0, 0x3, 0x30, 0x4}, @exit, @generic={0x8, 0x0, 0x2, 0x7f, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x7, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x1ff}, @ldst={0x0, 0x2, 0x4, 0x9, 0x2, 0x80, 0xfffffffffffffff1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 894.728025ms ago: executing program 8 (id=2979): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a000000000000020300000000000000aa2b031b87c60a33060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) unshare(0x400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x3a, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 893.61971ms ago: executing program 7 (id=2980): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="72700d3f8f497e4e801425966457920600a645ca2ceaf1d6c827adca24c4516b40bfd54bd2d8c6b1b9db71ba3f4f6bc6b61d356475ca133e01618749", @ANYRES32=0x0, @ANYRES64=r0], 0x58}}, 0x4000095) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000001680)="1aad808715cf570360d0fc8df83c9314a31dc9ea506249e67ea5b075f426093ae6cad8dddec71b2679654629c2f834950f1fa79581ab5048dacbf69483de27319186f7f8a03cb05e3aecf216f8fc892101c0683a828d9f826ce777f2ffd4f86a0dbb231b571dc9a53dabaac4eaf009e50e62d363e81f58f27fe2e498dae7949cf763852991437405bfe9b1d8f02f6e077b2cef99d1986e834803917b66e20bb08e711eaa30bceed69b5a0f06e15b12fb10631a5d", 0xb4) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000015c0)="cdce396b4f19d613328437a234aff2d7113d18c6e31562a7091fa70be1b4b269f8dbc69951e7a11eca28a59b1247c6169f0f94108aa167140c593776786d866f5e74c03352fbc0aadcc2324048821ba2d85c41efaa18896fcf3ea8ab827fc46297f30c89a49376715895fb1ba42dfdf2949f2dafb50add74f66d88cf6566edb34e29398fa96ac920a5b40459f278bb452350834738f4523639a3682eeb6497", 0x9f}, {&(0x7f00000001c0)="c589445368aa37d34c2944d70540447bf8af2aa1242f27eb8d10f2bcc4fd1c707575142c00c2aab62e6cfa3f56f20b92ea1f0acbce058ba64fc1b598aa1504edf4e3c01db571be8a8285eeaf2e7edb921a31c4b55130df7c53f6a036abae464d172b9f8ea08697e60759d6d66cc031b0bf587c09d9981d20257aa41d7fe0ff551414698826b885998920d1a3be20", 0x24}, {&(0x7f0000000280)="cef24f925d45de390515c2404499beb7aaa4169f4a88d19f5f7603655a09ad2921b02f961aecf4fa0bfdc9a450ab5cf11ffca131afad1d0222e5050bbaf7be72a0c0378c77b14e8003fdc44366bcf6dfeca5e7d5cafdd7f21769e5a6a763fc816adb28e3e79adcfbb77b6ac88be9ed848dd34ba71eccfac1ed1184832cc569f5ba3b28eba95693c33e54cf0be633702d13ae33", 0x93}, {&(0x7f0000000340)="16949ea2aa7eeaf0551a56a8921ae3a2e83091dd7a04de6b71e969f2649bdc06be8da40cd251ad443b672469e01b9e779d877bdce96fcc123461f542073e65918ca39b21821a20d522af8bfcbc2d33ddecb771bc4eabf58143c713", 0x5b}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000003c0)="74abf17011b10c6d4aa52e599d04242a80aee0595196251a5c773c4d617c188e4e3bf429675223ee21d2813fc428d6ca97e8cc52d9ce90b2f8c5eee8a965cd4fb2438fb954d25d49cc08bc55cb56f10e18b4a93bd053b49c5d929c9c9442a9fee8787aeb214e860969ee2df124e13d1acaabcfb0bb41bba074683b7830720fd34f8809b7e10a82fdfc6f38acf8fd4d6ed2a5db9281e2e49193912b4f7c06f861f82c02536ec8e3b35e4c9d6fcbd041cf0cffbe445b91a8", 0xb7}, {&(0x7f0000000080)="9ef513fdd8caffba4ed31d9c581532a8d2f5961b9d83282fb7f17880c3b0d820b0937cbbe1f454b001ce1bd722ccfc09d69679293952eb08", 0xfffffffffffffecf}], 0x7) 824.581701ms ago: executing program 2 (id=2981): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 612.190233ms ago: executing program 8 (id=2982): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) 584.322225ms ago: executing program 7 (id=2983): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d29473e9b7b0627e7eb", 0x8a}, {&(0x7f00000002c0)="269e7a0e1b98b782853ff19fb64d658d9c850b93a9a55da438e14b5823cbd49eab0058b7b46d8c2e200ffeace4ff033ff36aa0d5056378c7c64326e53c68303c12713c419e30bf84012ba5fc074bb63c305620f1ef371f57f62f25782fd40f558e135c108dc2c6ffc7f415df", 0x6c}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4dc1eaf1444c9", 0x2f}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde01573be51b420", 0xc0}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb1333cda45077f08cfb3ec7320b20f9d099c7378fa19a09ee54c6e3a80fe453a746260ec5bf8c0fd3545b2aec6ebc1087eae2e4be5e1a449d66552c09163dd4eb0790159cacf6c5a511879685100ca1fa2b65a6fd24be7cf3a0e7a095804b0b6beb8f0c58ae49a36d94f4689985be3ab4b46efb8711cd81b875e0f46f395e47e08", 0x8d}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5", 0x5e}], 0x6, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c"], 0x118}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="ff3bc1090cb022cb1f5f739fda1c87920cf98b55c62ac8eaaff5bb9d52d146fbccacba6a99ad07a3ca5c2f663be3a44e35edb2188e903341c2b3fdb4d18e3de32ebe92681c8699a32934ab244c7b269cafe223d44c2fd88d89cf6c2a97bf4910853b6314f6b67ed07f080ddb6b956cad30", 0x71}, {&(0x7f0000000a80)="b930449b63feaa3c018431f152a43fd318ade55b7f2871c252c3d382df50db29b5272be91841e9f61be798008ab768b567cb6a0b5c22fe242c084f87ed3d17733e9551a021f2609a7b7206e887e036f490", 0x51}], 0x2}}], 0x2, 0x2010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 553.698499ms ago: executing program 2 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r0], 0x38}}, 0x0) 543.810885ms ago: executing program 6 (id=2985): syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 335.777992ms ago: executing program 2 (id=2986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x80, 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000004c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000001200)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r13 = syz_open_procfs$namespace(r10, &(0x7f0000001780)='ns/ipc\x00') r14 = getpid() sendmmsg$unix(r9, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r12}}}, @cred={{0x1c, 0x1, 0x2, {r14, r11}}}, @rights={{0x18, 0x1, 0x1, [r13, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)='%pB \x00'}, 0x20) r16 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001300)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000001400)=0xe8) r18 = getgid() sendmsg$unix(r1, &(0x7f0000001500)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="3e0dc13b14c7c9ad5b84983186069538dd3b3577cb2a5adbf7ff6f9dbf84ac9baa2a69b05f183f10684d23ee322375fb546b3c8c44865be6b88862e3c14f8daf18e00852009e491e4131ae0ef63a44919fa1a4073d31ad63710e9da216be896dff424cf093d32148ad653ce6dfaadd34ebe7afed9cc9429b92c660676a01b9d75e391e9ad1ee5639befdb634feab0d6bd8f82b1802503b377d7ffd5eeda5f44efda80e2966d131d543286900c4874e93bc98d0cc2f26fe4a7163a5e1d32d21e99daa57a905bdb8f1cd56a671524942810e3f9c5e07d063", 0xd7}], 0x1, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r12}}}, @rights={{0x2c, 0x1, 0x1, [r2, r15, r1, r1, r0, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0xb0}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 335.514965ms ago: executing program 8 (id=2987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000001204730081e949b93897bc3b0000ffffff077d01ff020000000000000000000000000001"], 0xfdef) 269.560838ms ago: executing program 7 (id=2988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x62200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/58, 0x3a, 0x0, &(0x7f0000000280)=""/128, 0x80}, &(0x7f0000000300)=0x40) r2 = socket(0xa, 0x80000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x14, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x30}, 0xde1e}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) unshare(0x20000400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000380)="4000000000220006908a00000400", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f00000000c0)=0xffffafe7) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x1}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x4000) 233.665449ms ago: executing program 6 (id=2989): r0 = socket(0xe, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x2c0}, 0x8) (async) accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0x100, 0x70bd29, 0x0, {}, [{0x40, 0x1, [@m_simple={0x3c, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x54}}, 0x0) 168.599µs ago: executing program 2 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, 0x0, 0x2e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 0s ago: executing program 6 (id=2991): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a000000000000020300000000000000aa2b031b87c60a33060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x4, 0x7f}) kernel console output (not intermixed with test programs): 7.433399][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1598'. [ 287.625060][T10922] netlink: 'syz.7.1603': attribute type 1 has an invalid length. [ 287.702328][T10922] bond3: entered promiscuous mode [ 287.707577][T10922] bond3: entered allmulticast mode [ 287.714343][T10922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.746535][T10928] macvlan2: entered promiscuous mode [ 287.752154][T10928] macvlan2: entered allmulticast mode [ 287.760788][T10928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.825213][T10929] macvlan2: entered promiscuous mode [ 287.830638][T10929] macvlan2: entered allmulticast mode [ 287.837642][T10929] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.071066][T10944] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 289.058936][T10993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.074889][T10991] blkio.reset_stats is deprecated [ 289.986821][T11042] FAULT_INJECTION: forcing a failure. [ 289.986821][T11042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.000987][T11042] CPU: 0 UID: 0 PID: 11042 Comm: syz.7.1645 Not tainted syzkaller #0 PREEMPT(full) [ 290.001017][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.001030][T11042] Call Trace: [ 290.001039][T11042] [ 290.001047][T11042] dump_stack_lvl+0x189/0x250 [ 290.001082][T11042] ? __pfx____ratelimit+0x10/0x10 [ 290.001110][T11042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.001138][T11042] ? __pfx__printk+0x10/0x10 [ 290.001161][T11042] ? fs_reclaim_acquire+0x7d/0x100 [ 290.001203][T11042] should_fail_ex+0x414/0x560 [ 290.001239][T11042] prepare_alloc_pages+0x213/0x610 [ 290.001268][T11042] __alloc_frozen_pages_noprof+0x123/0x370 [ 290.001289][T11042] ? __kasan_kmalloc_large+0x85/0xa0 [ 290.001323][T11042] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 290.001348][T11042] ? rcu_is_watching+0x15/0xb0 [ 290.001376][T11042] ? policy_nodemask+0x27c/0x720 [ 290.001406][T11042] alloc_pages_mpol+0x232/0x4a0 [ 290.001432][T11042] alloc_pages_noprof+0xa9/0x190 [ 290.001455][T11042] alloc_skb_with_frags+0x233/0x890 [ 290.001493][T11042] sock_alloc_send_pskb+0x84d/0x980 [ 290.001539][T11042] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 290.001569][T11042] ? dev_get_by_index+0x22/0x2e0 [ 290.001595][T11042] ? dev_get_by_index+0x22/0x2e0 [ 290.001627][T11042] packet_sendmsg+0x33a0/0x5080 [ 290.001671][T11042] ? match_mnt_path_str+0x770/0xb40 [ 290.001726][T11042] ? __pfx___might_resched+0x10/0x10 [ 290.001749][T11042] ? __lock_acquire+0xab9/0xd20 [ 290.001784][T11042] ? __pfx_packet_sendmsg+0x10/0x10 [ 290.001814][T11042] ? aa_sk_perm+0x81e/0x950 [ 290.001849][T11042] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 290.001888][T11042] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.001921][T11042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.001942][T11042] ? __pfx_packet_sendmsg+0x10/0x10 [ 290.001975][T11042] __sock_sendmsg+0x21c/0x270 [ 290.002005][T11042] __sys_sendto+0x3bd/0x520 [ 290.002027][T11042] ? __pfx___sys_sendto+0x10/0x10 [ 290.002056][T11042] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 290.002101][T11042] ? __fget_files+0x3a0/0x420 [ 290.002132][T11042] ? ksys_write+0x22a/0x250 [ 290.002163][T11042] ? __pfx_ksys_write+0x10/0x10 [ 290.002196][T11042] __x64_sys_sendto+0xde/0x100 [ 290.002219][T11042] do_syscall_64+0xfa/0xfa0 [ 290.002247][T11042] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.002274][T11042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.002295][T11042] ? clear_bhb_loop+0x60/0xb0 [ 290.002321][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.002341][T11042] RIP: 0033:0x7f8ad4d8f6c9 [ 290.002358][T11042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.002376][T11042] RSP: 002b:00007f8ad5c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 290.002417][T11042] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8f6c9 [ 290.002450][T11042] RDX: 000000000000e955 RSI: 00002000000000c0 RDI: 0000000000000003 [ 290.002464][T11042] RBP: 00007f8ad5c58090 R08: 0000200000000540 R09: 0000000000000014 [ 290.002479][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.002491][T11042] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 290.002526][T11042] [ 290.512945][T11052] syz_tun: entered allmulticast mode [ 290.529158][T11051] syz_tun: left allmulticast mode [ 290.772913][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1656'. [ 290.863671][T11079] netlink: 'syz.7.1658': attribute type 1 has an invalid length. [ 290.918390][T11079] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1658'. [ 290.975399][T11079] batadv_slave_1: entered promiscuous mode [ 291.008613][T11077] batadv_slave_1: left promiscuous mode [ 291.076526][T11087] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1660'. [ 291.156157][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 291.411608][T11101] veth1_macvtap: Device is already in use. [ 291.453240][T11104] netlink: 'syz.5.1668': attribute type 10 has an invalid length. [ 291.475750][T11105] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1669'. [ 291.544955][T11104] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 291.741287][T11119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1674'. [ 291.804251][T11119] netlink: 'syz.2.1674': attribute type 9 has an invalid length. [ 292.514771][T11144] batadv2: entered allmulticast mode [ 292.700052][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1688'. [ 293.068624][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1695'. [ 293.088334][T11176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1695'. [ 293.803985][T11215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1709'. [ 294.068594][T11235] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 295.344749][ T10] IPVS: starting estimator thread 0... [ 295.452320][T11277] IPVS: using max 25 ests per chain, 60000 per kthread [ 295.488263][T11284] pim6reg: entered allmulticast mode [ 295.620711][T11291] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 295.629876][T11291] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 295.906660][T11305] __nla_validate_parse: 3 callbacks suppressed [ 295.906680][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 296.252775][T11319] syzkaller0: entered promiscuous mode [ 296.267031][T11319] syzkaller0: entered allmulticast mode [ 296.497636][T11326] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1745'. [ 296.570801][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 296.672202][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 296.787917][T11337] FAULT_INJECTION: forcing a failure. [ 296.787917][T11337] name failslab, interval 1, probability 0, space 0, times 0 [ 296.811611][T11337] CPU: 0 UID: 0 PID: 11337 Comm: syz.6.1749 Not tainted syzkaller #0 PREEMPT(full) [ 296.811640][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.811653][T11337] Call Trace: [ 296.811661][T11337] [ 296.811670][T11337] dump_stack_lvl+0x189/0x250 [ 296.811704][T11337] ? __pfx____ratelimit+0x10/0x10 [ 296.811732][T11337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.811761][T11337] ? __pfx__printk+0x10/0x10 [ 296.811789][T11337] ? __pfx___might_resched+0x10/0x10 [ 296.811812][T11337] ? fs_reclaim_acquire+0x7d/0x100 [ 296.811864][T11337] should_fail_ex+0x414/0x560 [ 296.811901][T11337] should_failslab+0xa8/0x100 [ 296.811925][T11337] kmem_cache_alloc_noprof+0x74/0x6e0 [ 296.811954][T11337] ? alloc_empty_file+0x55/0x1d0 [ 296.811976][T11337] ? kernel_text_address+0xa5/0xe0 [ 296.812010][T11337] alloc_empty_file+0x55/0x1d0 [ 296.812034][T11337] path_openat+0x107/0x3830 [ 296.812072][T11337] ? stack_trace_save+0x9c/0xe0 [ 296.812101][T11337] ? stack_depot_save_flags+0x40/0x860 [ 296.812132][T11337] ? _parse_integer_limit+0x1a1/0x1f0 [ 296.812171][T11337] ? kasan_save_track+0x4f/0x80 [ 296.812203][T11337] ? getname_flags+0xb8/0x540 [ 296.812221][T11337] ? do_sys_openat2+0xbc/0x1c0 [ 296.812243][T11337] ? __x64_sys_openat+0x138/0x170 [ 296.812267][T11337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.812289][T11337] ? __pfx_path_openat+0x10/0x10 [ 296.812337][T11337] do_filp_open+0x1fa/0x410 [ 296.812362][T11337] ? __lock_acquire+0xab9/0xd20 [ 296.812384][T11337] ? __pfx_do_filp_open+0x10/0x10 [ 296.812436][T11337] ? _raw_spin_unlock+0x28/0x50 [ 296.812460][T11337] ? alloc_fd+0x64c/0x6c0 [ 296.812523][T11337] do_sys_openat2+0x121/0x1c0 [ 296.812551][T11337] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.812581][T11337] ? ksys_write+0x22a/0x250 [ 296.812622][T11337] ? __pfx_ksys_write+0x10/0x10 [ 296.812656][T11337] __x64_sys_openat+0x138/0x170 [ 296.812688][T11337] do_syscall_64+0xfa/0xfa0 [ 296.812716][T11337] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.812745][T11337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.812773][T11337] ? clear_bhb_loop+0x60/0xb0 [ 296.812799][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.812826][T11337] RIP: 0033:0x7fa07478f6c9 [ 296.812846][T11337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.812865][T11337] RSP: 002b:00007fa0756c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.812888][T11337] RAX: ffffffffffffffda RBX: 00007fa0749e6090 RCX: 00007fa07478f6c9 [ 296.812904][T11337] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 296.812919][T11337] RBP: 00007fa0756c6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.812932][T11337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.812945][T11337] R13: 00007fa0749e6128 R14: 00007fa0749e6090 R15: 00007ffcd9b68d38 [ 296.812981][T11337] [ 297.391993][T11349] pim6reg1: entered promiscuous mode [ 297.397496][T11349] pim6reg1: entered allmulticast mode [ 297.415748][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1755'. [ 297.430501][T11351] netlink: 'syz.7.1755': attribute type 1 has an invalid length. [ 297.491912][T11351] netlink: 'syz.7.1755': attribute type 2 has an invalid length. [ 297.529721][T11351] netlink: 'syz.7.1755': attribute type 2 has an invalid length. [ 297.569228][T11351] netlink: 'syz.7.1755': attribute type 2 has an invalid length. [ 297.647248][T11351] netlink: 'syz.7.1755': attribute type 2 has an invalid length. [ 297.677654][T11351] netlink: 'syz.7.1755': attribute type 1 has an invalid length. [ 297.842236][T11375] veth1_macvtap: Device is already in use. [ 298.095163][T11384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 298.293540][T11398] syz_tun: entered allmulticast mode [ 298.305256][T11397] syz_tun: left allmulticast mode [ 298.404850][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1773'. [ 298.999689][T11409] netlink: 'syz.8.1775': attribute type 4 has an invalid length. [ 299.170250][T11420] tipc: Enabling of bearer rejected, already enabled [ 299.191443][T11420] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 299.206899][T11420] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 299.601278][T11435] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.877345][T11448] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 299.940073][T11448] batadv_slave_0: entered promiscuous mode [ 299.946130][T11448] batadv_slave_0: left promiscuous mode [ 299.977414][T11454] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1792'. [ 300.160201][T11448] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 300.760210][T11479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1803'. [ 300.771150][T11480] veth1_macvtap: Device is already in use. [ 300.801354][T11476] netlink: 'syz.7.1801': attribute type 83 has an invalid length. [ 301.190804][T11498] tipc: Enabled bearer , priority 0 [ 301.211537][T11498] syzkaller0: entered promiscuous mode [ 301.217069][T11498] syzkaller0: entered allmulticast mode [ 301.807584][T11505] tipc: Resetting bearer [ 301.922288][T11497] tipc: Resetting bearer [ 302.047744][T11497] tipc: Disabling bearer [ 302.128671][T11524] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1818'. [ 303.343342][T11583] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1836'. [ 303.716251][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1848'. [ 303.917217][T11613] IPVS: length: 239 != 24 [ 304.003857][T11617] C: renamed from lo [ 304.492106][T11638] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1863'. [ 304.686976][T11653] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 305.219068][T11674] netlink: 'syz.7.1875': attribute type 10 has an invalid length. [ 305.219068][T11675] netlink: 'syz.7.1875': attribute type 10 has an invalid length. [ 305.219353][T11674] bridge0: port 3(team0) entered blocking state [ 305.245488][T11674] bridge0: port 3(team0) entered disabled state [ 305.255784][T11674] team0: entered allmulticast mode [ 305.262725][T11674] team_slave_0: entered allmulticast mode [ 305.268633][T11674] team_slave_1: entered allmulticast mode [ 305.277628][T11674] dummy0: entered allmulticast mode [ 305.287247][T11674] team0: entered promiscuous mode [ 305.293780][T11674] team_slave_0: entered promiscuous mode [ 305.311699][T11674] team_slave_1: entered promiscuous mode [ 305.317732][T11674] dummy0: entered promiscuous mode [ 305.325115][T11674] bridge0: port 3(team0) entered blocking state [ 305.331587][T11674] bridge0: port 3(team0) entered forwarding state [ 305.716197][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1880'. [ 305.750839][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1880'. [ 306.000374][T11693] nbd2: detected capacity change from 0 to 127 [ 306.042855][ T6043] block nbd2: Receive control failed (result -104) [ 306.244333][T11700] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1886'. [ 306.543219][T11709] : entered promiscuous mode [ 306.793906][T11715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1892'. [ 306.803390][T11715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1892'. [ 307.149387][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1896'. [ 307.174964][T11728] FAULT_INJECTION: forcing a failure. [ 307.174964][T11728] name failslab, interval 1, probability 0, space 0, times 0 [ 307.188040][T11728] CPU: 0 UID: 0 PID: 11728 Comm: syz.7.1897 Not tainted syzkaller #0 PREEMPT(full) [ 307.188068][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.188082][T11728] Call Trace: [ 307.188091][T11728] [ 307.188100][T11728] dump_stack_lvl+0x189/0x250 [ 307.188137][T11728] ? __pfx____ratelimit+0x10/0x10 [ 307.188166][T11728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.188195][T11728] ? __pfx__printk+0x10/0x10 [ 307.188227][T11728] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 307.188256][T11728] should_fail_ex+0x414/0x560 [ 307.188296][T11728] should_failslab+0xa8/0x100 [ 307.188317][T11728] ? __pfx_ip6_dst_gc+0x10/0x10 [ 307.188340][T11728] kmem_cache_alloc_noprof+0x74/0x6e0 [ 307.188371][T11728] ? dst_alloc+0x105/0x170 [ 307.188398][T11728] ? __pfx_ip6_dst_gc+0x10/0x10 [ 307.188423][T11728] dst_alloc+0x105/0x170 [ 307.188454][T11728] ip6_pol_route+0xa21/0x1180 [ 307.188481][T11728] ? ip6_pol_route+0x162/0x1180 [ 307.188513][T11728] ? __pfx_ip6_pol_route+0x10/0x10 [ 307.188546][T11728] ? xfrm_policy_lookup_bytype+0x11d1/0x1230 [ 307.188588][T11728] fib6_rule_lookup+0x348/0x6f0 [ 307.188618][T11728] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 307.188646][T11728] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 307.188677][T11728] ? ip6_route_output_flags+0x2e/0x5d0 [ 307.188706][T11728] ? ip6_route_output_flags+0x2e/0x5d0 [ 307.188740][T11728] ? dev_get_by_index_rcu+0xf4/0x110 [ 307.188776][T11728] ip6_route_output_flags+0x364/0x5d0 [ 307.188804][T11728] ? ip6_route_output_flags+0x2e/0x5d0 [ 307.188837][T11728] ip6_dst_lookup_tail+0x299/0x1510 [ 307.188873][T11728] ? __lock_acquire+0xab9/0xd20 [ 307.188904][T11728] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 307.188937][T11728] ? icmpv6_echo_reply+0x9fc/0x1960 [ 307.188967][T11728] ? __pfx_make_kuid+0x10/0x10 [ 307.189004][T11728] ? icmpv6_echo_reply+0x9d6/0x1960 [ 307.189032][T11728] icmpv6_echo_reply+0xbdf/0x1960 [ 307.189085][T11728] ? __pfx_icmpv6_echo_reply+0x10/0x10 [ 307.189132][T11728] ? raw6_local_deliver+0x15d/0xad0 [ 307.189181][T11728] icmpv6_rcv+0x14e0/0x1c80 [ 307.189222][T11728] ? __pfx_icmpv6_rcv+0x10/0x10 [ 307.189245][T11728] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 307.189302][T11728] ip6_input_finish+0x191/0x370 [ 307.189328][T11728] NF_HOOK+0x30c/0x3a0 [ 307.189369][T11728] ? __pfx_ip6_input_finish+0x10/0x10 [ 307.189388][T11728] ? NF_HOOK+0x9a/0x3a0 [ 307.189419][T11728] ? __pfx_NF_HOOK+0x10/0x10 [ 307.189455][T11728] ? __pfx_ip6_input_finish+0x10/0x10 [ 307.189491][T11728] ip6_input+0x16a/0x270 [ 307.189509][T11728] ? ip6_input+0x23/0x270 [ 307.189533][T11728] NF_HOOK+0x30c/0x3a0 [ 307.189562][T11728] ? skb_orphan+0x4f/0xd0 [ 307.189583][T11728] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 307.189619][T11728] ? NF_HOOK+0x9a/0x3a0 [ 307.189650][T11728] ? __pfx_NF_HOOK+0x10/0x10 [ 307.189684][T11728] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 307.189729][T11728] __netif_receive_skb+0xd3/0x380 [ 307.189763][T11728] ? netif_receive_skb+0x115/0x790 [ 307.189790][T11728] netif_receive_skb+0x1cb/0x790 [ 307.189817][T11728] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 307.189841][T11728] ? __pfx_netif_receive_skb+0x10/0x10 [ 307.189876][T11728] ? tun_rx_batched+0x160/0x730 [ 307.189903][T11728] tun_rx_batched+0x1b9/0x730 [ 307.189928][T11728] ? __lock_acquire+0xab9/0xd20 [ 307.189954][T11728] ? __pfx_tun_rx_batched+0x10/0x10 [ 307.189984][T11728] ? tun_get_user+0x272f/0x3e90 [ 307.190034][T11728] tun_get_user+0x2b65/0x3e90 [ 307.190069][T11728] ? tun_get_user+0x6f6/0x3e90 [ 307.190096][T11728] ? tun_get_user+0x272f/0x3e90 [ 307.190127][T11728] ? aa_file_perm+0x44d/0x1550 [ 307.190147][T11728] ? __pfx_tun_get_user+0x10/0x10 [ 307.190185][T11728] ? __lock_acquire+0xab9/0xd20 [ 307.190212][T11728] ? ref_tracker_alloc+0x318/0x460 [ 307.190231][T11728] ? __lock_acquire+0xab9/0xd20 [ 307.190255][T11728] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 307.190282][T11728] ? tun_get+0x1c/0x2f0 [ 307.190315][T11728] ? tun_get+0x1c/0x2f0 [ 307.190338][T11728] ? tun_get+0x1c/0x2f0 [ 307.190370][T11728] tun_chr_write_iter+0x113/0x200 [ 307.190400][T11728] vfs_write+0x5c9/0xb30 [ 307.190438][T11728] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 307.190465][T11728] ? __pfx_vfs_write+0x10/0x10 [ 307.190509][T11728] ? __fget_files+0x2a/0x420 [ 307.190541][T11728] ksys_write+0x145/0x250 [ 307.190576][T11728] ? __pfx_ksys_write+0x10/0x10 [ 307.190612][T11728] ? do_syscall_64+0xbe/0xfa0 [ 307.190649][T11728] do_syscall_64+0xfa/0xfa0 [ 307.190677][T11728] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.190707][T11728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.190730][T11728] ? clear_bhb_loop+0x60/0xb0 [ 307.190757][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.190779][T11728] RIP: 0033:0x7f8ad4d8e17f [ 307.190799][T11728] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 307.190818][T11728] RSP: 002b:00007f8ad5c58000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 307.190841][T11728] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8e17f [ 307.190857][T11728] RDX: 000000000000003e RSI: 00002000000006c0 RDI: 00000000000000c8 [ 307.190871][T11728] RBP: 00007f8ad5c58090 R08: 0000000000000000 R09: 0000000000000000 [ 307.190884][T11728] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 307.190897][T11728] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 307.190937][T11728] [ 308.096864][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1905'. [ 308.156724][T11744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.265602][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1904'. [ 308.276967][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1904'. [ 308.339114][T11753] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1908'. [ 308.876174][T11779] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1913'. [ 309.324779][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1921'. [ 309.357252][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1921'. [ 309.413895][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1922'. [ 310.038422][T11825] veth1_macvtap: Device is already in use. [ 310.053949][T11824] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1932'. [ 310.126818][T11830] IPVS: set_ctl: invalid protocol: 58 172.20.20.17:20000 [ 310.135247][T11831] IPVS: set_ctl: invalid protocol: 58 172.20.20.17:20000 [ 310.269332][T11837] syzkaller0: entered promiscuous mode [ 310.275035][T11837] syzkaller0: entered allmulticast mode [ 310.422106][T11843] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 311.046452][T11864] tipc: Enabled bearer , priority 0 [ 311.165530][T11864] syzkaller0: entered promiscuous mode [ 311.171466][T11864] syzkaller0: entered allmulticast mode [ 312.050698][T11864] tipc: Resetting bearer [ 312.146738][T11863] tipc: Resetting bearer [ 312.183495][T11863] tipc: Disabling bearer [ 312.208606][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 312.334446][T11919] netlink: 'syz.6.1967': attribute type 1 has an invalid length. [ 312.364286][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1967'. [ 312.569898][T11928] syz_tun: entered allmulticast mode [ 312.606932][T11927] syz_tun: left allmulticast mode [ 312.721217][T11933] FAULT_INJECTION: forcing a failure. [ 312.721217][T11933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.799208][T11933] CPU: 1 UID: 0 PID: 11933 Comm: syz.6.1973 Not tainted syzkaller #0 PREEMPT(full) [ 312.799240][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.799255][T11933] Call Trace: [ 312.799263][T11933] [ 312.799273][T11933] dump_stack_lvl+0x189/0x250 [ 312.799308][T11933] ? __pfx____ratelimit+0x10/0x10 [ 312.799337][T11933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.799375][T11933] ? __pfx__printk+0x10/0x10 [ 312.799398][T11933] ? __might_fault+0xb0/0x130 [ 312.799442][T11933] should_fail_ex+0x414/0x560 [ 312.799488][T11933] _copy_from_iter+0x1de/0x1790 [ 312.799519][T11933] ? rcu_is_watching+0x15/0xb0 [ 312.799549][T11933] ? kmalloc_reserve+0xbd/0x290 [ 312.799570][T11933] ? __pfx__copy_from_iter+0x10/0x10 [ 312.799605][T11933] ? __build_skb_around+0x262/0x3f0 [ 312.799641][T11933] ? netlink_sendmsg+0x642/0xb30 [ 312.799660][T11933] ? skb_put+0x11b/0x210 [ 312.799682][T11933] netlink_sendmsg+0x6b2/0xb30 [ 312.799711][T11933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.799736][T11933] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.799770][T11933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.799790][T11933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.799811][T11933] __sock_sendmsg+0x21c/0x270 [ 312.799844][T11933] ____sys_sendmsg+0x505/0x830 [ 312.799873][T11933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.799907][T11933] ? import_iovec+0x74/0xa0 [ 312.799937][T11933] ___sys_sendmsg+0x21f/0x2a0 [ 312.799963][T11933] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.800027][T11933] ? __fget_files+0x2a/0x420 [ 312.800046][T11933] ? __fget_files+0x3a0/0x420 [ 312.800078][T11933] __x64_sys_sendmsg+0x19b/0x260 [ 312.800104][T11933] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.800139][T11933] ? __pfx_ksys_write+0x10/0x10 [ 312.800174][T11933] ? do_syscall_64+0xbe/0xfa0 [ 312.800209][T11933] do_syscall_64+0xfa/0xfa0 [ 312.800238][T11933] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.800268][T11933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.800289][T11933] ? clear_bhb_loop+0x60/0xb0 [ 312.800316][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.800337][T11933] RIP: 0033:0x7fa07478f6c9 [ 312.800358][T11933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.800377][T11933] RSP: 002b:00007fa0756e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.800400][T11933] RAX: ffffffffffffffda RBX: 00007fa0749e5fa0 RCX: 00007fa07478f6c9 [ 312.800416][T11933] RDX: 0000000000040094 RSI: 0000200000000180 RDI: 0000000000000003 [ 312.800430][T11933] RBP: 00007fa0756e7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.800443][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.800456][T11933] R13: 00007fa0749e6038 R14: 00007fa0749e5fa0 R15: 00007ffcd9b68d38 [ 312.800517][T11933] [ 313.158250][T11949] FAULT_INJECTION: forcing a failure. [ 313.158250][T11949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.217818][T11949] CPU: 1 UID: 0 PID: 11949 Comm: syz.7.1978 Not tainted syzkaller #0 PREEMPT(full) [ 313.217847][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.217861][T11949] Call Trace: [ 313.217869][T11949] [ 313.217878][T11949] dump_stack_lvl+0x189/0x250 [ 313.217917][T11949] ? __pfx____ratelimit+0x10/0x10 [ 313.217947][T11949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.217975][T11949] ? __pfx__printk+0x10/0x10 [ 313.217998][T11949] ? __might_fault+0xb0/0x130 [ 313.218040][T11949] should_fail_ex+0x414/0x560 [ 313.218079][T11949] _copy_from_user+0x2d/0xb0 [ 313.218108][T11949] ___sys_sendmsg+0x158/0x2a0 [ 313.218135][T11949] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.218199][T11949] ? __fget_files+0x2a/0x420 [ 313.218219][T11949] ? __fget_files+0x3a0/0x420 [ 313.218250][T11949] __x64_sys_sendmsg+0x19b/0x260 [ 313.218276][T11949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.218309][T11949] ? __pfx_ksys_write+0x10/0x10 [ 313.218343][T11949] ? do_syscall_64+0xbe/0xfa0 [ 313.218378][T11949] do_syscall_64+0xfa/0xfa0 [ 313.218406][T11949] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.218435][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.218456][T11949] ? clear_bhb_loop+0x60/0xb0 [ 313.218481][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.218501][T11949] RIP: 0033:0x7f8ad4d8f6c9 [ 313.218520][T11949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.218539][T11949] RSP: 002b:00007f8ad5c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.218562][T11949] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8f6c9 [ 313.218578][T11949] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 313.218591][T11949] RBP: 00007f8ad5c58090 R08: 0000000000000000 R09: 0000000000000000 [ 313.218604][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.218617][T11949] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 313.218653][T11949] [ 313.267228][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1979'. [ 313.522929][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1982'. [ 313.540144][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1982'. [ 313.662136][T11963] veth1_macvtap: Device is already in use. [ 314.336032][T12000] batman_adv: batadv0: Adding interface: dummy0 [ 314.342908][T12000] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.425029][T12000] batman_adv: batadv0: Interface activated: dummy0 [ 314.488807][T12001] batadv0: mtu less than device minimum [ 314.514617][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.526688][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.538792][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.550860][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.562852][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.574897][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.586863][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.598861][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.610928][T12001] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.911384][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2001'. [ 315.773881][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2014'. [ 315.827156][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2014'. [ 315.917745][T12080] veth1_macvtap: Device is already in use. [ 316.005798][T12084] tipc: Enabling of bearer rejected, already enabled [ 316.394222][T12104] FAULT_INJECTION: forcing a failure. [ 316.394222][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.425113][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.7.2027 Not tainted syzkaller #0 PREEMPT(full) [ 316.425140][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.425153][T12104] Call Trace: [ 316.425162][T12104] [ 316.425172][T12104] dump_stack_lvl+0x189/0x250 [ 316.425207][T12104] ? __pfx____ratelimit+0x10/0x10 [ 316.425235][T12104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.425264][T12104] ? __pfx__printk+0x10/0x10 [ 316.425285][T12104] ? __might_fault+0xb0/0x130 [ 316.425329][T12104] should_fail_ex+0x414/0x560 [ 316.425368][T12104] _copy_from_iter+0x1de/0x1790 [ 316.425398][T12104] ? rcu_is_watching+0x15/0xb0 [ 316.425428][T12104] ? kmalloc_reserve+0xbd/0x290 [ 316.425457][T12104] ? __pfx__copy_from_iter+0x10/0x10 [ 316.425483][T12104] ? __build_skb_around+0x262/0x3f0 [ 316.425520][T12104] ? netlink_sendmsg+0x642/0xb30 [ 316.425538][T12104] ? skb_put+0x11b/0x210 [ 316.425561][T12104] netlink_sendmsg+0x6b2/0xb30 [ 316.425593][T12104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.425618][T12104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 316.425651][T12104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.425671][T12104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.425691][T12104] __sock_sendmsg+0x21c/0x270 [ 316.425723][T12104] ____sys_sendmsg+0x505/0x830 [ 316.425752][T12104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.425785][T12104] ? import_iovec+0x74/0xa0 [ 316.425816][T12104] ___sys_sendmsg+0x21f/0x2a0 [ 316.425841][T12104] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.425904][T12104] ? __fget_files+0x2a/0x420 [ 316.425923][T12104] ? __fget_files+0x3a0/0x420 [ 316.425955][T12104] __x64_sys_sendmsg+0x19b/0x260 [ 316.425981][T12104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.426016][T12104] ? __pfx_ksys_write+0x10/0x10 [ 316.426050][T12104] ? do_syscall_64+0xbe/0xfa0 [ 316.426085][T12104] do_syscall_64+0xfa/0xfa0 [ 316.426113][T12104] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.426144][T12104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.426165][T12104] ? clear_bhb_loop+0x60/0xb0 [ 316.426192][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.426211][T12104] RIP: 0033:0x7f8ad4d8f6c9 [ 316.426230][T12104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.426249][T12104] RSP: 002b:00007f8ad5c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.426272][T12104] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8f6c9 [ 316.426288][T12104] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 316.426301][T12104] RBP: 00007f8ad5c58090 R08: 0000000000000000 R09: 0000000000000000 [ 316.426313][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.426325][T12104] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 316.426360][T12104] [ 316.749473][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2030'. [ 316.878185][T12115] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 316.894827][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2033'. [ 316.961709][T12110] bond2: (slave bond_slave_1): Device is not our slave [ 316.975041][T12110] bond2: option active_slave: invalid value (bond_slave_1) [ 317.014888][T12110] bond2 (unregistering): Released all slaves [ 317.077077][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085174][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.432920][T12147] tipc: Enabled bearer , priority 2 [ 317.950019][T12132] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 318.096032][T12176] __nla_validate_parse: 1 callbacks suppressed [ 318.096053][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2051'. [ 318.144884][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2051'. [ 318.222721][T12181] netlink: 'syz.6.2054': attribute type 21 has an invalid length. [ 318.269739][T12181] netlink: 'syz.6.2054': attribute type 22 has an invalid length. [ 318.301850][T12181] netlink: 'syz.6.2054': attribute type 23 has an invalid length. [ 318.311960][T12186] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2055'. [ 318.331624][T12181] netlink: 'syz.6.2054': attribute type 25 has an invalid length. [ 318.339500][T12181] netlink: 'syz.6.2054': attribute type 26 has an invalid length. [ 318.348272][T12185] netlink: 232 bytes leftover after parsing attributes in process `syz.7.2055'. [ 318.358336][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2054'. [ 318.402409][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2054'. [ 318.513194][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2058'. [ 318.617695][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2059'. [ 318.642386][T12200] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2060'. [ 318.714292][T12204] netlink: 'syz.7.2062': attribute type 1 has an invalid length. [ 318.816330][T12204] bond4: entered promiscuous mode [ 318.834737][T12204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.843719][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 319.542145][T12252] netlink: 'syz.7.2075': attribute type 1 has an invalid length. [ 319.938441][T12276] FAULT_INJECTION: forcing a failure. [ 319.938441][T12276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.988848][T12276] CPU: 0 UID: 0 PID: 12276 Comm: syz.8.2082 Not tainted syzkaller #0 PREEMPT(full) [ 319.988880][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.988895][T12276] Call Trace: [ 319.988903][T12276] [ 319.988912][T12276] dump_stack_lvl+0x189/0x250 [ 319.988947][T12276] ? __pfx____ratelimit+0x10/0x10 [ 319.988978][T12276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.989008][T12276] ? __pfx__printk+0x10/0x10 [ 319.989031][T12276] ? __might_fault+0xb0/0x130 [ 319.989079][T12276] should_fail_ex+0x414/0x560 [ 319.989118][T12276] _copy_from_user+0x2d/0xb0 [ 319.989145][T12276] kstrtouint_from_user+0xc4/0x170 [ 319.989182][T12276] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 319.989224][T12276] proc_fail_nth_write+0x88/0x200 [ 319.989252][T12276] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.989287][T12276] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.989319][T12276] vfs_write+0x27e/0xb30 [ 319.989361][T12276] ? __pfx_vfs_write+0x10/0x10 [ 319.989395][T12276] ? __fget_files+0x2a/0x420 [ 319.989421][T12276] ? __fget_files+0x3a0/0x420 [ 319.989439][T12276] ? __fget_files+0x2a/0x420 [ 319.989470][T12276] ksys_write+0x145/0x250 [ 319.989504][T12276] ? __pfx_ksys_write+0x10/0x10 [ 319.989539][T12276] ? do_syscall_64+0xbe/0xfa0 [ 319.989575][T12276] do_syscall_64+0xfa/0xfa0 [ 319.989602][T12276] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.989631][T12276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.989652][T12276] ? clear_bhb_loop+0x60/0xb0 [ 319.989679][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.989700][T12276] RIP: 0033:0x7ff7f738e17f [ 319.989720][T12276] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 319.989738][T12276] RSP: 002b:00007ff7f826c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 319.989761][T12276] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff7f738e17f [ 319.989777][T12276] RDX: 0000000000000001 RSI: 00007ff7f826c0a0 RDI: 000000000000000a [ 319.989790][T12276] RBP: 00007ff7f826c090 R08: 0000000000000000 R09: 0000000000000000 [ 319.989803][T12276] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 319.989816][T12276] R13: 00007ff7f75e6128 R14: 00007ff7f75e6090 R15: 00007ffe06d3c548 [ 319.989853][T12276] [ 320.412701][T12283] veth1_macvtap: Device is already in use. [ 320.693943][T12285] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.826183][T12285] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.002827][T12285] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.169428][T12285] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.618221][ T79] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.685449][ T37] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.751872][ T37] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.823661][ T2963] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.892231][T12362] netlink: 'syz.5.2110': attribute type 1 has an invalid length. [ 321.986230][T12362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.183346][T12362] bond4: (slave veth0_to_bond): making interface the new active one [ 322.249057][T12362] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 322.753558][T12405] FAULT_INJECTION: forcing a failure. [ 322.753558][T12405] name failslab, interval 1, probability 0, space 0, times 0 [ 322.770684][T12405] CPU: 0 UID: 0 PID: 12405 Comm: syz.2.2123 Not tainted syzkaller #0 PREEMPT(full) [ 322.770711][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.770723][T12405] Call Trace: [ 322.770731][T12405] [ 322.770739][T12405] dump_stack_lvl+0x189/0x250 [ 322.770770][T12405] ? __pfx____ratelimit+0x10/0x10 [ 322.770795][T12405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.770821][T12405] ? __pfx__printk+0x10/0x10 [ 322.770843][T12405] ? __pfx___might_resched+0x10/0x10 [ 322.770864][T12405] ? fs_reclaim_acquire+0x7d/0x100 [ 322.770908][T12405] should_fail_ex+0x414/0x560 [ 322.770943][T12405] should_failslab+0xa8/0x100 [ 322.770964][T12405] kmem_cache_alloc_noprof+0x74/0x6e0 [ 322.770991][T12405] ? sk_prot_alloc+0x57/0x220 [ 322.771015][T12405] sk_prot_alloc+0x57/0x220 [ 322.771032][T12405] ? sk_alloc+0x24/0x370 [ 322.771051][T12405] sk_alloc+0x3a/0x370 [ 322.771074][T12405] inet6_create+0x7f0/0x1260 [ 322.771096][T12405] ? inet6_create+0x83/0x1260 [ 322.771124][T12405] __sock_create+0x4b3/0x9f0 [ 322.771160][T12405] sctp_getsockopt_peeloff_common+0x3ac/0x830 [ 322.771199][T12405] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 322.771242][T12405] sctp_getsockopt_peeloff_flags+0x13b/0x230 [ 322.771272][T12405] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 322.771309][T12405] sctp_getsockopt+0x3ab/0xb60 [ 322.771338][T12405] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 322.771367][T12405] do_sock_getsockopt+0x372/0x450 [ 322.771390][T12405] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 322.771408][T12405] ? do_syscall_64+0xa0/0xfa0 [ 322.771434][T12405] ? __fget_files+0x2a/0x420 [ 322.771451][T12405] ? __fget_files+0x3a0/0x420 [ 322.771467][T12405] ? __fget_files+0x2a/0x420 [ 322.771492][T12405] __x64_sys_getsockopt+0x1a5/0x250 [ 322.771511][T12405] ? do_syscall_64+0xa0/0xfa0 [ 322.771539][T12405] ? do_syscall_64+0xa0/0xfa0 [ 322.771569][T12405] do_syscall_64+0xfa/0xfa0 [ 322.771593][T12405] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.771620][T12405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.771639][T12405] ? clear_bhb_loop+0x60/0xb0 [ 322.771664][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.771683][T12405] RIP: 0033:0x7f6d9498f6c9 [ 322.771701][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.771718][T12405] RSP: 002b:00007f6d9576e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 322.771739][T12405] RAX: ffffffffffffffda RBX: 00007f6d94be6180 RCX: 00007f6d9498f6c9 [ 322.771753][T12405] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 322.771764][T12405] RBP: 00007f6d9576e090 R08: 00002000000002c0 R09: 0000000000000000 [ 322.771776][T12405] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 322.771788][T12405] R13: 00007f6d94be6218 R14: 00007f6d94be6180 R15: 00007ffc214bcbe8 [ 322.771820][T12405] [ 323.092430][T12402] veth1_macvtap: Device is already in use. [ 323.286841][T12415] __nla_validate_parse: 11 callbacks suppressed [ 323.286864][T12415] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2127'. [ 323.310797][T12415] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2127'. [ 323.528335][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2132'. [ 323.991737][T12453] syz_tun: entered allmulticast mode [ 324.000668][T12452] syz_tun: left allmulticast mode [ 324.023876][T12455] net_ratelimit: 13 callbacks suppressed [ 324.023894][T12455] caif0: mtu less than device minimum [ 324.082728][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2144'. [ 324.138042][T12459] FAULT_INJECTION: forcing a failure. [ 324.138042][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 324.160092][T12459] CPU: 0 UID: 0 PID: 12459 Comm: syz.5.2145 Not tainted syzkaller #0 PREEMPT(full) [ 324.160122][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.160135][T12459] Call Trace: [ 324.160143][T12459] [ 324.160153][T12459] dump_stack_lvl+0x189/0x250 [ 324.160187][T12459] ? __pfx____ratelimit+0x10/0x10 [ 324.160217][T12459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.160247][T12459] ? __pfx__printk+0x10/0x10 [ 324.160276][T12459] ? __pfx___might_resched+0x10/0x10 [ 324.160299][T12459] ? fs_reclaim_acquire+0x7d/0x100 [ 324.160339][T12459] should_fail_ex+0x414/0x560 [ 324.160378][T12459] should_failslab+0xa8/0x100 [ 324.160402][T12459] __kmalloc_noprof+0xcb/0x7f0 [ 324.160432][T12459] ? rcu_is_watching+0x15/0xb0 [ 324.160455][T12459] ? security_sk_alloc+0x52/0x390 [ 324.160477][T12459] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 324.160510][T12459] security_sk_alloc+0x52/0x390 [ 324.160537][T12459] sk_prot_alloc+0x101/0x220 [ 324.160564][T12459] sk_alloc+0x3a/0x370 [ 324.160600][T12459] inet6_create+0x7f0/0x1260 [ 324.160626][T12459] ? inet6_create+0x83/0x1260 [ 324.160656][T12459] __sock_create+0x4b3/0x9f0 [ 324.160698][T12459] sctp_getsockopt_peeloff_common+0x3ac/0x830 [ 324.160742][T12459] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 324.160795][T12459] sctp_getsockopt_peeloff_flags+0x13b/0x230 [ 324.160829][T12459] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 324.160873][T12459] sctp_getsockopt+0x3ab/0xb60 [ 324.160906][T12459] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 324.160938][T12459] do_sock_getsockopt+0x372/0x450 [ 324.160965][T12459] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 324.160987][T12459] ? do_syscall_64+0xa0/0xfa0 [ 324.161016][T12459] ? __fget_files+0x2a/0x420 [ 324.161035][T12459] ? __fget_files+0x3a0/0x420 [ 324.161055][T12459] ? __fget_files+0x2a/0x420 [ 324.161083][T12459] __x64_sys_getsockopt+0x1a5/0x250 [ 324.161105][T12459] ? do_syscall_64+0xa0/0xfa0 [ 324.161137][T12459] ? do_syscall_64+0xa0/0xfa0 [ 324.161171][T12459] do_syscall_64+0xfa/0xfa0 [ 324.161200][T12459] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.161230][T12459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.161252][T12459] ? clear_bhb_loop+0x60/0xb0 [ 324.161278][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.161299][T12459] RIP: 0033:0x7ffbb2f8f6c9 [ 324.161318][T12459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.161337][T12459] RSP: 002b:00007ffbb3e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 324.161361][T12459] RAX: ffffffffffffffda RBX: 00007ffbb31e5fa0 RCX: 00007ffbb2f8f6c9 [ 324.161378][T12459] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000004 [ 324.161390][T12459] RBP: 00007ffbb3e38090 R08: 00002000000002c0 R09: 0000000000000000 [ 324.161405][T12459] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 324.161418][T12459] R13: 00007ffbb31e6038 R14: 00007ffbb31e5fa0 R15: 00007ffda3014888 [ 324.161455][T12459] [ 324.272662][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 325.009540][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2160'. [ 325.314632][T12516] veth1_macvtap: Device is already in use. [ 325.321695][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2163'. [ 325.321771][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2163'. [ 325.738470][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2172'. [ 325.780010][T12536] netlink: ct family unspecified [ 325.790247][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.848843][T12541] netlink: 'syz.6.2173': attribute type 83 has an invalid length. [ 325.891085][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2173'. [ 325.957819][T12543] xt_TCPMSS: Only works on TCP SYN packets [ 326.017415][T12548] FAULT_INJECTION: forcing a failure. [ 326.017415][T12548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.045004][T12548] CPU: 0 UID: 0 PID: 12548 Comm: syz.8.2175 Not tainted syzkaller #0 PREEMPT(full) [ 326.045034][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.045048][T12548] Call Trace: [ 326.045056][T12548] [ 326.045065][T12548] dump_stack_lvl+0x189/0x250 [ 326.045099][T12548] ? __pfx____ratelimit+0x10/0x10 [ 326.045129][T12548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.045159][T12548] ? __pfx__printk+0x10/0x10 [ 326.045192][T12548] should_fail_ex+0x414/0x560 [ 326.045230][T12548] _copy_to_user+0x31/0xb0 [ 326.045261][T12548] simple_read_from_buffer+0xe1/0x170 [ 326.045299][T12548] proc_fail_nth_read+0x1b3/0x220 [ 326.045329][T12548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.045359][T12548] ? rw_verify_area+0x2a6/0x4d0 [ 326.045394][T12548] ? __lock_acquire+0xab9/0xd20 [ 326.045417][T12548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.045442][T12548] vfs_read+0x200/0xa30 [ 326.045465][T12548] ? fdget_pos+0x247/0x320 [ 326.045485][T12548] ? __pfx___mutex_lock+0x10/0x10 [ 326.045512][T12548] ? __pfx_vfs_read+0x10/0x10 [ 326.045538][T12548] ? __fget_files+0x2a/0x420 [ 326.045558][T12548] ? __fget_files+0x3a0/0x420 [ 326.045573][T12548] ? __fget_files+0x2a/0x420 [ 326.045597][T12548] ksys_read+0x145/0x250 [ 326.045623][T12548] ? __pfx_ksys_read+0x10/0x10 [ 326.045651][T12548] ? do_syscall_64+0xbe/0xfa0 [ 326.045680][T12548] do_syscall_64+0xfa/0xfa0 [ 326.045703][T12548] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.045727][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.045744][T12548] ? clear_bhb_loop+0x60/0xb0 [ 326.045766][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.045782][T12548] RIP: 0033:0x7ff7f738e0dc [ 326.045798][T12548] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.045814][T12548] RSP: 002b:00007ff7f828d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.045833][T12548] RAX: ffffffffffffffda RBX: 00007ff7f75e5fa0 RCX: 00007ff7f738e0dc [ 326.045846][T12548] RDX: 000000000000000f RSI: 00007ff7f828d0a0 RDI: 0000000000000003 [ 326.045857][T12548] RBP: 00007ff7f828d090 R08: 0000000000000000 R09: 0000000000000000 [ 326.045867][T12548] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 326.045878][T12548] R13: 00007ff7f75e6038 R14: 00007ff7f75e5fa0 R15: 00007ffe06d3c548 [ 326.045906][T12548] [ 326.464708][T12559] FAULT_INJECTION: forcing a failure. [ 326.464708][T12559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.478482][T12559] CPU: 0 UID: 0 PID: 12559 Comm: syz.2.2181 Not tainted syzkaller #0 PREEMPT(full) [ 326.478522][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.478543][T12559] Call Trace: [ 326.478555][T12559] [ 326.478568][T12559] dump_stack_lvl+0x189/0x250 [ 326.478606][T12559] ? __pfx____ratelimit+0x10/0x10 [ 326.478635][T12559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.478666][T12559] ? __pfx__printk+0x10/0x10 [ 326.478687][T12559] ? __might_fault+0xb0/0x130 [ 326.478729][T12559] should_fail_ex+0x414/0x560 [ 326.478766][T12559] _copy_from_user+0x2d/0xb0 [ 326.478794][T12559] do_tcp_getsockopt+0x1dd/0x2680 [ 326.478829][T12559] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 326.478852][T12559] ? sock_recv_errqueue+0x4e0/0x510 [ 326.478889][T12559] ? __might_fault+0xb0/0x130 [ 326.478920][T12559] ? _parse_integer_limit+0x1ae/0x1f0 [ 326.478952][T12559] ? aa_label_sk_perm+0x4cd/0x630 [ 326.478992][T12559] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 326.479054][T12559] ? __lock_acquire+0xab9/0xd20 [ 326.479087][T12559] ? __might_fault+0xb0/0x130 [ 326.479129][T12559] tcp_getsockopt+0x83/0x130 [ 326.479151][T12559] ? sock_recv_errqueue+0x4e0/0x510 [ 326.479180][T12559] ? sock_recv_errqueue+0x4e0/0x510 [ 326.479208][T12559] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 326.479240][T12559] do_sock_getsockopt+0x372/0x450 [ 326.479265][T12559] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 326.479286][T12559] ? do_syscall_64+0xa0/0xfa0 [ 326.479332][T12559] ? __fget_files+0x2a/0x420 [ 326.479351][T12559] ? __fget_files+0x3a0/0x420 [ 326.479386][T12559] ? __fget_files+0x2a/0x420 [ 326.479411][T12559] __x64_sys_getsockopt+0x1a5/0x250 [ 326.479433][T12559] ? do_syscall_64+0xa0/0xfa0 [ 326.479466][T12559] ? do_syscall_64+0xa0/0xfa0 [ 326.479500][T12559] do_syscall_64+0xfa/0xfa0 [ 326.479529][T12559] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.479558][T12559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.479584][T12559] ? clear_bhb_loop+0x60/0xb0 [ 326.479609][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.479630][T12559] RIP: 0033:0x7f6d9498f6c9 [ 326.479648][T12559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.479667][T12559] RSP: 002b:00007f6d957b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 326.479690][T12559] RAX: ffffffffffffffda RBX: 00007f6d94be5fa0 RCX: 00007f6d9498f6c9 [ 326.479706][T12559] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 326.479718][T12559] RBP: 00007f6d957b0090 R08: 00002000000002c0 R09: 0000000000000000 [ 326.479732][T12559] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 326.479746][T12559] R13: 00007f6d94be6038 R14: 00007f6d94be5fa0 R15: 00007ffc214bcbe8 [ 326.479780][T12559] [ 326.804730][T12564] sctp: [Deprecated]: syz.5.2184 (pid 12564) Use of int in max_burst socket option deprecated. [ 326.804730][T12564] Use struct sctp_assoc_value instead [ 326.889394][T12564] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 326.977047][T12572] netlink: 'syz.6.2187': attribute type 1 has an invalid length. [ 327.631470][T12604] FAULT_INJECTION: forcing a failure. [ 327.631470][T12604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.675967][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.5.2201 Not tainted syzkaller #0 PREEMPT(full) [ 327.675997][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.676011][T12604] Call Trace: [ 327.676019][T12604] [ 327.676028][T12604] dump_stack_lvl+0x189/0x250 [ 327.676062][T12604] ? __pfx____ratelimit+0x10/0x10 [ 327.676091][T12604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.676120][T12604] ? __pfx__printk+0x10/0x10 [ 327.676146][T12604] ? __might_fault+0xb0/0x130 [ 327.676183][T12604] should_fail_ex+0x414/0x560 [ 327.676229][T12604] _copy_from_user+0x2d/0xb0 [ 327.676257][T12604] copy_from_sockptr+0x5e/0xa0 [ 327.676281][T12604] do_tcp_getsockopt+0xc76/0x2680 [ 327.676316][T12604] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 327.676339][T12604] ? sock_recv_errqueue+0x4e0/0x510 [ 327.676373][T12604] ? __might_fault+0xb0/0x130 [ 327.676404][T12604] ? _parse_integer_limit+0x1ae/0x1f0 [ 327.676436][T12604] ? aa_label_sk_perm+0x4cd/0x630 [ 327.676475][T12604] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 327.676534][T12604] ? __lock_acquire+0xab9/0xd20 [ 327.676582][T12604] tcp_getsockopt+0x83/0x130 [ 327.676605][T12604] ? sock_recv_errqueue+0x4e0/0x510 [ 327.676634][T12604] ? sock_recv_errqueue+0x4e0/0x510 [ 327.676661][T12604] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 327.676692][T12604] do_sock_getsockopt+0x372/0x450 [ 327.676718][T12604] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 327.676739][T12604] ? do_syscall_64+0xa0/0xfa0 [ 327.676768][T12604] ? __fget_files+0x2a/0x420 [ 327.676787][T12604] ? __fget_files+0x3a0/0x420 [ 327.676805][T12604] ? __fget_files+0x2a/0x420 [ 327.676832][T12604] __x64_sys_getsockopt+0x1a5/0x250 [ 327.676853][T12604] ? do_syscall_64+0xa0/0xfa0 [ 327.676884][T12604] ? do_syscall_64+0xa0/0xfa0 [ 327.676915][T12604] do_syscall_64+0xfa/0xfa0 [ 327.676942][T12604] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.676973][T12604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.676994][T12604] ? clear_bhb_loop+0x60/0xb0 [ 327.677019][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.677039][T12604] RIP: 0033:0x7ffbb2f8f6c9 [ 327.677058][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.677076][T12604] RSP: 002b:00007ffbb3e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 327.677099][T12604] RAX: ffffffffffffffda RBX: 00007ffbb31e5fa0 RCX: 00007ffbb2f8f6c9 [ 327.677115][T12604] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 327.677126][T12604] RBP: 00007ffbb3e38090 R08: 00002000000002c0 R09: 0000000000000000 [ 327.677140][T12604] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 327.677153][T12604] R13: 00007ffbb31e6038 R14: 00007ffbb31e5fa0 R15: 00007ffda3014888 [ 327.677186][T12604] [ 328.050368][T12608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 328.076796][T12608] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 328.084692][T12608] gretap1: entered promiscuous mode [ 328.092991][T12608] gretap1: entered allmulticast mode [ 328.127960][T12608] netlink: 'syz.2.2203': attribute type 11 has an invalid length. [ 328.199291][T12622] FAULT_INJECTION: forcing a failure. [ 328.199291][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.220876][T12622] CPU: 0 UID: 0 PID: 12622 Comm: syz.7.2206 Not tainted syzkaller #0 PREEMPT(full) [ 328.220907][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.220920][T12622] Call Trace: [ 328.220929][T12622] [ 328.220938][T12622] dump_stack_lvl+0x189/0x250 [ 328.220974][T12622] ? __pfx____ratelimit+0x10/0x10 [ 328.221003][T12622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.221033][T12622] ? __pfx__printk+0x10/0x10 [ 328.221055][T12622] ? __might_fault+0xb0/0x130 [ 328.221098][T12622] should_fail_ex+0x414/0x560 [ 328.221135][T12622] _copy_from_iter+0x1de/0x1790 [ 328.221166][T12622] ? rcu_is_watching+0x15/0xb0 [ 328.221204][T12622] ? kmalloc_reserve+0xbd/0x290 [ 328.221224][T12622] ? __pfx__copy_from_iter+0x10/0x10 [ 328.221250][T12622] ? __build_skb_around+0x262/0x3f0 [ 328.221287][T12622] ? netlink_sendmsg+0x642/0xb30 [ 328.221306][T12622] ? skb_put+0x11b/0x210 [ 328.221330][T12622] netlink_sendmsg+0x6b2/0xb30 [ 328.221362][T12622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.221385][T12622] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.221418][T12622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.221439][T12622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.221461][T12622] __sock_sendmsg+0x21c/0x270 [ 328.221492][T12622] ____sys_sendmsg+0x505/0x830 [ 328.221522][T12622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.221555][T12622] ? import_iovec+0x74/0xa0 [ 328.221586][T12622] ___sys_sendmsg+0x21f/0x2a0 [ 328.221611][T12622] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.221672][T12622] ? __fget_files+0x2a/0x420 [ 328.221691][T12622] ? __fget_files+0x3a0/0x420 [ 328.221724][T12622] __x64_sys_sendmsg+0x19b/0x260 [ 328.221751][T12622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.221783][T12622] ? __pfx_ksys_write+0x10/0x10 [ 328.221817][T12622] ? do_syscall_64+0xbe/0xfa0 [ 328.221849][T12622] do_syscall_64+0xfa/0xfa0 [ 328.221875][T12622] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.221904][T12622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.221925][T12622] ? clear_bhb_loop+0x60/0xb0 [ 328.221950][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.221970][T12622] RIP: 0033:0x7f8ad4d8f6c9 [ 328.221989][T12622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.222007][T12622] RSP: 002b:00007f8ad5c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.222028][T12622] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8f6c9 [ 328.222043][T12622] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 328.222056][T12622] RBP: 00007f8ad5c58090 R08: 0000000000000000 R09: 0000000000000000 [ 328.222068][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.222080][T12622] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 328.222116][T12622] [ 328.575559][T12628] __nla_validate_parse: 7 callbacks suppressed [ 328.575579][T12628] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2209'. [ 328.627109][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2210'. [ 328.751503][T12636] FAULT_INJECTION: forcing a failure. [ 328.751503][T12636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.782307][T12636] CPU: 1 UID: 0 PID: 12636 Comm: syz.8.2212 Not tainted syzkaller #0 PREEMPT(full) [ 328.782337][T12636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.782351][T12636] Call Trace: [ 328.782359][T12636] [ 328.782368][T12636] dump_stack_lvl+0x189/0x250 [ 328.782411][T12636] ? __pfx____ratelimit+0x10/0x10 [ 328.782440][T12636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.782470][T12636] ? __pfx__printk+0x10/0x10 [ 328.782492][T12636] ? __might_fault+0xb0/0x130 [ 328.782536][T12636] should_fail_ex+0x414/0x560 [ 328.782574][T12636] _copy_from_iter+0x1de/0x1790 [ 328.782605][T12636] ? rcu_is_watching+0x15/0xb0 [ 328.782634][T12636] ? kmalloc_reserve+0xbd/0x290 [ 328.782654][T12636] ? __pfx__copy_from_iter+0x10/0x10 [ 328.782680][T12636] ? __build_skb_around+0x262/0x3f0 [ 328.782717][T12636] ? netlink_sendmsg+0x642/0xb30 [ 328.782735][T12636] ? skb_put+0x11b/0x210 [ 328.782759][T12636] netlink_sendmsg+0x6b2/0xb30 [ 328.782791][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.782816][T12636] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.782850][T12636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.782871][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.782893][T12636] __sock_sendmsg+0x21c/0x270 [ 328.782924][T12636] ____sys_sendmsg+0x505/0x830 [ 328.782952][T12636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.782984][T12636] ? import_iovec+0x74/0xa0 [ 328.783014][T12636] ___sys_sendmsg+0x21f/0x2a0 [ 328.783038][T12636] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.783099][T12636] ? __fget_files+0x2a/0x420 [ 328.783119][T12636] ? __fget_files+0x3a0/0x420 [ 328.783150][T12636] __x64_sys_sendmsg+0x19b/0x260 [ 328.783176][T12636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.783210][T12636] ? __pfx_ksys_write+0x10/0x10 [ 328.783245][T12636] ? do_syscall_64+0xbe/0xfa0 [ 328.783280][T12636] do_syscall_64+0xfa/0xfa0 [ 328.783312][T12636] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.783342][T12636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.783364][T12636] ? clear_bhb_loop+0x60/0xb0 [ 328.783391][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.783417][T12636] RIP: 0033:0x7ff7f738f6c9 [ 328.783436][T12636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.783454][T12636] RSP: 002b:00007ff7f828d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.783476][T12636] RAX: ffffffffffffffda RBX: 00007ff7f75e5fa0 RCX: 00007ff7f738f6c9 [ 328.783492][T12636] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 328.783506][T12636] RBP: 00007ff7f828d090 R08: 0000000000000000 R09: 0000000000000000 [ 328.783519][T12636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.783531][T12636] R13: 00007ff7f75e6038 R14: 00007ff7f75e5fa0 R15: 00007ffe06d3c548 [ 328.783566][T12636] [ 329.114426][T12638] netlink: 'syz.7.2211': attribute type 11 has an invalid length. [ 329.227404][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2218'. [ 329.236672][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2218'. [ 329.654483][T12672] netlink: 192 bytes leftover after parsing attributes in process `syz.7.2226'. [ 329.851474][T12680] tipc: Enabled bearer , priority 0 [ 329.863851][T12680] syzkaller0: entered promiscuous mode [ 329.864945][T12682] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2231'. [ 329.869456][T12680] syzkaller0: entered allmulticast mode [ 330.045399][T12688] netlink: zone id is out of range [ 330.045476][T12680] tipc: Resetting bearer [ 330.071657][T12688] netlink: zone id is out of range [ 330.091100][T12688] netlink: set zone limit has 8 unknown bytes [ 330.191200][T12695] netlink: zone id is out of range [ 330.196377][T12695] netlink: zone id is out of range [ 330.247673][T12695] netlink: set zone limit has 8 unknown bytes [ 330.288492][T12679] tipc: Resetting bearer [ 330.324619][T12701] FAULT_INJECTION: forcing a failure. [ 330.324619][T12701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.338608][T12701] CPU: 0 UID: 0 PID: 12701 Comm: syz.2.2238 Not tainted syzkaller #0 PREEMPT(full) [ 330.338639][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.338653][T12701] Call Trace: [ 330.338661][T12701] [ 330.338670][T12701] dump_stack_lvl+0x189/0x250 [ 330.338707][T12701] ? __pfx____ratelimit+0x10/0x10 [ 330.338736][T12701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.338766][T12701] ? __pfx__printk+0x10/0x10 [ 330.338802][T12701] should_fail_ex+0x414/0x560 [ 330.338840][T12701] _copy_to_user+0x31/0xb0 [ 330.338869][T12701] copy_to_sockptr+0x5e/0xa0 [ 330.338896][T12701] do_tcp_getsockopt+0x1f13/0x2680 [ 330.338931][T12701] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 330.338955][T12701] ? sock_recv_errqueue+0x4e0/0x510 [ 330.339012][T12701] ? __might_fault+0xb0/0x130 [ 330.339044][T12701] ? _parse_integer_limit+0x1ae/0x1f0 [ 330.339077][T12701] ? aa_label_sk_perm+0x4cd/0x630 [ 330.339117][T12701] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 330.339179][T12701] ? __lock_acquire+0xab9/0xd20 [ 330.339230][T12701] tcp_getsockopt+0x83/0x130 [ 330.339253][T12701] ? sock_recv_errqueue+0x4e0/0x510 [ 330.339282][T12701] ? sock_recv_errqueue+0x4e0/0x510 [ 330.339316][T12701] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 330.339349][T12701] do_sock_getsockopt+0x372/0x450 [ 330.339375][T12701] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 330.339396][T12701] ? do_syscall_64+0xa0/0xfa0 [ 330.339425][T12701] ? __fget_files+0x2a/0x420 [ 330.339444][T12701] ? __fget_files+0x3a0/0x420 [ 330.339463][T12701] ? __fget_files+0x2a/0x420 [ 330.339492][T12701] __x64_sys_getsockopt+0x1a5/0x250 [ 330.339513][T12701] ? do_syscall_64+0xa0/0xfa0 [ 330.339545][T12701] ? do_syscall_64+0xa0/0xfa0 [ 330.339584][T12701] do_syscall_64+0xfa/0xfa0 [ 330.339612][T12701] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.339641][T12701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.339662][T12701] ? clear_bhb_loop+0x60/0xb0 [ 330.339688][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.339708][T12701] RIP: 0033:0x7f6d9498f6c9 [ 330.339727][T12701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.339746][T12701] RSP: 002b:00007f6d957b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 330.339768][T12701] RAX: ffffffffffffffda RBX: 00007f6d94be5fa0 RCX: 00007f6d9498f6c9 [ 330.339784][T12701] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 330.339796][T12701] RBP: 00007f6d957b0090 R08: 00002000000002c0 R09: 0000000000000000 [ 330.339810][T12701] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 330.339823][T12701] R13: 00007f6d94be6038 R14: 00007f6d94be5fa0 R15: 00007ffc214bcbe8 [ 330.339859][T12701] [ 330.636516][T12679] tipc: Disabling bearer [ 330.719210][T12708] FAULT_INJECTION: forcing a failure. [ 330.719210][T12708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.765763][T12708] CPU: 0 UID: 0 PID: 12708 Comm: syz.5.2240 Not tainted syzkaller #0 PREEMPT(full) [ 330.765791][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.765804][T12708] Call Trace: [ 330.765813][T12708] [ 330.765821][T12708] dump_stack_lvl+0x189/0x250 [ 330.765855][T12708] ? __pfx____ratelimit+0x10/0x10 [ 330.765885][T12708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.765914][T12708] ? __pfx__printk+0x10/0x10 [ 330.765950][T12708] should_fail_ex+0x414/0x560 [ 330.765987][T12708] _copy_to_user+0x31/0xb0 [ 330.766016][T12708] simple_read_from_buffer+0xe1/0x170 [ 330.766064][T12708] proc_fail_nth_read+0x1b3/0x220 [ 330.766096][T12708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.766128][T12708] ? rw_verify_area+0x2a6/0x4d0 [ 330.766155][T12708] ? __lock_acquire+0xab9/0xd20 [ 330.766173][T12708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.766202][T12708] vfs_read+0x200/0xa30 [ 330.766230][T12708] ? fdget_pos+0x247/0x320 [ 330.766256][T12708] ? __pfx___mutex_lock+0x10/0x10 [ 330.766289][T12708] ? __pfx_vfs_read+0x10/0x10 [ 330.766319][T12708] ? __fget_files+0x2a/0x420 [ 330.766343][T12708] ? __fget_files+0x3a0/0x420 [ 330.766362][T12708] ? __fget_files+0x2a/0x420 [ 330.766392][T12708] ksys_read+0x145/0x250 [ 330.766425][T12708] ? __pfx_ksys_read+0x10/0x10 [ 330.766459][T12708] ? do_syscall_64+0xbe/0xfa0 [ 330.766494][T12708] do_syscall_64+0xfa/0xfa0 [ 330.766522][T12708] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.766552][T12708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.766573][T12708] ? clear_bhb_loop+0x60/0xb0 [ 330.766599][T12708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.766620][T12708] RIP: 0033:0x7ffbb2f8e0dc [ 330.766640][T12708] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 330.766658][T12708] RSP: 002b:00007ffbb3e17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.766682][T12708] RAX: ffffffffffffffda RBX: 00007ffbb31e6090 RCX: 00007ffbb2f8e0dc [ 330.766698][T12708] RDX: 000000000000000f RSI: 00007ffbb3e170a0 RDI: 0000000000000008 [ 330.766711][T12708] RBP: 00007ffbb3e17090 R08: 0000000000000000 R09: 0000000000000000 [ 330.766724][T12708] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 330.766738][T12708] R13: 00007ffbb31e6128 R14: 00007ffbb31e6090 R15: 00007ffda3014888 [ 330.766773][T12708] [ 331.035142][T12711] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2242'. [ 331.059759][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 331.489409][T12732] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2250'. [ 331.492268][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 332.546397][T12764] syz.7.2263 (12764) used greatest stack depth: 17832 bytes left [ 332.750251][T12809] syz_tun: entered allmulticast mode [ 332.787652][T12808] syz_tun: left allmulticast mode [ 332.831733][T12814] batman_adv: batadv0: Interface deactivated: dummy0 [ 332.838554][T12814] batman_adv: batadv0: Removing interface: dummy0 [ 332.857244][T12814] bridge_slave_0: left allmulticast mode [ 332.872962][T12814] bridge_slave_0: left promiscuous mode [ 332.888362][T12814] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.938529][T12814] bridge_slave_1: left allmulticast mode [ 332.948935][T12814] bridge_slave_1: left promiscuous mode [ 332.958242][T12814] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.026630][T12814] bond0: (slave bond_slave_0): Releasing backup interface [ 333.055827][T12814] bond0: (slave bond_slave_1): Releasing backup interface [ 333.068736][T12828] FAULT_INJECTION: forcing a failure. [ 333.068736][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 333.083209][T12828] CPU: 1 UID: 0 PID: 12828 Comm: syz.2.2273 Not tainted syzkaller #0 PREEMPT(full) [ 333.083240][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.083253][T12828] Call Trace: [ 333.083260][T12828] [ 333.083269][T12828] dump_stack_lvl+0x189/0x250 [ 333.083300][T12828] ? __pfx____ratelimit+0x10/0x10 [ 333.083326][T12828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.083351][T12828] ? __pfx__printk+0x10/0x10 [ 333.083375][T12828] ? __pfx___might_resched+0x10/0x10 [ 333.083395][T12828] ? fs_reclaim_acquire+0x7d/0x100 [ 333.083427][T12828] should_fail_ex+0x414/0x560 [ 333.083461][T12828] should_failslab+0xa8/0x100 [ 333.083480][T12828] kmem_cache_alloc_node_noprof+0x77/0x710 [ 333.083506][T12828] ? __alloc_skb+0x112/0x2d0 [ 333.083534][T12828] ? netlink_autobind+0xdb/0x300 [ 333.083560][T12828] __alloc_skb+0x112/0x2d0 [ 333.083596][T12828] netlink_sendmsg+0x5c6/0xb30 [ 333.083623][T12828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.083644][T12828] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.083673][T12828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.083691][T12828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.083710][T12828] __sock_sendmsg+0x21c/0x270 [ 333.083739][T12828] ____sys_sendmsg+0x505/0x830 [ 333.083777][T12828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.083805][T12828] ? import_iovec+0x74/0xa0 [ 333.083831][T12828] ___sys_sendmsg+0x21f/0x2a0 [ 333.083853][T12828] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.083902][T12828] ? __fget_files+0x2a/0x420 [ 333.083919][T12828] ? __fget_files+0x3a0/0x420 [ 333.083945][T12828] __x64_sys_sendmsg+0x19b/0x260 [ 333.083967][T12828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.083995][T12828] ? __pfx_ksys_write+0x10/0x10 [ 333.084027][T12828] ? do_syscall_64+0xbe/0xfa0 [ 333.084057][T12828] do_syscall_64+0xfa/0xfa0 [ 333.084084][T12828] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.084112][T12828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.084132][T12828] ? clear_bhb_loop+0x60/0xb0 [ 333.084156][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.084176][T12828] RIP: 0033:0x7f6d9498f6c9 [ 333.084195][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.084213][T12828] RSP: 002b:00007f6d957b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.084235][T12828] RAX: ffffffffffffffda RBX: 00007f6d94be5fa0 RCX: 00007f6d9498f6c9 [ 333.084249][T12828] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 333.084260][T12828] RBP: 00007f6d957b0090 R08: 0000000000000000 R09: 0000000000000000 [ 333.084272][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.084282][T12828] R13: 00007f6d94be6038 R14: 00007f6d94be5fa0 R15: 00007ffc214bcbe8 [ 333.084312][T12828] [ 333.422831][T12814] team0: Port device team_slave_0 removed [ 333.502987][T12814] team0: Port device team_slave_1 removed [ 333.510442][T12814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.518110][T12814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.537600][T12814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.545183][T12814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.555209][T12814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.883535][T12846] veth1_macvtap: Device is already in use. [ 335.201277][T12898] __nla_validate_parse: 2 callbacks suppressed [ 335.201297][T12898] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2302'. [ 335.614299][T12939] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2315'. [ 335.742694][T12948] x_tables: duplicate underflow at hook 2 [ 335.768816][T12948] netlink: 'syz.2.2317': attribute type 11 has an invalid length. [ 335.817539][T12950] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2319'. [ 335.893640][T12950] bond3 (unregistering): Released all slaves [ 335.934400][T12952] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 336.262027][ T56] block nbd2: Possible stuck request ffff888024a65080: control (read@0,1024B). Runtime 30 seconds [ 336.278629][ T56] block nbd2: Possible stuck request ffff888024a65240: control (read@1024,1024B). Runtime 30 seconds [ 336.289946][ T56] block nbd2: Possible stuck request ffff888024a65400: control (read@2048,1024B). Runtime 30 seconds [ 336.301459][ T56] block nbd2: Possible stuck request ffff888024a655c0: control (read@3072,1024B). Runtime 30 seconds [ 337.011564][T13008] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 337.132072][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2336'. [ 337.161751][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2336'. [ 337.165293][T13008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.300601][T13016] vlan0: entered promiscuous mode [ 337.310098][T13016] bond2: entered promiscuous mode [ 337.315352][T13016] vlan0: entered allmulticast mode [ 337.357374][T13016] bond2: entered allmulticast mode [ 337.436571][T13008] bond2: (slave gretap2): making interface the new active one [ 337.447090][T13008] gretap2: entered promiscuous mode [ 337.453102][T13008] gretap2: entered allmulticast mode [ 337.460727][T13036] netlink: 'syz.5.2342': attribute type 11 has an invalid length. [ 337.468958][T13036] netlink: 'syz.5.2342': attribute type 11 has an invalid length. [ 337.470310][T13008] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 337.485675][T13036] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2342'. [ 337.531697][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2341'. [ 337.826516][T13054] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2343'. [ 338.005315][T13059] netlink: 'syz.2.2349': attribute type 64 has an invalid length. [ 338.058732][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'. [ 338.091878][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2352'. [ 338.214327][T13073] FAULT_INJECTION: forcing a failure. [ 338.214327][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 338.267385][T13076] FAULT_INJECTION: forcing a failure. [ 338.267385][T13076] name failslab, interval 1, probability 0, space 0, times 0 [ 338.280117][T13076] CPU: 0 UID: 0 PID: 13076 Comm: syz.5.2354 Not tainted syzkaller #0 PREEMPT(full) [ 338.280146][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.280160][T13076] Call Trace: [ 338.280169][T13076] [ 338.280178][T13076] dump_stack_lvl+0x189/0x250 [ 338.280213][T13076] ? __pfx____ratelimit+0x10/0x10 [ 338.280243][T13076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.280273][T13076] ? __pfx__printk+0x10/0x10 [ 338.280312][T13076] should_fail_ex+0x414/0x560 [ 338.280351][T13076] should_failslab+0xa8/0x100 [ 338.280383][T13076] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 338.280418][T13076] ? nf_ct_ext_add+0x1b6/0x460 [ 338.280448][T13076] ? nf_ct_ext_add+0x1b6/0x460 [ 338.280476][T13076] krealloc_node_align_noprof+0x140/0x390 [ 338.280516][T13076] nf_ct_ext_add+0x1b6/0x460 [ 338.280551][T13076] init_conntrack+0x680/0xef0 [ 338.280587][T13076] ? __pfx_init_conntrack+0x10/0x10 [ 338.280621][T13076] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 338.280645][T13076] ? __local_bh_enable_ip+0x12d/0x1c0 [ 338.280670][T13076] ? __siphash_unaligned+0x232/0x3b0 [ 338.280708][T13076] nf_conntrack_in+0xbb7/0x15c0 [ 338.280763][T13076] ? __pfx_nf_conntrack_in+0x10/0x10 [ 338.280802][T13076] ? ipt_do_table+0x2a3/0x1640 [ 338.280833][T13076] ? NF_HOOK+0x9a/0x3a0 [ 338.280855][T13076] ? NF_HOOK+0x9a/0x3a0 [ 338.280874][T13076] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 338.280904][T13076] ? ip_sabotage_in+0x57/0x270 [ 338.280931][T13076] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 338.280957][T13076] nf_hook_slow+0xc5/0x220 [ 338.280986][T13076] NF_HOOK+0x206/0x3a0 [ 338.281010][T13076] ? __pfx_ip_rcv_finish+0x10/0x10 [ 338.281030][T13076] ? NF_HOOK+0x9a/0x3a0 [ 338.281050][T13076] ? __pfx_NF_HOOK+0x10/0x10 [ 338.281068][T13076] ? ip_rcv_core+0x7f7/0xd00 [ 338.281091][T13076] ? __pfx_ip_rcv_finish+0x10/0x10 [ 338.281124][T13076] ? __pfx_ip_rcv+0x10/0x10 [ 338.281143][T13076] __netif_receive_skb+0x143/0x380 [ 338.281181][T13076] ? netif_receive_skb+0x115/0x790 [ 338.281208][T13076] netif_receive_skb+0x1cb/0x790 [ 338.281236][T13076] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 338.281260][T13076] ? __pfx_netif_receive_skb+0x10/0x10 [ 338.281295][T13076] ? tun_rx_batched+0x160/0x730 [ 338.281323][T13076] tun_rx_batched+0x1b9/0x730 [ 338.281367][T13076] ? __lock_acquire+0xab9/0xd20 [ 338.281393][T13076] ? __pfx_tun_rx_batched+0x10/0x10 [ 338.281421][T13076] ? tun_get_user+0x272f/0x3e90 [ 338.281462][T13076] tun_get_user+0x2b65/0x3e90 [ 338.281495][T13076] ? tun_get_user+0x6f6/0x3e90 [ 338.281541][T13076] ? tun_get_user+0x272f/0x3e90 [ 338.281572][T13076] ? aa_file_perm+0x44d/0x1550 [ 338.281592][T13076] ? __pfx_tun_get_user+0x10/0x10 [ 338.281632][T13076] ? __lock_acquire+0xab9/0xd20 [ 338.281659][T13076] ? ref_tracker_alloc+0x318/0x460 [ 338.281678][T13076] ? __lock_acquire+0xab9/0xd20 [ 338.281700][T13076] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 338.281728][T13076] ? tun_get+0x1c/0x2f0 [ 338.281760][T13076] ? tun_get+0x1c/0x2f0 [ 338.281784][T13076] ? tun_get+0x1c/0x2f0 [ 338.281815][T13076] tun_chr_write_iter+0x113/0x200 [ 338.281844][T13076] vfs_write+0x5c9/0xb30 [ 338.281880][T13076] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 338.281907][T13076] ? __pfx_vfs_write+0x10/0x10 [ 338.281950][T13076] ? __fget_files+0x2a/0x420 [ 338.281981][T13076] ksys_write+0x145/0x250 [ 338.282015][T13076] ? __pfx_ksys_write+0x10/0x10 [ 338.282050][T13076] ? do_syscall_64+0xbe/0xfa0 [ 338.282085][T13076] do_syscall_64+0xfa/0xfa0 [ 338.282113][T13076] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.282142][T13076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.282165][T13076] ? clear_bhb_loop+0x60/0xb0 [ 338.282191][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.282212][T13076] RIP: 0033:0x7ffbb2f8e17f [ 338.282232][T13076] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 338.282251][T13076] RSP: 002b:00007ffbb3e38000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 338.282274][T13076] RAX: ffffffffffffffda RBX: 00007ffbb31e5fa0 RCX: 00007ffbb2f8e17f [ 338.282291][T13076] RDX: 0000000000000026 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 338.282304][T13076] RBP: 00007ffbb3e38090 R08: 0000000000000000 R09: 0000000000000000 [ 338.282317][T13076] R10: 0000000000000026 R11: 0000000000000293 R12: 0000000000000001 [ 338.282330][T13076] R13: 00007ffbb31e6038 R14: 00007ffbb31e5fa0 R15: 00007ffda3014888 [ 338.282375][T13076] [ 338.724648][T13073] CPU: 1 UID: 0 PID: 13073 Comm: syz.7.2353 Not tainted syzkaller #0 PREEMPT(full) [ 338.724677][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.724691][T13073] Call Trace: [ 338.724717][T13073] [ 338.724726][T13073] dump_stack_lvl+0x189/0x250 [ 338.724760][T13073] ? __pfx____ratelimit+0x10/0x10 [ 338.724789][T13073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.724817][T13073] ? __pfx__printk+0x10/0x10 [ 338.724844][T13073] ? __lock_acquire+0xab9/0xd20 [ 338.724874][T13073] should_fail_ex+0x414/0x560 [ 338.724912][T13073] should_failslab+0xa8/0x100 [ 338.724937][T13073] kmem_cache_alloc_noprof+0x74/0x6e0 [ 338.724967][T13073] ? skb_clone+0x212/0x3a0 [ 338.724997][T13073] skb_clone+0x212/0x3a0 [ 338.725024][T13073] __netlink_deliver_tap+0x404/0x850 [ 338.725060][T13073] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.725082][T13073] netlink_deliver_tap+0x19c/0x1b0 [ 338.725104][T13073] netlink_unicast+0x7fa/0x9e0 [ 338.725145][T13073] ? __pfx_netlink_unicast+0x10/0x10 [ 338.725179][T13073] ? netlink_sendmsg+0x642/0xb30 [ 338.725196][T13073] ? skb_put+0x11b/0x210 [ 338.725220][T13073] netlink_sendmsg+0x805/0xb30 [ 338.725251][T13073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.725277][T13073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 338.725311][T13073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.725332][T13073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.725352][T13073] __sock_sendmsg+0x21c/0x270 [ 338.725383][T13073] ____sys_sendmsg+0x505/0x830 [ 338.725413][T13073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.725447][T13073] ? import_iovec+0x74/0xa0 [ 338.725478][T13073] ___sys_sendmsg+0x21f/0x2a0 [ 338.725503][T13073] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.725564][T13073] ? __fget_files+0x2a/0x420 [ 338.725584][T13073] ? __fget_files+0x3a0/0x420 [ 338.725631][T13073] __x64_sys_sendmsg+0x19b/0x260 [ 338.725658][T13073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.725693][T13073] ? __pfx_ksys_write+0x10/0x10 [ 338.725728][T13073] ? do_syscall_64+0xbe/0xfa0 [ 338.725763][T13073] do_syscall_64+0xfa/0xfa0 [ 338.725791][T13073] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.725820][T13073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.725841][T13073] ? clear_bhb_loop+0x60/0xb0 [ 338.725867][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.725888][T13073] RIP: 0033:0x7f8ad4d8f6c9 [ 338.725907][T13073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.725925][T13073] RSP: 002b:00007f8ad5c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.725948][T13073] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8f6c9 [ 338.725964][T13073] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.725989][T13073] RBP: 00007f8ad5c58090 R08: 0000000000000000 R09: 0000000000000000 [ 338.726002][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.726014][T13073] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 338.726067][T13073] [ 339.668219][T13115] netlink: 'syz.2.2370': attribute type 8 has an invalid length. [ 339.694599][T13116] tipc: Enabling of bearer rejected, already enabled [ 339.724358][T13115] tipc: Enabling of bearer rejected, already enabled [ 339.856408][T13125] veth1_macvtap: Device is already in use. [ 339.992316][T13135] syz_tun: entered allmulticast mode [ 340.002704][T13131] syz_tun: left allmulticast mode [ 340.630902][T13168] FAULT_INJECTION: forcing a failure. [ 340.630902][T13168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.658269][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.6.2390 Not tainted syzkaller #0 PREEMPT(full) [ 340.658299][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.658313][T13168] Call Trace: [ 340.658322][T13168] [ 340.658331][T13168] dump_stack_lvl+0x189/0x250 [ 340.658375][T13168] ? __pfx____ratelimit+0x10/0x10 [ 340.658404][T13168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.658434][T13168] ? __pfx__printk+0x10/0x10 [ 340.658456][T13168] ? __might_fault+0xb0/0x130 [ 340.658501][T13168] should_fail_ex+0x414/0x560 [ 340.658539][T13168] _copy_from_user+0x2d/0xb0 [ 340.658568][T13168] kstrtouint_from_user+0xc4/0x170 [ 340.658595][T13168] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 340.658637][T13168] proc_fail_nth_write+0x88/0x200 [ 340.658665][T13168] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.658704][T13168] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 340.658734][T13168] vfs_write+0x27e/0xb30 [ 340.658776][T13168] ? __pfx_vfs_write+0x10/0x10 [ 340.658809][T13168] ? __fget_files+0x2a/0x420 [ 340.658835][T13168] ? __fget_files+0x3a0/0x420 [ 340.658853][T13168] ? __fget_files+0x2a/0x420 [ 340.658884][T13168] ksys_write+0x145/0x250 [ 340.658918][T13168] ? __pfx_ksys_write+0x10/0x10 [ 340.658953][T13168] ? do_syscall_64+0xbe/0xfa0 [ 340.658988][T13168] do_syscall_64+0xfa/0xfa0 [ 340.659016][T13168] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.659046][T13168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.659067][T13168] ? clear_bhb_loop+0x60/0xb0 [ 340.659093][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.659115][T13168] RIP: 0033:0x7fa07478e17f [ 340.659134][T13168] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 340.659152][T13168] RSP: 002b:00007fa0756e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 340.659173][T13168] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa07478e17f [ 340.659188][T13168] RDX: 0000000000000001 RSI: 00007fa0756e70a0 RDI: 0000000000000004 [ 340.659201][T13168] RBP: 00007fa0756e7090 R08: 0000000000000000 R09: 0000000000000000 [ 340.659214][T13168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 340.659226][T13168] R13: 00007fa0749e6038 R14: 00007fa0749e5fa0 R15: 00007ffcd9b68d38 [ 340.659262][T13168] [ 340.958974][T13177] FAULT_INJECTION: forcing a failure. [ 340.958974][T13177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.972808][T13177] CPU: 0 UID: 0 PID: 13177 Comm: syz.6.2394 Not tainted syzkaller #0 PREEMPT(full) [ 340.972839][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.972852][T13177] Call Trace: [ 340.972862][T13177] [ 340.972871][T13177] dump_stack_lvl+0x189/0x250 [ 340.972906][T13177] ? __pfx____ratelimit+0x10/0x10 [ 340.972936][T13177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.972966][T13177] ? __pfx__printk+0x10/0x10 [ 340.973002][T13177] should_fail_ex+0x414/0x560 [ 340.973041][T13177] _copy_to_user+0x31/0xb0 [ 340.973071][T13177] simple_read_from_buffer+0xe1/0x170 [ 340.973109][T13177] proc_fail_nth_read+0x1b3/0x220 [ 340.973149][T13177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.973181][T13177] ? rw_verify_area+0x2a6/0x4d0 [ 340.973209][T13177] ? __lock_acquire+0xab9/0xd20 [ 340.973228][T13177] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.973257][T13177] vfs_read+0x200/0xa30 [ 340.973286][T13177] ? fdget_pos+0x247/0x320 [ 340.973311][T13177] ? __pfx___mutex_lock+0x10/0x10 [ 340.973343][T13177] ? __pfx_vfs_read+0x10/0x10 [ 340.973375][T13177] ? __fget_files+0x2a/0x420 [ 340.973400][T13177] ? __fget_files+0x3a0/0x420 [ 340.973419][T13177] ? __fget_files+0x2a/0x420 [ 340.973450][T13177] ksys_read+0x145/0x250 [ 340.973482][T13177] ? __pfx_ksys_read+0x10/0x10 [ 340.973517][T13177] ? do_syscall_64+0xbe/0xfa0 [ 340.973551][T13177] do_syscall_64+0xfa/0xfa0 [ 340.973579][T13177] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.973609][T13177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.973631][T13177] ? clear_bhb_loop+0x60/0xb0 [ 340.973657][T13177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.973678][T13177] RIP: 0033:0x7fa07478e0dc [ 340.973697][T13177] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 340.973715][T13177] RSP: 002b:00007fa0756e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.973738][T13177] RAX: ffffffffffffffda RBX: 00007fa0749e5fa0 RCX: 00007fa07478e0dc [ 340.973754][T13177] RDX: 000000000000000f RSI: 00007fa0756e70a0 RDI: 0000000000000003 [ 340.973768][T13177] RBP: 00007fa0756e7090 R08: 0000000000000000 R09: 0000000000000000 [ 340.973781][T13177] R10: 0000000000000026 R11: 0000000000000246 R12: 0000000000000001 [ 340.973794][T13177] R13: 00007fa0749e6038 R14: 00007fa0749e5fa0 R15: 00007ffcd9b68d38 [ 340.973832][T13177] [ 341.483631][T13189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.827846][T13206] __nla_validate_parse: 6 callbacks suppressed [ 341.827868][T13206] netlink: 380 bytes leftover after parsing attributes in process `syz.5.2406'. [ 344.224716][T13267] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2427'. [ 344.238036][T13267] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2427'. [ 344.646659][T13283] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2433'. [ 344.697283][T13281] IPVS: persistence engine module ip_vs_pe_À not found [ 344.831455][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2440'. [ 344.844898][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2440'. [ 345.365900][T13320] netlink: 'syz.7.2445': attribute type 21 has an invalid length. [ 345.432944][T13320] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 345.475951][T13320] bond5 (unregistering): Released all slaves [ 345.712881][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 345.722515][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2451'. [ 345.757434][T13338] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 346.065870][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.106262][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.121071][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.150987][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.164946][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.414194][T13364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2461'. [ 346.645122][T13378] netlink: 'syz.8.2466': attribute type 10 has an invalid length. [ 346.692705][T13378] batadv0: left promiscuous mode [ 346.700499][T13378] bridge0: port 3(batadv0) entered disabled state [ 346.714882][T13381] netlink: 'syz.8.2466': attribute type 10 has an invalid length. [ 346.728474][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.730119][T13381] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2466'. [ 346.740176][T13378] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 346.761856][T13381] batadv0: entered promiscuous mode [ 346.768842][T13381] bond0: (slave batadv0): Releasing backup interface [ 346.782874][T13381] bridge0: port 3(batadv0) entered blocking state [ 346.816929][T13381] bridge0: port 3(batadv0) entered disabled state [ 346.874458][T13349] chnl_net:caif_netlink_parms(): no params data found [ 346.881872][T13385] __nla_validate_parse: 1 callbacks suppressed [ 346.881890][T13385] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2468'. [ 347.255147][T13349] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.267261][T13349] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.280372][T13349] bridge_slave_0: entered allmulticast mode [ 347.292665][T13349] bridge_slave_0: entered promiscuous mode [ 347.306043][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2470'. [ 347.316114][T13404] veth1_macvtap: Device is already in use. [ 347.338556][T13349] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.367822][T13349] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.378895][T13349] bridge_slave_1: entered allmulticast mode [ 347.388557][T13349] bridge_slave_1: entered promiscuous mode [ 347.617163][T13349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.658259][T13413] tipc: Enabling of bearer rejected, already enabled [ 347.679250][T13349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.850700][T13424] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2481'. [ 347.893961][T13349] team0: Port device team_slave_0 added [ 347.933116][T13349] team0: Port device team_slave_1 added [ 348.083398][T13349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.100595][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.130150][T13349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.144153][T13430] tipc: Enabled bearer , priority 0 [ 348.153526][T13430] syzkaller0: entered promiscuous mode [ 348.159510][T13430] syzkaller0: entered allmulticast mode [ 348.215797][T13429] tipc: Resetting bearer [ 348.255078][T13429] tipc: Disabling bearer [ 348.261720][ T6043] Bluetooth: hci5: command tx timeout [ 348.283877][T13349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.300171][T13349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.349657][T13349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.373733][T13439] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 348.409916][T13436] geneve3: entered promiscuous mode [ 348.431004][T13436] geneve3: entered allmulticast mode [ 348.485265][ T12] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 348.499468][ T12] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 348.633714][ T12] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 348.682285][T13349] hsr_slave_0: entered promiscuous mode [ 348.718550][T13349] hsr_slave_1: entered promiscuous mode [ 348.815083][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2492'. [ 348.817491][ T12] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 348.882241][T13452] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2489'. [ 349.092696][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2495'. [ 349.291385][T13476] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2498'. [ 349.365211][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2498'. [ 349.403323][T13476] bond4 (unregistering): Released all slaves [ 349.533047][T13349] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.575630][T13491] netlink: 'syz.6.2503': attribute type 1 has an invalid length. [ 349.651142][T13349] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.678727][T13494] tipc: Enabled bearer , priority 0 [ 349.687130][T13494] syzkaller0: entered promiscuous mode [ 349.694051][T13494] syzkaller0: entered allmulticast mode [ 349.774756][T13349] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.825091][T13494] tipc: Resetting bearer [ 349.918001][T13349] bond0: (slave netdevsim0): Releasing backup interface [ 349.935971][T13349] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.956558][T13500] delete_channel: no stack [ 350.119817][T13504] veth1_macvtap: Device is already in use. [ 350.221813][T13493] tipc: Resetting bearer [ 350.272937][T13493] tipc: Disabling bearer [ 350.339957][ T6043] Bluetooth: hci5: command tx timeout [ 350.380694][T13349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 350.393881][T13349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 350.456564][T13349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.509837][T13349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.658010][T13526] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2516'. [ 350.803688][T13349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.866278][T13349] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.915481][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.922735][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.994127][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.001373][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.040226][T13541] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2520'. [ 351.143582][T13545] veth1_macvtap: Device is already in use. [ 351.519405][T13349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.662183][T13349] veth0_vlan: entered promiscuous mode [ 351.675123][T13560] tipc: Enabling of bearer rejected, already enabled [ 351.735508][T13349] veth1_vlan: entered promiscuous mode [ 351.854088][T13349] veth0_macvtap: entered promiscuous mode [ 351.892353][T13349] veth1_macvtap: entered promiscuous mode [ 351.952656][T13349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.988879][T13349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.039460][T13569] __nla_validate_parse: 1 callbacks suppressed [ 352.039480][T13569] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2527'. [ 352.086735][T12792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.110070][T12792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.118838][T12792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.162610][T12792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.357268][T12790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.394582][T12790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.424501][ T6043] Bluetooth: hci5: command tx timeout [ 352.475418][T12783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.484708][T12783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.704981][T13587] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2535'. [ 353.407677][T13625] tipc: Enabled bearer , priority 0 [ 353.415748][T13625] syzkaller0: entered promiscuous mode [ 353.423048][T13625] syzkaller0: entered allmulticast mode [ 353.607034][T13635] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2551'. [ 354.119425][T13661] xt_l2tp: missing protocol rule (udp|l2tpip) [ 354.188419][T13625] tipc: Resetting bearer [ 354.226402][T13624] tipc: Resetting bearer [ 354.305879][T13624] tipc: Disabling bearer [ 354.501286][ T6043] Bluetooth: hci5: command tx timeout [ 354.588688][T13684] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2568'. [ 354.903687][T13699] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2573'. [ 355.298126][T13723] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2581'. [ 355.985181][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.002700][T13765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2596'. [ 356.007145][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.032316][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.074791][T13760] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 356.144963][T13760] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 356.248300][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.258733][T13772] netlink: 'syz.6.2599': attribute type 1 has an invalid length. [ 356.298059][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.307320][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.315780][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.325316][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.333593][T13760] hsr0 speed is unknown, defaulting to 1000 [ 356.592129][T13791] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 356.719305][T13797] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2611'. [ 356.730347][T13799] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2610'. [ 356.739478][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2610'. [ 357.123069][T13821] __nla_validate_parse: 1 callbacks suppressed [ 357.123089][T13821] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2618'. [ 357.443093][T13835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2623'. [ 357.793453][T13856] Cannot find map_set index 0 as target [ 357.801177][T13852] xt_CONNSECMARK: invalid mode: 0 [ 358.172610][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2636'. [ 358.199834][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2636'. [ 358.326218][T13887] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 358.366343][T13888] tipc: Enabled bearer , priority 0 [ 358.381431][T13888] syzkaller0: entered promiscuous mode [ 358.387058][T13888] syzkaller0: entered allmulticast mode [ 358.506676][T13884] tipc: Resetting bearer [ 358.559752][T13884] tipc: Disabling bearer [ 358.588595][T13896] vlan2: entered allmulticast mode [ 358.594663][T13896] hsr0: entered allmulticast mode [ 358.600855][T13896] hsr_slave_0: entered allmulticast mode [ 358.606740][T13896] hsr_slave_1: entered allmulticast mode [ 358.666376][T13900] batadv_slave_0: entered promiscuous mode [ 358.713556][T13899] batadv_slave_0: left promiscuous mode [ 359.016045][T13918] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 359.037693][T13918] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 359.065650][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 359.168979][T13922] netlink: 'syz.6.2655': attribute type 5 has an invalid length. [ 359.254539][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2656'. [ 359.312119][T13933] syz_tun: entered allmulticast mode [ 359.350063][T13931] syz_tun: left allmulticast mode [ 359.409109][T13938] netlink: 'syz.6.2663': attribute type 4 has an invalid length. [ 359.418245][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2663'. [ 359.724664][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2671'. [ 359.867511][T13960] syzkaller0: entered promiscuous mode [ 359.873494][T13960] syzkaller0: entered allmulticast mode [ 362.175311][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2696'. [ 362.211409][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.313968][T14025] bridge_slave_1 (unregistering): left allmulticast mode [ 362.322605][T14025] bridge_slave_1 (unregistering): left promiscuous mode [ 362.330359][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.332474][ T30] audit: type=1800 audit(1762401212.400:4): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2701" name="memory.events" dev="tmpfs" ino=235 res=0 errno=0 [ 362.360695][ T30] audit: type=1804 audit(1762401212.420:5): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2701" name="/newroot/43/memory.events" dev="tmpfs" ino=235 res=1 errno=0 [ 362.445478][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2702'. [ 362.454874][T14042] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2702'. [ 362.497877][T14044] netlink: 'syz.6.2703': attribute type 1 has an invalid length. [ 362.556587][T14044] bond6: entered promiscuous mode [ 362.562842][T14044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.915071][T14065] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2712'. [ 363.020931][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2715'. [ 363.040066][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2715'. [ 363.164756][T14080] netem: incorrect gi model size [ 363.176698][T14080] netem: change failed [ 363.264445][T14087] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2722'. [ 363.599152][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2729'. [ 363.629247][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2729'. [ 363.857616][T14122] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2738'. [ 363.959349][T14117] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 364.011521][T14126] netlink: 'syz.6.2740': attribute type 21 has an invalid length. [ 364.096968][T14126] vlan3: entered promiscuous mode [ 364.109224][T14126] vlan3: entered allmulticast mode [ 364.130675][T14130] syz_tun: entered allmulticast mode [ 364.171393][T14129] syz_tun: left allmulticast mode [ 364.189239][T14126] hsr0 speed is unknown, defaulting to 1000 [ 364.978580][T14174] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 365.003152][T14174] bond3 (unregistering): Released all slaves [ 365.082155][T14185] xt_hashlimit: overflow, try lower: 3/0 [ 365.665786][T14216] IPVS: length: 86 != 8 [ 365.992387][T14239] FAULT_INJECTION: forcing a failure. [ 365.992387][T14239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.010842][T14239] CPU: 0 UID: 0 PID: 14239 Comm: syz.6.2785 Not tainted syzkaller #0 PREEMPT(full) [ 366.010871][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.010889][T14239] Call Trace: [ 366.010898][T14239] [ 366.010907][T14239] dump_stack_lvl+0x189/0x250 [ 366.010944][T14239] ? __pfx____ratelimit+0x10/0x10 [ 366.010972][T14239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.011003][T14239] ? __pfx__printk+0x10/0x10 [ 366.011025][T14239] ? __might_fault+0xb0/0x130 [ 366.011068][T14239] should_fail_ex+0x414/0x560 [ 366.011106][T14239] _copy_to_iter+0x404/0x1790 [ 366.011134][T14239] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 366.011174][T14239] ? __pfx__copy_to_iter+0x10/0x10 [ 366.011195][T14239] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 366.011228][T14239] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 366.011266][T14239] __skb_datagram_iter+0xf8/0x990 [ 366.011294][T14239] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 366.011330][T14239] skb_copy_datagram_iter+0xc5/0x230 [ 366.011360][T14239] netlink_recvmsg+0x2ab/0xa30 [ 366.011393][T14239] ? __pfx_netlink_recvmsg+0x10/0x10 [ 366.011420][T14239] ? aa_sock_msg_perm+0xf1/0x1d0 [ 366.011454][T14239] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 366.011474][T14239] ? security_socket_recvmsg+0x7e/0x2e0 [ 366.011496][T14239] ? __pfx_netlink_recvmsg+0x10/0x10 [ 366.011518][T14239] sock_recvmsg+0x22c/0x270 [ 366.011552][T14239] ____sys_recvmsg+0x1c9/0x460 [ 366.011586][T14239] ? __pfx_____sys_recvmsg+0x10/0x10 [ 366.011628][T14239] ? import_iovec+0x74/0xa0 [ 366.011660][T14239] ___sys_recvmsg+0x1b5/0x510 [ 366.011691][T14239] ? __pfx____sys_recvmsg+0x10/0x10 [ 366.011748][T14239] ? __fget_files+0x3a0/0x420 [ 366.011781][T14239] do_recvmmsg+0x307/0x770 [ 366.011815][T14239] ? __pfx_do_recvmmsg+0x10/0x10 [ 366.011855][T14239] ? _copy_from_user+0x94/0xb0 [ 366.011900][T14239] __x64_sys_recvmmsg+0x1af/0x240 [ 366.011929][T14239] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 366.011959][T14239] ? do_syscall_64+0xbe/0xfa0 [ 366.011993][T14239] do_syscall_64+0xfa/0xfa0 [ 366.012022][T14239] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.012050][T14239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.012072][T14239] ? clear_bhb_loop+0x60/0xb0 [ 366.012098][T14239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.012125][T14239] RIP: 0033:0x7fa07478f6c9 [ 366.012145][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.012164][T14239] RSP: 002b:00007fa0756e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 366.012188][T14239] RAX: ffffffffffffffda RBX: 00007fa0749e5fa0 RCX: 00007fa07478f6c9 [ 366.012205][T14239] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 366.012220][T14239] RBP: 00007fa0756e7090 R08: 0000200000003700 R09: 0000000000000000 [ 366.012240][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.012253][T14239] R13: 00007fa0749e6038 R14: 00007fa0749e5fa0 R15: 00007ffcd9b68d38 [ 366.012289][T14239] [ 366.345212][ T56] block nbd2: Possible stuck request ffff888024a65080: control (read@0,1024B). Runtime 60 seconds [ 366.356464][ T56] block nbd2: Possible stuck request ffff888024a65240: control (read@1024,1024B). Runtime 60 seconds [ 366.367618][ T56] block nbd2: Possible stuck request ffff888024a65400: control (read@2048,1024B). Runtime 60 seconds [ 366.378822][ T56] block nbd2: Possible stuck request ffff888024a655c0: control (read@3072,1024B). Runtime 60 seconds [ 366.683595][T14264] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 366.737090][T14264] batadv0: entered allmulticast mode [ 366.752634][T14264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.763030][T14264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 366.773438][T14267] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 366.824101][T14264] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 366.833171][T14273] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 366.848686][T14267] batadv0: entered promiscuous mode [ 366.857179][T14267] bond0: (slave batadv0): Releasing backup interface [ 366.868287][T14267] bridge0: port 3(batadv0) entered blocking state [ 366.875583][T14267] bridge0: port 3(batadv0) entered disabled state [ 366.896149][T14264] batadv0: left promiscuous mode [ 366.908342][T14264] bridge0: port 3(batadv0) entered disabled state [ 366.934297][T14264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.952587][T14264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 366.961484][T14273] batadv0: entered promiscuous mode [ 366.971811][T14273] bond0: (slave batadv0): Releasing backup interface [ 366.989524][T14273] bridge0: port 3(batadv0) entered blocking state [ 366.996499][T14273] bridge0: port 3(batadv0) entered disabled state [ 367.072478][T14280] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 367.234766][T14293] __nla_validate_parse: 39 callbacks suppressed [ 367.234787][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 367.245901][T14295] syz_tun: entered allmulticast mode [ 367.280013][T14292] syz_tun: left allmulticast mode [ 367.350230][ T1101] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 367.360006][ T1101] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 367.449423][T14303] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 367.459235][T14303] netlink: 'syz.2.2803': attribute type 2 has an invalid length. [ 367.478281][T14307] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 367.490678][T14307] netlink: 'syz.2.2803': attribute type 2 has an invalid length. [ 367.895476][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2813'. [ 368.144417][T14342] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 368.202334][T14342] bond5 (unregistering): Released all slaves [ 368.300864][T14350] netlink: 'syz.8.2821': attribute type 1 has an invalid length. [ 368.308660][T14350] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2821'. [ 368.948205][T14393] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 369.254753][T14411] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 369.419435][T14427] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 369.482895][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2854'. [ 369.523594][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2854'. [ 369.602037][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2856'. [ 369.688713][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2856'. [ 369.688745][T12790] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.727737][T12790] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.752013][T12790] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.770373][T12790] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.844456][T14448] FAULT_INJECTION: forcing a failure. [ 369.844456][T14448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.873641][T14448] CPU: 0 UID: 0 PID: 14448 Comm: syz.5.2861 Not tainted syzkaller #0 PREEMPT(full) [ 369.873670][T14448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.873683][T14448] Call Trace: [ 369.873692][T14448] [ 369.873701][T14448] dump_stack_lvl+0x189/0x250 [ 369.873738][T14448] ? __pfx____ratelimit+0x10/0x10 [ 369.873767][T14448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.873795][T14448] ? __pfx__printk+0x10/0x10 [ 369.873817][T14448] ? __might_fault+0xb0/0x130 [ 369.873860][T14448] should_fail_ex+0x414/0x560 [ 369.873898][T14448] _copy_to_iter+0x589/0x1790 [ 369.873939][T14448] ? __pfx__copy_to_iter+0x10/0x10 [ 369.873960][T14448] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 369.874002][T14448] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 369.874035][T14448] __skb_datagram_iter+0xf8/0x990 [ 369.874062][T14448] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 369.874098][T14448] skb_copy_datagram_iter+0xc5/0x230 [ 369.874129][T14448] netlink_recvmsg+0x2ab/0xa30 [ 369.874161][T14448] ? __pfx_netlink_recvmsg+0x10/0x10 [ 369.874187][T14448] ? aa_sock_msg_perm+0xf1/0x1d0 [ 369.874222][T14448] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 369.874241][T14448] ? security_socket_recvmsg+0x7e/0x2e0 [ 369.874264][T14448] ? __pfx_netlink_recvmsg+0x10/0x10 [ 369.874285][T14448] sock_recvmsg+0x22c/0x270 [ 369.874319][T14448] ____sys_recvmsg+0x1c9/0x460 [ 369.874353][T14448] ? __pfx_____sys_recvmsg+0x10/0x10 [ 369.874395][T14448] ? import_iovec+0x74/0xa0 [ 369.874426][T14448] ___sys_recvmsg+0x1b5/0x510 [ 369.874457][T14448] ? __pfx____sys_recvmsg+0x10/0x10 [ 369.874508][T14448] ? __fget_files+0x3a0/0x420 [ 369.874541][T14448] do_recvmmsg+0x307/0x770 [ 369.874573][T14448] ? __pfx_do_recvmmsg+0x10/0x10 [ 369.874612][T14448] ? _copy_from_user+0x94/0xb0 [ 369.874656][T14448] __x64_sys_recvmmsg+0x1af/0x240 [ 369.874684][T14448] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 369.874714][T14448] ? do_syscall_64+0xbe/0xfa0 [ 369.874750][T14448] do_syscall_64+0xfa/0xfa0 [ 369.874778][T14448] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.874810][T14448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.874832][T14448] ? clear_bhb_loop+0x60/0xb0 [ 369.874858][T14448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.874879][T14448] RIP: 0033:0x7ffbb2f8f6c9 [ 369.874899][T14448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.874918][T14448] RSP: 002b:00007ffbb3e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 369.874942][T14448] RAX: ffffffffffffffda RBX: 00007ffbb31e5fa0 RCX: 00007ffbb2f8f6c9 [ 369.874958][T14448] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 369.874980][T14448] RBP: 00007ffbb3e38090 R08: 0000200000003700 R09: 0000000000000000 [ 369.874994][T14448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.875007][T14448] R13: 00007ffbb31e6038 R14: 00007ffbb31e5fa0 R15: 00007ffda3014888 [ 369.875044][T14448] [ 369.915312][T14453] xt_socket: unknown flags 0x50 [ 370.278193][T14466] FAULT_INJECTION: forcing a failure. [ 370.278193][T14466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.332603][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.8.2867 Not tainted syzkaller #0 PREEMPT(full) [ 370.332634][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.332648][T14466] Call Trace: [ 370.332657][T14466] [ 370.332667][T14466] dump_stack_lvl+0x189/0x250 [ 370.332710][T14466] ? __pfx____ratelimit+0x10/0x10 [ 370.332740][T14466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.332770][T14466] ? __pfx__printk+0x10/0x10 [ 370.332805][T14466] should_fail_ex+0x414/0x560 [ 370.332844][T14466] _copy_to_user+0x31/0xb0 [ 370.332875][T14466] simple_read_from_buffer+0xe1/0x170 [ 370.332913][T14466] proc_fail_nth_read+0x1b3/0x220 [ 370.332947][T14466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.332979][T14466] ? rw_verify_area+0x2a6/0x4d0 [ 370.333007][T14466] ? __lock_acquire+0xab9/0xd20 [ 370.333026][T14466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.333056][T14466] vfs_read+0x200/0xa30 [ 370.333084][T14466] ? fdget_pos+0x247/0x320 [ 370.333110][T14466] ? __pfx___mutex_lock+0x10/0x10 [ 370.333142][T14466] ? __pfx_vfs_read+0x10/0x10 [ 370.333174][T14466] ? __fget_files+0x2a/0x420 [ 370.333200][T14466] ? __fget_files+0x3a0/0x420 [ 370.333219][T14466] ? __fget_files+0x2a/0x420 [ 370.333250][T14466] ksys_read+0x145/0x250 [ 370.333279][T14466] ? __fget_files+0x2a/0x420 [ 370.333301][T14466] ? __pfx_ksys_read+0x10/0x10 [ 370.333335][T14466] ? do_syscall_64+0xbe/0xfa0 [ 370.333370][T14466] do_syscall_64+0xfa/0xfa0 [ 370.333398][T14466] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.333427][T14466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.333449][T14466] ? clear_bhb_loop+0x60/0xb0 [ 370.333475][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.333495][T14466] RIP: 0033:0x7ff7f738e0dc [ 370.333514][T14466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.333533][T14466] RSP: 002b:00007ff7f828d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.333556][T14466] RAX: ffffffffffffffda RBX: 00007ff7f75e5fa0 RCX: 00007ff7f738e0dc [ 370.333571][T14466] RDX: 000000000000000f RSI: 00007ff7f828d0a0 RDI: 0000000000000005 [ 370.333585][T14466] RBP: 00007ff7f828d090 R08: 0000000000000000 R09: 0000000000000000 [ 370.333598][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.333611][T14466] R13: 00007ff7f75e6038 R14: 00007ff7f75e5fa0 R15: 00007ffe06d3c548 [ 370.333653][T14466] [ 370.633340][T14470] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2869'. [ 370.643653][T14470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2869'. [ 370.884268][T14487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2877'. [ 371.051896][T14500] unsupported nlmsg_type 40 [ 371.334529][T14493] vlan0 (unregistering): left allmulticast mode [ 371.341764][T14493] veth0_vlan (unregistering): left allmulticast mode [ 371.348491][T14493] vlan0 (unregistering): left promiscuous mode [ 371.755091][T14499] syzkaller0: entered promiscuous mode [ 371.761405][T14499] syzkaller0: entered allmulticast mode [ 371.786216][T14506] tipc: Enabling of bearer rejected, failed to enable media [ 371.866590][T14516] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 372.283489][T14539] syz_tun: entered allmulticast mode [ 372.308354][T14538] syz_tun: left allmulticast mode [ 372.887772][T14575] syz_tun: entered allmulticast mode [ 372.927058][T14574] syz_tun: left allmulticast mode [ 373.625789][T14622] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 373.756119][T14627] __nla_validate_parse: 2 callbacks suppressed [ 373.756139][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2932'. [ 373.897532][T14635] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2934'. [ 374.070834][T14646] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2939'. [ 374.098654][T14647] vlan2: entered promiscuous mode [ 374.120903][T14647] bridge0: entered promiscuous mode [ 374.167888][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 374.185932][T14655] netlink: 'syz.7.2941': attribute type 1 has an invalid length. [ 374.193587][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 374.399515][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2944'. [ 374.418569][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2944'. [ 374.453689][T12790] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.501413][T12783] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.535456][T12783] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.593566][T12783] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.652789][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2947'. [ 375.113722][T14690] lo: entered promiscuous mode [ 375.149490][T14690] tunl0: entered promiscuous mode [ 375.163969][T14690] gre0: entered promiscuous mode [ 375.202337][T14690] gretap0: entered promiscuous mode [ 375.229145][T14690] erspan0: entered promiscuous mode [ 375.258661][T14690] ip_vti0: entered promiscuous mode [ 375.321830][T14696] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2956'. [ 375.416700][T14698] netlink: 'syz.2.2957': attribute type 1 has an invalid length. [ 375.443936][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 375.548086][T14698] bond1: option xmit_hash_policy: invalid value (64) [ 375.583042][T14698] bond1 (unregistering): Released all slaves [ 376.874538][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.907007][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.917455][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.928528][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.937927][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.988437][T14766] hsr0 speed is unknown, defaulting to 1000 [ 377.422613][T14766] chnl_net:caif_netlink_parms(): no params data found [ 377.457986][T14786] [ 377.460375][T14786] ====================================================== [ 377.467434][T14786] WARNING: possible circular locking dependency detected [ 377.474487][T14786] syzkaller #0 Not tainted [ 377.478926][T14786] ------------------------------------------------------ [ 377.485989][T14786] syz.7.2988/14786 is trying to acquire lock: [ 377.492096][T14786] ffffffff8f425d98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 377.501466][T14786] [ 377.501466][T14786] but task is already holding lock: [ 377.508857][T14786] ffff88802863f470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 377.518229][T14786] [ 377.518229][T14786] which lock already depends on the new lock. [ 377.518229][T14786] [ 377.528654][T14786] [ 377.528654][T14786] the existing dependency chain (in reverse order) is: [ 377.537682][T14786] [ 377.537682][T14786] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 377.545699][T14786] lock_acquire+0x120/0x360 [ 377.550771][T14786] _raw_spin_lock_bh+0x36/0x50 [ 377.556078][T14786] nr_rt_device_down+0x12a/0x720 [ 377.561548][T14786] nr_device_event+0x137/0x150 [ 377.566841][T14786] notifier_call_chain+0x1b6/0x3e0 [ 377.572485][T14786] __dev_notify_flags+0x18d/0x2e0 [ 377.578038][T14786] netif_change_flags+0xe8/0x1a0 [ 377.583504][T14786] dev_change_flags+0x130/0x260 [ 377.588895][T14786] dev_ioctl+0x7b4/0x1150 [ 377.593760][T14786] sock_do_ioctl+0x22c/0x300 [ 377.598884][T14786] sock_ioctl+0x576/0x790 [ 377.603746][T14786] __se_sys_ioctl+0xfc/0x170 [ 377.608874][T14786] do_syscall_64+0xfa/0xfa0 [ 377.613920][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.620393][T14786] [ 377.620393][T14786] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 377.628332][T14786] lock_acquire+0x120/0x360 [ 377.633551][T14786] _raw_spin_lock_bh+0x36/0x50 [ 377.638863][T14786] nr_rt_device_down+0xa9/0x720 [ 377.644265][T14786] nr_device_event+0x137/0x150 [ 377.649567][T14786] notifier_call_chain+0x1b6/0x3e0 [ 377.655224][T14786] __dev_notify_flags+0x18d/0x2e0 [ 377.660789][T14786] netif_change_flags+0xe8/0x1a0 [ 377.666261][T14786] dev_change_flags+0x130/0x260 [ 377.671658][T14786] dev_ioctl+0x7b4/0x1150 [ 377.676535][T14786] sock_do_ioctl+0x22c/0x300 [ 377.681662][T14786] sock_ioctl+0x576/0x790 [ 377.686523][T14786] __se_sys_ioctl+0xfc/0x170 [ 377.691646][T14786] do_syscall_64+0xfa/0xfa0 [ 377.696700][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.703213][T14786] [ 377.703213][T14786] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 377.711317][T14786] validate_chain+0xb9b/0x2140 [ 377.716705][T14786] __lock_acquire+0xab9/0xd20 [ 377.721908][T14786] lock_acquire+0x120/0x360 [ 377.726941][T14786] _raw_spin_lock_bh+0x36/0x50 [ 377.732339][T14786] nr_remove_neigh+0x25/0xe0 [ 377.737555][T14786] nr_add_node+0x1d9f/0x2570 [ 377.742678][T14786] nr_rt_ioctl+0xc12/0xd50 [ 377.747656][T14786] sock_do_ioctl+0xdc/0x300 [ 377.752871][T14786] sock_ioctl+0x576/0x790 [ 377.757737][T14786] __se_sys_ioctl+0xfc/0x170 [ 377.762869][T14786] do_syscall_64+0xfa/0xfa0 [ 377.767922][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.774440][T14786] [ 377.774440][T14786] other info that might help us debug this: [ 377.774440][T14786] [ 377.784678][T14786] Chain exists of: [ 377.784678][T14786] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 377.784678][T14786] [ 377.798524][T14786] Possible unsafe locking scenario: [ 377.798524][T14786] [ 377.806076][T14786] CPU0 CPU1 [ 377.811453][T14786] ---- ---- [ 377.816826][T14786] lock(&nr_node->node_lock); [ 377.821610][T14786] lock(nr_node_list_lock); [ 377.828830][T14786] lock(&nr_node->node_lock); [ 377.836146][T14786] lock(nr_neigh_list_lock); [ 377.840856][T14786] [ 377.840856][T14786] *** DEADLOCK *** [ 377.840856][T14786] [ 377.849009][T14786] 1 lock held by syz.7.2988/14786: [ 377.854128][T14786] #0: ffff88802863f470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 377.863923][T14786] [ 377.863923][T14786] stack backtrace: [ 377.870062][T14786] CPU: 1 UID: 0 PID: 14786 Comm: syz.7.2988 Not tainted syzkaller #0 PREEMPT(full) [ 377.870087][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.870098][T14786] Call Trace: [ 377.870105][T14786] [ 377.870113][T14786] dump_stack_lvl+0x189/0x250 [ 377.870143][T14786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.870167][T14786] ? __pfx__printk+0x10/0x10 [ 377.870184][T14786] ? stack_trace_save+0x9c/0xe0 [ 377.870219][T14786] print_circular_bug+0x2ee/0x310 [ 377.870243][T14786] check_noncircular+0x134/0x160 [ 377.870268][T14786] validate_chain+0xb9b/0x2140 [ 377.870300][T14786] __lock_acquire+0xab9/0xd20 [ 377.870319][T14786] ? nr_remove_neigh+0x25/0xe0 [ 377.870341][T14786] lock_acquire+0x120/0x360 [ 377.870356][T14786] ? nr_remove_neigh+0x25/0xe0 [ 377.870381][T14786] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.870405][T14786] ? nr_remove_neigh+0x25/0xe0 [ 377.870426][T14786] _raw_spin_lock_bh+0x36/0x50 [ 377.870448][T14786] ? nr_remove_neigh+0x25/0xe0 [ 377.870469][T14786] nr_remove_neigh+0x25/0xe0 [ 377.870492][T14786] nr_add_node+0x1d9f/0x2570 [ 377.870514][T14786] ? __asan_memcpy+0x40/0x70 [ 377.870538][T14786] ? nr_call_to_digi+0x126/0x1b0 [ 377.870559][T14786] nr_rt_ioctl+0xc12/0xd50 [ 377.870584][T14786] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 377.870603][T14786] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.870632][T14786] ? apparmor_capable+0x137/0x1b0 [ 377.870655][T14786] ? capable+0x89/0xe0 [ 377.870673][T14786] ? nr_ioctl+0x1b1/0x3b0 [ 377.870689][T14786] sock_do_ioctl+0xdc/0x300 [ 377.870714][T14786] ? __pfx_sock_do_ioctl+0x10/0x10 [ 377.870743][T14786] sock_ioctl+0x576/0x790 [ 377.870765][T14786] ? __pfx_sock_ioctl+0x10/0x10 [ 377.870787][T14786] ? __fget_files+0x3a0/0x420 [ 377.870802][T14786] ? __fget_files+0x2a/0x420 [ 377.870819][T14786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.870839][T14786] ? __pfx_sock_ioctl+0x10/0x10 [ 377.870859][T14786] __se_sys_ioctl+0xfc/0x170 [ 377.870882][T14786] do_syscall_64+0xfa/0xfa0 [ 377.870906][T14786] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.870929][T14786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.870946][T14786] ? clear_bhb_loop+0x60/0xb0 [ 377.870966][T14786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.870983][T14786] RIP: 0033:0x7f8ad4d8f6c9 [ 377.871000][T14786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.871016][T14786] RSP: 002b:00007f8ad5c58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.871035][T14786] RAX: ffffffffffffffda RBX: 00007f8ad4fe5fa0 RCX: 00007f8ad4d8f6c9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.871049][T14786] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000007 [ 377.871061][T14786] RBP: 00007f8ad4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.871072][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.871083][T14786] R13: 00007f8ad4fe6038 R14: 00007f8ad4fe5fa0 R15: 00007ffdee2e04e8 [ 377.871104][T14786] [ 378.360197][T14766] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 378.507558][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.526234][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.579652][ T6043] Bluetooth: hci5: command tx timeout [ 378.824517][T14803] syz_tun (unregistering): left allmulticast mode [ 378.897004][T14779] syz_tun (unregistering): left allmulticast mode [ 378.962311][T14786] syz_tun (unregistering): left allmulticast mode [ 378.986270][ T6233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.997208][ T6233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.064776][ T6233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.075586][ T6233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.104973][ T6233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.115368][ T6233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.177022][ T6233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.187777][ T6233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.332845][ T6233] bond1 (unregistering): (slave gre2): Releasing backup interface [ 379.341100][ T6233] gre2 (unregistering): left promiscuous mode [ 379.458245][ T6233] bond0 (unregistering): Released all slaves [ 379.543067][ T6233] bond1 (unregistering): Released all slaves [ 379.554078][ T6233] bond2 (unregistering): Released all slaves [ 379.563827][ T6233] bond3 (unregistering): Released all slaves [ 379.573452][ T6233] bond4 (unregistering): Released all slaves [ 379.584111][ T6233] bond5 (unregistering): Released all slaves [ 379.672614][ T6233] bond6 (unregistering): Released all slaves [ 379.735275][ T6233] tipc: Disabling bearer [ 379.741025][ T6233] tipc: Left network mode [ 379.878146][ T6233] hsr_slave_0: left promiscuous mode [ 379.886351][ T6233] vlan0: left allmulticast mode [ 379.891485][ T6233] veth0_vlan: left allmulticast mode [ 379.896804][ T6233] vlan0: left promiscuous mode [ 379.902957][ T6233] veth1_macvtap: left promiscuous mode [ 379.908664][ T6233] veth1_vlan: left promiscuous mode [ 379.914017][ T6233] veth0_vlan: left promiscuous mode [ 380.045539][ T6233] team0 (unregistering): Port device veth0_virt_wifi removed [ 380.447088][ T6233] IPVS: stop unused estimator thread 0... [ 380.668585][ T6233] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.679398][ T6233] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.726653][ T6233] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.737114][ T6233] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.775545][ T6233] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.785928][ T6233] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.835068][ T6233] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.845671][ T6233] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.922521][ T6233] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.933999][ T6233] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.972492][ T6233] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.982638][ T6233] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.043411][ T6233] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.053584][ T6233] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.092639][ T6233] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.102454][ T6233] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.184423][ T6233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.215092][ T6233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.254723][ T6233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.305995][ T6233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.361641][ T6233] team0: left allmulticast mode [ 381.366560][ T6233] team_slave_0: left allmulticast mode [ 381.372839][ T6233] team_slave_1: left allmulticast mode [ 381.378338][ T6233] dummy0: left allmulticast mode [ 381.386071][ T6233] team0: left promiscuous mode [ 381.391588][ T6233] team_slave_0: left promiscuous mode [ 381.397130][ T6233] team_slave_1: left promiscuous mode [ 381.403186][ T6233] dummy0: left promiscuous mode [ 381.408222][ T6233] bridge0: port 3(team0) entered disabled state [ 381.415868][ T6233] bridge_slave_0: left allmulticast mode [ 381.421563][ T6233] bridge_slave_0: left promiscuous mode [ 381.427217][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.438408][ T6233] bridge0: port 3(batadv0) entered disabled state [ 381.446311][ T6233] bridge_slave_1: left allmulticast mode [ 381.452063][ T6233] bridge_slave_1: left promiscuous mode [ 381.457749][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.467982][ T6233] bridge_slave_0: left allmulticast mode [ 381.473754][ T6233] bridge_slave_0: left promiscuous mode [ 381.479406][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.492548][ T6233] bridge0: port 3(batadv0) entered disabled state [ 381.500660][ T6233] bridge_slave_1: left allmulticast mode [ 381.506342][ T6233] bridge_slave_1: left promiscuous mode [ 381.512220][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.521439][ T6233] bridge_slave_0: left allmulticast mode [ 381.527088][ T6233] bridge_slave_0: left promiscuous mode [ 381.533245][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.640472][ T6233] bond2 (unregistering): (slave gretap1): Releasing active interface [ 381.648598][ T6233] gretap1 (unregistering): left promiscuous mode [ 381.655289][ T6233] gretap1 (unregistering): left allmulticast mode [ 381.844893][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.855491][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.865514][ T6233] bond0 (unregistering): Released all slaves [ 381.951623][ T6233] bond1 (unregistering): Released all slaves [ 382.041361][ T6233] bond2 (unregistering): Released all slaves [ 382.123172][ T6233] bond3 (unregistering): Released all slaves [ 382.205373][ T6233] bond4 (unregistering): Released all slaves [ 382.215480][ T6233] bond5 (unregistering): Released all slaves [ 382.225292][ T6233] bond6 (unregistering): Released all slaves [ 382.301912][ T6233] bond1 (unregistering): (slave gretap1): Releasing active interface [ 382.311103][ T6233] gretap1 (unregistering): left promiscuous mode [ 382.317469][ T6233] gretap1 (unregistering): left allmulticast mode [ 382.547840][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.558034][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.567952][ T6233] bond0 (unregistering): Released all slaves [ 382.584194][ T6233] bond1 (unregistering): Released all slaves [ 382.595104][ T6233] bond2 (unregistering): Released all slaves [ 382.662856][ T6233] bond0 (unregistering): Released all slaves [ 382.741210][ T6233] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 382.786049][ T6233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.796136][ T6233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.806141][ T6233] bond0 (unregistering): Released all slaves [ 382.895844][ T6233] tipc: Disabling bearer [ 382.902750][ T6233] tipc: Left network mode [ 382.909454][ T6233] tipc: Disabling bearer [ 382.915280][ T6233] tipc: Disabling bearer [ 382.927956][ T6233] tipc: Left network mode [ 383.389763][ T6233] hsr_slave_0: left promiscuous mode [ 383.395532][ T6233] hsr_slave_1: left promiscuous mode [ 383.401404][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.408797][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.416658][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.425468][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.436532][ T6233] hsr_slave_0: left promiscuous mode [ 383.442340][ T6233] hsr_slave_1: left promiscuous mode [ 383.448018][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.455495][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.463603][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.471123][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.481988][ T6233] hsr_slave_0: left promiscuous mode [ 383.487672][ T6233] hsr_slave_1: left promiscuous mode [ 383.494553][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.502016][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.509751][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.517230][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.531767][ T6233] veth1_macvtap: left promiscuous mode [ 383.537301][ T6233] veth0_macvtap: left promiscuous mode [ 383.545340][ T6233] veth1_macvtap: left promiscuous mode [ 383.551149][ T6233] veth0_macvtap: left promiscuous mode [ 383.556837][ T6233] veth1_vlan: left promiscuous mode [ 383.562188][ T6233] veth0_vlan: left promiscuous mode [ 383.568178][ T6233] veth1_macvtap: left promiscuous mode [ 383.573799][ T6233] veth0_macvtap: left promiscuous mode [ 383.579475][ T6233] veth1_vlan: left promiscuous mode [ 383.585325][ T6233] veth0_vlan: left promiscuous mode [ 383.732101][ T6233] pim6reg (unregistering): left allmulticast mode [ 383.787741][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 383.808390][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 383.881651][ T6233] team0 (unregistering): Port device dummy0 removed [ 383.990800][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 384.012824][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 384.280335][ T6233] team0 (unregistering): Port device team_slave_1 removed [ 384.304865][ T6233] team0 (unregistering): Port device team_slave_0 removed [ 385.154916][ T6233] IPVS: stop unused estimator thread 0... [ 385.161693][ T6233] IPVS: stop unused estimator thread 0... [ 385.641111][ T6233] ------------[ cut here ]------------ [ 385.646608][ T6233] WARNING: CPU: 1 PID: 6233 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 385.656550][ T6233] Modules linked in: [ 385.660573][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 385.670266][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.680615][ T6233] Workqueue: netns cleanup_net [ 385.685434][ T6233] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 385.691136][ T6233] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b ac 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 89 99 1a f8 e8 14 f7 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 f7 d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 385.711036][ T6233] RSP: 0018:ffffc90002ef7878 EFLAGS: 00010293 [ 385.717130][ T6233] RAX: ffffffff89eb0d5c RBX: ffff888078c0a480 RCX: ffff88802c965ac0 [ 385.725154][ T6233] RDX: 0000000000000000 RSI: ffffffff8bbf05c0 RDI: ffff88802c965ac0 [ 385.733253][ T6233] RBP: ffffc90002ef7990 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e [ 385.741626][ T6233] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: ffffffff8f3c6340 [ 385.749720][ T6233] R13: 1ffff920005def3c R14: ffff888078c0b940 R15: dffffc0000000000 [ 385.757715][ T6233] FS: 0000000000000000(0000) GS:ffff88812623c000(0000) knlGS:0000000000000000 [ 385.766748][ T6233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.773656][ T6233] CR2: 00007fa351fb1700 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 385.781733][ T6233] Call Trace: [ 385.785030][ T6233] [ 385.787965][ T6233] xfrm_net_exit+0x2d/0x70 [ 385.792545][ T6233] ops_undo_list+0x49a/0x990 [ 385.797179][ T6233] ? __pfx_ops_undo_list+0x10/0x10 [ 385.802661][ T6233] ? do_raw_spin_unlock+0x122/0x240 [ 385.807877][ T6233] cleanup_net+0x4d8/0x820 [ 385.812379][ T6233] ? __pfx_cleanup_net+0x10/0x10 [ 385.817348][ T6233] ? rcu_is_watching+0x15/0xb0 [ 385.822255][ T6233] ? process_scheduled_works+0x9ef/0x17b0 [ 385.828013][ T6233] ? process_scheduled_works+0x9ef/0x17b0 [ 385.834100][ T6233] process_scheduled_works+0xae1/0x17b0 [ 385.839751][ T6233] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.845770][ T6233] worker_thread+0x8a0/0xda0 [ 385.850432][ T6233] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 385.856793][ T6233] ? __kthread_parkme+0x7b/0x200 [ 385.862120][ T6233] kthread+0x711/0x8a0 [ 385.866239][ T6233] ? __pfx_worker_thread+0x10/0x10 [ 385.871443][ T6233] ? __pfx_kthread+0x10/0x10 [ 385.876085][ T6233] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.881361][ T6233] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.886673][ T6233] ? __pfx_kthread+0x10/0x10 [ 385.891640][ T6233] ret_from_fork+0x4bc/0x870 [ 385.896343][ T6233] ? __pfx_ret_from_fork+0x10/0x10 [ 385.901511][ T6233] ? __switch_to_asm+0x39/0x70 [ 385.906297][ T6233] ? __switch_to_asm+0x33/0x70 [ 385.911120][ T6233] ? __pfx_kthread+0x10/0x10 [ 385.915943][ T6233] ret_from_fork_asm+0x1a/0x30 [ 385.921153][ T6233] [ 385.924187][ T6233] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 385.931493][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 385.940945][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.951000][ T6233] Workqueue: netns cleanup_net [ 385.955776][ T6233] Call Trace: [ 385.959054][ T6233] [ 385.961985][ T6233] dump_stack_lvl+0x99/0x250 [ 385.966580][ T6233] ? __asan_memcpy+0x40/0x70 [ 385.971174][ T6233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.976373][ T6233] ? __pfx__printk+0x10/0x10 [ 385.980974][ T6233] vpanic+0x237/0x6d0 [ 385.984988][ T6233] ? __pfx_vpanic+0x10/0x10 [ 385.989510][ T6233] panic+0xb9/0xc0 [ 385.993245][ T6233] ? __pfx_panic+0x10/0x10 [ 385.997688][ T6233] __warn+0x31b/0x4b0 [ 386.001684][ T6233] ? xfrm_state_fini+0x26d/0x2f0 [ 386.006632][ T6233] ? xfrm_state_fini+0x26d/0x2f0 [ 386.011589][ T6233] report_bug+0x2be/0x4f0 [ 386.015931][ T6233] ? xfrm_state_fini+0x26d/0x2f0 [ 386.020882][ T6233] ? xfrm_state_fini+0x26d/0x2f0 [ 386.025827][ T6233] ? xfrm_state_fini+0x26f/0x2f0 [ 386.030775][ T6233] handle_bug+0x84/0x160 [ 386.035024][ T6233] exc_invalid_op+0x1a/0x50 [ 386.039532][ T6233] asm_exc_invalid_op+0x1a/0x20 [ 386.044394][ T6233] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 386.049987][ T6233] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b ac 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 89 99 1a f8 e8 14 f7 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 f7 d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 386.070043][ T6233] RSP: 0018:ffffc90002ef7878 EFLAGS: 00010293 [ 386.076128][ T6233] RAX: ffffffff89eb0d5c RBX: ffff888078c0a480 RCX: ffff88802c965ac0 [ 386.084281][ T6233] RDX: 0000000000000000 RSI: ffffffff8bbf05c0 RDI: ffff88802c965ac0 [ 386.092266][ T6233] RBP: ffffc90002ef7990 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e [ 386.100376][ T6233] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: ffffffff8f3c6340 [ 386.108371][ T6233] R13: 1ffff920005def3c R14: ffff888078c0b940 R15: dffffc0000000000 [ 386.116366][ T6233] ? xfrm_state_fini+0x26c/0x2f0 [ 386.121415][ T6233] ? xfrm_state_fini+0x26c/0x2f0 [ 386.126366][ T6233] xfrm_net_exit+0x2d/0x70 [ 386.130798][ T6233] ops_undo_list+0x49a/0x990 [ 386.135507][ T6233] ? __pfx_ops_undo_list+0x10/0x10 [ 386.140650][ T6233] ? do_raw_spin_unlock+0x122/0x240 [ 386.145875][ T6233] cleanup_net+0x4d8/0x820 [ 386.150321][ T6233] ? __pfx_cleanup_net+0x10/0x10 [ 386.155274][ T6233] ? rcu_is_watching+0x15/0xb0 [ 386.160053][ T6233] ? process_scheduled_works+0x9ef/0x17b0 [ 386.165869][ T6233] ? process_scheduled_works+0x9ef/0x17b0 [ 386.171611][ T6233] process_scheduled_works+0xae1/0x17b0 [ 386.177265][ T6233] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.183267][ T6233] worker_thread+0x8a0/0xda0 [ 386.187877][ T6233] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.194222][ T6233] ? __kthread_parkme+0x7b/0x200 [ 386.199188][ T6233] kthread+0x711/0x8a0 [ 386.203275][ T6233] ? __pfx_worker_thread+0x10/0x10 [ 386.208419][ T6233] ? __pfx_kthread+0x10/0x10 [ 386.213030][ T6233] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.218240][ T6233] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.223465][ T6233] ? __pfx_kthread+0x10/0x10 [ 386.228071][ T6233] ret_from_fork+0x4bc/0x870 [ 386.232674][ T6233] ? __pfx_ret_from_fork+0x10/0x10 [ 386.237800][ T6233] ? __switch_to_asm+0x39/0x70 [ 386.242568][ T6233] ? __switch_to_asm+0x33/0x70 [ 386.247350][ T6233] ? __pfx_kthread+0x10/0x10 [ 386.251963][ T6233] ret_from_fork_asm+0x1a/0x30 [ 386.256737][ T6233] [ 386.260043][ T6233] Kernel Offset: disabled [ 386.264371][ T6233] Rebooting in 86400 seconds..