last executing test programs: 7.497300412s ago: executing program 3 (id=2844): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00030000200000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="020000001400010000000000000000000000ffdd"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_buf(r4, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/ipc\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000007c0)=0xe8) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r8, 0x8919, 0x0) r9 = getgid() sendmmsg$unix(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="edf29b59b9f1ae8eba7e39c3a5452e85e860585d56224922417ba12e4023ed12a8e6159216207330d3a0e4643807add6cbdb557fedaecb7ffff2c3f042f95edb439704804b66b6860d24c5cbb71c2a56919cc3ca879b72e52093a19d3f5d22698f71fdde6658ec667b6b806dd04201921b3e3210f229b6249956f775ad1b19568944bea12f4d1dd73389283ea8d1b51cad705baa2ff19c25aabaa41870925fd14179dd448bf78d646aaf5fc9005aaca4ca7e91d78add7d20575454a9b8a50345bc028c948d525f0561944218ea45ce1bc3b41299956be53adbd49155bfefd029893374de3762c13d1d136151f211c00cf281e8e9ccb32bc9", 0xf8}, {&(0x7f0000000480)="cfd250fb4f5894bbbb0abab2c30a4fb6d1582d6d7f7f1be8d68d5e8caeb3a48254bca30dc72103203fb7f0b6c89d0ff1a6f7314ad6e3040fa389890696fd50e08b6604a8b7f15f3f3cc6fc0a03165f2a557050cb2760da9e3d02744ce178bc408a4b1b300115f5b6f0919f1561f2eaeddb8339e3897f3296e75e1ec193d731a9", 0x80}, {&(0x7f0000000500)="75beea4bf1cdce73c9be0763db509d6c0af0ada29d5261a93f79c9f519ac102cde890ff48ab0b9ad890021c7ab0c3cf50f5235919789cc59cfbb727cf73fe9090d80cacfbdbca865b246cef1810af1e6a483cfaca9ac62c78a8da66ba18d5d76487b80adf51f99c6b47b3f381efe11c534e4f11084339059c5c538f6c84fcb62483f0a3a621ac6060cda754ed00ee793722e719371b98ee222d8a9de02c9db", 0x9f}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0001000000", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20000001}}], 0x1, 0x20000) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000edffffffffffffff0000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000200000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) connect$unix(r1, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) 6.521386408s ago: executing program 3 (id=2847): r0 = socket(0x2b, 0x1, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) unshare(0x40080) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000540800000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) 4.984519016s ago: executing program 2 (id=2852): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 13) 4.464818146s ago: executing program 2 (id=2853): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.598295042s ago: executing program 2 (id=2856): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0x4, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x14, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @alu={0x4, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffc0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x289}]}, {0x2f, 0x6, "8959c987bb08ec906a9b84a7e0d45273be7e66f169d622da4e615871f2f9000000000096ed000000800000"}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400a156940e67c0ee4ad3dfc83b9ede036e6636b6ebfeedff3e7026e9a0c983e8926a942abdb643a8113d6babf99466655994ed229a1b9db61b2ec6456bea6b220c71246f4dfbd1e52ef18c999746521d10ec402cc2f3835454e68e01b70e8df287d83633f5029e96608eaeadf029ea217cefd0ace66046b0df7e"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003eacef4227bd7000cbf3000002101000fe0400010020002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x2004085) 3.295654648s ago: executing program 4 (id=2858): r0 = socket$can_bcm(0x1d, 0x2, 0x2) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="b157cc05064ed43c71bad1cc37", 0xd}, {&(0x7f0000000040)="5d449fa1eef216dd94a76ff82896997dc5f8e209e416c41a9ec568930b82a7c03a33cd353774f3e313b9f6e3740408abbb5f427f6d24e3892888343bc6a8a9f3d5033a711605a68102409e487e46fa1022e8942fc89a997759b8e8767b3d4a9b1476c6c1bb0b1686ae3c56f20bbe190578148b1d9d0c10b4", 0x78}, {&(0x7f00000000c0)="d108e700c311dbc5446cc6da3e8b2c37d4a7f23ebf2b10047c0978bdaa0aaeda8343e1743ab0064df81a1d465e32352d312e1080328beeee6443e0c9846481a14339d390723af7130f638017840688faa66adfcc2731299a7c87b7983a2d14022c52356873ed9f3a1ab8bbb0393c8e94ad75cad9280289f10efc52ce34ed24013ae94535c453804d411131a1ec8d8f00762309ea177187234c15e955", 0x9c}, {&(0x7f00000002c0)="61e9b0ecdc2a880a37170e8f8ab881327db7d26fcf8982ba427c66e8f6cca5e08393234e8ec47d4a4b9567c5a8a8b32762feeaad299eab4246acb6fe905079d2ddf023d26a1030b757bee219dd13ea3e5231a8d49bed45ce8be02f6a637e338f744b35ea244b6d9cb90ae3a6264445a5944a8364952cc294bdbe8ffde3c7f0cb080c0c898a9590e93e04b48bfb031eec06785dfedf348aa8e8334a88", 0x9c}, {&(0x7f0000000380)="3df991f6cefabe297f", 0x9}, {&(0x7f00000003c0)="ff852326a424acd2c914d6fe676169c8a3b3c5b9dd9a4665d6db2f9ab08d498e43aaf7b8542fa3d5751c2131706140ec895d919cf5e354396eb5422a9e7aeda178de2d1fc4ab2d3e4e073b5a86b373b6df581d2d94d10aa1efea3f5ecbac7493f9589095d92c6c1895cb81e755725a49c4b1da0528642f8b732caf139c9bb13cd708dddb090d0467a45b3f1c494f51e33c011a6285f399e8312686e34ae4349ecddc24f7e9ca0686bd50300813c03bd4a733", 0xb2}], 0x6) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006a00010029bd7000fedbdf250200000000000000080001000100"], 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0xb, 0x12) 3.038492878s ago: executing program 4 (id=2860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000080)) ioctl$TUNSETOWNER(r5, 0x400454cc, 0xee01) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r7, 0x25, 0x4, @void}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e837474512fcaea99bc671e3d", 0x12}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000400)="9f52141c0fb098", 0x7}], 0x5) 2.670745081s ago: executing program 0 (id=2863): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r2, 0x89ef, &(0x7f0000000200)="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") sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xa4, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}, @nested={0x85, 0x93, 0x0, 0x1, [@generic="d6f571f22922f9429fc35fdd466ac5fb1b77d08f9b37f63fbdcb8fbe3273e4773727b801e147d180ca0befacb9273da6824346d78dd303ffca21415e1df5915042e0169279b05cf1d0f23004b40c45c2029b65b089cb52df91", @generic, @generic="0c6264c2921f842828ea932b28efdc4b2cbaed3a55376384f94ba5240692a19a3c7911764c14b448"]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) socket(0x8, 0x2, 0x6) 2.54326318s ago: executing program 3 (id=2864): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@acquire={0x248, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0xfffffff9, 0x0, 0x0, 0x8}, [@tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}, @algo_comp={0x8c, 0x3, {{'deflate\x00'}, 0x220, "70a9e2be47ea2c841ba208d42e5f0a03316ba387fddc04d61242a445d29449d88a3d5f67efcc3a2f40227a0dfe324bece208644521ee3fe878b25ac3dc8b4e8e852af97e"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @tfcpad={0x8, 0x16, 0x5}]}, 0x248}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x2, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket(0x5, 0x5, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r7, 0x4) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) 2.534022732s ago: executing program 0 (id=2865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0xef3c, 0x0, 0x543}, {}, {0x5, 0x22}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.45804202s ago: executing program 4 (id=2866): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.385400758s ago: executing program 0 (id=2867): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x29, 0x7, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {0xffff, 0xffe0}, {0x2, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000850) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbe) 1.777331248s ago: executing program 0 (id=2870): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x14, 0x2, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000005c0)) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000005980)={0x29a4, 0x4d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0xcf, 0x69, 0x0, 0x1, [@generic="0420633a053ad97203748d1b58202547c6af148bfbe1557707fc22d042e7c4cbd8c42feb4480aeebb4662bcb54a3d6c198579709c9d0617fcf8f705ed5ad49a78bd97db55d68c78dbf65a9efbec4c0798151b352e47c8708f4671849bcdd69108685aedaf77f89a3efa144903ed117151f3bf918b0456b8fc95b41c97c1f23ba5c5d6c5f486ef95d64cbe0bf6bc23ae1c19db4751dc19d72e2aa32628f5f96886c8387082998d12d9a81a76ee2b8fd195fdbb0a331bdda", @nested={0xa, 0xc9, 0x0, 0x1, [@generic="72431fe0f092"]}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x7}]}, @generic="5dc834844a1cfc1e8b982878ead2c7b246fc46f6ab37418b62d2abbfdf772878546f53d445d36fd5bfe3f50718164ac83efa6919096ab878c27e7c5b1ad36bda19eca9e16d38c652fda7e67509b4cd00bb189f23a8cac4a05609a32a3b5d4caed83c82f9237632a150a8fd359cabe1", @nested={0x4, 0x72}, @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x27e8, 0x43, 0x0, 0x1, [@generic="d638825a2e27bc418ec957a138e28e96d6161e62b2768e9dbba6149507e7", @generic="8c0baba06fc511cd17fb147b465d20deae60b1", @nested={0x150b, 0x67, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x138}, @nested={0x4, 0x15b}, @generic="c0cbe0349fc33275a57c4cda45993bdff39448c035965eb43c9ccdca3fc923f176c943d6a232109d861ce080b7eddc02454730855452f3bfe4c472aece4d499d29bd0c3e74e4aca0491d4f4a0b06a5e99c1b0de1a4b9f315a9e93d1dcfaf46cc798a73c3b357066ceee9bfdd114ee144567d7b743991efccf0fa0a6907581f", @nested={0x4, 0xc6}, @nested={0x4, 0xf5}, @typed={0x8, 0x13f, 0x0, 0x0, @fd=r4}, @nested={0x1464, 0x133, 0x0, 0x1, [@nested={0x1fb, 0xf9, 0x0, 0x1, [@typed={0xc, 0x5a, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x28}, @generic="19110b47fdd91a4d0f9c197a020770777ee503adcdd24b57e78a65d1e7eb1929a53b877e1900fea97565c79e8292bca652945d4a457138fb10299d069e76a9fdd42f2db3f5bfc9eb3d72dbd2f8210e7750c5a589be7b42b311c37cc55c22d22867f5094548c450a88652c16c251cbd520ece794fbf581fc2128f71244717739f2898eb65d0605f56b3a854c3dd502ef32aa8400a1608a8efd10bfed723641f6e918620fc978472c2e146fd", @typed={0xac, 0x107, 0x0, 0x0, @binary="c74045b5d2ff2facd1bb71c60d668e3a74c637efbad206673220f9a63f7448eef76ef3bb80736f8116e2d5170fb935b99f27f13621874c89d01e6766876f5e37bbd1a63cb4aecabd44bc2e1371b58eca92486ccb74f695e84657aacefafb60884223210f7ef5e162d8ecc723459dc03ff73ab0c2cbfa7bbdee2d89c0b7b641191dec9338915b44b67f896623afe1823c868a2d3054fd1bf60e4cf6107a672fedc2410262a5308d5c"}, @generic="ceeb372afd7cc1c8080013a8baf7adb8dea877a4262ecfb27c400408f11a53420219dbada0e7586e8f992418da70135b81c4c0902d2d6c1524afd92e6178b0126a678022185513e0897e4dd2d354b34fef70478f8ca36a9808649ca6cc9f7b4bf40418499e3e3602805a621dcf926a8c9d4479fd6594d342b6a7226524c80bb9", @typed={0x8, 0x45, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xaf, 0x0, 0x0, @pid=r6}]}, @nested={0xb6, 0xe5, 0x0, 0x1, [@generic="1a6610797addc62f99c54136f1712a4b0bdb32bd81413f5d9805ba65081cc165080710519f7c203395cc1b2720324b4ea0368e1288e293aff41a3d4ef67f2cd2dea621198cf56d340efdab5a86789d887451d6bdc9845e0c064221ed099ec650418daccda0093f0d46bd507e261d3ad0e5aa3333dcd1d83dab517539c95df997b3c1f016df65d7bd2422efb59b19cb0a4c24db5c2eb05b4a98cd0245677dcf5cfea4cfb10ee8971f07", @typed={0x4, 0x132}, @generic="bc73917bc2"]}, @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@remote}, @nested={0xd3, 0xef, 0x0, 0x1, [@generic="b88e2c3144409c23fdf291994dedd45cf4537e5fdf98a7204a3b959157a83c705f840c12e3e294ccf6587c4d9b05e7329eb2a07964ec0c4c2e29a8847355f354a7a700f4de5447fd3178d627a3efb0895f037c4aa72c291fd0945e830c82933e6cbdf38a46dbe750dd825e519e21a4fd05adc145efcb3a59aae83a24b39863ce0967fad90efe7f0711c7a0551b5239326771cdb313828f0e73d1969bb1eff77f1ba6ec260810a8b0f5a4dad950540b6ce7813ca10f57e81ee591e117c22d130908de1be4e6fac4c2b49c3ff46eb1a8"]}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r0}, @nested={0x10ba, 0x32, 0x0, 0x1, [@generic="27e16a3326b9e015c25448cfe81235df85", @generic="208ddce431a942513418234f39442b71aa42a630f73fa939bbb2119c67aebad0141412c24fa1e67bdf3ab39736a62aecc15a58d69e10d3cd284bda6fe9fe2f9ed9a9c1cd14525341cf7c001bf19f777a59119767876393a3015aa48fc0cfeba5fe0cf6f045e0d523ea65d25f15c502ae2ddcb0b880a14d44d06a38e73f4756dbacff45b5377118d3e9f4ce554034b206b440bc01495024395bd5b8424e28d6d5bb23d42f8b", @generic="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"]}]}]}, @nested={0x10d7, 0x7, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x130}, @generic="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", @generic="bedb55619c8878f6243ba161cab08a2fc4be94c6c6580f2319c62e98b1294d33655fdafc681ddb002ab4168a362a4fe020c201728b26c1de0279c63956c379c009c14248b3a7045487da38c0f0ac4a7939e69f7b81b2f588839845950273e9dc5b9e5421f21c1ca97dad084bf03bd27332ba02146155d5d5a849eb76771eb1efa0511618ddd7f6c4b5e2d21d1d63ad6b1a60dba78aff1e3b43c3f7a1c5d7e0808d63a2124455e6ccf6b94a6012a9e9dd38cf9c20e35fde721e53b838572a9c7a958f415522d7e8"]}, @generic="e86fdfbaa877c1bf593420d2c75cc833296afb0da504198b50227b739221035451e549f753168487972bfff84123237ff4dcf87b38e0e3d311f3e858183e2e36ee0452903079a3169648e9dc85cbc15029a9172909f7df556c8d39f7a471a59c169f289300d6634c2ca8a1c55d9a4e6098c7cc09f7adff38fd12127c0b6b99d1baa01d2bcfe4a23d55eee4011d6c04b459da9e4ec11e47aa0ee90736e240e0780aa5c899dace59f1cbfed197adb581a6f72d8d998667de9000b3a68a9db6dcaec9f9594927c725886f671f51c52a3f4f27", @typed={0x8, 0x66, 0x0, 0x0, @u32=0xdb9}, @generic="c7e8d6e556abc7b7bd912968656be36f15ec07417096127aba9a03ec958e1cf67d18fdf7a97c5d4c25f14018f43544d47ef070d54d13a5380139cc82397767bdb289ab872cb84cbb286179afbac9b0048c3bb686e7cf46c2", @generic="dfd585485fbad4deec33c7447489c91b55802545de1d74dc0167d0eac2965ff02fcdd7b96cd0ebfbdd328486692a5d", @generic="6541d58aa6296eb3e522c9cf73b00b1ae189510aca6ab6b53b2189691a70825ef88130812ab54c1320a37f37b53f899e5ce387e4a0ba3203ce647af109c63d0b2773d63776cccc2885ae37ecabf5d74e509af9f30452deb51f50d70c9f2889021b8c6f7bcd8dc4eff989851aeb99a1"]}, @generic="4af7dde4012d0398183c894567b669ee67f65fe1357b2759e7a699f7b609ddff1906f68238af8fc3e3fd7e5332c22381cc1f87183a0ecb3e265d715cc3eada2be31482230cf7173204e80c5aca4d3dddba"]}, 0x29a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7}, 0x8) shutdown(r2, 0x0) 1.672893933s ago: executing program 1 (id=2871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) r2 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0xc000600) getsockopt(r2, 0x111, 0x1, 0x0, 0x0) 1.487110291s ago: executing program 1 (id=2872): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400f5ff1000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.433634063s ago: executing program 3 (id=2873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000550001002cbd7000c0ff0dbe07000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01030400000000000000000000000000000000000800000020000100", @ANYRES32=r1, @ANYBLOB="010200002001000000000000000000000000000086dd0000"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) socket$inet6(0xa, 0x2, 0x0) 1.381618569s ago: executing program 4 (id=2874): r0 = socket$inet6(0xa, 0x4, 0xf) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111cf000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socket$xdp(0x2c, 0x3, 0x0) 1.244357018s ago: executing program 1 (id=2875): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000001c110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe0231368b2264f94504c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b1b0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd208bc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000001c110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe0231368b2264f94504c9f1f65515b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b1b0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7909413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd208bc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) (async) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0xc) connect$x25(r5, &(0x7f0000000a80), 0x12) (async) connect$x25(r5, &(0x7f0000000a80), 0x12) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getchain={0x24, 0x66, 0x280d90fc67e14a3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffe0}, {0xfff1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.22757222s ago: executing program 0 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x8, 0x7, 0x8000, 0x2, 0x8, 0x40, 0x4, 0x4, 0x8, 0x3ff, 0x7, 0x5e, 0x8, 0xb, 0x8, [0xffffffff, 0x9]}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="190000000400e8ff030000000200000000000000a3cd07780f5c035b6dd0487b6e434011002aeffc8bd78708eae49b5ace3577809855350cec7081f713b17983ceea63a31b0e22ef15cec605c9e7d1d8699e19212c9f861f828084238c122e12887535d3213714e4e29195290167ab4de582f67d91f5a885fa228c91f504fa958673275bb4f7284c31bf613f2d1b7df0fa5155575823d649449b8dd4c28b09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="66ecc5", 0xfffffffffffffe53}], 0x1, 0xa) write$tun(0xffffffffffffffff, 0x0, 0x4a) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="010823"], 0x3) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000540)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001000)={{}, r3, 0xa, @unused=[0x8001, 0x1ff, 0x2, 0x8], @subvolid=0x400000000000}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x1, 0x3, 0xfffffff3, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x66, 0x0, 0xfc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, {[@rr={0x7, 0x13, 0x89, [@rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @multicast2]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000280)={@private2, 0x7c, r8}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r5], 0x48) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2], 0xd8}, 0x1, 0x0, 0x0, 0x4c815}, 0x400c085) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='d', @ANYRES16=r13, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a28000180080001000000"], 0x64}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf251800000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="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", @ANYBLOB, @ANYBLOB], 0x25c}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030025bd7000fedbdf250100000008000200020000000800010001000000aa7c25e66d7e4ec1ff2ef885029089342df4b66b0f294f8bbbbba64a629025a907e1ee60f3052c10227fd48762681ab73055f71f46a7f038d12b5a2ce51c35e98ea8c2274d525f535f99355607a8629669940954037e71d6d44727a9650305c039807623b805012f52ff8436d422e4d08cdee903ef5eb7539eadc712ba4df0cecd03aef86ac5c2d058e1"], 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 1.190587528s ago: executing program 3 (id=2877): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x220408d0}, 0x20000040) write(r1, &(0x7f0000000880)="1c0000001a009b8a144000001492c45d81975867f2bc5d17953b9b30", 0x1c) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3f, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) 1.128939482s ago: executing program 2 (id=2878): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x42}}], 0x18}, 0x440e0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffff7}, 0x94) 996.851369ms ago: executing program 1 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) 995.580177ms ago: executing program 4 (id=2880): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 16) 876.267421ms ago: executing program 1 (id=2881): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (fail_nth: 50) shutdown(r0, 0x2) 870.054708ms ago: executing program 2 (id=2882): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000640)=r0}, 0x20) 7.624855ms ago: executing program 1 (id=2883): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000640)=r0}, 0x20) (fail_nth: 1) 6.953549ms ago: executing program 4 (id=2884): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 4.872334ms ago: executing program 2 (id=2885): r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011126f90ef97069e", 0x8a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYBLOB="40a9384824eabf84d30861196d24a3403ff04a", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x3, 0x3, 0xff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000001c0012800d0000000003000947ba4e37643ab2f1e5da16bbba7f2900"], 0x3c}}, 0x28000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x4, 0x1, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xf, 0x1, 0x200, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r11 = openat$cgroup(r8, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r11, r9, 0x32, 0x14, 0x0, @void, @value=r12, @void, @void, r10}, 0x20) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x17, &(0x7f0000000480)=@raw=[@ldst={0x1, 0x2, 0x6, 0x0, 0xa, 0xfffffffffffffffc, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc97}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x2a, &(0x7f00000005c0)=""/42, 0x41000, 0x28, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x5, 0x3, 0xe5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x1, 0x1, 0x1, r6, 0x1], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback=r13, 0xffffffffffffffff, 0x24, 0x8, 0x0, @void, @value=r14, @void, @void, r10}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r15 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x8, [{0xfffffffd, 0x7fffc}, {0x301, 0xffffffff}, {0xffffffff, 0x10000}, {0x10000, 0x8000}, {0x69, 0x6}, {0x6, 0x401}, {0x40, 0x8}, {0xd, 0xf9}]}}) 1.534225ms ago: executing program 3 (id=2886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40440c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x14, 0x2, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000005c0)) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000005980)={0x29a4, 0x4d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0xcf, 0x69, 0x0, 0x1, [@generic="0420633a053ad97203748d1b58202547c6af148bfbe1557707fc22d042e7c4cbd8c42feb4480aeebb4662bcb54a3d6c198579709c9d0617fcf8f705ed5ad49a78bd97db55d68c78dbf65a9efbec4c0798151b352e47c8708f4671849bcdd69108685aedaf77f89a3efa144903ed117151f3bf918b0456b8fc95b41c97c1f23ba5c5d6c5f486ef95d64cbe0bf6bc23ae1c19db4751dc19d72e2aa32628f5f96886c8387082998d12d9a81a76ee2b8fd195fdbb0a331bdda", @nested={0xa, 0xc9, 0x0, 0x1, [@generic="72431fe0f092"]}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x7}]}, @generic="5dc834844a1cfc1e8b982878ead2c7b246fc46f6ab37418b62d2abbfdf772878546f53d445d36fd5bfe3f50718164ac83efa6919096ab878c27e7c5b1ad36bda19eca9e16d38c652fda7e67509b4cd00bb189f23a8cac4a05609a32a3b5d4caed83c82f9237632a150a8fd359cabe1", @nested={0x4, 0x72}, @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x27e8, 0x43, 0x0, 0x1, [@generic="d638825a2e27bc418ec957a138e28e96d6161e62b2768e9dbba6149507e7", @generic="8c0baba06fc511cd17fb147b465d20deae60b1", @nested={0x150b, 0x67, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x8, 0xd8, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x138}, @nested={0x4, 0x15b}, @generic="c0cbe0349fc33275a57c4cda45993bdff39448c035965eb43c9ccdca3fc923f176c943d6a232109d861ce080b7eddc02454730855452f3bfe4c472aece4d499d29bd0c3e74e4aca0491d4f4a0b06a5e99c1b0de1a4b9f315a9e93d1dcfaf46cc798a73c3b357066ceee9bfdd114ee144567d7b743991efccf0fa0a6907581f", @nested={0x4, 0xc6}, @nested={0x4, 0xf5}, @typed={0x8, 0x13f, 0x0, 0x0, @fd=r4}, @nested={0x1464, 0x133, 0x0, 0x1, [@nested={0x1fb, 0xf9, 0x0, 0x1, [@typed={0xc, 0x5a, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x28}, @generic="19110b47fdd91a4d0f9c197a020770777ee503adcdd24b57e78a65d1e7eb1929a53b877e1900fea97565c79e8292bca652945d4a457138fb10299d069e76a9fdd42f2db3f5bfc9eb3d72dbd2f8210e7750c5a589be7b42b311c37cc55c22d22867f5094548c450a88652c16c251cbd520ece794fbf581fc2128f71244717739f2898eb65d0605f56b3a854c3dd502ef32aa8400a1608a8efd10bfed723641f6e918620fc978472c2e146fd", @typed={0xac, 0x107, 0x0, 0x0, @binary="c74045b5d2ff2facd1bb71c60d668e3a74c637efbad206673220f9a63f7448eef76ef3bb80736f8116e2d5170fb935b99f27f13621874c89d01e6766876f5e37bbd1a63cb4aecabd44bc2e1371b58eca92486ccb74f695e84657aacefafb60884223210f7ef5e162d8ecc723459dc03ff73ab0c2cbfa7bbdee2d89c0b7b641191dec9338915b44b67f896623afe1823c868a2d3054fd1bf60e4cf6107a672fedc2410262a5308d5c"}, @generic="ceeb372afd7cc1c8080013a8baf7adb8dea877a4262ecfb27c400408f11a53420219dbada0e7586e8f992418da70135b81c4c0902d2d6c1524afd92e6178b0126a678022185513e0897e4dd2d354b34fef70478f8ca36a9808649ca6cc9f7b4bf40418499e3e3602805a621dcf926a8c9d4479fd6594d342b6a7226524c80bb9", @typed={0x8, 0x45, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xaf, 0x0, 0x0, @pid=r6}]}, @nested={0xb6, 0xe5, 0x0, 0x1, [@generic="1a6610797addc62f99c54136f1712a4b0bdb32bd81413f5d9805ba65081cc165080710519f7c203395cc1b2720324b4ea0368e1288e293aff41a3d4ef67f2cd2dea621198cf56d340efdab5a86789d887451d6bdc9845e0c064221ed099ec650418daccda0093f0d46bd507e261d3ad0e5aa3333dcd1d83dab517539c95df997b3c1f016df65d7bd2422efb59b19cb0a4c24db5c2eb05b4a98cd0245677dcf5cfea4cfb10ee8971f07", @typed={0x4, 0x132}, @generic="bc73917bc2"]}, @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@remote}, @nested={0xd3, 0xef, 0x0, 0x1, [@generic="b88e2c3144409c23fdf291994dedd45cf4537e5fdf98a7204a3b959157a83c705f840c12e3e294ccf6587c4d9b05e7329eb2a07964ec0c4c2e29a8847355f354a7a700f4de5447fd3178d627a3efb0895f037c4aa72c291fd0945e830c82933e6cbdf38a46dbe750dd825e519e21a4fd05adc145efcb3a59aae83a24b39863ce0967fad90efe7f0711c7a0551b5239326771cdb313828f0e73d1969bb1eff77f1ba6ec260810a8b0f5a4dad950540b6ce7813ca10f57e81ee591e117c22d130908de1be4e6fac4c2b49c3ff46eb1a8"]}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r0}, @nested={0x10ba, 0x32, 0x0, 0x1, [@generic="27e16a3326b9e015c25448cfe81235df85", @generic="208ddce431a942513418234f39442b71aa42a630f73fa939bbb2119c67aebad0141412c24fa1e67bdf3ab39736a62aecc15a58d69e10d3cd284bda6fe9fe2f9ed9a9c1cd14525341cf7c001bf19f777a59119767876393a3015aa48fc0cfeba5fe0cf6f045e0d523ea65d25f15c502ae2ddcb0b880a14d44d06a38e73f4756dbacff45b5377118d3e9f4ce554034b206b440bc01495024395bd5b8424e28d6d5bb23d42f8b", @generic="67cc1618b267f58d5c972330938854cff38ea202ec13541a483070741352c5f0156d879981a6678f36bdb78d4712a84537909eb21120134020c85c72065d31540349b45dac7aaf582885c4efccf2a24dd63d1ca16e20781ef416cfbf7b99126cf1d7c8d0f951ec55c9fbe90b948cf4da1f365e8acd09a02a157af3b4198e5fb10fd141dda57d7e28cab91b97db561cf5819cae4512f984544033b21415095c3f35685470828a0573dc7ea4688f0c234f958d4cb9aa1dd0bcbbf534945a19fce090d6b698e33e2fcb3da52c402cdb712dcc26d531e321d7e690c1a8a711fdeee94ab89cd79ae0c0bac7b84c73dfe0f58b28dd4976fd4028905bfc3eee7a2078c8290b5f1845cb737e01e543a5c3e91610aefb0b83d5a5f13b6843e800b2f1daf2f1988ca8afad5944e6838a1b5c4d767989793c91017c80758eb5c4c855e867c49871c30523ded327c3b0d7cf439cf8e243fbc9d00498a1b769d035b993a7cbf3a1e2aa0323abc18876dc34b5505db1d49a05e1d0af1436d24f8ebe9da7d381628bc7aab84dcc9cbdb8e77712d827d458e7465f81bc17facfb9ddb435fc7ddbe4d859add6267d2cab0e204974685ed945526b48da518b302600b963d512d15e5767b8dc85fdd58e7bfe61252bd40352b792a2731e479d0f44df4f677ce2125651687fbe0cd70e0e9940e89847b8e5ca1734242785d5c97e9964888661c53321c50828f83b1575ba81a2f263c6510dc37a22cd9b1fe83170718bf7d68985990d0075805a2149d8531e1719fc69a2ff36aa5c2a7fccef068805432b38c28c74205f6e57cf7cc5b38335b64ab70d197921c29950b3122efab48f4b98df636347c960af59137b37f925fd4e8c00c842e776bf8144e5961777c50ab9e7514807164ec642219f627716a46d8f061c06b05019b9f32979bbd8610dbd8615597e6f097bd7a19ba30bfc6b7023557dcc80279fcab222f4fb1cf69f9b21c2dedfc40d7acbca1c1b3b412c3ee0fa22e9c4f76206ab7d8ec643aa8e9effa4f6f2163fba33b56189d480189cc5c6dafdfbe742d2ff08d8ed16c5d0055c624ecdf2fcae501525007f8995aa10db3c5b1808f0156de982b75254e1a258e6317577d787bddf4eee5450d9667f5e17fcae16b7380264f6c7d9274bb13e4320bee3e0c0c00d6691e98063f9011aacb0c150be909f18a38200493db7cdccbcee44de31f439312e91424acef968f9dda178b6758e3da34c7958775cbbdde92028358d41378db3b91cda67580eec954371bbac8d4302ad957d8fd7407eb2a0dff78c332354cf71ee1814b22bb62f9c9aac88d06e5ee59c1b68ebbed36a6ba7a39d23d9f38a366027f3926c95ccf71ec7b82712fdf7933022bf4f65cffdeceb5562102f88e0876ccbe4683644387e91762b5cb88b6d04ee668e8b9ca7e8563c2f96957fb7b230e3bfaee4e0319beceb4e3107706f1667650c295a776bc764e63540023c147bde03e6cb40ea702fdadf78e76130d69c035bc1310681f6c3f8ad1c6d5bdcfe7d341b15bb482f59e557894c52baffcc780779f230a81da58b7ed7e32b4925d845f1654bc548097136f2e3427670e7d194ba8a3ef10c65186a18502a4e1303ae4b17c23d5a7acdf8b7dc26c273474ca73da02fb3f0c73791d8dadb9bcc76ffd7c6068f22b6ddfd2e0ffa7854632c427dda62e8ea0fdbae02dec85e964e3bd3694ec148e4e4c99b18e7e5a3a0c99b7265f45378479eb314b07a630f968dc3e0f94e3f9a46708591866f606301facfa036a4e638bde49e5b60bdf357f284e8e2cde5ec73f8e2662d384bf453a89fb9eafc84335882896006d52db8e38aea52c94f4edb75e0d7f47692a7099024163a2426d97341099248ceb1b3d9697e788c5722eddcbd8e77938f5576dc9473e34759d7e5c0061a1d9336451eb65ce5afa187f2c927588e173127a63a358eb32086622ec95a5f4ecd7c9b5d53d94bc974ebe7be58529ad82c455d3e7ee9766827fc29bbe64e7bb90434a119aaf520478057280d684b06c19c702a3093f2868c5c1c359077dea91222ff1bb5fcdcb66699415e37b60b907a2d5aa9a86bd8a5000f04b062a6f10ec23c5c2556f5d006cbd557dda9f2a70d9521050b229c0fa78052395024fcfcd518d647c610390f405b8d2df3f50515d550d296c912905a8d037b555740b38107dce4a13998a3f298f1cb78ad7533e45b4b15f6f5d3cd4c809cb2fc50c0e27ffd342f3cc4747e925ff33546c305ae463e2572c88d062f455094da3118c526dc434b1a133a78acb20b2b0862ff0b07c97fb4fefec5d2320a048eec20109d592e3382e88f9cef0a216bcfb55d9bde0ccc412b8eb8ecca383351332ba4c284c2b314cbdead3c20372c06e4c303fba7ef01633601338d8770334272018024a115e13d3769b916b5ae6bd5b2d582f47a81dc296e5a2b7151a7e01e2dd78013f2f241498286927213c0bc03f41313b3fc79682f683d0954dc321c937a1322fe1a49225afd5c5997e3fc78aa73f75211162a8c1e8bf6d476d50bb264a388d0abcd57ee00e52b8199a8daeff1dc3e4fbea502fb66eba57fb9207e4693618c3ddea1c8ac2cf9ff29a66f37dce30d5f92f69f007dc66dbac1c333d4e29359c3d57c68ebe60323c3ce294afa8637d47dbdfffdb199d425b2484b856cff5babe5f35f833f604b091405d3f28a1695efe0b66f5f79ce0e0a775f2243f99a45820ada8374514dd6d3745d69a0a3a1b1cabf83c6b0607f428b5f6d03b2fdcb9fe92b1cdae067f61c81ca3779ac3ecc18f2138973edc86e705568916050eb3d1ff63838b0bed5e02af7ebf589c52af2a99218be3f6b458d1a76c8e4d0f0fd37242af13dce9a4af522339dde22fed2536313d23b3066664fe3f66e87892ad58304078f2ce289f4d49e418b118973b1c118fde5e60862d8e8692d3fd529058080ef00e1efb1649710bea247cbd5aff1851269b86ae6d148d6414eff0a4b437fde5c3547afb7f29bd5969cb580d1fd43153d2186b6cb827ec136d6b98de0b9a5878ab329d4feb27fb976b9c6ebe1ef7804f12624926892689aab61ff0ad9a13f0ab247eb317752de76023e473bd3a1d5588e7bc8cddf32ba8f73489c016499e5f4358cfbd848ec8ca4cb5d9f99e6b06508f6a84b2a28e2a9e7aa1b808f0aacb7435b05122427cc1bfbf059e405816a71570cd553d317bd8b170cb9afd8c0c1f97c26d536db43011f5a59f8240404071d031be82eece4be9cae2c24672a66933215c56494f6dc4648a4874db0843d3896ab35da8984a763651e43f96dfd623153d0eff07df8d9fba3226af0bfb1e9eac18474031394eb2bcdc679fbac9ca808cb84ff258cb6852ff3a3d39ea796ee48bc2951538759c6e27fba618c712b55dcafa7b8c5f1318322717ea662575335bba99664c802e87900aee5a41b38800c60360b657e630234313e9493ab8aa67a107d221812dae1d078cfa4e4bdff0a6fa88369b151514535cb18bdb23717c64c5e201dc9b249fad5fa8661c97da6eb1f52b0c0b4db9caaae6742f5f1bf20548294c24c323bbc8283a09b2a0567b807487a05b7d916afd747680a61ea801718786463aa46e558fd8ba48162e6b86628b702d3bcec460508cc4bb4b82ff65ce1d7a5604a07d9ed07e3a4b4b8f9f0de10d42875b5a26e133a427c4490162eeff7c28d24fd6308aebd641e88bd9933d490a2e621e6ae6540e22e3621effa16dacf9a7a5b2e98d160bc1deb7fd79a412530c1c4cbc031e0806ae2bbb61dfced9efb9e079ec8a49dabfa935b0bdaace5378058b63b989745b8b44c10116c87ece70d30fee549751de84ad47c0780e293b6d6e9f9efda5860c291d46c4d65419a3dd107b2bdc08a38071cc7b48c4f936cc4f780f1e6aad0f38647ac55b3fc1a906987da9756a1e7d86e053d1601ee56f0cafaf5c19f75941e6d34d462179e684ca38ca81ed39332a1e48e0902f87eaa87817bb25d58983642bea1e918484dc085514cd81d0ac96538712deb76335fd3af86668e8ee8bb501afe14d4ff9fa512def5607b467f828af5412af7ce93514ac506afb9bb094ad29ae3f2bf8479e1b6be37d998bfe93dcedc5124a0cae44d1362414162cd9021932cc83d02658f07254ac663685770019bba6527ce48d9f91769ea012df2d88db8229685f5377e75cb6c97206b1a3aaf9cabd9a3df1ad78a6834888f15fc82e46f01d46d7ac820db1e8a2aa51fa523402ddfb988735326aff2b3c693aeb65975867c6a8a3f393233b1ebc0f9b229884a72d3db00485b3a5818521176e711a3bb1f4adba2367bab9599e197440b72e3b8876e003daca406fb5b675712352b8785e584e61a5a22c0abb5c14dcdd9d27b214b803c939c6f7a11cb6671719e88ddbfa501e31f952d6b241ef40308fa51db1af70d9d82b56f29a50dcbe53eda80fd58993acc899302307ed161de7f131c664f302b976f9640e65f991ce6efdb6b7cd683d3e51e70558314446f4419e6c21797fb8134ace1b71e89f7045a9a8bde0d126faff4a8a313d8ef270661ad8e51ef3b9667e0faa37ef417a99ffc3a078c00e814dc8e08d90009d1a14203230a712b1bb6cfbef158f9a0ba1c44baeb69ea665421ae4a9c432a71239c90ae659a4c7efe133276fee64a13df19e86c18afedc11f8f2a87281059c7c244ff604174cc5a19d90894b01f3efb8e2950b8803dfa4c3b184900d4aafa09489698395ec4f3ec12bdeca0aecee671541779b9cdbec07c4b14d2c7e9e94f6b94a235ee4c09f52ac59813062035971bc215e9eef9c99ac66f39644171e4cc0e91f2b0578d5cae1430fa7dc9d68c8b80da0652dd90dc6bb59d91eecc8088de8ea6e5eb69bf0ce635e20ef401d094a4b456c3cbd5d2a7ce7e68b2f99608ab805c3067ed64d5e10b619707b1d9ec76376423b52eb51a69979cc2d679599f7e1d5fabd5e17895faf0c9cfc566012fd3be4e1d34e28365f09b93be477f0cc057e801c505e2a72343d9ec020e86d518e41c23898d8692dc5773da3721a9b76c3564c0de4bb009d732e99d5ecb69ce6642e7e330f6cd8f763df6b1ca1aae750e783f191a1853f5d726603a7a1bd2d27428d1a9fcfc5c2ce7151e69728e2877dfe7011a223fd7736cf7470aef1eefd20f4424a883e7b3abd65dadb14a0f74b53d9be02db5a4ac2df96bad524edd39a2ed15ebc869f949c38db8e433f9b4e19823f84c36359c5320b762588d001dce8268f002ef590d565c0848eaa5dae3f11496fe00c8d34bc7d3d02383e975754f7b4b78d52669fb4d2b3f56df63fad1d43b6ceea7b5358593adc937cfe7cded6de9efe0657cf9c8bcd0540176c74da3ab84728456d2938d78fb6a2808328e407c2bee787671f8c9607d330250ec5cb1032e792bbd0c4b8fee33202d47ae709e01a45bea2a7c697e48ea106433d2b23b5972a8674bb98573f9f09ae768116899d8a0ce0818fa365fd23e5ec28db55c28656e159e9af4458dabc1c734941d7ca505265e29fbe0330babf0225ab9669a1aa617e2690ce6ed8347f41fa3b8c68b52a424d47c976e56055d2d6bf4b8e96a98de0e4ce81f335e0232a88880a5f6f0e6558f660a69a04eaf5621df77dfa3a2d2e5b86bb85b96918efca266fe72af3deeea11492e19c3ddbc3ac09d6aeaf222dab6c160188667181a53da87ed6a0f5e789aabc7f86f81bb8862248a34ec6d79bcb9ee71cd6e0b62e4317bdc3a3658d542a47b191738ad965e634aa338a670e588d684d76fd4a6d9e52e365f3e63e8f30d8af0a5b08fe0c17a45089db8"]}]}]}, @nested={0x10d7, 0x7, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x130}, @generic="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", @generic="bedb55619c8878f6243ba161cab08a2fc4be94c6c6580f2319c62e98b1294d33655fdafc681ddb002ab4168a362a4fe020c201728b26c1de0279c63956c379c009c14248b3a7045487da38c0f0ac4a7939e69f7b81b2f588839845950273e9dc5b9e5421f21c1ca97dad084bf03bd27332ba02146155d5d5a849eb76771eb1efa0511618ddd7f6c4b5e2d21d1d63ad6b1a60dba78aff1e3b43c3f7a1c5d7e0808d63a2124455e6ccf6b94a6012a9e9dd38cf9c20e35fde721e53b838572a9c7a958f415522d7e8"]}, @generic="e86fdfbaa877c1bf593420d2c75cc833296afb0da504198b50227b739221035451e549f753168487972bfff84123237ff4dcf87b38e0e3d311f3e858183e2e36ee0452903079a3169648e9dc85cbc15029a9172909f7df556c8d39f7a471a59c169f289300d6634c2ca8a1c55d9a4e6098c7cc09f7adff38fd12127c0b6b99d1baa01d2bcfe4a23d55eee4011d6c04b459da9e4ec11e47aa0ee90736e240e0780aa5c899dace59f1cbfed197adb581a6f72d8d998667de9000b3a68a9db6dcaec9f9594927c725886f671f51c52a3f4f27", @typed={0x8, 0x66, 0x0, 0x0, @u32=0xdb9}, @generic="c7e8d6e556abc7b7bd912968656be36f15ec07417096127aba9a03ec958e1cf67d18fdf7a97c5d4c25f14018f43544d47ef070d54d13a5380139cc82397767bdb289ab872cb84cbb286179afbac9b0048c3bb686e7cf46c2", @generic="dfd585485fbad4deec33c7447489c91b55802545de1d74dc0167d0eac2965ff02fcdd7b96cd0ebfbdd328486692a5d", @generic="6541d58aa6296eb3e522c9cf73b00b1ae189510aca6ab6b53b2189691a70825ef88130812ab54c1320a37f37b53f899e5ce387e4a0ba3203ce647af109c63d0b2773d63776cccc2885ae37ecabf5d74e509af9f30452deb51f50d70c9f2889021b8c6f7bcd8dc4eff989851aeb99a1"]}, @generic="4af7dde4012d0398183c894567b669ee67f65fe1357b2759e7a699f7b609ddff1906f68238af8fc3e3fd7e5332c22381cc1f87183a0ecb3e265d715cc3eada2be31482230cf7173204e80c5aca4d3dddba"]}, 0x29a4}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7}, 0x8) shutdown(r2, 0x0) 0s ago: executing program 0 (id=2887): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) unshare(0x20000400) socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f00000001c0), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800007, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, r6, 0x639346aa, '\x00', 0x0, r6, 0x60, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="18ebfff100000000000000611e919fba33b05a00", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000300000018280000", @ANYRES32, @ANYBLOB="0000000005000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) bind$can_raw(r0, &(0x7f0000000480), 0x10) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000100)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf5, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) kernel console output (not intermixed with test programs): 024kB (M) 2*2048kB (U) 963*4096kB (M) = 3953804kB [ 260.995652][T13246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.006333][T13246] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.016618][T13246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.025119][T13282] bridge0: left allmulticast mode [ 261.026703][T13246] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.041117][T13246] 44656 total pagecache pages [ 261.046627][T13246] 0 pages in swap cache [ 261.060836][T13246] Free swap = 124996kB [ 261.082130][T13246] Total swap = 124996kB [ 261.092153][T13246] 2097051 pages RAM [ 261.103404][T13246] 0 pages HighMem/MovableOnly [ 261.115967][T13246] 427172 pages reserved [ 261.137527][T13246] 0 pages cma reserved [ 261.526630][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 261.548857][T13320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1779'. [ 261.565740][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 261.711050][T13325] x_tables: duplicate underflow at hook 3 [ 261.771982][T13329] tap0: tun_chr_ioctl cmd 1074025677 [ 261.781605][T13329] tap0: linktype set to 773 [ 261.798567][T13329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.818098][T13329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.831507][T13329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.919920][T13343] bond11: ARP target 9.0.0.0 is already present [ 261.927997][T13343] bond11: option arp_ip_target: invalid value (9) [ 261.939294][T13343] bond11 (unregistering): Released all slaves [ 262.184206][T13356] lo speed is unknown, defaulting to 1000 [ 262.356509][T13338] lec:lec_atm_close: lec0: Shut down! [ 262.404034][T13363] vlan3: entered promiscuous mode [ 262.585963][T13371] netlink: 'syz.1.1796': attribute type 2 has an invalid length. [ 262.597840][T13356] gre0 speed is unknown, defaulting to 1000 [ 262.762505][T13378] netlink: 'syz.4.1797': attribute type 1 has an invalid length. [ 262.784498][T13377] x_tables: duplicate underflow at hook 3 [ 262.855608][ T5938] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 263.323949][T13356] lo speed is unknown, defaulting to 1000 [ 263.390724][T13413] lo speed is unknown, defaulting to 1000 [ 263.495484][T13417] __nla_validate_parse: 7 callbacks suppressed [ 263.495500][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 263.648662][T13410] xt_CT: No such helper "syz1" [ 263.806171][ T5938] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 263.815693][T13413] gre0 speed is unknown, defaulting to 1000 [ 264.038537][T13424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1809'. [ 264.059575][T13423] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 264.071702][T13406] lec:lec_atm_close: lec0: Shut down! [ 264.079397][T13423] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 264.098395][T13424] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 264.134529][T13424] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1809'. [ 264.156597][T13424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.231940][T13413] lo speed is unknown, defaulting to 1000 [ 264.393192][T13433] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1813'. [ 264.959462][T13455] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 265.007025][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 265.047892][T13461] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 265.056320][T13461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1818'. [ 265.256091][T13455] bond6: entered promiscuous mode [ 265.273214][T13455] bond6: entered allmulticast mode [ 265.280060][T13455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.839455][T13492] netlink: 'syz.4.1827': attribute type 1 has an invalid length. [ 265.878309][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.043347][T13492] 8021q: adding VLAN 0 to HW filter on device bond9 [ 266.106584][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.247521][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1831'. [ 266.449402][T13516] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 266.595577][T13517] vlan3: entered promiscuous mode [ 266.612648][T13517] macvlan1: entered promiscuous mode [ 266.785698][T13518] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 266.897179][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 266.945358][T13530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.954055][T13530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.967481][T13530] batman_adv: batadv0: Removing interface: gretap1 [ 267.580143][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 267.621612][T13562] netlink: 'syz.4.1846': attribute type 3 has an invalid length. [ 267.932285][T13577] netlink: 'syz.0.1850': attribute type 5 has an invalid length. [ 267.999055][T13577] tun0: tun_chr_ioctl cmd 1074025677 [ 268.004455][T13577] tun0: linktype set to 822 [ 268.937036][T13645] syzkaller0: entered promiscuous mode [ 268.942608][T13645] syzkaller0: entered allmulticast mode [ 268.972305][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 269.084145][T13653] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 269.161601][T13647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.217956][T13657] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1868'. [ 269.228565][T13657] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 269.449909][T13671] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1876'. [ 269.476062][T13677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 269.478667][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1876'. [ 269.585717][T13684] lo speed is unknown, defaulting to 1000 [ 269.592629][T13673] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 269.642492][T13673] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 269.724785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 269.732803][ C0] lec:lec_tx_timeout: lec0 [ 269.738049][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.786076][T13695] syzkaller1: entered promiscuous mode [ 269.791569][T13695] syzkaller1: entered allmulticast mode [ 269.882523][T13684] gre0 speed is unknown, defaulting to 1000 [ 270.170502][T13684] lo speed is unknown, defaulting to 1000 [ 270.232095][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 270.445726][T13731] FAULT_INJECTION: forcing a failure. [ 270.445726][T13731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.504420][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.1.1890 Not tainted syzkaller #0 PREEMPT(full) [ 270.504444][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.504454][T13731] Call Trace: [ 270.504462][T13731] [ 270.504470][T13731] dump_stack_lvl+0xe8/0x150 [ 270.504499][T13731] should_fail_ex+0x412/0x560 [ 270.504529][T13731] _copy_from_user+0x2d/0xb0 [ 270.504551][T13731] ___sys_sendmsg+0x1c6/0x360 [ 270.504581][T13731] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.504637][T13731] ? __fget_files+0x2a/0x420 [ 270.504653][T13731] ? __fget_files+0x3a0/0x420 [ 270.504678][T13731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.504705][T13731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.504741][T13731] ? __pfx_ksys_write+0x10/0x10 [ 270.504769][T13731] do_syscall_64+0x14d/0xf80 [ 270.504786][T13731] ? trace_irq_disable+0x3b/0x150 [ 270.504802][T13731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.504819][T13731] ? clear_bhb_loop+0x40/0x90 [ 270.504840][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.504857][T13731] RIP: 0033:0x7fc884f9c819 [ 270.504873][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.504887][T13731] RSP: 002b:00007fc885e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.504906][T13731] RAX: ffffffffffffffda RBX: 00007fc885216090 RCX: 00007fc884f9c819 [ 270.504919][T13731] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 270.504930][T13731] RBP: 00007fc885e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 270.504941][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.504951][T13731] R13: 00007fc885216128 R14: 00007fc885216090 R15: 00007ffe13365428 [ 270.504978][T13731] [ 270.852839][T13735] veth0: entered allmulticast mode [ 270.928877][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 271.124177][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 271.248391][T13742] syzkaller1: entered promiscuous mode [ 271.253979][T13742] syzkaller1: entered allmulticast mode [ 271.385222][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 271.385414][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 271.726793][ T149] wlan1: Trigger new scan to find an IBSS to join [ 271.780604][T13767] syzkaller0: entered promiscuous mode [ 271.795100][T13767] syzkaller0: entered allmulticast mode [ 271.806199][T13767] TC_ACT_REPEAT abuse ? [ 272.124157][T13782] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1907'. [ 272.205011][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 272.471393][T13796] lo speed is unknown, defaulting to 1000 [ 273.357579][T13796] gre0 speed is unknown, defaulting to 1000 [ 273.678602][T13821] hsr_slave_0: left promiscuous mode [ 273.719457][T13821] hsr_slave_1: left promiscuous mode [ 273.769646][T13825] lo speed is unknown, defaulting to 1000 [ 273.870083][T13796] lo speed is unknown, defaulting to 1000 [ 274.144287][T13840] netlink: 'syz.2.1923': attribute type 13 has an invalid length. [ 274.154709][T13840] gretap0: refused to change device tx_queue_len [ 274.161390][T13840] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.391612][T13825] gre0 speed is unknown, defaulting to 1000 [ 274.555213][T13825] lo speed is unknown, defaulting to 1000 [ 274.764887][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 274.772923][ C0] lec:lec_tx_timeout: lec0 [ 274.777562][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 275.724935][ T35] wlan1: Trigger new scan to find an IBSS to join [ 276.159850][T13845] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 276.209535][T13853] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 276.238705][T13856] FAULT_INJECTION: forcing a failure. [ 276.238705][T13856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.281105][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.4.1928 Not tainted syzkaller #0 PREEMPT(full) [ 276.281129][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.281140][T13856] Call Trace: [ 276.281147][T13856] [ 276.281155][T13856] dump_stack_lvl+0xe8/0x150 [ 276.281183][T13856] should_fail_ex+0x412/0x560 [ 276.281214][T13856] _copy_from_iter+0x1d3/0x1670 [ 276.281238][T13856] ? rcu_is_watching+0x15/0xb0 [ 276.281267][T13856] ? __pfx__copy_from_iter+0x10/0x10 [ 276.281293][T13856] ? netlink_sendmsg+0x650/0xb40 [ 276.281316][T13856] ? skb_put+0x11b/0x210 [ 276.281343][T13856] netlink_sendmsg+0x6c0/0xb40 [ 276.281375][T13856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.281401][T13856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 276.281420][T13856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.281444][T13856] ____sys_sendmsg+0x972/0x9f0 [ 276.281477][T13856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.281511][T13856] ? import_iovec+0x73/0xa0 [ 276.281535][T13856] ___sys_sendmsg+0x2a5/0x360 [ 276.281565][T13856] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.281623][T13856] ? __fget_files+0x2a/0x420 [ 276.281639][T13856] ? __fget_files+0x3a0/0x420 [ 276.281665][T13856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 276.281691][T13856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.281723][T13856] ? __pfx_ksys_write+0x10/0x10 [ 276.281752][T13856] do_syscall_64+0x14d/0xf80 [ 276.281769][T13856] ? trace_irq_disable+0x3b/0x150 [ 276.281784][T13856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.281800][T13856] ? clear_bhb_loop+0x40/0x90 [ 276.281819][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.281835][T13856] RIP: 0033:0x7fd3fb59c819 [ 276.281849][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.281862][T13856] RSP: 002b:00007fd3fc3d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.281880][T13856] RAX: ffffffffffffffda RBX: 00007fd3fb816090 RCX: 00007fd3fb59c819 [ 276.281892][T13856] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 276.281902][T13856] RBP: 00007fd3fc3d0090 R08: 0000000000000000 R09: 0000000000000000 [ 276.281913][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.281923][T13856] R13: 00007fd3fb816128 R14: 00007fd3fb816090 R15: 00007ffd545fb788 [ 276.281950][T13856] [ 276.582708][T13858] 8021q: adding VLAN 0 to HW filter on device bond12 [ 276.594136][T13858] bond11: (slave bond12): making interface the new active one [ 276.607844][T13858] bond11: (slave bond12): Enslaving as an active interface with an up link [ 276.659808][T13868] x_tables: duplicate underflow at hook 3 [ 276.852579][T13879] __nla_validate_parse: 5 callbacks suppressed [ 276.852597][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1934'. [ 276.868270][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.885036][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1934'. [ 276.994137][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 277.024348][T13889] FAULT_INJECTION: forcing a failure. [ 277.024348][T13889] name failslab, interval 1, probability 0, space 0, times 0 [ 277.039891][T13889] CPU: 0 UID: 0 PID: 13889 Comm: syz.0.1940 Not tainted syzkaller #0 PREEMPT(full) [ 277.039913][T13889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 277.039925][T13889] Call Trace: [ 277.039932][T13889] [ 277.039940][T13889] dump_stack_lvl+0xe8/0x150 [ 277.039968][T13889] should_fail_ex+0x412/0x560 [ 277.039999][T13889] should_failslab+0xa8/0x100 [ 277.040021][T13889] ? skb_clone+0x212/0x3a0 [ 277.040038][T13889] kmem_cache_alloc_noprof+0x87/0x650 [ 277.040058][T13889] ? __netlink_lookup+0xc6/0x8b0 [ 277.040089][T13889] skb_clone+0x212/0x3a0 [ 277.040108][T13889] __netlink_deliver_tap+0x404/0x850 [ 277.040142][T13889] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.040166][T13889] netlink_deliver_tap+0x19c/0x1b0 [ 277.040190][T13889] netlink_unicast+0x7e3/0x9b0 [ 277.040218][T13889] ? __pfx_netlink_unicast+0x10/0x10 [ 277.040241][T13889] ? netlink_sendmsg+0x650/0xb40 [ 277.040261][T13889] ? skb_put+0x11b/0x210 [ 277.040287][T13889] netlink_sendmsg+0x813/0xb40 [ 277.040319][T13889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.040345][T13889] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.040365][T13889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.040389][T13889] ____sys_sendmsg+0x972/0x9f0 [ 277.040423][T13889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.040456][T13889] ? import_iovec+0x73/0xa0 [ 277.040480][T13889] ___sys_sendmsg+0x2a5/0x360 [ 277.040510][T13889] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.040569][T13889] ? __fget_files+0x2a/0x420 [ 277.040585][T13889] ? __fget_files+0x3a0/0x420 [ 277.040612][T13889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 277.040639][T13889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.040673][T13889] ? __pfx_ksys_write+0x10/0x10 [ 277.040719][T13889] do_syscall_64+0x14d/0xf80 [ 277.040737][T13889] ? trace_irq_disable+0x3b/0x150 [ 277.040753][T13889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.040771][T13889] ? clear_bhb_loop+0x40/0x90 [ 277.040792][T13889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.040810][T13889] RIP: 0033:0x7f53dbf9c819 [ 277.040827][T13889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.040841][T13889] RSP: 002b:00007f53dcedb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.040860][T13889] RAX: ffffffffffffffda RBX: 00007f53dc215fa0 RCX: 00007f53dbf9c819 [ 277.040873][T13889] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 277.040885][T13889] RBP: 00007f53dcedb090 R08: 0000000000000000 R09: 0000000000000000 [ 277.040896][T13889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.040906][T13889] R13: 00007f53dc216038 R14: 00007f53dc215fa0 R15: 00007ffdc42e6fd8 [ 277.040936][T13889] [ 277.320648][T13886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1937'. [ 277.346400][T13887] 8021q: adding VLAN 0 to HW filter on device bond11 [ 277.363742][T13893] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1939'. [ 277.374713][T13893] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 277.397049][T13900] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 277.405151][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 277.548986][T13908] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1943'. [ 277.580159][T13908] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1943'. [ 277.589939][T13908] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1943'. [ 277.694497][T13915] openvswitch: netlink: Duplicate or invalid key (type 0). [ 277.708177][T13919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 277.713430][T13915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.729515][T13915] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 278.242908][T13961] lo speed is unknown, defaulting to 1000 [ 278.775445][T13984] FAULT_INJECTION: forcing a failure. [ 278.775445][T13984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.819367][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.0.1964 Not tainted syzkaller #0 PREEMPT(full) [ 278.819391][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 278.819401][T13984] Call Trace: [ 278.819409][T13984] [ 278.819417][T13984] dump_stack_lvl+0xe8/0x150 [ 278.819446][T13984] should_fail_ex+0x412/0x560 [ 278.819477][T13984] _copy_to_user+0x31/0xb0 [ 278.819501][T13984] simple_read_from_buffer+0xe1/0x170 [ 278.819531][T13984] proc_fail_nth_read+0x1bb/0x230 [ 278.819560][T13984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.819589][T13984] ? rw_verify_area+0x2a6/0x4d0 [ 278.819615][T13984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.819641][T13984] vfs_read+0x20c/0xa70 [ 278.819659][T13984] ? fdget_pos+0x246/0x320 [ 278.819681][T13984] ? __pfx___mutex_lock+0x10/0x10 [ 278.819701][T13984] ? __pfx_vfs_read+0x10/0x10 [ 278.819722][T13984] ? __fget_files+0x2a/0x420 [ 278.819743][T13984] ? __fget_files+0x3a0/0x420 [ 278.819758][T13984] ? __fget_files+0x2a/0x420 [ 278.819784][T13984] ksys_read+0x150/0x270 [ 278.819805][T13984] ? __pfx_ksys_read+0x10/0x10 [ 278.819837][T13984] do_syscall_64+0x14d/0xf80 [ 278.819853][T13984] ? trace_irq_disable+0x3b/0x150 [ 278.819870][T13984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.819888][T13984] ? clear_bhb_loop+0x40/0x90 [ 278.819910][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.819927][T13984] RIP: 0033:0x7f53dbf5d04e [ 278.819944][T13984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 278.819959][T13984] RSP: 002b:00007f53dcedafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.819978][T13984] RAX: ffffffffffffffda RBX: 00007f53dcedb6c0 RCX: 00007f53dbf5d04e [ 278.819991][T13984] RDX: 000000000000000f RSI: 00007f53dcedb0a0 RDI: 0000000000000006 [ 278.820002][T13984] RBP: 00007f53dcedb090 R08: 0000000000000000 R09: 0000000000000000 [ 278.820013][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.820024][T13984] R13: 00007f53dc216038 R14: 00007f53dc215fa0 R15: 00007ffdc42e6fd8 [ 278.820055][T13984] [ 279.101465][T13961] gre0 speed is unknown, defaulting to 1000 [ 279.290265][T13961] lo speed is unknown, defaulting to 1000 [ 279.784806][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.792865][ C0] lec:lec_tx_timeout: lec0 [ 279.797420][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 280.061763][T14009] vlan4: entered promiscuous mode [ 280.105079][T14009] virt_wifi0: entered promiscuous mode [ 280.334186][T14024] netlink: 'syz.0.1974': attribute type 5 has an invalid length. [ 280.402919][T14029] netlink: 'syz.2.1975': attribute type 2 has an invalid length. [ 280.441565][T14029] netlink: 'syz.2.1975': attribute type 8 has an invalid length. [ 280.746234][T14043] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.044984][T14018] lec:lec_atm_close: lec0: Shut down! [ 281.053597][T14061] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 281.267453][T14072] sctp: [Deprecated]: syz.4.1989 (pid 14072) Use of int in max_burst socket option. [ 281.267453][T14072] Use struct sctp_assoc_value instead [ 281.467063][T14086] lo speed is unknown, defaulting to 1000 [ 281.760486][T14098] netlink: 'syz.0.1997': attribute type 2 has an invalid length. [ 282.107840][T14086] gre0 speed is unknown, defaulting to 1000 [ 282.358759][T14120] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 282.365956][T14120] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 282.445177][T14122] nbd2: detected capacity change from 0 to 63 [ 282.467561][T14125] lo speed is unknown, defaulting to 1000 [ 282.474340][T14124] nbd: couldn't find device at index 1531473152 [ 282.574889][ T51] block nbd2: Receive control failed (result -104) [ 282.766895][T14086] lo speed is unknown, defaulting to 1000 [ 282.804049][T14138] __nla_validate_parse: 10 callbacks suppressed [ 282.804064][T14138] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2008'. [ 282.828002][T14125] gre0 speed is unknown, defaulting to 1000 [ 282.835507][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'. [ 282.858869][T14143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'. [ 282.979981][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 283.007930][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 283.111271][T14149] xt_CT: No such helper "pptp" [ 283.351481][T14125] lo speed is unknown, defaulting to 1000 [ 283.533783][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 283.563428][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 283.623085][T14140] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 284.078502][T14182] lec:lec_atm_close: lec0: Shut down! [ 284.630728][T14201] syzkaller0: entered promiscuous mode [ 284.642974][T14201] syzkaller0: entered allmulticast mode [ 284.856544][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 286.267439][T14216] syzkaller0: entered promiscuous mode [ 286.273007][T14216] syzkaller0: entered allmulticast mode [ 286.455501][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2030'. [ 286.606894][T14244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2031'. [ 286.710467][T14236] syzkaller0: entered promiscuous mode [ 286.713262][T14249] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 286.720219][T14236] syzkaller0: entered allmulticast mode [ 287.014078][T14278] syzkaller0: entered promiscuous mode [ 287.023769][T14278] syzkaller0: entered allmulticast mode [ 287.083369][T14283] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2042'. [ 287.152182][T14283] team0: Port device dummy0 removed [ 287.287698][T14290] ªªªªª: renamed from virt_wifi0 [ 287.427984][T14303] lo speed is unknown, defaulting to 1000 [ 287.715926][T14303] gre0 speed is unknown, defaulting to 1000 [ 287.950984][T14319] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 288.239707][T14303] lo speed is unknown, defaulting to 1000 [ 288.399450][T14337] x_tables: duplicate underflow at hook 3 [ 288.526968][T14341] tipc: Enabled bearer , priority 0 [ 288.554669][T14341] syzkaller0: entered promiscuous mode [ 288.586241][T14341] syzkaller0: entered allmulticast mode [ 288.775987][T14338] tipc: Resetting bearer [ 288.959468][T14338] tipc: Disabling bearer [ 289.388348][T14372] __nla_validate_parse: 2 callbacks suppressed [ 289.388365][T14372] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2063'. [ 289.503467][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2064'. [ 289.556072][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2064'. [ 289.618591][T14376] netlink: 'syz.4.2064': attribute type 3 has an invalid length. [ 289.635751][T14376] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 289.734779][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 289.742790][ C0] lec:lec_tx_timeout: lec0 [ 289.747698][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.984278][T14391] macsec0: entered promiscuous mode [ 290.252644][T14398] macvtap0: entered promiscuous mode [ 290.266714][T14396] macvtap0: left promiscuous mode [ 290.328676][T14401] sctp: [Deprecated]: syz.0.2072 (pid 14401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.328676][T14401] Use struct sctp_sack_info instead [ 290.997092][T14424] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 291.014890][T14424] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2080'. [ 291.253564][T14434] veth7: entered promiscuous mode [ 291.263225][T14422] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 291.523969][T14456] x_tables: duplicate underflow at hook 3 [ 291.604466][T14466] netlink: 'syz.1.2093': attribute type 21 has an invalid length. [ 291.642590][T14466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2093'. [ 291.655023][T14466] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 291.793831][T14473] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2095'. [ 291.929776][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 291.944926][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2100'. [ 292.028236][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'. [ 292.228057][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2106'. [ 292.241776][T14509] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 292.346319][T14509] bond11: entered promiscuous mode [ 292.358415][T14509] 8021q: adding VLAN 0 to HW filter on device bond11 [ 292.381953][T14519] vlan0: entered promiscuous mode [ 292.469438][T14523] 8021q: adding VLAN 0 to HW filter on device bond11 [ 292.484045][T14523] bond11: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 292.497972][T14523] bond11: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 292.512472][T14523] bond11: (slave ip6gre4): making interface the new active one [ 292.521190][T14523] ip6gre4: entered promiscuous mode [ 292.528782][T14523] bond11: (slave ip6gre4): Enslaving as an active interface with an up link [ 292.688947][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.710933][T14541] netlink: 'syz.4.2113': attribute type 21 has an invalid length. [ 292.770680][T14550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.969381][T14561] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 293.050360][T14564] lo: entered promiscuous mode [ 293.058073][T14564] lo: entered allmulticast mode [ 293.066746][ T5939] lo speed is unknown, defaulting to 1000 [ 293.067189][T14566] x_tables: duplicate underflow at hook 2 [ 293.073433][ T5939] sqz0: Port: 1 Link ACTIVE [ 293.163229][ T5938] lo speed is unknown, defaulting to 1000 [ 293.572960][T14597] rdma_rxe: rxe_newlink: failed to add bond0 [ 293.821304][T14606] netlink: 'syz.1.2133': attribute type 2 has an invalid length. [ 293.864485][T14606] : entered promiscuous mode [ 294.099866][T14624] : option downdelay: invalid value (18446744073709547007) [ 294.108202][T14624] : option downdelay: allowed values 0 - 2147483647 [ 294.117366][T14624]  (unregistering): Released all slaves [ 294.588146][T14656] __nla_validate_parse: 24 callbacks suppressed [ 294.588165][T14656] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2148'. [ 294.590202][T14658] netlink: 'syz.0.2149': attribute type 3 has an invalid length. [ 294.621198][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2148'. [ 294.632138][T14656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2148'. [ 294.638024][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2150'. [ 294.650568][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'. [ 294.699425][T14661] bond8: entered promiscuous mode [ 294.705396][T14661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.741681][T14661] bridge7: entered promiscuous mode [ 294.747469][T14661] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 294.764866][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 294.772931][ C0] lec:lec_tx_timeout: lec0 [ 294.777964][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 294.870225][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 295.067622][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 295.326473][T14709] syzkaller0: entered promiscuous mode [ 295.339481][T14709] syzkaller0: entered allmulticast mode [ 295.429405][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 295.835410][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2166'. [ 298.457282][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.671337][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 298.921275][T14785] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 299.166942][T14803] x_tables: duplicate underflow at hook 3 [ 299.387918][T14809] Cannot find add_set index 2 as target [ 299.784755][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 299.792837][ C0] lec:lec_tx_timeout: lec0 [ 299.798615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 299.913194][T14856] __nla_validate_parse: 1 callbacks suppressed [ 299.913208][T14856] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2187'. [ 299.931879][T14856] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2187'. [ 300.386257][T14878] tipc: Enabling of bearer rejected, failed to enable media [ 300.398004][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 300.408262][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 300.528858][T14888] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2197'. [ 300.617545][T14891] xt_hashlimit: size too large, truncated to 1048576 [ 300.630885][T14891] xt_hashlimit: max too large, truncated to 1048576 [ 300.766607][T14905] syz_tun: entered allmulticast mode [ 300.836210][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 300.869429][T14898] lo speed is unknown, defaulting to 1000 [ 300.900754][T14905] netlink: 'syz.2.2203': attribute type 4 has an invalid length. [ 301.167817][T14920] macvlan2: entered allmulticast mode [ 301.173225][T14920] bridge0: entered allmulticast mode [ 301.299682][T14898] gre0 speed is unknown, defaulting to 1000 [ 301.492549][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 301.512210][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2211'. [ 301.568587][T14932] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20002 [ 301.813385][T14898] lo speed is unknown, defaulting to 1000 [ 302.175965][T14949] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2219'. [ 302.195710][T14949] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2219'. [ 302.796093][T14971] netlink: 'syz.0.2225': attribute type 28 has an invalid length. [ 302.817287][T14971] netlink: 'syz.0.2225': attribute type 3 has an invalid length. [ 302.983076][T14973] syzkaller0: entered promiscuous mode [ 302.997769][T14973] syzkaller0: entered allmulticast mode [ 303.024424][T14963] macvlan1: entered promiscuous mode [ 303.030131][T14963] macvlan1: entered allmulticast mode [ 303.552056][T14992] dvmrp1: entered allmulticast mode [ 303.721776][T15002] syzkaller0: entered promiscuous mode [ 303.742119][T15002] syzkaller0: entered allmulticast mode [ 304.090022][T15026] x_tables: duplicate underflow at hook 3 [ 304.206608][ T149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.814754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 304.822814][ C0] lec:lec_tx_timeout: lec0 [ 304.827742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 304.864202][T15069] tipc: Started in network mode [ 304.884502][T15069] tipc: Node identity ac14140f, cluster identity 4711 [ 304.902255][T15069] tipc: New replicast peer: 255.255.255.255 [ 304.932189][T15069] tipc: Enabled bearer , priority 10 [ 305.073270][T15074] syzkaller0: entered promiscuous mode [ 305.090105][T15074] syzkaller0: entered allmulticast mode [ 305.126995][T15076] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.261258][T15079] syzkaller0: entered promiscuous mode [ 305.277189][T15079] syzkaller0: entered allmulticast mode [ 305.482509][T15089] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 305.601221][T15102] __nla_validate_parse: 12 callbacks suppressed [ 305.601237][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 305.635486][T15100] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2260'. [ 305.656440][T15102] : entered promiscuous mode [ 305.743266][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2261'. [ 305.783641][T15110] netlink: 'syz.2.2264': attribute type 61 has an invalid length. [ 305.801813][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2264'. [ 305.844446][T15111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2264'. [ 306.073502][T15103] openvswitch: : Dropping previously announced user features [ 306.082124][ T7770] tipc: Node number set to 2886997007 [ 306.152483][T15119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.377670][T15136] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 306.387328][T15136] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2270'. [ 306.388360][T15138] xt_socket: unknown flags 0x8 [ 306.503441][T15141] syzkaller0: entered promiscuous mode [ 306.515182][T15141] syzkaller0: entered allmulticast mode [ 306.905918][T15157] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2276'. [ 306.932197][T15160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.968838][T15160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.127556][T15168] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 307.191244][T15168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2279'. [ 307.233093][T15168] dummy0: entered promiscuous mode [ 307.271962][T15168] bond2: (slave dummy0): Releasing active interface [ 307.330001][T15168] bridge0: port 3(dummy0) entered blocking state [ 307.350185][T15168] bridge0: port 3(dummy0) entered disabled state [ 307.365150][T15168] dummy0: entered allmulticast mode [ 307.496416][T15186] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 307.648356][T15186] bond13: entered promiscuous mode [ 307.653828][T15186] 8021q: adding VLAN 0 to HW filter on device bond13 [ 307.721044][T15186] bond13: (slave bridge3): making interface the new active one [ 307.736461][T15186] bridge3: entered promiscuous mode [ 307.742749][T15186] bond13: (slave bridge3): Enslaving as an active interface with an up link [ 307.790136][T15200] syzkaller0: entered promiscuous mode [ 307.798412][T15200] syzkaller0: entered allmulticast mode [ 308.088838][T15220] x_tables: duplicate underflow at hook 3 [ 308.108088][T15224] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2293'. [ 308.174349][T15226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.273951][T15232] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 308.373049][T15232] 8021q: adding VLAN 0 to HW filter on device bond9 [ 308.616483][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2297'. [ 308.977340][T15276] x_tables: duplicate underflow at hook 3 [ 308.989307][T15279] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 309.045765][T15273] 8021q: adding VLAN 0 to HW filter on device bond14 [ 309.087550][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 309.708268][T15285] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.834775][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 309.842836][ C0] lec:lec_tx_timeout: lec0 [ 309.847492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 309.897930][T15315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.965361][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.075778][T15329] netlink: get zone limit has 4 unknown bytes [ 310.136969][T15322] team0: Port device team_slave_0 removed [ 310.171531][T15338] openvswitch: netlink: Flow key attr not present in new flow. [ 310.324698][T15343] x_tables: duplicate underflow at hook 1 [ 310.474283][T15353] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.494312][T15358] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 310.496938][T15353] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 310.536382][T15360] syzkaller0: entered promiscuous mode [ 310.557779][T15360] syzkaller0: entered allmulticast mode [ 310.592452][T15353] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 312.079810][T15424] __nla_validate_parse: 11 callbacks suppressed [ 312.079830][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'. [ 312.139280][T15424] 8021q: adding VLAN 0 to HW filter on device bond11 [ 312.152539][T15429] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 312.243959][T15424] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2336'. [ 312.293904][T15424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 312.524388][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2340'. [ 312.538044][ T11] block nbd2: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 30 seconds [ 312.550083][ T11] block nbd2: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 30 seconds [ 312.561110][ T11] block nbd2: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 30 seconds [ 312.572296][ T11] block nbd2: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 30 seconds [ 312.634342][T15448] lo speed is unknown, defaulting to 1000 [ 312.667514][T15455] netlink: 'syz.1.2341': attribute type 7 has an invalid length. [ 312.682247][T15455] netlink: 'syz.1.2341': attribute type 8 has an invalid length. [ 312.731282][T15455] netlink: 'syz.1.2341': attribute type 8 has an invalid length. [ 312.771345][T15455] netlink: 'syz.1.2341': attribute type 4 has an invalid length. [ 312.797643][T15455] netlink: 'syz.1.2341': attribute type 7 has an invalid length. [ 312.813633][T15455] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.2341'. [ 312.863136][T15448] gre0 speed is unknown, defaulting to 1000 [ 312.997349][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 313.039085][T15470] bond0: entered promiscuous mode [ 313.046369][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 313.082012][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 313.102179][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 313.123615][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 313.134657][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 313.238043][T15448] lo speed is unknown, defaulting to 1000 [ 313.349306][T15478] lo speed is unknown, defaulting to 1000 [ 313.475558][T15490] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 313.551190][T15490] bond12: (slave bridge8): Enslaving as a backup interface with an up link [ 313.576544][T15490] macvlan2: entered promiscuous mode [ 313.581943][T15490] macvlan2: entered allmulticast mode [ 313.588289][T15490] bond12: entered promiscuous mode [ 313.593470][T15490] bridge8: entered promiscuous mode [ 313.600186][T15490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.614846][T15490] bond12: left promiscuous mode [ 313.619712][T15490] bridge8: left promiscuous mode [ 313.670711][T15483] lo speed is unknown, defaulting to 1000 [ 313.677099][T15478] gre0 speed is unknown, defaulting to 1000 [ 313.861749][T15497] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 313.904114][T15495] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.927099][T15500] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 313.932974][T15495] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.086800][ T9829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.100814][ T9829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.125257][ T9829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.134083][ T9829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.143523][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.225394][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.234965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.362897][T11619] lo speed is unknown, defaulting to 1000 [ 314.362950][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.371078][T11619] sqz0: Port: 1 Link DOWN [ 314.381858][T15483] gre0 speed is unknown, defaulting to 1000 [ 314.399639][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.430562][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.459833][T11619] lo speed is unknown, defaulting to 1000 [ 314.459837][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.854750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 314.862804][ C0] lec:lec_tx_timeout: lec0 [ 314.867793][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 314.898633][T15478] lo speed is unknown, defaulting to 1000 [ 315.493962][T15568] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 315.579285][T15565] 8021q: adding VLAN 0 to HW filter on device bond13 [ 315.635951][T15570] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 315.728270][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.762204][T15576] : option downdelay: invalid value (18446744073709547007) [ 315.770437][T15576] : option downdelay: allowed values 0 - 2147483647 [ 315.778609][T15576]  (unregistering): Released all slaves [ 315.800213][T15483] lo speed is unknown, defaulting to 1000 [ 315.939568][T15592] sctp: [Deprecated]: syz.1.2369 (pid 15592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.939568][T15592] Use struct sctp_sack_info instead [ 316.331880][T15613] netlink: 'syz.2.2377': attribute type 6 has an invalid length. [ 316.459373][T15616] syzkaller0: entered promiscuous mode [ 316.465613][T15616] syzkaller0: entered allmulticast mode [ 316.849824][T15630] syz.3.2382: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.869097][T15630] CPU: 0 UID: 0 PID: 15630 Comm: syz.3.2382 Not tainted syzkaller #0 PREEMPT(full) [ 316.869124][T15630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 316.869138][T15630] Call Trace: [ 316.869147][T15630] [ 316.869155][T15630] dump_stack_lvl+0xe8/0x150 [ 316.869199][T15630] warn_alloc+0x249/0x340 [ 316.869225][T15630] ? stack_trace_save+0xa9/0x100 [ 316.869252][T15630] ? __pfx_warn_alloc+0x10/0x10 [ 316.869283][T15630] ? kasan_save_track+0x4f/0x80 [ 316.869305][T15630] ? kasan_save_track+0x3e/0x80 [ 316.869325][T15630] ? __kasan_kmalloc+0x93/0xb0 [ 316.869345][T15630] ? __kmalloc_cache_noprof+0x31c/0x660 [ 316.869368][T15630] ? xskq_create+0x56/0x170 [ 316.869397][T15630] ? xsk_setsockopt+0x54c/0x990 [ 316.869422][T15630] ? do_sock_setsockopt+0x17c/0x1b0 [ 316.869448][T15630] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 316.869476][T15630] ? do_syscall_64+0x14d/0xf80 [ 316.869497][T15630] __vmalloc_node_range_noprof+0x132/0x1730 [ 316.869552][T15630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.869582][T15630] ? __kasan_kmalloc+0x93/0xb0 [ 316.869611][T15630] vmalloc_user_noprof+0xad/0xe0 [ 316.869633][T15630] ? xskq_create+0xbf/0x170 [ 316.869664][T15630] xskq_create+0xbf/0x170 [ 316.869695][T15630] xsk_init_queue+0x8a/0xe0 [ 316.869725][T15630] xsk_setsockopt+0x54c/0x990 [ 316.869756][T15630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.869784][T15630] ? __pfx_aa_sk_perm+0x10/0x10 [ 316.869818][T15630] ? aa_sock_opt_perm+0xff/0x1a0 [ 316.869842][T15630] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 316.869864][T15630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.869891][T15630] do_sock_setsockopt+0x17c/0x1b0 [ 316.869922][T15630] __x64_sys_setsockopt+0x13d/0x1b0 [ 316.869955][T15630] do_syscall_64+0x14d/0xf80 [ 316.869973][T15630] ? trace_irq_disable+0x3b/0x150 [ 316.869991][T15630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.870012][T15630] ? clear_bhb_loop+0x40/0x90 [ 316.870035][T15630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.870055][T15630] RIP: 0033:0x7f36e299c819 [ 316.870073][T15630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.870091][T15630] RSP: 002b:00007f36e3894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.870116][T15630] RAX: ffffffffffffffda RBX: 00007f36e2c15fa0 RCX: 00007f36e299c819 [ 316.870131][T15630] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 316.870143][T15630] RBP: 00007f36e2a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 316.870156][T15630] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.870169][T15630] R13: 00007f36e2c16038 R14: 00007f36e2c15fa0 R15: 00007ffcc9ac7f68 [ 316.870208][T15630] [ 316.870277][T15630] Mem-Info: [ 317.246127][T15630] active_anon:6028 inactive_anon:5 isolated_anon:0 [ 317.246127][T15630] active_file:3160 inactive_file:40289 isolated_file:0 [ 317.246127][T15630] unevictable:768 dirty:273 writeback:0 [ 317.246127][T15630] slab_reclaimable:12397 slab_unreclaimable:147274 [ 317.246127][T15630] mapped:29686 shmem:1371 pagetables:1261 [ 317.246127][T15630] sec_pagetables:0 bounce:0 [ 317.246127][T15630] kernel_misc_reclaimable:0 [ 317.246127][T15630] free:1270242 free_pcp:10554 free_cma:0 [ 317.253970][T15644] __nla_validate_parse: 73 callbacks suppressed [ 317.253985][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 317.326134][T15630] Node 0 active_anon:24012kB inactive_anon:20kB active_file:12640kB inactive_file:160956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118744kB dirty:1092kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14412kB pagetables:4924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 317.396894][T15630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 317.444930][T15630] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.498120][T15630] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 317.505317][T15630] Node 0 DMA32 free:1112284kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24112kB inactive_anon:20kB active_file:12640kB inactive_file:160956kB unevictable:1536kB writepending:1092kB zspages:0kB present:3129332kB managed:2552184kB mlocked:0kB bounce:0kB free_pcp:42036kB local_pcp:20640kB free_cma:0kB [ 317.539992][T15630] lowmem_reserve[]: 0 0 0 0 0 [ 317.546769][T15630] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 317.578502][T15630] lowmem_reserve[]: 0 0 0 0 0 [ 317.583407][T15630] Node 1 Normal free:3953740kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.679288][T15651] geneve4: entered promiscuous mode [ 317.691792][T15630] lowmem_reserve[]: 0 0 0 0 0 [ 317.700625][T15630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.726358][T15630] Node 0 DMA32: 4200*4kB (UM) 2832*8kB (UM) 1237*16kB (UME) 533*32kB (UME) 468*64kB (UE) 377*128kB (U) 309*256kB (UME) 218*512kB (UM) 131*1024kB (UM) 88*2048kB (UME) 111*4096kB (UM) = 1114256kB [ 317.750314][T15630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.768691][T15630] Node 1 Normal: 3*4kB (U) 12*8kB (UM) 8*16kB (UM) 1*32kB (M) 5*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 963*4096kB (M) = 3953740kB [ 317.822330][T15630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.823420][T15655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2389'. [ 317.839637][T15630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.850717][T15630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.866261][T15664] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000 [ 317.875737][T15630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.892516][T15630] 44818 total pagecache pages [ 317.897308][T15630] 0 pages in swap cache [ 317.901480][T15630] Free swap = 124996kB [ 317.907419][T15630] Total swap = 124996kB [ 317.911594][T15630] 2097051 pages RAM [ 317.934843][T15630] 0 pages HighMem/MovableOnly [ 317.963978][T15630] 427172 pages reserved [ 317.991037][T15630] 0 pages cma reserved [ 318.059873][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 318.070502][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 318.237822][T15678] dummy0: entered promiscuous mode [ 318.259961][T15676] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 318.294146][T15673] pim6reg1: entered promiscuous mode [ 318.313716][T15673] pim6reg1: entered allmulticast mode [ 318.463211][T15682] syzkaller0: entered promiscuous mode [ 318.474898][T15682] syzkaller0: entered allmulticast mode [ 318.658003][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 318.674448][T15677] dummy0: left promiscuous mode [ 318.732685][T15697] erspan1: entered allmulticast mode [ 318.975691][T15717] validate_nla: 3 callbacks suppressed [ 318.975709][T15717] netlink: 'syz.2.2402': attribute type 2 has an invalid length. [ 318.998618][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 319.032799][T15723] netlink: 'syz.2.2402': attribute type 2 has an invalid length. [ 319.033514][T15717] !¼Þ: entered promiscuous mode [ 319.080323][T15723] !¼Þ: left promiscuous mode [ 319.874760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 319.882799][ C0] lec:lec_tx_timeout: lec0 [ 319.887366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.973839][T15736] syzkaller0: entered promiscuous mode [ 319.990822][T15736] syzkaller0: entered allmulticast mode [ 320.182279][T15753] FAULT_INJECTION: forcing a failure. [ 320.182279][T15753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.234115][T15753] CPU: 0 UID: 0 PID: 15753 Comm: syz.3.2416 Not tainted syzkaller #0 PREEMPT(full) [ 320.234138][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 320.234148][T15753] Call Trace: [ 320.234155][T15753] [ 320.234162][T15753] dump_stack_lvl+0xe8/0x150 [ 320.234190][T15753] should_fail_ex+0x412/0x560 [ 320.234222][T15753] _copy_from_iter+0x1d3/0x1670 [ 320.234252][T15753] ? __pfx__copy_from_iter+0x10/0x10 [ 320.234268][T15753] ? sock_alloc_send_pskb+0x896/0x990 [ 320.234290][T15753] ? __pfx__copy_from_iter+0x10/0x10 [ 320.234310][T15753] ? page_copy_sane+0x16a/0x270 [ 320.234330][T15753] copy_page_from_iter+0xdd/0x170 [ 320.234353][T15753] skb_copy_datagram_from_iter+0x306/0x710 [ 320.234381][T15753] unix_stream_sendmsg+0x5f3/0xe80 [ 320.234416][T15753] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 320.234438][T15753] ? aa_sock_msg_perm+0xda/0x1b0 [ 320.234457][T15753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.234480][T15753] ____sys_sendmsg+0x972/0x9f0 [ 320.234512][T15753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.234545][T15753] ? import_iovec+0x73/0xa0 [ 320.234567][T15753] ___sys_sendmsg+0x2a5/0x360 [ 320.234597][T15753] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.234653][T15753] ? __fget_files+0x2a/0x420 [ 320.234668][T15753] ? __fget_files+0x3a0/0x420 [ 320.234693][T15753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.234724][T15753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.234756][T15753] ? __pfx_ksys_write+0x10/0x10 [ 320.234786][T15753] do_syscall_64+0x14d/0xf80 [ 320.234803][T15753] ? trace_irq_disable+0x3b/0x150 [ 320.234818][T15753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.234835][T15753] ? clear_bhb_loop+0x40/0x90 [ 320.234856][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.234872][T15753] RIP: 0033:0x7f36e299c819 [ 320.234889][T15753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.234903][T15753] RSP: 002b:00007f36e3894028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.234922][T15753] RAX: ffffffffffffffda RBX: 00007f36e2c15fa0 RCX: 00007f36e299c819 [ 320.234935][T15753] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 320.234945][T15753] RBP: 00007f36e3894090 R08: 0000000000000000 R09: 0000000000000000 [ 320.234957][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.234974][T15753] R13: 00007f36e2c16038 R14: 00007f36e2c15fa0 R15: 00007ffcc9ac7f68 [ 320.235003][T15753] [ 320.509124][T15761] netlink: 'syz.1.2417': attribute type 2 has an invalid length. [ 320.521163][T15761] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2417'. [ 320.530309][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2417'. [ 320.570509][T15766] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 320.590306][T15766] syzkaller1: linktype set to 805 [ 320.784105][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.804691][ T29] audit: type=1107 audit(1776025455.704:3): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='bœwg­ [;R' [ 320.928161][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'. [ 321.022875][T15794] FAULT_INJECTION: forcing a failure. [ 321.022875][T15794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.037558][T15794] CPU: 1 UID: 0 PID: 15794 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 321.037580][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.037591][T15794] Call Trace: [ 321.037597][T15794] [ 321.037605][T15794] dump_stack_lvl+0xe8/0x150 [ 321.037633][T15794] should_fail_ex+0x412/0x560 [ 321.037662][T15794] _copy_from_iter+0x1d3/0x1670 [ 321.037692][T15794] ? __pfx__copy_from_iter+0x10/0x10 [ 321.037708][T15794] ? sock_alloc_send_pskb+0x896/0x990 [ 321.037732][T15794] ? __pfx__copy_from_iter+0x10/0x10 [ 321.037753][T15794] ? page_copy_sane+0x16a/0x270 [ 321.037772][T15794] copy_page_from_iter+0xdd/0x170 [ 321.037793][T15794] skb_copy_datagram_from_iter+0x306/0x710 [ 321.037820][T15794] unix_stream_sendmsg+0x5f3/0xe80 [ 321.037853][T15794] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 321.037876][T15794] ? aa_sock_msg_perm+0xda/0x1b0 [ 321.037895][T15794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.037917][T15794] ____sys_sendmsg+0x972/0x9f0 [ 321.037960][T15794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.037991][T15794] ? import_iovec+0x73/0xa0 [ 321.038015][T15794] ___sys_sendmsg+0x2a5/0x360 [ 321.038045][T15794] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.038098][T15794] ? __fget_files+0x2a/0x420 [ 321.038114][T15794] ? __fget_files+0x3a0/0x420 [ 321.038140][T15794] __x64_sys_sendmsg+0x1bd/0x2a0 [ 321.038166][T15794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.038198][T15794] ? __pfx_ksys_write+0x10/0x10 [ 321.038228][T15794] do_syscall_64+0x14d/0xf80 [ 321.038244][T15794] ? trace_irq_disable+0x3b/0x150 [ 321.038258][T15794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.038275][T15794] ? clear_bhb_loop+0x40/0x90 [ 321.038295][T15794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.038311][T15794] RIP: 0033:0x7fc884f9c819 [ 321.038327][T15794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.038341][T15794] RSP: 002b:00007fc885e8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.038361][T15794] RAX: ffffffffffffffda RBX: 00007fc885215fa0 RCX: 00007fc884f9c819 [ 321.038373][T15794] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 321.038384][T15794] RBP: 00007fc885e8d090 R08: 0000000000000000 R09: 0000000000000000 [ 321.038394][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.038405][T15794] R13: 00007fc885216038 R14: 00007fc885215fa0 R15: 00007ffe13365428 [ 321.038431][T15794] [ 321.445120][T15802] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 321.460918][T15802] bond9 (unregistering): Released all slaves [ 321.473271][T15812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.497528][T15815] netlink: 'syz.4.2434': attribute type 15 has an invalid length. [ 321.578912][T15819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2436'. [ 321.602402][T15807] lo speed is unknown, defaulting to 1000 [ 321.836380][T15807] gre0 speed is unknown, defaulting to 1000 [ 322.008769][T15840] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 322.083792][T15840] bond13: (slave geneve5): making interface the new active one [ 322.129993][T15840] bond13: (slave geneve5): Enslaving as an active interface with an up link [ 322.149145][ T49] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 322.161751][ T49] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 322.183454][ T49] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 322.195442][ T49] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 322.215567][T15807] lo speed is unknown, defaulting to 1000 [ 322.333451][T15854] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 322.352631][T15851] bond14: option ad_actor_sys_prio: invalid value (0) [ 322.364891][T15851] bond14: option ad_actor_sys_prio: allowed values 1 - 65535 [ 322.385639][T15851] bond14 (unregistering): Released all slaves [ 322.519990][T15854] veth0_vlan: left promiscuous mode [ 322.535293][T15854] veth0_vlan: entered promiscuous mode [ 322.546020][T15854] team0: Device veth0_vlan failed to register rx_handler [ 322.554443][T15846] lec:lec_atm_close: lec0: Shut down! [ 322.771878][T15858] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 322.799459][T15864] syzkaller1: entered promiscuous mode [ 322.805212][T15864] syzkaller1: entered allmulticast mode [ 322.822935][T15858] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 322.834555][T15858] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 322.853384][T15859] __nla_validate_parse: 3 callbacks suppressed [ 322.853399][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 322.870579][T15859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2447'. [ 322.951604][T15869] macvlan2: entered promiscuous mode [ 322.966810][T15869] macvlan2: entered allmulticast mode [ 323.143414][T15873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2451'. [ 323.144013][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2451'. [ 323.173809][T15876] netlink: 'syz.3.2452': attribute type 89 has an invalid length. [ 323.299924][T15886] FAULT_INJECTION: forcing a failure. [ 323.299924][T15886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.326208][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.2.2455 Not tainted syzkaller #0 PREEMPT(full) [ 323.326230][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.326240][T15886] Call Trace: [ 323.326247][T15886] [ 323.326254][T15886] dump_stack_lvl+0xe8/0x150 [ 323.326281][T15886] should_fail_ex+0x412/0x560 [ 323.326312][T15886] _copy_from_iter+0x1d3/0x1670 [ 323.326343][T15886] ? __pfx__copy_from_iter+0x10/0x10 [ 323.326359][T15886] ? sock_alloc_send_pskb+0x896/0x990 [ 323.326382][T15886] ? __pfx__copy_from_iter+0x10/0x10 [ 323.326403][T15886] ? page_copy_sane+0x16a/0x270 [ 323.326422][T15886] copy_page_from_iter+0xdd/0x170 [ 323.326445][T15886] skb_copy_datagram_from_iter+0x306/0x710 [ 323.326473][T15886] unix_stream_sendmsg+0x5f3/0xe80 [ 323.326507][T15886] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 323.326530][T15886] ? aa_sock_msg_perm+0xda/0x1b0 [ 323.326548][T15886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.326572][T15886] ____sys_sendmsg+0x972/0x9f0 [ 323.326603][T15886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.326635][T15886] ? import_iovec+0x73/0xa0 [ 323.326657][T15886] ___sys_sendmsg+0x2a5/0x360 [ 323.326687][T15886] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.326741][T15886] ? __fget_files+0x2a/0x420 [ 323.326757][T15886] ? __fget_files+0x3a0/0x420 [ 323.326791][T15886] __x64_sys_sendmsg+0x1bd/0x2a0 [ 323.326817][T15886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.326850][T15886] ? __pfx_ksys_write+0x10/0x10 [ 323.326880][T15886] do_syscall_64+0x14d/0xf80 [ 323.326897][T15886] ? trace_irq_disable+0x3b/0x150 [ 323.326913][T15886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.326931][T15886] ? clear_bhb_loop+0x40/0x90 [ 323.326951][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.326969][T15886] RIP: 0033:0x7f9e8eb9c819 [ 323.326985][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.326999][T15886] RSP: 002b:00007f9e8fa1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.327018][T15886] RAX: ffffffffffffffda RBX: 00007f9e8ee15fa0 RCX: 00007f9e8eb9c819 [ 323.327030][T15886] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 323.327041][T15886] RBP: 00007f9e8fa1e090 R08: 0000000000000000 R09: 0000000000000000 [ 323.327051][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.327062][T15886] R13: 00007f9e8ee16038 R14: 00007f9e8ee15fa0 R15: 00007ffd59715888 [ 323.327090][T15886] [ 323.589221][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2457'. [ 323.736608][T15888] sit3: entered allmulticast mode [ 323.827533][T15901] tipc: Enabled bearer , priority 0 [ 323.835922][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 323.887623][T15901] syzkaller0: entered promiscuous mode [ 323.898999][T15901] syzkaller0: entered allmulticast mode [ 324.106897][T15909] sctp: [Deprecated]: syz.2.2463 (pid 15909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.106897][T15909] Use struct sctp_sack_info instead [ 324.343383][T15892] lec:lec_atm_close: lec0: Shut down! [ 324.460147][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'. [ 324.488679][T15942] pimreg: entered allmulticast mode [ 324.562491][T15946] macsec1: entered allmulticast mode [ 324.575996][T15946] macsec0: entered allmulticast mode [ 324.817952][T15967] netlink: 'syz.1.2480': attribute type 21 has an invalid length. [ 324.854576][T15965] netlink: 212904 bytes leftover after parsing attributes in process `syz.4.2478'. [ 324.874964][T15967] netlink: 'syz.1.2480': attribute type 20 has an invalid length. [ 324.882714][T15968] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2481'. [ 324.947661][ T7770] tipc: Node number set to 2476962725 [ 324.953382][T15977] syzkaller1: entered promiscuous mode [ 324.958990][T15977] syzkaller1: entered allmulticast mode [ 325.188800][T15972] lo speed is unknown, defaulting to 1000 [ 325.374410][T16005] x_tables: duplicate underflow at hook 3 [ 325.415371][T16010] syzkaller1: entered promiscuous mode [ 325.420860][T16010] syzkaller1: entered allmulticast mode [ 325.454703][T16011] netlink: 'syz.1.2490': attribute type 4 has an invalid length. [ 325.674015][T16020] FAULT_INJECTION: forcing a failure. [ 325.674015][T16020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.688691][T15972] gre0 speed is unknown, defaulting to 1000 [ 325.708225][T16020] CPU: 0 UID: 0 PID: 16020 Comm: syz.4.2492 Not tainted syzkaller #0 PREEMPT(full) [ 325.708249][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.708260][T16020] Call Trace: [ 325.708267][T16020] [ 325.708274][T16020] dump_stack_lvl+0xe8/0x150 [ 325.708303][T16020] should_fail_ex+0x412/0x560 [ 325.708334][T16020] _copy_from_iter+0x1d3/0x1670 [ 325.708365][T16020] ? __pfx__copy_from_iter+0x10/0x10 [ 325.708382][T16020] ? sock_alloc_send_pskb+0x896/0x990 [ 325.708405][T16020] ? __pfx__copy_from_iter+0x10/0x10 [ 325.708427][T16020] ? page_copy_sane+0x16a/0x270 [ 325.708448][T16020] copy_page_from_iter+0xdd/0x170 [ 325.708470][T16020] skb_copy_datagram_from_iter+0x306/0x710 [ 325.708500][T16020] unix_stream_sendmsg+0x5f3/0xe80 [ 325.708535][T16020] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 325.708559][T16020] ? aa_sock_msg_perm+0xda/0x1b0 [ 325.708577][T16020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.708601][T16020] ____sys_sendmsg+0x972/0x9f0 [ 325.708640][T16020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.708673][T16020] ? import_iovec+0x73/0xa0 [ 325.708696][T16020] ___sys_sendmsg+0x2a5/0x360 [ 325.708726][T16020] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.708783][T16020] ? __fget_files+0x2a/0x420 [ 325.708799][T16020] ? __fget_files+0x3a0/0x420 [ 325.708825][T16020] __x64_sys_sendmsg+0x1bd/0x2a0 [ 325.708853][T16020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.708886][T16020] ? __pfx_ksys_write+0x10/0x10 [ 325.708916][T16020] do_syscall_64+0x14d/0xf80 [ 325.708934][T16020] ? trace_irq_disable+0x3b/0x150 [ 325.708949][T16020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.708967][T16020] ? clear_bhb_loop+0x40/0x90 [ 325.708988][T16020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.709005][T16020] RIP: 0033:0x7fd3fb59c819 [ 325.709021][T16020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.709036][T16020] RSP: 002b:00007fd3fc3f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.709055][T16020] RAX: ffffffffffffffda RBX: 00007fd3fb815fa0 RCX: 00007fd3fb59c819 [ 325.709068][T16020] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 325.709079][T16020] RBP: 00007fd3fc3f1090 R08: 0000000000000000 R09: 0000000000000000 [ 325.709090][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.709100][T16020] R13: 00007fd3fb816038 R14: 00007fd3fb815fa0 R15: 00007ffd545fb788 [ 325.709129][T16020] [ 326.130784][T15997] lec:lec_atm_close: lec0: Shut down! [ 326.399136][T15972] lo speed is unknown, defaulting to 1000 [ 326.535091][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2502'. [ 326.615253][ T1005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.732188][T16077] gretap0: entered promiscuous mode [ 326.749525][T16077] vlan3: entered promiscuous mode [ 326.840403][T16079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.870155][T16079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.163862][T16095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.517867][T16105] netlink: 'syz.0.2518': attribute type 14 has an invalid length. [ 327.525787][T16105] netlink: 'syz.0.2518': attribute type 13 has an invalid length. [ 327.536998][T16100] bond9: entered promiscuous mode [ 327.560714][T16100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 328.051172][T16100] bond9 (unregistering): Released all slaves [ 328.327806][T16117] __nla_validate_parse: 4 callbacks suppressed [ 328.327822][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'. [ 328.859401][T16153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.866693][T16153] IPv6: NLM_F_CREATE should be set when creating new route [ 328.873945][T16153] IPv6: NLM_F_CREATE should be set when creating new route [ 328.993716][T16167] lo speed is unknown, defaulting to 1000 [ 329.094651][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2536'. [ 329.195500][T16178] nbd: socks must be embedded in a SOCK_ITEM attr [ 329.212655][T14403] block nbd64: NBD_DISCONNECT [ 329.245675][T16192] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 329.337786][T16199] x_tables: duplicate underflow at hook 3 [ 329.402687][T16201] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 329.423108][T16201] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2541'. [ 329.438883][T13094] udevd[13094]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 329.523363][T16207] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2544'. [ 329.533099][T16206] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 329.550661][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2545'. [ 329.574889][T16206] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 329.581393][T16167] gre0 speed is unknown, defaulting to 1000 [ 329.603584][T16206] syzkaller1: entered promiscuous mode [ 329.616200][T16206] syzkaller1: entered allmulticast mode [ 329.688631][T16215] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2548'. [ 329.791209][T16218] tap0: tun_chr_ioctl cmd 1074025677 [ 329.806777][T16218] tap0: linktype set to 776 [ 329.986163][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2551'. [ 330.001330][T16167] lo speed is unknown, defaulting to 1000 [ 330.212250][T16235] x_tables: duplicate underflow at hook 3 [ 330.411048][T16240] siw: device registration error -23 [ 330.477639][T16249] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 330.623323][T16254] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 330.641233][T16263] smc: net device wlan0 erased user defined pnetid SYZ0 [ 330.790343][T16269] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2566'. [ 330.810467][T16270] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2566'. [ 330.938727][T16281] x_tables: duplicate underflow at hook 3 [ 330.976446][T16283] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 331.206271][T16286] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2570'. [ 331.457399][T16302] FAULT_INJECTION: forcing a failure. [ 331.457399][T16302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.501057][T16302] CPU: 1 UID: 0 PID: 16302 Comm: syz.2.2574 Not tainted syzkaller #0 PREEMPT(full) [ 331.501081][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 331.501092][T16302] Call Trace: [ 331.501100][T16302] [ 331.501107][T16302] dump_stack_lvl+0xe8/0x150 [ 331.501135][T16302] should_fail_ex+0x412/0x560 [ 331.501166][T16302] _copy_from_iter+0x1d3/0x1670 [ 331.501197][T16302] ? __pfx__copy_from_iter+0x10/0x10 [ 331.501214][T16302] ? sock_alloc_send_pskb+0x896/0x990 [ 331.501238][T16302] ? __pfx__copy_from_iter+0x10/0x10 [ 331.501259][T16302] ? page_copy_sane+0x16a/0x270 [ 331.501302][T16302] copy_page_from_iter+0xdd/0x170 [ 331.501326][T16302] skb_copy_datagram_from_iter+0x306/0x710 [ 331.501354][T16302] unix_stream_sendmsg+0x5f3/0xe80 [ 331.501389][T16302] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 331.501413][T16302] ? aa_sock_msg_perm+0xda/0x1b0 [ 331.501432][T16302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.501456][T16302] ____sys_sendmsg+0x972/0x9f0 [ 331.501489][T16302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.501521][T16302] ? import_iovec+0x73/0xa0 [ 331.501544][T16302] ___sys_sendmsg+0x2a5/0x360 [ 331.501574][T16302] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.501630][T16302] ? __fget_files+0x2a/0x420 [ 331.501646][T16302] ? __fget_files+0x3a0/0x420 [ 331.501672][T16302] __x64_sys_sendmsg+0x1bd/0x2a0 [ 331.501699][T16302] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.501732][T16302] ? __pfx_ksys_write+0x10/0x10 [ 331.501763][T16302] do_syscall_64+0x14d/0xf80 [ 331.501780][T16302] ? trace_irq_disable+0x3b/0x150 [ 331.501796][T16302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.501814][T16302] ? clear_bhb_loop+0x40/0x90 [ 331.501834][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.501852][T16302] RIP: 0033:0x7f9e8eb9c819 [ 331.501868][T16302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.501883][T16302] RSP: 002b:00007f9e8fa1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.501902][T16302] RAX: ffffffffffffffda RBX: 00007f9e8ee15fa0 RCX: 00007f9e8eb9c819 [ 331.501915][T16302] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 331.501926][T16302] RBP: 00007f9e8fa1e090 R08: 0000000000000000 R09: 0000000000000000 [ 331.501937][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.501947][T16302] R13: 00007f9e8ee16038 R14: 00007f9e8ee15fa0 R15: 00007ffd59715888 [ 331.501976][T16302] [ 331.754753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 331.762822][ C0] lec:lec_tx_timeout: lec0 [ 331.767764][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 331.811357][T16307] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 331.933099][T16311] xt_CT: No such helper "snmp_trap" [ 332.124411][T16319] x_tables: duplicate underflow at hook 3 [ 332.265991][T16325] syzkaller0: entered promiscuous mode [ 332.271999][T16325] syzkaller0: entered allmulticast mode [ 332.471099][T16337] lo speed is unknown, defaulting to 1000 [ 332.723740][T16337] gre0 speed is unknown, defaulting to 1000 [ 332.947793][T16337] lo speed is unknown, defaulting to 1000 [ 332.961920][T16349] netem: change failed [ 333.374395][T16359] x_tables: duplicate underflow at hook 3 [ 333.446384][T16363] netlink: 'syz.1.2592': attribute type 5 has an invalid length. [ 333.454238][T16363] __nla_validate_parse: 5 callbacks suppressed [ 333.454250][T16363] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2592'. [ 333.974700][T16373] lo speed is unknown, defaulting to 1000 [ 334.078283][T16389] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 334.148912][T16386] bond15 (unregistering): Released all slaves [ 334.359880][T16373] gre0 speed is unknown, defaulting to 1000 [ 334.373516][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 334.593738][T16402] netlink: 'syz.0.2603': attribute type 11 has an invalid length. [ 335.052280][T16373] lo speed is unknown, defaulting to 1000 [ 336.119968][T16457] sctp: [Deprecated]: syz.0.2614 (pid 16457) Use of int in max_burst socket option. [ 336.119968][T16457] Use struct sctp_assoc_value instead [ 336.194877][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 336.198726][T16460] bridge0: port 1(bond0) entered blocking state [ 336.237012][T16460] bridge0: port 1(bond0) entered disabled state [ 336.243448][T16460] bond0: entered allmulticast mode [ 336.617009][T16474] x_tables: duplicate underflow at hook 3 [ 336.624126][T16476] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2622'. [ 336.784735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 336.792798][ C0] lec:lec_tx_timeout: lec0 [ 336.797805][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.836010][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'. [ 337.063890][T16491] syzkaller1: entered promiscuous mode [ 337.096584][T16491] syzkaller1: entered allmulticast mode [ 337.264048][T16499] syzkaller0: entered promiscuous mode [ 337.280207][T16499] syzkaller0: entered allmulticast mode [ 337.335936][T16503] netlink: 'syz.4.2631': attribute type 9 has an invalid length. [ 337.356456][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2631'. [ 337.367300][T16503] netlink: 'syz.4.2631': attribute type 9 has an invalid length. [ 337.384853][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2631'. [ 337.484895][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 337.628829][T16522] lo speed is unknown, defaulting to 1000 [ 337.805814][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'. [ 337.935416][T16522] gre0 speed is unknown, defaulting to 1000 [ 338.102291][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 338.134424][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 339.480822][T16522] lo speed is unknown, defaulting to 1000 [ 339.680148][T16547] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2642'. [ 339.701206][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 340.023679][T16569] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2649'. [ 340.048256][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 340.103682][T16570] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2649'. [ 340.685442][T16599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.696526][T16600] syzkaller0: entered promiscuous mode [ 340.708126][T16600] syzkaller0: entered allmulticast mode [ 340.724622][T16599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.770875][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'. [ 340.883147][T16607] xt_TCPMSS: Only works on TCP SYN packets [ 341.303290][T16629] netlink: 'syz.4.2667': attribute type 33 has an invalid length. [ 341.313388][T16629] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2667'. [ 341.325879][T16629] `: renamed from team0 (while UP) [ 341.611984][T16653] netlink: 'syz.3.2673': attribute type 33 has an invalid length. [ 341.773137][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2676'. [ 341.804814][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.812870][ C0] lec:lec_tx_timeout: lec0 [ 341.817695][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 341.842084][T16660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 341.858714][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 341.888725][T16660] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 341.901159][T16660] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2676'. [ 341.910659][T16660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 342.089863][T16679] netlink: 'syz.1.2680': attribute type 1 has an invalid length. [ 342.136942][T16679] netlink: 'syz.1.2680': attribute type 2 has an invalid length. [ 342.606320][ T11] block nbd2: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 60 seconds [ 342.617062][ T11] block nbd2: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 60 seconds [ 342.628271][ T11] block nbd2: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 60 seconds [ 342.639365][ T11] block nbd2: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 60 seconds [ 342.974344][T16730] 8021q: adding VLAN 0 to HW filter on device bond14 [ 343.116381][T16730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.274492][T16749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.276329][T16753] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.367869][T16753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.375133][T16753] IPv6: NLM_F_CREATE should be set when creating new route [ 343.382401][T16753] IPv6: NLM_F_CREATE should be set when creating new route [ 343.389650][T16753] IPv6: NLM_F_CREATE should be set when creating new route [ 343.968655][T16801] SET target dimension over the limit! [ 344.280736][T16813] 8021q: adding VLAN 0 to HW filter on device bond15 [ 344.329615][T16819] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 344.542556][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.616741][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.817946][T16853] bond10 (unregistering): Released all slaves [ 344.973144][T16858] lo speed is unknown, defaulting to 1000 [ 345.107844][T16872] __nla_validate_parse: 17 callbacks suppressed [ 345.107861][T16872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2720'. [ 345.179688][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2719'. [ 345.269759][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'. [ 345.280844][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 345.311327][T16876] 8021q: adding VLAN 0 to HW filter on device bond12 [ 345.367187][T16885] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2719'. [ 345.387452][T16887] sctp: [Deprecated]: syz.1.2722 (pid 16887) Use of int in max_burst socket option deprecated. [ 345.387452][T16887] Use struct sctp_assoc_value instead [ 345.403306][T16885] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 345.412416][T16880] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2721'. [ 345.435343][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2723'. [ 345.448054][T16858] gre0 speed is unknown, defaulting to 1000 [ 345.458036][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'. [ 345.514884][T16889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2723'. [ 345.523838][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'. [ 346.006884][T16924] lo speed is unknown, defaulting to 1000 [ 346.077527][T16930] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 346.156620][T16858] lo speed is unknown, defaulting to 1000 [ 346.384790][T16900] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 346.392922][T16900] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 346.576681][T16949] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 346.679472][T16949] 8021q: adding VLAN 0 to HW filter on device bond15 [ 346.704861][T16924] gre0 speed is unknown, defaulting to 1000 [ 346.824746][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.832756][ C0] lec:lec_tx_timeout: lec0 [ 346.842280][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 346.958765][T16958] lo speed is unknown, defaulting to 1000 [ 347.442586][T16924] lo speed is unknown, defaulting to 1000 [ 348.156514][T16958] gre0 speed is unknown, defaulting to 1000 [ 348.468280][T17009] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 348.492117][T17011] FAULT_INJECTION: forcing a failure. [ 348.492117][T17011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.509994][T17011] CPU: 1 UID: 0 PID: 17011 Comm: syz.0.2743 Not tainted syzkaller #0 PREEMPT(full) [ 348.510016][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.510027][T17011] Call Trace: [ 348.510034][T17011] [ 348.510042][T17011] dump_stack_lvl+0xe8/0x150 [ 348.510070][T17011] should_fail_ex+0x412/0x560 [ 348.510099][T17011] _copy_from_user+0x2d/0xb0 [ 348.510121][T17011] ___sys_sendmsg+0x1c6/0x360 [ 348.510150][T17011] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.510203][T17011] ? __fget_files+0x2a/0x420 [ 348.510219][T17011] ? __fget_files+0x3a0/0x420 [ 348.510243][T17011] __x64_sys_sendmsg+0x1bd/0x2a0 [ 348.510271][T17011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.510303][T17011] ? __pfx_ksys_write+0x10/0x10 [ 348.510332][T17011] do_syscall_64+0x14d/0xf80 [ 348.510348][T17011] ? trace_irq_disable+0x3b/0x150 [ 348.510363][T17011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.510381][T17011] ? clear_bhb_loop+0x40/0x90 [ 348.510401][T17011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.510418][T17011] RIP: 0033:0x7f53dbf9c819 [ 348.510434][T17011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.510457][T17011] RSP: 002b:00007f53dcedb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.510475][T17011] RAX: ffffffffffffffda RBX: 00007f53dc215fa0 RCX: 00007f53dbf9c819 [ 348.510487][T17011] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 348.510498][T17011] RBP: 00007f53dcedb090 R08: 0000000000000000 R09: 0000000000000000 [ 348.510508][T17011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.510519][T17011] R13: 00007f53dc216038 R14: 00007f53dc215fa0 R15: 00007ffdc42e6fd8 [ 348.510548][T17011] [ 348.565862][T16958] lo speed is unknown, defaulting to 1000 [ 349.533065][T17053] IPVS: Unknown mcast interface: bridge_slave_0 [ 349.764799][ T5192] udevd[5192]: worker [12921] /devices/virtual/block/nbd2 is taking a long time [ 349.925642][T17059] syzkaller0: entered promiscuous mode [ 349.939798][T17059] syzkaller0: entered allmulticast mode [ 349.952027][T17062] netlink: 'syz.0.2752': attribute type 3 has an invalid length. [ 349.980281][T17071] tipc: Enabled bearer , priority 0 [ 350.023253][T17057] tipc: Resetting bearer [ 350.112763][T17052] tipc: Resetting bearer [ 350.206682][T17052] tipc: Disabling bearer [ 350.473209][T17090] veth0: entered allmulticast mode [ 350.898560][T17111] ip6erspan1: entered allmulticast mode [ 350.958591][T17111] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 351.200049][T17121] sctp: [Deprecated]: syz.0.2763 (pid 17121) Use of int in maxseg socket option. [ 351.200049][T17121] Use struct sctp_assoc_value instead [ 351.394246][T17134] __nla_validate_parse: 5 callbacks suppressed [ 351.394262][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 351.864750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 351.872784][ C0] lec:lec_tx_timeout: lec0 [ 351.877449][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 352.006433][T17168] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2773'. [ 352.036463][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2773'. [ 352.162372][T17173] lo speed is unknown, defaulting to 1000 [ 352.162441][T17177] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2774'. [ 352.177908][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 352.193159][T17177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2774'. [ 352.258842][T17178] 8021q: adding VLAN 0 to HW filter on device bond16 [ 352.306565][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 352.358524][T17186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2776'. [ 352.539244][T17196] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2777'. [ 352.748325][T17207] netlink: 'syz.1.2781': attribute type 4 has an invalid length. [ 352.838142][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 352.952978][T17172] lo speed is unknown, defaulting to 1000 [ 352.959323][T17173] gre0 speed is unknown, defaulting to 1000 [ 352.993493][T17218] FAULT_INJECTION: forcing a failure. [ 352.993493][T17218] name failslab, interval 1, probability 0, space 0, times 0 [ 353.010847][T17218] CPU: 1 UID: 0 PID: 17218 Comm: syz.0.2783 Not tainted syzkaller #0 PREEMPT(full) [ 353.010887][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 353.010908][T17218] Call Trace: [ 353.010915][T17218] [ 353.010922][T17218] dump_stack_lvl+0xe8/0x150 [ 353.010950][T17218] should_fail_ex+0x412/0x560 [ 353.010982][T17218] should_failslab+0xa8/0x100 [ 353.011004][T17218] ? skb_clone+0x212/0x3a0 [ 353.011022][T17218] kmem_cache_alloc_noprof+0x87/0x650 [ 353.011042][T17218] ? __netlink_lookup+0xc6/0x8b0 [ 353.011073][T17218] skb_clone+0x212/0x3a0 [ 353.011093][T17218] __netlink_deliver_tap+0x404/0x850 [ 353.011127][T17218] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.011150][T17218] netlink_deliver_tap+0x19c/0x1b0 [ 353.011181][T17218] netlink_unicast+0x7e3/0x9b0 [ 353.011210][T17218] ? __pfx_netlink_unicast+0x10/0x10 [ 353.011233][T17218] ? netlink_sendmsg+0x650/0xb40 [ 353.011253][T17218] ? skb_put+0x11b/0x210 [ 353.011279][T17218] netlink_sendmsg+0x813/0xb40 [ 353.011309][T17218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.011335][T17218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.011354][T17218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.011378][T17218] ____sys_sendmsg+0x972/0x9f0 [ 353.011412][T17218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.011446][T17218] ? import_iovec+0x73/0xa0 [ 353.011471][T17218] ___sys_sendmsg+0x2a5/0x360 [ 353.011502][T17218] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.011562][T17218] ? __fget_files+0x2a/0x420 [ 353.011578][T17218] ? __fget_files+0x3a0/0x420 [ 353.011605][T17218] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.011633][T17218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.011668][T17218] ? __pfx_ksys_write+0x10/0x10 [ 353.011699][T17218] do_syscall_64+0x14d/0xf80 [ 353.011717][T17218] ? trace_irq_disable+0x3b/0x150 [ 353.011733][T17218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.011751][T17218] ? clear_bhb_loop+0x40/0x90 [ 353.011773][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.011792][T17218] RIP: 0033:0x7f53dbf9c819 [ 353.011808][T17218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.011824][T17218] RSP: 002b:00007f53dcedb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.011843][T17218] RAX: ffffffffffffffda RBX: 00007f53dc215fa0 RCX: 00007f53dbf9c819 [ 353.011857][T17218] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 353.011868][T17218] RBP: 00007f53dcedb090 R08: 0000000000000000 R09: 0000000000000000 [ 353.011879][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.011890][T17218] R13: 00007f53dc216038 R14: 00007f53dc215fa0 R15: 00007ffdc42e6fd8 [ 353.011919][T17218] [ 353.584614][T17172] gre0 speed is unknown, defaulting to 1000 [ 353.584800][T17173] lo speed is unknown, defaulting to 1000 [ 354.069790][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.086620][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.182872][T17253] FAULT_INJECTION: forcing a failure. [ 354.182872][T17253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.200105][T17253] CPU: 1 UID: 0 PID: 17253 Comm: syz.3.2790 Not tainted syzkaller #0 PREEMPT(full) [ 354.200129][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 354.200140][T17253] Call Trace: [ 354.200147][T17253] [ 354.200155][T17253] dump_stack_lvl+0xe8/0x150 [ 354.200185][T17253] should_fail_ex+0x412/0x560 [ 354.200217][T17253] _copy_to_user+0x31/0xb0 [ 354.200241][T17253] simple_read_from_buffer+0xe1/0x170 [ 354.200269][T17253] proc_fail_nth_read+0x1bb/0x230 [ 354.200298][T17253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.200326][T17253] ? rw_verify_area+0x2a6/0x4d0 [ 354.200346][T17253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.200372][T17253] vfs_read+0x20c/0xa70 [ 354.200390][T17253] ? fdget_pos+0x246/0x320 [ 354.200410][T17253] ? __pfx___mutex_lock+0x10/0x10 [ 354.200430][T17253] ? __pfx_vfs_read+0x10/0x10 [ 354.200451][T17253] ? __fget_files+0x2a/0x420 [ 354.200471][T17253] ? __fget_files+0x3a0/0x420 [ 354.200487][T17253] ? __fget_files+0x2a/0x420 [ 354.200513][T17253] ksys_read+0x150/0x270 [ 354.200534][T17253] ? __pfx_ksys_read+0x10/0x10 [ 354.200566][T17253] do_syscall_64+0x14d/0xf80 [ 354.200583][T17253] ? trace_irq_disable+0x3b/0x150 [ 354.200598][T17253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.200617][T17253] ? clear_bhb_loop+0x40/0x90 [ 354.200639][T17253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.200656][T17253] RIP: 0033:0x7f36e295d04e [ 354.200673][T17253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.200689][T17253] RSP: 002b:00007f36e3893fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.200708][T17253] RAX: ffffffffffffffda RBX: 00007f36e38946c0 RCX: 00007f36e295d04e [ 354.200721][T17253] RDX: 000000000000000f RSI: 00007f36e38940a0 RDI: 0000000000000004 [ 354.200731][T17253] RBP: 00007f36e3894090 R08: 0000000000000000 R09: 0000000000000000 [ 354.200742][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.200751][T17253] R13: 00007f36e2c16038 R14: 00007f36e2c15fa0 R15: 00007ffcc9ac7f68 [ 354.200778][T17253] [ 354.295879][T17172] lo speed is unknown, defaulting to 1000 [ 354.393842][T17259] netlink: 'syz.3.2791': attribute type 13 has an invalid length. [ 354.604143][T17266] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 354.625811][T17266] openvswitch: netlink: Message has 16 unknown bytes. [ 355.111234][T17276] bond10: Removing last arp target with arp_interval on [ 355.327120][T17280] lo speed is unknown, defaulting to 1000 [ 355.743562][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.765785][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.773732][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.791624][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.814868][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.221551][T17313] netlink: 'syz.0.2800': attribute type 21 has an invalid length. [ 356.287632][T17280] gre0 speed is unknown, defaulting to 1000 [ 356.657948][ T1028] bond0: left allmulticast mode [ 356.669732][ T1028] bond_slave_0: left allmulticast mode [ 356.680839][ T1028] bond_slave_1: left allmulticast mode [ 356.695432][ T1028] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 356.707922][ T1028] bond0: left promiscuous mode [ 356.718268][ T1028] bond_slave_0: left promiscuous mode [ 356.730801][ T1028] bond_slave_1: left promiscuous mode [ 356.740867][ T1028] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 356.749253][ T1028] bridge0: port 3(bond0) entered disabled state [ 356.768989][ T1028] bridge_slave_1: left allmulticast mode [ 356.785207][ T1028] bridge_slave_1: left promiscuous mode [ 356.790994][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.885029][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 356.893095][ C0] lec:lec_tx_timeout: lec0 [ 356.897770][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 357.040100][ T1028] pimreg: left allmulticast mode [ 357.305422][T17325] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.315258][T17325] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.333002][ T1028] erspan0 (unregistering): left promiscuous mode [ 357.373841][ T1028] gretap0 (unregistering): left promiscuous mode [ 357.422984][T17344] __nla_validate_parse: 4 callbacks suppressed [ 357.422998][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2804'. [ 357.454080][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 357.463900][ T1028] bond3 (unregistering): (slave geneve3): Releasing active interface [ 357.516251][T17346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.727801][ T1028] bond4 (unregistering): (slave bridge4): Releasing active interface [ 357.768460][ T1028] bond5 (unregistering): (slave bridge5): Releasing active interface [ 357.858545][ T1028] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 357.867226][ T1028] bridge7 (unregistering): left promiscuous mode [ 357.885087][ T5834] Bluetooth: hci5: command tx timeout [ 357.941048][ T1028] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 357.980908][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.991408][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.001396][ T1028] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 358.010214][ T1028] bond0 (unregistering): Released all slaves [ 358.021016][ T1028] bond1 (unregistering): Released all slaves [ 358.033511][ T1028] bond2 (unregistering): Released all slaves [ 358.046764][ T1028] bond3 (unregistering): Released all slaves [ 358.062589][ T1028] bond4 (unregistering): Released all slaves [ 358.075567][ T1028] bond5 (unregistering): Released all slaves [ 358.090268][ T1028] bond6 (unregistering): Released all slaves [ 358.102373][ T1028] bond7 (unregistering): Released all slaves [ 358.117543][ T1028] bond8 (unregistering): Released all slaves [ 358.131767][ T1028] bond9 (unregistering): Released all slaves [ 358.143842][ T1028] bond10 (unregistering): Released all slaves [ 358.163301][ T1028] bond11 (unregistering): Released all slaves [ 358.181518][ T1028] bond12 (unregistering): Released all slaves [ 358.193886][ T1028] bond13 (unregistering): Released all slaves [ 358.209303][ T1028] bond14 (unregistering): Released all slaves [ 358.221776][ T1028] bond15 (unregistering): Released all slaves [ 358.233943][ T1028] bond16 (unregistering): Released all slaves [ 358.243852][T17300] lo speed is unknown, defaulting to 1000 [ 358.243896][T17280] lo speed is unknown, defaulting to 1000 [ 358.420186][T17350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.442818][T17350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.506938][ T1028] : left promiscuous mode [ 358.646462][ T1028] : left promiscuous mode [ 358.747636][ T1028] tipc: Disabling bearer [ 358.776603][ T1028] tipc: Left network mode [ 358.922295][T17300] gre0 speed is unknown, defaulting to 1000 [ 359.295803][T17369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.712451][T17300] lo speed is unknown, defaulting to 1000 [ 359.970364][T17393] lo speed is unknown, defaulting to 1000 [ 359.976377][ T5834] Bluetooth: hci5: command tx timeout [ 360.756620][T17400] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 360.784913][T17400] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 360.879897][T17393] gre0 speed is unknown, defaulting to 1000 [ 361.203363][T17300] chnl_net:caif_netlink_parms(): no params data found [ 361.450111][T17393] lo speed is unknown, defaulting to 1000 [ 361.599472][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.629502][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.648492][T17300] bridge_slave_0: entered allmulticast mode [ 361.698650][T17300] bridge_slave_0: entered promiscuous mode [ 361.737135][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.764587][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.786879][T17300] bridge_slave_1: entered allmulticast mode [ 361.833154][T17300] bridge_slave_1: entered promiscuous mode [ 361.904732][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 361.912739][ C0] lec:lec_tx_timeout: lec0 [ 361.917750][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 362.022621][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.052331][ T5834] Bluetooth: hci5: command tx timeout [ 362.118061][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.418161][T17300] team0: Port device team_slave_0 added [ 362.442152][T17300] team0: Port device team_slave_1 added [ 362.720188][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.735506][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.845000][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.872049][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.902571][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.929423][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.012840][ T1028] hsr_slave_0: left promiscuous mode [ 363.020495][ T1028] hsr_slave_1: left promiscuous mode [ 363.041709][ T1028] pim6reg (unregistering): left allmulticast mode [ 363.221802][T17517] netlink: 'syz.3.2833': attribute type 2 has an invalid length. [ 363.226763][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 363.255175][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 363.316110][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 363.341471][ T1028] veth0 (unregistering): left allmulticast mode [ 363.411579][ T9829] smc: removing ib device sqz0 [ 363.628515][T17501] gre0 speed is unknown, defaulting to 1000 [ 363.853723][T17524] lo: entered promiscuous mode [ 363.859058][T17524] lo: entered allmulticast mode [ 363.895171][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.902880][T17300] hsr_slave_0: entered promiscuous mode [ 363.925719][T17300] hsr_slave_1: entered promiscuous mode [ 363.932007][T17300] debugfs: 'hsr0' already exists in 'hsr' [ 363.953544][T17300] Cannot create hsr debugfs directory [ 364.124960][ T5834] Bluetooth: hci5: command tx timeout [ 364.147238][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.366734][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.375845][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.385633][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.399058][ T7772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.438955][T17501] lo speed is unknown, defaulting to 1000 [ 364.748329][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'. [ 364.793516][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'. [ 364.830102][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'. [ 364.846453][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'. [ 364.998755][T17545] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 365.012655][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.024613][T17545] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 365.404958][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.626575][T17576] gre0 speed is unknown, defaulting to 1000 [ 365.867399][ T1028] IPVS: stop unused estimator thread 0... [ 366.220264][T17300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 366.257676][T17300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.304117][T17300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.346412][T17300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.445467][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.483198][T17593] gre0 speed is unknown, defaulting to 1000 [ 366.493684][T17576] lo speed is unknown, defaulting to 1000 [ 366.525429][T17300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.548273][T17300] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.567043][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.574216][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.588033][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.595203][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.686811][T17300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.934898][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 366.942971][ C0] lec:lec_tx_timeout: lec0 [ 366.947725][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 366.954262][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.055271][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 367.157741][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.227698][T17631] : renamed from bond_slave_0 [ 367.295875][T17300] veth0_vlan: entered promiscuous mode [ 367.323188][T17300] veth1_vlan: entered promiscuous mode [ 367.391324][T17300] veth0_macvtap: entered promiscuous mode [ 367.404589][T17300] veth1_macvtap: entered promiscuous mode [ 367.439348][T17300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.454415][T17300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.472124][T17593] lo speed is unknown, defaulting to 1000 [ 367.478625][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.488643][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.526107][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.546107][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.706200][T17641] FAULT_INJECTION: forcing a failure. [ 367.706200][T17641] name failslab, interval 1, probability 0, space 0, times 0 [ 367.745240][T17641] CPU: 1 UID: 0 PID: 17641 Comm: syz.2.2852 Not tainted syzkaller #0 PREEMPT(full) [ 367.745263][T17641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 367.745278][T17641] Call Trace: [ 367.745285][T17641] [ 367.745292][T17641] dump_stack_lvl+0xe8/0x150 [ 367.745321][T17641] should_fail_ex+0x412/0x560 [ 367.745352][T17641] should_failslab+0xa8/0x100 [ 367.745376][T17641] __kmalloc_cache_noprof+0x88/0x660 [ 367.745398][T17641] ? nf_tables_newchain+0x1df0/0x2890 [ 367.745422][T17641] nf_tables_newchain+0x1df0/0x2890 [ 367.745455][T17641] ? __pfx_nf_tables_newchain+0x10/0x10 [ 367.745495][T17641] ? nft_trans_table_add+0x230/0x430 [ 367.745520][T17641] ? nfnl_pernet+0x23/0x240 [ 367.745550][T17641] ? __nla_parse+0x40/0x60 [ 367.745574][T17641] nfnetlink_rcv+0x1240/0x27b0 [ 367.745593][T17641] ? is_bpf_text_address+0x26/0x2b0 [ 367.745644][T17641] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 367.745675][T17641] ? __lock_acquire+0x6b5/0x2cf0 [ 367.745729][T17641] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.745766][T17641] netlink_unicast+0x80f/0x9b0 [ 367.745795][T17641] ? __pfx_netlink_unicast+0x10/0x10 [ 367.745821][T17641] ? netlink_sendmsg+0x650/0xb40 [ 367.745841][T17641] ? skb_put+0x11b/0x210 [ 367.745867][T17641] netlink_sendmsg+0x813/0xb40 [ 367.745896][T17641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.745922][T17641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 367.745940][T17641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.745964][T17641] ____sys_sendmsg+0x972/0x9f0 [ 367.746004][T17641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.746036][T17641] ? import_iovec+0x73/0xa0 [ 367.746060][T17641] ___sys_sendmsg+0x2a5/0x360 [ 367.746089][T17641] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.746146][T17641] ? __fget_files+0x2a/0x420 [ 367.746162][T17641] ? __fget_files+0x3a0/0x420 [ 367.746188][T17641] __x64_sys_sendmsg+0x1bd/0x2a0 [ 367.746215][T17641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.746247][T17641] ? __pfx_ksys_write+0x10/0x10 [ 367.746279][T17641] do_syscall_64+0x14d/0xf80 [ 367.746296][T17641] ? trace_irq_disable+0x3b/0x150 [ 367.746312][T17641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.746329][T17641] ? clear_bhb_loop+0x40/0x90 [ 367.746350][T17641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.746373][T17641] RIP: 0033:0x7f9e8eb9c819 [ 367.746389][T17641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.746404][T17641] RSP: 002b:00007f9e8fa1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.746422][T17641] RAX: ffffffffffffffda RBX: 00007f9e8ee15fa0 RCX: 00007f9e8eb9c819 [ 367.746434][T17641] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 367.746445][T17641] RBP: 00007f9e8fa1e090 R08: 0000000000000000 R09: 0000000000000000 [ 367.746454][T17641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.746464][T17641] R13: 00007f9e8ee16038 R14: 00007f9e8ee15fa0 R15: 00007ffd59715888 [ 367.746494][T17641] [ 368.083493][ T9829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.095235][ T9829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.401093][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.430017][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.759527][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 368.903968][T17645] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 368.915043][T17645] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.100815][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2857'. [ 369.182095][T17671] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 369.360074][T17669] gre0 speed is unknown, defaulting to 1000 [ 369.487967][ T9829] net_ratelimit: 3 callbacks suppressed [ 369.487981][ T9829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.511096][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.524617][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.937497][T17702] sctp: [Deprecated]: syz.0.2863 (pid 17702) Use of int in maxseg socket option. [ 369.937497][T17702] Use struct sctp_assoc_value instead [ 370.075634][T17673] netlink: 'syz.2.2856': attribute type 6 has an invalid length. [ 370.230512][T17715] tipc: Enabled bearer , priority 0 [ 370.285278][T17715] syzkaller0: entered promiscuous mode [ 370.300461][T17715] syzkaller0: entered allmulticast mode [ 370.333194][T17715] tipc: Resetting bearer [ 370.380183][T17669] lo speed is unknown, defaulting to 1000 [ 370.595319][T17713] tipc: Resetting bearer [ 370.611800][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.646537][T17713] tipc: Disabling bearer [ 370.765635][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.953421][T17714] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 370.962626][T17714] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 371.559858][T17764] veth0_macvtap: left promiscuous mode [ 371.572583][T17777] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2876'. [ 371.650173][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.724113][T17780] FAULT_INJECTION: forcing a failure. [ 371.724113][T17780] name failslab, interval 1, probability 0, space 0, times 0 [ 371.770825][T17780] CPU: 0 UID: 0 PID: 17780 Comm: syz.4.2880 Not tainted syzkaller #0 PREEMPT(full) [ 371.770845][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 371.770856][T17780] Call Trace: [ 371.770862][T17780] [ 371.770870][T17780] dump_stack_lvl+0xe8/0x150 [ 371.770895][T17780] should_fail_ex+0x412/0x560 [ 371.770920][T17780] should_failslab+0xa8/0x100 [ 371.770939][T17780] __kmalloc_cache_noprof+0x88/0x660 [ 371.770956][T17780] ? nft_pernet+0x23/0x240 [ 371.770970][T17780] ? nf_tables_commit+0x936/0xa400 [ 371.770989][T17780] nf_tables_commit+0x936/0xa400 [ 371.771002][T17780] ? nft_chain_add+0xe6e/0x10c0 [ 371.771026][T17780] ? nf_tables_newchain+0x2375/0x2890 [ 371.771048][T17780] ? __pfx_nf_tables_commit+0x10/0x10 [ 371.771061][T17780] ? __pfx_nf_tables_newchain+0x10/0x10 [ 371.771095][T17780] ? nft_trans_table_add+0x230/0x430 [ 371.771135][T17780] nfnetlink_rcv+0x1c1b/0x27b0 [ 371.771180][T17780] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 371.771209][T17780] ? ref_tracker_free+0x693/0x840 [ 371.771250][T17780] ? __netlink_deliver_tap+0x807/0x850 [ 371.771270][T17780] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.771307][T17780] netlink_unicast+0x80f/0x9b0 [ 371.771335][T17780] ? __pfx_netlink_unicast+0x10/0x10 [ 371.771356][T17780] ? netlink_sendmsg+0x650/0xb40 [ 371.771376][T17780] ? skb_put+0x11b/0x210 [ 371.771402][T17780] netlink_sendmsg+0x813/0xb40 [ 371.771433][T17780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.771459][T17780] ? aa_sock_msg_perm+0xf1/0x1b0 [ 371.771478][T17780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.771502][T17780] ____sys_sendmsg+0x972/0x9f0 [ 371.771533][T17780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.771566][T17780] ? import_iovec+0x73/0xa0 [ 371.771589][T17780] ___sys_sendmsg+0x2a5/0x360 [ 371.771618][T17780] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.771675][T17780] ? __fget_files+0x2a/0x420 [ 371.771690][T17780] ? __fget_files+0x3a0/0x420 [ 371.771715][T17780] __x64_sys_sendmsg+0x1bd/0x2a0 [ 371.771750][T17780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.771783][T17780] ? __pfx_ksys_write+0x10/0x10 [ 371.771815][T17780] do_syscall_64+0x14d/0xf80 [ 371.771832][T17780] ? trace_irq_disable+0x3b/0x150 [ 371.771847][T17780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.771864][T17780] ? clear_bhb_loop+0x40/0x90 [ 371.771884][T17780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.771901][T17780] RIP: 0033:0x7fd3fb59c819 [ 371.771917][T17780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.771931][T17780] RSP: 002b:00007fd3fc3f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.771950][T17780] RAX: ffffffffffffffda RBX: 00007fd3fb815fa0 RCX: 00007fd3fb59c819 [ 371.771962][T17780] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 371.771973][T17780] RBP: 00007fd3fc3f1090 R08: 0000000000000000 R09: 0000000000000000 [ 371.771983][T17780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.771993][T17780] R13: 00007fd3fb816038 R14: 00007fd3fb815fa0 R15: 00007ffd545fb788 [ 371.772023][T17780] [ 371.797777][T17786] FAULT_INJECTION: forcing a failure. [ 371.797777][T17786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.097463][T17786] CPU: 1 UID: 0 PID: 17786 Comm: syz.1.2881 Not tainted syzkaller #0 PREEMPT(full) [ 372.097485][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.097496][T17786] Call Trace: [ 372.097503][T17786] [ 372.097511][T17786] dump_stack_lvl+0xe8/0x150 [ 372.097538][T17786] should_fail_ex+0x412/0x560 [ 372.097569][T17786] _copy_from_iter+0x1d3/0x1670 [ 372.097591][T17786] ? rep_movs_alternative+0x4a/0x90 [ 372.097620][T17786] ? __pfx__copy_from_iter+0x10/0x10 [ 372.097637][T17786] ? sock_alloc_send_pskb+0x896/0x990 [ 372.097661][T17786] ? __pfx__copy_from_iter+0x10/0x10 [ 372.097682][T17786] ? page_copy_sane+0x16a/0x270 [ 372.097702][T17786] copy_page_from_iter+0xdd/0x170 [ 372.097723][T17786] skb_copy_datagram_from_iter+0x306/0x710 [ 372.097752][T17786] unix_stream_sendmsg+0x5f3/0xe80 [ 372.097788][T17786] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 372.097811][T17786] ? aa_sock_msg_perm+0xda/0x1b0 [ 372.097831][T17786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.097855][T17786] ____sys_sendmsg+0x972/0x9f0 [ 372.097888][T17786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.097921][T17786] ? import_iovec+0x73/0xa0 [ 372.097945][T17786] ___sys_sendmsg+0x2a5/0x360 [ 372.097982][T17786] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.098040][T17786] ? __fget_files+0x2a/0x420 [ 372.098055][T17786] ? __fget_files+0x3a0/0x420 [ 372.098087][T17786] __x64_sys_sendmsg+0x1bd/0x2a0 [ 372.098115][T17786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.098148][T17786] ? __pfx_ksys_write+0x10/0x10 [ 372.098180][T17786] do_syscall_64+0x14d/0xf80 [ 372.098197][T17786] ? trace_irq_disable+0x3b/0x150 [ 372.098212][T17786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.098230][T17786] ? clear_bhb_loop+0x40/0x90 [ 372.098252][T17786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.098270][T17786] RIP: 0033:0x7f654df9c819 [ 372.098286][T17786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.098301][T17786] RSP: 002b:00007f654eed8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.098321][T17786] RAX: ffffffffffffffda RBX: 00007f654e215fa0 RCX: 00007f654df9c819 [ 372.098334][T17786] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004 [ 372.098346][T17786] RBP: 00007f654eed8090 R08: 0000000000000000 R09: 0000000000000000 [ 372.098357][T17786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.098368][T17786] R13: 00007f654e216038 R14: 00007f654e215fa0 R15: 00007fff94dc76c8 [ 372.098395][T17786] [ 372.558544][T17798] FAULT_INJECTION: forcing a failure. [ 372.558544][T17798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.572087][T17798] CPU: 1 UID: 0 PID: 17798 Comm: syz.1.2883 Not tainted syzkaller #0 PREEMPT(full) [ 372.572108][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.572118][T17798] Call Trace: [ 372.572125][T17798] [ 372.572132][T17798] dump_stack_lvl+0xe8/0x150 [ 372.572160][T17798] should_fail_ex+0x412/0x560 [ 372.572190][T17798] _copy_from_user+0x2d/0xb0 [ 372.572212][T17798] __sys_bpf+0x229/0x950 [ 372.572231][T17798] ? __pfx___sys_bpf+0x10/0x10 [ 372.572260][T17798] ? ksys_write+0x242/0x270 [ 372.572283][T17798] ? __pfx_ksys_write+0x10/0x10 [ 372.572307][T17798] __x64_sys_bpf+0x7c/0x90 [ 372.572331][T17798] do_syscall_64+0x14d/0xf80 [ 372.572349][T17798] ? trace_irq_disable+0x3b/0x150 [ 372.572364][T17798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.572382][T17798] ? clear_bhb_loop+0x40/0x90 [ 372.572403][T17798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.572419][T17798] RIP: 0033:0x7f654df9c819 [ 372.572435][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.572449][T17798] RSP: 002b:00007f654eed8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.572467][T17798] RAX: ffffffffffffffda RBX: 00007f654e215fa0 RCX: 00007f654df9c819 [ 372.572479][T17798] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002 [ 372.572490][T17798] RBP: 00007f654eed8090 R08: 0000000000000000 R09: 0000000000000000 [ 372.572501][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.572511][T17798] R13: 00007f654e216038 R14: 00007f654e215fa0 R15: 00007fff94dc76c8 [ 372.572539][T17798] [ 372.738824][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.768321][ T11] block nbd2: Possible stuck request ffff888027310000: control (read@0,1024B). Runtime 90 seconds [ 372.779015][ T11] block nbd2: Possible stuck request ffff888027310200: control (read@1024,1024B). Runtime 90 seconds [ 372.789961][ T11] block nbd2: Possible stuck request ffff888027310400: control (read@2048,1024B). Runtime 90 seconds [ 372.800907][ T11] block nbd2: Possible stuck request ffff888027310600: control (read@3072,1024B). Runtime 90 seconds [ 372.815948][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.836071][ C1] ================================================================== [ 372.844145][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 372.852120][ C1] Read of size 2 at addr ffff88819bd546f4 by task syz.0.2887/17802 [ 372.860013][ C1] [ 372.862340][ C1] CPU: 1 UID: 0 PID: 17802 Comm: syz.0.2887 Not tainted syzkaller #0 PREEMPT(full) [ 372.862360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.862370][ C1] Call Trace: [ 372.862377][ C1] [ 372.862383][ C1] dump_stack_lvl+0xe8/0x150 [ 372.862408][ C1] print_report+0xba/0x230 [ 372.862427][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 372.862444][ C1] kasan_report+0x117/0x150 [ 372.862464][ C1] ? __netif_receive_skb_list_core+0x24d/0x810 [ 372.862484][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 372.862503][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 372.862523][ C1] __dev_queue_xmit+0x29a/0x3920 [ 372.862541][ C1] ? rcu_is_watching+0x15/0xb0 [ 372.862563][ C1] ? trace_kmem_cache_alloc+0x29/0xf0 [ 372.862581][ C1] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 372.862600][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 372.862614][ C1] ? __asan_memcpy+0x40/0x70 [ 372.862629][ C1] ? __pskb_copy_fclone+0x9c8/0xff0 [ 372.862645][ C1] ? __asan_memcpy+0x40/0x70 [ 372.862661][ C1] ? __pskb_copy_fclone+0x9c8/0xff0 [ 372.862677][ C1] ? hsr_create_tagged_frame+0x500/0xe10 [ 372.862700][ C1] ? __asan_memmove+0x40/0x70 [ 372.862715][ C1] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 372.862741][ C1] hsr_forward_skb+0x167e/0x2a80 [ 372.862766][ C1] ? hsr_forward_skb+0xbb/0x2a80 [ 372.862789][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 372.862809][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.862826][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.862842][ C1] ? hsr_addr_is_self+0x26/0x3f0 [ 372.862860][ C1] ? hsr_handle_frame+0x6ab/0xa50 [ 372.862881][ C1] hsr_handle_frame+0x6b8/0xa50 [ 372.862909][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 372.862929][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 372.862955][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 372.862973][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 372.862991][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 372.863014][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 372.863036][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 372.863058][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 372.863081][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 372.863100][ C1] ? gro_find_receive_by_type+0xea/0x110 [ 372.863121][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 372.863139][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 372.863159][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 372.863178][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 372.863199][ C1] napi_complete_done+0x299/0x730 [ 372.863218][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 372.863237][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 372.863256][ C1] gro_cell_poll+0x5a9/0x5d0 [ 372.863277][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 372.863295][ C1] __napi_poll+0xae/0x340 [ 372.863312][ C1] ? skb_defer_free_flush+0x233/0x260 [ 372.863331][ C1] net_rx_action+0x627/0xf70 [ 372.863350][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 372.863376][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 372.863405][ C1] handle_softirqs+0x22a/0x870 [ 372.863427][ C1] ? do_softirq+0x76/0xd0 [ 372.863448][ C1] ? tun_rx_batched+0x185/0x790 [ 372.863467][ C1] do_softirq+0x76/0xd0 [ 372.863486][ C1] [ 372.863492][ C1] [ 372.863497][ C1] __local_bh_enable_ip+0xf8/0x130 [ 372.863517][ C1] ? tun_rx_batched+0x185/0x790 [ 372.863535][ C1] tun_rx_batched+0x617/0x790 [ 372.863555][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 372.863578][ C1] ? tun_get_user+0x23c7/0x3ed0 [ 372.863596][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 372.863617][ C1] ? tun_get_user+0x26dc/0x3ed0 [ 372.863635][ C1] tun_get_user+0x2aeb/0x3ed0 [ 372.863660][ C1] ? aa_file_perm+0x50e/0x15e0 [ 372.863677][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 372.863694][ C1] ? aa_file_perm+0x192/0x15e0 [ 372.863712][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 372.863735][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 372.863752][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 372.863769][ C1] ? tun_get+0x1c/0x2f0 [ 372.863788][ C1] ? tun_get+0x1c/0x2f0 [ 372.863805][ C1] ? tun_get+0x1c/0x2f0 [ 372.863824][ C1] tun_chr_write_iter+0x113/0x200 [ 372.863844][ C1] vfs_write+0x61d/0xb90 [ 372.863863][ C1] ? __pfx_vfs_write+0x10/0x10 [ 372.863880][ C1] ? __pfx_do_futex+0x10/0x10 [ 372.863909][ C1] ksys_write+0x150/0x270 [ 372.863926][ C1] ? __pfx_ksys_write+0x10/0x10 [ 372.863947][ C1] do_syscall_64+0x14d/0xf80 [ 372.863962][ C1] ? trace_irq_disable+0x3b/0x150 [ 372.863976][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.863992][ C1] ? clear_bhb_loop+0x40/0x90 [ 372.864009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.864025][ C1] RIP: 0033:0x7f53dbf9c819 [ 372.864038][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.864054][ C1] RSP: 002b:00007f53dcedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.864071][ C1] RAX: ffffffffffffffda RBX: 00007f53dc215fa0 RCX: 00007f53dbf9c819 [ 372.864082][ C1] RDX: 000000000000007a RSI: 0000200000000580 RDI: 0000000000000006 [ 372.864093][ C1] RBP: 00007f53dc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 372.864104][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.864113][ C1] R13: 00007f53dc216038 R14: 00007f53dc215fa0 R15: 00007ffdc42e6fd8 [ 372.864131][ C1] [ 372.864136][ C1] [ 373.335058][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6390 ms [ 373.339346][ C1] The buggy address belongs to the physical page: [ 373.339371][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19bd54 [ 373.347765][ C0] lec:lec_tx_timeout: lec0 [ 373.355712][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 373.355739][ C1] raw: 057ff00000000000 ffffea00066f5508 ffffea00066f5508 0000000000000000 [ 373.364767][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 373.371638][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 373.450512][ C1] page dumped because: kasan: bad access detected [ 373.456928][ C1] page_owner info is not present (never set?) [ 373.462980][ C1] [ 373.465301][ C1] Memory state around the buggy address: [ 373.470919][ C1] ffff88819bd54580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.478969][ C1] ffff88819bd54600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.487011][ C1] >ffff88819bd54680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.495051][ C1] ^ [ 373.502745][ C1] ffff88819bd54700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.510796][ C1] ffff88819bd54780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.518843][ C1] ================================================================== [ 373.526964][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 373.534163][ C1] CPU: 1 UID: 0 PID: 17802 Comm: syz.0.2887 Not tainted syzkaller #0 PREEMPT(full) [ 373.543536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.553602][ C1] Call Trace: [ 373.556888][ C1] [ 373.559727][ C1] vpanic+0x56c/0xa60 [ 373.563702][ C1] ? __pfx_vpanic+0x10/0x10 [ 373.568197][ C1] ? irqentry_exit+0x59e/0x620 [ 373.572945][ C1] panic+0xc5/0xd0 [ 373.576664][ C1] ? __pfx_panic+0x10/0x10 [ 373.581098][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 373.586728][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 373.592348][ C1] check_panic_on_warn+0x89/0xb0 [ 373.597281][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 373.602908][ C1] end_report+0x73/0x180 [ 373.607143][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 373.612768][ C1] kasan_report+0x128/0x150 [ 373.617258][ C1] ? __netif_receive_skb_list_core+0x24d/0x810 [ 373.623404][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 373.629025][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 373.634472][ C1] __dev_queue_xmit+0x29a/0x3920 [ 373.639396][ C1] ? rcu_is_watching+0x15/0xb0 [ 373.644156][ C1] ? trace_kmem_cache_alloc+0x29/0xf0 [ 373.649516][ C1] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 373.655574][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 373.660930][ C1] ? __asan_memcpy+0x40/0x70 [ 373.665508][ C1] ? __pskb_copy_fclone+0x9c8/0xff0 [ 373.670689][ C1] ? __asan_memcpy+0x40/0x70 [ 373.675267][ C1] ? __pskb_copy_fclone+0x9c8/0xff0 [ 373.680450][ C1] ? hsr_create_tagged_frame+0x500/0xe10 [ 373.686073][ C1] ? __asan_memmove+0x40/0x70 [ 373.690734][ C1] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 373.696362][ C1] hsr_forward_skb+0x167e/0x2a80 [ 373.701301][ C1] ? hsr_forward_skb+0xbb/0x2a80 [ 373.706243][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 373.711521][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.716548][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.721914][ C1] ? hsr_addr_is_self+0x26/0x3f0 [ 373.726854][ C1] ? hsr_handle_frame+0x6ab/0xa50 [ 373.731878][ C1] hsr_handle_frame+0x6b8/0xa50 [ 373.736723][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 373.742088][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 373.747719][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 373.753786][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 373.759057][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 373.764249][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 373.769186][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 373.775167][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 373.781680][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 373.787863][ C1] ? gro_find_receive_by_type+0xea/0x110 [ 373.793516][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 373.799856][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 373.806542][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 373.811642][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 373.816760][ C1] napi_complete_done+0x299/0x730 [ 373.821773][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 373.827321][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 373.832090][ C1] gro_cell_poll+0x5a9/0x5d0 [ 373.836680][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 373.841443][ C1] __napi_poll+0xae/0x340 [ 373.845775][ C1] ? skb_defer_free_flush+0x233/0x260 [ 373.851138][ C1] net_rx_action+0x627/0xf70 [ 373.855724][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 373.860936][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 373.866061][ C1] handle_softirqs+0x22a/0x870 [ 373.870823][ C1] ? do_softirq+0x76/0xd0 [ 373.875148][ C1] ? tun_rx_batched+0x185/0x790 [ 373.879988][ C1] do_softirq+0x76/0xd0 [ 373.884132][ C1] [ 373.887076][ C1] [ 373.889991][ C1] __local_bh_enable_ip+0xf8/0x130 [ 373.895093][ C1] ? tun_rx_batched+0x185/0x790 [ 373.899939][ C1] tun_rx_batched+0x617/0x790 [ 373.904630][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 373.909817][ C1] ? tun_get_user+0x23c7/0x3ed0 [ 373.914657][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 373.919937][ C1] ? tun_get_user+0x26dc/0x3ed0 [ 373.924775][ C1] tun_get_user+0x2aeb/0x3ed0 [ 373.929453][ C1] ? aa_file_perm+0x50e/0x15e0 [ 373.934201][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 373.939212][ C1] ? aa_file_perm+0x192/0x15e0 [ 373.943964][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 373.948893][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 373.954005][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 373.959453][ C1] ? tun_get+0x1c/0x2f0 [ 373.963604][ C1] ? tun_get+0x1c/0x2f0 [ 373.967748][ C1] ? tun_get+0x1c/0x2f0 [ 373.971892][ C1] tun_chr_write_iter+0x113/0x200 [ 373.976904][ C1] vfs_write+0x61d/0xb90 [ 373.981136][ C1] ? __pfx_vfs_write+0x10/0x10 [ 373.985901][ C1] ? __pfx_do_futex+0x10/0x10 [ 373.990587][ C1] ksys_write+0x150/0x270 [ 373.994912][ C1] ? __pfx_ksys_write+0x10/0x10 [ 373.999760][ C1] do_syscall_64+0x14d/0xf80 [ 374.004340][ C1] ? trace_irq_disable+0x3b/0x150 [ 374.009374][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.015425][ C1] ? clear_bhb_loop+0x40/0x90 [ 374.020096][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.025975][ C1] RIP: 0033:0x7f53dbf9c819 [ 374.030380][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.050028][ C1] RSP: 002b:00007f53dcedb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.058430][ C1] RAX: ffffffffffffffda RBX: 00007f53dc215fa0 RCX: 00007f53dbf9c819 [ 374.066391][ C1] RDX: 000000000000007a RSI: 0000200000000580 RDI: 0000000000000006 [ 374.074346][ C1] RBP: 00007f53dc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 374.082304][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.090269][ C1] R13: 00007f53dc216038 R14: 00007f53dc215fa0 R15: 00007ffdc42e6fd8 [ 374.098243][ C1] [ 374.101592][ C1] Kernel Offset: disabled [ 374.105925][ C1] Rebooting in 86400 seconds..