last executing test programs: 2m47.869243145s ago: executing program 0 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000380", 0x18, 0x3a, 0x0, @local, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x9, @ipv4={'\x00', '\xff\xff', @local}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={{0x14}, [], {0x14}}, 0x28}}, 0x24000020) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="010029bd7000fbdbdf250c000000200005", @ANYRES16=r1, @ANYBLOB='4\x00\x00\x00', @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x8094) 2m47.728167913s ago: executing program 0 (id=200): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="feffffff00000000000000090000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000585000000870000001801000020716c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000190000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000100"/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) 2m47.257382575s ago: executing program 0 (id=209): socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x6, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2m46.566659762s ago: executing program 0 (id=213): socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0xfddb, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d0}, 0x1800) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1600, 0x20000200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=@base={0x5, 0x4, 0xc, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 2m46.032196628s ago: executing program 0 (id=219): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="feffffff00000000000000090000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000585000000870000001801000020716c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="5cf0b67aa16bf1dcc2f1ae5aa14e42cb6db77c270b99b1c640ab27453b4a089d9ad367f0f0dd7ab38ddbaeb047ef74d0a1f9aa080b894ea2f067824e2331f63e32eca6dd1196239a33e3ff58a8c40a9c120cca1666ab88492ec25f2ee144dc6b0d2e21651eea22bd79d45e406676df1e1ae9f937ff483c77a3c16a52c736c022b2829500081c0d6159780f114f713eb8364ba6d5b6c9f64f43326bc2219741e92de26f4342bcc6d691ff5f36c990af86750adc5b945e27ee8d6b65cd12841c9b110bad0f2c9a2d2e73410f0cb58d43c433459b820ed4314723626946aa6697e045c1edce001ffe549ae2a44b4377da7d4f3d2857e45c3f25ea44797577256b587f7420a30745a6e373c058200d42edc02b42d028e4cab8d6fe09d677ccd453784f3deb8724be00842dc857e2efe2a752a32b3dcd252d6ccb6ede45cfab2830c0b5947a4b9c9f68705d9e669d8f1e6d60a32812825252a46beadd87ecc1344c9924cffb26c2effcf25244b1f7b717b0e4b3f30b8c136b2385aeb52364d199e97c455117c390d3d3f0524bb4159b15a1803be4d289ee4524a36d70a47f56b1dcb865c40452f9851860601d929a4237c3ff9522ce238fb12761a11b0eeffa5156d5f8f8e8782dd61e291cd691dfebf673c04622ab3d0f41386eaa02f05a9d4f0b83c796ba1a3115ce0132030cd11f4cc797a20e5388ca45936c27282f7c28ae8312654c9f34b28f1c59894449dcc1c993929cff02280f7688100ac4ccba6e534cd44e6cefa6cf2c64fa66f8e3d59b0b851fbbdbbe81d57c44a5eee6a7d96ca176ad33240a703cff52de4fd70ea2d4330f4efc17c55aa688ed5daa1646e50ffc07c95059a2b3ee442f665c9838293b0400b951a1f706bf73b63d9d7a8aed42c0b54bb81be4fc698e1eb0605d656a5446698b76ef5a224cde75c457d49ad7479153d36ce1c2e32011e058866cc94d44604eefc42fdb6bfd82cf4722bf4c73df1ea2d02eb787ec0eb26ea13532a77465da7070bff12fe8c1694ec2eb87285915ab182543db23b45a1ca291e7b9133fccdc0742ce6e6b71e3286412339dc52d696136f47912519545911c246c875ff80dd734f81c41a73493da7da9c4ee125c60dd65a49d490e2fc33ca5fc511ad18148b1177f19eaeffe7a0174875dd03e8e3b32ebcae0a8aabea0d4d1de879332ea50471fc6eb5b7cefcc7b243c22c84d85c73f8c8fc31cbbcd9f4c6b601e02375428fdbd320c2182877da71a2d70330f05fd8e7c50f73c291bc4bff8e306f55c79cfea125876f6e9092ad5598d8fa62d119385061f1ff13bf7c2b44fd363be7229f6b4f2f6fb7f641535c47cca350e598b8290fa73bfc0559e5bfa74228bd4b7048b8f0356c43a439b5731381d575997780e4f57b5c2d6b5bfbb955aa10e9f9cc46eb62b530a156511fa7e0c001f24396af1a9946d07d3c065f7fb88c430c63807652c60cb174735e1466df3bd407a765a4a63ad2cf004bad50ab2049a7f56cdfd53d39eabc749871e70fbab4ffe42756ed05335df15d40420134902a68b69a15dda03c98ed9333174043441f807b70f5a98d35984128a902e7ee8d5ae806ca40e4f5ad2288ec645ca43275c7625eabda5a774d10c9efcc852b4e2a181255308ab1082ad382bb5bdff980865e7caadcec81b4697457d816625097cb4a9659d480145a3d40237e54be17faf12fae9a9a48226fd7e43509e325359642bd8626e37958f83494b15b6c615121238129c15c1fac440dabc71a836ac2976e1987abdc3ecbe78dacda51cf9019e3159b276a877e355c18a9835cdf98522dad7467dcbd97dca4098599ce33ebee7c742ab847d39172608fd8f829e344393b50f29f0e7efdc35bad46c1e20ed7c3f5874f021a8afe3a96cf9e186eafee13b138d92091282414ad896034d8146e849785b364450970abe11f743a12ac977062059ad7f67b01d32cdcc75c6babe2309fc929a9d92c805ecb4ff70719df50807e824ae90f66b0557bff4ebf78dfa43532869ff5164e144defc4d8ee1d6745ed369e7ed7afc981f0f3a0c82a1f97032a12eb8d672b2231040d132971ff2b2ea2eeb0f30fc21fdcd80e32f8a64d325b0fa74919c0b727335230cd340883ed28bd50af63e07f98f91e5d69851b25ab260828303713fa7ce5671c598fabee013bbb6ed04bc70e8d16d9748b885179ae22e4a9ea40d55d6565b0dc5b35719f28199b95ce9ce7f3c81c5a62a5ec1c9c63a8c74cbd26682875ffd2b8c709643d4dfa81199f9828fbe6c1e99d5c003f7ebfbf860fb238f1e427c74eadf459ed60ee73de4d13c8cfc7c58fc371fdd0e8bd70b10e4f9de9928f5c1fa81dffabc7a818fc8d50d9611f06b901bd88a5fc6b9f8bc6503b23822f105653b598c9f0abffbae0d8c56cff568f2c2bc47a88b26c2124a78921462efa4895730f369bf1f0d3227ef1b76dd394317c1726a13f9c15d65bcf6128b61351abac6a54151efcd872d25d9929cf5b7ef141e84b8d145fff6453d6a943af1c0ebd6c2aad77c1cadd21880bcdc362c690e88a914f946c8cfe00ac1936ac8e7ee66156bf76a158b09244aee3c937677067b8d6ce6de5711c80ee00893acf16e86e44037450581e6d06aff72630356644d2345741e76065a15b23cd57ed96a4b702b07a1c2df236ef5d1f0711ed23742a05bf7c047b48338e28115cdce04277cc10936937f0434ae60adbf1a9fc6f422ce8017d1f7b5554c19dc67fdce214afdb8b9a04e3987d16ce5b0b8d9f779914441357347af13f08fec8b05e4f786e88d1346fffd81cd3feb2c518c8a5199ebc2e15754a789febfde86dacb5530ebad117acc0b1cad2669836b5e536dc3df3739f22b85bf1d64353ce65b81707902fc9b471bd159fc80065f26d56aa310d47c276bbd83f5d2e5e4ffbe0e424b21eb940d9e1b3198eae52cdde8c193f4f07e7af9e40f64e2ebdb9aa0f0dc49fae9b024128379eec28ff2b2989907e16bdd9ea22f767f73d21c1c9ed2992b1c5ff5e606c7a3f5f29ce6e30e0118f5c6f88c6bdd27bc58fc74390a97a98590b31fbcbd76449777b253ce0c68da51d402ae862beef5fbfd8afb3aaa62f57826e74c8f6b985aa456e015fd8325eb8fedbc0f0e681bcd8d7626bee70e48d563d1acb03af39d206384b1e8328e588e66fb7243c8c9c2748a8f9efb34a0ab4e76035d9c6e4a7784ead7194f2868f97c580769942b3e81bf02e55c27f43885303d641ab9717618592bf790c119a9033ffce20a8ffcd0d1f1043add8da1a40b2d223920e33625366ccbf515b4e83ba5030df036316798c8cd50b5dca303fddfed3b4d7e89077be0af139ed509243dca68271d02238c85a6dc019897727b6137b18fdf444cff1790631b4c411daa9939b4a4b1abd93b2b1370d62c9e07962cacdde123b75a625553cc8dd2c4f4df4f96a1cdd07fefb232347dbf24e39831251d30e931dc965b789975d93c35d001bb90335f77984b4fe6cfe67eeacbfe8b03dd3b9eccc33ae979b38bf89417e89e0b7c3da65443cb8371353e7b5a44f99db5c73a0f7bc84147ef45847dc0231e00684f0bfb361efc62636c460501a910047db41258c00538b6763b3a79a23395afc6a46be1f53d123202bb598f9e3f40d50939f0cb01c70215e55de53703375e5be090387eaec3717d22e718c31f9d9eb2a81a2bddd846671d14aa42995cd18aca6c804b4b8eba42693eb4d2db995ef26e5a7ab1c4a98d7c268821edf7d2f193f381c15e87fa8355207c3efb209e4214038e99f7c3e7fdcdc4d038b18b08c488edc20a949f7417a7d8dd4e37dbf1b4afcf79ef867d17ca68a0d744b8f6aee7738be4beb737ca9dba34fda810f44c0f51ec9f8e295e7cd78e3256ae73db7186b1e29a04f63065c44fa6c7a16fe4f50851f336b402ce5a73ff88f9b5cdb52ead12060590180f112a4f6c36e5418207bc5dc8635ec831e383ae67fbbe119de517a6932a69440015d014a1d143c8b09f611aa4f79b083c8ea67806cf221ede408771cf2d979feb3e448fcbd859e875d6ff6cff062e073bdb4b32bcf5", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000190000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000100"/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) 2m45.565556097s ago: executing program 0 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000a00)=0x59c2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0xffffa002, @loopback}, 0x1c, 0x0}}], 0x1, 0x4004804) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x77ff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001000128008000100767266000c000280080001"], 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000480)={{0x77c, 0x1}, 0x20}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r5, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x440b0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@getae={0x15c, 0x1f, 0x400, 0x70bd27, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0xa, 0x2b}, @in=@private=0xa010100, 0xc}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_thresh={0x8, 0xb, 0xffffff81}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in=@remote, 0xa, 0x4, 0x5}}, @sa={0xe4, 0x6, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x9, 0x4e21, 0xd, 0xa, 0x40, 0x80, 0x3b, r5, r6}, {@in=@broadcast, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, {0x7, 0xfffffffffffffffe, 0x10000, 0x1000, 0x7933005c, 0xffffffff80000000, 0xf, 0xc79d}, {0x0, 0x8000000000000000, 0x3ff, 0x7}, {0xfffffff7, 0x6, 0x5}, 0x70bd2c, 0x2, 0x2, 0x2, 0x1, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004044}, 0x48811) 2m44.869202546s ago: executing program 4 (id=231): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000003c0)={r0, r0, 0xfff8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000880)=[{}, {}]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'veth1_macvtap\x00', {'xfrm0\x00'}, 0x1}) 2m44.297467073s ago: executing program 4 (id=234): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440), 0x400, 0x0) 2m44.2377403s ago: executing program 4 (id=235): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="feffffff00000000000000090000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000585000000870000001801000020716c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000190000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000100"/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) 2m44.056864845s ago: executing program 4 (id=238): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m43.730005129s ago: executing program 4 (id=241): r0 = socket(0x2, 0x80805, 0x0) unshare(0x2c020400) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x1}}], 0x30}], 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xffe000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="7fe706", 0x3}], 0x1}}], 0x1, 0x80) 2m43.435909801s ago: executing program 4 (id=243): socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000440), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000480)=ANY=[], 0x0) 2m30.507868227s ago: executing program 32 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000a00)=0x59c2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0xffffa002, @loopback}, 0x1c, 0x0}}], 0x1, 0x4004804) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x77ff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001000128008000100767266000c000280080001"], 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000480)={{0x77c, 0x1}, 0x20}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r5, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x440b0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@getae={0x15c, 0x1f, 0x400, 0x70bd27, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0xa, 0x2b}, @in=@private=0xa010100, 0xc}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_thresh={0x8, 0xb, 0xffffff81}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in=@remote, 0xa, 0x4, 0x5}}, @sa={0xe4, 0x6, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x9, 0x4e21, 0xd, 0xa, 0x40, 0x80, 0x3b, r5, r6}, {@in=@broadcast, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, {0x7, 0xfffffffffffffffe, 0x10000, 0x1000, 0x7933005c, 0xffffffff80000000, 0xf, 0xc79d}, {0x0, 0x8000000000000000, 0x3ff, 0x7}, {0xfffffff7, 0x6, 0x5}, 0x70bd2c, 0x2, 0x2, 0x2, 0x1, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004044}, 0x48811) 2m28.277242408s ago: executing program 33 (id=243): socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000440), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000480)=ANY=[], 0x0) 40.087965098s ago: executing program 3 (id=927): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0xf, 0x1, 0x9, 0x8, 0x3}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x2, 0x10}, &(0x7f00000001c0)=0xc) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 39.840899198s ago: executing program 3 (id=931): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)="29a37385dd6f7c19", 0x8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r2, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x2, 0x2}}) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x6a040000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="77ab7fc334b617a3c71df5730b1113ebb02042f732e57a45b0a3fe7d8831f3767611d559aea6847e75188a366cc7f4ffa38663106a5637208942e6ecd0d3c0bb8aa05c448bfa6c4faf8c59e2690ef6416e9ee7984a95bb5481bd8f221459853640b5bc448923a950a0d9d328ab114436c807102432174c7daea1ee23e1eac70dfba5f2aa92f7ab81ca77bbb116366194ffb64f5d7a9b84dfce43efac3fbd84e9af204b3c7257fb054877aaf6c6c26e0495cdb4c211f831d1d5e92f52849d9469ae05066b495cd49fe78a431da6e213d87ec0623ba55573959a282544aebf001711f8f44396d4236a2bf9f5732c", 0xed}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008048, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4b291000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x3c, 0x1a, 0x4, 0x70bd28, 0x25dfdbff, {0x1c, 0x80, 0x80, 0xe, 0xfe, 0x0, 0xfe, 0xb, 0x1800}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1a, 0x10, r6}}, @RTA_VIA={0x14, 0x12, {0x6, "bbae6e1b53ef2f194f485f7c01f4"}}]}, 0x3c}}, 0x200008cc) 35.580858242s ago: executing program 3 (id=951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 33.1663844s ago: executing program 3 (id=954): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$nfc_llcp(r4, 0x118, 0x3, &(0x7f00000017c0)=""/249, 0xf9) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffffffff000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002be07040010002000f00000008000300", @ANYRES32=r8, @ANYBLOB="05002f000000"], 0x2c}}, 0x18) 32.169169922s ago: executing program 3 (id=969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x800, 0x0, 0x0, 0xea, 0x10000}, 0x9c) unshare(0x26020480) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r1, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x80000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x14, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r5}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000100)=0x2, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="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", 0x265}], 0x1}, 0x80c0) 31.1488186s ago: executing program 3 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2b, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61, 0x1081}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x77ff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 15.982793859s ago: executing program 34 (id=973): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2b, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61, 0x1081}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x77ff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 3.556505059s ago: executing program 1 (id=1143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00", @ANYRES64=r2], 0xb8}}, 0x20040014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x168, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffc}}}}, 0x3f0) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000130005002bbd7000fcffffff07000000", @ANYRES32=r5, @ANYBLOB="422000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000300030000000000080006000001000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000500)=""/247, 0xf7}], 0x2}}], 0x48}, 0x0) 3.143855204s ago: executing program 5 (id=1146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x8, 0x42, 0x3f, 0xc0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff", @ANYRES32=r1], 0x38}}, 0x20044804) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x4100, 0x0) 2.990751029s ago: executing program 5 (id=1147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x4, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x7, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17, 0x7800, 0x7, 0x1}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x55, &(0x7f0000000100)=""/162, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x31, 0x5d, 0x0, 0x46, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x0, 0x4, 0x7ff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f0000000200), 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x158, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000680)=ANY=[@ANYRES8=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40) 2.76209566s ago: executing program 6 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa088fa5485593691, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e64300000001400028008000100"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a00000000004100000085000000d00000009500"/40], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) unshare(0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x9b, 0x55, &(0x7f0000000080)="566101b3ad41ac76704d8c7c3c5b43927b06735063c74dea167e6162e989eec13b15f53772ac1733fef4cece5bb8db48bc18ed54bdb66e7029e8f708adb63c92c50cbee545f67813dfe90a4b53224ec17b0015fb3be801e5646dbc433df454143b47ec35008d5fff0dbdddd5d8084650d0613aac7a394e8dc78d0f627f459b7e60bd0fd4d3b6d4909a2140ca822f6da6eb6ac3f37a8c543823fb80", &(0x7f00000001c0)=""/85, 0x9, 0x0, 0xec, 0x92, &(0x7f0000000240)="4b74248a4cd29cff7da77623620a1d13e0c50b7b0f70ca04bfbe1fbb58b309f5b13e5b2c5b17c928fa1adda95147b0aeca4840abbb586bf447a5e08acbb8f3ac8a1b83e36de2687bc1ba904d7e513f3292aad89539e181b9fac467de0c7c100ba585d1a15c779737ea94546476605f8a3de4499867f00465192e1a23077984e5465a50f9e3414a6b6a8941b76db6b799dff749e8901de92eea9fa06185761b92554f596a491758998999164167eae05d91965ff05d73b00941f000872817df112b694ff2868f73a9d611b9ae5e79063d9404c514461d1820f9271f3828675e7f696ce2f9c2ee62ab1a982ae1", &(0x7f0000000340)="1aff3f2d21f8fafd629f633cacc575740da72c8c466c19fc7a2b6638b2ddd1e1a44a9f73fefb7962d28892d33b2014b7190ea377c2e36e4aa11551b2077ff50a1f4f6ac77031a7fe873255eb794de65a9349aa9a801b8c4668f829e6c98848ba7aa9187ee13fbf3d958aafe9ee2980ebb71526e2d1a37ff458b4737f0b922e3e8f2832d114fdd84bce1011de92a95cbe37f2", 0x0, 0x0, 0x3}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x3a) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x7) 2.660460851s ago: executing program 1 (id=1149): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100460da566938a008404"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x0, 0x0, 0x7, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.399628993s ago: executing program 1 (id=1151): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000200"], 0x80}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000040), 0x800) (async) socketpair(0x18, 0x4, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000040)='ns/cgroup\x00') (async) sendmsg$nl_netfilter(r5, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x244, 0x8, 0x4, 0x101, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x8}, [@typed={0x9, 0xcd, 0x0, 0x0, @str='ipip\x00'}, @typed={0x8, 0x2b, 0x0, 0x0, @fd=r7}, @generic="8f3cc0296a41bf88fab1b4ef5ce395898e94b19b0b8bdba839546518ce3e9c694b03753ecc5ede53387e1cdc75a6ca5bda0eea6c63d0e8abf5b7a27b57dc9256b73ebc69c9b7a6906b7b431c9db4cba19eb03e09c8b94fbf3782196622ee96f784f7168236dcb43b43181fde015e9ce7", @typed={0x9, 0xdd, 0x0, 0x0, @str='ipip\x00'}, @nested={0x94, 0x2, 0x0, 0x1, [@nested={0x4, 0x136}, @generic="ee6b987ab07b6db8c86f26736f2048b021048883f6bd151df779759ab1534d1981547fb0da4baa443d88eb956ec19a38aaaeab1dfd9b1aa496cf9b57328320bcf530d94f783922f6016dfefe8b455cf2dcbd2c87e95fb6a578e8536d7701bd4d23ce17259b305dbc52434c560507a66aa7079b88", @nested={0x4, 0x11a}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0xf9, 0x30, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="8b4491ce8f0a4aa8a97039b8e65440ef93562497977c5da17c1f6f8d7a6df164693227fcd9ce16988a222da229bf11601012091c4b1fca79ce82315fd55d42f08a726c0d495f403c92ba6975eafabaff40fbccdfb22a17e801eccf543325e1ee593e378c2df2110d0af52d78cef3f4792825892e278b58c66bd996b729dded91635269acd98b78c44013801ff01770bcfb77c2098b9da3705205a809f4ef2c0e7bed9898425cd77e7eb73b7e05630f7baec8a56e5ad945be2c9fb561df9c4224161ff8a6492ea6316e702b256aa4d4501d0dd2b8e761271379091caf3b", @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0x8, 0xd5, 0x0, 0x0, @u32=0x8000000}, @typed={0x8, 0x124, 0x0, 0x0, @pid=r9}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r10, 0x215eb000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) (async) sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2.395870163s ago: executing program 6 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xc94}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) 2.320311885s ago: executing program 5 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="594d4c76ecfa7e1275a4bad77840b077dca171576b504e3dde6761a2f315229597100f2c026450afa0e3ad176f9200ab507937896c7ca1087bc2370deacbd022853ab0aed626bc9f0c567d014428bc5c4b36d278bf88aa04c8ed0990a6526b5767c77a2b54cb3a5b3a4c67bc2d87d8dfb2263acfe0efb6bacc262f361b8589049353e8e33740ffb15ceb8bddbdfc0582a553adee91f760890dde8f7effdd94d7a20aa892ee3229d353fa7c91d02570a978b5776a8f3d4a770c6bd426441ac2726f07f7e2fb2c135880fe76d710939df68925fc98", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf2507000000080001002c00000008000300", @ANYRES32=r4, @ANYBLOB="050053000000000008000500090000000500530000000000140004006970365f76746930000000000000000004001780"], 0x54}}, 0x20000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000102427db00010000000000000000000700000a50000000060a010400000000000000000a0000120900010073797a31000000002400048020000180080001006c6f67001400028006000140000400000800034000000fff0900020073797a32000000001400000011000100000000000000000002"], 0x78}, 0x1, 0x0, 0x0, 0x4008085}, 0x40) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xc94}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) 2.080392224s ago: executing program 2 (id=1154): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e1d, 0x3, @loopback, 0x100000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="2a00e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}], 0x7}, 0x4004000) 2.064733474s ago: executing program 7 (id=1068): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x24000058) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0x408c00b2}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) shutdown(r7, 0x0) 2.008060532s ago: executing program 6 (id=1155): socket$kcm(0x10, 0x100000000002, 0x4) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {0x0}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}], 0x1, 0x0, 0x0) 1.840203304s ago: executing program 2 (id=1156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x8, 0x42, 0x3f, 0xc0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff", @ANYRES32=r1], 0x38}}, 0x20044804) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x4100, 0x0) 1.839603805s ago: executing program 5 (id=1157): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="feffffff00000000000000090000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2000}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000585000000870000001801000020716c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a31000000000800044000000000090001007379"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000180)={{0x2b, @remote, 0x4e21, 0x2, 'nq\x00', 0x0, 0x100004d2, 0x30}, {@multicast2, 0x4e22, 0x2, 0x4, 0xd3, 0x6}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000020000000002000000000000080200000000005f00"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000190000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000100"/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) 1.827720782s ago: executing program 6 (id=1158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808190000000102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.743007761s ago: executing program 2 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) recvmmsg(r3, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES32=r6, @ANYBLOB="87bc"], 0x28}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r2) r9 = socket$kcm(0x11, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000780)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x7ff, 0x7, {{0x1e, 0x4, 0x3, 0x25, 0x78, 0x7ff, 0x0, 0x3d, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp_addr={0x44, 0x24, 0x45, 0x1, 0x4, [{@private=0xa010102, 0x9a6}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a2}, {@remote, 0xe502}]}, @rr={0x7, 0x7, 0x67, [@local]}, @timestamp_prespec={0x44, 0x14, 0xf2, 0x3, 0x7, [{@broadcast, 0x1ff}, {@multicast2, 0x8}]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0xc, [{@multicast1, 0xfff}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "a52128922ce34de79862cba439302a6b"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r0, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r8, @ANYBLOB="080025bd7000ffdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000199d6ef66007072696f7269747900000000000008000000000000000000f9063e16870899345c3b0000000000000000050003000e000000080004009a00000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="bc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400fdffffff08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f0000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400010080bf0400000001000904070000001e00070cfbffffff0004011202000000d7d56560080000000200"], 0x2ac}, 0x1, 0x0, 0x0, 0x10}, 0x20004006) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280, 0x14080}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_MASTER={0x8, 0x3a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) 1.620009903s ago: executing program 6 (id=1160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {&(0x7f0000000680)="b0abf8b7c46a76e838", 0x9}], 0x2}}], 0x2, 0x2004000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0xfff}) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x1010164, @multicast1}, "2200354f00000001"}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4c60000", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) r7 = accept4$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) getpeername$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x7fffffff}}, 0x8, 0x6aa}, &(0x7f0000000440)=0x90) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r8, &(0x7f0000000540)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r3) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0x4) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 1.049383032s ago: executing program 2 (id=1161): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 21) 932.640874ms ago: executing program 7 (id=1162): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x4, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x7, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17, 0x7800, 0x7, 0x1}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x7, 0x55, &(0x7f0000000100)=""/162, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x31, 0x5d, 0x0, 0x46, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x0, 0x4, 0x7ff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f0000000200), 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x158, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000680)=ANY=[@ANYRES8=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40) 623.521967ms ago: executing program 5 (id=1163): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, 0x14, 0x1, 0x0, 0x0, {0x11, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "6d13a20d015dc921e4"}]}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/4117, 0x1015}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000003800)=""/4107, 0x100b}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000000100)=""/21, 0x15}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x10}], 0x4, 0x40, 0x0) 480.826085ms ago: executing program 6 (id=1164): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @loopback}}, 0x100, 0x0, 0x3000000, 0x1, 0x54, 0x0, 0x1}, 0x9c) 385.346697ms ago: executing program 1 (id=1165): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0xfd, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) (async) shutdown(r2, 0x1) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x61}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) close(0xffffffffffffffff) 280.056753ms ago: executing program 2 (id=1166): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x610, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) 269.921179ms ago: executing program 5 (id=1167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8000000a008fee0000080009000000000008000a00afc3000008000a000000000008000a0000000000080009003b3ef51608000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000020000001d44000000000000620a20fe040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0008000000000000060000000000000006000000090000000200000000000000ff0f000000000000040000000000000008000000000000000000000000000000000000000000000082200000000000000000000000040000001100000000000000ff07000000000000060000000000000000000000000000000000000000000000000500"/144]) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="0c114e8fb214f6bec1055767d8b995249fdcc64bf51705bbf8b0cee7eaea55f0a3fd59fbdd91b45793608d9aebd7f4d26318ddd5b599fc3a6ae8b8d2d6a134", 0x3f) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0xffeb}], 0x1}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x15}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x3, 0xd2}, @generic={0x0, 0x2}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d"}}, 0xfce) 219.375939ms ago: executing program 1 (id=1168): socket$kcm(0x10, 0x100000000002, 0x4) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {0x0}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}], 0x1, 0x0, 0x0) 218.180088ms ago: executing program 7 (id=1169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x8, 0x42, 0x3f, 0xc0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c001680", @ANYRES32=r1], 0x38}}, 0x20044804) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x4100, 0x0) 68.797675ms ago: executing program 1 (id=1170): unshare(0x2020600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000fde567c245f2427dc193f48934887070cc612b4a9acc173c7740448d9317ff3a0ede53f3834a8b49ec0d2875bb2e0da0c43e680daeaa0de7d164a91b7ee39d755ae0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4c00000011000100000000020000090002000000200000", 0x17) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000000800)={0xa, 0x4e24, 0x143, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000840)="9e946982c233077c06fe5180c40de2177340603b2a915bd79be582d78ba6e475b523305a1563c5f18b3bb61fff460cac712fdab404a28b6dda345099d477c662371eff8c747fe7b0f4b4b5526303e13c34167711879b0f08cd73c4bac8c2061c128cd791dbd8643b01baef08046c77fe41cd5f6130d00743ab2831284602a51463dcbb15c5939d637a915c5aec0f9b20995e9d1092bf9cca05a4a96c63c120e6fe857dc06d0b70ac4cbadb4892410f5f092d14b84cb78ea3e84f88c9d1e88c6d", 0xc0}, {&(0x7f0000000900)="bb4359737827344d2edba766a758769c03ec6a5fbfa4b9fc8a249533a9ca8ac3f0a1cea0f831f303f575cacb556dee649a00c8311c32311521eaf27f8e47ae083f4ca2fafc58ecaba9d1ffc785d45ea55d029c55145f4bfc91ddd87248d71e0136c2e33c3c4c94cb839b5944ee8f634143b320967516f2efe41f36602a6b58b87ae10dacfd3f05499b7d253a87eff3ff74b412c4ee1d2d31dadb0bc31e27056a4f2cea5146a43f82c4bb719504b5573e02f4f45662f71139da57d8bacc757d3d24084bb33ad987e913717d7ed63cb848a5969382ccc87cc3af961b9a712a50cc4d8afbef03b6c7e50aaf061e2ca5028b", 0xf0}, {&(0x7f0000000a00)="bfa844fec98404417d1d4ffacd4e2a91e8b8990f88a6acb2b146c4bd24a2d3ffeb5167dd4d4a183820860401fa2fce5bac294a06c129e47fb21851488a711a388e6c027594b6e6b8a9120cd33eb6329ac79807f1cf7c6c5bca733b4387703a0b55c45de4e21f882e05beaba0ca63978c02d832adb12ab6ce433d8bed3c0fac7e26865e560775ceda5fcd0034cb69b8ec1268160e74fe70bcb12504893fad4184e7ae7789295dfa9ae5d91c5975c1a7bb8fcaec6faef6e7be22375f874095e088c2ec2b26160e6a9fe64b28e6b15466b9e5e29dad30392063852cfc4f3241c794b88d6f2a20bd8a38e0b5f53b45bc257d447781", 0xf3}, {&(0x7f0000000b00)="b37757ce87a16253e89a03bc777b82aecdb52230b87d93678ee12ec0623406cef17c3fbfeaaf5c", 0x27}], 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x248}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000680)) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400ff0200000000000000000000000000010c00028005fbffffff00000006000340000300003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000fffffe170a0a8ee9f3eae00000020c000280050001"], 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80000, 0xfffffff7) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESHEX=r3, @ANYBLOB="294ce7c12fbfa8b1cc2646acc2ac246c05d937"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000003c0)={r2, &(0x7f0000000140)='[\x00', 0x200800, &(0x7f0000000280)={@align=0xf, {0x2, 0x89, 0x0, 0x9}}, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x7fffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000440), &(0x7f00000000c0)=r8}, 0xffffffffffffff76) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000200), 0x12) 51.040355ms ago: executing program 7 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) recvmmsg(r3, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES32=r6, @ANYBLOB="87bc"], 0x28}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r2) r9 = socket$kcm(0x11, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000780)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x7ff, 0x7, {{0x1e, 0x4, 0x3, 0x25, 0x78, 0x7ff, 0x0, 0x3d, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp_addr={0x44, 0x24, 0x45, 0x1, 0x4, [{@private=0xa010102, 0x9a6}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a2}, {@remote, 0xe502}]}, @rr={0x7, 0x7, 0x67, [@local]}, @timestamp_prespec={0x44, 0x14, 0xf2, 0x3, 0x7, [{@broadcast, 0x1ff}, {@multicast2, 0x8}]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0xc, [{@multicast1, 0xfff}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "a52128922ce34de79862cba439302a6b"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r0, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r8, @ANYBLOB="080025bd7000ffdbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000199d6ef66007072696f7269747900000000000008000000000000000000f9063e16870899345c3b0000000000000000050003000e000000080004009a00000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="bc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400fdffffff08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f0000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400010080bf0400000001000904070000001e00070cfbffffff0004011202000000d7d56560080000000200"], 0x2ac}, 0x1, 0x0, 0x0, 0x10}, 0x20004006) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280, 0x14080}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_MASTER={0x8, 0x3a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) 0s ago: executing program 2 (id=1172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): file:0 inactive_file:43535 isolated_file:0 [ 166.711879][ T8013] unevictable:0 dirty:303 writeback:0 [ 166.711879][ T8013] slab_reclaimable:10899 slab_unreclaimable:103758 [ 166.711879][ T8013] mapped:40050 shmem:548 pagetables:1337 [ 166.711879][ T8013] sec_pagetables:0 bounce:0 [ 166.711879][ T8013] kernel_misc_reclaimable:0 [ 166.711879][ T8013] free:1298279 free_pcp:9679 free_cma:0 [ 166.834117][ T8013] Node 0 active_anon:26744kB inactive_anon:0kB active_file:0kB inactive_file:173940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160200kB dirty:1108kB writeback:100kB shmem:2292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14200kB pagetables:5272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 166.834292][ T8013] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:76kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 166.834456][ T8013] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.834640][ T8013] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 166.834754][ T8013] Node 0 DMA32 free:1233808kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26744kB inactive_anon:0kB active_file:0kB inactive_file:173940kB unevictable:0kB writepending:1208kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:38232kB local_pcp:17668kB free_cma:0kB [ 166.834924][ T8013] lowmem_reserve[]: 0 0 0 0 0 [ 166.836281][ T8013] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.836447][ T8013] lowmem_reserve[]: 0 0 0 0 0 [ 166.836544][ T8013] Node 1 Normal free:3943948kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.860592][ T8013] lowmem_reserve[]: 0 0 0 0 0 [ 166.860718][ T8013] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.861098][ T8013] Node 0 DMA32: 524*4kB (UME) 360*8kB (UME) 170*16kB (UME) 316*32kB (UME) 124*64kB (UME) 30*128kB (UME) 24*256kB (UM) 10*512kB (UME) 7*1024kB (UME) 5*2048kB (UME) 287*4096kB (UM) = 1233808kB [ 166.862982][ T8013] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.863359][ T8013] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 6*16kB (UM) 6*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943948kB [ 166.874565][ T8013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.874616][ T8013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.874667][ T8013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.874710][ T8013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.874765][ T8013] 44104 total pagecache pages [ 166.874787][ T8013] 0 pages in swap cache [ 166.874808][ T8013] Free swap = 124996kB [ 166.874829][ T8013] Total swap = 124996kB [ 166.874865][ T8013] 2097051 pages RAM [ 166.874886][ T8013] 0 pages HighMem/MovableOnly [ 166.874908][ T8013] 428730 pages reserved [ 166.874928][ T8013] 0 pages cma reserved [ 167.146535][ T8012] tc_dump_action: action bad kind [ 167.950997][ T8029] syzkaller0: entered promiscuous mode [ 167.964052][ T8029] syzkaller0: entered allmulticast mode [ 168.022236][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 168.040576][ T8029] tipc: Started in network mode [ 168.045935][ T8031] FAULT_INJECTION: forcing a failure. [ 168.045935][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 168.045968][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.5.636 Not tainted syzkaller #0 PREEMPT(full) [ 168.045990][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.046002][ T8031] Call Trace: [ 168.046010][ T8031] [ 168.046018][ T8031] dump_stack_lvl+0xe8/0x150 [ 168.046052][ T8031] should_fail_ex+0x410/0x560 [ 168.046086][ T8031] should_failslab+0xa8/0x100 [ 168.046112][ T8031] __kmalloc_noprof+0xfe/0x720 [ 168.046143][ T8031] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 168.046172][ T8031] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 168.046222][ T8031] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 168.046341][ T8031] genl_family_rcv_msg_doit+0xda/0x340 [ 168.046436][ T8031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.046525][ T8031] ? apparmor_capable+0x126/0x170 [ 168.046600][ T8031] ? bpf_lsm_capable+0x9/0x20 [ 168.046686][ T8031] ? security_capable+0x7e/0x2c0 [ 168.046774][ T8031] genl_rcv_msg+0x614/0x7a0 [ 168.046860][ T8031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.046927][ T8031] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.047010][ T8031] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 168.047064][ T8031] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.047136][ T8031] ? __pfx_ref_tracker_free+0x10/0x10 [ 168.047234][ T8031] netlink_rcv_skb+0x226/0x4a0 [ 168.047298][ T8031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.047370][ T8031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.047464][ T8031] ? down_read+0x2be/0x330 [ 168.047552][ T8031] genl_rcv+0x28/0x40 [ 168.047615][ T8031] netlink_unicast+0x7bd/0x940 [ 168.047709][ T8031] netlink_sendmsg+0x813/0xb40 [ 168.047812][ T8031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.047890][ T8031] ? apparmor_socket_sendmsg+0x98/0x360 [ 168.047966][ T8031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.048010][ T8031] sock_sendmsg_nosec+0x13a/0x180 [ 168.048079][ T8031] ____sys_sendmsg+0x54e/0x850 [ 168.048123][ T8031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.048199][ T8031] ? import_iovec+0x73/0xa0 [ 168.048278][ T8031] ___sys_sendmsg+0x2a5/0x360 [ 168.048325][ T8031] ? __lock_acquire+0x6df/0x2e50 [ 168.048409][ T8031] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.048545][ T8031] ? __fget_files+0x2a/0x420 [ 168.048615][ T8031] ? __fget_files+0x3a2/0x420 [ 168.048719][ T8031] __x64_sys_sendmsg+0x1b1/0x290 [ 168.048778][ T8031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.048888][ T8031] do_syscall_64+0x166/0x520 [ 168.048958][ T8031] ? trace_irq_disable+0x3b/0x140 [ 168.049010][ T8031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.049078][ T8031] ? clear_bhb_loop+0x70/0xc0 [ 168.049160][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.049229][ T8031] RIP: 0033:0x7f12bf59e159 [ 168.049280][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.049323][ T8031] RSP: 002b:00007f12c04ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.049378][ T8031] RAX: ffffffffffffffda RBX: 00007f12bf825fa0 RCX: 00007f12bf59e159 [ 168.049419][ T8031] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 168.049457][ T8031] RBP: 00007f12c04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 168.049489][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.049520][ T8031] R13: 00007f12bf826038 R14: 00007f12bf825fa0 R15: 00007ffd7075a358 [ 168.049628][ T8031] [ 168.182773][ T8029] tipc: Node identity 4a47ab3eada8, cluster identity 4711 [ 168.183484][ T8029] tipc: Enabled bearer , priority 0 [ 168.269253][ T8036] FAULT_INJECTION: forcing a failure. [ 168.269253][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 168.269332][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.3.638 Not tainted syzkaller #0 PREEMPT(full) [ 168.269404][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.269437][ T8036] Call Trace: [ 168.269458][ T8036] [ 168.269485][ T8036] dump_stack_lvl+0xe8/0x150 [ 168.269569][ T8036] should_fail_ex+0x410/0x560 [ 168.269667][ T8036] ? __alloc_skb+0x1db/0x7a0 [ 168.269749][ T8036] should_failslab+0xa8/0x100 [ 168.269812][ T8036] ? __alloc_skb+0x1db/0x7a0 [ 168.269883][ T8036] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 168.269963][ T8036] ? __alloc_skb+0x18d/0x7a0 [ 168.270035][ T8036] ? __alloc_skb+0x1db/0x7a0 [ 168.270123][ T8036] __alloc_skb+0x1db/0x7a0 [ 168.270244][ T8036] netlink_sendmsg+0x5d4/0xb40 [ 168.270350][ T8036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.270441][ T8036] ? apparmor_socket_sendmsg+0x98/0x360 [ 168.270528][ T8036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.270584][ T8036] sock_sendmsg_nosec+0x13a/0x180 [ 168.270665][ T8036] ____sys_sendmsg+0x54e/0x850 [ 168.270734][ T8036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.270816][ T8036] ? import_iovec+0x73/0xa0 [ 168.270916][ T8036] ___sys_sendmsg+0x2a5/0x360 [ 168.270974][ T8036] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.271088][ T8036] ? vfs_write+0x9ce/0xba0 [ 168.271203][ T8036] ? do_sys_openat2+0x14e/0x200 [ 168.271280][ T8036] __x64_sys_sendmsg+0x1b1/0x290 [ 168.271345][ T8036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.271459][ T8036] do_syscall_64+0x166/0x520 [ 168.271541][ T8036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.271596][ T8036] ? clear_bhb_loop+0x70/0xc0 [ 168.271674][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.271740][ T8036] RIP: 0033:0x7fa8acf9e159 [ 168.271790][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.271830][ T8036] RSP: 002b:00007fa8adf0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.271888][ T8036] RAX: ffffffffffffffda RBX: 00007fa8ad225fa0 RCX: 00007fa8acf9e159 [ 168.271929][ T8036] RDX: 0000000000004050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 168.271977][ T8036] RBP: 00007fa8adf0a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.272023][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.272055][ T8036] R13: 00007fa8ad226038 R14: 00007fa8ad225fa0 R15: 00007fffa85f35b8 [ 168.272143][ T8036] [ 168.428962][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 168.485665][ T8039] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 168.749554][ T8040] netlink: 'syz.1.639': attribute type 2 has an invalid length. [ 168.758171][ T8040] netlink: 'syz.1.639': attribute type 2 has an invalid length. [ 168.781102][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.830204][ T8028] tipc: Resetting bearer [ 168.883501][ T8028] tipc: Disabling bearer [ 168.932140][ T8050] syzkaller0: entered promiscuous mode [ 168.937803][ T8050] syzkaller0: entered allmulticast mode [ 169.459500][ T8077] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 169.468925][ T8077] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 169.485805][ T8072] IPVS: Scheduler module ip_vs_sip not found [ 169.581466][ T8073] syzkaller0: entered promiscuous mode [ 169.581537][ T8073] syzkaller0: entered allmulticast mode [ 169.647930][ T8077] 8021q: adding VLAN 0 to HW filter on device bond10 [ 174.033367][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.041228][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.064566][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.153643][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.169821][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.195779][ T8148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.207229][ T8148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.233902][ T8148] veth1_vlan: left promiscuous mode [ 174.241441][ T8148] veth0_vlan: left promiscuous mode [ 174.248980][ T8148] veth0_vlan: entered promiscuous mode [ 174.256907][ T8148] veth1_vlan: entered promiscuous mode [ 174.274622][ T8148] veth1_macvtap: left promiscuous mode [ 174.280763][ T8148] veth0_macvtap: left promiscuous mode [ 174.286869][ T8148] veth0_macvtap: entered promiscuous mode [ 174.295243][ T8148] veth1_macvtap: entered promiscuous mode [ 174.316819][ T8148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.326410][ T8148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.334909][ T8148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.345122][ T8148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.412100][ T3387] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.430583][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.430784][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.447031][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.447303][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.883220][ T8179] __nla_validate_parse: 6 callbacks suppressed [ 174.883265][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 174.900500][ T8179] x_tables: duplicate underflow at hook 2 [ 176.593089][ T3387] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.593174][ T3387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.593233][ T3387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.847626][ T8199] nbd5: detected capacity change from 0 to 63 [ 176.855131][ T8199] block nbd0: NBD_DISCONNECT [ 176.860260][ T8199] block nbd0: Send disconnect failed -32 [ 176.867197][ T8199] block nbd0: shutting down sockets [ 177.038080][ T8199] netlink: 'syz.5.680': attribute type 1 has an invalid length. [ 177.108593][ T8199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.135804][ T8210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.135859][ T8210] IPv6: NLM_F_CREATE should be set when creating new route [ 177.135903][ T8210] IPv6: NLM_F_CREATE should be set when creating new route [ 177.286669][ T8206] bond2: (slave veth5): Enslaving as an active interface with a down link [ 177.323054][ T52] block nbd5: Receive control failed (result -104) [ 177.388162][ T8218] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 177.544427][ T8218] bond3: entered promiscuous mode [ 177.544504][ T8218] bond3: entered allmulticast mode [ 177.545124][ T8218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.586787][ T8221] erspan1: entered allmulticast mode [ 177.604942][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 177.620632][ T8221] bond3: (slave erspan1): making interface the new active one [ 177.620685][ T8221] erspan1: entered promiscuous mode [ 177.639352][ T8221] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 177.787215][ T8234] syzkaller0: entered promiscuous mode [ 177.793773][ T8234] syzkaller0: entered allmulticast mode [ 177.867651][ T8236] bridge_slave_0: left allmulticast mode [ 177.867704][ T8236] bridge_slave_0: left promiscuous mode [ 177.868459][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.891632][ T8236] bridge_slave_1: left allmulticast mode [ 177.899455][ T8236] bridge_slave_1: left promiscuous mode [ 177.906928][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.922851][ T8236] bond0: (slave bond_slave_0): Releasing backup interface [ 177.940013][ T8236] bond0: (slave bond_slave_1): Releasing backup interface [ 177.962727][ T8236] team0: Port device team_slave_0 removed [ 177.976931][ T8236] team0: Port device team_slave_1 removed [ 177.983596][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.000862][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.018662][ T8236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.040018][ T8239] team0: Mode changed to "random" [ 178.718808][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.706'. [ 178.863387][ T8275] syzkaller0: entered promiscuous mode [ 178.863452][ T8275] syzkaller0: entered allmulticast mode [ 178.971307][ T8279] ip_tables: iptables: counters copy to user failed while replacing table [ 179.261695][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 179.411714][ T8297] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 179.411776][ T8297] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 179.411847][ T8297] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 179.469743][ T8297] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 179.519353][ T8297] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 179.629610][ T8303] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 179.643444][ T8303] team0: Port device dummy0 added [ 179.936194][ T8310] syzkaller0: entered promiscuous mode [ 179.941814][ T8310] syzkaller0: entered allmulticast mode [ 180.120362][ T8314] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 180.155858][ T8314] bond4: entered promiscuous mode [ 180.161689][ T8314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.193726][ T8318] netlink: 360 bytes leftover after parsing attributes in process `syz.3.722'. [ 180.341456][ T8323] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 180.379986][ T8322] FAULT_INJECTION: forcing a failure. [ 180.379986][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.380039][ T8322] CPU: 1 UID: 0 PID: 8322 Comm: syz.3.724 Not tainted syzkaller #0 PREEMPT(full) [ 180.380062][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.380074][ T8322] Call Trace: [ 180.380082][ T8322] [ 180.380091][ T8322] dump_stack_lvl+0xe8/0x150 [ 180.380129][ T8322] should_fail_ex+0x410/0x560 [ 180.380162][ T8322] _copy_from_user+0x2d/0xb0 [ 180.380182][ T8322] ___sys_sendmsg+0x1c6/0x360 [ 180.380201][ T8322] ? __lock_acquire+0x6df/0x2e50 [ 180.380226][ T8322] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.380243][ T8322] ? __lock_acquire+0x6df/0x2e50 [ 180.380267][ T8322] ? kstrtouint+0x6e/0xe0 [ 180.380366][ T8322] __sys_sendmmsg+0x273/0x4d0 [ 180.380393][ T8322] ? __pfx___sys_sendmmsg+0x10/0x10 [ 180.380423][ T8322] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.380477][ T8322] ? ksys_write+0x242/0x270 [ 180.380506][ T8322] ? __pfx_ksys_write+0x10/0x10 [ 180.380540][ T8322] __x64_sys_sendmmsg+0xa0/0xc0 [ 180.380563][ T8322] do_syscall_64+0x166/0x520 [ 180.380589][ T8322] ? trace_irq_disable+0x3b/0x140 [ 180.380609][ T8322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.380630][ T8322] ? clear_bhb_loop+0x70/0xc0 [ 180.380654][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.380674][ T8322] RIP: 0033:0x7fa8acf9e159 [ 180.380718][ T8322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.380777][ T8322] RSP: 002b:00007fa8adf0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 180.380828][ T8322] RAX: ffffffffffffffda RBX: 00007fa8ad225fa0 RCX: 00007fa8acf9e159 [ 180.380855][ T8322] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 180.380903][ T8322] RBP: 00007fa8adf0a090 R08: 0000000000000000 R09: 0000000000000000 [ 180.380936][ T8322] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 180.380968][ T8322] R13: 00007fa8ad226038 R14: 00007fa8ad225fa0 R15: 00007fffa85f35b8 [ 180.381048][ T8322] [ 180.818810][ T8337] syzkaller1: entered promiscuous mode [ 180.818855][ T8337] syzkaller1: entered allmulticast mode [ 181.200852][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 181.233160][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.733'. [ 181.343106][ T59] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.343175][ T59] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.343253][ T59] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.343343][ T59] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.413357][ T8357] FAULT_INJECTION: forcing a failure. [ 181.413357][ T8357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.413414][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.1.737 Not tainted syzkaller #0 PREEMPT(full) [ 181.413438][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.413490][ T8357] Call Trace: [ 181.413521][ T8357] [ 181.413551][ T8357] dump_stack_lvl+0xe8/0x150 [ 181.413665][ T8357] should_fail_ex+0x410/0x560 [ 181.413798][ T8357] _copy_from_user+0x2d/0xb0 [ 181.413883][ T8357] __sys_bind+0x1c6/0x410 [ 181.413967][ T8357] ? __pfx___sys_bind+0x10/0x10 [ 181.414080][ T8357] ? __pfx_ksys_write+0x10/0x10 [ 181.414178][ T8357] __x64_sys_bind+0x7a/0x90 [ 181.414259][ T8357] do_syscall_64+0x166/0x520 [ 181.414334][ T8357] ? trace_irq_disable+0x3b/0x140 [ 181.414394][ T8357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.414450][ T8357] ? clear_bhb_loop+0x70/0xc0 [ 181.414523][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.414579][ T8357] RIP: 0033:0x7f46b379e159 [ 181.414639][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.414685][ T8357] RSP: 002b:00007f46b4667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 181.414757][ T8357] RAX: ffffffffffffffda RBX: 00007f46b3a25fa0 RCX: 00007f46b379e159 [ 181.414800][ T8357] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000006 [ 181.414834][ T8357] RBP: 00007f46b4667090 R08: 0000000000000000 R09: 0000000000000000 [ 181.414874][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.414907][ T8357] R13: 00007f46b3a26038 R14: 00007f46b3a25fa0 R15: 00007ffd575e72e8 [ 181.415026][ T8357] [ 181.824582][ T8362] lo speed is unknown, defaulting to 1000 [ 181.914977][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 181.915022][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 181.915038][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.740'. [ 181.972544][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 181.981751][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 181.993944][ T8370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.740'. [ 182.053714][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.063483][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.079668][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.187046][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.205134][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.227853][ T8376] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 182.280513][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.280626][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.299593][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.299717][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.335331][ T8379] syzkaller0: entered promiscuous mode [ 182.335375][ T8379] syzkaller0: entered allmulticast mode [ 182.410756][ T8365] netlink: 324 bytes leftover after parsing attributes in process `syz.3.738'. [ 182.519681][ T8390] FAULT_INJECTION: forcing a failure. [ 182.519681][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 182.519732][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.6.746 Not tainted syzkaller #0 PREEMPT(full) [ 182.519757][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.519770][ T8390] Call Trace: [ 182.519779][ T8390] [ 182.519788][ T8390] dump_stack_lvl+0xe8/0x150 [ 182.519824][ T8390] should_fail_ex+0x410/0x560 [ 182.519861][ T8390] should_failslab+0xa8/0x100 [ 182.519889][ T8390] __kvmalloc_node_noprof+0x176/0x820 [ 182.519916][ T8390] ? __rhashtable_init_noprof+0x545/0xaf0 [ 182.519947][ T8390] ? __rhashtable_init_noprof+0x545/0xaf0 [ 182.519984][ T8390] __rhashtable_init_noprof+0x545/0xaf0 [ 182.520020][ T8390] __rhltable_init_noprof+0x26/0x70 [ 182.520053][ T8390] nf_tables_newtable+0x6e0/0x1990 [ 182.520107][ T8390] nfnetlink_rcv+0x1288/0x28c0 [ 182.520165][ T8390] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 182.520212][ T8390] ? ref_tracker_free+0x689/0x830 [ 182.520271][ T8390] ? skb_clone+0x246/0x3a0 [ 182.520298][ T8390] ? __netlink_deliver_tap+0x811/0x860 [ 182.520332][ T8390] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.520356][ T8390] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.520386][ T8390] netlink_unicast+0x7bd/0x940 [ 182.520420][ T8390] netlink_sendmsg+0x813/0xb40 [ 182.520443][ T8390] ? lockdep_hardirqs_on+0x7b/0x110 [ 182.520481][ T8390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.520515][ T8390] ? apparmor_socket_sendmsg+0x18b/0x360 [ 182.520552][ T8390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.520576][ T8390] sock_sendmsg_nosec+0x13a/0x180 [ 182.520606][ T8390] ____sys_sendmsg+0x54e/0x850 [ 182.520633][ T8390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.520664][ T8390] ? import_iovec+0x73/0xa0 [ 182.520701][ T8390] ___sys_sendmsg+0x2a5/0x360 [ 182.520721][ T8390] ? __lock_acquire+0x6df/0x2e50 [ 182.520747][ T8390] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.520807][ T8390] ? __fget_files+0x2a/0x420 [ 182.520834][ T8390] ? __fget_files+0x3a2/0x420 [ 182.520874][ T8390] __x64_sys_sendmsg+0x1b1/0x290 [ 182.520899][ T8390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.520945][ T8390] do_syscall_64+0x166/0x520 [ 182.520974][ T8390] ? trace_irq_disable+0x3b/0x140 [ 182.520994][ T8390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.521018][ T8390] ? clear_bhb_loop+0x70/0xc0 [ 182.521045][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.521067][ T8390] RIP: 0033:0x7f59aed9e159 [ 182.521087][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.521105][ T8390] RSP: 002b:00007f59afc5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.521129][ T8390] RAX: ffffffffffffffda RBX: 00007f59af025fa0 RCX: 00007f59aed9e159 [ 182.521146][ T8390] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 182.521161][ T8390] RBP: 00007f59afc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 182.521175][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.521188][ T8390] R13: 00007f59af026038 R14: 00007f59af025fa0 R15: 00007fff0ee70198 [ 182.521231][ T8390] [ 183.365723][ T8408] FAULT_INJECTION: forcing a failure. [ 183.365723][ T8408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.383437][ T8408] CPU: 0 UID: 0 PID: 8408 Comm: syz.6.754 Not tainted syzkaller #0 PREEMPT(full) [ 183.383466][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.383480][ T8408] Call Trace: [ 183.383489][ T8408] [ 183.383499][ T8408] dump_stack_lvl+0xe8/0x150 [ 183.383538][ T8408] should_fail_ex+0x410/0x560 [ 183.383575][ T8408] prepare_alloc_pages+0x223/0x600 [ 183.383617][ T8408] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 183.383645][ T8408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 183.383666][ T8408] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 183.383692][ T8408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 183.383720][ T8408] ? __pfx_policy_nodemask+0x10/0x10 [ 183.383744][ T8408] ? __get_vm_area_node+0x155/0x2f0 [ 183.383772][ T8408] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 183.383802][ T8408] ? __vmalloc_noprof+0xd2/0x120 [ 183.383836][ T8408] __alloc_pages_noprof+0x10/0x100 [ 183.383860][ T8408] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 183.383905][ T8408] ? alloc_pages_noprof+0x140/0x2b0 [ 183.383936][ T8408] __kasan_populate_vmalloc+0xb7/0x1c0 [ 183.383977][ T8408] alloc_vmap_area+0xd1a/0x1420 [ 183.384022][ T8408] ? __pfx_alloc_vmap_area+0x10/0x10 [ 183.384053][ T8408] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 183.384088][ T8408] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 183.384134][ T8408] ? __get_vm_area_node+0x155/0x2f0 [ 183.384169][ T8408] __get_vm_area_node+0x200/0x2f0 [ 183.384205][ T8408] __vmalloc_node_range_noprof+0x343/0x1540 [ 183.384239][ T8408] ? bpf_check+0x10ee/0x2e10 [ 183.384274][ T8408] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 183.384304][ T8408] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 183.384347][ T8408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.384382][ T8408] ? apparmor_capable+0x126/0x170 [ 183.384411][ T8408] ? bpf_lsm_capable+0x9/0x20 [ 183.384443][ T8408] ? security_capable+0x7e/0x2c0 [ 183.384478][ T8408] ? bpf_check+0x10ee/0x2e10 [ 183.384499][ T8408] __vmalloc_noprof+0xd2/0x120 [ 183.384530][ T8408] ? bpf_check+0x10ee/0x2e10 [ 183.384556][ T8408] bpf_check+0x10ee/0x2e10 [ 183.384603][ T8408] ? ktime_get_with_offset+0x93/0x2d0 [ 183.384631][ T8408] ? __pfx_bpf_check+0x10/0x10 [ 183.384656][ T8408] ? bpf_obj_name_cpy+0x194/0x1e0 [ 183.384690][ T8408] bpf_prog_load+0x14d6/0x1c20 [ 183.384726][ T8408] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.384776][ T8408] __sys_bpf+0xd0d/0xd90 [ 183.384808][ T8408] ? __pfx___sys_bpf+0x10/0x10 [ 183.384843][ T8408] ? __fget_files+0x2a/0x420 [ 183.384890][ T8408] ? ksys_write+0x242/0x270 [ 183.384923][ T8408] ? __pfx_ksys_write+0x10/0x10 [ 183.384958][ T8408] __x64_sys_bpf+0xba/0xd0 [ 183.384982][ T8408] do_syscall_64+0x166/0x520 [ 183.385011][ T8408] ? trace_irq_disable+0x3b/0x140 [ 183.385032][ T8408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.385055][ T8408] ? clear_bhb_loop+0x70/0xc0 [ 183.385082][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.385104][ T8408] RIP: 0033:0x7f59aed9e159 [ 183.385132][ T8408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.385152][ T8408] RSP: 002b:00007f59afc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.385176][ T8408] RAX: ffffffffffffffda RBX: 00007f59af025fa0 RCX: 00007f59aed9e159 [ 183.385192][ T8408] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 183.385206][ T8408] RBP: 00007f59afc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.385219][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.385232][ T8408] R13: 00007f59af026038 R14: 00007f59af025fa0 R15: 00007fff0ee70198 [ 183.385267][ T8408] [ 183.525575][ T8408] syz.6.754: vmalloc error: size 1632, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.525785][ T8408] CPU: 1 UID: 0 PID: 8408 Comm: syz.6.754 Not tainted syzkaller #0 PREEMPT(full) [ 183.525846][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.525879][ T8408] Call Trace: [ 183.525901][ T8408] [ 183.525922][ T8408] dump_stack_lvl+0xe8/0x150 [ 183.526019][ T8408] warn_alloc+0x24d/0x270 [ 183.526109][ T8408] ? lockdep_hardirqs_on+0x7b/0x110 [ 183.526192][ T8408] ? __pfx_warn_alloc+0x10/0x10 [ 183.526272][ T8408] ? kfree+0x1c5/0x650 [ 183.526367][ T8408] ? __get_vm_area_node+0x219/0x2f0 [ 183.526475][ T8408] __vmalloc_node_range_noprof+0x36b/0x1540 [ 183.526609][ T8408] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 183.526683][ T8408] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 183.526790][ T8408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.526876][ T8408] ? apparmor_capable+0x126/0x170 [ 183.526950][ T8408] ? bpf_lsm_capable+0x9/0x20 [ 183.527036][ T8408] ? security_capable+0x7e/0x2c0 [ 183.527133][ T8408] ? bpf_check+0x10ee/0x2e10 [ 183.527184][ T8408] __vmalloc_noprof+0xd2/0x120 [ 183.527260][ T8408] ? bpf_check+0x10ee/0x2e10 [ 183.527324][ T8408] bpf_check+0x10ee/0x2e10 [ 183.527405][ T8408] ? ktime_get_with_offset+0x93/0x2d0 [ 183.527474][ T8408] ? __pfx_bpf_check+0x10/0x10 [ 183.527556][ T8408] ? bpf_obj_name_cpy+0x194/0x1e0 [ 183.527658][ T8408] bpf_prog_load+0x14d6/0x1c20 [ 183.527749][ T8408] ? __pfx_bpf_prog_load+0x10/0x10 [ 183.527882][ T8408] __sys_bpf+0xd0d/0xd90 [ 183.527966][ T8408] ? __pfx___sys_bpf+0x10/0x10 [ 183.528071][ T8408] ? __fget_files+0x2a/0x420 [ 183.528170][ T8408] ? ksys_write+0x242/0x270 [ 183.528252][ T8408] ? __pfx_ksys_write+0x10/0x10 [ 183.528342][ T8408] __x64_sys_bpf+0xba/0xd0 [ 183.528411][ T8408] do_syscall_64+0x166/0x520 [ 183.528477][ T8408] ? trace_irq_disable+0x3b/0x140 [ 183.528519][ T8408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.528575][ T8408] ? clear_bhb_loop+0x70/0xc0 [ 183.528642][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.528697][ T8408] RIP: 0033:0x7f59aed9e159 [ 183.528749][ T8408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.528810][ T8408] RSP: 002b:00007f59afc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.528859][ T8408] RAX: ffffffffffffffda RBX: 00007f59af025fa0 RCX: 00007f59aed9e159 [ 183.528903][ T8408] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 183.528947][ T8408] RBP: 00007f59afc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.528984][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.529020][ T8408] R13: 00007f59af026038 R14: 00007f59af025fa0 R15: 00007fff0ee70198 [ 183.529098][ T8408] [ 183.559740][ T8408] Mem-Info: [ 183.559788][ T8408] active_anon:6606 inactive_anon:0 isolated_anon:0 [ 183.559788][ T8408] active_file:0 inactive_file:43676 isolated_file:0 [ 183.559788][ T8408] unevictable:0 dirty:231 writeback:0 [ 183.559788][ T8408] slab_reclaimable:10912 slab_unreclaimable:103927 [ 183.559788][ T8408] mapped:40034 shmem:525 pagetables:1382 [ 183.559788][ T8408] sec_pagetables:0 bounce:0 [ 183.559788][ T8408] kernel_misc_reclaimable:0 [ 183.559788][ T8408] free:1294796 free_pcp:14067 free_cma:0 [ 183.559982][ T8408] Node 0 active_anon:26424kB inactive_anon:0kB active_file:0kB inactive_file:174504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160136kB dirty:920kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14152kB pagetables:5452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 183.560120][ T8408] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:76kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 183.560246][ T8408] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.560399][ T8408] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 183.560463][ T8408] Node 0 DMA32 free:1219876kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26424kB inactive_anon:0kB active_file:0kB inactive_file:174504kB unevictable:0kB writepending:920kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:56268kB local_pcp:27184kB free_cma:0kB [ 183.560611][ T8408] lowmem_reserve[]: 0 0 0 0 0 [ 183.560706][ T8408] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.560863][ T8408] lowmem_reserve[]: 0 0 0 0 0 [ 183.560961][ T8408] Node 1 Normal free:3943948kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.561120][ T8408] lowmem_reserve[]: 0 0 0 0 0 [ 183.561211][ T8408] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.574418][ T8408] Node 0 DMA32: 367*4kB (UME) 81*8kB (UME) 40*16kB (UE) 65*32kB (UME) 110*64kB (UME) 19*128kB (ME) 12*256kB (M) 8*512kB (ME) 6*1024kB (ME) 8*2048kB (UME) 287*4096kB (UM) = 1219556kB [ 183.574949][ T8408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.575196][ T8408] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 6*16kB (UM) 6*32kB (UM) 11*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3943948kB [ 183.589439][ T8408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.589483][ T8408] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.589538][ T8408] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.589594][ T8408] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.589652][ T8408] 44197 total pagecache pages [ 183.589679][ T8408] 0 pages in swap cache [ 183.589700][ T8408] Free swap = 124996kB [ 183.589720][ T8408] Total swap = 124996kB [ 183.589742][ T8408] 2097051 pages RAM [ 183.589817][ T8408] 0 pages HighMem/MovableOnly [ 183.589838][ T8408] 428730 pages reserved [ 183.589858][ T8408] 0 pages cma reserved [ 184.670728][ T8428] netlink: 'syz.5.760': attribute type 2 has an invalid length. [ 184.679282][ T8428] netlink: 'syz.5.760': attribute type 2 has an invalid length. [ 184.838945][ T8424] lo speed is unknown, defaulting to 1000 [ 185.306145][ T8457] syzkaller0: entered promiscuous mode [ 185.313220][ T8457] syzkaller0: entered allmulticast mode [ 185.346299][ T8424] __nla_validate_parse: 6 callbacks suppressed [ 185.352973][ T8424] netlink: 324 bytes leftover after parsing attributes in process `syz.1.759'. [ 185.365216][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 185.365273][ T8455] netlink: 'syz.5.767': attribute type 10 has an invalid length. [ 185.365291][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.767'. [ 185.415416][ T8455] geneve2: entered promiscuous mode [ 185.415465][ T8455] geneve2: entered allmulticast mode [ 185.665851][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 185.750538][ T8461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.769'. [ 185.783077][ T8466] FAULT_INJECTION: forcing a failure. [ 185.783077][ T8466] name failslab, interval 1, probability 0, space 0, times 0 [ 185.798428][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.1.771 Not tainted syzkaller #0 PREEMPT(full) [ 185.798460][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.798474][ T8466] Call Trace: [ 185.798483][ T8466] [ 185.798493][ T8466] dump_stack_lvl+0xe8/0x150 [ 185.798552][ T8466] should_fail_ex+0x410/0x560 [ 185.798590][ T8466] should_failslab+0xa8/0x100 [ 185.798618][ T8466] __kvmalloc_node_noprof+0x176/0x820 [ 185.798644][ T8466] ? __kmalloc_cache_noprof+0x321/0x600 [ 185.798679][ T8466] ? alloc_netdev_mqs+0xd44/0x12a0 [ 185.798705][ T8466] ? alloc_netdev_mqs+0xd44/0x12a0 [ 185.798739][ T8466] alloc_netdev_mqs+0xd44/0x12a0 [ 185.798773][ T8466] rtnl_create_link+0x321/0xd70 [ 185.798807][ T8466] rtnl_newlink_create+0x258/0x7b0 [ 185.798838][ T8466] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 185.798866][ T8466] ? __pfx___mutex_lock+0x10/0x10 [ 185.798908][ T8466] ? ns_capable+0x89/0xe0 [ 185.798943][ T8466] rtnl_newlink+0x166d/0x1c30 [ 185.798995][ T8466] ? __pfx_rtnl_newlink+0x10/0x10 [ 185.799026][ T8466] ? do_syscall_64+0x166/0x520 [ 185.799054][ T8466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.799118][ T8466] ? kasan_quarantine_put+0xbb/0x1f0 [ 185.799154][ T8466] ? lockdep_hardirqs_on+0x7b/0x110 [ 185.799199][ T8466] ? nlmon_xmit+0xb0/0x100 [ 185.799230][ T8466] ? kmem_cache_free+0x182/0x650 [ 185.799265][ T8466] ? __lock_acquire+0x6df/0x2e50 [ 185.799301][ T8466] ? __dev_queue_xmit+0x29b/0x3820 [ 185.799330][ T8466] ? __local_bh_enable_ip+0xd6/0x140 [ 185.799360][ T8466] ? lockdep_hardirqs_on+0x7b/0x110 [ 185.799389][ T8466] ? __dev_queue_xmit+0x29b/0x3820 [ 185.799410][ T8466] ? __local_bh_enable_ip+0xd6/0x140 [ 185.799438][ T8466] ? __dev_queue_xmit+0x29b/0x3820 [ 185.799472][ T8466] ? lock_acquire+0x115/0x350 [ 185.799510][ T8466] ? __pfx_rtnl_newlink+0x10/0x10 [ 185.799542][ T8466] rtnetlink_rcv_msg+0x802/0xc00 [ 185.799579][ T8466] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 185.799612][ T8466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.799643][ T8466] ? ref_tracker_free+0x689/0x830 [ 185.799680][ T8466] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.799727][ T8466] netlink_rcv_skb+0x226/0x4a0 [ 185.799755][ T8466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.799791][ T8466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.799830][ T8466] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.799855][ T8466] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.799888][ T8466] netlink_unicast+0x7bd/0x940 [ 185.799923][ T8466] netlink_sendmsg+0x813/0xb40 [ 185.799959][ T8466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.799996][ T8466] ? apparmor_socket_sendmsg+0x98/0x360 [ 185.800032][ T8466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.800057][ T8466] sock_sendmsg_nosec+0x13a/0x180 [ 185.800089][ T8466] ____sys_sendmsg+0x54e/0x850 [ 185.800119][ T8466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.800152][ T8466] ? import_iovec+0x73/0xa0 [ 185.800191][ T8466] ___sys_sendmsg+0x2a5/0x360 [ 185.800211][ T8466] ? __lock_acquire+0x6df/0x2e50 [ 185.800238][ T8466] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.800309][ T8466] ? __fget_files+0x2a/0x420 [ 185.800338][ T8466] ? __fget_files+0x3a2/0x420 [ 185.800379][ T8466] __x64_sys_sendmsg+0x1b1/0x290 [ 185.800404][ T8466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.800448][ T8466] do_syscall_64+0x166/0x520 [ 185.800478][ T8466] ? trace_irq_disable+0x3b/0x140 [ 185.800498][ T8466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.800522][ T8466] ? clear_bhb_loop+0x70/0xc0 [ 185.800551][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.800574][ T8466] RIP: 0033:0x7f46b379e159 [ 185.800596][ T8466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.800616][ T8466] RSP: 002b:00007f46b4667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.800640][ T8466] RAX: ffffffffffffffda RBX: 00007f46b3a25fa0 RCX: 00007f46b379e159 [ 185.800657][ T8466] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 185.800671][ T8466] RBP: 00007f46b4667090 R08: 0000000000000000 R09: 0000000000000000 [ 185.800686][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.800699][ T8466] R13: 00007f46b3a26038 R14: 00007f46b3a25fa0 R15: 00007ffd575e72e8 [ 185.800736][ T8466] [ 186.298787][ T8478] netlink: 32 bytes leftover after parsing attributes in process `syz.6.773'. [ 187.967111][ T8443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.983759][ T8473] netlink: 'syz.6.773': attribute type 2 has an invalid length. [ 187.997248][ T8473] netlink: 'syz.6.773': attribute type 2 has an invalid length. [ 188.589334][ T8517] FAULT_INJECTION: forcing a failure. [ 188.589334][ T8517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.590189][ T8517] CPU: 1 UID: 0 PID: 8517 Comm: syz.6.786 Not tainted syzkaller #0 PREEMPT(full) [ 188.590217][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.590232][ T8517] Call Trace: [ 188.590240][ T8517] [ 188.590250][ T8517] dump_stack_lvl+0xe8/0x150 [ 188.590287][ T8517] should_fail_ex+0x410/0x560 [ 188.590325][ T8517] _copy_from_user+0x2d/0xb0 [ 188.590348][ T8517] ___sys_sendmsg+0x1c6/0x360 [ 188.590370][ T8517] ? __lock_acquire+0x6df/0x2e50 [ 188.590397][ T8517] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.590458][ T8517] ? __fget_files+0x2a/0x420 [ 188.590486][ T8517] ? __fget_files+0x3a2/0x420 [ 188.590527][ T8517] __x64_sys_sendmsg+0x1b1/0x290 [ 188.590561][ T8517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.590607][ T8517] do_syscall_64+0x166/0x520 [ 188.590637][ T8517] ? trace_irq_disable+0x3b/0x140 [ 188.590659][ T8517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.590683][ T8517] ? clear_bhb_loop+0x70/0xc0 [ 188.590711][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.590734][ T8517] RIP: 0033:0x7f59aed9e159 [ 188.590754][ T8517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.590774][ T8517] RSP: 002b:00007f59afc5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.590798][ T8517] RAX: ffffffffffffffda RBX: 00007f59af025fa0 RCX: 00007f59aed9e159 [ 188.590815][ T8517] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 000000000000000c [ 188.590831][ T8517] RBP: 00007f59afc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 188.590845][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.590859][ T8517] R13: 00007f59af026038 R14: 00007f59af025fa0 R15: 00007fff0ee70198 [ 188.590894][ T8517] [ 188.856597][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 189.164258][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 189.351863][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.793'. [ 189.438279][ T8549] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 189.458011][ T8549] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 189.533669][ T8549] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.544877][ T8551] bond5: entered promiscuous mode [ 189.544925][ T8551] bond5: entered allmulticast mode [ 189.740551][ T8558] syzkaller0: entered promiscuous mode [ 189.747843][ T8558] syzkaller0: entered allmulticast mode [ 189.843127][ T8560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'. [ 189.903506][ T8560] bridge_slave_1: left allmulticast mode [ 189.903558][ T8560] bridge_slave_1: left promiscuous mode [ 189.904217][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.933163][ T8560] bridge_slave_0: left allmulticast mode [ 189.933205][ T8560] bridge_slave_0: left promiscuous mode [ 189.933438][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.152248][ T8570] syzkaller0: entered promiscuous mode [ 190.152293][ T8570] syzkaller0: entered allmulticast mode [ 190.198921][ T8570] tipc: Enabled bearer , priority 0 [ 190.226944][ T8569] tipc: Resetting bearer [ 190.304473][ T8569] tipc: Disabling bearer [ 190.398780][ T8586] __nla_validate_parse: 3 callbacks suppressed [ 190.398829][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 190.417808][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 190.439014][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 194.333846][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.653702][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 206.653779][ T4936] Bluetooth: hci2: command 0x0401 tx timeout [ 206.666288][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 207.135231][ T1701] block nbd5: Possible stuck request ffff888026d15080: control (read@0,4096B). Runtime 30 seconds [ 223.190506][ T8597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'. [ 223.297067][ T8600] sctp: [Deprecated]: syz.1.810 (pid 8600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.297067][ T8600] Use struct sctp_sack_info instead [ 223.298613][ T8600] sctp: [Deprecated]: syz.1.810 (pid 8600) Use of int in maxseg socket option. [ 223.298613][ T8600] Use struct sctp_assoc_value instead [ 223.457447][ T8595] lo speed is unknown, defaulting to 1000 [ 223.501164][ T8596] lo speed is unknown, defaulting to 1000 [ 223.698045][ T8608] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 223.698220][ T8608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.793380][ T8605] netlink: 324 bytes leftover after parsing attributes in process `syz.6.813'. [ 224.269678][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'. [ 224.291275][ T8619] netlink: 'syz.6.818': attribute type 1 has an invalid length. [ 224.306389][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.817'. [ 224.484543][ T8629] netlink: 64 bytes leftover after parsing attributes in process `syz.6.818'. [ 224.758565][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.229667][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.275491][ T8620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.583411][ T8619] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 225.668411][ T8639] netlink: 40 bytes leftover after parsing attributes in process `syz.5.821'. [ 225.792335][ T1156] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.793465][ T1156] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.793609][ T1156] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.793713][ T1156] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.030729][ T8649] netlink: 'syz.6.826': attribute type 2 has an invalid length. [ 226.038837][ T8649] netlink: 'syz.6.826': attribute type 2 has an invalid length. [ 226.049169][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.6.826'. [ 226.190278][ T8646] netlink: 'syz.1.824': attribute type 322 has an invalid length. [ 226.318109][ T8652] syzkaller0: entered promiscuous mode [ 226.318168][ T8652] syzkaller0: entered allmulticast mode [ 226.329809][ T8655] lo speed is unknown, defaulting to 1000 [ 226.568856][ T8670] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.598135][ T8664] netlink: 324 bytes leftover after parsing attributes in process `syz.2.828'. [ 226.743418][ T8674] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 228.169208][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.169662][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.307748][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.320253][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.647069][ T8683] netlink: 324 bytes leftover after parsing attributes in process `syz.5.835'. [ 228.872271][ T27] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.874099][ T27] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.874215][ T27] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.874317][ T27] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.940864][ T8678] lo speed is unknown, defaulting to 1000 [ 229.010299][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.6.837'. [ 229.273563][ T8687] lo speed is unknown, defaulting to 1000 [ 229.409487][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.839'. [ 229.904685][ T8706] syzkaller0: entered promiscuous mode [ 229.904812][ T8706] syzkaller0: entered allmulticast mode [ 229.925851][ T8706] tipc: Enabled bearer , priority 0 [ 229.939559][ T8706] veth1_to_bond: mtu less than device minimum [ 229.950805][ T8703] tipc: Resetting bearer [ 229.994798][ T8703] tipc: Disabling bearer [ 230.019461][ T8710] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.386811][ T8723] veth0: entered promiscuous mode [ 230.392440][ T8726] bond0: entered promiscuous mode [ 230.392461][ T8726] bond_slave_0: entered promiscuous mode [ 230.392639][ T8726] bond_slave_1: entered promiscuous mode [ 230.409020][ T8718] bond0: left promiscuous mode [ 230.409040][ T8718] bond_slave_0: left promiscuous mode [ 230.409290][ T8718] bond_slave_1: left promiscuous mode [ 230.481238][ T8718] veth0: left promiscuous mode [ 230.648828][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 230.793898][ T8733] lo speed is unknown, defaulting to 1000 [ 230.977090][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 231.148324][ T8714] netlink: 32 bytes leftover after parsing attributes in process `syz.5.843'. [ 231.612568][ T8765] netlink: 'syz.6.854': attribute type 1 has an invalid length. [ 231.707831][ T8765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.819622][ T8775] netlink: 'syz.6.854': attribute type 10 has an invalid length. [ 231.819670][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.6.854'. [ 231.878441][ T8768] bond1: (slave veth3): Enslaving as an active interface with a down link [ 231.946923][ T8765] bond1: (slave dummy0): making interface the new active one [ 231.955632][ T8765] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 231.958965][ T8774] syzkaller0: left promiscuous mode [ 231.958984][ T8774] syzkaller0: left allmulticast mode [ 231.959407][ T8774] tipc: Resetting bearer [ 231.959601][ T8775] dummy0: entered promiscuous mode [ 231.998521][ T8775] bond1: (slave dummy0): Releasing active interface [ 232.211636][ T8778] lo speed is unknown, defaulting to 1000 [ 232.319288][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 232.330249][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 232.445927][ T8793] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 232.869182][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.866'. [ 233.498395][ T8828] syzkaller0: entered promiscuous mode [ 233.505584][ T8828] syzkaller0: entered allmulticast mode [ 235.393281][ T8859] lo speed is unknown, defaulting to 1000 [ 235.656394][ T8875] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 235.921049][ T8885] lo speed is unknown, defaulting to 1000 [ 236.207543][ T8897] __nla_validate_parse: 2 callbacks suppressed [ 236.214801][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 236.278920][ T8896] netlink: 324 bytes leftover after parsing attributes in process `syz.5.879'. [ 236.561112][ T8908] netlink: 204 bytes leftover after parsing attributes in process `syz.2.885'. [ 236.830732][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 237.213085][ T1701] block nbd5: Possible stuck request ffff888026d15080: control (read@0,4096B). Runtime 60 seconds [ 237.469859][ T8941] lo speed is unknown, defaulting to 1000 [ 237.576680][ T8951] IPVS: stopping backup sync thread 7418 ... [ 237.952447][ T8953] lo speed is unknown, defaulting to 1000 [ 238.017752][ T8971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.017820][ T8971] IPv6: NLM_F_CREATE should be set when creating new route [ 238.035862][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 238.159871][ T8976] netlink: 324 bytes leftover after parsing attributes in process `syz.2.899'. [ 238.191086][ T8974] ip6gre1: entered promiscuous mode [ 238.197866][ T8974] ip6gre1: entered allmulticast mode [ 238.313736][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.314371][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.353563][ T6450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.436729][ T8947] netlink: 324 bytes leftover after parsing attributes in process `syz.5.895'. [ 238.526457][ T8995] FAULT_INJECTION: forcing a failure. [ 238.526457][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 238.544850][ T8995] CPU: 0 UID: 0 PID: 8995 Comm: syz.6.909 Not tainted syzkaller #0 PREEMPT(full) [ 238.544882][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.544896][ T8995] Call Trace: [ 238.544905][ T8995] [ 238.544914][ T8995] dump_stack_lvl+0xe8/0x150 [ 238.544956][ T8995] should_fail_ex+0x410/0x560 [ 238.545018][ T8995] should_failslab+0xa8/0x100 [ 238.545050][ T8995] ? skb_clone+0x212/0x3a0 [ 238.545073][ T8995] kmem_cache_alloc_noprof+0xa1/0x600 [ 238.545110][ T8995] ? skb_clone+0x212/0x3a0 [ 238.545141][ T8995] skb_clone+0x212/0x3a0 [ 238.545163][ T8995] ? netlink_broadcast_filtered+0x56a/0xea0 [ 238.545191][ T8995] netlink_broadcast_filtered+0x578/0xea0 [ 238.545235][ T8995] netlink_broadcast+0x37/0x50 [ 238.545262][ T8995] kobject_uevent_net_broadcast+0x378/0x560 [ 238.545295][ T8995] kobject_uevent_env+0x566/0x9e0 [ 238.545326][ T8995] device_add+0x544/0xb80 [ 238.545362][ T8995] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 238.545400][ T8995] wakeup_source_register+0x17f/0x380 [ 238.545437][ T8995] ep_modify+0x2dd/0xa60 [ 238.545473][ T8995] ? do_epoll_ctl_file+0x3ef/0xee0 [ 238.545510][ T8995] ? __pfx_ep_modify+0x10/0x10 [ 238.545556][ T8995] ? bpf_lsm_capable+0x9/0x20 [ 238.545586][ T8995] ? security_capable+0x7e/0x2c0 [ 238.545637][ T8995] do_epoll_ctl_file+0x782/0xee0 [ 238.545683][ T8995] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 238.545723][ T8995] ? __fget_files+0x3a2/0x420 [ 238.545752][ T8995] ? __fget_files+0x2a/0x420 [ 238.545786][ T8995] __se_sys_epoll_ctl+0x162/0x230 [ 238.545821][ T8995] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 238.545867][ T8995] do_syscall_64+0x166/0x520 [ 238.545897][ T8995] ? trace_irq_disable+0x3b/0x140 [ 238.545918][ T8995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.545942][ T8995] ? clear_bhb_loop+0x70/0xc0 [ 238.545971][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.545995][ T8995] RIP: 0033:0x7f59aed9e159 [ 238.546017][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.546036][ T8995] RSP: 002b:00007f59afc19028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 238.546059][ T8995] RAX: ffffffffffffffda RBX: 00007f59af026180 RCX: 00007f59aed9e159 [ 238.546076][ T8995] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 0000000000000003 [ 238.546090][ T8995] RBP: 00007f59afc19090 R08: 0000000000000000 R09: 0000000000000000 [ 238.546104][ T8995] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 238.546119][ T8995] R13: 00007f59af026218 R14: 00007f59af026180 R15: 00007fff0ee70198 [ 238.546156][ T8995] [ 238.962576][ T6450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.982655][ T6450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.002329][ T8998] ovs-s!!: entered promiscuous mode [ 239.048894][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 239.068898][ T9003] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 239.068944][ T9003] netlink: 'syz.3.911': attribute type 2 has an invalid length. [ 239.085014][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.911'. [ 239.351185][ T9015] FAULT_INJECTION: forcing a failure. [ 239.351185][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 239.372113][ T9015] CPU: 1 UID: 0 PID: 9015 Comm: syz.2.914 Not tainted syzkaller #0 PREEMPT(full) [ 239.372143][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.372157][ T9015] Call Trace: [ 239.372165][ T9015] [ 239.372173][ T9015] dump_stack_lvl+0xe8/0x150 [ 239.372209][ T9015] should_fail_ex+0x410/0x560 [ 239.372245][ T9015] should_failslab+0xa8/0x100 [ 239.372273][ T9015] __kmalloc_noprof+0xfe/0x720 [ 239.372304][ T9015] ? nf_tables_newset+0x134a/0x2570 [ 239.372336][ T9015] ? __kvmalloc_node_noprof+0x52f/0x820 [ 239.372357][ T9015] ? nla_strdup+0x9d/0x140 [ 239.372376][ T9015] ? nla_strdup+0x9d/0x140 [ 239.372404][ T9015] nla_strdup+0x9d/0x140 [ 239.372428][ T9015] nf_tables_newset+0x1389/0x2570 [ 239.372484][ T9015] ? __pfx_nf_tables_newset+0x10/0x10 [ 239.372523][ T9015] ? lock_acquire+0x115/0x350 [ 239.372559][ T9015] ? __nla_parse+0x40/0x60 [ 239.372585][ T9015] nfnetlink_rcv+0x1288/0x28c0 [ 239.372642][ T9015] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.372661][ T9015] ? __lock_acquire+0x6df/0x2e50 [ 239.372737][ T9015] ? lock_acquire+0x115/0x350 [ 239.372769][ T9015] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.372793][ T9015] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.372823][ T9015] netlink_unicast+0x7bd/0x940 [ 239.372857][ T9015] netlink_sendmsg+0x813/0xb40 [ 239.372902][ T9015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.372935][ T9015] ? apparmor_socket_sendmsg+0x18b/0x360 [ 239.372969][ T9015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.372993][ T9015] sock_sendmsg_nosec+0x13a/0x180 [ 239.373024][ T9015] ____sys_sendmsg+0x54e/0x850 [ 239.373052][ T9015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.373091][ T9015] ? import_iovec+0x73/0xa0 [ 239.373132][ T9015] ___sys_sendmsg+0x2a5/0x360 [ 239.373152][ T9015] ? __lock_acquire+0x6df/0x2e50 [ 239.373179][ T9015] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.373237][ T9015] ? __fget_files+0x2a/0x420 [ 239.373265][ T9015] ? __fget_files+0x3a2/0x420 [ 239.373322][ T9015] __x64_sys_sendmsg+0x1b1/0x290 [ 239.373348][ T9015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.373393][ T9015] do_syscall_64+0x166/0x520 [ 239.373422][ T9015] ? trace_irq_disable+0x3b/0x140 [ 239.373443][ T9015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.373466][ T9015] ? clear_bhb_loop+0x70/0xc0 [ 239.373513][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.373535][ T9015] RIP: 0033:0x7f1be199e159 [ 239.373556][ T9015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.373575][ T9015] RSP: 002b:00007f1be28a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.373600][ T9015] RAX: ffffffffffffffda RBX: 00007f1be1c25fa0 RCX: 00007f1be199e159 [ 239.373617][ T9015] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 239.373632][ T9015] RBP: 00007f1be28a3090 R08: 0000000000000000 R09: 0000000000000000 [ 239.373646][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.373659][ T9015] R13: 00007f1be1c26038 R14: 00007f1be1c25fa0 R15: 00007fff89564fc8 [ 239.373695][ T9015] [ 240.205834][ T9043] FAULT_INJECTION: forcing a failure. [ 240.205834][ T9043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.205889][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.6.922 Not tainted syzkaller #0 PREEMPT(full) [ 240.205912][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.205963][ T9043] Call Trace: [ 240.205977][ T9043] [ 240.206001][ T9043] dump_stack_lvl+0xe8/0x150 [ 240.206102][ T9043] should_fail_ex+0x410/0x560 [ 240.206193][ T9043] prepare_alloc_pages+0x223/0x600 [ 240.206288][ T9043] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 240.206354][ T9043] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 240.206412][ T9043] ? __pfx_policy_nodemask+0x10/0x10 [ 240.206518][ T9043] alloc_pages_mpol+0x21e/0x390 [ 240.206590][ T9043] alloc_pages_noprof+0xb1/0x2b0 [ 240.206655][ T9043] get_free_pages_noprof+0xf/0x80 [ 240.206704][ T9043] __kasan_populate_vmalloc+0x38/0x1c0 [ 240.206779][ T9043] ? do_raw_spin_unlock+0xf5/0x200 [ 240.206861][ T9043] alloc_vmap_area+0xd1a/0x1420 [ 240.206965][ T9043] ? __pfx_alloc_vmap_area+0x10/0x10 [ 240.207007][ T9043] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 240.207093][ T9043] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 240.207168][ T9043] ? __get_vm_area_node+0x155/0x2f0 [ 240.207274][ T9043] __get_vm_area_node+0x200/0x2f0 [ 240.207349][ T9043] __vmalloc_node_range_noprof+0x343/0x1540 [ 240.207432][ T9043] ? bpf_check+0x10ee/0x2e10 [ 240.207550][ T9043] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 240.207619][ T9043] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 240.207708][ T9043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.207787][ T9043] ? apparmor_capable+0x126/0x170 [ 240.207841][ T9043] ? bpf_lsm_capable+0x9/0x20 [ 240.207915][ T9043] ? security_capable+0x7e/0x2c0 [ 240.207985][ T9043] ? bpf_check+0x10ee/0x2e10 [ 240.208032][ T9043] __vmalloc_noprof+0xd2/0x120 [ 240.208108][ T9043] ? bpf_check+0x10ee/0x2e10 [ 240.208171][ T9043] bpf_check+0x10ee/0x2e10 [ 240.208247][ T9043] ? ktime_get_with_offset+0x93/0x2d0 [ 240.208307][ T9043] ? __pfx_bpf_check+0x10/0x10 [ 240.208365][ T9043] ? bpf_obj_name_cpy+0x194/0x1e0 [ 240.208443][ T9043] bpf_prog_load+0x14d6/0x1c20 [ 240.208532][ T9043] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.208655][ T9043] __sys_bpf+0xd0d/0xd90 [ 240.208720][ T9043] ? __pfx___sys_bpf+0x10/0x10 [ 240.208803][ T9043] ? __fget_files+0x2a/0x420 [ 240.208932][ T9043] ? ksys_write+0x242/0x270 [ 240.209012][ T9043] ? __pfx_ksys_write+0x10/0x10 [ 240.209089][ T9043] __x64_sys_bpf+0xba/0xd0 [ 240.209145][ T9043] do_syscall_64+0x166/0x520 [ 240.209209][ T9043] ? trace_irq_disable+0x3b/0x140 [ 240.209257][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.209308][ T9043] ? clear_bhb_loop+0x70/0xc0 [ 240.209374][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.209423][ T9043] RIP: 0033:0x7f59aed9e159 [ 240.209469][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.209518][ T9043] RSP: 002b:00007f59afc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.209577][ T9043] RAX: ffffffffffffffda RBX: 00007f59af025fa0 RCX: 00007f59aed9e159 [ 240.209620][ T9043] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 240.209638][ T9043] RBP: 00007f59afc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 240.209662][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.209692][ T9043] R13: 00007f59af026038 R14: 00007f59af025fa0 R15: 00007fff0ee70198 [ 240.209773][ T9043] [ 240.241882][ T9043] syz.6.922: vmalloc error: size 1632, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.242711][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.6.922 Not tainted syzkaller #0 PREEMPT(full) [ 240.242768][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.242798][ T9043] Call Trace: [ 240.242818][ T9043] [ 240.242837][ T9043] dump_stack_lvl+0xe8/0x150 [ 240.242921][ T9043] warn_alloc+0x24d/0x270 [ 240.243001][ T9043] ? lockdep_hardirqs_on+0x7b/0x110 [ 240.243062][ T9043] ? __pfx_warn_alloc+0x10/0x10 [ 240.243090][ T9043] ? kfree+0x1c5/0x650 [ 240.243140][ T9043] ? __get_vm_area_node+0x219/0x2f0 [ 240.243176][ T9043] __vmalloc_node_range_noprof+0x36b/0x1540 [ 240.243220][ T9043] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 240.243253][ T9043] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 240.243311][ T9043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.243344][ T9043] ? apparmor_capable+0x126/0x170 [ 240.243372][ T9043] ? bpf_lsm_capable+0x9/0x20 [ 240.243409][ T9043] ? security_capable+0x7e/0x2c0 [ 240.243443][ T9043] ? bpf_check+0x10ee/0x2e10 [ 240.243465][ T9043] __vmalloc_noprof+0xd2/0x120 [ 240.243503][ T9043] ? bpf_check+0x10ee/0x2e10 [ 240.243528][ T9043] bpf_check+0x10ee/0x2e10 [ 240.243564][ T9043] ? ktime_get_with_offset+0x93/0x2d0 [ 240.243619][ T9043] ? __pfx_bpf_check+0x10/0x10 [ 240.243700][ T9043] ? bpf_obj_name_cpy+0x194/0x1e0 [ 240.243805][ T9043] bpf_prog_load+0x14d6/0x1c20 [ 240.243911][ T9043] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.244032][ T9043] __sys_bpf+0xd0d/0xd90 [ 240.244116][ T9043] ? __pfx___sys_bpf+0x10/0x10 [ 240.244209][ T9043] ? __fget_files+0x2a/0x420 [ 240.244323][ T9043] ? ksys_write+0x242/0x270 [ 240.244413][ T9043] ? __pfx_ksys_write+0x10/0x10 [ 240.244502][ T9043] __x64_sys_bpf+0xba/0xd0 [ 240.244575][ T9043] do_syscall_64+0x166/0x520 [ 240.244659][ T9043] ? trace_irq_disable+0x3b/0x140 [ 240.244710][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.244762][ T9043] ? clear_bhb_loop+0x70/0xc0 [ 240.244832][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.244891][ T9043] RIP: 0033:0x7f59aed9e159 [ 240.244941][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.244978][ T9043] RSP: 002b:00007f59afc5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.245041][ T9043] RAX: ffffffffffffffda RBX: 00007f59af025fa0 RCX: 00007f59aed9e159 [ 240.245094][ T9043] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 240.245140][ T9043] RBP: 00007f59afc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 240.245178][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.245217][ T9043] R13: 00007f59af026038 R14: 00007f59af025fa0 R15: 00007fff0ee70198 [ 240.245306][ T9043] [ 240.264861][ T9043] Mem-Info: [ 240.264897][ T9043] active_anon:6648 inactive_anon:0 isolated_anon:0 [ 240.264897][ T9043] active_file:0 inactive_file:43696 isolated_file:0 [ 240.264897][ T9043] unevictable:0 dirty:269 writeback:0 [ 240.264897][ T9043] slab_reclaimable:11094 slab_unreclaimable:103548 [ 240.264897][ T9043] mapped:40121 shmem:520 pagetables:1332 [ 240.264897][ T9043] sec_pagetables:0 bounce:0 [ 240.264897][ T9043] kernel_misc_reclaimable:0 [ 240.264897][ T9043] free:1295648 free_pcp:12882 free_cma:0 [ 240.265034][ T9043] Node 0 active_anon:26592kB inactive_anon:0kB active_file:0kB inactive_file:174584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160484kB dirty:1076kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14544kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.265167][ T9043] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:76kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.265298][ T9043] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.265448][ T9043] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 240.265557][ T9043] Node 0 DMA32 free:1225080kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26592kB inactive_anon:0kB active_file:0kB inactive_file:174584kB unevictable:0kB writepending:1076kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:49768kB local_pcp:19928kB free_cma:0kB [ 240.265721][ T9043] lowmem_reserve[]: 0 0 0 0 0 [ 240.265815][ T9043] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.265954][ T9043] lowmem_reserve[]: 0 0 0 0 0 [ 240.266050][ T9043] Node 1 Normal free:3942152kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:1760kB free_cma:0kB [ 240.266251][ T9043] lowmem_reserve[]: 0 0 0 0 0 [ 240.266324][ T9043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.278448][ T9043] Node 0 DMA32: 522*4kB (ME) 840*8kB (UM) 664*16kB (UME) 669*32kB (UME) 231*64kB (UME) 71*128kB (UME) 29*256kB (UM) 16*512kB (UM) 12*1024kB (UME) 7*2048kB (UME) 273*4096kB (UM) = 1225160kB [ 240.278899][ T9043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.279183][ T9043] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942152kB [ 240.288415][ T9043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.288473][ T9043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.288516][ T9043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.288568][ T9043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.288635][ T9043] 44212 total pagecache pages [ 240.288660][ T9043] 0 pages in swap cache [ 240.288678][ T9043] Free swap = 124996kB [ 240.288697][ T9043] Total swap = 124996kB [ 240.288724][ T9043] 2097051 pages RAM [ 240.288742][ T9043] 0 pages HighMem/MovableOnly [ 240.288760][ T9043] 428730 pages reserved [ 240.288773][ T9043] 0 pages cma reserved [ 241.476065][ T9059] netlink: 'syz.5.928': attribute type 1 has an invalid length. [ 241.598863][ T9068] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.607340][ T9059] bond4: entered promiscuous mode [ 241.619206][ T9059] bond4: entered allmulticast mode [ 241.635447][ T9059] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.654972][ T9063] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 241.763923][ T9059] tipc: Enabling of bearer rejected, media not registered [ 241.860861][ T9068] lo speed is unknown, defaulting to 1000 [ 242.012172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.072787][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 242.157999][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 242.494023][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 242.592208][ T9089] syzkaller0: entered promiscuous mode [ 242.599221][ T9089] syzkaller0: entered allmulticast mode [ 242.625198][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 243.377827][ T9128] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 243.511572][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 243.617640][ T9135] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 243.667618][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.6.944'. [ 245.208164][ T9109] tipc: Started in network mode [ 245.208234][ T9109] tipc: Node identity 6e8796e59c31, cluster identity 4711 [ 245.208734][ T9109] tipc: Enabled bearer , priority 0 [ 245.209567][ T9116] syzkaller0: entered promiscuous mode [ 245.209619][ T9116] syzkaller0: entered allmulticast mode [ 245.272456][ T9106] tipc: Resetting bearer [ 245.413185][ T9106] tipc: Disabling bearer [ 245.663072][ T9145] syzkaller0: entered promiscuous mode [ 245.670993][ T9145] syzkaller0: entered allmulticast mode [ 245.686669][ T9153] netlink: 'syz.6.948': attribute type 2 has an invalid length. [ 245.686719][ T9153] netlink: 'syz.6.948': attribute type 2 has an invalid length. [ 245.690019][ T9153] netlink: 32 bytes leftover after parsing attributes in process `syz.6.948'. [ 246.547122][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.6.953'. [ 246.605026][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 248.185595][ T9164] syzkaller0: entered promiscuous mode [ 248.185644][ T9164] syzkaller0: entered allmulticast mode [ 248.186391][ T9164] tipc: Resetting bearer [ 248.372404][ T9177] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 248.393776][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.956'. [ 248.403284][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'. [ 248.456336][ T9180] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 248.711655][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.962'. [ 248.737784][ T9200] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.798028][ T9199] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.962'. [ 248.798072][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.962'. [ 248.798107][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.962'. [ 249.003276][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.6.964'. [ 249.060756][ T9206] lo speed is unknown, defaulting to 1000 [ 249.840171][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 249.959493][ T9240] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 250.012118][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.965234][ T9249] syz_tun: entered allmulticast mode [ 252.051785][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.976'. [ 252.117383][ T9255] netlink: 3 bytes leftover after parsing attributes in process `syz.5.978'. [ 252.290248][ T9261] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 253.068191][ T9285] syzkaller0: entered promiscuous mode [ 253.068237][ T9285] syzkaller0: entered allmulticast mode [ 253.092262][ T9285] tipc: Started in network mode [ 253.092332][ T9285] tipc: Node identity b27441b72a0c, cluster identity 4711 [ 253.105854][ T9285] tipc: Enabled bearer , priority 0 [ 253.125875][ T9285] tipc: Resetting bearer [ 253.165666][ T9284] tipc: Resetting bearer [ 253.206675][ T9284] tipc: Disabling bearer [ 253.417104][ T9293] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 253.466029][ T9296] __nla_validate_parse: 10 callbacks suppressed [ 253.466086][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.988'. [ 253.466106][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.988'. [ 253.621065][ T9300] FAULT_INJECTION: forcing a failure. [ 253.621065][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 253.641199][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.5.990 Not tainted syzkaller #0 PREEMPT(full) [ 253.641229][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.641242][ T9300] Call Trace: [ 253.641251][ T9300] [ 253.641260][ T9300] dump_stack_lvl+0xe8/0x150 [ 253.641297][ T9300] should_fail_ex+0x410/0x560 [ 253.641332][ T9300] should_failslab+0xa8/0x100 [ 253.641360][ T9300] __kmalloc_noprof+0xfe/0x720 [ 253.641391][ T9300] ? rcu_is_watching+0x16/0xb0 [ 253.641415][ T9300] ? tomoyo_realpath_from_path+0xef/0x640 [ 253.641437][ T9300] ? tomoyo_realpath_from_path+0xef/0x640 [ 253.641467][ T9300] tomoyo_realpath_from_path+0xef/0x640 [ 253.641500][ T9300] ? tomoyo_path_number_perm+0x219/0x5f0 [ 253.641531][ T9300] tomoyo_path_number_perm+0x246/0x5f0 [ 253.641566][ T9300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.641595][ T9300] ? __lock_acquire+0x6df/0x2e50 [ 253.641630][ T9300] ? hook_file_ioctl+0x1f2/0x600 [ 253.641683][ T9300] ? __fget_files+0x2a/0x420 [ 253.641718][ T9300] ? __fget_files+0x2a/0x420 [ 253.641768][ T9300] ? __fget_files+0x3a2/0x420 [ 253.641796][ T9300] ? __fget_files+0x2a/0x420 [ 253.641826][ T9300] security_file_ioctl+0xc3/0x2a0 [ 253.641857][ T9300] __se_sys_ioctl+0x47/0x170 [ 253.641881][ T9300] do_syscall_64+0x166/0x520 [ 253.641909][ T9300] ? trace_irq_disable+0x3b/0x140 [ 253.641929][ T9300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.641952][ T9300] ? clear_bhb_loop+0x70/0xc0 [ 253.641979][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.642002][ T9300] RIP: 0033:0x7f12bf59e159 [ 253.642022][ T9300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.642047][ T9300] RSP: 002b:00007f12c04ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.642072][ T9300] RAX: ffffffffffffffda RBX: 00007f12bf825fa0 RCX: 00007f12bf59e159 [ 253.642089][ T9300] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 253.642105][ T9300] RBP: 00007f12c04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 253.642119][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.642133][ T9300] R13: 00007f12bf826038 R14: 00007f12bf825fa0 R15: 00007ffd7075a358 [ 253.642170][ T9300] [ 253.742155][ T9300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.893416][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 254.043423][ T9304] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.991'. [ 254.043510][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 254.043550][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 254.212449][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.992'. [ 254.212518][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 254.212545][ T9307] netlink: 'syz.6.992': attribute type 18 has an invalid length. [ 254.212594][ T9307] netlink: 'syz.6.992': attribute type 20 has an invalid length. [ 254.282196][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.292260][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.292325][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.292359][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.645612][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.996'. [ 254.923590][ T9339] syzkaller0: entered promiscuous mode [ 254.923640][ T9339] syzkaller0: entered allmulticast mode [ 254.938710][ T9339] 0: reclassify loop, rule prio 0, protocol 700 [ 254.944094][ T9339] netlink: 168 bytes leftover after parsing attributes in process `syz.1.998'. [ 254.970165][ T9342] netlink: 'syz.5.999': attribute type 1 has an invalid length. [ 255.350491][ T9351] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 255.528566][ T9355] FAULT_INJECTION: forcing a failure. [ 255.528566][ T9355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.528620][ T9355] CPU: 1 UID: 0 PID: 9355 Comm: syz.5.1003 Not tainted syzkaller #0 PREEMPT(full) [ 255.528641][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.528699][ T9355] Call Trace: [ 255.528718][ T9355] [ 255.528742][ T9355] dump_stack_lvl+0xe8/0x150 [ 255.528843][ T9355] should_fail_ex+0x410/0x560 [ 255.528968][ T9355] _copy_from_iter+0x1d3/0x1660 [ 255.529062][ T9355] ? _copy_from_iter+0x21b/0x1660 [ 255.529139][ T9355] ? __pfx__copy_from_iter+0x10/0x10 [ 255.529246][ T9355] ? __pfx__copy_from_iter+0x10/0x10 [ 255.529333][ T9355] copy_page_from_iter+0x219/0x2d0 [ 255.529416][ T9355] skb_copy_datagram_from_iter+0x2f4/0x720 [ 255.529503][ T9355] tun_get_user+0xc7f/0x44d0 [ 255.529628][ T9355] ? aa_file_perm+0x4ed/0x15f0 [ 255.529685][ T9355] ? __pfx_tun_get_user+0x10/0x10 [ 255.529745][ T9355] ? __lock_acquire+0x6df/0x2e50 [ 255.529803][ T9355] ? kstrtoull+0x137/0x1d0 [ 255.529885][ T9355] ? ref_tracker_alloc+0x341/0x4b0 [ 255.529960][ T9355] ? lock_acquire+0x115/0x350 [ 255.530010][ T9355] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 255.530094][ T9355] ? lock_acquire+0x115/0x350 [ 255.530144][ T9355] ? tun_get+0x1c/0x2f0 [ 255.530246][ T9355] ? tun_get+0x1c/0x2f0 [ 255.530321][ T9355] ? tun_get+0x1c/0x2f0 [ 255.530398][ T9355] tun_chr_write_iter+0x113/0x200 [ 255.530467][ T9355] vfs_write+0x612/0xba0 [ 255.530563][ T9355] ? __pfx_vfs_write+0x10/0x10 [ 255.530663][ T9355] ? __fget_files+0x2a/0x420 [ 255.530750][ T9355] ksys_write+0x150/0x270 [ 255.530835][ T9355] ? __pfx_ksys_write+0x10/0x10 [ 255.530926][ T9355] do_syscall_64+0x166/0x520 [ 255.530983][ T9355] ? trace_irq_disable+0x3b/0x140 [ 255.531028][ T9355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.531076][ T9355] ? clear_bhb_loop+0x70/0xc0 [ 255.531139][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.531193][ T9355] RIP: 0033:0x7f12bf55e98e [ 255.531232][ T9355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.531275][ T9355] RSP: 002b:00007f12c04eefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.531345][ T9355] RAX: ffffffffffffffda RBX: 00007f12c04ef6c0 RCX: 00007f12bf55e98e [ 255.531384][ T9355] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 255.531414][ T9355] RBP: 00007f12c04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 255.531450][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.531479][ T9355] R13: 00007f12bf826038 R14: 00007f12bf825fa0 R15: 00007ffd7075a358 [ 255.531570][ T9355] [ 255.776972][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.986082][ T9360] FAULT_INJECTION: forcing a failure. [ 255.986082][ T9360] name failslab, interval 1, probability 0, space 0, times 0 [ 256.000618][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.2.1005 Not tainted syzkaller #0 PREEMPT(full) [ 256.000648][ T9360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.000660][ T9360] Call Trace: [ 256.000669][ T9360] [ 256.000678][ T9360] dump_stack_lvl+0xe8/0x150 [ 256.000712][ T9360] should_fail_ex+0x410/0x560 [ 256.000751][ T9360] should_failslab+0xa8/0x100 [ 256.000778][ T9360] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 256.000814][ T9360] ? ethnl_default_set_doit+0x9a4/0x1080 [ 256.000840][ T9360] ? ethnl_default_set_doit+0x9a4/0x1080 [ 256.000868][ T9360] ? ethnl_default_set_doit+0x169/0x1080 [ 256.000900][ T9360] kmemdup_noprof+0x2b/0x70 [ 256.000922][ T9360] ethnl_default_set_doit+0x9a4/0x1080 [ 256.000972][ T9360] genl_family_rcv_msg_doit+0x233/0x340 [ 256.001009][ T9360] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.001051][ T9360] ? bpf_lsm_capable+0x9/0x20 [ 256.001079][ T9360] ? security_capable+0x7e/0x2c0 [ 256.001116][ T9360] genl_rcv_msg+0x614/0x7a0 [ 256.001151][ T9360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.001179][ T9360] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 256.001222][ T9360] netlink_rcv_skb+0x226/0x4a0 [ 256.001246][ T9360] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.001276][ T9360] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.001315][ T9360] ? down_read+0x2be/0x330 [ 256.001348][ T9360] genl_rcv+0x28/0x40 [ 256.001375][ T9360] netlink_unicast+0x7bd/0x940 [ 256.001407][ T9360] netlink_sendmsg+0x813/0xb40 [ 256.001441][ T9360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.001473][ T9360] ? apparmor_socket_sendmsg+0x98/0x360 [ 256.001505][ T9360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.001528][ T9360] sock_sendmsg_nosec+0x13a/0x180 [ 256.001557][ T9360] ____sys_sendmsg+0x54e/0x850 [ 256.001583][ T9360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.001613][ T9360] ? import_iovec+0x73/0xa0 [ 256.001649][ T9360] ___sys_sendmsg+0x2a5/0x360 [ 256.001668][ T9360] ? __lock_acquire+0x6df/0x2e50 [ 256.001693][ T9360] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.001751][ T9360] ? __fget_files+0x2a/0x420 [ 256.001776][ T9360] ? __fget_files+0x3a2/0x420 [ 256.001812][ T9360] __x64_sys_sendmsg+0x1b1/0x290 [ 256.001835][ T9360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.001878][ T9360] do_syscall_64+0x166/0x520 [ 256.001903][ T9360] ? trace_irq_disable+0x3b/0x140 [ 256.001922][ T9360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.001950][ T9360] ? clear_bhb_loop+0x70/0xc0 [ 256.001976][ T9360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.001996][ T9360] RIP: 0033:0x7f1be199e159 [ 256.002015][ T9360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.002033][ T9360] RSP: 002b:00007f1be28a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.002055][ T9360] RAX: ffffffffffffffda RBX: 00007f1be1c25fa0 RCX: 00007f1be199e159 [ 256.002071][ T9360] RDX: 00000000040040c4 RSI: 0000200000000200 RDI: 0000000000000004 [ 256.002084][ T9360] RBP: 00007f1be28a3090 R08: 0000000000000000 R09: 0000000000000000 [ 256.002097][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.002109][ T9360] R13: 00007f1be1c26038 R14: 00007f1be1c25fa0 R15: 00007fff89564fc8 [ 256.002143][ T9360] [ 256.946232][ T9375] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.236199][ T9379] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 257.857010][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 258.261598][ T9426] syzkaller0: entered promiscuous mode [ 258.267595][ T9426] syzkaller0: entered allmulticast mode [ 258.387804][ T9429] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 258.543559][ T9434] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 261.741416][ T9443] __nla_validate_parse: 10 callbacks suppressed [ 261.741462][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'. [ 261.760942][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'. [ 261.899770][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 262.442830][ T9472] syzkaller0: entered promiscuous mode [ 262.448437][ T9472] syzkaller0: entered allmulticast mode [ 262.518144][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 262.558975][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1041'. [ 262.644878][ T9479] Bluetooth: MGMT ver 1.23 [ 262.788414][ T9486] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1046'. [ 262.788476][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1046'. [ 263.175832][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1049'. [ 263.927284][ T9517] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.101075][ T9517] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.147441][ T9531] syzkaller0: entered promiscuous mode [ 264.153745][ T9531] syzkaller0: entered allmulticast mode [ 264.211240][ T9517] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.355611][ T9517] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.411394][ T9537] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1060'. [ 264.489121][ T9539] FAULT_INJECTION: forcing a failure. [ 264.489121][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.489184][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.2.1061 Not tainted syzkaller #0 PREEMPT(full) [ 264.489209][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.489276][ T9539] Call Trace: [ 264.489298][ T9539] [ 264.489327][ T9539] dump_stack_lvl+0xe8/0x150 [ 264.489453][ T9539] should_fail_ex+0x410/0x560 [ 264.489551][ T9539] _copy_from_iter+0x1d3/0x1660 [ 264.489641][ T9539] ? __alloc_skb+0x27a/0x7a0 [ 264.489725][ T9539] ? __alloc_skb+0x27a/0x7a0 [ 264.489796][ T9539] ? __alloc_skb+0x27a/0x7a0 [ 264.489880][ T9539] ? __pfx__copy_from_iter+0x10/0x10 [ 264.489962][ T9539] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 264.490045][ T9539] ? __alloc_skb+0x27a/0x7a0 [ 264.490119][ T9539] ? __alloc_skb+0x27a/0x7a0 [ 264.490231][ T9539] ? netlink_sendmsg+0x650/0xb40 [ 264.490294][ T9539] ? skb_put+0x112/0x210 [ 264.490399][ T9539] netlink_sendmsg+0x6c0/0xb40 [ 264.490476][ T9539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.490555][ T9539] ? apparmor_socket_sendmsg+0x98/0x360 [ 264.490643][ T9539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.490712][ T9539] sock_sendmsg_nosec+0x13a/0x180 [ 264.490793][ T9539] ____sys_sendmsg+0x54e/0x850 [ 264.490886][ T9539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.490962][ T9539] ? import_iovec+0x73/0xa0 [ 264.491054][ T9539] ___sys_sendmsg+0x2a5/0x360 [ 264.491105][ T9539] ? __lock_acquire+0x6df/0x2e50 [ 264.491170][ T9539] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.491351][ T9539] ? __fget_files+0x2a/0x420 [ 264.491426][ T9539] ? __fget_files+0x3a2/0x420 [ 264.491523][ T9539] __x64_sys_sendmsg+0x1b1/0x290 [ 264.491592][ T9539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.491707][ T9539] do_syscall_64+0x166/0x520 [ 264.491788][ T9539] ? trace_irq_disable+0x3b/0x140 [ 264.491841][ T9539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.491903][ T9539] ? clear_bhb_loop+0x70/0xc0 [ 264.491975][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.492030][ T9539] RIP: 0033:0x7f1be199e159 [ 264.492090][ T9539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.492149][ T9539] RSP: 002b:00007f1be28a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.492236][ T9539] RAX: ffffffffffffffda RBX: 00007f1be1c25fa0 RCX: 00007f1be199e159 [ 264.492279][ T9539] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 264.492311][ T9539] RBP: 00007f1be28a3090 R08: 0000000000000000 R09: 0000000000000000 [ 264.492353][ T9539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.492386][ T9539] R13: 00007f1be1c26038 R14: 00007f1be1c25fa0 R15: 00007fff89564fc8 [ 264.492479][ T9539] [ 264.893745][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.894915][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.895498][ T59] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.895608][ T59] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.241503][ T9549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1066'. [ 265.328100][ T9555] tipc: Enabled bearer , priority 0 [ 265.339630][ T9550] syzkaller0: entered promiscuous mode [ 265.339670][ T9550] syzkaller0: entered allmulticast mode [ 265.372194][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.377596][ T9548] tipc: Resetting bearer [ 265.478472][ T9548] tipc: Disabling bearer [ 265.771640][ T9567] syzkaller0: entered promiscuous mode [ 265.771686][ T9567] syzkaller0: entered allmulticast mode [ 265.885216][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 265.897658][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 265.906722][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 265.920556][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 265.930857][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.960643][ T9569] lo speed is unknown, defaulting to 1000 [ 266.961273][ T9572] __nla_validate_parse: 2 callbacks suppressed [ 266.972323][ T9572] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1071'. [ 267.107023][ T9574] lo speed is unknown, defaulting to 1000 [ 267.293481][ T1701] block nbd5: Possible stuck request ffff888026d15080: control (read@0,4096B). Runtime 90 seconds [ 267.690844][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1079'. [ 267.827007][ T9627] FAULT_INJECTION: forcing a failure. [ 267.827007][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 267.839878][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.1.1081 Not tainted syzkaller #0 PREEMPT(full) [ 267.839915][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.839928][ T9627] Call Trace: [ 267.839937][ T9627] [ 267.839946][ T9627] dump_stack_lvl+0xe8/0x150 [ 267.839980][ T9627] should_fail_ex+0x410/0x560 [ 267.840015][ T9627] should_failslab+0xa8/0x100 [ 267.840041][ T9627] __kmalloc_cache_noprof+0xa3/0x600 [ 267.840074][ T9627] ? sctp_datamsg_from_user+0x88/0xef0 [ 267.840096][ T9627] ? sctp_datamsg_from_user+0x88/0xef0 [ 267.840125][ T9627] sctp_datamsg_from_user+0x88/0xef0 [ 267.840165][ T9627] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 267.840199][ T9627] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 267.840234][ T9627] ? sctp_assoc_add_peer+0xd57/0x1430 [ 267.840278][ T9627] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 267.840307][ T9627] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 267.840337][ T9627] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 267.840365][ T9627] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 267.840392][ T9627] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 267.840421][ T9627] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 267.840446][ T9627] ? security_sctp_bind_connect+0x7e/0x2c0 [ 267.840478][ T9627] sctp_sendmsg+0x1bb5/0x2d00 [ 267.840518][ T9627] ? kstrtouint+0x6e/0xe0 [ 267.840543][ T9627] ? __pfx_sctp_sendmsg+0x10/0x10 [ 267.840569][ T9627] ? lock_acquire+0x115/0x350 [ 267.840590][ T9627] ? get_pid_task+0x20/0x1f0 [ 267.840627][ T9627] ? aa_sock_msg_perm+0xf5/0x210 [ 267.840687][ T9627] ? sock_rps_record_flow+0x19/0x350 [ 267.840718][ T9627] ? inet_sendmsg+0x298/0x320 [ 267.840741][ T9627] ? apparmor_socket_sendmsg+0x98/0x360 [ 267.840775][ T9627] ? __pfx_inet_sendmsg+0x10/0x10 [ 267.840799][ T9627] sock_sendmsg_nosec+0x10e/0x180 [ 267.840831][ T9627] __sys_sendto+0x408/0x5a0 [ 267.840862][ T9627] ? ksys_write+0x1e6/0x270 [ 267.840896][ T9627] ? __pfx___sys_sendto+0x10/0x10 [ 267.841025][ T9627] ? __mutex_unlock_slowpath+0x731/0x900 [ 267.841086][ T9627] ? __pfx_ksys_write+0x10/0x10 [ 267.841125][ T9627] __x64_sys_sendto+0xde/0x100 [ 267.841163][ T9627] do_syscall_64+0x166/0x520 [ 267.841193][ T9627] ? trace_irq_disable+0x3b/0x140 [ 267.841215][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.841239][ T9627] ? clear_bhb_loop+0x70/0xc0 [ 267.841267][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.841289][ T9627] RIP: 0033:0x7f46b379e159 [ 267.841311][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.841331][ T9627] RSP: 002b:00007f46b4646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 267.841356][ T9627] RAX: ffffffffffffffda RBX: 00007f46b3a26090 RCX: 00007f46b379e159 [ 267.841373][ T9627] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 267.841388][ T9627] RBP: 00007f46b4646090 R08: 000020000005ffe4 R09: 000000000000001c [ 267.841405][ T9627] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 267.841418][ T9627] R13: 00007f46b3a26128 R14: 00007f46b3a26090 R15: 00007ffd575e72e8 [ 267.841456][ T9627] [ 268.012489][ T52] Bluetooth: hci7: command tx timeout [ 268.586373][ T9639] netlink: 'syz.5.1085': attribute type 1 has an invalid length. [ 268.665537][ T9642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1085'. [ 268.705495][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1085'. [ 268.727907][ T9646] netlink: 'syz.5.1085': attribute type 1 has an invalid length. [ 268.728796][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1085'. [ 268.736952][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1085'. [ 268.758829][ T9639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.916001][ T9657] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.097821][ T9667] FAULT_INJECTION: forcing a failure. [ 269.097821][ T9667] name failslab, interval 1, probability 0, space 0, times 0 [ 269.112002][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.5.1092 Not tainted syzkaller #0 PREEMPT(full) [ 269.112034][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.112048][ T9667] Call Trace: [ 269.112058][ T9667] [ 269.112067][ T9667] dump_stack_lvl+0xe8/0x150 [ 269.112103][ T9667] should_fail_ex+0x410/0x560 [ 269.112138][ T9667] should_failslab+0xa8/0x100 [ 269.112167][ T9667] __kmalloc_noprof+0xfe/0x720 [ 269.112198][ T9667] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 269.112234][ T9667] ? unix_create_addr+0x24/0x140 [ 269.112256][ T9667] ? unix_create_addr+0x24/0x140 [ 269.112285][ T9667] unix_create_addr+0x24/0x140 [ 269.112313][ T9667] unix_bind+0x381/0x1270 [ 269.112342][ T9667] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 269.112367][ T9667] ? __pfx_unix_bind+0x10/0x10 [ 269.112386][ T9667] ? apparmor_socket_bind+0x123/0x210 [ 269.112418][ T9667] ? bpf_lsm_socket_bind+0x9/0x20 [ 269.112446][ T9667] __sys_bind+0x2e3/0x410 [ 269.112476][ T9667] ? __pfx___sys_bind+0x10/0x10 [ 269.112514][ T9667] ? __pfx_ksys_write+0x10/0x10 [ 269.112550][ T9667] __x64_sys_bind+0x7a/0x90 [ 269.112578][ T9667] do_syscall_64+0x166/0x520 [ 269.112606][ T9667] ? trace_irq_disable+0x3b/0x140 [ 269.112624][ T9667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.112645][ T9667] ? clear_bhb_loop+0x70/0xc0 [ 269.112670][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.112699][ T9667] RIP: 0033:0x7f12bf59e159 [ 269.112719][ T9667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.112795][ T9667] RSP: 002b:00007f12c04ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 269.112820][ T9667] RAX: ffffffffffffffda RBX: 00007f12bf825fa0 RCX: 00007f12bf59e159 [ 269.112836][ T9667] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000006 [ 269.112850][ T9667] RBP: 00007f12c04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 269.112865][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.112878][ T9667] R13: 00007f12bf826038 R14: 00007f12bf825fa0 R15: 00007ffd7075a358 [ 269.112912][ T9667] [ 269.867292][ T9662] lo speed is unknown, defaulting to 1000 [ 269.880024][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'. [ 270.006403][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.006637][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.007122][ T9574] bridge_slave_0: entered allmulticast mode [ 270.029864][ T9574] bridge_slave_0: entered promiscuous mode [ 270.098519][ T52] Bluetooth: hci7: command tx timeout [ 270.113007][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.113287][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.113707][ T9574] bridge_slave_1: entered allmulticast mode [ 270.136458][ T9574] bridge_slave_1: entered promiscuous mode [ 270.292583][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'. [ 270.364924][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.420225][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.462502][ T9701] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1089'. [ 270.774478][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.774540][ T9723] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1101'. [ 270.784954][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.786318][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.796005][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.810261][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.834875][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.841569][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.854100][ T9723] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 270.907184][ T9574] team0: Port device team_slave_0 added [ 270.933363][ T9725] IPVS: Error connecting to the multicast addr [ 270.975975][ T9725] IPVS: Error connecting to the multicast addr [ 270.985839][ T9725] IPVS: Error connecting to the multicast addr [ 271.044498][ T9725] IPVS: Error connecting to the multicast addr [ 271.050004][ T9725] IPVS: Error connecting to the multicast addr [ 271.069236][ T9574] team0: Port device team_slave_1 added [ 271.327102][ T9725] IPVS: Error connecting to the multicast addr [ 271.337168][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.337200][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.337229][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.339611][ T9725] IPVS: Error connecting to the multicast addr [ 271.339901][ T9725] IPVS: Error connecting to the multicast addr [ 271.340158][ T9725] IPVS: Error connecting to the multicast addr [ 271.340401][ T9725] IPVS: Error connecting to the multicast addr [ 271.340644][ T9725] IPVS: Error connecting to the multicast addr [ 271.340951][ T9725] IPVS: Error connecting to the multicast addr [ 271.345619][ T9725] IPVS: Error connecting to the multicast addr [ 271.347023][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.347038][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.347071][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.390554][ T9725] IPVS: Error connecting to the multicast addr [ 271.413782][ T9725] IPVS: Error connecting to the multicast addr [ 271.439813][ T9725] IPVS: Error connecting to the multicast addr [ 271.445487][ T9725] IPVS: Error connecting to the multicast addr [ 271.580541][ T9725] IPVS: Error connecting to the multicast addr [ 271.738667][ T9574] hsr_slave_0: entered promiscuous mode [ 271.747229][ T9574] hsr_slave_1: entered promiscuous mode [ 271.755289][ T9574] debugfs: 'hsr0' already exists in 'hsr' [ 271.755337][ T9574] Cannot create hsr debugfs directory [ 272.172288][ T52] Bluetooth: hci7: command tx timeout [ 272.215169][ T9758] syzkaller0: entered promiscuous mode [ 272.215221][ T9758] syzkaller0: entered allmulticast mode [ 272.243876][ T9758] tipc: Enabled bearer , priority 0 [ 272.267989][ T9758] tipc: Resetting bearer [ 272.280717][ T9757] tipc: Resetting bearer [ 272.327380][ T9757] tipc: Disabling bearer [ 272.618270][ T9574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.640187][ T9574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.648173][ T9574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.685043][ T9574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.694331][ T9574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.735509][ T9574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.744850][ T9574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 272.772947][ T9574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.946240][ T6466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.012849][ T9770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.144593][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.257261][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.344013][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.367049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.367314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.423229][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.423475][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.803658][ T9783] __nla_validate_parse: 66 callbacks suppressed [ 273.803712][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'. [ 273.904839][ T9789] sctp: [Deprecated]: syz.6.1116 (pid 9789) Use of int in max_burst socket option deprecated. [ 273.904839][ T9789] Use struct sctp_assoc_value instead [ 274.109612][ T9800] lo speed is unknown, defaulting to 1000 [ 274.253227][ T52] Bluetooth: hci7: command tx timeout [ 274.484544][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 274.881532][ T9801] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1117'. [ 274.926345][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 274.998452][ T9823] syzkaller0: entered promiscuous mode [ 274.998503][ T9823] syzkaller0: entered allmulticast mode [ 275.048836][ T9823] tipc: Enabled bearer , priority 0 [ 275.111426][ T9823] tipc: Resetting bearer [ 275.174364][ T9822] tipc: Resetting bearer [ 275.239254][ T9820] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 275.293727][ T9822] tipc: Disabling bearer [ 275.592606][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.902490][ T9845] validate_nla: 57 callbacks suppressed [ 275.902560][ T9845] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 275.920487][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 275.931573][ T9845] netlink: 'syz.2.1128': attribute type 9 has an invalid length. [ 275.931635][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 275.967526][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 275.967601][ T9845] netlink: 'syz.2.1128': attribute type 9 has an invalid length. [ 275.967616][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 276.273899][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 276.571194][ T9865] lo speed is unknown, defaulting to 1000 [ 276.575869][ T9574] veth0_vlan: entered promiscuous mode [ 276.716566][ T9874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.716603][ T9874] IPv6: NLM_F_CREATE should be set when creating new route [ 276.764158][ T9574] veth1_vlan: entered promiscuous mode [ 276.933519][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1135'. [ 277.007245][ T9880] FAULT_INJECTION: forcing a failure. [ 277.007245][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 277.007292][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.1.1137 Not tainted syzkaller #0 PREEMPT(full) [ 277.007314][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.007326][ T9880] Call Trace: [ 277.007333][ T9880] [ 277.007341][ T9880] dump_stack_lvl+0xe8/0x150 [ 277.007374][ T9880] should_fail_ex+0x410/0x560 [ 277.007407][ T9880] should_failslab+0xa8/0x100 [ 277.007432][ T9880] __kmalloc_cache_noprof+0xa3/0x600 [ 277.007462][ T9880] ? __kmalloc_cache_noprof+0x14d/0x600 [ 277.007490][ T9880] ? alloc_netdev_mqs+0xca0/0x12a0 [ 277.007521][ T9880] ? alloc_netdev_mqs+0xca0/0x12a0 [ 277.007549][ T9880] alloc_netdev_mqs+0xca0/0x12a0 [ 277.007579][ T9880] rtnl_create_link+0x321/0xd70 [ 277.007608][ T9880] rtnl_newlink_create+0x258/0x7b0 [ 277.007634][ T9880] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 277.007657][ T9880] ? __pfx___mutex_lock+0x10/0x10 [ 277.007694][ T9880] ? ns_capable+0x89/0xe0 [ 277.007723][ T9880] rtnl_newlink+0x166d/0x1c30 [ 277.007766][ T9880] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.007793][ T9880] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 277.007810][ T9880] ? do_syscall_64+0x166/0x520 [ 277.007835][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.007897][ T9880] ? kasan_quarantine_put+0xbb/0x1f0 [ 277.007928][ T9880] ? lockdep_hardirqs_on+0x7b/0x110 [ 277.007958][ T9880] ? nlmon_xmit+0xb0/0x100 [ 277.007983][ T9880] ? kmem_cache_free+0x182/0x650 [ 277.008014][ T9880] ? __lock_acquire+0x6df/0x2e50 [ 277.008038][ T9880] ? __dev_queue_xmit+0x29b/0x3820 [ 277.008062][ T9880] ? __local_bh_enable_ip+0xd6/0x140 [ 277.008087][ T9880] ? lockdep_hardirqs_on+0x7b/0x110 [ 277.008112][ T9880] ? __dev_queue_xmit+0x29b/0x3820 [ 277.008131][ T9880] ? __local_bh_enable_ip+0xd6/0x140 [ 277.008155][ T9880] ? __dev_queue_xmit+0x29b/0x3820 [ 277.008200][ T9880] ? lock_acquire+0x115/0x350 [ 277.008235][ T9880] ? __pfx_rtnl_newlink+0x10/0x10 [ 277.008264][ T9880] rtnetlink_rcv_msg+0x802/0xc00 [ 277.008304][ T9880] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 277.008334][ T9880] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.008360][ T9880] ? ref_tracker_free+0x689/0x830 [ 277.008479][ T9880] ? __pfx_ref_tracker_free+0x10/0x10 [ 277.008611][ T9880] netlink_rcv_skb+0x226/0x4a0 [ 277.008683][ T9880] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 277.008768][ T9880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.008867][ T9880] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.008928][ T9880] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.009000][ T9880] netlink_unicast+0x7bd/0x940 [ 277.009093][ T9880] netlink_sendmsg+0x813/0xb40 [ 277.009184][ T9880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.009265][ T9880] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.009354][ T9880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.009424][ T9880] sock_sendmsg_nosec+0x13a/0x180 [ 277.009492][ T9880] ____sys_sendmsg+0x54e/0x850 [ 277.009564][ T9880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.009652][ T9880] ? import_iovec+0x73/0xa0 [ 277.009724][ T9880] ___sys_sendmsg+0x2a5/0x360 [ 277.009771][ T9880] ? __lock_acquire+0x6df/0x2e50 [ 277.009815][ T9880] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.009870][ T9880] ? __lock_acquire+0x6df/0x2e50 [ 277.009947][ T9880] ? kstrtouint+0x6e/0xe0 [ 277.010103][ T9880] __sys_sendmmsg+0x273/0x4d0 [ 277.010167][ T9880] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.010229][ T9880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.010335][ T9880] ? ksys_write+0x242/0x270 [ 277.010409][ T9880] ? __pfx_ksys_write+0x10/0x10 [ 277.010486][ T9880] __x64_sys_sendmmsg+0xa0/0xc0 [ 277.010545][ T9880] do_syscall_64+0x166/0x520 [ 277.010611][ T9880] ? trace_irq_disable+0x3b/0x140 [ 277.010657][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.010710][ T9880] ? clear_bhb_loop+0x70/0xc0 [ 277.010778][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.010829][ T9880] RIP: 0033:0x7f46b379e159 [ 277.010879][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.010934][ T9880] RSP: 002b:00007f46b4667028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.010995][ T9880] RAX: ffffffffffffffda RBX: 00007f46b3a25fa0 RCX: 00007f46b379e159 [ 277.011027][ T9880] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 277.011064][ T9880] RBP: 00007f46b4667090 R08: 0000000000000000 R09: 0000000000000000 [ 277.011093][ T9880] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000002 [ 277.011123][ T9880] R13: 00007f46b3a26038 R14: 00007f46b3a25fa0 R15: 00007ffd575e72e8 [ 277.011200][ T9880] [ 277.511517][ T9887] FAULT_INJECTION: forcing a failure. [ 277.511517][ T9887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.526582][ T9887] CPU: 0 UID: 0 PID: 9887 Comm: syz.1.1139 Not tainted syzkaller #0 PREEMPT(full) [ 277.526612][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.526625][ T9887] Call Trace: [ 277.526634][ T9887] [ 277.526642][ T9887] dump_stack_lvl+0xe8/0x150 [ 277.526679][ T9887] should_fail_ex+0x410/0x560 [ 277.526714][ T9887] _copy_from_user+0x2d/0xb0 [ 277.526736][ T9887] ___sys_recvmsg+0x173/0x5a0 [ 277.526764][ T9887] ? __pfx____sys_recvmsg+0x10/0x10 [ 277.526793][ T9887] ? lock_acquire+0x115/0x350 [ 277.526842][ T9887] do_recvmmsg+0x31a/0x7f0 [ 277.526874][ T9887] ? __pfx_do_recvmmsg+0x10/0x10 [ 277.526909][ T9887] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.526949][ T9887] ? __fget_files+0x3a2/0x420 [ 277.526989][ T9887] __x64_sys_recvmmsg+0x198/0x250 [ 277.527015][ T9887] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 277.527051][ T9887] do_syscall_64+0x166/0x520 [ 277.527079][ T9887] ? trace_irq_disable+0x3b/0x140 [ 277.527099][ T9887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.527122][ T9887] ? clear_bhb_loop+0x70/0xc0 [ 277.527147][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.527169][ T9887] RIP: 0033:0x7f46b379e159 [ 277.527189][ T9887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.527207][ T9887] RSP: 002b:00007f46b4667028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 277.527230][ T9887] RAX: ffffffffffffffda RBX: 00007f46b3a25fa0 RCX: 00007f46b379e159 [ 277.527245][ T9887] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000004 [ 277.527260][ T9887] RBP: 00007f46b4667090 R08: 0000000000000000 R09: 0000000000000000 [ 277.527273][ T9887] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 277.527285][ T9887] R13: 00007f46b3a26038 R14: 00007f46b3a25fa0 R15: 00007ffd575e72e8 [ 277.527322][ T9887] [ 277.577594][ T9574] veth0_macvtap: entered promiscuous mode [ 277.868552][ T9894] sctp: [Deprecated]: syz.1.1143 (pid 9894) Use of int in max_burst socket option. [ 277.868552][ T9894] Use struct sctp_assoc_value instead [ 277.945198][ T9899] FAULT_INJECTION: forcing a failure. [ 277.945198][ T9899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.945254][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.2.1144 Not tainted syzkaller #0 PREEMPT(full) [ 277.945279][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.945292][ T9899] Call Trace: [ 277.945301][ T9899] [ 277.945310][ T9899] dump_stack_lvl+0xe8/0x150 [ 277.945343][ T9899] should_fail_ex+0x410/0x560 [ 277.945507][ T9899] _copy_from_user+0x2d/0xb0 [ 277.945574][ T9899] ___sys_sendmsg+0x1c6/0x360 [ 277.945626][ T9899] ? __lock_acquire+0x6df/0x2e50 [ 277.945695][ T9899] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.945746][ T9899] ? __lock_acquire+0x6df/0x2e50 [ 277.945802][ T9899] ? kstrtouint+0x6e/0xe0 [ 277.945957][ T9899] __sys_sendmmsg+0x273/0x4d0 [ 277.946024][ T9899] ? __pfx___sys_sendmmsg+0x10/0x10 [ 277.946105][ T9899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.946224][ T9899] ? ksys_write+0x242/0x270 [ 277.946308][ T9899] ? __pfx_ksys_write+0x10/0x10 [ 277.946403][ T9899] __x64_sys_sendmmsg+0xa0/0xc0 [ 277.946453][ T9899] do_syscall_64+0x166/0x520 [ 277.946526][ T9899] ? trace_irq_disable+0x3b/0x140 [ 277.946585][ T9899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.946640][ T9899] ? clear_bhb_loop+0x70/0xc0 [ 277.946700][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.946749][ T9899] RIP: 0033:0x7f1be199e159 [ 277.946797][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.946825][ T9899] RSP: 002b:00007f1be28a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 277.946905][ T9899] RAX: ffffffffffffffda RBX: 00007f1be1c25fa0 RCX: 00007f1be199e159 [ 277.946951][ T9899] RDX: 0000000000000400 RSI: 0000200000002440 RDI: 0000000000000003 [ 277.946990][ T9899] RBP: 00007f1be28a3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.947026][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.947056][ T9899] R13: 00007f1be1c26038 R14: 00007f1be1c25fa0 R15: 00007fff89564fc8 [ 277.947133][ T9899] [ 278.205030][ T9574] veth1_macvtap: entered promiscuous mode [ 278.299657][ T9900] bond7 (unregistering): Released all slaves [ 278.507810][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.534579][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.579696][ T3387] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.580791][ T3387] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.604729][ T3387] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.604804][ T3387] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.873916][ T9917] __nla_validate_parse: 3 callbacks suppressed [ 278.880737][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1148'. [ 278.890780][ T9919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1149'. [ 278.924682][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.924749][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.985022][ T9923] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 279.105947][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.105987][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.705501][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1157'. [ 279.889938][ T9966] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 279.901181][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 280.250925][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1157'. [ 280.489378][ T9971] FAULT_INJECTION: forcing a failure. [ 280.489378][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 280.489435][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.2.1161 Not tainted syzkaller #0 PREEMPT(full) [ 280.489459][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.489511][ T9971] Call Trace: [ 280.489536][ T9971] [ 280.489558][ T9971] dump_stack_lvl+0xe8/0x150 [ 280.489678][ T9971] should_fail_ex+0x410/0x560 [ 280.489783][ T9971] should_failslab+0xa8/0x100 [ 280.489852][ T9971] ? skb_clone+0x212/0x3a0 [ 280.489913][ T9971] kmem_cache_alloc_noprof+0xa1/0x600 [ 280.490004][ T9971] ? skb_clone+0x212/0x3a0 [ 280.490076][ T9971] skb_clone+0x212/0x3a0 [ 280.490137][ T9971] bpf_clone_redirect+0x170/0x4b0 [ 280.490224][ T9971] ? bpf_test_run+0x1d1/0x830 [ 280.490304][ T9971] bpf_prog_7203902e05d69e09+0x22/0x2a [ 280.490369][ T9971] bpf_test_run+0x5c9/0x830 [ 280.490491][ T9971] ? __pfx_bpf_test_run+0x10/0x10 [ 280.490581][ T9971] ? csum_partial+0x239/0x2c0 [ 280.490718][ T9971] ? skb_dst_set+0x72/0x140 [ 280.490799][ T9971] bpf_prog_test_run_skb+0xe35/0x2230 [ 280.490906][ T9971] ? __fget_files+0x3a2/0x420 [ 280.490984][ T9971] ? __fget_files+0x2a/0x420 [ 280.491087][ T9971] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 280.491149][ T9971] bpf_prog_test_run+0x2c5/0x340 [ 280.491224][ T9971] __sys_bpf+0xa22/0xd90 [ 280.491306][ T9971] ? __pfx___sys_bpf+0x10/0x10 [ 280.491401][ T9971] ? __fget_files+0x2a/0x420 [ 280.491517][ T9971] ? ksys_write+0x242/0x270 [ 280.491578][ T9971] ? __pfx_ksys_write+0x10/0x10 [ 280.491744][ T9971] __x64_sys_bpf+0xba/0xd0 [ 280.491818][ T9971] do_syscall_64+0x166/0x520 [ 280.491889][ T9971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.491942][ T9971] ? clear_bhb_loop+0x70/0xc0 [ 280.492009][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.492065][ T9971] RIP: 0033:0x7f1be199e159 [ 280.492114][ T9971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.492156][ T9971] RSP: 002b:00007f1be28a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.492220][ T9971] RAX: ffffffffffffffda RBX: 00007f1be1c25fa0 RCX: 00007f1be199e159 [ 280.492259][ T9971] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 280.492297][ T9971] RBP: 00007f1be28a3090 R08: 0000000000000000 R09: 0000000000000000 [ 280.492335][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.492372][ T9971] R13: 00007f1be1c26038 R14: 00007f1be1c25fa0 R15: 00007fff89564fc8 [ 280.492476][ T9971] [ 281.308872][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1169'. [ 281.374045][ T33] INFO: task syz.4.243:6629 blocked for more than 143 seconds. [ 281.374096][ T33] Not tainted syzkaller #0 [ 281.374124][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.374168][ T33] task:syz.4.243 state:D stack:25080 pid:6629 tgid:6628 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 281.374360][ T33] Call Trace: [ 281.374382][ T33] [ 281.374417][ T33] __schedule+0x17d4/0x5820 [ 281.374530][ T33] ? __pfx_clockevents_program_event+0x10/0x10 [ 281.374666][ T33] ? __pfx___schedule+0x10/0x10 [ 281.374764][ T33] ? schedule+0x90/0x2b0 [ 281.374845][ T33] schedule+0x164/0x2b0 [ 281.374925][ T33] schedule_preempt_disabled+0x13/0x30 [ 281.374990][ T33] __mutex_lock+0x7c1/0x1550 [ 281.375088][ T33] ? __mutex_lock+0x5d4/0x1550 [ 281.375180][ T33] ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 281.375254][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 281.375356][ T33] ? net_generic+0x1e/0x240 [ 281.375417][ T33] ? net_generic+0x1e/0x240 [ 281.386387][ T33] nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 281.386517][ T33] ? rcu_is_watching+0x16/0xb0 [ 281.386593][ T33] ? trace_kmalloc+0x2a/0xf0 [ 281.386685][ T33] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 281.386740][ T33] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 281.386777][ T33] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 281.386811][ T33] ? netlink_dump+0x1e7/0xee0 [ 281.386833][ ** replaying previous printk message ** [ 281.386833][ T33] ? netlink_dump+0x1e7/0xee0 [ 281.386865][ T33] genl_dumpit+0x10b/0x1b0 [ 281.386901][ T33] netlink_dump+0x711/0xee0 [ 281.386940][ T33] ? __pfx_netlink_dump+0x10/0x10 [ 281.386978][ T33] ? genl_start+0x497/0x6d0 [ 281.387017][ T33] __netlink_dump_start+0x589/0x7b0 [ 281.387049][ T33] genl_family_rcv_msg_dumpit+0x213/0x310 [ 281.387087][ T33] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 281.387129][ T33] ? __pfx_genl_start+0x10/0x10 [ 281.387159][ T33] ? __pfx_genl_dumpit+0x10/0x10 [ 281.387189][ T33] ? __pfx_genl_done+0x10/0x10 [ 281.387226][ T33] ? bpf_lsm_capable+0x9/0x20 [ 281.387258][ T33] ? security_capable+0x7e/0x2c0 [ 281.387300][ T33] genl_rcv_msg+0x5e1/0x7a0 [ 281.387338][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.387371][ T33] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 281.387399][ T33] ? __pfx_ref_tracker_free+0x10/0x10 [ 281.387445][ T33] netlink_rcv_skb+0x226/0x4a0 [ 281.387472][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.387506][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.387557][ T33] ? down_read+0x2be/0x330 [ 281.387594][ T33] genl_rcv+0x28/0x40 [ 281.387625][ T33] netlink_unicast+0x7bd/0x940 [ 281.387661][ T33] netlink_sendmsg+0x813/0xb40 [ 281.387698][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.387734][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 281.387769][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.387795][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 281.387829][ T33] ____sys_sendmsg+0x54e/0x850 [ 281.387858][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.387892][ T33] ? import_iovec+0x73/0xa0 [ 281.387931][ T33] ___sys_sendmsg+0x2a5/0x360 [ 281.387968][ T33] ? __lock_acquire+0x6df/0x2e50 [ 281.410080][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.410191][ T33] ? futex_wait+0x2a2/0x390 [ 281.410363][ T33] ? __fget_files+0x2a/0x420 [ 281.410437][ T33] ? __fget_files+0x3a2/0x420 [ 281.410548][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 281.410620][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.410737][ T33] do_syscall_64+0x166/0x520 [ 281.410827][ T33] ? trace_irq_disable+0x3b/0x140 [ 281.410886][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.410949][ T33] ? clear_bhb_loop+0x70/0xc0 [ 281.411037][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.411109][ T33] RIP: 0033:0x7efda6f9e159 [ 281.411154][ T33] RSP: 002b:00007efda7dbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.411226][ T33] RAX: ffffffffffffffda RBX: 00007efda7225fa0 RCX: 00007efda6f9e159 [ 281.411269][ T33] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000007 [ 281.411310][ T33] RBP: 00007efda7035024 R08: 0000000000000000 R09: 0000000000000000 [ 281.411350][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.411383][ T33] R13: 00007efda7226038 R14: 00007efda7225fa0 R15: 00007ffeaaed2408 [ 281.411480][ T33] [ 281.411559][ T33] [ 281.411559][ T33] Showing all locks held in the system: [ 281.411592][ T33] locks held by pr/ttyS0/16: 2, last CPU#0: [ 281.411651][ T33] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 281.431306][ T33] #1: ffffffff9ad2aff8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 281.431501][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 281.431545][ T33] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 281.431781][ T33] locks held by kworker/u8:12/3365: 3, last CPU#1: [ 281.431823][ T33] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.434532][ T33] #1: ffffc9000efffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.434698][ T33] #2: ffff88804d20f258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 281.434870][ T33] locks held by syslogd/4968: 2, last CPU#1: [ 281.434918][ T33] #0: ffff88807fe10e70 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 281.441808][ T33] #1: ffff8880b8724408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 281.442231][ T33] locks held by getty/5376: 2, on CPU#1: [ 281.442280][ T33] #0: ffff888035bee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.442425][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 281.453376][ T33] locks held by syz-executor/5619: 4, last CPU#1: [ 281.453444][ T33] #0: ffffffff8ee35b90 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 281.453634][ T33] #1: ffff88807b3b83b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 281.456253][ T33] #2: ffff888078775038 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 281.456439][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 281.456618][ T33] locks held by udevd/5639: 1, on CPU#0: [ 281.456658][ T33] #0: ffff8880267ed350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 281.470293][ T33] locks held by syz.0.225/6570: 2, on CPU#0: [ 281.470335][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.470490][ T33] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 281.470662][ T33] locks held by syz.4.243/6629: 3, on CPU#0: [ 281.470702][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.470854][ T33] #1: ffff888035abf6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 281.471000][ T33] #2: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40 [ 281.471246][ T33] locks held by syz.3.973/9245: 2, on CPU#1: [ 281.471296][ T33] #0: ffffffff902c0b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 281.471493][ T33] #1: ffffffff8f09e380 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 281.471646][ T33] locks held by syz-executor/9574: 4, last CPU#0: [ 281.471686][ T33] #0: ffffffff8ee35b90 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 281.471843][ T33] #1: ffff88804b0436b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 281.491311][ T33] #2: ffff88807ddd4378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 281.491571][ T33] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 281.491825][ T33] [ 281.491845][ T33] ============================================= [ 281.491845][ T33] [ 281.491869][ T33] NMI backtrace for cpu 1 [ 281.491896][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 281.491963][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.491995][ T33] Call Trace: [ 281.492020][ T33] [ 281.492043][ T33] dump_stack_lvl+0xe8/0x150 [ 281.492137][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 281.492202][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.492298][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 281.492371][ T33] sys_info+0x135/0x170 [ 281.492423][ T33] watchdog+0xfd7/0x1030 [ 281.492504][ T33] ? watchdog+0x1c7/0x1030 [ 281.492587][ T33] kthread+0x38b/0x480 [ 281.492648][ T33] ? __pfx_watchdog+0x10/0x10 [ 281.492699][ T33] ? __pfx_kthread+0x10/0x10 [ 281.492764][ T33] ret_from_fork+0x514/0xb70 [ 281.492869][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 281.492956][ T33] ? __switch_to+0xc89/0x1420 [ 281.493034][ T33] ? __pfx_kthread+0x10/0x10 [ 281.493095][ T33] ret_from_fork_asm+0x1a/0x30 [ 281.493158][ T33] [ 281.493552][ T33] Sending NMI from CPU 1 to CPUs 0: [ 281.493626][ C0] NMI backtrace for cpu 0 [ 281.493639][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 281.493660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.493672][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 281.493703][ C0] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 281.493719][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 281.493735][ C0] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 281.493749][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 281.493761][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 281.493773][ C0] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 281.493787][ C0] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 281.493800][ C0] FS: 0000000000000000(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 281.493815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.493828][ C0] CR2: 00007f84a3b556c8 CR3: 00000000744f4000 CR4: 00000000003526f0 [ 281.493845][ C0] Call Trace: [ 281.493852][ C0] [ 281.493861][ C0] wait_for_lsr+0x184/0x2f0 [ 281.493890][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 281.493915][ C0] serial8250_console_write+0xaa1/0x1200 [ 281.493947][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 281.493972][ C0] ? __schedule+0x17ea/0x5820 [ 281.494004][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 281.494040][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 281.494064][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 281.494093][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 281.494117][ C0] nbcon_kthread_func+0x679/0x880 [ 281.494140][ C0] ? nbcon_kthread_func+0x163/0x880 [ 281.494159][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 281.494181][ C0] ? __kthread_parkme+0x71/0x1f0 [ 281.494209][ C0] ? __kthread_parkme+0x199/0x1f0 [ 281.494238][ C0] kthread+0x38b/0x480 [ 281.494255][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 281.494273][ C0] ? __pfx_kthread+0x10/0x10 [ 281.494290][ C0] ret_from_fork+0x514/0xb70 [ 281.494321][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 281.494350][ C0] ? __switch_to+0xc89/0x1420 [ 281.494377][ C0] ? __pfx_kthread+0x10/0x10 [ 281.494395][ C0] ret_from_fork_asm+0x1a/0x30 [ 281.494437][ C0] [ 281.501138][ T9993] syzkaller1: entered promiscuous mode [ 281.501470][ T9993] syzkaller1: entered allmulticast mode [ 281.519159][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 282.504740][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 282.513861][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.523937][ T33] Call Trace: [ 282.527416][ T33] [ 282.530364][ T33] vpanic+0x56d/0xa60 [ 282.534390][ T33] ? __pfx___schedule+0x10/0x10 [ 282.539350][ T33] ? __pfx_vpanic+0x10/0x10 [ 282.543882][ T33] panic+0xc5/0xd0 [ 282.547626][ T33] ? __pfx_panic+0x10/0x10 [ 282.552071][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 282.557554][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 282.562944][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 282.569118][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 282.575291][ T33] watchdog+0x1030/0x1030 [ 282.579650][ T33] ? watchdog+0x1c7/0x1030 [ 282.584095][ T33] kthread+0x38b/0x480 [ 282.588185][ T33] ? __pfx_watchdog+0x10/0x10 [ 282.592880][ T33] ? __pfx_kthread+0x10/0x10 [ 282.597491][ T33] ret_from_fork+0x514/0xb70 [ 282.602107][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 282.607244][ T33] ? __switch_to+0xc89/0x1420 [ 282.611941][ T33] ? __pfx_kthread+0x10/0x10 [ 282.616569][ T33] ret_from_fork_asm+0x1a/0x30 [ 282.621377][ T33] [ 282.625011][ T33] Kernel Offset: disabled [ 282.629356][ T33] Rebooting in 86400 seconds..