last executing test programs: 7.612065775s ago: executing program 0 (id=3960): syz_emit_ethernet(0x32, &(0x7f0000001080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080047cf0024eb66000040029078ac1e0101ac1e010144040f240f0200001e0b90787f000001"], &(0x7f0000001180)={0x0, 0x1, [0xbf2, 0xa00, 0x33a, 0xb59]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0xa2ec9000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) pipe(&(0x7f00000000c0)) write(r3, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.968900167s ago: executing program 0 (id=3962): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) r4 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="3f0cb265933baaaaaaaaaabb0800454078ac141442e00000014e1f4e20001090780206000100"/50], 0x0) (async) close(r2) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb08004e"], 0xe6) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x9, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 6.549436537s ago: executing program 0 (id=3967): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800002102004000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c2000000bf090000000000005509010000000000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff030000850000000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 6.461349802s ago: executing program 0 (id=3970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000026000100fdff1000001400000300"], 0x18}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r2, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0xff7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r8, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0x4, @l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x5) 6.289478734s ago: executing program 1 (id=3971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) write$cgroup_int(r1, &(0x7f0000000200)=0x1000000000000004, 0xae331) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.288719467s ago: executing program 0 (id=3973): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x8, 'macsec0\x00', {'wlan1\x00'}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140), &(0x7f0000000240)=0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.06630729s ago: executing program 1 (id=3975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r1, &(0x7f0000000240)="b1", 0x1, 0x4040044, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000000000001"], 0x20) 5.973609959s ago: executing program 0 (id=3976): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="8c24a9134d094eb8a4d75f69e1331bed6665d5bd669dad9c05ae9b617becd2c302a00647d8200a29b7f420fdac02e62831216407e5b5ce73fadac1e30305dc76d5b0b23934980818fef2af7412d1bf0969bdeed276499dadd281b34d41e2609756beaf8feb11dd6b9f7168909fa69e7455c297f7140481818df3f8578e27b235b11a8ab002ad36000000000000000000000000000000dbc634ab769d88d806aa8fdda9ac9527d4a0ae6c87a59e630005f4e89a6d55657ddb475651c4d5ec46a1f28f8918dc89667089c4bca16f9c2f98ace51d66fb53e7c8a0e6c528ad455e4d5b2f7a04d1da4e619059534f2a751e7528b426f555c7e33e859b6c"], 0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="b9ff03076804268c989e140088a8", 0x0, 0x4ff, 0x60000000, 0x4a, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$bt_hci(r2, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) listen(r1, 0x100101) accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x20, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x20}}, 0x40) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_rdma(0x10, 0x3, 0x14) connect(r8, &(0x7f0000001e40)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}], 0x5, 0xc0) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r6, 0xc038943b, &(0x7f0000000140)={0x1, 0x28, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x114f, &(0x7f0000000cc0)={@local, @empty, @val, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "d4852e", 0x1111, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[@hopopts={0x3b, 0xc, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0x9, 0x5a, "f843440c4a1c39232db467f9b0b2054a286c1c2ee80bf4a8325a032056d2a53904ce02b65708bd089d8af20dc263b1826870658ed35acc49a255a6f87de55135172f66ecefe638821ec14c72cefaafd2c491a86d9e28bf02918f"}]}, @dstopts={0x6c, 0x202, '\x00', [@generic={0x9, 0x1000, "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"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfffa}, @jumbo={0xc2, 0x4, 0x10000}]}, @dstopts={0xa4, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0xc0}]}, @hopopts={0x2, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3}]}, @hopopts={0x11, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @local}]}, @fragment={0x3c, 0x0, 0x10, 0x0, 0x0, 0x18, 0x66}], @payload_mcast={{{{{{0x31, 0x0, 0x1, 0x0, 0x0, 0xb, 0x1, 0x2, 0x7ff, 0x0, 0x1, 0x4, 0x4, 0x1, 0x10, 0x12b4, 0x3, 0x4e20, 0x4e22}, 0x3, 0x2}, 0x4, 0x2}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 5.758250301s ago: executing program 1 (id=3979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x20040011) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x29, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000044}, 0x20001004) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r10, 0x29, 0x37, 0x0, 0x0) bind$bt_l2cap(r9, 0x0, 0x0) listen(r9, 0x0) setsockopt$sock_int(r9, 0x1, 0x2b, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0x881) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read(r11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="d500000000000200140012000c000100627269646765"], 0x34}}, 0x0) 4.885652205s ago: executing program 1 (id=3987): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r4, 0x25, 0x8, @void}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="bb46cca458feb9cc274958d93e8d767cc714e5fcf2e723d575d4e845d64ed5e96ed23121f35e3c194e5b031c5b0b1ab3eca0df50c632b198af2276444fa56304aeac26a9ada21eda799dad55e866e38b3e7bed5e8fcea74a0f4da039792bec5763b666ca1692dc4ebe8c77de086983ff78d5ceef8ed3749c7cf23c061b6f7b55e3eca66649dc1f9bbbda78de069ca5f82821f73ac67c", 0x96}], 0x1, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x50}, 0x4000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4840) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff0000000008000800001b01"], 0x34}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) write$bt_hci(r7, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112ca000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.919118272s ago: executing program 1 (id=3992): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000108000200000000000000000000ccbdcbd132cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x14, r7, 0x1, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 2.910906972s ago: executing program 1 (id=3999): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000c3"], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x80000000000, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f00000004c0)={0x24a7, 0x8f, 0x1ff, 0x71a, 0xb2a, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x7ff, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 2.791515549s ago: executing program 2 (id=4001): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28f2e047afd25fe1032b9a816d7c010026be590c650acabd7000fddbdf2506000000140002000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xbef5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {0x0, 0x4}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) sendmmsg$alg(r6, &(0x7f00000009c0), 0x0, 0x24000040) recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) sendmsg$inet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100009452e3902d0da1d28e8ebde2136f4b6d26aa5dd3bf0328d165436accb03f94db70", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)=""/60, &(0x7f0000000380)=0x3c) socket$l2tp(0x2, 0x2, 0x73) 2.536343175s ago: executing program 3 (id=4003): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x8b, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 2.305630971s ago: executing program 3 (id=4004): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000280)=ANY=[], 0x8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0), 0x4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x2000c094) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.200720088s ago: executing program 3 (id=4005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xb4}}, 0x0) 2.155563468s ago: executing program 2 (id=4006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008054) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="70000945fc832edab1153dad2e1e20ee7681983a4108f2509030a6853246cc"], 0xc) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) write$nci(r3, &(0x7f0000000dc0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6}, 0x5) close(0x3) r6 = socket(0x1, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x9f, 0x0, &(0x7f0000001180)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240", @ANYRESDEC], 0x60}}, 0x0) sendmsg$netlink(r9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) 1.993058945s ago: executing program 3 (id=4007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="49000000010001", 0x7) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x24, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x957, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x2, 0x8, 0xb, 0x2, 0xfffffffffffffffc}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x2, 0x5, 0x50, 0x8}, @jmp={0x5, 0x1, 0x5, 0x2, 0xb, 0xffffffffffffffe0}, @generic={0xd, 0x2, 0x9, 0x1, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a09}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0xd3, &(0x7f0000000680)=""/211, 0x40f00, 0x21, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xa, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r0, r0, r0, r0], &(0x7f00000005c0)=[{0x4, 0x5, 0x2}, {0x4, 0x3, 0xd, 0xd}, {0x1, 0x2, 0x10, 0x6}], 0x10, 0x6}, 0x94) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r9, r10, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000, 0x1}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x53, 0x1000004, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x10, 0x8, 0xb4, 0xcfe}}) 1.821295905s ago: executing program 2 (id=4009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x24040054) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) unshare(0x2040400) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1}]}}, 0x0, 0x26}, 0x28) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) getsockopt$bt_hci(r2, 0x0, 0x29, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000005c0)={0x0, 0xf8e, 0x5, 0x5, 0x9, 0x0, [{0xffffffffffffffff, 0x4, 0xfffffffffffffffe, '\x00', 0xd01}, {0x1000, 0x3, 0x80000001, '\x00', 0x2302}, {0x7ff, 0x7f, 0x1, '\x00', 0x1106}, {0x3, 0x2, 0x589d, '\x00', 0x8}, {0x4, 0xffffffffffffffff, 0x7a, '\x00', 0x800}, {0x38, 0x6, 0xd, '\x00', 0xc}, {0x9, 0x3, 0x61c3, '\x00', 0x4}, {0x2c4c, 0x5, 0x9, '\x00', 0x400}, {0x3ff, 0xb6, 0xdd71, '\x00', 0x180}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0xffffffffffffff99, 0x0}}, 0x10) 1.675310823s ago: executing program 4 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000026000100fdff1000001400000300"], 0x18}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r2, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xf00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r8, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x18, 0x4, @l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x5) 1.601346494s ago: executing program 2 (id=4011): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="4504ea1a3723fad9167d4dd30024a36ba2633ef2a6e1603b2d356a600bbc4e744634caac6e796ff06b6aad91c19634a4a371608a5adb2aba342db64476cf5f74e351b7344398af793d0beb9c16612a9f4df787293be4e60a6cf5b2316532ed6ec84eb2b0a97215b12633a8f4c2aa05ebc225d466daea122fa2fa95dace32784f5585deaa2252ad879ddfe2ca8a665226261e46768a4e9212d0bacbbefabe0f967492560f2029bbc2ce1fd9ea321f686e0f256653cf1bdef6a65dea7a65635afb19cf61722d6a50dd565197a162d7a17199b051b500b650cf602bee78342419ace9f844ab1d223f97cfb396111834aaac4d", 0xf1}], 0x1, 0x0, 0x158}}], 0x1, 0x40804) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0011800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x101, 0x70bd28, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x8, 0xfe, 0x0, 0xfd, 0x2, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x2fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f0000000000)=0x8, 0xffb3) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) pread64(r5, &(0x7f0000000080)=""/227, 0xe3, 0x6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 1.225846893s ago: executing program 4 (id=4012): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000015ed5efb00"/28], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004000015"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x10000, 0x1}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0xff80, 0x9, 0x0, 0x4, 0x9, 0x3, 0x6, 0x8, r9}, &(0x7f0000000440)=0x20) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="74e9f600d6abfb8d76a098c41a7fca7b553b2dd48f355c1ec92ae468e0d28e001fd1990023c60bd3c8f636838b6cb67c862ba50aa90d189f2e974f90b62183b59705a81147bffda89466e7692aa361e7ef700bf3051fac716f0a6f5b4702f7d576a33304ce5c8d2603f1f69c2ee48a3638f800938a24eb7529b1def8ae9734d08516cf9a868f65ec79cac5fbd4d243a68758f8048d9230867d59b219e4769bc0381465e3e7e682fe6b0e0d47ee6d4bd25840c6a8e825e12953297e014b63771e241a", @ANYRES16=r10, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x174}}, 0x0) 1.13439244s ago: executing program 3 (id=4013): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r3, 0x25, 0x8, @void}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="bb46cca458feb9cc274958d93e8d767cc714e5fcf2e723d575d4e845d64ed5e96ed23121f35e3c194e5b031c5b0b1ab3eca0df50c632b198af2276444fa56304aeac26a9ada21eda799dad55e866e38b3e7bed5e8fcea74a0f4da039792bec5763b666ca1692dc4ebe8c77de086983ff78d5ceef8ed3749c7cf23c061b6f7b55e3eca66649dc1f9bbbda78de069ca5f82821f73ac67c", 0x96}], 0x1, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}], 0x50}, 0x4000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4840) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff0000000008000800001b01"], 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x2f4}]}, 0x34}}, 0x0) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112ca000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.132434819s ago: executing program 4 (id=4014): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 1.076090339s ago: executing program 4 (id=4015): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4841) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd27, 0x3}}]}, 0x148}}, 0x0) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.006496982s ago: executing program 2 (id=4016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e6574646f7673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000000) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfd9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x2882, 0x10401}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e6574646f7673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000000) (async) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfd9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x2882, 0x10401}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) 989.620904ms ago: executing program 3 (id=4017): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xc, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0xfff8, 0xffff, 0x4, 0xffff, 0x2, 0x9, 0x0]}, &(0x7f0000000140)=0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 677.444844ms ago: executing program 2 (id=4018): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x7, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r9], 0x20}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newlink={0xcc, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_PORT_SELF={0x48, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "27dee6ce8832d57ec96226c315271878"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "38bab18e08ab53864436a4583b6d0558"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e42b179f7efb910e4b8b0326974cadc6"}, @IFLA_PORT_VF={0x8, 0x1, 0x6c3}]}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0xcc}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0000000010000000000000000000933372b5320c72b65e1c3f54acdf9a327aca4eeb322349d960436f7db3c66f7f76639ed1e292843325f4519d2015b81eaabb6de178e4b444697e52470927257f487950eb52faf0df213b622cb7473c0c2ffac845855248aeaf7eb70bcc5a8830a625e1a7d14596f0e406885d21116907c34ca0fd0e35725a4fd89f44a75d0826ade5b34a8693983af420a750af03fee31669465e90b1", @ANYRES16=0x0, @ANYBLOB="010028bd70004000000005000000080009000200000008000c00a80a000008000b0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x88, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x43}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 106.330274ms ago: executing program 4 (id=4019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008054) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="70000945fc832edab1153dad2e1e20ee7681983a4108f2509030a6853246cc"], 0xc) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) write$nci(r3, &(0x7f0000000dc0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6}, 0x5) close(0x3) r6 = socket(0x1, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x9f, 0x0, &(0x7f0000001180)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240", @ANYRESDEC], 0x60}}, 0x0) sendmsg$netlink(r9, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=4020): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100020000000000fdffffff85000000b5000000850000008800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000380), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x868, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x83c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_BURST={0x8, 0x6, 0xe4f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x868}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r13, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): rface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.906328][T16622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.936018][T14104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.137366][T14098] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.238706][T16721] No such timeout policy "syz1" [ 393.245280][T16622] hsr_slave_0: entered promiscuous mode [ 393.258878][T16622] hsr_slave_1: entered promiscuous mode [ 393.273899][T16622] debugfs: 'hsr0' already exists in 'hsr' [ 393.288257][T16622] Cannot create hsr debugfs directory [ 393.467845][T16726] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 393.521844][T16726] __nla_validate_parse: 2 callbacks suppressed [ 393.521862][T16726] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3123'. [ 393.525359][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 393.775469][ T5839] Bluetooth: hci3: command tx timeout [ 393.854049][T14092] hsr_slave_0: left promiscuous mode [ 393.860321][T14092] hsr_slave_1: left promiscuous mode [ 393.869769][T14092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.878842][T14092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.087845][T14092] team0 (unregistering): Port device 76žÿ removed [ 394.113134][T14092] team0 (unregistering): Port device team_slave_0 removed [ 394.299636][T16752] pim6reg: entered allmulticast mode [ 394.321828][T16752] pim6reg: left allmulticast mode [ 394.611098][T16767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.631083][T16770] No such timeout policy "syz1" [ 394.851050][T16779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3137'. [ 395.012859][T16781] netlink: 'syz.1.3138': attribute type 1 has an invalid length. [ 395.039023][T16781] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3138'. [ 395.851792][ T5839] Bluetooth: hci3: command tx timeout [ 395.874879][T14092] IPVS: stop unused estimator thread 0... [ 395.877507][T16821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3142'. [ 395.910354][T16822] netlink: 'syz.4.3144': attribute type 3 has an invalid length. [ 395.955303][T16622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.006843][T16622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.035690][T16622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.182181][T16622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.613667][T16622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.787633][T16622] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.926276][T14106] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.933507][T14106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.943216][T16871] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3154'. [ 396.978100][T14096] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.985323][T14096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.172894][T16877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3156'. [ 397.303374][T16882] veth1_to_bond: entered allmulticast mode [ 397.348178][T16848] pim6reg: entered allmulticast mode [ 397.400915][T16848] pim6reg: left allmulticast mode [ 397.580053][T16888] lo speed is unknown, defaulting to 1000 [ 397.646287][T16902] bond1: option mode: unable to set because the bond device has slaves [ 397.688414][T16900] bond1: option mode: unable to set because the bond device has slaves [ 397.727515][T16622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.782094][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3162'. [ 397.859534][T16622] veth0_vlan: entered promiscuous mode [ 397.885869][T16622] veth1_vlan: entered promiscuous mode [ 397.896467][T16912] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3163'. [ 397.931701][ T5839] Bluetooth: hci3: command tx timeout [ 397.946758][T16622] veth0_macvtap: entered promiscuous mode [ 397.958082][T16622] veth1_macvtap: entered promiscuous mode [ 397.985794][T16622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.001795][T16622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.019589][T14092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.043276][T14092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.068359][T14092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.125346][T14092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.279347][T14102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.309265][T14102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.436606][T14108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.455661][T14108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.156623][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 399.170696][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 399.180692][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 399.191207][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 399.202000][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.368084][T16952] lo speed is unknown, defaulting to 1000 [ 399.460395][T16888] veth1_to_bond: left allmulticast mode [ 399.495807][T16959] sctp: [Deprecated]: syz.4.3174 (pid 16959) Use of int in maxseg socket option. [ 399.495807][T16959] Use struct sctp_assoc_value instead [ 399.572591][T16959] sctp: [Deprecated]: syz.4.3174 (pid 16959) Use of int in maxseg socket option. [ 399.572591][T16959] Use struct sctp_assoc_value instead [ 399.622194][T16964] FAULT_INJECTION: forcing a failure. [ 399.622194][T16964] name failslab, interval 1, probability 0, space 0, times 0 [ 399.635211][T16964] CPU: 1 UID: 0 PID: 16964 Comm: syz.3.3175 Not tainted syzkaller #0 PREEMPT(full) [ 399.635240][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.635254][T16964] Call Trace: [ 399.635263][T16964] [ 399.635272][T16964] dump_stack_lvl+0xe8/0x150 [ 399.635321][T16964] should_fail_ex+0x412/0x560 [ 399.635355][T16964] should_failslab+0xa8/0x100 [ 399.635382][T16964] ? skb_clone+0x212/0x3a0 [ 399.635485][T16964] kmem_cache_alloc_noprof+0x87/0x650 [ 399.635507][T16964] ? lock_acquire+0xf0/0x2e0 [ 399.635549][T16964] skb_clone+0x212/0x3a0 [ 399.635569][T16964] ? dev_queue_xmit_nit+0x268/0xad0 [ 399.635649][T16964] dev_queue_xmit_nit+0x29a/0xad0 [ 399.635681][T16964] ? dev_queue_xmit_nit+0x2d/0xad0 [ 399.635723][T16964] dev_hard_start_xmit+0x1cf/0x870 [ 399.635763][T16964] __dev_queue_xmit+0x1557/0x3870 [ 399.635785][T16964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.635819][T16964] ? __dev_queue_xmit+0x28b/0x3870 [ 399.635853][T16964] ? __pfx___dev_queue_xmit+0x10/0x10 [ 399.635886][T16964] ? __copy_skb_header+0xa3/0x4a0 [ 399.635907][T16964] ? __asan_memcpy+0x40/0x70 [ 399.635946][T16964] ? skb_clone+0x246/0x3a0 [ 399.635972][T16964] __netlink_deliver_tap+0x5ad/0x850 [ 399.636061][T16964] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.636092][T16964] netlink_deliver_tap+0x19c/0x1b0 [ 399.636123][T16964] netlink_unicast+0x7e3/0x9b0 [ 399.636158][T16964] ? __pfx_netlink_unicast+0x10/0x10 [ 399.636187][T16964] ? netlink_sendmsg+0x650/0xb40 [ 399.636213][T16964] ? skb_put+0x11b/0x210 [ 399.636249][T16964] netlink_sendmsg+0x813/0xb40 [ 399.636289][T16964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.636322][T16964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 399.636352][T16964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.636380][T16964] ____sys_sendmsg+0x972/0x9f0 [ 399.636411][T16964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.636442][T16964] ? import_iovec+0x73/0xa0 [ 399.636479][T16964] ___sys_sendmsg+0x2a5/0x360 [ 399.636507][T16964] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.636567][T16964] ? __fget_files+0x2a/0x420 [ 399.636598][T16964] ? __fget_files+0x3a0/0x420 [ 399.636640][T16964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 399.636664][T16964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.636696][T16964] ? __pfx_ksys_write+0x10/0x10 [ 399.636732][T16964] do_syscall_64+0x14d/0xf80 [ 399.636762][T16964] ? trace_irq_disable+0x3b/0x150 [ 399.636792][T16964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.636813][T16964] ? clear_bhb_loop+0x40/0x90 [ 399.636840][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.636862][T16964] RIP: 0033:0x7ff1bf79c799 [ 399.636881][T16964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.636899][T16964] RSP: 002b:00007ff1c05cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.636922][T16964] RAX: ffffffffffffffda RBX: 00007ff1bfa15fa0 RCX: 00007ff1bf79c799 [ 399.636938][T16964] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000013 [ 399.636950][T16964] RBP: 00007ff1c05cf090 R08: 0000000000000000 R09: 0000000000000000 [ 399.636964][T16964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.636982][T16964] R13: 00007ff1bfa16038 R14: 00007ff1bfa15fa0 R15: 00007ffed8a21a08 [ 399.637016][T16964] [ 400.150719][T16948] pim6reg: entered allmulticast mode [ 400.158645][T16948] pim6reg: left allmulticast mode [ 400.328474][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 400.570419][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3181'. [ 400.595923][T16993] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3183'. [ 400.667719][T16952] chnl_net:caif_netlink_parms(): no params data found [ 400.722907][T16999] hsr0: entered promiscuous mode [ 400.735292][T16998] hsr0: left promiscuous mode [ 400.785276][T16952] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.792784][T16952] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.801185][T16952] bridge_slave_0: entered allmulticast mode [ 400.809159][T16952] bridge_slave_0: entered promiscuous mode [ 400.818444][T16952] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.826004][T16952] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.833481][T16952] bridge_slave_1: entered allmulticast mode [ 400.841979][T16952] bridge_slave_1: entered promiscuous mode [ 400.887344][T16952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.904853][T16952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.953916][T16952] team0: Port device team_slave_0 added [ 400.962999][T16952] team0: Port device team_slave_1 added [ 401.073341][T16952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.085682][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.118092][T16952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.143698][T16952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.150765][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.178022][T16952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.228489][T17014] geneve3: entered promiscuous mode [ 401.234146][T17014] geneve3: entered allmulticast mode [ 401.273115][T16952] hsr_slave_0: entered promiscuous mode [ 401.279788][T16952] hsr_slave_1: entered promiscuous mode [ 401.286198][T16952] debugfs: 'hsr0' already exists in 'hsr' [ 401.295306][ T5839] Bluetooth: hci0: command tx timeout [ 401.321391][T16952] Cannot create hsr debugfs directory [ 401.434430][T17018] xt_bpf: check failed: parse error [ 401.444780][T17020] No such timeout policy "syz1" [ 401.464802][T17018] lo speed is unknown, defaulting to 1000 [ 401.483884][T17023] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.491471][T17023] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.499726][T17023] bridge0: entered allmulticast mode [ 401.509943][T17018] lo speed is unknown, defaulting to 1000 [ 401.543550][T17018] lo speed is unknown, defaulting to 1000 [ 401.574246][T17018] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 401.627152][T17024] bridge_slave_1: left allmulticast mode [ 401.635246][T17024] bridge_slave_1: left promiscuous mode [ 401.641019][T17024] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.653432][T17024] bridge_slave_0: left allmulticast mode [ 401.659126][T17024] bridge_slave_0: left promiscuous mode [ 401.665256][T17024] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.728738][T17018] lo speed is unknown, defaulting to 1000 [ 401.803925][T17029] syzkaller0: entered promiscuous mode [ 401.809457][T17029] syzkaller0: entered allmulticast mode [ 403.053878][T17018] lo speed is unknown, defaulting to 1000 [ 403.195976][T17018] lo speed is unknown, defaulting to 1000 [ 403.215416][T17018] lo speed is unknown, defaulting to 1000 [ 403.235569][T16952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.257582][T17018] lo speed is unknown, defaulting to 1000 [ 403.277064][T17018] lo speed is unknown, defaulting to 1000 [ 403.312318][T16952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.334550][T17018] lo speed is unknown, defaulting to 1000 [ 403.343557][T17018] lo speed is unknown, defaulting to 1000 [ 403.378341][ T5839] Bluetooth: hci0: command tx timeout [ 403.402355][T16952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.494808][T16952] bond0: (slave netdevsim0): Releasing backup interface [ 403.507264][T16952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.567108][T17047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3200'. [ 403.579903][T17047] Bluetooth: MGMT ver 1.23 [ 403.740708][T16952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 403.768215][T17057] netlink: 'syz.4.3204': attribute type 15 has an invalid length. [ 403.785454][T16952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 403.798222][T17057] tipc: Enabled bearer , priority 0 [ 403.812956][T17057] syzkaller0: entered promiscuous mode [ 403.818461][T17057] syzkaller0: entered allmulticast mode [ 403.837025][T16952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 403.857108][T16952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 403.892795][T17057] tipc: Resetting bearer [ 403.914670][T17056] tipc: Resetting bearer [ 403.930015][T17071] netlink: 'syz.2.3208': attribute type 6 has an invalid length. [ 403.938104][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'. [ 403.954752][T17056] tipc: Disabling bearer [ 404.158801][T16952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.218930][T17078] pim6reg: entered allmulticast mode [ 404.244862][T17078] pim6reg: left allmulticast mode [ 404.325125][T16952] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.355051][T14105] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.362266][T14105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.522045][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.529262][T14092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.035271][T16952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.061227][T17114] netlink: 'syz.3.3224': attribute type 13 has an invalid length. [ 405.126269][T17117] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3224'. [ 405.137808][T17117] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 405.343170][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 405.457130][ T5839] Bluetooth: hci0: command tx timeout [ 405.480757][T17114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.520294][T17106] syz_tun: entered promiscuous mode [ 405.526472][T17106] macvtap1: entered promiscuous mode [ 405.537546][T17106] macvtap1: entered allmulticast mode [ 405.550663][T17106] syz_tun: entered allmulticast mode [ 405.662600][T16952] veth0_vlan: entered promiscuous mode [ 405.678102][T16952] veth1_vlan: entered promiscuous mode [ 405.745784][T16952] veth0_macvtap: entered promiscuous mode [ 405.756005][T17132] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3230'. [ 405.775085][T16952] veth1_macvtap: entered promiscuous mode [ 405.809216][T16952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.835381][T16952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.859278][T14105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.877379][T14105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.897915][T14105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.917125][T14105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.975023][T17136] lo speed is unknown, defaulting to 1000 [ 406.035951][T14105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.057013][T14105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.143986][T14096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.170271][T14096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.374946][T17155] ipt_rpfilter: unknown options [ 406.422845][T17151] xt_CT: No such helper "syz1" [ 406.827537][T17148] lo speed is unknown, defaulting to 1000 [ 406.842417][T17136] lo speed is unknown, defaulting to 1000 [ 406.870491][T17169] FAULT_INJECTION: forcing a failure. [ 406.870491][T17169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.911428][T17169] CPU: 1 UID: 0 PID: 17169 Comm: syz.1.3239 Not tainted syzkaller #0 PREEMPT(full) [ 406.911457][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.911471][T17169] Call Trace: [ 406.911479][T17169] [ 406.911488][T17169] dump_stack_lvl+0xe8/0x150 [ 406.911523][T17169] should_fail_ex+0x412/0x560 [ 406.911557][T17169] _copy_to_user+0x31/0xb0 [ 406.911592][T17169] simple_read_from_buffer+0xe1/0x170 [ 406.911627][T17169] proc_fail_nth_read+0x1bb/0x230 [ 406.911661][T17169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.911694][T17169] ? rw_verify_area+0x2a6/0x4d0 [ 406.911719][T17169] ? __lock_acquire+0x6b5/0x2cf0 [ 406.911751][T17169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.911783][T17169] vfs_read+0x20c/0xa70 [ 406.911802][T17169] ? fdget_pos+0x246/0x320 [ 406.911838][T17169] ? __pfx___mutex_lock+0x10/0x10 [ 406.911873][T17169] ? __pfx_vfs_read+0x10/0x10 [ 406.911896][T17169] ? __fget_files+0x2a/0x420 [ 406.911931][T17169] ? __fget_files+0x3a0/0x420 [ 406.911960][T17169] ? __fget_files+0x2a/0x420 [ 406.912000][T17169] ksys_read+0x150/0x270 [ 406.912024][T17169] ? __pfx_ksys_read+0x10/0x10 [ 406.912059][T17169] do_syscall_64+0x14d/0xf80 [ 406.912088][T17169] ? trace_irq_disable+0x3b/0x150 [ 406.912117][T17169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.912139][T17169] ? clear_bhb_loop+0x40/0x90 [ 406.912165][T17169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.912185][T17169] RIP: 0033:0x7f6fddd5cfce [ 406.912204][T17169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 406.912221][T17169] RSP: 002b:00007f6fdeca9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.912244][T17169] RAX: ffffffffffffffda RBX: 00007f6fdecaa6c0 RCX: 00007f6fddd5cfce [ 406.912260][T17169] RDX: 000000000000000f RSI: 00007f6fdecaa0a0 RDI: 0000000000000004 [ 406.912273][T17169] RBP: 00007f6fdecaa090 R08: 0000000000000000 R09: 0000000000000000 [ 406.912285][T17169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.912298][T17169] R13: 00007f6fde016038 R14: 00007f6fde015fa0 R15: 00007fff99db9288 [ 406.912332][T17169] [ 407.428458][T17148] lo speed is unknown, defaulting to 1000 [ 407.538000][ T5839] Bluetooth: hci0: command tx timeout [ 407.775583][T17184] lo speed is unknown, defaulting to 1000 [ 408.359043][T17184] lo speed is unknown, defaulting to 1000 [ 408.575779][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3251'. [ 409.085354][T17242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3257'. [ 409.534270][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 409.591241][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.601192][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.609376][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.618910][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.626768][ T51] Bluetooth: hci0: command tx timeout [ 409.644719][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.672563][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3262'. [ 409.739508][T17257] lo speed is unknown, defaulting to 1000 [ 409.758293][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 410.000772][T17271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3266'. [ 410.032434][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 410.123664][ T5827] syz_tun (unregistering): left allmulticast mode [ 410.202462][T17278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3269'. [ 410.250743][T17256] lo speed is unknown, defaulting to 1000 [ 410.258553][T17257] lo speed is unknown, defaulting to 1000 [ 410.277597][T14105] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.290441][T14105] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.399245][T14105] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.421480][T14105] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.498400][T14105] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.509722][T14105] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.560142][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.567861][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.603164][T17285] bridge0: entered allmulticast mode [ 410.672305][T14105] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.701404][T14105] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.747155][T17285] bridge_slave_1: left allmulticast mode [ 410.760691][T17285] bridge_slave_1: left promiscuous mode [ 410.775367][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.785498][T17285] bridge_slave_0: left allmulticast mode [ 410.791195][T17285] bridge_slave_0: left promiscuous mode [ 410.812227][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.880940][T17256] lo speed is unknown, defaulting to 1000 [ 410.920938][T17293] lo speed is unknown, defaulting to 1000 [ 411.031610][T17257] chnl_net:caif_netlink_parms(): no params data found [ 411.478979][T17257] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.494895][T17257] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.502568][T17257] bridge_slave_0: entered allmulticast mode [ 411.510854][T17257] bridge_slave_0: entered promiscuous mode [ 411.547577][T17257] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.561633][T17257] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.574892][T17257] bridge_slave_1: entered allmulticast mode [ 411.584775][T17257] bridge_slave_1: entered promiscuous mode [ 411.695764][ T5839] Bluetooth: hci1: command tx timeout [ 412.117133][T14105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.128480][T14105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.138657][T14105] bond0 (unregistering): Released all slaves [ 412.151277][T14105] bond1 (unregistering): (slave lo): Releasing backup interface [ 412.159426][T14105] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 412.174529][T14105] bond1 (unregistering): Released all slaves [ 412.190401][T14105] bond2 (unregistering): Released all slaves [ 412.205694][T14105] bond3 (unregistering): Released all slaves [ 412.220193][T14105] bond4 (unregistering): Released all slaves [ 412.238617][T14105] bond5 (unregistering): Released all slaves [ 412.259145][T14105] bond6 (unregistering): Released all slaves [ 412.274984][T17293] lo speed is unknown, defaulting to 1000 [ 412.297306][T17257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.346786][ T1218] lo speed is unknown, defaulting to 1000 [ 412.358835][ T7759] lo speed is unknown, defaulting to 1000 [ 412.366923][ T7759] syz2: Port: 1 Link DOWN [ 412.405548][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3283'. [ 412.419896][T17257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.453458][T14105] tipc: Disabling bearer [ 412.474451][T14105] tipc: Left network mode [ 412.598214][T17257] team0: Port device team_slave_0 added [ 412.664643][T17257] team0: Port device team_slave_1 added [ 412.981980][T17257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.020340][T17257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.101381][T17257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.265524][T17257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.272865][T17257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.320839][T17257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.338357][T17338] pim6reg: entered allmulticast mode [ 413.344738][T17338] pim6reg: left allmulticast mode [ 413.356169][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3290'. [ 413.634873][T17257] hsr_slave_0: entered promiscuous mode [ 413.666094][T17257] hsr_slave_1: entered promiscuous mode [ 413.691227][T17257] debugfs: 'hsr0' already exists in 'hsr' [ 413.707904][T17257] Cannot create hsr debugfs directory [ 413.773933][ T5839] Bluetooth: hci1: command tx timeout [ 413.783290][T17353] lo speed is unknown, defaulting to 1000 [ 413.900742][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 414.016085][T17363] syzkaller1: entered allmulticast mode [ 414.027922][T17371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.131806][T14105] batman_adv: batadv0: Interface deactivated: macsec2 [ 414.242750][T14105] batman_adv: batadv0: Removing interface: macsec2 [ 414.306599][T17353] lo speed is unknown, defaulting to 1000 [ 414.846612][T14105] hsr_slave_0: left promiscuous mode [ 414.853508][T14105] hsr_slave_1: left promiscuous mode [ 414.859578][T14105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.876099][T14105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.895553][T14105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.904688][T14105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.921664][T14105] veth0: left promiscuous mode [ 414.933877][T14105] veth1_to_team: left promiscuous mode [ 414.948889][T14105] veth0_macvtap: left promiscuous mode [ 414.964073][T14105] veth1_vlan: left promiscuous mode [ 414.976319][T14105] veth0_vlan: left promiscuous mode [ 415.241756][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 415.400509][T14105] team0 (unregistering): Port device team_slave_1 removed [ 415.424310][T14105] team0 (unregistering): Port device team_slave_0 removed [ 415.852003][ T5839] Bluetooth: hci1: command tx timeout [ 416.198821][T17425] netlink: 'syz.1.3305': attribute type 30 has an invalid length. [ 416.217965][T17425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3305'. [ 416.313791][T17425] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 416.339840][T17425] bond1 (unregistering): Released all slaves [ 416.424290][T17257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.495701][T14105] IPVS: stop unused estimator thread 0... [ 416.512007][T17257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.557726][T17257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.605458][T17257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.663646][T17408] pim6reg: entered allmulticast mode [ 416.708316][T17408] pim6reg: left allmulticast mode [ 416.751966][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 416.913231][T17454] vlan2: entered allmulticast mode [ 416.918412][T17454] bridge0: entered allmulticast mode [ 416.942229][T17455] bridge0: port 1(erspan0) entered blocking state [ 416.948863][T17455] bridge0: port 1(erspan0) entered disabled state [ 416.964818][T17455] erspan0: entered allmulticast mode [ 416.987675][T17455] erspan0: entered promiscuous mode [ 417.001493][T17455] bridge0: port 1(erspan0) entered blocking state [ 417.008040][T17455] bridge0: port 1(erspan0) entered forwarding state [ 417.157215][T17257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.248350][T17257] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.269432][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.276667][T14108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.329867][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.337104][T14108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.390726][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 417.436912][T17478] ipt_rpfilter: unknown options [ 417.934077][ T5839] Bluetooth: hci1: command tx timeout [ 418.014579][T17257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.048319][T17496] pim6reg: entered allmulticast mode [ 418.055229][T17496] pim6reg: left allmulticast mode [ 418.361003][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3326'. [ 419.111176][T17257] veth0_vlan: entered promiscuous mode [ 419.129266][T17257] veth1_vlan: entered promiscuous mode [ 419.205712][T17257] veth0_macvtap: entered promiscuous mode [ 419.227212][T17257] veth1_macvtap: entered promiscuous mode [ 419.247296][T17257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.261000][T17257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.299437][T14092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.321760][T14092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.344146][T14092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.364815][T17561] ipt_rpfilter: unknown options [ 419.376476][T14092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.792457][T17567] pim6reg: entered allmulticast mode [ 419.801553][T17567] pim6reg: left allmulticast mode [ 420.043114][T17553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.140064][T14096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.164528][T14096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.212383][T14098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.220253][T14098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.389953][T17583] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3259'. [ 420.514595][T17590] No such timeout policy "syz1" [ 420.554958][T17591] hsr0: entered promiscuous mode [ 421.300688][T17626] lo speed is unknown, defaulting to 1000 [ 422.189945][T17658] FAULT_INJECTION: forcing a failure. [ 422.189945][T17658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.205056][T17658] CPU: 1 UID: 0 PID: 17658 Comm: syz.2.3363 Not tainted syzkaller #0 PREEMPT(full) [ 422.205083][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.205095][T17658] Call Trace: [ 422.205103][T17658] [ 422.205111][T17658] dump_stack_lvl+0xe8/0x150 [ 422.205145][T17658] should_fail_ex+0x412/0x560 [ 422.205177][T17658] _copy_from_user+0x2d/0xb0 [ 422.205209][T17658] ___sys_sendmsg+0x1c6/0x360 [ 422.205238][T17658] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.205322][T17658] ? __fget_files+0x2a/0x420 [ 422.205354][T17658] ? __fget_files+0x3a0/0x420 [ 422.205395][T17658] __x64_sys_sendmsg+0x1bd/0x2a0 [ 422.205419][T17658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.205451][T17658] ? __pfx_ksys_write+0x10/0x10 [ 422.205487][T17658] do_syscall_64+0x14d/0xf80 [ 422.205518][T17658] ? trace_irq_disable+0x3b/0x150 [ 422.205548][T17658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.205569][T17658] ? clear_bhb_loop+0x40/0x90 [ 422.205595][T17658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.205616][T17658] RIP: 0033:0x7fc1de79c799 [ 422.205635][T17658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.205654][T17658] RSP: 002b:00007fc1df654028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.205677][T17658] RAX: ffffffffffffffda RBX: 00007fc1dea15fa0 RCX: 00007fc1de79c799 [ 422.205692][T17658] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 422.205706][T17658] RBP: 00007fc1df654090 R08: 0000000000000000 R09: 0000000000000000 [ 422.205719][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.205731][T17658] R13: 00007fc1dea16038 R14: 00007fc1dea15fa0 R15: 00007fff079688e8 [ 422.205765][T17658] [ 422.596001][T17672] No such timeout policy "syz1" [ 422.788834][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3369'. [ 422.849102][T17687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.341547][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3373'. [ 423.375479][T17699] nbd: socks must be embedded in a SOCK_ITEM attr [ 423.411801][T17704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3375'. [ 423.411813][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3373'. [ 423.423316][T17700] nbd: nbd64 already in use [ 423.455023][T17707] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 423.465335][T17706] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 423.546474][T17707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.602082][T17712] bond1: entered allmulticast mode [ 423.724022][T17721] No such timeout policy "syz1" [ 423.791510][T14098] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.827882][T14098] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.866790][T14092] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.881515][T14092] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.161125][T17754] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3391'. [ 424.371929][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 424.381115][T17767] netlink: 'syz.2.3389': attribute type 30 has an invalid length. [ 424.519266][T14108] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.611882][T14108] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.635248][T14108] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.669090][T14108] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.749378][T17779] No such timeout policy "syz1" [ 424.814505][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'. [ 425.057461][T17803] netlink: 'syz.0.3405': attribute type 2 has an invalid length. [ 425.074437][T17796] lo speed is unknown, defaulting to 1000 [ 425.083485][T17803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3405'. [ 425.128669][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 425.181697][T17809] FAULT_INJECTION: forcing a failure. [ 425.181697][T17809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.221934][T17809] CPU: 0 UID: 0 PID: 17809 Comm: syz.3.3406 Not tainted syzkaller #0 PREEMPT(full) [ 425.221970][T17809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.221982][T17809] Call Trace: [ 425.221990][T17809] [ 425.221999][T17809] dump_stack_lvl+0xe8/0x150 [ 425.222036][T17809] should_fail_ex+0x412/0x560 [ 425.222067][T17809] _copy_from_iter+0x1d3/0x1670 [ 425.222098][T17809] ? rcu_is_watching+0x15/0xb0 [ 425.222132][T17809] ? __pfx__copy_from_iter+0x10/0x10 [ 425.222169][T17809] ? netlink_sendmsg+0x650/0xb40 [ 425.222198][T17809] ? skb_put+0x11b/0x210 [ 425.222233][T17809] netlink_sendmsg+0x6c0/0xb40 [ 425.222271][T17809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.222304][T17809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.222332][T17809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.222358][T17809] ____sys_sendmsg+0x972/0x9f0 [ 425.222388][T17809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.222418][T17809] ? import_iovec+0x73/0xa0 [ 425.222451][T17809] ___sys_sendmsg+0x2a5/0x360 [ 425.222478][T17809] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.222533][T17809] ? __fget_files+0x2a/0x420 [ 425.222563][T17809] ? __fget_files+0x3a0/0x420 [ 425.222602][T17809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.222625][T17809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.222655][T17809] ? __pfx_ksys_write+0x10/0x10 [ 425.222689][T17809] do_syscall_64+0x14d/0xf80 [ 425.222719][T17809] ? trace_irq_disable+0x3b/0x150 [ 425.222746][T17809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.222767][T17809] ? clear_bhb_loop+0x40/0x90 [ 425.222792][T17809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.222813][T17809] RIP: 0033:0x7ff1bf79c799 [ 425.222832][T17809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.222850][T17809] RSP: 002b:00007ff1c05cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.222872][T17809] RAX: ffffffffffffffda RBX: 00007ff1bfa15fa0 RCX: 00007ff1bf79c799 [ 425.222887][T17809] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 425.222900][T17809] RBP: 00007ff1c05cf090 R08: 0000000000000000 R09: 0000000000000000 [ 425.222913][T17809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.222925][T17809] R13: 00007ff1bfa16038 R14: 00007ff1bfa15fa0 R15: 00007ffed8a21a08 [ 425.222967][T17809] [ 425.544564][T17814] No such timeout policy "syz1" [ 425.622508][T17817] netlink: 'syz.1.3411': attribute type 1 has an invalid length. [ 425.673767][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3411'. [ 425.721878][T17823] FAULT_INJECTION: forcing a failure. [ 425.721878][T17823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.742029][T17823] CPU: 0 UID: 0 PID: 17823 Comm: syz.3.3412 Not tainted syzkaller #0 PREEMPT(full) [ 425.742071][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.742083][T17823] Call Trace: [ 425.742092][T17823] [ 425.742116][T17823] dump_stack_lvl+0xe8/0x150 [ 425.742151][T17823] should_fail_ex+0x412/0x560 [ 425.742183][T17823] _copy_from_user+0x2d/0xb0 [ 425.742216][T17823] get_user_ifreq+0x6b/0x180 [ 425.742244][T17823] sock_ioctl+0x704/0x7f0 [ 425.742270][T17823] ? __pfx_sock_ioctl+0x10/0x10 [ 425.742296][T17823] ? __fget_files+0x3a0/0x420 [ 425.742337][T17823] ? __fget_files+0x2a/0x420 [ 425.742370][T17823] ? bpf_lsm_file_ioctl+0x9/0x20 [ 425.742398][T17823] ? __pfx_sock_ioctl+0x10/0x10 [ 425.742421][T17823] __se_sys_ioctl+0xfc/0x170 [ 425.742449][T17823] do_syscall_64+0x14d/0xf80 [ 425.742478][T17823] ? trace_irq_disable+0x3b/0x150 [ 425.742508][T17823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.742529][T17823] ? clear_bhb_loop+0x40/0x90 [ 425.742555][T17823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.742575][T17823] RIP: 0033:0x7ff1bf79c799 [ 425.742595][T17823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.742612][T17823] RSP: 002b:00007ff1c05cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.742635][T17823] RAX: ffffffffffffffda RBX: 00007ff1bfa15fa0 RCX: 00007ff1bf79c799 [ 425.742650][T17823] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 425.742664][T17823] RBP: 00007ff1c05cf090 R08: 0000000000000000 R09: 0000000000000000 [ 425.742677][T17823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.742689][T17823] R13: 00007ff1bfa16038 R14: 00007ff1bfa15fa0 R15: 00007ffed8a21a08 [ 425.742728][T17823] [ 425.959247][T17817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.022453][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 426.063853][T17819] bond1 (unregistering): Released all slaves [ 426.173449][T17825] lo speed is unknown, defaulting to 1000 [ 426.385202][T17840] FAULT_INJECTION: forcing a failure. [ 426.385202][T17840] name failslab, interval 1, probability 0, space 0, times 0 [ 426.398991][T17840] CPU: 0 UID: 0 PID: 17840 Comm: syz.3.3421 Not tainted syzkaller #0 PREEMPT(full) [ 426.399019][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.399033][T17840] Call Trace: [ 426.399041][T17840] [ 426.399050][T17840] dump_stack_lvl+0xe8/0x150 [ 426.399086][T17840] should_fail_ex+0x412/0x560 [ 426.399119][T17840] should_failslab+0xa8/0x100 [ 426.399146][T17840] ? skb_clone+0x212/0x3a0 [ 426.399169][T17840] kmem_cache_alloc_noprof+0x87/0x650 [ 426.399190][T17840] ? __netlink_lookup+0xc6/0x8b0 [ 426.399228][T17840] skb_clone+0x212/0x3a0 [ 426.399254][T17840] __netlink_deliver_tap+0x404/0x850 [ 426.399305][T17840] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.399334][T17840] netlink_deliver_tap+0x19c/0x1b0 [ 426.399363][T17840] netlink_unicast+0x7e3/0x9b0 [ 426.399398][T17840] ? __pfx_netlink_unicast+0x10/0x10 [ 426.399426][T17840] ? netlink_sendmsg+0x650/0xb40 [ 426.399454][T17840] ? skb_put+0x11b/0x210 [ 426.399489][T17840] netlink_sendmsg+0x813/0xb40 [ 426.399529][T17840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.399561][T17840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.399590][T17840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.399618][T17840] ____sys_sendmsg+0x972/0x9f0 [ 426.399648][T17840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.399679][T17840] ? import_iovec+0x73/0xa0 [ 426.399735][T17840] ___sys_sendmsg+0x2a5/0x360 [ 426.399762][T17840] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.399824][T17840] ? __fget_files+0x2a/0x420 [ 426.399855][T17840] ? __fget_files+0x3a0/0x420 [ 426.399907][T17840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.399933][T17840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.399964][T17840] ? __pfx_ksys_write+0x10/0x10 [ 426.400000][T17840] do_syscall_64+0x14d/0xf80 [ 426.400030][T17840] ? trace_irq_disable+0x3b/0x150 [ 426.400059][T17840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.400082][T17840] ? clear_bhb_loop+0x40/0x90 [ 426.400107][T17840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.400128][T17840] RIP: 0033:0x7ff1bf79c799 [ 426.400147][T17840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.400166][T17840] RSP: 002b:00007ff1c05cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.400187][T17840] RAX: ffffffffffffffda RBX: 00007ff1bfa15fa0 RCX: 00007ff1bf79c799 [ 426.400202][T17840] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 426.400215][T17840] RBP: 00007ff1c05cf090 R08: 0000000000000000 R09: 0000000000000000 [ 426.400227][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.400239][T17840] R13: 00007ff1bfa16038 R14: 00007ff1bfa15fa0 R15: 00007ffed8a21a08 [ 426.400282][T17840] [ 426.897415][T17851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3424'. [ 427.140285][T17853] lo speed is unknown, defaulting to 1000 [ 427.639203][T17877] FAULT_INJECTION: forcing a failure. [ 427.639203][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 427.675512][T17877] CPU: 0 UID: 0 PID: 17877 Comm: syz.4.3434 Not tainted syzkaller #0 PREEMPT(full) [ 427.675540][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.675553][T17877] Call Trace: [ 427.675561][T17877] [ 427.675570][T17877] dump_stack_lvl+0xe8/0x150 [ 427.675605][T17877] should_fail_ex+0x412/0x560 [ 427.675646][T17877] should_failslab+0xa8/0x100 [ 427.675675][T17877] __kmalloc_cache_noprof+0x88/0x660 [ 427.675700][T17877] ? xfrm_policy_alloc+0x78/0x2b0 [ 427.675835][T17877] xfrm_policy_alloc+0x78/0x2b0 [ 427.675868][T17877] xfrm_policy_construct+0x39/0x6b0 [ 427.675929][T17877] xfrm_add_policy+0x286/0x820 [ 427.675958][T17877] ? __pfx_xfrm_add_policy+0x10/0x10 [ 427.675977][T17877] ? apparmor_capable+0x126/0x170 [ 427.676042][T17877] ? __nla_parse+0x40/0x60 [ 427.676103][T17877] xfrm_user_rcv_msg+0x746/0xb20 [ 427.676132][T17877] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 427.676191][T17877] ? __pfx___mutex_trylock_common+0x10/0x10 [ 427.676247][T17877] ? rcu_is_watching+0x15/0xb0 [ 427.676278][T17877] ? trace_contention_end+0x3d/0x150 [ 427.676313][T17877] ? __mutex_lock+0x319/0x1300 [ 427.676354][T17877] netlink_rcv_skb+0x232/0x4b0 [ 427.676385][T17877] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 427.676409][T17877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.676456][T17877] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.676485][T17877] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.676521][T17877] xfrm_netlink_rcv+0x79/0x90 [ 427.676543][T17877] netlink_unicast+0x80f/0x9b0 [ 427.676580][T17877] ? __pfx_netlink_unicast+0x10/0x10 [ 427.676610][T17877] ? netlink_sendmsg+0x650/0xb40 [ 427.676643][T17877] ? skb_put+0x11b/0x210 [ 427.676680][T17877] netlink_sendmsg+0x813/0xb40 [ 427.676721][T17877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.676755][T17877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.676786][T17877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.676814][T17877] ____sys_sendmsg+0x972/0x9f0 [ 427.676847][T17877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.676879][T17877] ? import_iovec+0x73/0xa0 [ 427.676917][T17877] ___sys_sendmsg+0x2a5/0x360 [ 427.676945][T17877] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.677009][T17877] ? __fget_files+0x2a/0x420 [ 427.677040][T17877] ? __fget_files+0x3a0/0x420 [ 427.677083][T17877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.677109][T17877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.677153][T17877] ? __pfx_ksys_write+0x10/0x10 [ 427.677189][T17877] do_syscall_64+0x14d/0xf80 [ 427.677218][T17877] ? trace_irq_disable+0x3b/0x150 [ 427.677247][T17877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.677269][T17877] ? clear_bhb_loop+0x40/0x90 [ 427.677295][T17877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.677316][T17877] RIP: 0033:0x7f670ab9c799 [ 427.677336][T17877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.677354][T17877] RSP: 002b:00007f670baf8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.677378][T17877] RAX: ffffffffffffffda RBX: 00007f670ae15fa0 RCX: 00007f670ab9c799 [ 427.677393][T17877] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 427.677407][T17877] RBP: 00007f670baf8090 R08: 0000000000000000 R09: 0000000000000000 [ 427.677420][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.677433][T17877] R13: 00007f670ae16038 R14: 00007f670ae15fa0 R15: 00007fff43283598 [ 427.677467][T17877] [ 428.186778][T17882] tipc: Failed to remove unknown binding: 66,0,0/0:2079590022/2079590024 [ 428.226793][T17882] tipc: Failed to remove unknown binding: 66,0,0/0:2079590022/2079590023 [ 428.265254][T17888] rdma_op ffff888056f091f0 conn xmit_rdma 0000000000000000 [ 428.287362][T17882] tipc: Failed to remove unknown binding: 66,0,0/0:2079590022/2079590024 [ 428.344266][T17882] tipc: Failed to remove unknown binding: 66,0,0/0:2079590022/2079590023 [ 428.397702][T17887] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.405416][T17887] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.497072][T17887] bridge0: entered allmulticast mode [ 428.540272][T17893] bridge_slave_1: left allmulticast mode [ 428.576289][T17893] bridge_slave_1: left promiscuous mode [ 428.604242][T17893] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.637548][T17893] bridge_slave_0: left allmulticast mode [ 428.643406][T17893] bridge_slave_0: left promiscuous mode [ 428.651119][T17893] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.838983][T17899] __nla_validate_parse: 1 callbacks suppressed [ 428.839005][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 428.859819][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 429.561231][T17929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3455'. [ 429.842425][T17945] lo speed is unknown, defaulting to 1000 [ 429.898002][T17949] FAULT_INJECTION: forcing a failure. [ 429.898002][T17949] name failslab, interval 1, probability 0, space 0, times 0 [ 429.912680][T17949] CPU: 0 UID: 0 PID: 17949 Comm: syz.2.3462 Not tainted syzkaller #0 PREEMPT(full) [ 429.912709][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.912723][T17949] Call Trace: [ 429.912732][T17949] [ 429.912741][T17949] dump_stack_lvl+0xe8/0x150 [ 429.912777][T17949] should_fail_ex+0x412/0x560 [ 429.912807][T17949] ? __d_alloc+0x37/0x6f0 [ 429.912828][T17949] should_failslab+0xa8/0x100 [ 429.912857][T17949] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 429.912889][T17949] __d_alloc+0x37/0x6f0 [ 429.912915][T17949] d_alloc+0x4b/0x190 [ 429.912932][T17949] ? lookup_one_qstr_excl+0xc8/0x360 [ 429.912965][T17949] lookup_one_qstr_excl+0xdc/0x360 [ 429.912995][T17949] ? lookup_noperm_common+0x245/0x430 [ 429.913029][T17949] start_dirop+0x5c/0x90 [ 429.913060][T17949] simple_start_creating+0xcc/0x110 [ 429.913093][T17949] ? __pfx_simple_start_creating+0x10/0x10 [ 429.913127][T17949] ? do_raw_spin_unlock+0xf5/0x210 [ 429.913149][T17949] ? mntput+0x65/0xc0 [ 429.913180][T17949] debugfs_start_creating+0xdb/0x1a0 [ 429.913326][T17949] __debugfs_create_file+0x6f/0x400 [ 429.913361][T17949] debugfs_create_file_full+0x3f/0x60 [ 429.913404][T17949] ref_tracker_dir_debugfs+0x197/0x360 [ 429.913434][T17949] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 429.913492][T17949] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 429.913534][T17949] ? alloc_netdev_mqs+0xa6/0x11b0 [ 429.913597][T17949] ? __raw_spin_lock_init+0x45/0x100 [ 429.913626][T17949] alloc_netdev_mqs+0x272/0x11b0 [ 429.913649][T17949] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 429.913716][T17949] __ip_tunnel_create+0x348/0x560 [ 429.913794][T17949] ? __pfx___ip_tunnel_create+0x10/0x10 [ 429.913827][T17949] ? bpf_lsm_capable+0x9/0x20 [ 429.913856][T17949] ? security_capable+0x7e/0x2c0 [ 429.913919][T17949] ip_tunnel_ctl+0x4e2/0xc30 [ 429.913956][T17949] ipgre_tunnel_ctl+0x2ef/0x5d0 [ 429.913995][T17949] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 429.914025][T17949] ? __mutex_lock+0x5ac/0x1300 [ 429.914060][T17949] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 429.914101][T17949] ? full_name_hash+0x92/0xe0 [ 429.914140][T17949] dev_ifsioc+0xba6/0x1280 [ 429.914226][T17949] dev_ioctl+0x84c/0x1150 [ 429.914260][T17949] sock_ioctl+0x75f/0x7f0 [ 429.914289][T17949] ? __pfx_sock_ioctl+0x10/0x10 [ 429.914317][T17949] ? __fget_files+0x3a0/0x420 [ 429.914347][T17949] ? __fget_files+0x2a/0x420 [ 429.914382][T17949] ? bpf_lsm_file_ioctl+0x9/0x20 [ 429.914416][T17949] ? __pfx_sock_ioctl+0x10/0x10 [ 429.914441][T17949] __se_sys_ioctl+0xfc/0x170 [ 429.914470][T17949] do_syscall_64+0x14d/0xf80 [ 429.914500][T17949] ? trace_irq_disable+0x3b/0x150 [ 429.914531][T17949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.914553][T17949] ? clear_bhb_loop+0x40/0x90 [ 429.914580][T17949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.914601][T17949] RIP: 0033:0x7fc1de79c799 [ 429.914622][T17949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.914653][T17949] RSP: 002b:00007fc1df654028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.914675][T17949] RAX: ffffffffffffffda RBX: 00007fc1dea15fa0 RCX: 00007fc1de79c799 [ 429.914689][T17949] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 429.914703][T17949] RBP: 00007fc1df654090 R08: 0000000000000000 R09: 0000000000000000 [ 429.914716][T17949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.914728][T17949] R13: 00007fc1dea16038 R14: 00007fc1dea15fa0 R15: 00007fff079688e8 [ 429.914763][T17949] [ 430.321609][T17941] bridge1: entered promiscuous mode [ 430.351394][T17953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3458'. [ 430.360527][T17941] bridge1: entered allmulticast mode [ 430.671014][T17965] tipc: Invalid UDP bearer configuration [ 430.671054][T17965] tipc: Enabling of bearer rejected, failed to enable media [ 430.894788][T17976] bridge0: port 1(erspan0) entered disabled state [ 430.936353][T17979] lo speed is unknown, defaulting to 1000 [ 430.943132][T17983] erspan0: left allmulticast mode [ 430.969053][T17983] erspan0: left promiscuous mode [ 430.996090][T17983] bridge0: port 1(erspan0) entered disabled state [ 431.076199][T17987] ipt_rpfilter: unknown options [ 431.334209][T17996] FAULT_INJECTION: forcing a failure. [ 431.334209][T17996] name failslab, interval 1, probability 0, space 0, times 0 [ 431.352395][T17996] CPU: 0 UID: 0 PID: 17996 Comm: syz.2.3476 Not tainted syzkaller #0 PREEMPT(full) [ 431.352421][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.352437][T17996] Call Trace: [ 431.352444][T17996] [ 431.352452][T17996] dump_stack_lvl+0xe8/0x150 [ 431.352483][T17996] should_fail_ex+0x412/0x560 [ 431.352508][T17996] ? alloc_inode+0x6a/0x1b0 [ 431.352535][T17996] should_failslab+0xa8/0x100 [ 431.352560][T17996] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 431.352579][T17996] ? simple_start_creating+0xcc/0x110 [ 431.352613][T17996] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 431.352640][T17996] alloc_inode+0x6a/0x1b0 [ 431.352667][T17996] new_inode+0x22/0x170 [ 431.352697][T17996] __debugfs_create_file+0xb8/0x400 [ 431.352728][T17996] debugfs_create_file_full+0x3f/0x60 [ 431.352758][T17996] ref_tracker_dir_debugfs+0x197/0x360 [ 431.352810][T17996] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 431.352863][T17996] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 431.352886][T17996] ? alloc_netdev_mqs+0xa6/0x11b0 [ 431.352912][T17996] ? __raw_spin_lock_init+0x45/0x100 [ 431.352936][T17996] alloc_netdev_mqs+0x272/0x11b0 [ 431.352957][T17996] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 431.352989][T17996] __ip_tunnel_create+0x348/0x560 [ 431.353022][T17996] ? __pfx___ip_tunnel_create+0x10/0x10 [ 431.353051][T17996] ? bpf_lsm_capable+0x9/0x20 [ 431.353077][T17996] ? security_capable+0x7e/0x2c0 [ 431.353108][T17996] ip_tunnel_ctl+0x4e2/0xc30 [ 431.353141][T17996] ipgre_tunnel_ctl+0x2ef/0x5d0 [ 431.353176][T17996] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 431.353209][T17996] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 431.353244][T17996] ? full_name_hash+0x92/0xe0 [ 431.353280][T17996] dev_ifsioc+0xba6/0x1280 [ 431.353316][T17996] dev_ioctl+0x84c/0x1150 [ 431.353347][T17996] sock_ioctl+0x75f/0x7f0 [ 431.353372][T17996] ? __pfx_sock_ioctl+0x10/0x10 [ 431.353397][T17996] ? __fget_files+0x3a0/0x420 [ 431.353424][T17996] ? __fget_files+0x2a/0x420 [ 431.353455][T17996] ? bpf_lsm_file_ioctl+0x9/0x20 [ 431.353480][T17996] ? __pfx_sock_ioctl+0x10/0x10 [ 431.353502][T17996] __se_sys_ioctl+0xfc/0x170 [ 431.353528][T17996] do_syscall_64+0x14d/0xf80 [ 431.353556][T17996] ? trace_irq_disable+0x3b/0x150 [ 431.353583][T17996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.353603][T17996] ? clear_bhb_loop+0x40/0x90 [ 431.353627][T17996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.353647][T17996] RIP: 0033:0x7fc1de79c799 [ 431.353664][T17996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.353682][T17996] RSP: 002b:00007fc1df654028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.353704][T17996] RAX: ffffffffffffffda RBX: 00007fc1dea15fa0 RCX: 00007fc1de79c799 [ 431.353718][T17996] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 431.353731][T17996] RBP: 00007fc1df654090 R08: 0000000000000000 R09: 0000000000000000 [ 431.353743][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.353755][T17996] R13: 00007fc1dea16038 R14: 00007fc1dea15fa0 R15: 00007fff079688e8 [ 431.353802][T17996] [ 431.353869][T17996] debugfs: out of free dentries, can not create file 'netdev@ffff8880203fc620' [ 431.771354][T18002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3477'. [ 432.102251][T18014] tipc: Started in network mode [ 432.114460][T18014] tipc: Node identity 2e27d141b4a6, cluster identity 4711 [ 432.125248][T18014] tipc: Enabled bearer , priority 0 [ 432.138936][T18019] syzkaller0: entered promiscuous mode [ 432.156439][T18019] syzkaller0: entered allmulticast mode [ 432.218689][T18008] tipc: Resetting bearer [ 432.270279][T18007] tipc: Resetting bearer [ 432.314538][T18007] tipc: Disabling bearer [ 432.487567][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3487'. [ 432.630113][T18037] lo speed is unknown, defaulting to 1000 [ 433.124553][T18065] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3500'. [ 433.158976][T18065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 433.545562][T18091] netlink: 'syz.2.3510': attribute type 1 has an invalid length. [ 433.636617][T18091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.655030][T18100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3511'. [ 433.694191][T18099] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 433.707713][T18099] bond2 (unregistering): Released all slaves [ 433.718160][T18104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3512'. [ 433.835643][T18098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.862401][T18098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.917390][T18104] lo speed is unknown, defaulting to 1000 [ 433.995350][T18111] FAULT_INJECTION: forcing a failure. [ 433.995350][T18111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.033885][T18111] CPU: 0 UID: 0 PID: 18111 Comm: syz.1.3515 Not tainted syzkaller #0 PREEMPT(full) [ 434.033914][T18111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.033927][T18111] Call Trace: [ 434.033935][T18111] [ 434.033943][T18111] dump_stack_lvl+0xe8/0x150 [ 434.033977][T18111] should_fail_ex+0x412/0x560 [ 434.034008][T18111] _copy_from_user+0x2d/0xb0 [ 434.034040][T18111] ___sys_sendmsg+0x1c6/0x360 [ 434.034067][T18111] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.034121][T18111] ? __fget_files+0x2a/0x420 [ 434.034149][T18111] ? __fget_files+0x3a0/0x420 [ 434.034187][T18111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 434.034209][T18111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.034237][T18111] ? __pfx_ksys_write+0x10/0x10 [ 434.034268][T18111] do_syscall_64+0x14d/0xf80 [ 434.034295][T18111] ? trace_irq_disable+0x3b/0x150 [ 434.034324][T18111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.034344][T18111] ? clear_bhb_loop+0x40/0x90 [ 434.034367][T18111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.034386][T18111] RIP: 0033:0x7f6fddd9c799 [ 434.034404][T18111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.034421][T18111] RSP: 002b:00007f6fdecaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.034442][T18111] RAX: ffffffffffffffda RBX: 00007f6fde015fa0 RCX: 00007f6fddd9c799 [ 434.034456][T18111] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 434.034469][T18111] RBP: 00007f6fdecaa090 R08: 0000000000000000 R09: 0000000000000000 [ 434.034481][T18111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.034493][T18111] R13: 00007f6fde016038 R14: 00007f6fde015fa0 R15: 00007fff99db9288 [ 434.034532][T18111] [ 434.312950][T18098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.363703][T18098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.544712][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.552332][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.584564][T18119] bridge0: entered allmulticast mode [ 434.604202][T18119] bridge_slave_1: left allmulticast mode [ 434.611615][T18119] bridge_slave_1: left promiscuous mode [ 434.618133][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.630423][T18119] bridge_slave_0: left allmulticast mode [ 434.636322][T18119] bridge_slave_0: left promiscuous mode [ 434.647563][T18124] Bluetooth: MGMT ver 1.23 [ 434.655616][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.755084][T18098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.768521][T18098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.949922][T18098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.978301][T18098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.282513][T18147] __nla_validate_parse: 1 callbacks suppressed [ 435.282532][T18147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3525'. [ 435.511977][T14096] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.520521][T14096] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.552034][T18163] FAULT_INJECTION: forcing a failure. [ 435.552034][T18163] name failslab, interval 1, probability 0, space 0, times 0 [ 435.588062][T18163] CPU: 1 UID: 0 PID: 18163 Comm: syz.0.3528 Not tainted syzkaller #0 PREEMPT(full) [ 435.588090][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.588103][T18163] Call Trace: [ 435.588112][T18163] [ 435.588120][T18163] dump_stack_lvl+0xe8/0x150 [ 435.588155][T18163] should_fail_ex+0x412/0x560 [ 435.588188][T18163] should_failslab+0xa8/0x100 [ 435.588217][T18163] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 435.588240][T18163] ? __alloc_skb+0x186/0x7d0 [ 435.588268][T18163] ? __alloc_skb+0x1d0/0x7d0 [ 435.588294][T18163] ? __local_bh_enable_ip+0xd0/0x130 [ 435.588336][T18163] __alloc_skb+0x1d0/0x7d0 [ 435.588371][T18163] netlink_sendmsg+0x5d4/0xb40 [ 435.588411][T18163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.588444][T18163] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.588473][T18163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.588500][T18163] ____sys_sendmsg+0x972/0x9f0 [ 435.588531][T18163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.588561][T18163] ? import_iovec+0x73/0xa0 [ 435.588597][T18163] ___sys_sendmsg+0x2a5/0x360 [ 435.588623][T18163] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.588699][T18163] ? __fget_files+0x2a/0x420 [ 435.588734][T18163] ? __fget_files+0x3a0/0x420 [ 435.588778][T18163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 435.588803][T18163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.588836][T18163] ? __pfx_ksys_write+0x10/0x10 [ 435.588871][T18163] do_syscall_64+0x14d/0xf80 [ 435.588904][T18163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.588925][T18163] ? clear_bhb_loop+0x40/0x90 [ 435.588956][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.588978][T18163] RIP: 0033:0x7fa4d279c799 [ 435.588998][T18163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.589017][T18163] RSP: 002b:00007fa4d368c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.589040][T18163] RAX: ffffffffffffffda RBX: 00007fa4d2a15fa0 RCX: 00007fa4d279c799 [ 435.589056][T18163] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 435.589069][T18163] RBP: 00007fa4d368c090 R08: 0000000000000000 R09: 0000000000000000 [ 435.589082][T18163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.589095][T18163] R13: 00007fa4d2a16038 R14: 00007fa4d2a15fa0 R15: 00007ffcaa71f588 [ 435.589129][T18163] [ 435.661863][T18164] pim6reg: entered allmulticast mode [ 435.861108][T14096] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.880840][T14096] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.938952][T18164] pim6reg: left allmulticast mode [ 435.973775][T18174] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 435.982343][T18174] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3530'. [ 436.021273][T18159] lo speed is unknown, defaulting to 1000 [ 436.077116][T18178] bridge0: entered allmulticast mode [ 436.135276][T14096] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.179124][T14096] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.199405][T14096] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.218614][T14096] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.421876][T18187] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 436.445147][T18187] netlink: 'syz.3.3534': attribute type 8 has an invalid length. [ 436.616633][T18157] lo speed is unknown, defaulting to 1000 [ 436.796895][T18211] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3540'. [ 436.806038][T18211] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3540'. [ 436.809827][T18210] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3541'. [ 436.821413][T18211] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3540'. [ 436.856982][T18206] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3540'. [ 436.908297][T18211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3540'. [ 437.509509][T18220] pim6reg: entered allmulticast mode [ 437.930164][T18248] FAULT_INJECTION: forcing a failure. [ 437.930164][T18248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.961999][T18248] CPU: 1 UID: 0 PID: 18248 Comm: syz.1.3551 Not tainted syzkaller #0 PREEMPT(full) [ 437.962026][T18248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.962038][T18248] Call Trace: [ 437.962046][T18248] [ 437.962054][T18248] dump_stack_lvl+0xe8/0x150 [ 437.962086][T18248] should_fail_ex+0x412/0x560 [ 437.962117][T18248] _copy_from_iter+0x1d3/0x1670 [ 437.962148][T18248] ? rcu_is_watching+0x15/0xb0 [ 437.962183][T18248] ? __pfx__copy_from_iter+0x10/0x10 [ 437.962216][T18248] ? netlink_sendmsg+0x650/0xb40 [ 437.962244][T18248] ? skb_put+0x11b/0x210 [ 437.962277][T18248] netlink_sendmsg+0x6c0/0xb40 [ 437.962313][T18248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.962343][T18248] ? aa_sock_msg_perm+0xf1/0x1b0 [ 437.962370][T18248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.962396][T18248] ____sys_sendmsg+0x972/0x9f0 [ 437.962441][T18248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.962472][T18248] ? import_iovec+0x73/0xa0 [ 437.962507][T18248] ___sys_sendmsg+0x2a5/0x360 [ 437.962534][T18248] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.962601][T18248] ? __fget_files+0x2a/0x420 [ 437.962632][T18248] ? __fget_files+0x3a0/0x420 [ 437.962673][T18248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 437.962697][T18248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.962727][T18248] ? __pfx_ksys_write+0x10/0x10 [ 437.962761][T18248] do_syscall_64+0x14d/0xf80 [ 437.962790][T18248] ? trace_irq_disable+0x3b/0x150 [ 437.962820][T18248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.962841][T18248] ? clear_bhb_loop+0x40/0x90 [ 437.962866][T18248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.962886][T18248] RIP: 0033:0x7f6fddd9c799 [ 437.962906][T18248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.962925][T18248] RSP: 002b:00007f6fdecaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.962947][T18248] RAX: ffffffffffffffda RBX: 00007f6fde015fa0 RCX: 00007f6fddd9c799 [ 437.962963][T18248] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 437.962976][T18248] RBP: 00007f6fdecaa090 R08: 0000000000000000 R09: 0000000000000000 [ 437.962988][T18248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.963001][T18248] R13: 00007f6fde016038 R14: 00007f6fde015fa0 R15: 00007fff99db9288 [ 437.963035][T18248] [ 438.331027][T18254] pim6reg: left allmulticast mode [ 438.415586][T18255] lo speed is unknown, defaulting to 1000 [ 439.283372][T18280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3561'. [ 440.140428][T18321] x_tables: duplicate underflow at hook 1 [ 440.239006][T18327] netlink: 'syz.4.3575': attribute type 1 has an invalid length. [ 440.370350][T18295] pim6reg: entered allmulticast mode [ 440.401226][T18295] pim6reg: left allmulticast mode [ 440.453727][T18335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3577'. [ 440.656875][T18347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3581'. [ 440.853418][T18353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3582'. [ 441.441752][T18393] C: renamed from team_slave_0 (while UP) [ 441.498113][T18393] netlink: 'syz.2.3595': attribute type 8 has an invalid length. [ 441.519639][T18393] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 442.340030][T18427] netlink: 'syz.4.3606': attribute type 15 has an invalid length. [ 442.348414][T18427] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3606'. [ 442.407495][T18428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3606'. [ 442.999245][T18433] lo speed is unknown, defaulting to 1000 [ 443.096618][T18438] netlink: 'syz.3.3608': attribute type 11 has an invalid length. [ 443.104737][T18438] netlink: 'syz.3.3608': attribute type 4 has an invalid length. [ 443.114257][T18438] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.3608'. [ 443.412613][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 443.520981][T18451] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3614'. [ 443.540610][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3614'. [ 443.561502][T18451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3614'. [ 443.604040][T18451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.002326][T18480] netlink: 'syz.2.3622': attribute type 3 has an invalid length. [ 444.834822][T18509] netlink: 'syz.3.3632': attribute type 8 has an invalid length. [ 445.123763][T18524] ipt_rpfilter: unknown options [ 445.269089][T18528] vlan0: entered promiscuous mode [ 445.302142][T18527] block nbd0: server does not support multiple connections per device. [ 445.342926][T18530] FAULT_INJECTION: forcing a failure. [ 445.342926][T18530] name failslab, interval 1, probability 0, space 0, times 0 [ 445.358831][T18527] block nbd0: shutting down sockets [ 445.388803][T18530] CPU: 1 UID: 0 PID: 18530 Comm: syz.4.3639 Not tainted syzkaller #0 PREEMPT(full) [ 445.388845][T18530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.388858][T18530] Call Trace: [ 445.388866][T18530] [ 445.388875][T18530] dump_stack_lvl+0xe8/0x150 [ 445.388911][T18530] should_fail_ex+0x412/0x560 [ 445.388945][T18530] should_failslab+0xa8/0x100 [ 445.388975][T18530] __kvmalloc_node_noprof+0x178/0x8a0 [ 445.389001][T18530] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 445.389035][T18530] alloc_netdev_mqs+0x8a6/0x11b0 [ 445.389067][T18530] __ip_tunnel_create+0x348/0x560 [ 445.389103][T18530] ? __pfx___ip_tunnel_create+0x10/0x10 [ 445.389134][T18530] ? bpf_lsm_capable+0x9/0x20 [ 445.389163][T18530] ? security_capable+0x7e/0x2c0 [ 445.389196][T18530] ip_tunnel_ctl+0x4e2/0xc30 [ 445.389232][T18530] ipgre_tunnel_ctl+0x2ef/0x5d0 [ 445.389269][T18530] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 445.389300][T18530] ? __mutex_lock+0x5ac/0x1300 [ 445.389335][T18530] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 445.389373][T18530] ? full_name_hash+0x92/0xe0 [ 445.389411][T18530] dev_ifsioc+0xba6/0x1280 [ 445.389451][T18530] dev_ioctl+0x84c/0x1150 [ 445.389484][T18530] sock_ioctl+0x75f/0x7f0 [ 445.389513][T18530] ? __pfx_sock_ioctl+0x10/0x10 [ 445.389539][T18530] ? __fget_files+0x3a0/0x420 [ 445.389569][T18530] ? __fget_files+0x2a/0x420 [ 445.389603][T18530] ? bpf_lsm_file_ioctl+0x9/0x20 [ 445.389630][T18530] ? __pfx_sock_ioctl+0x10/0x10 [ 445.389654][T18530] __se_sys_ioctl+0xfc/0x170 [ 445.389681][T18530] do_syscall_64+0x14d/0xf80 [ 445.389711][T18530] ? trace_irq_disable+0x3b/0x150 [ 445.389740][T18530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.389761][T18530] ? clear_bhb_loop+0x40/0x90 [ 445.389787][T18530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.389808][T18530] RIP: 0033:0x7f670ab9c799 [ 445.389835][T18530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.389853][T18530] RSP: 002b:00007f670baf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.389876][T18530] RAX: ffffffffffffffda RBX: 00007f670ae15fa0 RCX: 00007f670ab9c799 [ 445.389893][T18530] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 445.389906][T18530] RBP: 00007f670baf8090 R08: 0000000000000000 R09: 0000000000000000 [ 445.389919][T18530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.389931][T18530] R13: 00007f670ae16038 R14: 00007f670ae15fa0 R15: 00007fff43283598 [ 445.389965][T18530] [ 445.390587][ T30] audit: type=1800 audit(1773563086.891:5): pid=18520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3635" name="memory.events" dev="tmpfs" ino=563 res=0 errno=0 [ 446.219459][T18571] lo speed is unknown, defaulting to 1000 [ 446.263235][T18577] netlink: 'syz.0.3650': attribute type 2 has an invalid length. [ 446.299201][T18577] syzkaller1: entered promiscuous mode [ 446.305143][T18577] syzkaller1: entered allmulticast mode [ 446.321893][T18582] __nla_validate_parse: 5 callbacks suppressed [ 446.321910][T18582] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3653'. [ 446.505582][T18589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3656'. [ 446.608580][T18587] syzkaller0: entered promiscuous mode [ 446.629606][T18587] syzkaller0: entered allmulticast mode [ 446.663977][T18601] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3658'. [ 448.211850][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'. [ 448.330544][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 448.913919][T18652] bond1: Removing last arp target with arp_interval on [ 448.941245][T18657] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 449.469018][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3684'. [ 449.503988][T18690] netlink: 'syz.0.3682': attribute type 4 has an invalid length. [ 449.524534][T18690] netlink: 'syz.0.3682': attribute type 4 has an invalid length. [ 449.861759][T18709] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3689'. [ 450.176262][T18724] No such timeout policy "syz1" [ 450.186871][T18726] FAULT_INJECTION: forcing a failure. [ 450.186871][T18726] name failslab, interval 1, probability 0, space 0, times 0 [ 450.222933][T18726] CPU: 0 UID: 0 PID: 18726 Comm: syz.3.3692 Not tainted syzkaller #0 PREEMPT(full) [ 450.222961][T18726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.222974][T18726] Call Trace: [ 450.222983][T18726] [ 450.222992][T18726] dump_stack_lvl+0xe8/0x150 [ 450.223038][T18726] should_fail_ex+0x412/0x560 [ 450.223072][T18726] should_failslab+0xa8/0x100 [ 450.223099][T18726] __kvmalloc_node_noprof+0x178/0x8a0 [ 450.223124][T18726] ? alloc_netdev_mqs+0xc89/0x11b0 [ 450.223149][T18726] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 450.223176][T18726] alloc_netdev_mqs+0xc89/0x11b0 [ 450.223206][T18726] __ip_tunnel_create+0x348/0x560 [ 450.223240][T18726] ? __pfx___ip_tunnel_create+0x10/0x10 [ 450.223271][T18726] ? bpf_lsm_capable+0x9/0x20 [ 450.223297][T18726] ? security_capable+0x7e/0x2c0 [ 450.223333][T18726] ip_tunnel_ctl+0x4e2/0xc30 [ 450.223367][T18726] ipgre_tunnel_ctl+0x2ef/0x5d0 [ 450.223402][T18726] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 450.223436][T18726] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 450.223472][T18726] ? full_name_hash+0x92/0xe0 [ 450.223509][T18726] dev_ifsioc+0xba6/0x1280 [ 450.223548][T18726] dev_ioctl+0x84c/0x1150 [ 450.223579][T18726] sock_ioctl+0x75f/0x7f0 [ 450.223606][T18726] ? __pfx_sock_ioctl+0x10/0x10 [ 450.223632][T18726] ? __fget_files+0x3a0/0x420 [ 450.223660][T18726] ? __fget_files+0x2a/0x420 [ 450.223693][T18726] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.223718][T18726] ? __pfx_sock_ioctl+0x10/0x10 [ 450.223741][T18726] __se_sys_ioctl+0xfc/0x170 [ 450.223767][T18726] do_syscall_64+0x14d/0xf80 [ 450.223808][T18726] ? trace_irq_disable+0x3b/0x150 [ 450.223834][T18726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.223854][T18726] ? clear_bhb_loop+0x40/0x90 [ 450.223877][T18726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.223895][T18726] RIP: 0033:0x7ff1bf79c799 [ 450.223913][T18726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.223930][T18726] RSP: 002b:00007ff1c05cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.223950][T18726] RAX: ffffffffffffffda RBX: 00007ff1bfa15fa0 RCX: 00007ff1bf79c799 [ 450.223964][T18726] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 450.223975][T18726] RBP: 00007ff1c05cf090 R08: 0000000000000000 R09: 0000000000000000 [ 450.223987][T18726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.223997][T18726] R13: 00007ff1bfa16038 R14: 00007ff1bfa15fa0 R15: 00007ffed8a21a08 [ 450.224038][T18726] [ 450.491958][T18728] FAULT_INJECTION: forcing a failure. [ 450.491958][T18728] name failslab, interval 1, probability 0, space 0, times 0 [ 450.504658][T18728] CPU: 0 UID: 0 PID: 18728 Comm: syz.1.3693 Not tainted syzkaller #0 PREEMPT(full) [ 450.504684][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.504697][T18728] Call Trace: [ 450.504706][T18728] [ 450.504715][T18728] dump_stack_lvl+0xe8/0x150 [ 450.504750][T18728] should_fail_ex+0x412/0x560 [ 450.504784][T18728] should_failslab+0xa8/0x100 [ 450.504813][T18728] __kmalloc_cache_noprof+0x88/0x660 [ 450.504839][T18728] ? ieee802154_nl_fill_phy+0xad/0x6f0 [ 450.504946][T18728] ieee802154_nl_fill_phy+0xad/0x6f0 [ 450.504977][T18728] ? __pfx_ieee802154_nl_fill_phy+0x10/0x10 [ 450.505008][T18728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.505035][T18728] ? __pfx_klist_class_dev_put+0x10/0x10 [ 450.505138][T18728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 450.505170][T18728] ieee802154_dump_phy_iter+0x115/0x230 [ 450.505218][T18728] class_for_each_device+0x273/0x380 [ 450.505250][T18728] ? __pfx_wpan_phy_iter+0x10/0x10 [ 450.505274][T18728] ? __pfx_class_for_each_device+0x10/0x10 [ 450.505309][T18728] ? __mutex_lock+0x319/0x1300 [ 450.505347][T18728] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 450.505372][T18728] wpan_phy_for_each+0x99/0xe0 [ 450.505397][T18728] ? __pfx_wpan_phy_for_each+0x10/0x10 [ 450.505420][T18728] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 450.505456][T18728] ieee802154_dump_phy+0xd6/0x1d0 [ 450.505480][T18728] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 450.505507][T18728] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 450.505545][T18728] genl_dumpit+0x10b/0x1b0 [ 450.505574][T18728] netlink_dump+0x722/0xe80 [ 450.505617][T18728] ? __pfx_netlink_dump+0x10/0x10 [ 450.505664][T18728] ? genl_start+0x499/0x6c0 [ 450.505695][T18728] __netlink_dump_start+0x5cb/0x7e0 [ 450.505735][T18728] genl_family_rcv_msg_dumpit+0x213/0x310 [ 450.505763][T18728] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 450.505801][T18728] ? genl_get_cmd+0x6cb/0x960 [ 450.505829][T18728] ? __pfx_genl_start+0x10/0x10 [ 450.505850][T18728] ? __pfx_genl_dumpit+0x10/0x10 [ 450.505870][T18728] ? __pfx_genl_done+0x10/0x10 [ 450.505899][T18728] ? __lock_acquire+0x6b5/0x2cf0 [ 450.505934][T18728] genl_rcv_msg+0x5e8/0x7a0 [ 450.505964][T18728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.505986][T18728] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 450.506017][T18728] ? __lock_acquire+0x6b5/0x2cf0 [ 450.506058][T18728] netlink_rcv_skb+0x232/0x4b0 [ 450.506089][T18728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.506113][T18728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.506163][T18728] ? down_read+0x272/0x2e0 [ 450.506182][T18728] ? genl_rcv+0xd/0x40 [ 450.506206][T18728] genl_rcv+0x28/0x40 [ 450.506226][T18728] netlink_unicast+0x80f/0x9b0 [ 450.506263][T18728] ? __pfx_netlink_unicast+0x10/0x10 [ 450.506292][T18728] ? netlink_sendmsg+0x650/0xb40 [ 450.506320][T18728] ? skb_put+0x11b/0x210 [ 450.506357][T18728] netlink_sendmsg+0x813/0xb40 [ 450.506398][T18728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.506433][T18728] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.506464][T18728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.506493][T18728] ____sys_sendmsg+0x972/0x9f0 [ 450.506526][T18728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.506558][T18728] ? import_iovec+0x73/0xa0 [ 450.506597][T18728] ___sys_sendmsg+0x2a5/0x360 [ 450.506625][T18728] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.506689][T18728] ? __fget_files+0x2a/0x420 [ 450.506720][T18728] ? __fget_files+0x3a0/0x420 [ 450.506764][T18728] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.506790][T18728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.506824][T18728] ? __pfx_ksys_write+0x10/0x10 [ 450.506861][T18728] do_syscall_64+0x14d/0xf80 [ 450.506892][T18728] ? trace_irq_disable+0x3b/0x150 [ 450.506924][T18728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.506946][T18728] ? clear_bhb_loop+0x40/0x90 [ 450.506974][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.507015][T18728] RIP: 0033:0x7f6fddd9c799 [ 450.507034][T18728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.507053][T18728] RSP: 002b:00007f6fdecaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.507075][T18728] RAX: ffffffffffffffda RBX: 00007f6fde015fa0 RCX: 00007f6fddd9c799 [ 450.507091][T18728] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 450.507105][T18728] RBP: 00007f6fdecaa090 R08: 0000000000000000 R09: 0000000000000000 [ 450.507118][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.507130][T18728] R13: 00007f6fde016038 R14: 00007f6fde015fa0 R15: 00007fff99db9288 [ 450.507165][T18728] [ 451.386621][T18741] 8021q: VLANs not supported on ipvlan1 [ 451.394238][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3700'. [ 451.436168][T18747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3702'. [ 451.460797][T18749] netlink: 'syz.0.3703': attribute type 13 has an invalid length. [ 451.760954][T18761] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3704'. [ 451.774934][ T5839] block nbd0: Receive control failed (result -32) [ 451.846953][T18769] ipt_rpfilter: unknown options [ 452.453459][T18806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 452.558463][T18811] No such timeout policy "syz1" [ 452.564467][T18812] netlink: 'syz.0.3724': attribute type 1 has an invalid length. [ 452.698615][T18818] : entered promiscuous mode [ 452.747528][T18820] netlink: 'syz.0.3730': attribute type 5 has an invalid length. [ 452.877488][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3732'. [ 452.887582][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3732'. [ 452.898401][T18825] lo speed is unknown, defaulting to 1000 [ 452.910625][T18827] netlink: 'syz.2.3731': attribute type 39 has an invalid length. [ 453.033184][T18830] vlan2: entered allmulticast mode [ 453.038360][T18830] bridge_slave_0: entered allmulticast mode [ 453.288442][T18840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 454.106580][T18855] pim6reg: entered allmulticast mode [ 454.158911][T18855] pim6reg: left allmulticast mode [ 454.178128][T18869] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 454.357856][T18885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3743'. [ 454.613380][T18873] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.670648][T18875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.687540][T18875] bond2: (slave bond3): making interface the new active one [ 454.702825][T18875] bond2: (slave bond3): Enslaving as an active interface with an up link [ 454.771573][T18879] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 454.808757][T18885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.837397][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'. [ 454.880450][T18891] vlan2: entered promiscuous mode [ 454.885742][T18891] bond2: entered promiscuous mode [ 454.890807][T18891] bond3: entered promiscuous mode [ 454.923827][T18873] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.949365][T18899] IPVS: length: 24 != 216 [ 455.089982][T18873] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.104900][T18906] netlink: 'syz.1.3750': attribute type 6 has an invalid length. [ 455.128258][T18908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3751'. [ 455.199436][T18873] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.374118][T14104] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.400483][T18920] batadv1: entered promiscuous mode [ 455.406140][T18920] batadv1: entered allmulticast mode [ 455.412817][T18920] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 455.426577][T14108] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.458644][T18921] bridge0: port 1(veth5) entered blocking state [ 455.465428][T18921] bridge0: port 1(veth5) entered disabled state [ 455.471970][T18921] veth5: entered allmulticast mode [ 455.480079][T18921] veth5: entered promiscuous mode [ 455.521771][T18924] bridge0: port 2(veth7) entered blocking state [ 455.528349][T18924] bridge0: port 2(veth7) entered disabled state [ 455.535007][T18924] veth7: entered allmulticast mode [ 455.542547][T18924] veth7: entered promiscuous mode [ 455.560601][T18920] bridge0: port 3(veth0_to_bond) entered blocking state [ 455.579970][T18920] bridge0: port 3(veth0_to_bond) entered disabled state [ 455.599130][T18920] veth0_to_bond: entered allmulticast mode [ 455.617436][T18920] veth0_to_bond: entered promiscuous mode [ 455.672965][T14096] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.693966][T14096] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.789253][T18931] bridge0: entered allmulticast mode [ 455.900204][T18931] veth0_to_bond: left allmulticast mode [ 455.907833][T18931] veth0_to_bond: left promiscuous mode [ 455.922530][T18931] bridge0: port 3(veth0_to_bond) entered disabled state [ 455.955106][T18931] veth7: left allmulticast mode [ 455.960234][T18931] veth7: left promiscuous mode [ 455.995149][T18931] bridge0: port 2(veth7) entered disabled state [ 456.015920][T18931] veth5: left allmulticast mode [ 456.020837][T18931] veth5: left promiscuous mode [ 456.041843][T18931] bridge0: port 1(veth5) entered disabled state [ 456.104719][T18946] FAULT_INJECTION: forcing a failure. [ 456.104719][T18946] name failslab, interval 1, probability 0, space 0, times 0 [ 456.119426][T18946] CPU: 0 UID: 0 PID: 18946 Comm: syz.4.3764 Not tainted syzkaller #0 PREEMPT(full) [ 456.119455][T18946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.119468][T18946] Call Trace: [ 456.119477][T18946] [ 456.119486][T18946] dump_stack_lvl+0xe8/0x150 [ 456.119521][T18946] should_fail_ex+0x412/0x560 [ 456.119555][T18946] should_failslab+0xa8/0x100 [ 456.119584][T18946] __kmalloc_cache_noprof+0x88/0x660 [ 456.119609][T18946] ? kfree+0x1c1/0x630 [ 456.119626][T18946] ? ieee802154_nl_fill_phy+0xad/0x6f0 [ 456.119658][T18946] ieee802154_nl_fill_phy+0xad/0x6f0 [ 456.119690][T18946] ? __pfx_ieee802154_nl_fill_phy+0x10/0x10 [ 456.119715][T18946] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.119747][T18946] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 456.119790][T18946] ieee802154_dump_phy_iter+0x115/0x230 [ 456.119817][T18946] class_for_each_device+0x273/0x380 [ 456.119847][T18946] ? __pfx_wpan_phy_iter+0x10/0x10 [ 456.119869][T18946] ? __pfx_class_for_each_device+0x10/0x10 [ 456.119911][T18946] ? __mutex_lock+0x319/0x1300 [ 456.119945][T18946] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 456.119968][T18946] wpan_phy_for_each+0x99/0xe0 [ 456.119990][T18946] ? __pfx_wpan_phy_for_each+0x10/0x10 [ 456.120014][T18946] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 456.120046][T18946] ieee802154_dump_phy+0xd6/0x1d0 [ 456.120068][T18946] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 456.120092][T18946] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 456.120126][T18946] genl_dumpit+0x10b/0x1b0 [ 456.120152][T18946] netlink_dump+0x722/0xe80 [ 456.120192][T18946] ? __pfx_netlink_dump+0x10/0x10 [ 456.120235][T18946] ? genl_start+0x499/0x6c0 [ 456.120264][T18946] __netlink_dump_start+0x5cb/0x7e0 [ 456.120299][T18946] genl_family_rcv_msg_dumpit+0x213/0x310 [ 456.120325][T18946] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 456.120345][T18946] ? genl_get_cmd+0x6cb/0x960 [ 456.120372][T18946] ? __pfx_genl_start+0x10/0x10 [ 456.120390][T18946] ? __pfx_genl_dumpit+0x10/0x10 [ 456.120408][T18946] ? __pfx_genl_done+0x10/0x10 [ 456.120434][T18946] ? __lock_acquire+0x6b5/0x2cf0 [ 456.120465][T18946] genl_rcv_msg+0x5e8/0x7a0 [ 456.120493][T18946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.120513][T18946] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 456.120536][T18946] ? __lock_acquire+0x6b5/0x2cf0 [ 456.120573][T18946] netlink_rcv_skb+0x232/0x4b0 [ 456.120601][T18946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.120622][T18946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.120669][T18946] ? down_read+0x272/0x2e0 [ 456.120686][T18946] ? genl_rcv+0xd/0x40 [ 456.120707][T18946] genl_rcv+0x28/0x40 [ 456.120725][T18946] netlink_unicast+0x80f/0x9b0 [ 456.120758][T18946] ? __pfx_netlink_unicast+0x10/0x10 [ 456.120785][T18946] ? netlink_sendmsg+0x650/0xb40 [ 456.120810][T18946] ? skb_put+0x11b/0x210 [ 456.120844][T18946] netlink_sendmsg+0x813/0xb40 [ 456.120881][T18946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.120920][T18946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 456.120948][T18946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.120973][T18946] ____sys_sendmsg+0x972/0x9f0 [ 456.121004][T18946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.121034][T18946] ? import_iovec+0x73/0xa0 [ 456.121069][T18946] ___sys_sendmsg+0x2a5/0x360 [ 456.121095][T18946] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.121155][T18946] ? __fget_files+0x2a/0x420 [ 456.121183][T18946] ? __fget_files+0x3a0/0x420 [ 456.121223][T18946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 456.121246][T18946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.121276][T18946] ? __pfx_ksys_write+0x10/0x10 [ 456.121311][T18946] do_syscall_64+0x14d/0xf80 [ 456.121339][T18946] ? trace_irq_disable+0x3b/0x150 [ 456.121366][T18946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.121386][T18946] ? clear_bhb_loop+0x40/0x90 [ 456.121411][T18946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.121430][T18946] RIP: 0033:0x7f670ab9c799 [ 456.121448][T18946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.121465][T18946] RSP: 002b:00007f670baf8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.121487][T18946] RAX: ffffffffffffffda RBX: 00007f670ae15fa0 RCX: 00007f670ab9c799 [ 456.121501][T18946] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 456.121513][T18946] RBP: 00007f670baf8090 R08: 0000000000000000 R09: 0000000000000000 [ 456.121525][T18946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.121537][T18946] R13: 00007f670ae16038 R14: 00007f670ae15fa0 R15: 00007fff43283598 [ 456.121571][T18946] [ 456.579153][T18955] No such timeout policy "syz1" [ 456.763124][T18968] __nla_validate_parse: 6 callbacks suppressed [ 456.763145][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 456.804140][T18969] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3771'. [ 456.816402][T18971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.996209][T18985] netlink: 'syz.2.3775': attribute type 10 has an invalid length. [ 457.050122][T18987] bridge0: entered allmulticast mode [ 457.089972][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3773'. [ 457.134995][T18991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 457.654671][T19015] bond3: Removing last arp target with arp_interval on [ 457.707355][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3783'. [ 457.953757][T19032] 8021q: VLANs not supported on gre0 [ 458.270777][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3794'. [ 458.293660][T19043] pim6reg: entered allmulticast mode [ 458.305845][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3794'. [ 458.624141][T14092] bond0: (slave bond_slave_0): interface is now down [ 458.632826][T14092] bond0: (slave bond_slave_1): interface is now down [ 458.663277][T14092] bond0: now running without any active interface! [ 458.767710][T14092] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 458.799231][T14092] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 458.828592][T14092] bond0: active interface up! [ 458.836178][T19070] lo speed is unknown, defaulting to 1000 [ 459.007843][T19081] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3804'. [ 459.067733][T19083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.174874][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3807'. [ 459.357938][T19098] netlink: 'syz.0.3809': attribute type 11 has an invalid length. [ 459.547042][T19105] syzkaller0: entered promiscuous mode [ 459.561601][T19105] syzkaller0: entered allmulticast mode [ 459.893047][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 459.966227][T19123] lo speed is unknown, defaulting to 1000 [ 459.991440][T19128] x_tables: duplicate underflow at hook 2 [ 460.317437][T19142] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 460.763977][T19169] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 461.860262][T19219] __nla_validate_parse: 4 callbacks suppressed [ 461.860283][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3842'. [ 461.899045][T19215] lo speed is unknown, defaulting to 1000 [ 462.175246][T19232] netlink: 'syz.4.3847': attribute type 13 has an invalid length. [ 462.192635][T19232] netlink: 'syz.4.3847': attribute type 17 has an invalid length. [ 462.265588][T19235] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3848'. [ 463.035651][T19229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.069232][T19229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.590047][T19232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.599214][T19232] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.611755][T19232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.728726][T14097] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.747609][T14097] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.760293][T14097] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.772086][T14097] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.845303][T14097] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.861254][T14097] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.871628][T19252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3851'. [ 463.882259][T19251] bridge0: entered allmulticast mode [ 463.995399][T14097] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.009101][T14097] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.090928][T19268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3857'. [ 464.119210][T19254] netlink: 'syz.3.3854': attribute type 8 has an invalid length. [ 464.374691][T19279] FAULT_INJECTION: forcing a failure. [ 464.374691][T19279] name failslab, interval 1, probability 0, space 0, times 0 [ 464.406849][T19279] CPU: 0 UID: 0 PID: 19279 Comm: syz.3.3862 Not tainted syzkaller #0 PREEMPT(full) [ 464.406878][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.406890][T19279] Call Trace: [ 464.406898][T19279] [ 464.406907][T19279] dump_stack_lvl+0xe8/0x150 [ 464.406941][T19279] should_fail_ex+0x412/0x560 [ 464.406972][T19279] should_failslab+0xa8/0x100 [ 464.407000][T19279] __kmalloc_cache_noprof+0x88/0x660 [ 464.407022][T19279] ? kfree+0x1c1/0x630 [ 464.407039][T19279] ? ieee802154_nl_fill_phy+0xad/0x6f0 [ 464.407068][T19279] ieee802154_nl_fill_phy+0xad/0x6f0 [ 464.407098][T19279] ? __pfx_ieee802154_nl_fill_phy+0x10/0x10 [ 464.407120][T19279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 464.407150][T19279] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 464.407184][T19279] ieee802154_dump_phy_iter+0x115/0x230 [ 464.407212][T19279] class_for_each_device+0x273/0x380 [ 464.407242][T19279] ? __pfx_wpan_phy_iter+0x10/0x10 [ 464.407263][T19279] ? __pfx_class_for_each_device+0x10/0x10 [ 464.407295][T19279] ? __mutex_lock+0x319/0x1300 [ 464.407329][T19279] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 464.407351][T19279] wpan_phy_for_each+0x99/0xe0 [ 464.407380][T19279] ? __pfx_wpan_phy_for_each+0x10/0x10 [ 464.407401][T19279] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 464.407433][T19279] ieee802154_dump_phy+0xd6/0x1d0 [ 464.407455][T19279] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 464.407479][T19279] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 464.407513][T19279] genl_dumpit+0x10b/0x1b0 [ 464.407538][T19279] netlink_dump+0x722/0xe80 [ 464.407577][T19279] ? __pfx_netlink_dump+0x10/0x10 [ 464.407620][T19279] ? genl_start+0x499/0x6c0 [ 464.407649][T19279] __netlink_dump_start+0x5cb/0x7e0 [ 464.407684][T19279] genl_family_rcv_msg_dumpit+0x213/0x310 [ 464.407710][T19279] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 464.407730][T19279] ? genl_get_cmd+0x6cb/0x960 [ 464.407756][T19279] ? __pfx_genl_start+0x10/0x10 [ 464.407773][T19279] ? __pfx_genl_dumpit+0x10/0x10 [ 464.407791][T19279] ? __pfx_genl_done+0x10/0x10 [ 464.407818][T19279] ? __lock_acquire+0x6b5/0x2cf0 [ 464.407850][T19279] genl_rcv_msg+0x5e8/0x7a0 [ 464.407878][T19279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.407897][T19279] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 464.407920][T19279] ? __lock_acquire+0x6b5/0x2cf0 [ 464.407956][T19279] netlink_rcv_skb+0x232/0x4b0 [ 464.407984][T19279] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.408007][T19279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.408052][T19279] ? down_read+0x272/0x2e0 [ 464.408070][T19279] ? genl_rcv+0xd/0x40 [ 464.408092][T19279] genl_rcv+0x28/0x40 [ 464.408109][T19279] netlink_unicast+0x80f/0x9b0 [ 464.408143][T19279] ? __pfx_netlink_unicast+0x10/0x10 [ 464.408170][T19279] ? netlink_sendmsg+0x650/0xb40 [ 464.408195][T19279] ? skb_put+0x11b/0x210 [ 464.408228][T19279] netlink_sendmsg+0x813/0xb40 [ 464.408265][T19279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.408297][T19279] ? aa_sock_msg_perm+0xf1/0x1b0 [ 464.408325][T19279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.408351][T19279] ____sys_sendmsg+0x972/0x9f0 [ 464.408387][T19279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.408417][T19279] ? import_iovec+0x73/0xa0 [ 464.408451][T19279] ___sys_sendmsg+0x2a5/0x360 [ 464.408476][T19279] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.408535][T19279] ? __fget_files+0x2a/0x420 [ 464.408563][T19279] ? __fget_files+0x3a0/0x420 [ 464.408602][T19279] __x64_sys_sendmsg+0x1bd/0x2a0 [ 464.408625][T19279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.408656][T19279] ? __pfx_ksys_write+0x10/0x10 [ 464.408690][T19279] do_syscall_64+0x14d/0xf80 [ 464.408722][T19279] ? trace_irq_disable+0x3b/0x150 [ 464.408750][T19279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.408788][T19279] ? clear_bhb_loop+0x40/0x90 [ 464.408814][T19279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.408835][T19279] RIP: 0033:0x7ff1bf79c799 [ 464.408855][T19279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.408872][T19279] RSP: 002b:00007ff1c05cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.408895][T19279] RAX: ffffffffffffffda RBX: 00007ff1bfa15fa0 RCX: 00007ff1bf79c799 [ 464.408911][T19279] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 464.408925][T19279] RBP: 00007ff1c05cf090 R08: 0000000000000000 R09: 0000000000000000 [ 464.408937][T19279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.408949][T19279] R13: 00007ff1bfa16038 R14: 00007ff1bfa15fa0 R15: 00007ffed8a21a08 [ 464.408985][T19279] [ 464.870081][T19286] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 465.049922][T19294] netlink: 'syz.4.3866': attribute type 1 has an invalid length. [ 465.057965][T19294] netlink: 'syz.4.3866': attribute type 12 has an invalid length. [ 465.066330][T19294] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3866'. [ 465.169346][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'. [ 465.223598][T19303] netlink: 'syz.3.3869': attribute type 8 has an invalid length. [ 465.235980][T19297] bond0: (slave bond_slave_0): Releasing backup interface [ 465.275849][T19297] bond0: (slave bond_slave_1): Releasing backup interface [ 465.299228][T19297] team0: Port device team_slave_0 removed [ 465.312501][T19297] team0: Port device team_slave_1 removed [ 465.318894][T19297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.334746][T19297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.362340][T19297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.394884][T19310] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 465.419335][T19311] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 465.430297][T19310] 8021q: VLANs not supported on ipvlan1 [ 465.538894][T19311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 465.550406][T19323] FAULT_INJECTION: forcing a failure. [ 465.550406][T19323] name failslab, interval 1, probability 0, space 0, times 0 [ 465.563859][T19323] CPU: 1 UID: 0 PID: 19323 Comm: syz.0.3876 Not tainted syzkaller #0 PREEMPT(full) [ 465.563882][T19323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.563894][T19323] Call Trace: [ 465.563901][T19323] [ 465.563909][T19323] dump_stack_lvl+0xe8/0x150 [ 465.563939][T19323] should_fail_ex+0x412/0x560 [ 465.563966][T19323] should_failslab+0xa8/0x100 [ 465.563990][T19323] __kmalloc_cache_noprof+0x88/0x660 [ 465.564010][T19323] ? kfree+0x1c1/0x630 [ 465.564025][T19323] ? ieee802154_nl_fill_phy+0xad/0x6f0 [ 465.564051][T19323] ieee802154_nl_fill_phy+0xad/0x6f0 [ 465.564076][T19323] ? __pfx_ieee802154_nl_fill_phy+0x10/0x10 [ 465.564097][T19323] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 465.564125][T19323] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 465.564151][T19323] ieee802154_dump_phy_iter+0x115/0x230 [ 465.564175][T19323] class_for_each_device+0x273/0x380 [ 465.564201][T19323] ? __pfx_wpan_phy_iter+0x10/0x10 [ 465.564221][T19323] ? __pfx_class_for_each_device+0x10/0x10 [ 465.564268][T19323] ? __mutex_lock+0x319/0x1300 [ 465.564304][T19323] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 465.564327][T19323] wpan_phy_for_each+0x99/0xe0 [ 465.564351][T19323] ? __pfx_wpan_phy_for_each+0x10/0x10 [ 465.564374][T19323] ? __pfx_ieee802154_dump_phy_iter+0x10/0x10 [ 465.564408][T19323] ieee802154_dump_phy+0xd6/0x1d0 [ 465.564431][T19323] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 465.564456][T19323] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 465.564485][T19323] genl_dumpit+0x10b/0x1b0 [ 465.564506][T19323] netlink_dump+0x722/0xe80 [ 465.564540][T19323] ? __pfx_netlink_dump+0x10/0x10 [ 465.564578][T19323] ? genl_start+0x499/0x6c0 [ 465.564603][T19323] __netlink_dump_start+0x5cb/0x7e0 [ 465.564634][T19323] genl_family_rcv_msg_dumpit+0x213/0x310 [ 465.564659][T19323] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 465.564678][T19323] ? genl_get_cmd+0x6cb/0x960 [ 465.564700][T19323] ? __pfx_genl_start+0x10/0x10 [ 465.564716][T19323] ? __pfx_genl_dumpit+0x10/0x10 [ 465.564732][T19323] ? __pfx_genl_done+0x10/0x10 [ 465.564756][T19323] ? __lock_acquire+0x6b5/0x2cf0 [ 465.564796][T19323] genl_rcv_msg+0x5e8/0x7a0 [ 465.564821][T19323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.564839][T19323] ? __pfx_ieee802154_dump_phy+0x10/0x10 [ 465.564860][T19323] ? __lock_acquire+0x6b5/0x2cf0 [ 465.564895][T19323] netlink_rcv_skb+0x232/0x4b0 [ 465.564925][T19323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.564950][T19323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.564998][T19323] ? down_read+0x272/0x2e0 [ 465.565015][T19323] ? genl_rcv+0xd/0x40 [ 465.565033][T19323] genl_rcv+0x28/0x40 [ 465.565048][T19323] netlink_unicast+0x80f/0x9b0 [ 465.565077][T19323] ? __pfx_netlink_unicast+0x10/0x10 [ 465.565100][T19323] ? netlink_sendmsg+0x650/0xb40 [ 465.565122][T19323] ? skb_put+0x11b/0x210 [ 465.565152][T19323] netlink_sendmsg+0x813/0xb40 [ 465.565184][T19323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.565212][T19323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 465.565236][T19323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.565258][T19323] ____sys_sendmsg+0x972/0x9f0 [ 465.565285][T19323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.565311][T19323] ? import_iovec+0x73/0xa0 [ 465.565341][T19323] ___sys_sendmsg+0x2a5/0x360 [ 465.565363][T19323] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.565411][T19323] ? __fget_files+0x2a/0x420 [ 465.565436][T19323] ? __fget_files+0x3a0/0x420 [ 465.565471][T19323] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.565494][T19323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.565522][T19323] ? __pfx_ksys_write+0x10/0x10 [ 465.565552][T19323] do_syscall_64+0x14d/0xf80 [ 465.565577][T19323] ? trace_irq_disable+0x3b/0x150 [ 465.565601][T19323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.565619][T19323] ? clear_bhb_loop+0x40/0x90 [ 465.565640][T19323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.565657][T19323] RIP: 0033:0x7fa4d279c799 [ 465.565674][T19323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.565688][T19323] RSP: 002b:00007fa4d368c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.565706][T19323] RAX: ffffffffffffffda RBX: 00007fa4d2a15fa0 RCX: 00007fa4d279c799 [ 465.565719][T19323] RDX: 0000000020060000 RSI: 0000200000000640 RDI: 0000000000000004 [ 465.565730][T19323] RBP: 00007fa4d368c090 R08: 0000000000000000 R09: 0000000000000000 [ 465.565741][T19323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.565751][T19323] R13: 00007fa4d2a16038 R14: 00007fa4d2a15fa0 R15: 00007ffcaa71f588 [ 465.565785][T19323] [ 465.620464][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3873'. [ 465.670981][T19317] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 466.112745][T19317] bond4: (slave batadv2): making interface the new active one [ 466.133751][T19317] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 466.170538][T19322] netlink: 'syz.4.3875': attribute type 4 has an invalid length. [ 466.197797][T19311] bond4 (unregistering): (slave batadv2): Releasing active interface [ 466.216217][T19311] bond4 (unregistering): Released all slaves [ 466.383100][T19332] netlink: 'syz.4.3875': attribute type 4 has an invalid length. [ 466.462760][T19324] netlink: 'syz.4.3875': attribute type 2 has an invalid length. [ 466.592418][T19341] pim6reg: entered allmulticast mode [ 466.612965][T19341] pim6reg: left allmulticast mode [ 466.738867][T19346] pim6reg: entered allmulticast mode [ 466.865053][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3883'. [ 467.065932][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 467.065934][T19361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'. [ 467.190409][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3886'. [ 467.201646][T19367] pim6reg: left allmulticast mode [ 467.246140][T19368] netlink: 'syz.3.3887': attribute type 9 has an invalid length. [ 467.255017][T19368] netlink: 'syz.3.3887': attribute type 6 has an invalid length. [ 467.500940][T19381] block nbd0: reconnected socket [ 467.507528][ T5839] block nbd0: Receive control failed (result -107) [ 467.667972][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 467.685068][T19394] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3897'. [ 467.707125][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3895'. [ 467.812756][T19404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3900'. [ 468.016105][T19410] syzkaller0: entered promiscuous mode [ 468.023372][T19410] syzkaller0: entered allmulticast mode [ 468.137666][T19410] geneve2: entered promiscuous mode [ 468.153575][T14105] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.179390][T19418] ipt_rpfilter: unknown options [ 468.184288][T14105] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.184331][T14105] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.184367][T14105] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.439548][T19423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.451756][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3910'. [ 468.481380][T19423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.528201][T19428] netlink: 'syz.0.3910': attribute type 15 has an invalid length. [ 468.539185][T19428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3910'. [ 468.670820][T19438] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.678709][T19438] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.846996][T19438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.869790][T19438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.451805][T19457] syzkaller0: entered promiscuous mode [ 469.459799][T19457] syzkaller0: entered allmulticast mode [ 469.494095][T14105] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.509569][T14105] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.597875][T14105] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.628615][T14105] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.668504][T14105] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.699742][T14105] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.731425][T14105] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.766170][T14105] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.294511][T19513] openvswitch: netlink: Tunnel attr 9742 out of range max 16 [ 470.317048][T19516] unsupported nlmsg_type 40 [ 470.397513][T19520] erspan0: entered promiscuous mode [ 470.423703][T19522] netlink: 'syz.2.3930': attribute type 3 has an invalid length. [ 471.097217][T19558] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 471.148028][T19554] lo speed is unknown, defaulting to 1000 [ 471.161781][T19563] lo: Caught tx_queue_len zero misconfig [ 471.515911][T19571] bridge0: entered allmulticast mode [ 471.615584][T19577] bridge_slave_1: left allmulticast mode [ 471.628703][T19577] bridge_slave_1: left promiscuous mode [ 471.645483][T19577] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.672429][T19577] bridge_slave_0: left allmulticast mode [ 471.684841][T19577] bridge_slave_0: left promiscuous mode [ 471.701068][T19577] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.791448][T19552] lo speed is unknown, defaulting to 1000 [ 471.972186][T19587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.979491][T19587] IPv6: NLM_F_CREATE should be set when creating new route [ 471.986799][T19587] IPv6: NLM_F_CREATE should be set when creating new route [ 472.143337][T19593] __nla_validate_parse: 7 callbacks suppressed [ 472.143359][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3952'. [ 472.198138][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'. [ 472.948789][T19623] IPv6: NLM_F_REPLACE set, but no existing node found! [ 473.058459][T19620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3957'. [ 473.071384][T19620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3957'. [ 473.457718][T19636] FAULT_INJECTION: forcing a failure. [ 473.457718][T19636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.474818][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.3.3961 Not tainted syzkaller #0 PREEMPT(full) [ 473.474846][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.474859][T19636] Call Trace: [ 473.474868][T19636] [ 473.474877][T19636] dump_stack_lvl+0xe8/0x150 [ 473.474912][T19636] should_fail_ex+0x412/0x560 [ 473.474954][T19636] _copy_from_user+0x2d/0xb0 [ 473.474989][T19636] br_ioctl_stub+0x315/0xd60 [ 473.475086][T19636] ? do_vfs_ioctl+0x1166/0x1530 [ 473.475112][T19636] ? __pfx_br_ioctl_stub+0x10/0x10 [ 473.475134][T19636] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.475162][T19636] ? sock_ioctl+0x4fa/0x7f0 [ 473.475196][T19636] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 473.475247][T19636] ? __pfx_br_ioctl_stub+0x10/0x10 [ 473.475267][T19636] sock_ioctl+0x523/0x7f0 [ 473.475295][T19636] ? __pfx_sock_ioctl+0x10/0x10 [ 473.475320][T19636] ? __fget_files+0x2a/0x420 [ 473.475350][T19636] ? __fget_files+0x3a0/0x420 [ 473.475379][T19636] ? __fget_files+0x2a/0x420 [ 473.475414][T19636] ? bpf_lsm_file_ioctl+0x9/0x20 [ 473.475441][T19636] ? __pfx_sock_ioctl+0x10/0x10 [ 473.475465][T19636] __se_sys_ioctl+0xfc/0x170 [ 473.475493][T19636] do_syscall_64+0x14d/0xf80 [ 473.475523][T19636] ? trace_irq_disable+0x3b/0x150 [ 473.475552][T19636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.475574][T19636] ? clear_bhb_loop+0x40/0x90 [ 473.475600][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.475621][T19636] RIP: 0033:0x7ff1bf79c799 [ 473.475642][T19636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.475660][T19636] RSP: 002b:00007ff1c058d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.475681][T19636] RAX: ffffffffffffffda RBX: 00007ff1bfa16180 RCX: 00007ff1bf79c799 [ 473.475696][T19636] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 000000000000000f [ 473.475711][T19636] RBP: 00007ff1c058d090 R08: 0000000000000000 R09: 0000000000000000 [ 473.475723][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.475735][T19636] R13: 00007ff1bfa16218 R14: 00007ff1bfa16180 R15: 00007ffed8a21a08 [ 473.475767][T19636] [ 474.315075][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 474.506297][T19671] netlink: 'syz.4.3972': attribute type 10 has an invalid length. [ 474.514465][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'. [ 474.524272][T19671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3972'. [ 474.535116][T19673] netlink: 'syz.0.3973': attribute type 30 has an invalid length. [ 474.555087][T19673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'. [ 474.583838][T19671] team0: Port device geneve0 added [ 474.589202][T19673] netlink: 'syz.0.3973': attribute type 30 has an invalid length. [ 474.610603][T19674] IPVS: length: 4096 != 24 [ 474.617065][T14108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.637981][T14108] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.665494][T19671] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3972'. [ 474.689214][T19671] bridge_slave_1: default FDB implementation only supports local addresses [ 474.711804][T14108] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.720679][T14108] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.771442][T14108] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.779871][T14108] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.823797][T14108] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.852088][T14108] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.895013][T19688] gre0 speed is unknown, defaulting to 1000 [ 474.914787][T19688] gre0 speed is unknown, defaulting to 1000 [ 474.924381][T19688] gre0 speed is unknown, defaulting to 1000 [ 475.302602][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 475.524043][ T5839] Bluetooth: hci1: link tx timeout [ 475.530196][ T5839] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 475.541140][ T51] Bluetooth: hci1: link tx timeout [ 475.565535][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 475.576582][T19688] infiniband syz1: set active [ 475.581962][ T7781] gre0 speed is unknown, defaulting to 1000 [ 475.671020][ T30] audit: type=1800 audit(1773563117.141:6): pid=19700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3979" name="memory.events" dev="tmpfs" ino=776 res=0 errno=0 [ 475.691389][T19688] infiniband syz1: added gre0 [ 475.767142][T19688] RDS/IB: syz1: added [ 475.772442][T19688] smc: adding ib device syz1 with port count 1 [ 475.778646][T19688] smc: ib device syz1 port 1 has no pnetid [ 475.785460][ T7759] gre0 speed is unknown, defaulting to 1000 [ 475.797010][T19688] gre0 speed is unknown, defaulting to 1000 [ 476.538763][T14105] bond0 (unregistering): left promiscuous mode [ 476.545243][T14105] bond_slave_0: left promiscuous mode [ 476.550893][T14105] bond_slave_1: left promiscuous mode [ 476.562763][T14105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.576882][T14105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.586562][T14105] bond0 (unregistering): Released all slaves [ 476.598118][T14105] bond1 (unregistering): Released all slaves [ 476.613562][T14105] bond2 (unregistering): Released all slaves [ 476.630281][T14105] bond3 (unregistering): Released all slaves [ 476.652772][T14105] bond4 (unregistering): (slave veth9): Releasing active interface [ 476.662572][T14105] bond4 (unregistering): Released all slaves [ 476.678493][T14105] bond5 (unregistering): Released all slaves [ 476.737714][T19688] gre0 speed is unknown, defaulting to 1000 [ 476.823903][T19732] lo speed is unknown, defaulting to 1000 [ 476.856543][T14105] tipc: Left network mode [ 477.046977][T19751] netlink: 'syz.2.3993': attribute type 1 has an invalid length. [ 477.313502][T19762] __nla_validate_parse: 6 callbacks suppressed [ 477.313523][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 477.370272][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 477.383544][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 477.424338][T19766] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3996'. [ 477.453823][T19749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3992'. [ 477.471165][T19766] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 477.552512][T19747] macvtap0: entered promiscuous mode [ 477.557886][T19747] virtio_net virtio1 eth0: entered promiscuous mode [ 477.572794][T19770] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3995'. [ 477.595271][T19747] macvtap0: entered allmulticast mode [ 477.600789][T19747] virtio_net virtio1 eth0: entered allmulticast mode [ 477.613697][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 477.655871][T19773] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 477.680204][T19732] gre0 speed is unknown, defaulting to 1000 [ 477.863752][T19773] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 478.058875][T19784] lo speed is unknown, defaulting to 1000 [ 478.114998][T19780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3999'. [ 478.382236][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 478.477608][T19688] gre0 speed is unknown, defaulting to 1000 [ 478.884602][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 479.129424][T19688] gre0 speed is unknown, defaulting to 1000 [ 479.136970][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4010'. [ 479.188301][T19842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.540536][ T7759] IPVS: starting estimator thread 0... [ 479.663407][T19850] IPVS: using max 28 ests per chain, 67200 per kthread [ 479.738381][T19688] gre0 speed is unknown, defaulting to 1000 [ 479.917947][T19867] team0: Port device veth9 added [ 480.582426][T19874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.759376][T19874] hsr0: left promiscuous mode [ 480.891341][ C0] ------------[ cut here ]------------ [ 480.897320][ C0] ODEBUG: free active (active state 0) object: ffff88801c6a0490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 480.901634][T19874] vlan0: left promiscuous mode [ 480.910450][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz.2.4018/19873 [ 480.925850][ C0] Modules linked in: [ 480.930061][ C0] CPU: 0 UID: 0 PID: 19873 Comm: syz.2.4018 Not tainted syzkaller #0 PREEMPT(full) [ 480.939520][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.949655][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 480.956093][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 480.975790][ C0] RSP: 0000:ffffc90004a3fa88 EFLAGS: 00010246 [ 480.981945][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a4cf1b0 RCX: 0000000000000000 [ 480.989953][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 480.998006][ C0] RBP: ffffffff8bcf3ce0 R08: ffff88801c6a0490 R09: ffffffff8bcf5000 [ 481.006069][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88801c6a0600 [ 481.014113][ C0] R13: ffffffff901bee60 R14: ffff88801c6a0000 R15: ffff88801c6a0490 [ 481.022171][ C0] FS: 000055557eb76500(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 481.031146][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.037798][ C0] CR2: 000000110c38ca19 CR3: 00000000343be000 CR4: 00000000003526f0 [ 481.045868][ C0] Call Trace: [ 481.049173][ C0] [ 481.052156][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 481.057841][ C0] kfree+0x13a/0x630 [ 481.061792][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 481.067018][ C0] rose_timer_expiry+0x4cb/0x600 [ 481.072014][ C0] ? call_timer_fn+0x178/0x640 [ 481.076847][ C0] call_timer_fn+0x192/0x640 [ 481.081533][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.087033][ C0] ? call_timer_fn+0xd4/0x640 [ 481.091797][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 481.096970][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.102272][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.107791][ C0] __run_timer_base+0x652/0x8b0 [ 481.112758][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 481.118204][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 481.123519][ C0] run_timer_softirq+0xb7/0x170 [ 481.128415][ C0] handle_softirqs+0x22a/0x870 [ 481.133293][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 481.138110][ C0] __irq_exit_rcu+0x5f/0x150 [ 481.142811][ C0] irq_exit_rcu+0x9/0x30 [ 481.147112][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 481.152867][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.158894][ C0] RIP: 0033:0x7fc1de65076e [ 481.163417][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 92 18 3b 00 <89> f0 4c 8d 05 89 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 [ 481.183106][ C0] RSP: 002b:00007fff07968978 EFLAGS: 00000246 [ 481.189233][ C0] RAX: 000000000001eece RBX: ffffffff8a28a9f2 RCX: ffffffff8a28a722 [ 481.197317][ C0] RDX: ffffffff8a28a30d RSI: ffffffff8a28a9f2 RDI: 0000000000000017 [ 481.205377][ C0] RBP: 0000000000000000 R08: 00007fc1dea00000 R09: 00007fc1dea02000 [ 481.213455][ C0] R10: 000000008a28a9f6 R11: 0000000000000017 R12: 00007fc1dea16038 [ 481.221512][ C0] R13: 000000000001747e R14: ffffffff8a28a30d R15: 00007fc1df545720 [ 481.229522][ C0] ? fib_disable_ip+0xcd/0x170 [ 481.234396][ C0] ? inet_rtm_delroute+0x232/0x330 [ 481.239568][ C0] ? inet_rtm_newroute+0x1c2/0x250 [ 481.244801][ C0] ? fib_disable_ip+0xcd/0x170 [ 481.249612][ C0] ? inet_rtm_delroute+0x232/0x330 [ 481.254840][ C0] [ 481.257924][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.265250][ C0] CPU: 0 UID: 0 PID: 19873 Comm: syz.2.4018 Not tainted syzkaller #0 PREEMPT(full) [ 481.274659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.284746][ C0] Call Trace: [ 481.288056][ C0] [ 481.291024][ C0] vpanic+0x56c/0xa60 [ 481.295095][ C0] ? __pfx__printk+0x10/0x10 [ 481.299730][ C0] ? __pfx_vpanic+0x10/0x10 [ 481.304274][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 481.309611][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 481.314869][ C0] panic+0xc5/0xd0 [ 481.318647][ C0] ? __pfx_panic+0x10/0x10 [ 481.323132][ C0] __warn+0x315/0x4f0 [ 481.327167][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 481.332947][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 481.338718][ C0] __report_bug+0x29a/0x540 [ 481.343384][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 481.349152][ C0] ? __pfx___report_bug+0x10/0x10 [ 481.354228][ C0] ? css_rstat_updated+0x23a/0x530 [ 481.359394][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 481.364380][ C0] report_bug_entry+0x19a/0x290 [ 481.369280][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 481.375039][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 481.380813][ C0] handle_bug+0xce/0x200 [ 481.385096][ C0] exc_invalid_op+0x1a/0x50 [ 481.389642][ C0] asm_exc_invalid_op+0x1a/0x20 [ 481.394525][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 481.400904][ C0] Code: 89 44 24 20 e8 e7 2c 77 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 bb 27 8c 48 c7 c2 c0 c0 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 481.420547][ C0] RSP: 0000:ffffc90004a3fa88 EFLAGS: 00010246 [ 481.426660][ C0] RAX: ffffffff8a965980 RBX: ffffffff9a4cf1b0 RCX: 0000000000000000 [ 481.434674][ C0] RDX: ffffffff8c27c0c0 RSI: ffffffff8c27bb40 RDI: ffffffff901bee60 [ 481.442685][ C0] RBP: ffffffff8bcf3ce0 R08: ffff88801c6a0490 R09: ffffffff8bcf5000 [ 481.450693][ C0] R10: dffffc0000000000 R11: ffffffff81b1e6a0 R12: ffff88801c6a0600 [ 481.458699][ C0] R13: ffffffff901bee60 R14: ffff88801c6a0000 R15: ffff88801c6a0490 [ 481.466712][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 481.472146][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 481.477836][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 481.483536][ C0] kfree+0x13a/0x630 [ 481.487475][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 481.492652][ C0] rose_timer_expiry+0x4cb/0x600 [ 481.497647][ C0] ? call_timer_fn+0x178/0x640 [ 481.502459][ C0] call_timer_fn+0x192/0x640 [ 481.507093][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.512610][ C0] ? call_timer_fn+0xd4/0x640 [ 481.517343][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 481.522516][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.527779][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 481.533310][ C0] __run_timer_base+0x652/0x8b0 [ 481.538219][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 481.543649][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 481.548910][ C0] run_timer_softirq+0xb7/0x170 [ 481.553806][ C0] handle_softirqs+0x22a/0x870 [ 481.558636][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 481.563454][ C0] __irq_exit_rcu+0x5f/0x150 [ 481.568084][ C0] irq_exit_rcu+0x9/0x30 [ 481.572356][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 481.578032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 481.584054][ C0] RIP: 0033:0x7fc1de65076e [ 481.588502][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 40 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 92 18 3b 00 <89> f0 4c 8d 05 89 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 [ 481.608147][ C0] RSP: 002b:00007fff07968978 EFLAGS: 00000246 [ 481.614257][ C0] RAX: 000000000001eece RBX: ffffffff8a28a9f2 RCX: ffffffff8a28a722 [ 481.622258][ C0] RDX: ffffffff8a28a30d RSI: ffffffff8a28a9f2 RDI: 0000000000000017 [ 481.630259][ C0] RBP: 0000000000000000 R08: 00007fc1dea00000 R09: 00007fc1dea02000 [ 481.638270][ C0] R10: 000000008a28a9f6 R11: 0000000000000017 R12: 00007fc1dea16038 [ 481.646276][ C0] R13: 000000000001747e R14: ffffffff8a28a30d R15: 00007fc1df545720 [ 481.654312][ C0] ? fib_disable_ip+0xcd/0x170 [ 481.659136][ C0] ? inet_rtm_delroute+0x232/0x330 [ 481.664300][ C0] ? inet_rtm_newroute+0x1c2/0x250 [ 481.669460][ C0] ? fib_disable_ip+0xcd/0x170 [ 481.674268][ C0] ? inet_rtm_delroute+0x232/0x330 [ 481.679437][ C0] [ 481.683108][ C0] Kernel Offset: disabled [ 481.687443][ C0] Rebooting in 86400 seconds..