last executing test programs: 31.151552527s ago: executing program 1 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r0, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'gre0\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'sit0\x00', {0x3}, 0x4}) sendmsg$rds(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)) 28.60794642s ago: executing program 0 (id=3987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000026c0)="40b679c0f01821df96b7f8364960c37b205e6456e606b9cbb31a172bdf2c7df50b78fab38c7c19cc0919d1a1bd0ea169b18aaf0f53bc519a0b543f9c7a68e69f87dbe8fa1dc839a805f9451434e9076188515d043a34f62958b9c750ae95a11ae5a625b43ee1c84499ab65277464d796", 0x70}], 0x1, 0x0, 0x0, 0x8012}], 0x1, 0x4044) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r7, 0x0) clock_gettime(0x3, 0x0) accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, &(0x7f0000000140)=@framed={{}, [@alu={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffc0, 0x1}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1f00}, 0x94) 28.325850594s ago: executing program 3 (id=3988): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30, 0x40000}], 0x1, 0x20040044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRES32=r0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000)=r2, 0xfffffffffffffef9) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x40) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)={0xc0, 0x0, 0x0, 0x70bd2c, 0x2, {}, [@IPVS_CMD_ATTR_SERVICE={0x1, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x84}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcc8b}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x91}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000037f9ffff000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800a2da6cf5487ab287a10000b70400000005b8b2dfe573a9000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x3ff, 0x2, 0x8, 0x8}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYRESDEC=r11], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r7, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r12 = socket(0x1, 0x803, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000013000900020073797a30000000000500010007f54f92d70005000a000000140007800800114000000000080012400000ffff0c000300686173683a697000"], 0x58}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94656}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc868}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$unix(0x1, 0x1, 0x0) 27.860731211s ago: executing program 1 (id=3990): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000ff8000000006180100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x48004) 27.824605744s ago: executing program 2 (id=3991): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x26840, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) accept4$x25(r4, &(0x7f0000000180)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x800) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000019c0)={{r0}, r5, 0x0, @unused=[0xfffffffffffffffa, 0x6, 0x509a, 0x4], @subvolid=0x2}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) 27.173368167s ago: executing program 2 (id=3992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000006000000000000000000ad0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x20000400) bpf$PROG_LOAD(0x25, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x3, {{0xa, 0x4e22, 0x5, @loopback, 0x8}}, {{0xa, 0x4e20, 0x3d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf1a}}}, 0x108) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b5b00ace03dd65193dfb6c5619a3d86dd6067060000141154034d069cdb99b4dcf74b5c85cd6db0c10000000000000000", 0x400}, {&(0x7f0000000100)="0400e4eda7f6c173b552572f13f8", 0xe}, {&(0x7f00000001c0)="37bcb38e75c152060c5249c2b9f30f5d0f41bdd1176d3d1b1da50fb3e8afedeab5f4b2d59048a4b2f2bc41425b76c8241171fb034b49fe9915947df9e1a84954257f89097a5e23cf481e4c8de517386dfb5f66a3ec6e16dc9dab65686382", 0xffffffd9}], 0x3) 25.144713066s ago: executing program 1 (id=3993): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x158, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) 24.717663671s ago: executing program 3 (id=3994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000fffd00000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 24.625349618s ago: executing program 0 (id=3995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50", 0x4b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000280)=""/87, 0x57}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}}, 0x80) write(r3, &(0x7f0000000000), 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd0, &(0x7f0000000280)=0xa, 0x4) 24.501140575s ago: executing program 4 (id=3996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@mcast2, 0x0}, &(0x7f0000000400)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001002abd7000fcdbdf250a800000ff02fd000010000008000400", @ANYRES32=r6, @ANYBLOB="14000500ff"], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0xfff, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x1, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x10, 0x80, 0x2, 0x2, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x65, 0x0, 0xd0, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@ra={0x94, 0x4}]}}}}}) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{r9, &(0x7f0000000040)='\x00', 0x4000, &(0x7f0000000080)={@align=0x100000001, {0x6, 0x5, 0x100, 0x9}}, 0xffff, &(0x7f00000000c0), &(0x7f0000000140)=0x4}, {[0x9, 0x1000, 0x5, 0x1]}, 0x2a, 0x5, &(0x7f0000000180)=""/5}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000004500)=ANY=[@ANYRES32=0x0, @ANYBLOB="feff0008b4e093dbe6d312865872602a2a8b5b0496af8050fa4a43aa1d5648972e72eb608d0822fe34abe7ba0b0335298a60cac29f63b5b8d275d370d6c3a147b9d9bc17afa045edcbaf4f9857952a61ec4e57343d35b412885e262e77b5c837c75a366780c0e7131e2557f0b56afd9bda082509c48f40ea14e1a3adf486c45004b9c1a49ed83b00ef3bc38b449a27d4fe7fdda2af51c97e7292819222be351c749f697e9e724c171f619ee525db01444a16d0febcd1cefa074a082266b4418f5203ee671549731a209273285a8f4f34c2d457a3573546dc442a96f3468ff2fb10c00ddb0b9fbc049b898ad77c2e8d85465412cf2b20eb57b889e5013c2e392e4fe3123be6ae4adb93fa522c080def86f4e7af3e65d377fbafd5f1a2e7a8bf90884707864557507c65ffaf8a415f6a8be381f125c083a7b95ee597c8dcf1753f992bf21a43462bfc131b4e68bd44bcb2f2d8d50ea9ff9f6c6021c89cc4e5a9bb88ecbadeba909bcf04150f582e2cb3668260775e0dfe6a06e0ecaf16f3396352adb57edc6125ee1e9a1ca10c0405dfc434e3dfdc92e4404ecd5165f6775472ff143a16bd4090d6e41e03a7e0c204651e40947fd8006d0b782432dfae2b1eb3e2e1456bba26bce249b19e7beeb1ac47b2576751a13e25f6f40d08a4e914a68fd557627c42af039a1227c9d3de9a71d2574cf3c51817600d4eff13271bfebe2179361a4a7eb216bb2d2342e65de8d84178eda32aac3ed15779737e49ad451636bb9b792258612958279e0c7cb5d119660cf83a21c6246f4cd3859c7164aa8215e98b81d7696f0d61260be22af088cfbae066c01a041f9bd3b457606f44596b6aaf2536c889ee3cdb854072a8210f240fd446e3f0518e3be0951a48bf2dae77c3e2d86ec1056730fc9eb1c7a6bb1a2963edb278771d3f17ddc0946e8d78cfa64c999df1fa8e7dd7d20bfd1deabc8ca1b55f4e6b6e54f3f5a35f4344321e968a3b2d7876fb0099e881299e7b23951828ba8dea064e2f4966a7f72b13909fcbe5717aa5190bf0797a26e62fd193e8843b7b8d5534052b9378820da5a85bf59dd08d47f6b672648b64772caf9ef84df7ff036c90061907508011c3782c644c122a68937bdb0a3ff6b1eb780ce6a6a33c954af88ff31d798ea8059d513400c244c31477cd06162d65e074e75c0f74ee9238075b3e9d5003895b6419b0f1e4661ec1fe09c378fb01b36a7667afaa8d785248f15e96d5752e5c65388a5b31158fcaceb5971b4e6a35a8dfb74695cad2018d1902a664ca9481880ee95a84489082ac8f68fd18a593ba646b14f0dbe3d64abd8b593f7173ffa38e1c44322dc6baaea1355c3d4b084a29e48ec4a774529c604b49f1be8eefd509fe03ee61164d9217cf7b7a674268e2b05537854113cd1f95a4aaaaa55d84f59ed4b9c8f33795c80b3df73b8fc76bf246bc6a5da0104c891df902eecddb758e73d297dd9b5f8e4c236baae1e5b1fbc03fcc32cac261f31a16f959dcbffbcd7d4964eca5f980b0d0bb4acc6aa15a0c35cd7d29ba2d6624129a33161a616b921e2e8d722e74fb842b72adb4b23e75881c031a4588885c964ecc3f5f39ebadee253ad20ae3eae5f857d38e88048dd8b82ed657b58dd697d7e7e6a930daadd23d148ea5f4b23de3072e7d84a2028d283c33048fea35f53daf391852666fcebd33a9b35638206c514b282fb5273a7f763afdeee069a284a5d5e8c9d3b109a2213b59d864c524dfef347f4bd70f2bca2d4ff43c39faa2a028bc08ac4032692cdfba8622c832f71aafa045ee3cf144489657137376a7c5c511225254acf25689fb36c0e53b5fc9a0e5426b1fa835306644d776285b53c17c178323654c2538cbeb002b0aa66b29f5d5f192e5fc6ad381d907bdf6c38ad3d5cb149955f7c65ac0d66038c94600365fd6c119af6ac15d1018ddf6a992059fde12f4d12371b12042458e906c832b0800b4c1e360f6a8f3b5c7b82d1bebbe82efd08c9b9468d8809480f632bc7e5d53de0a979a2ba9bea8a7b3e96a7a6f1adb0f4d57f5c0b68bfd412a7940bc5ff404e5e6211557da516f3347b9345c1dcd9fcf17dfc37a78a785d154eb685a5318f3fdb6ba65b297884925f08b7102b81c0bb9a9c2350c64d9b69094c1d17d4b235526e8b93fb53ba92f81d27375ea8ddd23d3fd86eb027a9531b6bb95fba190bad9f28ccbd0f48a092fa2924560a47300073df281a2b66999f4bf5519e0742b4ab5d7c9a99af3e0c68d7b34ceb180422bac3dc2f5863790a7103106cea592b08c7e0b6a931fd64d3256212bc8a6f533a3a047ac5fdf13b2588f3986a750c9416fa0fe6d5e173dcd5396d23e06ce549f4eed69f4cfd8ddbad368ef824401920891b803a0a147e660d37adba0b6c3afe6398ab9031d32ce42c41f133ad217f8ed9e8fd79478c9a27568ca73ca477c5a02e87c607c35ed55b7133d1d216cf3076701b784c76fb251027c345e8a82c2c00fe1ee8bd49da00ee372361c62051a17f66b59efc1d840b9af6766dfccc8c56068801892d521d1911bab78ecb57b26cb22ad49751e25b5a129b515a7f0b883db0a323e7fc87495a4a594ac50ddec1ec56a98dff77272cd7ac69564210e4a561a6ecdeade93d255da254af36c35baf079b339455cdd08e3c328d5efa68819421b397552902dbce8ccc8a3bc5158ecade155fd44858a177e8748e3bfd310fccfab1c02ebb88191c36462061f81d36a1074bfc843c25b86b5d4478e5541f63f3bc51ddb67831739f63eacba93513cd88009b01c99607b1ccd9c8fa0d538f0317caafd8c7ca1cb669b3b5395ab10025ab300850ae931225f95e4fdabc904d54e88dec5eaf0881063031a2a8310b554bc3f411e62bff9226fc84acc8b1aea06cc7f8a3e6f43293de689341edf146e56555e04688796387ba3f2fdfe"], 0x808) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000019c0)={'gretap0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x1, 0x8, 0x44f, 0x0, {{0x21, 0x4, 0x2, 0x0, 0x84, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0xb, 0xd8, [@broadcast, @empty]}, @generic={0x94, 0xe, "18a30f6017fca697efe7aed1"}, @ssrr={0x89, 0x1f, 0x80, [@remote, @loopback, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @rand_addr=0x64010102, @private=0xa010101]}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x2, [0x1000, 0xfffffffc, 0x7]}, @end, @end, @rr={0x7, 0x23, 0xa6, [@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0xe}, @local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=@newtfilter={0x2af8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x2ac8, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x4, 0xffe0}}, @TCA_FLOW_POLICE={0x460, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x80, 0x8, 0xfffffff3, {0x7, 0x1, 0x0, 0x7fff, 0x1, 0x5}, {0x8, 0x1, 0xf, 0x8, 0x100, 0xc}, 0x2, 0x1000, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0xf43, 0x7, 0x9, 0x6, 0x9, 0xfffffffa, 0x1000, 0x2, 0x9, 0x8, 0x55bc, 0xffff, 0x6, 0x6, 0x6, 0x7f, 0x8, 0xfff, 0x2, 0x1, 0xfab, 0xecb, 0x5, 0xffffffff, 0x7fff, 0x1, 0x200, 0x2, 0x3, 0x8, 0x3, 0x43d, 0xfffffc01, 0x2, 0x100, 0x3c9ae61b, 0x5, 0x6, 0x1, 0x6, 0x7ff, 0x5, 0x9, 0x800, 0x2, 0xfffffe01, 0x3, 0xfffffff8, 0x6, 0x8, 0xac25ee70, 0x7, 0x3, 0x4, 0x5, 0x4992d444, 0x8, 0xd, 0x1, 0x1, 0x1, 0x1, 0xe, 0x1, 0x3, 0x20, 0x8, 0x9, 0x4, 0x0, 0x995, 0x9, 0x9, 0x4, 0x10, 0x4, 0x3, 0x1, 0x9d, 0x800, 0x4, 0x2, 0x800, 0xaa67, 0x2f1, 0x309, 0x8, 0x0, 0x101, 0x7, 0xfffffffc, 0xfffffffc, 0x1000, 0x4edb, 0xb85, 0x3, 0x8, 0x6, 0x4, 0xb90b, 0xfffffff6, 0x6, 0x4, 0xd, 0x2, 0x8000, 0x5, 0x7, 0x6, 0xdac4, 0xfffffffd, 0x51, 0x3ff, 0x8, 0x1, 0xd, 0x8, 0x80000000, 0xffffffc4, 0x7ff, 0x5, 0xfffffff9, 0x42, 0x5d, 0x5, 0xe, 0x7, 0x3d, 0x3, 0x3, 0x7, 0x10001, 0x973c, 0x2, 0x10, 0xfffffff8, 0x9, 0x7, 0x4, 0x8, 0xffffffff, 0x800, 0x8, 0x1ff, 0x5, 0x7, 0x5, 0x2, 0x5, 0x0, 0x101, 0x3, 0x0, 0x396, 0x56a, 0x10000, 0xffff, 0x800, 0x5, 0x9, 0x7ff, 0xfffffff8, 0xe3, 0x8, 0x7, 0x4f, 0x7fffffff, 0x16, 0x6, 0xe6c, 0x7b, 0x7, 0x0, 0x4, 0x9, 0xa0, 0x3, 0xd, 0x2, 0x1, 0x5, 0x6, 0x7, 0x4e8, 0xcc, 0x3, 0x8, 0x2, 0x9, 0x7, 0x9, 0x3, 0x226, 0x5, 0xc25, 0x9, 0x2, 0x10, 0x6f, 0x400, 0x2, 0x3, 0x80, 0x0, 0xfffffff9, 0x1, 0xfffffffc, 0x80000000, 0xb, 0x8001, 0x3, 0x8, 0x0, 0x8, 0x8001, 0xfff, 0x4, 0x6b, 0x9, 0x200, 0x8000, 0x5, 0x6, 0x101, 0x2, 0x7, 0x6, 0x5, 0x2, 0x6, 0x10000007, 0x4d, 0x401, 0x7fff, 0x7f, 0x6, 0x2, 0x9, 0x8, 0x800, 0x8, 0x7fffffff, 0x3, 0xf94f, 0x9, 0x2, 0x9, 0x4, 0x6, 0x10001, 0x6, 0x9389, 0x80000001, 0x104, 0x4]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ACT={0x2610, 0x9, 0x0, 0x1, [@m_xt={0x210, 0x2, 0x0, 0x0, {{0x7}, {0x180, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xfb, 0x6, {0x1ff, 'mangle\x00', 0xff, 0x5, "4462fc343b3d50d3dd6ffcf8311f10a5a99cfff5f6b8c57c34a6c1e77d3ce78fa962da50b0ea5f2fe270b5d48b632a16cb9f0407e7556cedde0333f5066b84b7f86833deeaab8f5568b65a796fa075e66b580ae79afb46e6e70d527bcec3f48bbf43466b0277ad52cfdcdde320067b553d77dbec13e28660ce994c2851ab0a229e310007693f46f38a68a669366a9769dfef9a851e69b36e983cf09f6ea96dba04c2c2bf6dbd9e1a95a19bce600040e20c2965336d32b8b4e910028c5f84236d763a26999527ce38b5c97749f64fb8167c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_INDEX={0x8, 0x3, 0xe}]}, {0x6a, 0x6, "5d852fb202cdb91cbdb2f56e36d1806710a308adaa3793d0e595d6cc65b0e37df041297d9a918e79ee70b1b6e51fbab02ab1f81248916fb6f9a683f468a921e4717724af9ada64473b9cc38bdf599c0c475580d4427d12db00e8512a988c6e07a3c41edb04f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0x1030, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x124, 0x9, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x401, 0x2, 0xfffff199, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x5d, 0x5, 0x0, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x20000000, 0x0, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf148, 0xffff8000, 0x6, 0x8, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffe00, 0xa, 0x8, 0x7, 0x1}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x20000000, 0x9}, 0x5}}]}, {0x35, 0x6, "40b60f3ee5463d0bb78fc4787ae76dba604c90d4bd99be2db56efaf850d904642279769704b5446d7b458a3b21531f587c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x90, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x9, 0x20000000, 0x2, 0x8}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x44, 0xfffffffa, 0x10000000, 0xa5d}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xc8, 0xffffffffffffffff, 0x4, 0x5}, 0x12}}]}, {0xe, 0x6, "bc161e5dc89d7b1d16ee"}, {0xc}, {0xc, 0x8, {0x2, 0x5}}}}, @m_vlan={0x94, 0x8, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6f}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf0e}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x95}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7a6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x5, 0x5, 0xfffff000, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0xb, 0x6, "d03457d9125eb5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xeb4, 0xa, 0x0, 0x0, {{0xf}, {0x4}, {0xe84, 0x6, "3eb60e5bff6ce909ef33c2ae7d46f93f2a611f0c168da4aef578f5d246df5d670143b1b617345d56f260e7ce2436b8968a511514f64cb1d0578dd77ea5ef78d2c24adbee4b9ab5b1f2966d14c42b0aa28fb38953f6c4fe212b2f6712d584f7cf834b9d06324fbcc3420e8421c64b292f20020424267c470ce600283005f7b27d87d6cea79aa0c466217ac3b63a1f7b5924aee7f83bdd1d36b84985f2e78852dafd9f3ed94c14e5d2ba9574144b67a3ec074e40a775f4d48355d1759e27786f7110feec6a652d15af2a3d2c72f8db45e2a82f7e2d4fb75d1939a5bbd26940dbfc34c55c49a8377aa8d151e53ccd4c54c50153bd7cd2677ebdfae6f10ab5858ef58c028f88d1ef4a334c92715b292c6626195e3d7e40b69cafecfff4c2e8bc40d15ca245a0d079d234beec9ddc10b0d4670636b3bb8fb6a0773fbfe89f311c62d0c1bae36058aff98a3e8671994bd9662cb56354980469f77d4e6eb38303d7c562bb0b36ea8aafb771c9e89fc8c341471c82dad2b4b3b33fea4a6c8fa22b360dfa397f33d1c926ec5ef43cae9e5a79a41b01d233f67f82b336b3cd6903797c0116676118e9041f036d67615f7f5ccd6b0243c31b7e582a0fb64c24ccfcc600a03836cb282c1ac541167fd1687259542641da951f1696c7994c056532c1b230abd471248d81b377baa46286bc147ca2c9935e7d6d7f60da5ee130c2257065f9084d1313e9015c5cb23f89244228390c5172ca8985bd6c98a904140466ecfdc334375a713850ddf553f7a2a64959bc98806c9c464c6cda9d05ff8adfba290effdbee3f88d13f1ff25dcffc8905e4231343f23db12f3603eb9c6d717e8fefb7871ba4e2c3bf5305ee73e7b1111c31cafc17efc3db174c772f5dace9bebbe6a720a849603490e9e81109314a313bb3d9e3cd984b4f94291d7af744ebcbbb538ed34c6765ddc17e903533a6cc20e22e2e831f91c9f1b50fad03412f9ccf743403549dee4ee1c94dcd14ee52c5d0469348f030c03b3af04ea862d12816a8016e690bd2ad17a93cbab75b2ebac7c91b6ce12e8ad083581cc85fd1ae73eee878a39dcf7cc6329c57b99345ac1876a5d771d809e6109b54bb5ff530df0810fec269a1a87d6171b6f4eaea8148d34241765ec843a5dc67d89f87073a0f8d9c5e79b39a9894b531f990f4a35445d751701c877562c4dd41fc04a4a79eb057b6ed93ba6ab108cff4cd3900254e1fe9ffe3dab81c1ead35032042000aa19e5fe6a6d404ed0bcd7491087be8c64a631b99869acc977b87ae8014ef209f898848f132d16dd03cb48f522fb0ecd8170535ca5d65062df4ff01cbb976c6e888b3821480a4e505f4e6db9cffdc3fbe64740a183c9737764b7120c820957d010dff38be547371ca55ea6a406e0bb97595c0c664c4475be70e26d4804a9fbc3c6a91e18830cc95e9e244f2319b4121e8623e15d54d67d57109d1c0894d1aafe4a3fcf83c43a19d7278421cdbc380d52437465fd979711bbec7e958f690cd8bb284ce4e387403288f74171601f45a53fec2de71135873f655632bf2339e78f0ce0136769976e081807db0d8f02bfd61015add397bf816cdc6bb24d359798aa599cf5333ed65d0d77b505608a73b701ff65d99410630ff909d6e776abade755686cb49edfb53afa8cc7369c63751530f13fc5885d1f617f480132ef1418165b3d8758577b45a4c1d8e4898e1c58a0d7cb45b6f649330b16fe11de4aab6b44c536e1b115dc8d3233f571e94d15459097e8e0b3f4a6afa084c5597ed36b9d49829346dd9ac922018d52e34758cb241c92ff16f105e026a5efb1908740ee4e6aaef242991dbe449826b2a0ef71fa1539be8c4d3f5c1c982d6e98da2397d57cc122837f65f5d07dae7db2791740101334a84e6e03e951754e1e45619449a6f1ebcb924ac36cc598cfc10c5d22a5d8f8a580c367b1aac1b71e8b88b668e4b2dab8bf392e162ee383e62b775441d958a4d647527e1a2957463c4991b212dbde146c3775905eb369f80e49a283224a8644ad218abcca29a5d17da240b9050abc33cf6fbadc3540e7365b081a689e323be7b828b02f85f845a8e12693b3c7d9c01088a171d53bb560a67359f7aaf9176b3329d129ed137aae462a0babbdfcd14e6447aa8071754307d3b67d8880927406569c1714139a3a309f82645c92d3540462807b1b7a4f225dfa64f64f0ffe3100dc02668539933a9177c80f8b69c2ec03f37d19cf5c30cb4163cf4a03f780c7aec628687bdf8bdc4224e36cfea4e66f54ca0ef87ef78c1c7c5e4eacac79b0b7636b13fa41c63c20b1ac1626d199692b4aba93a3caf327456efbd0e5a31cd836a0fad81b02ad9403c68a959217e5f9d132657d817f9f52fdb09778c530d32372fb13b9ac23a3877fe8f12773afe53255747dc3ba11ae1423c113e995ba2bb6940d7c09df7568bfccf078932773cca5d3d9d49211b5b552b4cea2b668eba914524d871278075b794c2870af7d30df21a4c54288923dee7bf32fe930b6c2d24a604663a538da5609c2626942fe8ebb7fb68c1cb1d9ae6c6b058fd5615b58e620ffbcb53a4bc0c2609855691163181d4aa9ac45a14948465f6fb7d3abcd8174b6e831a48b55fa8340d76ae1e8949382caec64e848cbaf596a550e43a2365035fda183615d0e0f700d6c43123df03d23ba9f05ce0a064cdad3ea7549c2d8c7c11b634074691ff10a5f43ed9c6a79cfc6b4bda3622d6b9a789364717508580b3f3619f4771dcbff7388b4630ea5ce36d51cda74d6df5bf6f7005d18b8b233c0c28b1b4e29fe8711d348e5eadf9f724c2300796ec63b430d8b87a350d6a40a8bc5960e78b01be48fdfeeaa0b0aec481afe84e266b9be9818660ed34426ba42005329a7e96274134ef80821d49d8b817fd7dd069415c350151f96f0f8bd715d571cfdbbae443571f92464b0be610bf50f20bff1103566bc20fc77d13ed8b3090e1134a5dcc616cb266bb10db5e1ef577b7e45f54c794f1bd76fc648ab116f612525f6c133010f5cdf4983aae480b80ed9239a020413ec68785e925b66a8187cf03b64bb7b08349f4fd01575524d495e429abd2f56cd8e387c21c590a7acd66e61409e5373dbca994b1644d59964d1f6fcf19e9ad3f36f8cc37b9ff502a1ab5237e79c803588c121122317b1f92edf93dd39fdc5c5e1ddc98a4918b7d1bbc5428f1459a17446d13de0919f4e2de678bbf08596d863f6418b83e2cd9f4183d02d1b4e7170062065d24bafd5f7c46baa5a2732a89e25ad2c95b1531bd945be2345bd267bea82adf548b8d4ec97698be4f51a0ce0c7803055fb275be9235364d9e79e23730d7832bd7e179a48a041ee55e3e83fb5f9f8555854b9a25ee0e6e6a8a229c5ee9c58e1b22971d12228b1fe1fee2c94dc82edf4daadc94a5f038055dc00f50a2346c74e5fad3ae8e6f7b4781b209a4ad501011c517ce5af4fdd590e0adac2f972fec3e21388bbcd092082803169e12c2cf34bcc9779f2b57b53294bab223cfa9311fc21017efcc0e7d31740a1d875f286925e4f9f1e0bf60d9d0bbc07a764e89d4e4a3f01cec3d99cf6444c25851933c1fd1391a27ba683f600b3264e83eb369f8b4f71b2310f0c97309df75206f23818f646e57c5cc95bfcfea076af6b2cb25df6c814344e690a48f6b8d5206f68cdafdab0bde0f2c440783d7e0d9660bab00b69779c24e5cb05f5f43e4fbcf4e62315d9c726dad5d4267d8cc70c30564701d79f6c7c68a74cb1c4338e7278188a06cc82a22c41c73918c22ad6234b770b1a408ad72366d3d22dfb1d749c5aeb31a4fb337c2e0a80a9b2ca25c077812941cef0a1c727e777e896acf5cf3855765908eebf68030deaf87205b441e1f1669fe7fd60044b1976c376606fd3d14a8455c70ca725e89989dd8f1c4e8b2fbda213dabdf1aa82eeeeee116b6fda551a4a322207f40bd8677de0897a34a31aaa86c5a78735c8ee3afd81fb698f75952d3b7579c1638ebefe75acaf01a9e2494999fe8eb85e7f18069e7fe11de62d801a7ca52a7813d895ddce8781b21ab27e17bf83b27f142191ebd184539e9623e6c996e651887f5fc927a8d888a537880e7cc83367931bfa2d091675ba1e31f871566798ffa00d4c89022a0a689b09f1a1b8254ef5e15f3097650aac15a03bb6bb286573fbe1c0bb2d1e9e3fbb514e824e83f90ea4b27376299c222ae2530c14266b7958f7b8f9072f7c911a378783ec67ea7f3c37a547911a2c7fcc1aaac7a261d02dfb7c7adb54eee8e2b11279f0b5bfe23f8e890dc3f58595d462b476d0c6965057ecf8dbbf1dfbffc48e3deeb46de52fdd33a510dbe62f51233af9b9fcc4e4849bb2f2aac2f260682da2fd4e82cb10c75a26189bcd94802deb36848218ea9411bf8c752106ae1e2612848d8e19a225277f554268c242da54a1982487f666d7f320e345bf82b5c40d92557a6451cc627ab4cd75ecd7e101fa36b57fc9432eda156f005c5dd9f17679d26262a8ceb897dc8319e6e6781180c77b24436f43ef221120e2fed0a20d218a395b14432e494d2be3158f55696cd002d99425af9f9e3f436a1c147e79aa40ff7048987f2a08447cb28b208725656fc6c952ee7b05f65480648608ba4763e2e165988e4580faedd8db384bf741fecbb2bb10ac3ffe8d009b13e489cc89f1f0063f872cea474857bf9216ed9aa2e6f563e86b2b23bdfcb35b78e6126478eee41a49a540adfbeec64b2483a052af0e1bd72b94035d225415952d2122bfc1a63e09fb7a52d30d48a836359a3a76cb899cfd1433ffed586ebc6f69916d46749aba58452b02593b11016ec8d87a8b8860e0b19f9dbf09e9e6e99de03e9ee97b86ef87a6d5c719bb8c686403fdb8badcf20814f9c38058c64ec30481ad920acf0dff4f5efcd66e11c206d1a4e35212f233f8f30e9ce9ba670502d40234adfea5229488eb62396d279e0b0786d1af3078a6a357753a66ca679b6ebc15a22b3dc3be7799c121edf86cb7ae89df5a7757faded8ed8d7b38c9fc4c13535cd72a1cb27f1d59e27671fab24d00f9a9b8a70d32b39e122121da38fe6db3c10889dfd6a1c253968e1fe2af1015d73297b08b69f5931b63d6644008405dcee446910e8bb78df70e984e1df412d2465523a63ef6b5473c027cbff123a9a3a8f0232e65f984b789517b4222b44b4d9e99931ea2492c93ebdd933ed50f2e1f95ad11bb733d8de8c90e649cec31d4fabe43c408ca5c7e0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x108, 0x6, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x304}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x37, 0x3, 0x5, 0x42, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0x91, 0x6, "1aca8f2282484a1e247638e715dafe7a750fdfe8610372edad584e690f90adf73737a49837cf4042eb7ec6e053977e5e0b43b68b09cef98b1aa0cff08f57926b72c6630969ff6e7a364ad819ae43b94fa987dcdb5bc54e103ef6b586441278cb916355855b399e38ee947f0b06de30eebcdcef25cacca88d2e969b874b4115f430de0fa7c4e309ee7d095001be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x60, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3bc1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffa}]}, {0x14, 0x6, "4c79cb0eced205e469980f45cc62320c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x168, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x101, 0x6, "a7c44d840ab6ce2bbab5535242efde5472664ce6109436b50024f939b9053765ba40f53f9a999d7969a8f2d5bcd15c4fa75b18878c97aa2f219df40c56b5d1c01312d13f8cc04cd0e85ddc1630d2af6d6d63a14ee96bb718268212fe008380cef38214a6f905708bed802d0ac325bfaf159f7d3f9e8ace437bde3bc4707e3ca70ae861bda9fc717ceafe16b24383ee9124a19d9a89f94276490b607d990f5fce8c84c034e5f8036343d68cbe1367f4d75599a4b99c93ceaaf67ac1e9304f06be7e1aa91262c493f66d5b35f8a3876efb186ebd2ea7f7bdc519a1b44f090a3d7fba8d39a4d661b461c563ab06504abb2594dccffaf1fee3a30c23572a58"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x2af8}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{r10, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0xd, &(0x7f00000015c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}], &(0x7f0000001640)='syzkaller\x00', 0x80, 0x60, &(0x7f0000001680)=""/96, 0x41100, 0x10, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x5, 0x1, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000017c0)=[{0x2, 0x3, 0x8, 0xa}, {0x2, 0x3, 0xa, 0xc}, {0x3, 0x5, 0x2, 0xf}, {0x3, 0x4, 0xf, 0xa}, {0x4, 0x4, 0xc, 0xb}, {0x0, 0x5, 0xc, 0x9}]}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000640)={@rand_addr, 0x0}, &(0x7f0000000680)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb8, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4850}, 0x4000080) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r17, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r19 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r17, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r18, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r19, r19, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) 24.149100183s ago: executing program 1 (id=3997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_USERDATA={0x7, 0xd, 0x1, 0x0, "63efee"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000002100039042cbd7000eaffffff0003e4", @ANYRES32=r4, @ANYBLOB="93200400040000001800128008000100736974000c00028008001400c8d15144"], 0x38}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) 24.092290554s ago: executing program 2 (id=3998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000b1a001000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 23.996225976s ago: executing program 0 (id=3999): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0x158, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000080) 23.773580888s ago: executing program 3 (id=4000): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x3) r2 = socket(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) unshare(0x20000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, 0x0, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039040000", @ANYRES32, @ANYBLOB="019800000000000020"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x1, 0x1, r8, 0x5}, 0xc) 23.480622395s ago: executing program 2 (id=4001): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c001680080001c0"], 0x30}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000ed0300082cbd7000fbdbdf0bb7b91015cd771ac5cbd2da45cbe68dcc3a94787f60d53d598f3262ae8ec0c15e85d6b0978b125d2fe5dbf5fcf128e30f62e42e13ddfe28e887d82f98"], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20048080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001940)={@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x81}}}, {&(0x7f0000000900)=""/4096, 0x1000}, &(0x7f0000001900), 0x1}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) listen(0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 22.889125387s ago: executing program 0 (id=4002): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0016000500142603600e1208000f000089", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) unshare(0x20000400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0xffffffffffffff65, &(0x7f0000000180)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) connect$netlink(r2, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf25110000001c000280080003000200000008000800040000000600"], 0x58}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x482}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5}, 0x44080) r5 = socket(0x28, 0x5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg1\x00'}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x441}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x49052ba3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x8}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 22.840338956s ago: executing program 4 (id=4003): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) unshare(0x2a020400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001600156f27bd7000fddfdf41130000c8"], 0x18}, 0x1, 0x0, 0x0, 0x66008050}, 0x24048) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010014}, 0x814) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)={0x2, 'pimreg0\x00', {0x8}, 0x7fff}) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x20000000000000f2, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000ffffff0000000000020000000000000000000000ffff008879e66485201a0015ca837400"/55}, {0x1, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000ac0)={&(0x7f0000000380)="b0f507735cd8e3b72d66", &(0x7f0000000840)=""/255, &(0x7f0000000940)="4947e88e921e1bdaedeb67bca4499ab4743189e76a4b2287f1b085aafecf3d1274d7a9e25a5c7bd3105a602b898ed753fcff147d50da3f4a47beae1c384839819056ea9a054cd82c4c89a16ca037847f3477ef359f54237aa5deeb818285fe61ab5918333f29eb42c669631672da882fe0d4", &(0x7f00000009c0)="a387e3b9b9e7f9931bc6d76d65c109eec0ed6a8ba6ff6e869bcc584265326f034630b174a791ba845892329cb0b3e2e7ac46410f34bc5409689534d0fcd9439436031273a5faeb1a956e939ef065fd9c5be8f9020a4dc11a37efcfda27560e7798caf5e3068980e214fa9d983c73ca3e85425250f43341bce1e29fdd6d8be6c01c7a4f3b11cac6dea768e092cb8a266546ba2406d4253359837dd759b3d12e8b182fe0cab89a2c5e6d413c3377bfb36fe9307095a0cdb7cca5cf8682bf81cf4847ed79ffb277cd01121171286c3c92933be42179a8aa405c7d1d70d082", 0xa632, r1, 0x4}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r9, &(0x7f00000004c0)="99b9", 0x2, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x40000d4}, 0x1) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008004}, 0x8014) 22.16026698s ago: executing program 0 (id=4004): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000022c0)={{r4}, "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"}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x147}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfa5, 0x0, 0x7, 0x8, 0x7}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x5, 0x8, 0x9}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.020990163s ago: executing program 1 (id=4005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x1, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r4, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x86}, 0x400e840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0xc1}, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r7) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f00000006c0)="2fc88d0af00cb1fd84e2d5076b526123116ac94898eb6eb23f78699be051cedae83c2b1219b95d11e65a4dd29c1d2d774e71ed81d16cfa8494e65db694c6647eb3c4065b7a210406236cb787e2fd4b0f3cd53a161eff8499d490919b27bd23ba8d87401de9e1917d524e77e79bfc1f3a451d62f3aec51fe449e2b331d15041ffe3781ed518d973478c3af35f1b5e110abd9179713aab1be8ce559a91ad509010fbef09fc81889bfdada6facab963f83e08423d598e44e9478c599f3c5183d3ab7ad9e9367a8b9eaffcf2680a094705f76fca0a01bd8819bec7791f50ac4882f278e7c9dd321027daf4e005b136524ed6368a11f987e25be7e54e524efff1e09984443d4c5dbdec4213a755df5816c2ca5d30f9f26b0c61998e3e25be458ffd409edd046a8a59a0e243af6be87725c5e12fa84e1f5ef48c4492c24d8f3a63bcdf587add89d94c4770f096703ebcecf4ac8ce8c655d20384c955ec08acf7c2a364283a29c674fd30c3c927c36789918f7928b56c677db06329fce0ae896ff1fe0af1da1657df75543a2936897da792c11582becc35ec0dc1d9228cf4927186290c4f95e47a730b32cac06b4244e93a60b70a1332336ded60b9d2a94f9688dd67cd87cb934d053c4f3f7107239ed3de7b817092160a763fe1a43219991b0af2e3f008fba1b687bc67448ab48d64628e8c09035b6fe96230518a55169e57c0e3672e26a9f10094cc6e37091ba81dacb6b0300cf1e1cc9bf046827b18379a27b0c17e4e6bbb14e1c6449dce9495da0a250cdc6156ff8e29a97795552563e9382ffd9e07830af847919a7cc7a1704f9cb601d1c28b3595f32d41516eaebd4c3b5f0023741af2b761840109ab2af374fe59e5b5cff182c1b2e2b0703c32c3a3b9576c78b653c78620dac149844ab24aa79c684d7bde5ce7c3dafae82186ed1d430c1175da89194757f114e545da13d690bd9566e289ab037af8a4075a520769010df5ee3f4b301c14ff6bb3084a91eb92a818adeae9be4212252099212538f5ef14dd5ef98f672fe3ea876ede2679b5791bfca081826ddc62a2a5369925463ab4f39f88f90d57f071fe2efe3150e157bab8227071630380457e14fb91a857faa17f612b09f5275c58399f4275e32341e12ca73149586d799cfb840c16eee441238d1784c42b34319e50846c755bd6993b87053329197d92dba27880cb1aef6f407c50851600d89253df7054f8c38e1562fd2a5d546e0c5ec4c21d9048d0e93803fc9a8492d45c0c1b52c4f31fa81b3ac97e399b200572267bad1e540cd1daecad637cc1c7596835340a4bea7f92c5a90937b89d5da1dfec4bdbba69d14e860b993322bda00b502000abbc6e2e1dba90fb90871da4abb3adcc78286893b6d300dd91b3098700409eb867604acfaaa2df88b02a601cc6c4533ca5c3aafad3b8eb3ba2284b3565fce0e7946d65a2dc69307515aaaa9b2c40c5ded2b700a781e669352285a93b05b109bc94bd8603b5472bd91c01d2be20009d9c3aded25c0ffe2e33c41cb02cea0ff436043f0fc1a45247d0af971bdf33149762efdbd98213b2977da3b62cdd1b19115f4ada829b73379c26f1ac5d76f8cd73829962eb6d305eb5c5247b79c91083ee24095fec24ddabf45d10d8fcdb926286b692e71a1983915369c61d411e2afdb9b71529e6f67c2176a3ae353f4dfcef5b63755cba993cde00090a5b2db7505840714de56594c4c284657fe9f2af23cd0203b01bf8a1f1c173e867083e706b32d3888ec2adb246007a9d46de2fe8e3e80479b35081d0bdc8e5ec992504ea360d1b45518a08840eaa48a8d0090ad5e16877d98c9bc7b8a9466a3d6a03e9f6cc4855c44986c04a386d79124dcf7092fa47c32edd2edfab3baa373fb77bfb62254fe38724a8bcf8d6c478492f659d3299c77197db3bd93407de073a703890283723869590ee0d29636b6d509f142790e09b5f9073466b2af36ed91c881cb6529e5426ad22dbd7cf917140e16d55c4d236891fe9a91576da091fce8175949d2710c401d73bfe5d75f01cccdb6ffa465a9bbcd95b3095f400e6ec61f3f4344b40258f423ad3ca557e275241fd3467af9cc4ae1d038edd2d367efdc68000047bc60c30e855c8a43ba0bc2c8af121022843e392ae80a7e3ce7f8d32aede1a07a68851191c0fc49ecf139667d21da43683a6c92258f7ffbb5c570b1a437ccb8ea9162501692295fbcae5723a41fbc587a795a97a15cdedb21a761e394a0bc5575771d399002b8f28fd8a4d1b32e7691798c127798b894bcea290b1c1ff1b717b9b032f7aae050441ddb69d37541ce51ad4bc69fc02594d91968e10cda18fd5484f2c41e958f44efa4920721e47f51e5bdad6523bf1608bf438e7cebfa505fe1d81afe12ac02429b8d71a2d51f07e189074d03ca826f1b315817128879a70919bd76274ad1c2336b23168388212539f51ab430d9811db9cbe3886dcdc186579ae30bf1fb2d226627b020ae1735ad659fcdf0e2993e77b3ce2bdbe311095510f632153419d4ac3aa8dd94aa003d65d135a54a278ac7c926b7e370cf19670dc79d2eed3ff0a94a5dc6450201a8f7fc365bd3ecce428051a3e8d9cbca6e522a90403f813c87d02a48f9a65607798d791e9f4403a59d712b37b10f9bb523307cb0d6e02cecf43bedd145353b13afa6ad0247b507d6ca6533ba1cbf986fc0875be20cf11a005bec14bdf0ddccffc89e0ef5e46db4a74051836222da585cba95efe7119be002536c3150848ed0eab4608d46a9b501b7652c19c5f03eddef9348b60b6a9b9acf4c23eb7dfc03fe5dd95d73984b92bb7fdd33d9069a1dd24d6119f9b6f56a44998334533b7748ec9f81cbd86ba3d8067493f9b7b3cd9550b2ab0f4d06bf724f0d22b6a22799a58addbfeec044b56bdbd101af97a599f8dbf3702f6ca915f9a7932bae74f5cc1fc5e5f3294a544296eb2811c0d2282099bce1de0107fc7e1844bfdcc7dcdbe792e59e831d744ab2d46dca576fea9875e1af2922576f298907d915476e7d6514a248f222451ac029014ccf1273bbd9870ab5ecb7e77355ece92757fd5c9e9366cb16cc03e033a46c765ba1a1b8caefef984fa094695a546b5b8aee37430a75e20b7f3a0fd91c71609dae57ab1c00ee3abd89ed0ab617a50069f7f962558c6dd3cb98a164d51707b8a6522a8f61c8b48754f4fb27e25ad82d4e56ca056c78c8ab3c250431e07bdf74a2cf7858994d128ef5b5c899d22bca43ced62910964c43413f3835d1a2e0d61e0c76098f81c1e37fb0b8135756f7da022b8316a2c3e2f2d8b07c6414a55961c3da3a8124395830e9448d93b77980d5374e88d645442709e85147c4178b76a7ca7efaedee447bab07c385f697e83e7a7cd808779ef3aa83760a8bbf669838a4ced33f53dd1095355885615259301ca7ff16314d685cd1722e890c5ee4a41dcf29d9b769e84f00776d3295752e3e7073e3fda2d371cbf1c496359fb93e0d87e9a86f01286f528abb757db0a26a8c99f3619d8aa28398ed462365c13993b7b86f6a0830b25ea61fa92d7c3b6938b0c71408c2b6be06a42fc9924444bd9936d83f45e1e5a71b98ce9b92f388dfaa11d78d6b54b522d499f9c1a15fe06a392728d58f45864b553a6c3c822f2edb7e87be5b61a8cbc23d6b0fbde76e0e9170caff336cbdab604a8bca8d00bb0ded7e0e5c5ecc0863bdc58774df89c5e40f6f8fd524bd4db32cd00d07f49f4913f2d36482361a098c2d94906c154082a135e5683ce3d648a91a2726a9447c41fdfbded3314e9e66765b02420661452e7b648ba3945f3eda3e530e3a85021bdb7aea6feca09be77e898431b51af80a42c128929279334851b80a436c6467a6455ec200ad3700e181744886dcc79f6dce6fd2f7855cc2f4be5c9d164f727440d9527921070da54881602e1eed39767434484f596c65338a54645866c1840f51d1f4e926e38b439ac0d02cea260ea097123d88a8b693381b19ac504ee578247f2b4cfb2040cc293f773ee890d19830081ad083b0859f6701c3c35b33f62f8712dc693673cb932c71c387b0ccb34475b925bf3fdde9edc0f19b70cc57029a03c53f9e8dd18b4a18e39366d3c31c504923d77ee5a5b43a903290130bbf5673ebd608a5f89cdd323f1f596f5bee1a1971f4f8b612912834f528c8e79a945a82ffb5c2b222de1c88cbadc7b0839735447d5363af8265e6947b0ae25c77c8bd6012bb90496900c10cf61b50c9470dedefda6221f4b55a3941f5e420d551592c021024df10c913042d4bd935fbb4f9f7c190fd5d38372d4ed6377efffb486d2f64a6a909a9667dc9e059213d27e62458862a34f18b22e6aedd33b29be93f8f74d1842e57c4a81542b9f4c595bc3fe93c2bab9a3064d0a2d8a0263160399d9ea08ab5bc4384094477a99829b871d9ff53bfb1db6799f26d5c0ad90e676aa3498b5ee76931f55951a5674915a6be555640c43b53b5a9c7b50a50c96e69debc1e2f58d26842b2ed6d540f9c390e624076bf146b49d49a16b39c10aeeccab9a9e7b8972a2d02e62420fd87010d9c86bd12192a0cc599d211b2b331360960e480809f29d3b6676682f6e81cbe74870fe10834c2b0a55cc63ec13db4d34eb46af07da7326c2c602dc3889b87e05c5a7bd7a36f8d573ea033ac7ca7636c26179909ff8ef9ed7c68379813cddabda608743cfd88176ee97a224c08f70d28aae9477b4288b03c6f83c39bd01dbfceb536e4701c47143f429e3abc2d6205aeb32232d27f5ba06c84fcb985d7a08df8b7919e588ac826fefa0482dd65b9ab23ec9e00d8ab83631193c040b0e5f89f95a9de9454c9483be60996caae1fe4ed8252c2070d3ade75436690a0ca18813380409d527f9db66f50fd38c663730ccb11500c599646a6363747a31b1dd256b89272647b766d3c2e405fec32b41e0ece789c7e58ddbfbc1cff4c6427b3ad0cdc24c96034b7acd0e84dbb254d0c3721885f4e9792cf377c10a8b94b45630c037cd43cae10590a87293764d272cefbcd90b0a943e50032366f3329f0d301b8f5730123d69b203f33fc4d412bfa9d7eb848e59ff2704cea5daad2ff32d3331d05ed1889742045593263225e54492dd5121393ef8a884d9c2e67390e63674dc04abdeee4aee73cca40fcadb9bd23d6c4ade80ce8b2da0b77ef6ed008a36af0a74602dc611484353131bd98132ef3376fb32c4231831e13c99adc6a4dce4edfe0c9e9b3281f01e039567a1f73db7153a2c8a764f08a3ae120187c2b9471421adb1ca4f4c9d1d658f9f66801aed1a57869dd3fc709ed17b501bc239782554594597547e42f5ac3af2e83f770b4e63bdcbdfdd63a9ea81c52d6f5b350906e12ba6046cdc15db0d8197e5bd75a7d535208ff2ca2599ef657f80191b1563a4af693bc72de9e4d3000f7196c4324dcfc1285b4fa3b7c6218671bcf6917b2b4b7aef1759b66cd7cafd37871bd1e403fc561a470c1e93bdcf464adfc9b9e8f828c27d1b96d027fee5b623bbd1975a5e9321fd3f523a6d3f67da8d6cbb42e7915e15547a4af6b8e056cefd7839f5e584a3aef63e7a47eadb5a88fc6bdf16e1d2bd6bac3551f81d17915f32a6addda1ef8788a6c41f6789cd55ae1814be9c2ff0c2d61590420b16ef69ed2b5b957176620175ea7c486409192daaa71dc5d07fbd1ef928b710962d9959e31d10d4da22d3e4cf355794707aaa626680e8da3c76e1165a0445de18e26c7e117aa094656a09966c195c72b581dcdb7471ebfb4832f0d9871345fb7bf24ce0a7") r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x10, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 21.463955024s ago: executing program 2 (id=4006): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x1000004, 0x8010, r1, 0x6c0b6000) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040081}, 0x8008001) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x3, {0x2, 0x0, 0x4}, 0xff}, 0x18) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r7}) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x11c, 0x13, 0x2, 0x70bd2a, 0x25dfdbfb, {0x5, 0x7c, 0x40, 0x3, {0x4e21, 0x4e22, [0x10000, 0x3, 0x8001, 0x1], [0x3, 0x18400, 0x400, 0x10001], r8, [0x9, 0xffff]}, 0x3ff, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xce, 0x1, "a0a9b49efccf913e91409199640fa6251955dbbe114cb316823d278df270705e131fa85e3258285895c47987023c037eba1b8d82d013c788e19f93b4772cf54f76d512f9adbf56bc699944b93d2478dd57b5838cc1a8ddf36b7f32678e0c08fdc204e45d2fa41f64c7b3f98453c36a052233e236ec94b82e3099ddd63141d3ac4f70dd0a5424f7dba2084f349758a39268e4f2e52db86669c518da8671a861e2ffdb063485f9ea5042f339444fb0e35eca809493e7ed3cb06ad81a802bfdb9863959f1d3a2d80ec34873"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) r11 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r11, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r13, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r13, 0x2}, 0xc) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) 21.266733705s ago: executing program 4 (id=4007): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr=' \x01\x00', r2}, 0x14) 21.177029952s ago: executing program 3 (id=4008): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 20.464902974s ago: executing program 4 (id=4009): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @empty, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [{0x4, 0x0, '8_'}]}}}}}}, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x0, @private=0xa010100, 0x4e23, 0x1, 'sh\x00', 0x25, 0x7, 0x6c}, 0x2c) getsockopt$MRT(r1, 0x0, 0xd1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 20.28139174s ago: executing program 3 (id=4010): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x400}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0x1}, @generic={0x2e, 0x0, 0x1, 0x2}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.74009665s ago: executing program 2 (id=4011): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x75, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000020000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x40, 0x0}}]}, 0x34}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 14.599598719s ago: executing program 4 (id=4012): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="e5", 0x1}], 0x1000000000000032) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x709d2a, 0x25dfdbfc, 0x9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) 14.528145775s ago: executing program 0 (id=4013): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaadad1e048716e08004500001c030000000011907800002000089078747887715f5a170000d5ae0ffdd88d873f3f189a86f3ab513d811789e5e44d91f4499013f9786b06c127fab39b7215fe76a33b49f6b15411563a2189d21a942fb72f328215b399e2563b0c33f29c7e2a067ee952e4639ff585adda53d27fc7778fc1b5f01c9d392e3111a1464db2338543abd1000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 14.360177989s ago: executing program 1 (id=4014): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000200012800b00feffffffffffffff00001000028004001200080015004b5a0020"], 0x40}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad915d564c90c20037c09fc80000000000", 0x11) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000085cca239be92c32a8a2fba021bf0055e724f11944d4a9d08e90b9979278304a72b4c15b880b3adcfe1cd994d0dc5144cd65d318fed8dba3e645484d404ab9630ec4702638aaedf9e3", @ANYRES16=r6, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r9, &(0x7f0000002b00), 0x28, 0x102, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000004", @ANYRES16=r10, @ANYBLOB="00012abd5000fcdbdf250100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 14.189293391s ago: executing program 3 (id=4015): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911176000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x1000, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000290000000400000037010000050040000401", @ANYRES64=r0], 0x20}, 0x800) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000180)=0x3, 0x4) sendto$l2tp(r1, 0x0, 0x0, 0x30000040, &(0x7f0000000900)={0x2, 0x0, @empty, 0x3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 0s ago: executing program 4 (id=4016): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x8900) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) kernel console output (not intermixed with test programs): 532686][T14865] syzkaller0: entered allmulticast mode [ 358.542268][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3049'. [ 358.553936][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 359.268047][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3056'. [ 360.159763][ T5631] Bluetooth: hci3: command tx timeout [ 360.976924][ T12] IPVS: stop unused estimator thread 0... [ 361.011541][T14648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.059558][T14648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.077618][T14648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.102498][T14648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.128160][T14648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.159687][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 361.169222][T14648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.175720][T14925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3066'. [ 361.193252][T14648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.217317][T14648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.227349][T14927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3066'. [ 361.300920][T14922] bond2: entered promiscuous mode [ 361.306814][T14922] bond2: entered allmulticast mode [ 361.312385][T14922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.362581][T14925] pim6reg: entered allmulticast mode [ 361.476161][T14925] pim6reg: left allmulticast mode [ 361.546281][T14943] FAULT_INJECTION: forcing a failure. [ 361.546281][T14943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.572715][T14648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.599498][T14943] CPU: 1 UID: 0 PID: 14943 Comm: syz.2.3070 Not tainted syzkaller #0 PREEMPT(full) [ 361.599522][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.599540][T14943] Call Trace: [ 361.599548][T14943] [ 361.599556][T14943] dump_stack_lvl+0xe8/0x150 [ 361.599590][T14943] should_fail_ex+0x40c/0x560 [ 361.599617][T14943] _copy_to_user+0x31/0xb0 [ 361.599647][T14943] simple_read_from_buffer+0xe1/0x170 [ 361.599677][T14943] proc_fail_nth_read+0x1bb/0x230 [ 361.599724][T14943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.599752][T14943] ? rw_verify_area+0x24a/0x4c0 [ 361.599784][T14943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 361.599808][T14943] vfs_read+0x213/0xa80 [ 361.599841][T14943] ? __pfx___mutex_lock+0x10/0x10 [ 361.599866][T14943] ? __pfx_vfs_read+0x10/0x10 [ 361.599894][T14943] ? __fget_files+0x2a/0x420 [ 361.599922][T14943] ? __fget_files+0x3a2/0x420 [ 361.599944][T14943] ? __fget_files+0x2a/0x420 [ 361.599977][T14943] ksys_read+0x150/0x270 [ 361.600006][T14943] ? __pfx_ksys_read+0x10/0x10 [ 361.600042][T14943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.600063][T14943] do_syscall_64+0x174/0x580 [ 361.600087][T14943] ? trace_irq_disable+0x3b/0x140 [ 361.600111][T14943] ? clear_bhb_loop+0x40/0x90 [ 361.600134][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.600153][T14943] RIP: 0033:0x7f480c15e68e [ 361.600171][T14943] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.600187][T14943] RSP: 002b:00007f480d03dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 361.600207][T14943] RAX: ffffffffffffffda RBX: 00007f480d03e6c0 RCX: 00007f480c15e68e [ 361.600221][T14943] RDX: 000000000000000f RSI: 00007f480d03e0a0 RDI: 0000000000000005 [ 361.600233][T14943] RBP: 00007f480d03e090 R08: 0000000000000000 R09: 0000000000000000 [ 361.600244][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.600255][T14943] R13: 00007f480c426128 R14: 00007f480c426090 R15: 00007ffe28381068 [ 361.600287][T14943] [ 361.901158][T14648] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.913340][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.920511][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.937696][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.944861][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.079818][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 362.116773][T14958] FAULT_INJECTION: forcing a failure. [ 362.116773][T14958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.145128][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.0.3076 Not tainted syzkaller #0 PREEMPT(full) [ 362.145154][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.145164][T14958] Call Trace: [ 362.145172][T14958] [ 362.145180][T14958] dump_stack_lvl+0xe8/0x150 [ 362.145216][T14958] should_fail_ex+0x40c/0x560 [ 362.145241][T14958] _copy_from_user+0x2d/0xb0 [ 362.145269][T14958] ___sys_recvmsg+0x173/0x5a0 [ 362.145302][T14958] ? __pfx____sys_recvmsg+0x10/0x10 [ 362.145334][T14958] ? __fget_files+0x2a/0x420 [ 362.145388][T14958] do_recvmmsg+0x31a/0x7f0 [ 362.145431][T14958] ? __pfx_do_recvmmsg+0x10/0x10 [ 362.145470][T14958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.145497][T14958] ? __fget_files+0x3a2/0x420 [ 362.145528][T14958] __x64_sys_recvmmsg+0x198/0x250 [ 362.145558][T14958] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 362.145606][T14958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.145626][T14958] do_syscall_64+0x174/0x580 [ 362.145654][T14958] ? trace_irq_disable+0x3b/0x140 [ 362.145676][T14958] ? clear_bhb_loop+0x40/0x90 [ 362.145700][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.145717][T14958] RIP: 0033:0x7f407e39de59 [ 362.145734][T14958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.145750][T14958] RSP: 002b:00007f407f1f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 362.145769][T14958] RAX: ffffffffffffffda RBX: 00007f407e625fa0 RCX: 00007f407e39de59 [ 362.145782][T14958] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 362.145794][T14958] RBP: 00007f407f1f4090 R08: 0000000000000000 R09: 0000000000000000 [ 362.145806][T14958] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 362.145816][T14958] R13: 00007f407e626038 R14: 00007f407e625fa0 R15: 00007ffcf0498b88 [ 362.145846][T14958] [ 362.151472][T14949] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.167991][T14648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.503198][T14971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3080'. [ 362.528324][T14971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3080'. [ 362.563844][T14971] pim6reg: entered allmulticast mode [ 362.641964][T14974] netlink: 'syz.4.3081': attribute type 8 has an invalid length. [ 362.657608][T14971] pim6reg: left allmulticast mode [ 362.658997][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 362.717516][T14974] bond0: entered promiscuous mode [ 362.723379][T14974] bond_slave_0: entered promiscuous mode [ 362.757651][T14974] bond_slave_1: entered promiscuous mode [ 362.791556][T14974] bond0: left promiscuous mode [ 362.797153][T14974] bond_slave_0: left promiscuous mode [ 362.801521][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 362.811325][T14974] bond_slave_1: left promiscuous mode [ 362.848801][T14977] netlink: 'syz.2.3082': attribute type 2 has an invalid length. [ 363.052385][T14988] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3086'. [ 363.480976][T14648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.518308][T15012] pim6reg: entered allmulticast mode [ 363.537814][T15012] pim6reg: left allmulticast mode [ 363.660846][T15022] netlink: 'syz.3.3096': attribute type 1 has an invalid length. [ 363.739910][T15022] bond3: entered promiscuous mode [ 363.761141][T15022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.772765][T14648] veth0_vlan: entered promiscuous mode [ 363.816053][T15028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.826540][T15028] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 363.838129][T15028] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 363.851032][T15028] bond3: (slave ip6gre1): making interface the new active one [ 363.861411][T15028] ip6gre1: entered promiscuous mode [ 363.865241][T15036] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 363.878373][T15028] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 363.878539][T15018] netlink: 'syz.4.3095': attribute type 2 has an invalid length. [ 363.905113][T14648] veth1_vlan: entered promiscuous mode [ 363.974252][T14648] veth0_macvtap: entered promiscuous mode [ 364.010599][T14648] veth1_macvtap: entered promiscuous mode [ 364.039201][T14648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.187922][T14648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.762343][T15049] __nla_validate_parse: 2 callbacks suppressed [ 364.762362][T15049] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3106'. [ 364.944568][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.007711][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.058918][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.101941][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.178277][T15054] pim6reg: entered allmulticast mode [ 365.373894][T15065] netlink: 'syz.2.3111': attribute type 8 has an invalid length. [ 365.410523][T15054] pim6reg: left allmulticast mode [ 365.435518][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'. [ 365.547057][T15065] bond0: entered promiscuous mode [ 365.555126][T15065] bond_slave_0: entered promiscuous mode [ 365.561073][T15065] bond_slave_1: entered promiscuous mode [ 365.579368][T15065] bond0: left promiscuous mode [ 365.604775][T15065] bond_slave_0: left promiscuous mode [ 365.606870][T15070] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3113'. [ 365.714793][T15065] bond_slave_1: left promiscuous mode [ 365.793030][T15068] tipc: Started in network mode [ 365.815670][T15068] tipc: Node identity ac1414aa, cluster identity 4711 [ 365.855189][T15068] tipc: Enabled bearer , priority 10 [ 366.021707][T15082] netlink: 'syz.2.3117': attribute type 1 has an invalid length. [ 366.037076][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 366.443440][ T6967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.494694][ T6967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.713392][ T6966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.763947][ T6966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.964681][ T5720] tipc: Node number set to 2886997162 [ 367.156100][T15104] pim6reg: entered allmulticast mode [ 367.236953][T15104] pim6reg: left allmulticast mode [ 367.568675][T15120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3126'. [ 367.710004][T15126] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3126'. [ 368.380313][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.420977][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.451204][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.495399][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.505429][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.733426][T15138] bond7: (slave syz_tun): Releasing backup interface [ 369.342209][T15153] FAULT_INJECTION: forcing a failure. [ 369.342209][T15153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 369.367543][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.4.3133 Not tainted syzkaller #0 PREEMPT(full) [ 369.367573][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.367584][T15153] Call Trace: [ 369.367592][T15153] [ 369.367600][T15153] dump_stack_lvl+0xe8/0x150 [ 369.367634][T15153] should_fail_ex+0x40c/0x560 [ 369.367663][T15153] prepare_alloc_pages+0x230/0x650 [ 369.367697][T15153] __alloc_frozen_pages_noprof+0x12f/0x380 [ 369.367727][T15153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 369.367756][T15153] ? __pfx_policy_nodemask+0x10/0x10 [ 369.367787][T15153] ? __kmalloc_noprof+0x396/0x720 [ 369.367822][T15153] alloc_pages_mpol+0x212/0x380 [ 369.367855][T15153] alloc_pages_noprof+0xac/0x2a0 [ 369.367884][T15153] af_alg_sendmsg+0x13b1/0x2250 [ 369.368057][T15153] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 369.368076][T15153] ? __might_fault+0xaf/0x130 [ 369.368096][T15153] ? __pfx_aa_sk_perm+0x10/0x10 [ 369.368171][T15153] ? aa_sock_msg_perm+0xf1/0x1b0 [ 369.368191][T15153] ? aead_sendmsg+0x26/0xf0 [ 369.368217][T15153] ? __pfx_aead_sendmsg+0x10/0x10 [ 369.368240][T15153] sock_sendmsg_nosec+0x13a/0x180 [ 369.368267][T15153] __sys_sendto+0x408/0x5a0 [ 369.368297][T15153] ? __pfx___sys_sendto+0x10/0x10 [ 369.368349][T15153] ? do_user_addr_fault+0xc4a/0x1340 [ 369.368382][T15153] __x64_sys_sendto+0xde/0x100 [ 369.368407][T15153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.368428][T15153] do_syscall_64+0x174/0x580 [ 369.368455][T15153] ? trace_irq_disable+0x3b/0x140 [ 369.368479][T15153] ? clear_bhb_loop+0x40/0x90 [ 369.368503][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.368521][T15153] RIP: 0033:0x7f8f2fd5e68e [ 369.368539][T15153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.368556][T15153] RSP: 002b:00007f8f30c04e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 369.368576][T15153] RAX: ffffffffffffffda RBX: 00007f8f30c066c0 RCX: 00007f8f2fd5e68e [ 369.368589][T15153] RDX: 0000000000000020 RSI: 00007f8f30c05000 RDI: 0000000000000004 [ 369.368601][T15153] RBP: 0000000000000000 R08: 00007f8f30c04f04 R09: 000000000000000c [ 369.368613][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 369.368624][T15153] R13: 00007f8f30c04f58 R14: 00007f8f30c05000 R15: 0000000000000000 [ 369.368654][T15153] [ 369.665233][T15155] FAULT_INJECTION: forcing a failure. [ 369.665233][T15155] name failslab, interval 1, probability 0, space 0, times 0 [ 369.678888][T15155] CPU: 1 UID: 0 PID: 15155 Comm: syz.4.3134 Not tainted syzkaller #0 PREEMPT(full) [ 369.678914][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.678924][T15155] Call Trace: [ 369.678932][T15155] [ 369.678940][T15155] dump_stack_lvl+0xe8/0x150 [ 369.678973][T15155] should_fail_ex+0x40c/0x560 [ 369.679000][T15155] should_failslab+0xa8/0x100 [ 369.679028][T15155] __kmalloc_noprof+0xfe/0x720 [ 369.679052][T15155] ? sk_prot_alloc+0xe7/0x210 [ 369.679076][T15155] ? sk_prot_alloc+0xe7/0x210 [ 369.679107][T15155] sk_prot_alloc+0xe7/0x210 [ 369.679129][T15155] ? sk_alloc+0x27/0x390 [ 369.679156][T15155] sk_alloc+0x3a/0x390 [ 369.679185][T15155] bpf_prog_test_run_skb+0x3a6/0x2230 [ 369.679233][T15155] ? __fget_files+0x3a2/0x420 [ 369.679256][T15155] ? __fget_files+0x2a/0x420 [ 369.679284][T15155] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 369.679321][T15155] bpf_prog_test_run+0x2c5/0x340 [ 369.679351][T15155] __sys_bpf+0xa22/0xd90 [ 369.679382][T15155] ? __pfx___sys_bpf+0x10/0x10 [ 369.679416][T15155] ? __fget_files+0x2a/0x420 [ 369.679455][T15155] ? ksys_write+0x242/0x270 [ 369.679485][T15155] ? __pfx_ksys_write+0x10/0x10 [ 369.679516][T15155] __x64_sys_bpf+0xba/0xd0 [ 369.679538][T15155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.679565][T15155] do_syscall_64+0x174/0x580 [ 369.679590][T15155] ? trace_irq_disable+0x3b/0x140 [ 369.679613][T15155] ? clear_bhb_loop+0x40/0x90 [ 369.679636][T15155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.679655][T15155] RIP: 0033:0x7f8f2fd9de59 [ 369.679672][T15155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.679689][T15155] RSP: 002b:00007f8f30c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.679709][T15155] RAX: ffffffffffffffda RBX: 00007f8f30025fa0 RCX: 00007f8f2fd9de59 [ 369.679723][T15155] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 369.679734][T15155] RBP: 00007f8f30c06090 R08: 0000000000000000 R09: 0000000000000000 [ 369.679746][T15155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.679757][T15155] R13: 00007f8f30026038 R14: 00007f8f30025fa0 R15: 00007ffe090a59d8 [ 369.679787][T15155] [ 369.764479][ C0] sched: DL replenish lagged too much [ 370.404834][T15112] netlink: 'syz.3.3125': attribute type 11 has an invalid length. [ 370.414730][T15112] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3125'. [ 370.554566][ T5631] Bluetooth: hci0: command tx timeout [ 371.073916][ T5632] bond9: (slave syz_tun): Releasing backup interface [ 371.109155][T15181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.117876][T15181] IPv6: NLM_F_CREATE should be set when creating new route [ 371.125372][T15181] IPv6: NLM_F_CREATE should be set when creating new route [ 371.208275][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 371.219141][T15131] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.238087][T15131] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.248326][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3142'. [ 371.280661][T15131] bridge_slave_0: entered allmulticast mode [ 371.288755][T15181] xt_nat: multiple ranges no longer supported [ 371.299569][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3142'. [ 371.315906][T15131] bridge_slave_0: entered promiscuous mode [ 371.330417][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3142'. [ 371.421369][T15131] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.448938][T15131] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.487905][T15131] bridge_slave_1: entered allmulticast mode [ 371.536733][T15131] bridge_slave_1: entered promiscuous mode [ 371.593752][ T32] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.709882][ T32] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.752311][ T32] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.794147][T15190] sch_fq: defrate 8 ignored. [ 371.885730][ T32] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.942002][T15131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.044335][T15131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.279492][T15201] netlink: 'syz.4.3148': attribute type 2 has an invalid length. [ 372.317371][T15131] team0: Port device team_slave_0 added [ 372.634596][ T5631] Bluetooth: hci0: command tx timeout [ 372.653378][T15131] team0: Port device team_slave_1 added [ 372.705475][T15213] pim6reg: entered allmulticast mode [ 372.823068][T15210] pim6reg: left allmulticast mode [ 372.863741][T15131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.871033][T15131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.953433][T15131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.042586][T15131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.092488][T15131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.131029][T15218] netlink: 'syz.2.3152': attribute type 1 has an invalid length. [ 373.189032][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 373.249461][T15131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.433446][T15220] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 373.641530][T15235] sit0: entered promiscuous mode [ 373.682696][T15235] netlink: 'syz.4.3157': attribute type 1 has an invalid length. [ 373.727877][T15235] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3157'. [ 373.789061][T15131] hsr_slave_0: entered promiscuous mode [ 373.813628][T15131] hsr_slave_1: entered promiscuous mode [ 373.839591][T15131] debugfs: 'hsr0' already exists in 'hsr' [ 373.852319][T15131] Cannot create hsr debugfs directory [ 373.871050][T15233] 8021q: VLANs not supported on sit0 [ 374.347068][T15242] syzkaller0: entered promiscuous mode [ 374.378936][T15242] syzkaller0: entered allmulticast mode [ 374.715469][ T5631] Bluetooth: hci0: command tx timeout [ 374.784360][T15257] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 375.158068][T15261] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.3163'. [ 375.181199][T15131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.207572][T15261] netlink: 'syz.2.3163': attribute type 2 has an invalid length. [ 375.237411][T15131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.889256][T15131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.968833][T15131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.493957][T15131] team0: Port device netdevsim1 removed [ 376.531873][T15131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.598259][T15131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.795434][ T5631] Bluetooth: hci0: command tx timeout [ 376.818439][T15291] FAULT_INJECTION: forcing a failure. [ 376.818439][T15291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.909930][T15291] CPU: 1 UID: 0 PID: 15291 Comm: syz.2.3169 Not tainted syzkaller #0 PREEMPT(full) [ 376.909957][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.909968][T15291] Call Trace: [ 376.909975][T15291] [ 376.909983][T15291] dump_stack_lvl+0xe8/0x150 [ 376.910016][T15291] should_fail_ex+0x40c/0x560 [ 376.910044][T15291] _copy_from_iter+0x1d3/0x1660 [ 376.910068][T15291] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.910098][T15291] ? __pfx_policy_nodemask+0x10/0x10 [ 376.910129][T15291] ? __pfx__copy_from_iter+0x10/0x10 [ 376.910155][T15291] ? alloc_pages_mpol+0x24a/0x380 [ 376.910192][T15291] af_alg_sendmsg+0x14c3/0x2250 [ 376.910244][T15291] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 376.910266][T15291] ? __might_fault+0xaf/0x130 [ 376.910286][T15291] ? __pfx_aa_sk_perm+0x10/0x10 [ 376.910317][T15291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 376.910337][T15291] ? aead_sendmsg+0x26/0xf0 [ 376.910362][T15291] ? __pfx_aead_sendmsg+0x10/0x10 [ 376.910386][T15291] sock_sendmsg_nosec+0x13a/0x180 [ 376.910412][T15291] __sys_sendto+0x408/0x5a0 [ 376.910442][T15291] ? __pfx___sys_sendto+0x10/0x10 [ 376.910495][T15291] ? do_user_addr_fault+0xc4a/0x1340 [ 376.910527][T15291] __x64_sys_sendto+0xde/0x100 [ 376.910553][T15291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.910574][T15291] do_syscall_64+0x174/0x580 [ 376.910598][T15291] ? trace_irq_disable+0x3b/0x140 [ 376.910621][T15291] ? clear_bhb_loop+0x40/0x90 [ 376.910645][T15291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.910663][T15291] RIP: 0033:0x7f480c15e68e [ 376.910680][T15291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.910696][T15291] RSP: 002b:00007f480d05de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 376.910716][T15291] RAX: ffffffffffffffda RBX: 00007f480d05f6c0 RCX: 00007f480c15e68e [ 376.910730][T15291] RDX: 0000000000000020 RSI: 00007f480d05e000 RDI: 0000000000000004 [ 376.910741][T15291] RBP: 0000000000000000 R08: 00007f480d05df04 R09: 000000000000000c [ 376.910753][T15291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 376.910764][T15291] R13: 00007f480d05df58 R14: 00007f480d05e000 R15: 0000000000000000 [ 376.910794][T15291] [ 377.294296][T15131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.308821][T15131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.332431][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 377.341771][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 377.440888][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 377.740423][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3174'. [ 377.903654][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3174'. [ 377.931133][T15307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3175'. [ 377.961868][T15308] netlink: 'syz.4.3174': attribute type 3 has an invalid length. [ 378.228118][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3177'. [ 378.346621][T15131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 378.406993][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3178'. [ 378.420113][T15131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.484268][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.560966][T15322] FAULT_INJECTION: forcing a failure. [ 378.560966][T15322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.665295][T15319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 378.688962][T15322] CPU: 1 UID: 0 PID: 15322 Comm: syz.2.3178 Not tainted syzkaller #0 PREEMPT(full) [ 378.688987][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.688998][T15322] Call Trace: [ 378.689006][T15322] [ 378.689014][T15322] dump_stack_lvl+0xe8/0x150 [ 378.689047][T15322] should_fail_ex+0x40c/0x560 [ 378.689073][T15322] _copy_from_iter+0x1d3/0x1660 [ 378.689096][T15322] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 378.689120][T15322] ? rcu_is_watching+0x15/0xb0 [ 378.689188][T15322] ? trace_kmem_cache_alloc+0x29/0xe0 [ 378.689212][T15322] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 378.689234][T15322] ? __pfx__copy_from_iter+0x10/0x10 [ 378.689257][T15322] ? __alloc_skb+0x276/0x7a0 [ 378.689336][T15322] ? __alloc_skb+0x276/0x7a0 [ 378.689364][T15322] ? netlink_sendmsg+0x650/0xb40 [ 378.689422][T15322] ? skb_put+0x112/0x210 [ 378.689448][T15322] netlink_sendmsg+0x6c0/0xb40 [ 378.689485][T15322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.689516][T15322] ? aa_sock_msg_perm+0xf1/0x1b0 [ 378.689541][T15322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.689566][T15322] sock_sendmsg_nosec+0x13a/0x180 [ 378.689591][T15322] ____sys_sendmsg+0x54e/0x850 [ 378.689632][T15322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.689668][T15322] ? import_iovec+0x73/0xa0 [ 378.689697][T15322] ___sys_sendmsg+0x2a5/0x360 [ 378.689722][T15322] ? __lock_acquire+0x683/0x2cf0 [ 378.689759][T15322] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.689819][T15322] ? __fget_files+0x2a/0x420 [ 378.689843][T15322] ? __fget_files+0x3a2/0x420 [ 378.689876][T15322] __x64_sys_sendmsg+0x1b1/0x290 [ 378.689906][T15322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.689950][T15322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.689971][T15322] do_syscall_64+0x174/0x580 [ 378.689995][T15322] ? trace_irq_disable+0x3b/0x140 [ 378.690018][T15322] ? clear_bhb_loop+0x40/0x90 [ 378.690041][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.690060][T15322] RIP: 0033:0x7f480c19de59 [ 378.690078][T15322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.690093][T15322] RSP: 002b:00007f480d01d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.690114][T15322] RAX: ffffffffffffffda RBX: 00007f480c426180 RCX: 00007f480c19de59 [ 378.690127][T15322] RDX: 0000000000004000 RSI: 0000200000000840 RDI: 0000000000000003 [ 378.690138][T15322] RBP: 00007f480d01d090 R08: 0000000000000000 R09: 0000000000000000 [ 378.690150][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.690161][T15322] R13: 00007f480c426218 R14: 00007f480c426180 R15: 00007ffe28381068 [ 378.690191][T15322] [ 378.959045][T15131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.281666][T15131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.290278][T15131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.302090][T15131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.333554][T15320] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 379.347607][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 379.379166][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 379.429706][T15330] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 379.534069][T15131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.560237][T15131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.886892][T15344] netlink: 'syz.2.3183': attribute type 2 has an invalid length. [ 380.277386][ T32] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.334162][T15357] syzkaller0: entered promiscuous mode [ 380.363987][T15357] syzkaller0: entered allmulticast mode [ 380.415935][ T32] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.460538][ T32] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.533628][T15131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.672112][ T32] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.773370][T15131] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.833278][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.840490][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.940961][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.948170][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.521497][T15392] FAULT_INJECTION: forcing a failure. [ 381.521497][T15392] name failslab, interval 1, probability 0, space 0, times 0 [ 381.549773][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.1.3196 Not tainted syzkaller #0 PREEMPT(full) [ 381.549801][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.549812][T15392] Call Trace: [ 381.549823][T15392] [ 381.549831][T15392] dump_stack_lvl+0xe8/0x150 [ 381.549864][T15392] should_fail_ex+0x40c/0x560 [ 381.549890][T15392] should_failslab+0xa8/0x100 [ 381.549918][T15392] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 381.549941][T15392] ? skb_clone+0x212/0x3a0 [ 381.549967][T15392] ? skb_clone+0x212/0x3a0 [ 381.550000][T15392] skb_clone+0x212/0x3a0 [ 381.550030][T15392] __netlink_deliver_tap+0x413/0x860 [ 381.550071][T15392] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.550099][T15392] netlink_deliver_tap+0x19c/0x1b0 [ 381.550128][T15392] netlink_unicast+0x77f/0x940 [ 381.550163][T15392] netlink_sendmsg+0x813/0xb40 [ 381.550201][T15392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.550233][T15392] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.550257][T15392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.550283][T15392] sock_sendmsg_nosec+0x13a/0x180 [ 381.550319][T15392] ____sys_sendmsg+0x54e/0x850 [ 381.550352][T15392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.550388][T15392] ? import_iovec+0x73/0xa0 [ 381.550426][T15392] ___sys_sendmsg+0x2a5/0x360 [ 381.550451][T15392] ? __lock_acquire+0x683/0x2cf0 [ 381.550480][T15392] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.550542][T15392] ? __fget_files+0x2a/0x420 [ 381.550565][T15392] ? __fget_files+0x3a2/0x420 [ 381.550599][T15392] __x64_sys_sendmsg+0x1b1/0x290 [ 381.550628][T15392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.550674][T15392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.550694][T15392] do_syscall_64+0x174/0x580 [ 381.550719][T15392] ? trace_irq_disable+0x3b/0x140 [ 381.550742][T15392] ? clear_bhb_loop+0x40/0x90 [ 381.550765][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.550783][T15392] RIP: 0033:0x7f63f9d9de59 [ 381.550801][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.550818][T15392] RSP: 002b:00007f63fad23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.550838][T15392] RAX: ffffffffffffffda RBX: 00007f63fa025fa0 RCX: 00007f63f9d9de59 [ 381.550851][T15392] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 381.550863][T15392] RBP: 00007f63fad23090 R08: 0000000000000000 R09: 0000000000000000 [ 381.550874][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.550885][T15392] R13: 00007f63fa026038 R14: 00007f63fa025fa0 R15: 00007ffc96d4c8a8 [ 381.550915][T15392] [ 382.053750][T15376] pim6reg: entered allmulticast mode [ 382.064024][T15387] pim6reg: left allmulticast mode [ 382.097583][T15392] tipc: Started in network mode [ 382.103461][T15392] tipc: Node identity ac14140f, cluster identity 4711 [ 382.111122][T15392] tipc: New replicast peer: 255.255.255.255 [ 382.118057][T15392] tipc: Enabled bearer , priority 10 [ 382.147026][T15398] FAULT_INJECTION: forcing a failure. [ 382.147026][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 382.174979][T15398] CPU: 1 UID: 0 PID: 15398 Comm: syz.4.3198 Not tainted syzkaller #0 PREEMPT(full) [ 382.175006][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.175017][T15398] Call Trace: [ 382.175024][T15398] [ 382.175032][T15398] dump_stack_lvl+0xe8/0x150 [ 382.175066][T15398] should_fail_ex+0x40c/0x560 [ 382.175092][T15398] should_failslab+0xa8/0x100 [ 382.175121][T15398] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 382.175142][T15398] ? local_lock_release+0x9c/0x160 [ 382.175169][T15398] ? __alloc_skb+0x1d7/0x7a0 [ 382.175190][T15398] ? __alloc_skb+0x1d7/0x7a0 [ 382.175219][T15398] __alloc_skb+0x1d7/0x7a0 [ 382.175247][T15398] netlink_ack+0x136/0xb30 [ 382.175273][T15398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.175296][T15398] ? wakeup_preempt_fair+0xc7/0xb10 [ 382.175376][T15398] netlink_rcv_skb+0x2a4/0x4a0 [ 382.175404][T15398] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.175427][T15398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.175469][T15398] ? down_read+0x2be/0x330 [ 382.175495][T15398] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.175577][T15398] genl_rcv+0x28/0x40 [ 382.175597][T15398] netlink_unicast+0x7bb/0x940 [ 382.175633][T15398] netlink_sendmsg+0x813/0xb40 [ 382.175670][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.175702][T15398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 382.175727][T15398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.175754][T15398] sock_sendmsg_nosec+0x13a/0x180 [ 382.175778][T15398] ____sys_sendmsg+0x54e/0x850 [ 382.175811][T15398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.175847][T15398] ? import_iovec+0x73/0xa0 [ 382.175877][T15398] ___sys_sendmsg+0x2a5/0x360 [ 382.175902][T15398] ? __lock_acquire+0x683/0x2cf0 [ 382.175931][T15398] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.175994][T15398] ? __fget_files+0x2a/0x420 [ 382.176019][T15398] ? __fget_files+0x3a2/0x420 [ 382.176053][T15398] __x64_sys_sendmsg+0x1b1/0x290 [ 382.176083][T15398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.176128][T15398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.176148][T15398] do_syscall_64+0x174/0x580 [ 382.176172][T15398] ? trace_irq_disable+0x3b/0x140 [ 382.176195][T15398] ? clear_bhb_loop+0x40/0x90 [ 382.176218][T15398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.176237][T15398] RIP: 0033:0x7f8f2fd9de59 [ 382.176256][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.176271][T15398] RSP: 002b:00007f8f30be5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.176292][T15398] RAX: ffffffffffffffda RBX: 00007f8f30026090 RCX: 00007f8f2fd9de59 [ 382.176305][T15398] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000f [ 382.176317][T15398] RBP: 00007f8f30be5090 R08: 0000000000000000 R09: 0000000000000000 [ 382.176335][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.176347][T15398] R13: 00007f8f30026128 R14: 00007f8f30026090 R15: 00007ffe090a59d8 [ 382.176378][T15398] [ 383.165806][ T5720] tipc: Node number set to 2886997007 [ 383.403665][T15432] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 383.444781][T15432] __nla_validate_parse: 5 callbacks suppressed [ 383.444799][T15432] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3208'. [ 383.484138][T15432] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3208'. [ 383.538038][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3208'. [ 383.737441][T15436] netlink: 'syz.3.3209': attribute type 2 has an invalid length. [ 384.011691][T15448] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 384.334395][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3211'. [ 384.576901][T15461] sit0: left promiscuous mode [ 384.686617][T15131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.845942][T15131] veth0_vlan: entered promiscuous mode [ 384.880850][T15131] veth1_vlan: entered promiscuous mode [ 385.191959][T15468] FAULT_INJECTION: forcing a failure. [ 385.191959][T15468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.212381][T15468] CPU: 1 UID: 0 PID: 15468 Comm: syz.2.3214 Not tainted syzkaller #0 PREEMPT(full) [ 385.212406][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.212416][T15468] Call Trace: [ 385.212423][T15468] [ 385.212430][T15468] dump_stack_lvl+0xe8/0x150 [ 385.212463][T15468] should_fail_ex+0x40c/0x560 [ 385.212489][T15468] _copy_from_user+0x2d/0xb0 [ 385.212515][T15468] ___sys_sendmsg+0x1c6/0x360 [ 385.212541][T15468] ? __lock_acquire+0x683/0x2cf0 [ 385.212570][T15468] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.212627][T15468] ? __fget_files+0x2a/0x420 [ 385.212651][T15468] ? __fget_files+0x3a2/0x420 [ 385.212684][T15468] __x64_sys_sendmsg+0x1b1/0x290 [ 385.212713][T15468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.212757][T15468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.212778][T15468] do_syscall_64+0x174/0x580 [ 385.212802][T15468] ? trace_irq_disable+0x3b/0x140 [ 385.212825][T15468] ? clear_bhb_loop+0x40/0x90 [ 385.212848][T15468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.212867][T15468] RIP: 0033:0x7f480c19de59 [ 385.212884][T15468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.212900][T15468] RSP: 002b:00007f480d05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.212920][T15468] RAX: ffffffffffffffda RBX: 00007f480c425fa0 RCX: 00007f480c19de59 [ 385.212934][T15468] RDX: 0000000024024080 RSI: 0000200000000040 RDI: 0000000000000003 [ 385.212946][T15468] RBP: 00007f480d05f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.212958][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.212968][T15468] R13: 00007f480c426038 R14: 00007f480c425fa0 R15: 00007ffe28381068 [ 385.212998][T15468] [ 385.992785][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 386.076746][T15489] netlink: 'syz.4.3218': attribute type 10 has an invalid length. [ 386.112290][T15494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3218'. [ 386.128810][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 386.148179][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 386.190679][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 387.090559][T15508] pim6reg: entered allmulticast mode [ 387.137591][T15131] veth0_macvtap: entered promiscuous mode [ 387.149454][T15508] pim6reg: left allmulticast mode [ 387.282283][T15131] veth1_macvtap: entered promiscuous mode [ 387.381976][T15511] tun0: tun_chr_ioctl cmd 1074025680 [ 387.448629][T15511] tun0: tun_chr_ioctl cmd 2150657669 [ 387.471145][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'. [ 387.629357][T15131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.690885][T15131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.730916][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.863503][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.910441][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.967359][T15533] FAULT_INJECTION: forcing a failure. [ 387.967359][T15533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.007134][T15533] CPU: 0 UID: 0 PID: 15533 Comm: syz.3.3232 Not tainted syzkaller #0 PREEMPT(full) [ 388.007160][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.007171][T15533] Call Trace: [ 388.007178][T15533] [ 388.007186][T15533] dump_stack_lvl+0xe8/0x150 [ 388.007220][T15533] should_fail_ex+0x40c/0x560 [ 388.007246][T15533] prepare_alloc_pages+0x230/0x650 [ 388.007280][T15533] __alloc_frozen_pages_noprof+0x12f/0x380 [ 388.007307][T15533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.007334][T15533] ? __pfx_policy_nodemask+0x10/0x10 [ 388.007368][T15533] alloc_pages_mpol+0x212/0x380 [ 388.007400][T15533] folio_alloc_mpol_noprof+0x39/0x160 [ 388.007428][T15533] vma_alloc_folio_noprof+0xe1/0x1e0 [ 388.007456][T15533] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 388.007491][T15533] do_wp_page+0x1163/0x4c70 [ 388.007528][T15533] ? __pfx_do_wp_page+0x10/0x10 [ 388.007543][T15533] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.007567][T15533] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.007596][T15533] handle_mm_fault+0x1490/0x3080 [ 388.007625][T15533] ? handle_mm_fault+0xec/0x3080 [ 388.007651][T15533] ? __pfx_handle_mm_fault+0x10/0x10 [ 388.007668][T15533] ? lock_vma_under_rcu+0x45a/0x500 [ 388.007715][T15533] do_user_addr_fault+0xa4d/0x1340 [ 388.007753][T15533] ? trace_page_fault_user+0x84/0x1e0 [ 388.007782][T15533] exc_page_fault+0x6a/0xc0 [ 388.007808][T15533] asm_exc_page_fault+0x26/0x30 [ 388.007827][T15533] RIP: 0033:0x7f27e735dc45 [ 388.007844][T15533] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 388.007860][T15533] RSP: 002b:00007f27e820bde0 EFLAGS: 00010293 [ 388.007877][T15533] RAX: 0000000000000008 RBX: 00007f27e8157e20 RCX: 0000000000000000 [ 388.007890][T15533] RDX: 0000000000000000 RSI: 00007f27e74514dc RDI: 00007f27e8157e20 [ 388.007902][T15533] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 388.007914][T15533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27e74511f4 [ 388.007927][T15533] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f27e74514dc [ 388.007965][T15533] [ 388.007979][T15533] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 388.430947][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.458903][T15542] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 388.819154][ T6967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.865164][ T6967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.976027][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.024614][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.348899][T15558] tipc: Enabling of bearer rejected, already enabled [ 390.437621][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.448387][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.459831][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.482034][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.500080][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.715978][T15587] bridge0: port 3(batadv1) entered blocking state [ 390.764108][T15587] bridge0: port 3(batadv1) entered disabled state [ 390.824704][T15587] batadv1: entered allmulticast mode [ 390.870853][T15587] batadv1: entered promiscuous mode [ 390.994634][T15588] tipc: New replicast peer: 255.255.255.255 [ 391.042620][T15588] tipc: Enabled bearer , priority 10 [ 391.165540][ T6962] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 391.175620][ T6962] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 391.482912][ T5617] bond10: (slave syz_tun): Releasing backup interface [ 391.777293][T15599] syzkaller0: entered promiscuous mode [ 391.814266][T15599] syzkaller0: entered allmulticast mode [ 391.947688][T15610] netlink: 'syz.3.3254': attribute type 8 has an invalid length. [ 391.970235][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'. [ 392.011900][T15610] bond0: entered promiscuous mode [ 392.034837][T15610] bond_slave_0: entered promiscuous mode [ 392.051263][T15610] bond_slave_1: entered promiscuous mode [ 392.076447][T15610] gretap0: entered promiscuous mode [ 392.100806][T15610] bond0: left promiscuous mode [ 392.108278][T15610] bond_slave_0: left promiscuous mode [ 392.113954][T15610] bond_slave_1: left promiscuous mode [ 392.121428][T15610] gretap0: left promiscuous mode [ 392.556204][ T5631] Bluetooth: hci4: command tx timeout [ 392.732709][T15636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3261'. [ 393.053057][T15582] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.078953][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.100677][T15582] bridge_slave_0: entered allmulticast mode [ 393.123577][T15582] bridge_slave_0: entered promiscuous mode [ 393.138493][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.157635][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.174638][T15582] bridge_slave_1: entered allmulticast mode [ 393.202882][T15582] bridge_slave_1: entered promiscuous mode [ 393.293623][T15582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.327493][T15582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.373431][T15582] team0: Port device team_slave_0 added [ 393.382080][T15582] team0: Port device team_slave_1 added [ 393.424202][T15582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.438573][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.469223][T15582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.482439][T15582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.489612][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.523807][T15582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.564830][T15661] Bluetooth: MGMT ver 1.23 [ 393.623078][T15582] hsr_slave_0: entered promiscuous mode [ 393.629809][T15582] hsr_slave_1: entered promiscuous mode [ 393.642625][T15582] debugfs: 'hsr0' already exists in 'hsr' [ 393.648827][T15582] Cannot create hsr debugfs directory [ 394.087132][T15582] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.263141][T15677] FAULT_INJECTION: forcing a failure. [ 394.263141][T15677] name failslab, interval 1, probability 0, space 0, times 0 [ 394.294692][T15677] CPU: 1 UID: 0 PID: 15677 Comm: syz.3.3276 Not tainted syzkaller #0 PREEMPT(full) [ 394.294724][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.294734][T15677] Call Trace: [ 394.294741][T15677] [ 394.294750][T15677] dump_stack_lvl+0xe8/0x150 [ 394.294783][T15677] should_fail_ex+0x40c/0x560 [ 394.294808][T15677] should_failslab+0xa8/0x100 [ 394.294837][T15677] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 394.294860][T15677] ? vm_area_dup+0x28/0x670 [ 394.294880][T15677] ? vm_area_dup+0x28/0x670 [ 394.294908][T15677] vm_area_dup+0x28/0x670 [ 394.294928][T15677] ? __split_vma+0x1c6/0xa50 [ 394.294949][T15677] __split_vma+0x1dc/0xa50 [ 394.294979][T15677] ? __pfx___split_vma+0x10/0x10 [ 394.295011][T15677] ? mas_find+0xab1/0xcf0 [ 394.295159][T15677] vms_gather_munmap_vmas+0x4e3/0x1370 [ 394.295202][T15677] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 394.295230][T15677] ? vm_unmapped_area+0xde/0x230 [ 394.295251][T15677] ? arch_get_unmapped_area_topdown+0x9e1/0xb50 [ 394.295302][T15677] do_vmi_align_munmap+0x2b4/0x4b0 [ 394.295343][T15677] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 394.295402][T15677] do_vmi_munmap+0x252/0x2d0 [ 394.295433][T15677] __vm_munmap+0x241/0x3e0 [ 394.295453][T15677] ? __pfx___vm_munmap+0x10/0x10 [ 394.295467][T15677] ? vm_mmap_pgoff+0x35a/0x4e0 [ 394.295528][T15677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.295549][T15677] __x64_sys_munmap+0x60/0x70 [ 394.295571][T15677] do_syscall_64+0x174/0x580 [ 394.295595][T15677] ? trace_irq_disable+0x3b/0x140 [ 394.295616][T15677] ? clear_bhb_loop+0x40/0x90 [ 394.295639][T15677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.295656][T15677] RIP: 0033:0x7f27e739dc87 [ 394.295674][T15677] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.295690][T15677] RSP: 002b:00007f27e820bd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 394.295710][T15677] RAX: ffffffffffffffda RBX: 00007f27e0000000 RCX: 00007f27e739dc87 [ 394.295724][T15677] RDX: 0000000000000000 RSI: 0000000002c00000 RDI: 00007f27dd400000 [ 394.295735][T15677] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 394.295746][T15677] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 394.295757][T15677] R13: 0000000000001000 R14: 00007f27e4000000 R15: 0000000002c00000 [ 394.295787][T15677] [ 394.300177][T15582] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.640745][ T5631] Bluetooth: hci4: command tx timeout [ 394.654078][T15582] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.666750][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 394.905641][T15582] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.039600][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3284'. [ 395.421149][T15582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.458937][T15582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.476168][T15582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.499148][T15582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.522147][T15582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.548155][T15582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.559508][T15582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.588242][T15582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.596131][ T5631] Bluetooth: hci0: command tx timeout [ 395.676148][ T29] audit: type=1800 audit(1783404373.568:3): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3292" name="memory.events" dev="tmpfs" ino=115 res=0 errno=0 [ 395.745997][ T29] audit: type=1804 audit(1783404373.598:4): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3292" name="/newroot/19/memory.events" dev="tmpfs" ino=115 res=1 errno=0 [ 395.807284][T15582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.860077][T15582] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.884886][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.892138][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.030335][T15734] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.038776][T15734] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.158650][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3295'. [ 396.216010][T15743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 396.309729][T15734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.337890][T15734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.472564][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 396.598617][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.605800][ T6966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.644359][T15736] macvtap1: entered promiscuous mode [ 396.665396][T15736] vlan0: entered promiscuous mode [ 396.676504][T15736] vlan0: left promiscuous mode [ 396.715106][ T5631] Bluetooth: hci4: command tx timeout [ 396.816748][ T32] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.838587][ T32] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.865270][ T32] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.881599][ T32] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.932115][ T32] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.943131][ T32] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.954265][ T32] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.983949][ T32] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.007340][T15782] syzkaller0: entered promiscuous mode [ 397.012922][T15782] syzkaller0: entered allmulticast mode [ 397.023370][T15781] tipc: Enabling of bearer rejected, already enabled [ 397.247600][T15791] syzkaller0: entered promiscuous mode [ 397.253207][T15791] syzkaller0: entered allmulticast mode [ 397.434094][T15801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3310'. [ 397.620934][T15815] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.653584][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.684719][T15815] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.707695][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.718682][T15815] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.730129][T15814] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.751038][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.784382][T15814] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.824256][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3313'. [ 397.838458][T15582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.893183][T15582] veth0_vlan: entered promiscuous mode [ 397.910508][T15582] veth1_vlan: entered promiscuous mode [ 397.977823][T15582] veth0_macvtap: entered promiscuous mode [ 398.010337][T15582] veth1_macvtap: entered promiscuous mode [ 398.049814][T15582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.109025][T15582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.139027][ T6973] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.162475][ T6973] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.203403][ T6973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.226696][ T6973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.267695][T15844] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.357520][T15844] gtp0: entered promiscuous mode [ 398.362598][T15844] gtp0: entered allmulticast mode [ 398.370167][T15844] team0: Device gtp0 is of different type [ 398.446693][T15847] netlink: 'syz.1.3325': attribute type 2 has an invalid length. [ 398.464234][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.489180][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.548959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.570171][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.799716][ T5631] Bluetooth: hci4: command tx timeout [ 399.061913][T15872] syzkaller0: entered promiscuous mode [ 399.074561][T15872] syzkaller0: entered allmulticast mode [ 399.105322][T15872] tipc: Enabled bearer , priority 0 [ 399.133335][T15872] tipc: Resetting bearer [ 399.146817][T15871] tipc: Resetting bearer [ 399.169800][T15871] tipc: Disabling bearer [ 399.305276][T15878] FAULT_INJECTION: forcing a failure. [ 399.305276][T15878] name failslab, interval 1, probability 0, space 0, times 0 [ 399.320771][T15878] CPU: 1 UID: 0 PID: 15878 Comm: syz.0.3333 Not tainted syzkaller #0 PREEMPT(full) [ 399.320798][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.320809][T15878] Call Trace: [ 399.320816][T15878] [ 399.320824][T15878] dump_stack_lvl+0xe8/0x150 [ 399.320858][T15878] should_fail_ex+0x40c/0x560 [ 399.320885][T15878] should_failslab+0xa8/0x100 [ 399.320913][T15878] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 399.320936][T15878] ? mas_alloc_nodes+0x291/0x350 [ 399.320958][T15878] ? mas_alloc_nodes+0x291/0x350 [ 399.320995][T15878] mas_alloc_nodes+0x291/0x350 [ 399.321023][T15878] mas_preallocate+0x2cf/0x630 [ 399.321047][T15878] ? rcu_is_watching+0x15/0xb0 [ 399.321078][T15878] ? __pfx_mas_preallocate+0x10/0x10 [ 399.321110][T15878] ? anon_vma_name+0x61/0x210 [ 399.321136][T15878] ? __mas_set_range+0x11a/0x3a0 [ 399.321156][T15878] __split_vma+0x318/0xa50 [ 399.321186][T15878] ? __pfx___split_vma+0x10/0x10 [ 399.321214][T15878] ? mas_find+0xab1/0xcf0 [ 399.321243][T15878] vms_gather_munmap_vmas+0x4e3/0x1370 [ 399.321285][T15878] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 399.321312][T15878] ? vm_unmapped_area+0xde/0x230 [ 399.321334][T15878] ? arch_get_unmapped_area_topdown+0x9e1/0xb50 [ 399.321370][T15878] do_vmi_align_munmap+0x2b4/0x4b0 [ 399.321415][T15878] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 399.321476][T15878] do_vmi_munmap+0x252/0x2d0 [ 399.321508][T15878] __vm_munmap+0x241/0x3e0 [ 399.321530][T15878] ? __pfx___vm_munmap+0x10/0x10 [ 399.321545][T15878] ? vm_mmap_pgoff+0x35a/0x4e0 [ 399.321583][T15878] ? rcu_is_watching+0x15/0xb0 [ 399.321617][T15878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.321638][T15878] __x64_sys_munmap+0x60/0x70 [ 399.321659][T15878] do_syscall_64+0x174/0x580 [ 399.321683][T15878] ? trace_irq_disable+0x3b/0x140 [ 399.321706][T15878] ? clear_bhb_loop+0x40/0x90 [ 399.321729][T15878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.321747][T15878] RIP: 0033:0x7f09bd59dc87 [ 399.321764][T15878] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.321779][T15878] RSP: 002b:00007f09be415d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 399.321799][T15878] RAX: ffffffffffffffda RBX: 00007f09b4000000 RCX: 00007f09bd59dc87 [ 399.321813][T15878] RDX: 0000000000000000 RSI: 0000000000a00000 RDI: 00007f09b3600000 [ 399.321824][T15878] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 399.321836][T15878] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 399.321848][T15878] R13: 0000000000001000 R14: 00007f09b8000000 R15: 0000000000a00000 [ 399.321878][T15878] [ 399.626531][T15882] FAULT_INJECTION: forcing a failure. [ 399.626531][T15882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 399.648110][T15882] CPU: 0 UID: 0 PID: 15882 Comm: syz.1.3335 Not tainted syzkaller #0 PREEMPT(full) [ 399.648136][T15882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.648148][T15882] Call Trace: [ 399.648155][T15882] [ 399.648162][T15882] dump_stack_lvl+0xe8/0x150 [ 399.648195][T15882] should_fail_ex+0x40c/0x560 [ 399.648222][T15882] prepare_alloc_pages+0x230/0x650 [ 399.648253][T15882] __alloc_frozen_pages_noprof+0x12f/0x380 [ 399.648283][T15882] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 399.648313][T15882] ? __pfx_policy_nodemask+0x10/0x10 [ 399.648349][T15882] alloc_pages_mpol+0x212/0x380 [ 399.648384][T15882] folio_alloc_mpol_noprof+0x39/0x160 [ 399.648413][T15882] vma_alloc_folio_noprof+0xe1/0x1e0 [ 399.648442][T15882] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 399.648487][T15882] do_wp_page+0x1163/0x4c70 [ 399.648525][T15882] ? __pfx_do_wp_page+0x10/0x10 [ 399.648541][T15882] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.648564][T15882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.648594][T15882] handle_mm_fault+0x1490/0x3080 [ 399.648626][T15882] ? handle_mm_fault+0xec/0x3080 [ 399.648654][T15882] ? __pfx_handle_mm_fault+0x10/0x10 [ 399.648672][T15882] ? lock_vma_under_rcu+0x45a/0x500 [ 399.648720][T15882] do_user_addr_fault+0xa4d/0x1340 [ 399.648756][T15882] ? trace_page_fault_user+0x84/0x1e0 [ 399.648785][T15882] exc_page_fault+0x6a/0xc0 [ 399.648811][T15882] asm_exc_page_fault+0x26/0x30 [ 399.648829][T15882] RIP: 0033:0x7f63f9d5dc45 [ 399.648846][T15882] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 399.648861][T15882] RSP: 002b:00007f63fad21de0 EFLAGS: 00010293 [ 399.648876][T15882] RAX: 0000000000000008 RBX: 00007f63fab57e20 RCX: 0000000000000000 [ 399.648888][T15882] RDX: 0000000000000000 RSI: 00007f63f9e514dc RDI: 00007f63fab57e20 [ 399.648901][T15882] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 399.648912][T15882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63f9e511f4 [ 399.648925][T15882] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f63f9e514dc [ 399.648954][T15882] [ 399.649036][T15882] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 399.858810][T15888] netlink: 'syz.0.3336': attribute type 2 has an invalid length. [ 399.988148][T15893] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 400.069754][T15900] ieee802154 phy1 wpan1: encryption failed: -90 [ 400.903670][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.917668][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.928529][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.940040][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.950038][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.637835][T15951] netlink: 'syz.1.3358': attribute type 2 has an invalid length. [ 401.744882][ T5631] block nbd1: Receive control failed (result -32) [ 401.975148][T15962] netlink: 'syz.1.3361': attribute type 8 has an invalid length. [ 402.020933][T15962] bond0: entered promiscuous mode [ 402.038544][T15962] bond_slave_0: entered promiscuous mode [ 402.055870][T15962] bond_slave_1: entered promiscuous mode [ 402.067978][T15962] gretap0: entered promiscuous mode [ 402.134614][T15962] bond0: left promiscuous mode [ 402.139593][T15962] bond_slave_0: left promiscuous mode [ 402.158725][T15962] bond_slave_1: left promiscuous mode [ 402.203362][T15962] gretap0: left promiscuous mode [ 402.317584][T15973] netlink: 'syz.2.3364': attribute type 1 has an invalid length. [ 402.525944][T15975] __nla_validate_parse: 11 callbacks suppressed [ 402.525963][T15975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3365'. [ 402.567531][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 403.024615][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3368'. [ 403.039398][ T5631] Bluetooth: hci2: command tx timeout [ 403.088521][T15996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.104579][T15927] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.111832][T15927] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.119391][T15927] bridge_slave_0: entered allmulticast mode [ 403.127426][T15927] bridge_slave_0: entered promiscuous mode [ 403.136577][T15927] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.143895][T15927] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.151535][T15927] bridge_slave_1: entered allmulticast mode [ 403.166617][T15927] bridge_slave_1: entered promiscuous mode [ 403.198263][T15996] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 403.246339][T15927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.259722][T15927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.364259][T15996] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 403.366962][T15982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.391763][T15996] bond1 (unregistering): Released all slaves [ 403.571482][T15927] team0: Port device team_slave_0 added [ 403.658519][T15927] team0: Port device team_slave_1 added [ 403.748652][T15927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.761847][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.836784][T15927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.855826][T15927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.869956][T15927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.944574][T15927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.071668][T16017] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 404.093033][T15927] hsr_slave_0: entered promiscuous mode [ 404.099325][T15927] hsr_slave_1: entered promiscuous mode [ 404.105956][T15927] debugfs: 'hsr0' already exists in 'hsr' [ 404.111705][T15927] Cannot create hsr debugfs directory [ 404.118338][T16017] batadv_slave_1: entered promiscuous mode [ 404.126551][T16018] FAULT_INJECTION: forcing a failure. [ 404.126551][T16018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.151149][T16018] CPU: 1 UID: 0 PID: 16018 Comm: syz.0.3376 Not tainted syzkaller #0 PREEMPT(full) [ 404.151173][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.151184][T16018] Call Trace: [ 404.151191][T16018] [ 404.151199][T16018] dump_stack_lvl+0xe8/0x150 [ 404.151232][T16018] should_fail_ex+0x40c/0x560 [ 404.151259][T16018] _copy_from_user+0x2d/0xb0 [ 404.151286][T16018] ___sys_recvmsg+0x173/0x5a0 [ 404.151320][T16018] ? __pfx____sys_recvmsg+0x10/0x10 [ 404.151351][T16018] ? __fget_files+0x2a/0x420 [ 404.151405][T16018] do_recvmmsg+0x31a/0x7f0 [ 404.151441][T16018] ? __pfx_do_recvmmsg+0x10/0x10 [ 404.151480][T16018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.151506][T16018] ? __fget_files+0x3a2/0x420 [ 404.151540][T16018] __x64_sys_recvmmsg+0x198/0x250 [ 404.151571][T16018] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 404.151615][T16018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.151636][T16018] do_syscall_64+0x174/0x580 [ 404.151659][T16018] ? trace_irq_disable+0x3b/0x140 [ 404.151682][T16018] ? clear_bhb_loop+0x40/0x90 [ 404.151705][T16018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.151724][T16018] RIP: 0033:0x7f09bd59de59 [ 404.151741][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.151757][T16018] RSP: 002b:00007f09be417028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 404.151777][T16018] RAX: ffffffffffffffda RBX: 00007f09bd825fa0 RCX: 00007f09bd59de59 [ 404.151791][T16018] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 404.151803][T16018] RBP: 00007f09be417090 R08: 0000000000000000 R09: 0000000000000000 [ 404.151815][T16018] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 404.151826][T16018] R13: 00007f09bd826038 R14: 00007f09bd825fa0 R15: 00007ffe61a4b6a8 [ 404.151856][T16018] [ 404.452055][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.459792][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.545527][T16022] netlink: 'syz.0.3377': attribute type 1 has an invalid length. [ 404.555752][T15911] Set syz1 is full, maxelem 65536 reached [ 404.630329][T16017] bridge_slave_0: left allmulticast mode [ 404.644752][T16017] bridge_slave_0: left promiscuous mode [ 404.650647][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.674195][T16017] bridge_slave_1: left allmulticast mode [ 404.680054][T16017] bridge_slave_1: left promiscuous mode [ 404.686217][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.705672][T16017] bond0: (slave bond_slave_0): Releasing backup interface [ 404.718790][T16017] bond0: (slave bond_slave_1): Releasing backup interface [ 404.731510][T16017] team0: Port device team_slave_0 removed [ 404.742225][T16017] team0: Port device team_slave_1 removed [ 404.750426][T16017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.762770][T16017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.775982][T16017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.786008][T16017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.800529][T16017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.848034][T16022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.875309][T16025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.899047][T16025] bond1: (slave bond0): making interface the new active one [ 404.910463][T16025] bond1: (slave bond0): Enslaving as an active interface with an up link [ 404.961585][T16015] batadv_slave_1: left promiscuous mode [ 405.114791][ T5631] Bluetooth: hci2: command tx timeout [ 405.327167][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 405.358675][T16055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3386'. [ 405.390481][T15927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 405.401736][T15927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 405.422058][T15927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.570922][T15927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 405.596753][T15927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 405.624516][T15927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.729254][T16063] syzkaller0: entered promiscuous mode [ 405.756276][T16063] syzkaller0: entered allmulticast mode [ 405.831801][T15927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 405.853213][T15927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 405.868528][T15927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.904393][T16070] 8021q: VLANs not supported on sit0 [ 406.022761][T15927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 406.037126][T15927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 406.048022][T15927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.397739][T16087] FAULT_INJECTION: forcing a failure. [ 406.397739][T16087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.436112][T16087] CPU: 1 UID: 0 PID: 16087 Comm: syz.3.3400 Not tainted syzkaller #0 PREEMPT(full) [ 406.436137][T16087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.436146][T16087] Call Trace: [ 406.436154][T16087] [ 406.436161][T16087] dump_stack_lvl+0xe8/0x150 [ 406.436194][T16087] should_fail_ex+0x40c/0x560 [ 406.436220][T16087] _copy_from_user+0x2d/0xb0 [ 406.436247][T16087] ___sys_recvmsg+0x173/0x5a0 [ 406.436279][T16087] ? __pfx____sys_recvmsg+0x10/0x10 [ 406.436309][T16087] ? __fget_files+0x2a/0x420 [ 406.436360][T16087] do_recvmmsg+0x31a/0x7f0 [ 406.436394][T16087] ? __pfx_do_recvmmsg+0x10/0x10 [ 406.436432][T16087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 406.436458][T16087] ? __fget_files+0x3a2/0x420 [ 406.436488][T16087] __x64_sys_recvmmsg+0x198/0x250 [ 406.436519][T16087] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 406.436555][T16087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.436576][T16087] do_syscall_64+0x174/0x580 [ 406.436600][T16087] ? trace_irq_disable+0x3b/0x140 [ 406.436623][T16087] ? clear_bhb_loop+0x40/0x90 [ 406.436646][T16087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.436665][T16087] RIP: 0033:0x7f27e739de59 [ 406.436682][T16087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.436698][T16087] RSP: 002b:00007f27e820d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 406.436716][T16087] RAX: ffffffffffffffda RBX: 00007f27e7625fa0 RCX: 00007f27e739de59 [ 406.436730][T16087] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 406.436742][T16087] RBP: 00007f27e820d090 R08: 0000000000000000 R09: 0000000000000000 [ 406.436754][T16087] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 406.436765][T16087] R13: 00007f27e7626038 R14: 00007f27e7625fa0 R15: 00007ffe2e1a15d8 [ 406.436792][T16087] [ 406.465627][T15927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.692881][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.707051][T15927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.746383][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.766696][T15927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.803975][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.816806][T15927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.839256][T15927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.071246][T15927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.149922][T15927] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.179803][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.187012][ T6973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.194692][ T5631] Bluetooth: hci2: command tx timeout [ 407.243241][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.250453][ T6973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.615925][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3412'. [ 407.636377][T16132] netlink: 'syz.2.3411': attribute type 2 has an invalid length. [ 407.977402][T16144] tipc: Started in network mode [ 408.001030][T16144] tipc: Node identity ac14140f, cluster identity 4711 [ 408.026032][T16144] tipc: New replicast peer: 255.255.255.255 [ 408.041912][T16144] tipc: Enabled bearer , priority 10 [ 408.346741][T15927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.387076][T16153] pim6reg: entered allmulticast mode [ 408.413985][T16153] pim6reg: left allmulticast mode [ 408.706046][T16170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3420'. [ 408.991813][T15927] veth0_vlan: entered promiscuous mode [ 408.999123][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 409.024701][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3421'. [ 409.026855][T15927] veth1_vlan: entered promiscuous mode [ 409.052374][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 409.077883][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3421'. [ 409.133831][T15927] veth0_macvtap: entered promiscuous mode [ 409.158268][ T6428] tipc: Node number set to 2886997007 [ 409.178516][T15927] veth1_macvtap: entered promiscuous mode [ 409.272081][T15927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.280373][ T5631] Bluetooth: hci2: command tx timeout [ 409.312855][T15927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.317307][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 409.339317][ T6966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.348795][ T6966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.368986][ T6966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.392764][ T6966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.455311][T16184] netlink: 'syz.0.3423': attribute type 2 has an invalid length. [ 409.821828][ T6973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.851799][ T6973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.914113][ T6962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.937836][ T6962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.985790][T16201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3429'. [ 410.004243][T16201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3429'. [ 410.028520][T16201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3429'. [ 411.090508][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.124304][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.178471][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.214960][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.361750][T16266] FAULT_INJECTION: forcing a failure. [ 412.361750][T16266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.401080][T16266] CPU: 1 UID: 0 PID: 16266 Comm: syz.0.3445 Not tainted syzkaller #0 PREEMPT(full) [ 412.401107][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.401117][T16266] Call Trace: [ 412.401125][T16266] [ 412.401133][T16266] dump_stack_lvl+0xe8/0x150 [ 412.401168][T16266] should_fail_ex+0x40c/0x560 [ 412.401194][T16266] _copy_from_user+0x2d/0xb0 [ 412.401221][T16266] do_ipv6_setsockopt+0x249/0x3180 [ 412.401346][T16266] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 412.401375][T16266] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 412.401398][T16266] ? get_pid_task+0x20/0x1f0 [ 412.401442][T16266] ? __lock_acquire+0x683/0x2cf0 [ 412.401485][T16266] ? aa_sk_perm+0x6d5/0x900 [ 412.401513][T16266] ? __fget_files+0x2a/0x420 [ 412.401542][T16266] ? __pfx_aa_sk_perm+0x10/0x10 [ 412.401572][T16266] ? __fget_files+0x2a/0x420 [ 412.401593][T16266] ? aa_sock_opt_perm+0xff/0x1a0 [ 412.401614][T16266] ipv6_setsockopt+0x59/0x170 [ 412.401636][T16266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 412.401661][T16266] do_sock_setsockopt+0x17c/0x1b0 [ 412.401692][T16266] __x64_sys_setsockopt+0x13d/0x1b0 [ 412.401735][T16266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.401755][T16266] do_syscall_64+0x174/0x580 [ 412.401779][T16266] ? trace_irq_disable+0x3b/0x140 [ 412.401802][T16266] ? clear_bhb_loop+0x40/0x90 [ 412.401825][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.401843][T16266] RIP: 0033:0x7f09bd59de59 [ 412.401862][T16266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.401878][T16266] RSP: 002b:00007f09be417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.401898][T16266] RAX: ffffffffffffffda RBX: 00007f09bd825fa0 RCX: 00007f09bd59de59 [ 412.401912][T16266] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003 [ 412.401923][T16266] RBP: 00007f09be417090 R08: 0000000000000014 R09: 0000000000000000 [ 412.401935][T16266] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 412.401947][T16266] R13: 00007f09bd826038 R14: 00007f09bd825fa0 R15: 00007ffe61a4b6a8 [ 412.401977][T16266] [ 413.091714][T16277] syzkaller0: entered promiscuous mode [ 413.110312][T16277] syzkaller0: entered allmulticast mode [ 413.553109][T16294] __nla_validate_parse: 143 callbacks suppressed [ 413.553129][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3456'. [ 413.671329][T16294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.715789][T16301] bond1 (unregistering): Released all slaves [ 414.024956][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3459'. [ 414.056369][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 414.426501][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'. [ 414.876188][T16339] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3471'. [ 414.997169][T16341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3473'. [ 415.039625][T16341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.046937][T16341] IPv6: NLM_F_CREATE should be set when creating new route [ 415.066469][T16341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3473'. [ 415.108505][T16349] veth0_to_team: entered promiscuous mode [ 415.132180][T16349] gretap0: entered promiscuous mode [ 415.157574][T16349] debugfs: 'hsr1' already exists in 'hsr' [ 415.168141][T16349] Cannot create hsr debugfs directory [ 415.549345][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 415.568795][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 416.131900][T16396] netlink: 'syz.3.3495': attribute type 1 has an invalid length. [ 416.142405][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 416.215628][T16400] erspan0: entered promiscuous mode [ 416.223355][T16400] macvtap1: entered promiscuous mode [ 416.229298][T16400] macvtap1: entered allmulticast mode [ 416.244805][T16400] erspan0: entered allmulticast mode [ 420.441646][T16508] __nla_validate_parse: 7 callbacks suppressed [ 420.441664][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3534'. [ 420.467783][T16502] netlink: 'syz.3.3533': attribute type 2 has an invalid length. [ 420.523185][T16508] vlan2: entered allmulticast mode [ 420.535801][T16508] veth0_to_batadv: entered allmulticast mode [ 420.687829][T16521] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 420.800514][T16521] bond2 (unregistering): Released all slaves [ 421.534096][T16542] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 421.637534][T16537] syzkaller0: entered promiscuous mode [ 421.656932][T16537] syzkaller0: entered allmulticast mode [ 421.848182][T16562] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3551'. [ 421.867145][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 423.527343][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 424.209216][T16583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3555'. [ 424.356191][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'. [ 424.379733][T16585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'. [ 424.590456][T16599] tipc: Enabled bearer , priority 0 [ 424.682683][T16599] syzkaller0: entered promiscuous mode [ 424.691094][T16599] syzkaller0: entered allmulticast mode [ 424.701844][T16599] tipc: Resetting bearer [ 424.735932][T16598] tipc: Resetting bearer [ 424.898566][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3565'. [ 426.448375][T16598] tipc: Disabling bearer [ 426.674760][T16637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 426.782171][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 426.880223][T16630] pim6reg: entered allmulticast mode [ 426.914199][T16645] pim6reg: left allmulticast mode [ 427.261144][T16668] pim6reg: entered allmulticast mode [ 427.271817][T16672] pim6reg: left allmulticast mode [ 427.353245][T16677] netlink: 'syz.1.3582': attribute type 1 has an invalid length. [ 427.385594][T16677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.406882][T16677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.433943][T16677] bond2: (slave bond0): making interface the new active one [ 427.467445][T16677] bond2: (slave bond0): Enslaving as an active interface with an up link [ 427.662365][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'. [ 427.749277][T16693] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 427.980574][T16697] pim6reg: entered allmulticast mode [ 428.010704][T16697] pim6reg: left allmulticast mode [ 428.406434][T16729] FAULT_INJECTION: forcing a failure. [ 428.406434][T16729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.451249][T16729] CPU: 0 UID: 0 PID: 16729 Comm: syz.4.3600 Not tainted syzkaller #0 PREEMPT(full) [ 428.451277][T16729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.451288][T16729] Call Trace: [ 428.451295][T16729] [ 428.451303][T16729] dump_stack_lvl+0xe8/0x150 [ 428.451338][T16729] should_fail_ex+0x40c/0x560 [ 428.451364][T16729] _copy_to_user+0x31/0xb0 [ 428.451392][T16729] simple_read_from_buffer+0xe1/0x170 [ 428.451421][T16729] proc_fail_nth_read+0x1bb/0x230 [ 428.451449][T16729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.451477][T16729] ? rw_verify_area+0x24a/0x4c0 [ 428.451505][T16729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 428.451529][T16729] vfs_read+0x213/0xa80 [ 428.451560][T16729] ? __pfx___mutex_lock+0x10/0x10 [ 428.451587][T16729] ? __pfx_vfs_read+0x10/0x10 [ 428.451615][T16729] ? __fget_files+0x2a/0x420 [ 428.451642][T16729] ? __fget_files+0x3a2/0x420 [ 428.451663][T16729] ? __fget_files+0x2a/0x420 [ 428.451692][T16729] ksys_read+0x150/0x270 [ 428.451718][T16729] ? __pfx_ksys_read+0x10/0x10 [ 428.451750][T16729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.451770][T16729] do_syscall_64+0x174/0x580 [ 428.451793][T16729] ? trace_irq_disable+0x3b/0x140 [ 428.451817][T16729] ? clear_bhb_loop+0x40/0x90 [ 428.451839][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.451858][T16729] RIP: 0033:0x7fccc895e68e [ 428.451876][T16729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.451900][T16729] RSP: 002b:00007fccc6bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.451921][T16729] RAX: ffffffffffffffda RBX: 00007fccc6bf66c0 RCX: 00007fccc895e68e [ 428.451935][T16729] RDX: 000000000000000f RSI: 00007fccc6bf60a0 RDI: 0000000000000005 [ 428.451947][T16729] RBP: 00007fccc6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.451958][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.451969][T16729] R13: 00007fccc8c26038 R14: 00007fccc8c25fa0 R15: 00007ffcf3acad68 [ 428.452001][T16729] [ 429.009439][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 429.140221][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3606'. [ 429.212159][T16751] erspan0: entered promiscuous mode [ 429.248709][T16751] macvtap1: entered promiscuous mode [ 429.293240][T16751] macvtap1: entered allmulticast mode [ 429.315230][T16751] erspan0: entered allmulticast mode [ 429.336819][T16753] netlink: 'syz.2.3608': attribute type 1 has an invalid length. [ 429.348193][T16753] netlink: 'syz.2.3608': attribute type 2 has an invalid length. [ 429.557042][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 429.631686][T16772] FAULT_INJECTION: forcing a failure. [ 429.631686][T16772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.656791][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027284400: rx timeout, send abort [ 429.664493][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.2.3615 Not tainted syzkaller #0 PREEMPT(full) [ 429.664519][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.664529][T16772] Call Trace: [ 429.664536][T16772] [ 429.664544][T16772] dump_stack_lvl+0xe8/0x150 [ 429.664576][T16772] should_fail_ex+0x40c/0x560 [ 429.664603][T16772] _copy_from_user+0x2d/0xb0 [ 429.664628][T16772] ___sys_recvmsg+0x173/0x5a0 [ 429.664701][T16772] ? __pfx____sys_recvmsg+0x10/0x10 [ 429.664735][T16772] ? __fget_files+0x2a/0x420 [ 429.664787][T16772] do_recvmmsg+0x31a/0x7f0 [ 429.664822][T16772] ? __pfx_do_recvmmsg+0x10/0x10 [ 429.664859][T16772] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.664886][T16772] ? __fget_files+0x3a2/0x420 [ 429.664918][T16772] __x64_sys_recvmmsg+0x198/0x250 [ 429.664946][T16772] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 429.664982][T16772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.665001][T16772] do_syscall_64+0x174/0x580 [ 429.665024][T16772] ? trace_irq_disable+0x3b/0x140 [ 429.665046][T16772] ? clear_bhb_loop+0x40/0x90 [ 429.665068][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.665084][T16772] RIP: 0033:0x7f8bcef9de59 [ 429.665100][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.665115][T16772] RSP: 002b:00007f8bcd1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 429.665133][T16772] RAX: ffffffffffffffda RBX: 00007f8bcf226090 RCX: 00007f8bcef9de59 [ 429.665145][T16772] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 429.665156][T16772] RBP: 00007f8bcd1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.665167][T16772] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 429.665178][T16772] R13: 00007f8bcf226128 R14: 00007f8bcf226090 R15: 00007ffe3f2008e8 [ 429.665206][T16772] [ 429.717032][T16769] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 429.721090][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027284400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 429.756991][T16769] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 429.907807][T16769] bond1: entered allmulticast mode [ 429.928996][T16769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.938002][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3618'. [ 429.950012][T16780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3618'. [ 430.457319][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'. [ 430.483488][T16808] xt_TCPMSS: Only works on TCP SYN packets [ 430.500589][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'. [ 430.738945][T16812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 430.762893][T16812] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 431.067677][T16836] Bluetooth: MGMT ver 1.23 [ 431.140639][T16840] netlink: 'syz.2.3639': attribute type 8 has an invalid length. [ 431.158308][T16840] bond0: entered promiscuous mode [ 431.170127][T16840] gretap0: entered promiscuous mode [ 431.183059][T16840] bond0: left promiscuous mode [ 431.198314][T16840] gretap0: left promiscuous mode [ 431.942755][T16886] geneve2: entered promiscuous mode [ 432.300990][T16908] bridge_slave_0: left allmulticast mode [ 432.315294][T16908] bridge_slave_0: left promiscuous mode [ 432.326583][T16912] netlink: 'syz.0.3666': attribute type 1 has an invalid length. [ 432.345160][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.355756][T16912] __nla_validate_parse: 1 callbacks suppressed [ 432.355771][T16912] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3666'. [ 432.385223][T16912] netlink: 'syz.0.3666': attribute type 1 has an invalid length. [ 432.416962][T16908] bridge_slave_1: left allmulticast mode [ 432.421590][T16917] FAULT_INJECTION: forcing a failure. [ 432.421590][T16917] name failslab, interval 1, probability 0, space 0, times 0 [ 432.435547][T16908] bridge_slave_1: left promiscuous mode [ 432.435861][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.459257][T16917] CPU: 0 UID: 0 PID: 16917 Comm: syz.4.3669 Not tainted syzkaller #0 PREEMPT(full) [ 432.459281][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.459292][T16917] Call Trace: [ 432.459299][T16917] [ 432.459306][T16917] dump_stack_lvl+0xe8/0x150 [ 432.459336][T16917] should_fail_ex+0x40c/0x560 [ 432.459363][T16917] should_failslab+0xa8/0x100 [ 432.459391][T16917] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 432.459419][T16917] ? __anon_vma_prepare+0xc3/0x4e0 [ 432.459439][T16917] ? __anon_vma_prepare+0xc3/0x4e0 [ 432.459464][T16917] __anon_vma_prepare+0xc3/0x4e0 [ 432.459489][T16917] do_pte_missing+0x2f18/0x34b0 [ 432.459512][T16917] ? __lock_acquire+0x683/0x2cf0 [ 432.459551][T16917] handle_mm_fault+0x1b36/0x3080 [ 432.459581][T16917] ? handle_mm_fault+0xec/0x3080 [ 432.459610][T16917] ? __pfx_handle_mm_fault+0x10/0x10 [ 432.459627][T16917] ? lock_vma_under_rcu+0x45a/0x500 [ 432.459674][T16917] do_user_addr_fault+0xa4d/0x1340 [ 432.459710][T16917] ? trace_page_fault_user+0x84/0x1e0 [ 432.459739][T16917] exc_page_fault+0x6a/0xc0 [ 432.459765][T16917] asm_exc_page_fault+0x26/0x30 [ 432.459782][T16917] RIP: 0033:0x7fccc895fd82 [ 432.459800][T16917] Code: 8d 15 c6 09 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 10 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 432.459816][T16917] RSP: 002b:00007fccc6bf4d20 EFLAGS: 00010286 [ 432.459834][T16917] RAX: ffffffffffffffff RBX: 00007fccc0000000 RCX: 00007fccc899dc57 [ 432.459849][T16917] RDX: 00007fccc8a50724 RSI: 0000000000021000 RDI: 00007fccc0000000 [ 432.459861][T16917] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 432.459872][T16917] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 432.459883][T16917] R13: 0000000000001000 R14: 00007fccc4000000 R15: 0000000001600000 [ 432.459913][T16917] [ 432.459936][T16917] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 432.656424][T16908] bond0: (slave bond_slave_0): Releasing backup interface [ 432.709533][T16908] bond0: (slave bond_slave_1): Releasing backup interface [ 432.743481][T16908] team0: Port device team_slave_0 removed [ 432.779032][T16908] team0: Port device team_slave_1 removed [ 432.803431][T16908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.827663][T16908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.853977][T16908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.870461][T16908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.903821][T16908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.298272][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 433.620258][T16962] FAULT_INJECTION: forcing a failure. [ 433.620258][T16962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.644559][T16962] CPU: 0 UID: 0 PID: 16962 Comm: syz.3.3685 Not tainted syzkaller #0 PREEMPT(full) [ 433.644585][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.644596][T16962] Call Trace: [ 433.644603][T16962] [ 433.644611][T16962] dump_stack_lvl+0xe8/0x150 [ 433.644645][T16962] should_fail_ex+0x40c/0x560 [ 433.644671][T16962] _copy_from_user+0x2d/0xb0 [ 433.644699][T16962] ___sys_recvmsg+0x173/0x5a0 [ 433.644738][T16962] ? __pfx____sys_recvmsg+0x10/0x10 [ 433.644771][T16962] ? __fget_files+0x2a/0x420 [ 433.644824][T16962] do_recvmmsg+0x31a/0x7f0 [ 433.644860][T16962] ? __pfx_do_recvmmsg+0x10/0x10 [ 433.644899][T16962] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 433.644933][T16962] ? __fget_files+0x3a2/0x420 [ 433.644966][T16962] __x64_sys_recvmmsg+0x198/0x250 [ 433.644997][T16962] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 433.645034][T16962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.645055][T16962] do_syscall_64+0x174/0x580 [ 433.645078][T16962] ? trace_irq_disable+0x3b/0x140 [ 433.645102][T16962] ? clear_bhb_loop+0x40/0x90 [ 433.645125][T16962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.645144][T16962] RIP: 0033:0x7f27e739de59 [ 433.645162][T16962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.645178][T16962] RSP: 002b:00007f27e81ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 433.645198][T16962] RAX: ffffffffffffffda RBX: 00007f27e7626090 RCX: 00007f27e739de59 [ 433.645212][T16962] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003 [ 433.645224][T16962] RBP: 00007f27e81ec090 R08: 0000000000000000 R09: 0000000000000000 [ 433.645236][T16962] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 433.645247][T16962] R13: 00007f27e7626128 R14: 00007f27e7626090 R15: 00007ffe2e1a15d8 [ 433.645277][T16962] [ 434.067633][T16967] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 434.153144][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3691'. [ 434.220447][T16972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.598459][T16974] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 434.828835][T16972] bond3 (unregistering): (slave syz_tun): Releasing backup interface [ 434.925028][T16972] bond3 (unregistering): Released all slaves [ 435.598859][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'. [ 436.458219][T17012] pim6reg: entered allmulticast mode [ 436.468796][T17024] FAULT_INJECTION: forcing a failure. [ 436.468796][T17024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.498718][T17012] pim6reg: left allmulticast mode [ 436.512559][T17024] CPU: 1 UID: 0 PID: 17024 Comm: syz.4.3709 Not tainted syzkaller #0 PREEMPT(full) [ 436.512584][T17024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.512594][T17024] Call Trace: [ 436.512601][T17024] [ 436.512609][T17024] dump_stack_lvl+0xe8/0x150 [ 436.512643][T17024] should_fail_ex+0x40c/0x560 [ 436.512670][T17024] _copy_to_user+0x31/0xb0 [ 436.512700][T17024] simple_read_from_buffer+0xe1/0x170 [ 436.512730][T17024] proc_fail_nth_read+0x1bb/0x230 [ 436.512759][T17024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.512787][T17024] ? rw_verify_area+0x24a/0x4c0 [ 436.512812][T17024] ? __local_bh_enable_ip+0xd0/0x130 [ 436.512867][T17024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.512890][T17024] vfs_read+0x213/0xa80 [ 436.512922][T17024] ? __pfx___mutex_lock+0x10/0x10 [ 436.512949][T17024] ? __pfx_vfs_read+0x10/0x10 [ 436.512977][T17024] ? __fget_files+0x2a/0x420 [ 436.513005][T17024] ? __fget_files+0x3a2/0x420 [ 436.513027][T17024] ? __fget_files+0x2a/0x420 [ 436.513059][T17024] ksys_read+0x150/0x270 [ 436.513089][T17024] ? __pfx_ksys_read+0x10/0x10 [ 436.513130][T17024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.513150][T17024] do_syscall_64+0x174/0x580 [ 436.513174][T17024] ? trace_irq_disable+0x3b/0x140 [ 436.513196][T17024] ? clear_bhb_loop+0x40/0x90 [ 436.513220][T17024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.513238][T17024] RIP: 0033:0x7fccc895e68e [ 436.513256][T17024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.513272][T17024] RSP: 002b:00007fccc6bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.513291][T17024] RAX: ffffffffffffffda RBX: 00007fccc6bf66c0 RCX: 00007fccc895e68e [ 436.513305][T17024] RDX: 000000000000000f RSI: 00007fccc6bf60a0 RDI: 0000000000000004 [ 436.513318][T17024] RBP: 00007fccc6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.513329][T17024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.513341][T17024] R13: 00007fccc8c26038 R14: 00007fccc8c25fa0 R15: 00007ffcf3acad68 [ 436.513373][T17024] [ 437.124897][T17045] FAULT_INJECTION: forcing a failure. [ 437.124897][T17045] name failslab, interval 1, probability 0, space 0, times 0 [ 437.139350][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3715'. [ 437.155257][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.0.3714 Not tainted syzkaller #0 PREEMPT(full) [ 437.155283][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.155294][T17045] Call Trace: [ 437.155302][T17045] [ 437.155310][T17045] dump_stack_lvl+0xe8/0x150 [ 437.155343][T17045] should_fail_ex+0x40c/0x560 [ 437.155371][T17045] should_failslab+0xa8/0x100 [ 437.155399][T17045] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 437.155422][T17045] ? __anon_vma_prepare+0xc3/0x4e0 [ 437.155443][T17045] ? __anon_vma_prepare+0xc3/0x4e0 [ 437.155470][T17045] __anon_vma_prepare+0xc3/0x4e0 [ 437.155497][T17045] do_pte_missing+0x2f18/0x34b0 [ 437.155521][T17045] ? __lock_acquire+0x683/0x2cf0 [ 437.155571][T17045] handle_mm_fault+0x1b36/0x3080 [ 437.155605][T17045] ? handle_mm_fault+0xec/0x3080 [ 437.155633][T17045] ? __pfx_handle_mm_fault+0x10/0x10 [ 437.155651][T17045] ? lock_vma_under_rcu+0x45a/0x500 [ 437.155700][T17045] do_user_addr_fault+0xa4d/0x1340 [ 437.155738][T17045] ? trace_page_fault_user+0x84/0x1e0 [ 437.155767][T17045] exc_page_fault+0x6a/0xc0 [ 437.155793][T17045] asm_exc_page_fault+0x26/0x30 [ 437.155812][T17045] RIP: 0033:0x7f09bd55fd82 [ 437.155830][T17045] Code: 8d 15 c6 09 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 10 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 437.155845][T17045] RSP: 002b:00007f09be415d20 EFLAGS: 00010286 [ 437.155863][T17045] RAX: ffffffffffffffff RBX: 00007f09b4000000 RCX: 00007f09bd59dc57 [ 437.155876][T17045] RDX: 00007f09bd650724 RSI: 0000000000021000 RDI: 00007f09b4000000 [ 437.155889][T17045] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 437.155901][T17045] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 437.155913][T17045] R13: 0000000000001000 R14: 00007f09b8000000 R15: 0000000000a00000 [ 437.155944][T17045] [ 437.155956][T17045] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 437.718216][T16925] Set syz1 is full, maxelem 65536 reached [ 437.749211][T17069] netlink: 'syz.4.3724': attribute type 10 has an invalid length. [ 437.760236][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 437.771458][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 437.783271][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 438.437168][T17110] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 438.577935][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 438.639409][T17111] bond3: (slave veth3): Enslaving as an active interface with a down link [ 438.720140][T17110] bond3: (slave veth5): Enslaving as an active interface with a down link [ 438.783841][T17124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.843220][T17138] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 438.873312][T17150] netlink: 'syz.1.3750': attribute type 11 has an invalid length. [ 438.910123][T17143] bond1 (unregistering): (slave syz_tun): Releasing backup interface [ 438.936127][T17143] bond1 (unregistering): Released all slaves [ 439.025501][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 439.035605][T17158] netlink: 'syz.1.3750': attribute type 30 has an invalid length. [ 439.043566][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3750'. [ 439.083989][T17159] netlink: 'syz.1.3750': attribute type 11 has an invalid length. [ 439.172749][T17150] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.187408][T17150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.308651][T17150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.327256][T17150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.368378][T17150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.401701][T17150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.430351][T17150] veth1_vlan: left promiscuous mode [ 439.437422][T17150] veth0_vlan: left promiscuous mode [ 439.444316][T17150] veth0_vlan: entered promiscuous mode [ 439.454620][T17150] veth1_vlan: entered promiscuous mode [ 439.470459][T17150] veth1_macvtap: left promiscuous mode [ 439.476898][T17150] veth0_macvtap: left promiscuous mode [ 439.483184][T17150] veth0_macvtap: entered promiscuous mode [ 439.489940][T17150] veth1_macvtap: entered promiscuous mode [ 439.500864][T17150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.509641][T17150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.517914][T17150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.526343][T17150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.539119][T17150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.550645][T17150] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.567965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.575144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.585601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.592741][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.660265][ T6967] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.684976][ T6967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.712700][ T6967] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.742447][ T6967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.761204][ T6967] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.771044][ T6967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.916637][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.942091][T17178] netlink: 'syz.1.3762': attribute type 2 has an invalid length. [ 439.966327][ T6967] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.988351][ T6967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.060254][ T6973] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 440.115253][ T6973] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 440.157401][ T6973] bond3: (slave veth3): making interface the new active one [ 440.165653][T17194] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 440.200679][ T6973] bond3: active interface up! [ 440.219744][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'. [ 440.232696][T17204] netlink: 524 bytes leftover after parsing attributes in process `syz.0.3769'. [ 440.340673][T17210] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3771'. [ 440.365813][T17210] netlink: 'syz.2.3771': attribute type 1 has an invalid length. [ 440.390964][T17210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3771'. [ 440.760024][T17239] netlink: 'syz.4.3783': attribute type 2 has an invalid length. [ 440.774383][T17239] netlink: 'syz.4.3783': attribute type 2 has an invalid length. [ 440.922532][T17250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.591599][T17265] tipc: Started in network mode [ 441.604502][T17265] tipc: Node identity 8236da30ddf5, cluster identity 4711 [ 441.620141][T17265] tipc: Enabled bearer , priority 0 [ 441.652526][T17267] syzkaller0: entered promiscuous mode [ 441.674745][T17267] syzkaller0: entered allmulticast mode [ 441.748770][T17265] tipc: Resetting bearer [ 441.784189][T17264] tipc: Resetting bearer [ 441.902642][T17264] tipc: Disabling bearer [ 442.204260][T17282] tipc: Started in network mode [ 442.209629][T17282] tipc: Node identity ac14140f, cluster identity 4711 [ 442.218168][T17282] tipc: New replicast peer: 255.255.255.255 [ 442.225206][T17282] tipc: Enabled bearer , priority 10 [ 442.981919][T17318] netlink: 'syz.2.3810': attribute type 8 has an invalid length. [ 443.004196][T17318] __nla_validate_parse: 1 callbacks suppressed [ 443.004213][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 443.022483][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 443.076944][T17318] bond0: entered promiscuous mode [ 443.103867][T17318] gretap0: entered promiscuous mode [ 443.145369][T17318] bond0: left promiscuous mode [ 443.157803][T17318] gretap0: left promiscuous mode [ 443.286481][T17326] netlink: 'syz.4.3812': attribute type 2 has an invalid length. [ 443.307616][T17325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3813'. [ 443.334649][ T6399] tipc: Node number set to 2886997007 [ 443.352204][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3813'. [ 444.341085][T17349] pimreg: entered allmulticast mode [ 444.682592][T17247] Set syz1 is full, maxelem 65536 reached [ 444.693884][T17357] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 444.743058][ T6399] IPVS: starting estimator thread 0... [ 444.834902][T17360] IPVS: using max 29 ests per chain, 69600 per kthread [ 444.924885][T17368] netlink: 'syz.1.3825': attribute type 8 has an invalid length. [ 444.942525][T17357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3824'. [ 444.943142][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'. [ 444.980664][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3824'. [ 444.998923][T17342] pimreg: left allmulticast mode [ 445.071271][T17368] bond0: entered promiscuous mode [ 445.106227][T17368] bond_slave_0: entered promiscuous mode [ 445.133767][T17368] bond_slave_1: entered promiscuous mode [ 445.167642][T17368] bond0: left promiscuous mode [ 445.179526][T17368] bond_slave_0: left promiscuous mode [ 445.197411][T17368] bond_slave_1: left promiscuous mode [ 445.254002][T17371] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3827'. [ 445.427143][T17378] netlink: 'syz.0.3829': attribute type 2 has an invalid length. [ 445.682872][T17383] netlink: 'syz.4.3831': attribute type 13 has an invalid length. [ 446.038237][T17402] netlink: 'syz.1.3836': attribute type 1 has an invalid length. [ 446.083860][T17402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.099530][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 446.247706][ T198] bond2: (slave bond0): link status definitely down, disabling slave [ 446.251155][T17395] Set syz1 is full, maxelem 65536 reached [ 446.295548][ T198] bond2: now running without any active interface! [ 446.371938][T17409] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 446.428499][T17418] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3838'. [ 446.654010][T17425] IPVS: Error connecting to the multicast addr [ 447.271957][T17454] netlink: 'syz.3.3850': attribute type 2 has an invalid length. [ 447.396285][T17445] Set syz1 is full, maxelem 65536 reached [ 447.796512][T17464] pim6reg: entered allmulticast mode [ 447.817106][T17464] pim6reg: left allmulticast mode [ 448.007268][T17443] dvmrp0: entered allmulticast mode [ 448.091921][T17476] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 448.120919][T17443] __nla_validate_parse: 2 callbacks suppressed [ 448.120937][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3849'. [ 448.146837][T17476] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3860'. [ 448.195635][T17476] netlink: 'syz.0.3860': attribute type 1 has an invalid length. [ 448.482187][ T198] dvmrp0: left allmulticast mode [ 448.706831][T17488] pim6reg: entered allmulticast mode [ 448.742199][T17492] pim6reg: left allmulticast mode [ 449.358400][T17502] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.367014][T17502] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.712766][T17502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.750224][T17502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.316437][T17503] macvtap1: entered promiscuous mode [ 450.321910][T17503] vlan0: entered promiscuous mode [ 450.333416][T17503] vlan0: left promiscuous mode [ 450.365456][T17500] tipc: Enabled bearer , priority 0 [ 450.383011][T17509] syzkaller0: entered promiscuous mode [ 450.401814][T17509] syzkaller0: entered allmulticast mode [ 450.431678][T17513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 450.518913][T17519] tipc: Resetting bearer [ 450.542478][T17529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3874'. [ 450.562426][ T32] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.585018][T17529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3874'. [ 450.597393][ T32] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.624662][ T32] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.660521][ T32] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.707614][T17534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3877'. [ 450.771608][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3880'. [ 450.781163][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3880'. [ 450.792773][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3880'. [ 450.802603][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3880'. [ 450.817203][T17534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3877'. [ 450.836840][ T32] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.864765][ T32] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.885929][ T32] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.896732][ T32] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.998758][T17519] tipc: Resetting bearer [ 451.056894][T17519] tipc: Disabling bearer [ 451.168664][T17557] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 451.436376][T17568] netlink: 'syz.1.3886': attribute type 2 has an invalid length. [ 451.456004][ T8458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.647812][T17629] netlink: 'syz.4.3904': attribute type 2 has an invalid length. [ 452.676773][T17632] netlink: 'syz.0.3907': attribute type 1 has an invalid length. [ 452.763180][T17632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.789192][T17637] bond1: (slave bond0): Releasing active interface [ 452.818871][T17637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.850688][T17637] bond2: (slave bond0): making interface the new active one [ 452.876125][T17637] bond2: (slave bond0): Enslaving as an active interface with an up link [ 453.149235][T17652] veth1_to_hsr: entered promiscuous mode [ 453.168299][T17652] __nla_validate_parse: 11 callbacks suppressed [ 453.168317][T17652] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3913'. [ 453.250743][T17652] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 453.319511][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3913'. [ 453.575743][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3918'. [ 453.616262][T17667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3918'. [ 453.657222][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3918'. [ 453.689979][T17667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3918'. [ 453.939991][T17687] netlink: 'syz.2.3927': attribute type 1 has an invalid length. [ 453.949894][T17687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3927'. [ 454.023304][T17692] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3927'. [ 454.316710][T17670] Set syz1 is full, maxelem 65536 reached [ 454.657194][T17702] netlink: 'syz.2.3929': attribute type 8 has an invalid length. [ 454.677440][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3929'. [ 454.737195][T17702] bond0: entered promiscuous mode [ 454.768820][T17702] gretap0: entered promiscuous mode [ 454.780849][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'. [ 454.791498][T17702] bond0: left promiscuous mode [ 454.813776][T17702] gretap0: left promiscuous mode [ 456.423982][T17748] netlink: 'syz.4.3947': attribute type 9 has an invalid length. [ 456.596841][T17747] netlink: 'syz.4.3947': attribute type 9 has an invalid length. [ 460.760415][T17796] __nla_validate_parse: 3 callbacks suppressed [ 460.760463][T17796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3963'. [ 460.798912][T17791] 8021q: VLANs not supported on sit0 [ 461.180144][T17797] veth0: Caught tx_queue_len zero misconfig [ 462.055958][T17801] netlink: 'syz.4.3965': attribute type 1 has an invalid length. [ 462.457972][T17801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.512637][T17813] netlink: 'syz.0.3967': attribute type 1 has an invalid length. [ 462.840417][T17816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3967'. [ 462.853159][T17807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.941053][T17807] bond3: (slave bond0): making interface the new active one [ 463.029033][T17816] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3967'. [ 463.040867][T17807] bond3: (slave bond0): Enslaving as an active interface with an up link [ 463.613473][T17813] bond3: entered promiscuous mode [ 463.680278][T17813] bond3: entered allmulticast mode [ 463.729725][T17813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.026326][T17828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3972'. [ 464.887978][T17833] pim6reg: entered allmulticast mode [ 464.991703][T17835] pim6reg: left allmulticast mode [ 466.373897][T17821] Set syz1 is full, maxelem 65536 reached [ 467.940321][T17868] nbd: socks must be embedded in a SOCK_ITEM attr [ 468.109241][T17873] netlink: ct family unspecified [ 468.141094][T17873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.604084][T17865] pim6reg: entered allmulticast mode [ 468.668831][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 468.785492][T17869] pim6reg: left allmulticast mode [ 468.891792][T17872] batadv_slave_1: entered promiscuous mode [ 469.461417][T17880] pim6reg: entered allmulticast mode [ 469.580735][T17881] pim6reg: left allmulticast mode [ 471.183527][T17877] batadv_slave_1: left promiscuous mode [ 471.246747][T17892] netlink: 'syz.0.3983': attribute type 2 has an invalid length. [ 471.316710][T17897] 8021q: VLANs not supported on sit0 [ 472.259337][T17905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3988'. [ 472.360558][T17908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3988'. [ 472.722258][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 476.251122][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3994'. [ 476.501515][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 476.534023][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3998'. [ 476.577638][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 476.613232][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 476.631278][T17944] netlink: 'syz.1.3997': attribute type 19 has an invalid length. [ 476.732624][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 476.808492][T17944] netlink: 'syz.1.3997': attribute type 20 has an invalid length. [ 476.965195][T17949] netlink: 'syz.1.3997': attribute type 19 has an invalid length. [ 477.140209][T17949] netlink: 'syz.1.3997': attribute type 20 has an invalid length. [ 477.382338][T17962] x_tables: duplicate entry at hook 3 [ 477.858384][T17968] openvswitch: netlink: Missing key (keys=40, expected=100) [ 478.010752][T17968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4002'. [ 478.122069][T17972] IPv6: addrconf: prefix option has invalid lifetime [ 478.326603][T17963] pim6reg: entered allmulticast mode [ 478.520504][T17965] pim6reg: left allmulticast mode [ 480.362938][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 480.388998][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4010'. [ 480.426901][T17999] netlink: 'syz.3.4010': attribute type 7 has an invalid length. [ 480.499961][T18001] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003 [ 485.483487][ T6967] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.496175][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 485.558685][ T6967] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.596515][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4010'. [ 485.636971][ T6967] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.668624][T17999] netlink: 'syz.3.4010': attribute type 7 has an invalid length. [ 485.719428][ T6967] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.040495][T18003] netlink: 'syz.2.4011': attribute type 8 has an invalid length. [ 486.129068][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4011'. [ 486.310941][T18003] bond0: entered promiscuous mode [ 486.392834][T18003] gretap0: entered promiscuous mode [ 486.464073][T18003] bond0: left promiscuous mode [ 486.529991][T18003] gretap0: left promiscuous mode [ 489.397982][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 495.951461][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 501.769611][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 538.428373][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 593.424353][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 593.431334][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18019/1:b..l [ 593.439803][ C0] rcu: (detected by 0, t=10503 jiffies, g=92309, q=1588 ncpus=2) [ 593.447625][ C0] task:syz.1.4014 state:R running task stack:28808 pid:18019 tgid:18009 ppid:14648 task_flags:0x400040 flags:0x00080000 [ 593.462287][ C0] Call Trace: [ 593.465586][ C0] [ 593.468530][ C0] __schedule+0x17d9/0x56c0 [ 593.473063][ C0] ? __lock_acquire+0x683/0x2cf0 [ 593.478037][ C0] ? __pfx___schedule+0x10/0x10 [ 593.482921][ C0] preempt_schedule_irq+0x4d/0xa0 [ 593.487965][ C0] irqentry_exit+0x14f/0x8f0 [ 593.492577][ C0] ? trace_irq_disable+0x3b/0x140 [ 593.497624][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.503623][ C0] RIP: 0010:unwind_next_frame+0x46e/0x2550 [ 593.509453][ C0] Code: d1 48 89 15 04 5c fb 11 48 85 d2 0f 84 2e 02 00 00 48 8d 5a 04 48 89 54 24 18 4c 8d 6a 05 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 [ 593.529067][ C0] RSP: 0018:ffffc9000598f760 EFLAGS: 00000a03 [ 593.535144][ C0] RAX: 0000000000000000 RBX: ffffffff917bb614 RCX: ffffffff90ceb7e0 [ 593.543121][ C0] RDX: ffffffff917bb610 RSI: ffffffff917bb610 RDI: ffffffff8c4bd220 [ 593.551102][ C0] RBP: ffffffff89e37b79 R08: 0000000000000001 R09: 0000000000000000 [ 593.559079][ C0] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: dffffc0000000000 [ 593.567056][ C0] R13: ffffffff917bb615 R14: ffffc9000598f808 R15: ffffffff90ceb7e0 [ 593.575041][ C0] ? netlink_create+0x3c9/0x590 [ 593.579921][ C0] ? netlink_create+0x3ca/0x590 [ 593.584781][ C0] ? unwind_next_frame+0x8f/0x2550 [ 593.589901][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 593.596070][ C0] arch_stack_walk+0x11b/0x150 [ 593.600865][ C0] ? netlink_create+0x3ca/0x590 [ 593.605727][ C0] stack_trace_save+0xa9/0x100 [ 593.610503][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 593.615899][ C0] save_stack+0x122/0x230 [ 593.620244][ C0] ? __pfx_save_stack+0x10/0x10 [ 593.625107][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 593.630402][ C0] ? __slab_free+0x274/0x2c0 [ 593.635001][ C0] ? qlist_free_all+0x99/0x100 [ 593.639773][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 593.645415][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 593.650189][ C0] ? __kmalloc_noprof+0x375/0x720 [ 593.655221][ C0] ? sk_prot_alloc+0xe7/0x210 [ 593.659912][ C0] ? sk_alloc+0x3a/0x390 [ 593.664167][ C0] ? __netlink_create+0x62/0x260 [ 593.669117][ C0] ? netlink_create+0x3ca/0x590 [ 593.673983][ C0] ? page_ext_put+0x97/0xc0 [ 593.678505][ C0] __reset_page_owner+0x71/0x1f0 [ 593.683456][ C0] __free_frozen_pages+0xc1e/0xd10 [ 593.688578][ C0] ? __free_slab+0x172/0x280 [ 593.693182][ C0] __slab_free+0x274/0x2c0 [ 593.697619][ C0] ? qlist_free_all+0x8e/0x100 [ 593.702393][ C0] qlist_free_all+0x99/0x100 [ 593.706991][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 593.712113][ C0] kasan_quarantine_reduce+0x148/0x160 [ 593.717585][ C0] __kasan_kmalloc+0x22/0xb0 [ 593.722190][ C0] __kmalloc_noprof+0x375/0x720 [ 593.727046][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 593.732077][ C0] ? __kmalloc_noprof+0x1ad/0x720 [ 593.737114][ C0] ? sk_prot_alloc+0xe7/0x210 [ 593.741804][ C0] ? sk_prot_alloc+0xe7/0x210 [ 593.746501][ C0] sk_prot_alloc+0xe7/0x210 [ 593.751019][ C0] ? sk_alloc+0x27/0x390 [ 593.755278][ C0] sk_alloc+0x3a/0x390 [ 593.759365][ C0] __netlink_create+0x62/0x260 [ 593.764144][ C0] ? __pfx_genl_release+0x10/0x10 [ 593.769180][ C0] netlink_create+0x3ca/0x590 [ 593.773865][ C0] ? __pfx_genl_unbind+0x10/0x10 [ 593.778812][ C0] ? __pfx_genl_bind+0x10/0x10 [ 593.783591][ C0] __sock_create+0x4b3/0x9d0 [ 593.788201][ C0] __sys_socket+0xd6/0x1b0 [ 593.792629][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.798703][ C0] __x64_sys_socket+0x7a/0x90 [ 593.803390][ C0] do_syscall_64+0x174/0x580 [ 593.807990][ C0] ? trace_irq_disable+0x3b/0x140 [ 593.813037][ C0] ? clear_bhb_loop+0x40/0x90 [ 593.817724][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.823627][ C0] RIP: 0033:0x7f63f9d9f6c7 [ 593.828048][ C0] RSP: 002b:00007f63facbef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 593.836478][ C0] RAX: ffffffffffffffda RBX: 00007f63fa026270 RCX: 00007f63f9d9f6c7 [ 593.844460][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 593.852430][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 593.860387][ C0] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 593.868337][ C0] R13: 00007f63fa026308 R14: 00007f63fa026270 R15: 00007ffc96d4c8a8 [ 593.876294][ C0] [ 593.879298][ C0] rcu: rcu_preempt kthread starved for 9280 jiffies! g92309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 593.890399][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 593.900374][ C0] rcu: RCU grace-period kthread stack dump: [ 593.906268][ C0] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 593.919777][ C0] Call Trace: [ 593.923074][ C0] [ 593.926012][ C0] __schedule+0x17d9/0x56c0 [ 593.930531][ C0] ? __lock_acquire+0x683/0x2cf0 [ 593.935505][ C0] ? __pfx___schedule+0x10/0x10 [ 593.940378][ C0] ? schedule+0x90/0x2b0 [ 593.944635][ C0] schedule+0x164/0x2b0 [ 593.948802][ C0] schedule_timeout+0x152/0x2c0 [ 593.953660][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 593.959040][ C0] ? __pfx_process_timeout+0x10/0x10 [ 593.964334][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 593.970152][ C0] ? prepare_to_swait_event+0x322/0x350 [ 593.975713][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 593.980591][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 593.986757][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 593.992054][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 593.997275][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 594.001879][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.007098][ C0] ? __kthread_parkme+0x71/0x1f0 [ 594.012052][ C0] ? __kthread_parkme+0x196/0x1f0 [ 594.017092][ C0] kthread+0x388/0x470 [ 594.021173][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 594.026381][ C0] ? __pfx_kthread+0x10/0x10 [ 594.030986][ C0] ret_from_fork+0x514/0xb70 [ 594.035593][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 594.040716][ C0] ? __switch_to+0xc89/0x1420 [ 594.045402][ C0] ? __pfx_kthread+0x10/0x10 [ 594.050005][ C0] ret_from_fork_asm+0x1a/0x30 [ 594.054789][ C0] [ 594.057812][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 594.064141][ C0] Sending NMI from CPU 0 to CPUs 1: [ 594.069365][ C1] NMI backtrace for cpu 1 [ 594.069380][ C1] CPU: 1 UID: 0 PID: 4947 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 594.069399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.069408][ C1] RIP: 0010:__lock_acquire+0x2f1/0x2cf0 [ 594.069442][ C1] Code: 00 49 89 54 c7 18 65 8b 15 f8 16 ca 11 31 f6 85 d2 40 0f 95 c6 31 d2 41 83 be 84 0b 00 00 00 0f 95 c2 c1 e2 0d c1 e6 0e 09 d6 <41> c1 e2 0f 41 0f b7 d2 09 f2 41 83 e5 03 41 c1 e5 10 41 09 d5 8b [ 594.069456][ C1] RSP: 0018:ffffc90000a07bd8 EFLAGS: 00000006 [ 594.069471][ C1] RAX: 000000000000000f RBX: 0000000000000000 RCX: 0000000000000007 [ 594.069481][ C1] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 0000000000000000 [ 594.069492][ C1] RBP: 0000000000000003 R08: ffffffff8176f21f R09: 0000000000000000 [ 594.069502][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000000 [ 594.069513][ C1] R13: 0000000000000002 R14: ffff888036561f00 R15: ffff888036562aa0 [ 594.069525][ C1] FS: 0000000000000000(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 [ 594.069538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.069550][ C1] CR2: 00007f63facc0d58 CR3: 00000000774da000 CR4: 00000000003526f0 [ 594.069565][ C1] Call Trace: [ 594.069571][ C1] [ 594.069585][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069602][ C1] ? lock_acquire+0x106/0x350 [ 594.069625][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069639][ C1] lock_acquire+0x106/0x350 [ 594.069660][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069679][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069694][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 594.069811][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069827][ C1] unwind_next_frame+0xac/0x2550 [ 594.069842][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069859][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 594.069904][ C1] ? unwind_next_frame+0x8f/0x2550 [ 594.069921][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 594.069942][ C1] arch_stack_walk+0x11b/0x150 [ 594.069961][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 594.069982][ C1] stack_trace_save+0xa9/0x100 [ 594.070001][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 594.070021][ C1] ? stack_depot_save_flags+0x33/0x800 [ 594.070081][ C1] kasan_save_track+0x3e/0x80 [ 594.070101][ C1] ? kasan_save_track+0x3e/0x80 [ 594.070120][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 594.070140][ C1] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 594.070159][ C1] ? __alloc_skb+0x276/0x7a0 [ 594.070179][ C1] ? synproxy_send_client_synack+0x175/0xde0 [ 594.070197][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 594.070235][ C1] __kasan_slab_alloc+0x6c/0x80 [ 594.070255][ C1] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 594.070275][ C1] kmem_cache_alloc_node_noprof+0x355/0x610 [ 594.070294][ C1] ? local_lock_release+0x9c/0x160 [ 594.070313][ C1] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 594.070332][ C1] ? __alloc_skb+0x276/0x7a0 [ 594.070351][ C1] ? __alloc_skb+0x276/0x7a0 [ 594.070374][ C1] __alloc_skb+0x276/0x7a0 [ 594.070396][ C1] synproxy_send_client_synack+0x175/0xde0 [ 594.070415][ C1] ? lock_acquire+0x106/0x350 [ 594.070443][ C1] ? synproxy_pernet+0x45/0x270 [ 594.070464][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 594.070483][ C1] ? nft_xfrm_get_init+0x3a0/0x430 [ 594.070502][ C1] ? synproxy_pernet+0x45/0x270 [ 594.070523][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 594.070545][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 594.070567][ C1] ? nf_ip_checksum+0x13c/0x510 [ 594.070635][ C1] nft_synproxy_do_eval+0x335/0x550 [ 594.070656][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 594.070683][ C1] nft_do_chain+0x48d/0x1b10 [ 594.070709][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 594.070732][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 594.070799][ C1] nft_do_chain_inet+0x360/0x4b0 [ 594.070844][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 594.070864][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 594.070890][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 594.070939][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 594.070959][ C1] nf_hook_slow+0xc5/0x220 [ 594.070978][ C1] NF_HOOK+0x21f/0x3c0 [ 594.071023][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 594.071040][ C1] ? NF_HOOK+0x9e/0x3c0 [ 594.071054][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 594.071070][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 594.071089][ C1] ? ip_local_deliver+0x113/0x190 [ 594.071106][ C1] NF_HOOK+0x336/0x3c0 [ 594.071120][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.071143][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 594.071158][ C1] ? NF_HOOK+0x9e/0x3c0 [ 594.071173][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 594.071188][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 594.071203][ C1] ? ip_rcv_core+0x88d/0xd50 [ 594.071220][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 594.071235][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 594.071250][ C1] process_backlog+0xa34/0x1860 [ 594.071294][ C1] ? process_backlog+0x3c3/0x1860 [ 594.071320][ C1] __napi_poll+0xaa/0x330 [ 594.071338][ C1] net_rx_action+0x61d/0xf50 [ 594.071363][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 594.071382][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 594.071442][ C1] ? net_tx_action+0xbff/0xc30 [ 594.071464][ C1] handle_softirqs+0x225/0x840 [ 594.071484][ C1] ? __irq_exit_rcu+0xca/0x220 [ 594.071505][ C1] __irq_exit_rcu+0xca/0x220 [ 594.071523][ C1] irq_exit_rcu+0x9/0x30 [ 594.071540][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 594.071561][ C1] [ 594.071566][ C1] [ 594.071572][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.071590][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 594.071611][ C1] Code: f7 e8 cd eb d1 f5 f7 c3 00 02 00 00 74 05 e8 90 d0 fd f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d4 01 c3 f5 65 8b 05 ad 22 9b 07 85 c0 74 18 5b 41 5e e9 91 48 [ 594.071625][ C1] RSP: 0018:ffffc9001065f598 EFLAGS: 00000206 [ 594.071639][ C1] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000080000001 [ 594.071650][ C1] RDX: 0000000000000007 RSI: ffffffff8e229452 RDI: 0000000000000001 [ 594.071661][ C1] RBP: ffffc9001065f640 R08: ffffffff905767f7 R09: 1ffffffff20aecfe [ 594.071673][ C1] R10: dffffc0000000000 R11: fffffbfff20aecff R12: ffff88801d6d6cc0 [ 594.071686][ C1] R13: 0000000000000000 R14: ffff88801d6d6cc0 R15: 0000000000000000 [ 594.071704][ C1] __slab_free+0x222/0x2c0 [ 594.071727][ C1] ? qlist_free_all+0x8e/0x100 [ 594.071748][ C1] qlist_free_all+0x99/0x100 [ 594.071768][ C1] kasan_quarantine_reduce+0x148/0x160 [ 594.071789][ C1] __kasan_slab_alloc+0x22/0x80 [ 594.071811][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 594.071830][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 594.071847][ C1] ? alloc_buffer_head+0x2a/0x270 [ 594.071869][ C1] ? alloc_buffer_head+0x2a/0x270 [ 594.071887][ C1] alloc_buffer_head+0x2a/0x270 [ 594.071902][ C1] ? folio_alloc_buffers+0x17d/0x640 [ 594.071919][ C1] folio_alloc_buffers+0x19b/0x640 [ 594.071937][ C1] bdev_getblk+0x2c3/0x6e0 [ 594.071957][ C1] jbd2_journal_get_descriptor_buffer+0x147/0x420 [ 594.072002][ C1] jbd2_journal_commit_transaction+0x13eb/0x5b70 [ 594.072023][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.072058][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 594.072084][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.072106][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.072128][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.072147][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.072168][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 594.072187][ C1] ? __timer_delete_sync+0x4a3/0x520 [ 594.072210][ C1] kjournald2+0x3bc/0x750 [ 594.072232][ C1] ? __pfx_kjournald2+0x10/0x10 [ 594.072246][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 594.072264][ C1] ? __kthread_parkme+0x71/0x1f0 [ 594.072284][ C1] ? __kthread_parkme+0x196/0x1f0 [ 594.072306][ C1] kthread+0x388/0x470 [ 594.072328][ C1] ? __pfx_kjournald2+0x10/0x10 [ 594.072341][ C1] ? __pfx_kthread+0x10/0x10 [ 594.072363][ C1] ret_from_fork+0x514/0xb70 [ 594.072387][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 594.072410][ C1] ? __switch_to+0xc89/0x1420 [ 594.072430][ C1] ? __pfx_kthread+0x10/0x10 [ 594.072457][ C1] ret_from_fork_asm+0x1a/0x30 [ 594.072479][ C1]