last executing test programs: 2.701602795s ago: executing program 1 (id=2155): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)=',', 0x1, 0x4000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="32e28c16ae421e7f003c3eea1c5ecda8bd236e761facd8e694e45471bbbbfe03a0e409d5b2fca15b2f3df8ed146d1136378fc13650c40839af8558d560fcfc480a17f31c997c9c6a2f8a76713337e8527002a862813c097f8f1b", 0x5a, 0x40801, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0, 0x100000}, &(0x7f0000000040)=0x40) 1.747562921s ago: executing program 1 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x4a044}, 0x20044010) 1.654340498s ago: executing program 1 (id=2175): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.562419331s ago: executing program 4 (id=2177): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x350, 0xa, 0x148, 0x350, 0x60, 0x420, 0x2a8, 0x2a8, 0x420, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {0xff}}, 0x0, 0x2e0, 0x350, 0x0, {0x200003ae, 0x7f00}, [@common=@set={{0x40}, {{0x0, [0x4, 0x2, 0x0, 0x0, 0x2], 0x1, 0x4}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'lo\x00', 'syzkaller1\x00', {0xff}, {}, 0x1, 0x3, 0x33}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x0, 0x4, 0x4, 0x5, 0x2], 0x1}, {0x3, [0x4, 0x2, 0x9, 0x4, 0x0, 0x4], 0x5, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x518) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) recvmmsg(r3, &(0x7f00000089c0)=[{{&(0x7f00000009c0)=@isdn, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000006c0)=""/11, 0xb}, {&(0x7f00000033c0)=""/156, 0x9c}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000003480)=""/241, 0xf1}, {&(0x7f0000000cc0)=""/172, 0xac}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/148, 0x94}, {&(0x7f0000008c00)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/127, 0x7f}], 0x9, &(0x7f0000000f80)=""/85, 0x55}, 0x7}, {{&(0x7f0000001000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000001080)=""/169, 0xa9}, {&(0x7f0000001140)=""/248, 0xf8}], 0x2, &(0x7f0000001240)}, 0x80000000}, {{&(0x7f0000001280)=@alg, 0x80, &(0x7f00000046c0)}, 0x8}, {{&(0x7f0000004740)=@phonet, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005800)=""/208, 0xd0}, {&(0x7f00000057c0)=""/35, 0x23}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f0000005900)=""/109, 0x6d}, {&(0x7f0000000a40)=""/159, 0x9f}], 0x5, &(0x7f0000005ac0)=""/196, 0xc4}, 0x856}, {{&(0x7f0000005bc0)=@qipcrtr, 0x80, &(0x7f0000007380)=[{&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000005980)=""/85, 0x55}, {&(0x7f0000006cc0)=""/160, 0xa0}, {&(0x7f0000006d80)=""/232, 0xe8}, {&(0x7f0000006e80)=""/229, 0xe5}, {&(0x7f0000006f80)=""/188, 0xbc}, {&(0x7f0000007040)=""/208, 0xd0}, {&(0x7f0000007140)=""/62, 0x3e}, {&(0x7f0000007180)=""/200, 0xc8}, {&(0x7f0000007280)=""/226, 0xe2}], 0xa, &(0x7f0000007440)=""/163, 0xa3}, 0x4}, {{&(0x7f0000007500)=@nfc_llcp, 0x80, &(0x7f00000088c0)=[{&(0x7f0000007580)=""/220, 0xdc}, {&(0x7f0000007680)=""/127, 0x7f}, {&(0x7f0000007700)=""/4096, 0x1000}, {&(0x7f0000008700)=""/92, 0x5c}, {&(0x7f0000008780)=""/159, 0x9f}, {&(0x7f0000008840)=""/97, 0x61}], 0x6, &(0x7f0000008940)=""/101, 0x65}, 0x42}], 0x6, 0x40002105, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @empty, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)="fa2c6dead498135182c012672f4e936095b7f017c78f7914f9657c12d79bbc8fd1a9eef83d2010127f1e4092b6678e91cf213c791be14e15a7f7d652a08f3db398288083871b4ca75cd8d841bbd88296d16b20ec1dd8eadb38f05c54128689d47711764659a54e4d41d0194383b9d7893859f0e37f6cc494629fb4d3705091c775882dc29267debd105393528f2d3bb4aa5928d5cab56e0ffbb39f5929b435d97bf6f4bf27486ca345c76800337b9ff0f88f6aec44dac48e3470", 0xba}, {&(0x7f0000000600)="85c1fcea4dfd9154c8dff5d9dc76562f25a8832169f305f600ade53897930ae15d90629d92c0011c6344e46a10b78f454fd7919e3a1f1e68d419bd044395c61d1abeeb45f0850a4f698c50a544505767c6ca3ab6d9470dbc16787f8a912bdd63377731a4f44c3a6cd8e8a0115fa92640892b0d982913c1ae16f050d4ab76f0eb83fe3700446fa8831dce17eeeb7326308671f9306d7373d4bcb416ed84e91883530bc43c46342fb48f12aacb2a84ac2068e03bbbc36709e4", 0xb8}, {&(0x7f0000000940)="8365e9fa333f34494c2f15f4114029780332833361c0f054f5080c66575ddfedac6fb3215183c736c08cdd5c38f95072069b07b19aa0664746ed8fc0377361b85d71fb25c9814e7e20", 0x49}, {&(0x7f0000000700)="ef2ff2f8595939bf8cb973fcd3f5f5", 0xf}, {&(0x7f0000000740)="72f142a590e1d25abed949dc923970e91537e1c73657d74bb08d2487b742cf78d2f2f49ba0c8753e6bd9e6389484c6be9ffe203b8185b77a9fe1d5b12a1908d563413033e3305ea2a88da0289c3be699a29fedc6ed1d3959e6bc7c6df836288f8184bae67deda0bfe883ad15e394de09687c748d599e8e39402c284a4717b8a4dc98cc2cc398ecbcb98fdfcae54b5204095fb87893fa32f35777a8eaf00068682e742f788550fc630e63dd5f44b9b33b2d9f542caa9f2a7dbed80b48862149de735a38029b989791a0406c269d57480be80e36d700eb196716b4a07b2c5dfbbe2ea3", 0xe2}, {&(0x7f0000000840)="3d5b48ddf7b2e4a9bca529f4501726c3ea9f62c1d0046bc5092ad07e08a0502f8b601cf72794fc7678fedb2f1a4d1b7ed19cabdc54aab4fc7e5648d3f16fd2248a6a5dd5850435", 0x47}], 0x6}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca057134ec3f0a1c, 0x0}, &(0x7f0000000480)=0x40) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001240), &(0x7f0000003380)=0x14) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="7bf88e47183d89190e51ff2e0f2f264dcc47a434605cd8cf55a0dabeec02ce4109fbb52376beedfd6eb6b4925a9091eef49125cc27f094ddb2a918d88639206ef5e3a34774bce0acf8026853b7de4f78", 0xffffff8f}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="00050000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000003000018006000400000000000600010000000000060002000000000004000300fc0100"/62], 0x44}}, 0x0) 1.348825808s ago: executing program 4 (id=2179): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0xe4}, {0x3, 0x2, 0x8, 0x2}, {0xe92, 0xff, 0x3, 0x7}]}, 0x10) sendto(r0, &(0x7f0000000380)="e0c5aa07b4ead434167fc17561999d2021113a4ee91e4d93747da8c1414cccb73727e486698d55eac5f30f910310f6cc981404769f2b64ed30ce67e1594438aa7d52dcd355d6f0ee1049e8c854082b73406ea3e55b57330b00093f8274f20dc4d15f8af4f318ffffff5a36953e429bcb82053aaff8dc780398a6d7611b4c9aee6d64a8b488a3a608820ece182cf874b4b43d48080d8dcd354ec48dd59837d0983be7b58f7edc9100000000000000000f5be613423760bd932fa7982cd19dd7b8092600"/208, 0xd0, 0x4000844, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000080)=[{r0, 0x180}, {r1, 0x160a}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x80]}, 0x8) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x400010f0, 0x0, 0x0) 1.238388716s ago: executing program 2 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32], 0x10e0}}, 0x0) 1.100264466s ago: executing program 1 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffff8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92d3}, 0x94) 1.099869252s ago: executing program 2 (id=2183): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xfffffffc}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0xa, 0x1, 0x3ff, 0x101, 0x3}, &(0x7f0000000180)=0x98) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000001c0), 0x4) r3 = accept(r2, &(0x7f0000000200)=@tipc=@name, &(0x7f0000000280)=0x80) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x400, 0x4, 0xf5a5, 0x9}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={r4, 0x1000}, 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) epoll_create1(0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000480)=""/185, &(0x7f0000000540)=0xb9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x27}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) openat$cgroup(r7, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x88, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x804) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000980)=@ccm_128={{0x304}, "c29bb04e169d254b", "add7731881675b5b1c070dea6690c7c2", "b926756c", "77426a59a54a6399"}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r10 = accept4$nfc_llcp(r7, &(0x7f00000009c0), &(0x7f0000000a40)=0x60, 0x80000) recvmmsg(r10, &(0x7f0000001a40)=[{{&(0x7f0000000a80)=@nfc, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000bc0)=""/138, 0x8a}, {&(0x7f0000000c80)=""/244, 0xf4}, {&(0x7f0000000d80)=""/220, 0xdc}], 0x4, &(0x7f0000000ec0)=""/244, 0xf4}}, {{&(0x7f0000000fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001040)=""/203, 0xcb}, {&(0x7f0000001140)=""/115, 0x73}, {&(0x7f00000011c0)=""/250, 0xfa}, {&(0x7f00000012c0)=""/119, 0x77}, {&(0x7f0000001340)=""/225, 0xe1}, {&(0x7f0000001440)=""/50, 0x32}, {&(0x7f0000001480)=""/71, 0x47}], 0x7, &(0x7f0000001580)=""/37, 0x25}, 0x9}, {{&(0x7f00000015c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001640)}, {&(0x7f0000001680)=""/198, 0xc6}, {&(0x7f0000001780)=""/250, 0xfa}], 0x3}, 0xa31}, {{&(0x7f00000018c0)=@xdp, 0x80, &(0x7f0000001940), 0x0, &(0x7f0000001980)=""/181, 0xb5}, 0x9}], 0x4, 0x0, &(0x7f0000001b40)={0x0, 0x989680}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r11, &(0x7f00000035c0)=[{{&(0x7f0000001b80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/212, 0xd4}, {&(0x7f0000001d00)=""/218, 0xda}], 0x2, &(0x7f0000001e40)=""/84, 0x54}, 0x632}, {{&(0x7f0000001ec0)=@ax25={{}, [@netrom, @rose, @rose, @default, @rose, @bcast, @null, @null]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000001f40)=""/35, 0x23}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/8, 0x8}, {&(0x7f0000002fc0)=""/8, 0x8}, {&(0x7f0000003000)=""/252, 0xfc}, {&(0x7f0000003100)=""/232, 0xe8}, {&(0x7f0000003200)=""/73, 0x49}, {&(0x7f0000003280)=""/102, 0x66}], 0x8, &(0x7f0000003380)=""/10, 0xa}, 0x3c3}, {{&(0x7f00000033c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003440)=""/57, 0x39}, {&(0x7f0000003480)=""/172, 0xac}], 0x2, &(0x7f0000003580)=""/49, 0x31}, 0x5e}], 0x3, 0x2000, &(0x7f0000003680)={0x77359400}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0xcb9bf000) 968.304587ms ago: executing program 1 (id=2185): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000080)="1f41b5dbc673ea2091af219ca7bd9eb46b35c6342d9eee0c8da619c59ae00f63e89c44a72a2857d33844643d862b37e86e90fdf4fc3e9915ba276a16409c10b6c16529e1aaabc1a83bc6739a7ee12b23f9c9ae91", 0x54, 0x4000084, &(0x7f0000000100)={0xa, 0x4e21, 0xb, @mcast1, 0xb5ee}, 0x1c) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/77, 0x4d}, 0x2}], 0x1, 0x22023, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) 840.417126ms ago: executing program 2 (id=2188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01010000000000000000020000000900010073797a30000000000900020073797a30000000002c000000200a01010000000000000000020000040c000540000000d8000000020900010073797a30"], 0x80}}, 0x0) (fail_nth: 3) 803.350997ms ago: executing program 2 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000000201040000000000000000020000056400028014000180080001000000000008000200ac1e00010c00028005000100000000002c000180140003000000000000000000000000000000000014000400fc000000000000000000000000000000140001800800010000000000050002000a0101021800038014e10080080001006401010008000200ffffffff040001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000502000a28000000000a030000000000000000000a00000708000240000000020900010073797a8a0c2f6cd0bef50091877886510c2b31000000c372000000030a010100000000000000000a0000070900010073797a310000000009000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)="38cba69c358441859c31f0f3a399795e4fb788b80d25fb3e6ac8ffd52843f30afb7a0a1c68b5a6a9958a46a9b573e24aea5609c2e51f973ad3854190578fd29adf818ea9c19ce296fffead8ad2eab638c661d683c73b695f01658c40a2e677ff436ff94984d44241b8e5ccff775a8e9eab6ec98ddcdb43d229133bbb7eee6432627eac84f4b3a07bc7153456459f840ae8c0999ceab77d87486c782d83352e9c379cd90860b200fa0b66065f7a7c693cb77ab4e0e1106a9b17f3f695c52810023dffabb8d4e39745ad29aac89ce7", 0xce}, {&(0x7f0000000600)="a69d5b502883360a645ac21e3cb8dd43b85dc9bc4bd7904b727192285682217f1449a99036140f55f2bfa7a3711f1c0631739f47345728ef77ad2f03fb89016b91ba3b18eb69b18a57233ce185714fbcc29d3a588cb4ac72f72749655674f97dd490db17e0d07d21401e5f4b08c7ac66f645076bb675fbc2811de0077f000adf870bfe81246320ee3203e93dd56891ba84594eac740a02a188efcde7339172a51ccdd2fa981866ebcf2a6fb0c83d63a915aa8769f6c606", 0xb7}, {&(0x7f00000002c0)="331bf82e38dcbc0a6ea7e5d68becae28fcc25c345119845f5b51a8493aa7d9fe44ed651f9f07d9f080851af3db62a8f355379c56952ae8c994e7cab75447a80c890ac19836a533c67f389dd94df066c32254a6b809fd", 0x56}, {&(0x7f00000006c0)="c4b36afd6120945fce56b85f61f93d5d7234491c203e27aea57ac4451c8f970df8a844b6d68e3f7212358921699a393e1170394b148a7203005669762625d7892ef838eb1798f42a06bdd1605d47cecda7294ba9ad047fa0d0b7639fbaabefbf5cceb5f7d0d30a189d5234b92f79c729b56398d81e7be9eb5d564e38d585244183c3a90051df26a683b734b84843", 0x8e}, {&(0x7f0000000780)="a7b374caa15e1710db3d8dedb0393587a041adf03179dfe2931228bab2d790a70131998cc824aec2ed920eba6a66cb0a897bd5899939fae77894fab3f0082796bb084a9f3419a02a6464620f00237554c75babc02fa86bafc53a0104f476a6702a9de06782638b776ff3fbb552b8bb32d819a1", 0x73}, {&(0x7f0000000800)="08c1d9b0a0ca97f81546423bb269da4e1794fdf3f0fc3b019e10732f5582269ea12b0eb67bc0d06f781d63445ba9cc24049b2238c72015520d22a8b6e774be530feae94f201cc48127b1b22f424f715b1266be9a1518bb108a197eba961b1f97a7f652d8e2b4045480f571de0ae98f7aae8abc6e3beaa3180e5e0c8b884fcbabece7e757baca90c13d2dec753458741b072cf507f07ae67d96f32854266cf2ebc36e84d4bb617d8b5016571e62ed0e91c5e8aa3f781e00ba43461cfcf3", 0xbd}], 0x6, 0x0, 0x0, 0x800}], 0x1, 0xc141) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 636.257122ms ago: executing program 0 (id=2193): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000fb005000000002000000090000000000000e03002000010000000a0000000000000203000000000000000500000d00380338ff000000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0xffffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x2000c058) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0xffff, 0x400000, 0x7ff, 0x6, 0xc0000000, 0x402, 0xa, 0x5, 0x5, 0x3, 0x4006, 0x4, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x4000001, 0x6, 0xfffffff9, 0x3}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24001a00", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050003000000"], 0x24}}, 0x404c014) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x2d3, 0x0, 0x4}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r10, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) write(r9, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000240), 0x4) 635.757144ms ago: executing program 2 (id=2194): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) setsockopt(r1, 0x6465bccd, 0xfffffffc, &(0x7f0000000180)="025799006a82adcce4863147d9ebebe9fb53dfca6f2f3b9cbd1fc0151b2bbeb8855c178efdf5a26de5469b52e4e1f2465780700b2951f185dbd3c25a93d79be3d04831eecb9b85ea34361746c6b5a0398a08017d3ff8d875951389d540f33846e8f65d269f7cbf89c0e04bd07b81f21a427d87551cf1f42d4254d36613c18055621b2feeefe4cc087c0149ae1f5db4fd57f7f01809037ea8472f17ebc3a8ac1411445c77aed32209f4145e62a629ab3be8979e8ef87348989cc165ba35e640b01b4658e76227442d5c0abed06742dbc0205946d751067abb732c1be5c73bbf1f0b8dbfe7a12770b348", 0xe9) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x0, 0x370, 0x370, 0x258, 0x370, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xff, 0xff000000, 0x1e67d6ff2976e25a], [0x0, 0xff000000, 0xffffffff], 'erspan0\x00', 'team_slave_0\x00', {}, {}, 0x3b, 0x5, 0x1, 0x7}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "0c83", 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xff000000, 0xff], 'veth0_to_team\x00', 'netpci0\x00', {}, {0xff}, 0x3a, 0x4, 0x4, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x8, @ipv6=@mcast2, 0x4e23}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @empty, [0x0, 0xff000000, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffff00], 'erspan0\x00', 'netpci0\x00', {}, {0xff}, 0x7b, 0xb6, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback, 0x17, 0x34, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@multicast2, 0x5, 0x1, 0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, [0xa9fb7d5bb2563bc9, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1, 0x9e, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="d47ea0fbfa29bd8004e245747efab398aee7017a93c165dee725eb5e023bb9560a89db15b6805bc2ee165440f37446f17963371a2b5d9c08ac343988dad7ed3fc7dae443d34049e351a29d05d352e76d8dbd68383b8b52d2821df62a4e2bebef1500a0fb4e37abe2c8ad657e1e6de05181c8cf64db2bbf0c33283d5968495221fa0949ecb2771dfbc08f1664a43170445eb6add5e1bc52d05a59ce74345148c6d6de82767ffadf88afa415052c27469bb221ba6fc152af105814aad18d98ec4132d01b3f6f0800efe889c19bad39ccf0d8482250cb2e1d7ab049264b67810695a615b7c26df9067708711c6d5e7c164b8faf81de263cae77750f2dfc93b5aebaf3ff01f1cc42b17dd511145da7879063a62fe52242cf425e1d36f1ab113198f029510f89c846facfe7d568307a44c858c424e1cf3ee3bee2fb354ece2ad323df4a8f0a86a8b6"], 0xe6) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f0000000e80)) 579.429527ms ago: executing program 3 (id=2195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}, 0x1, 0x8100}, 0x0) 575.021614ms ago: executing program 2 (id=2196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000c00)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192907f44d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426208000000000000009baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000640)="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", 0x13a}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x10, 0xb, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x1153, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe8090053", 0x41}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x10000, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000100)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000000), 0xe) listen(r8, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x2}}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000063766c616e0014000280080001001000000008000300feffff7f00"/44], 0x44}}, 0x800) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x24048800}, 0xc0000) 488.194593ms ago: executing program 0 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0xc0ff, 0x5, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 486.640813ms ago: executing program 3 (id=2198): r0 = socket(0x10, 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x4, 0x5, 0x2, 0x8, 0x4d, @mcast1, @empty, 0x8, 0x8000, 0x8, 0x80000000}}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r3}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYBLOB='\a'], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 466.968623ms ago: executing program 0 (id=2199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x0, [0x3800, 0x4, 0x115]}, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="00140a000000000000001d1e01e8e51f", 0xffeb}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {0x7, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xd, @mcast2, 0xa, 0x4}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000440)="e85fb3a719f73ed333c2d3f9ee5fedf4d2e2df5912229b7ef6a2dab5e9b5e50eb3ddfdda5357f2ecac3cd72796d0386772d48a5d7a72dbfab9ff90a4e04dc48b8df75b1fad5b0ebdf4cea459f571ad85e65c333f050b6e2656bc3b9a75855908b13d2c47daf39921ec1b062e9019129cd03a011540fb150f0f15042aa8bbc23afc8a9e128969a0cf67001d52b84c538625e8b36bee9d07a7603ee7837101ba28a974434ee8c8cc2cba479539f240e04380b19cc18e56201774f622f4b443fc948b37d5ef15b04b40eabac6167a0e74c6d86b574e59ebbe7279", 0xd9}, {&(0x7f0000000340)}, {&(0x7f0000000640)="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", 0xfb}, {&(0x7f0000000740)="89b9648478fb74c0376a925fd94b2b7a1f252a9292ec7e08134313993b7e19afe6f4c0dac8a580497a2b5a130f3a225bc5198e27dd1df1941d7167b9ad16ac2fc6f69fa11add76efe05498f70617003a31ffcce2077300260eb06b85f0ad815a77ee4309d10eaea1e188530ebc460857c7f5542b867daf65f7d6ff9a04d2e9de9938094674935514cec582a4e3a6d208b0d5e90063e51414ef7147cdaf167f23a0e5173a5aa2b2b71235a342dc7c5e612d927e59de03f317cb5caa1bce5127982cb0564b3ebe69a0476bf18543d1565a861d0cd30689cdd8822b2bcbfa96ac7e1d741f65f1e98599d2b675d275befbed79a7", 0xf2}, {&(0x7f0000000840)="691c8db0faf1ef224c0577b3ccde2488474f8064e2536eb3c83b02450fde4c37e4e911c8decad0465dbd2d3547ce9fd5e0d446d440fe5b2f74715a90297472778933d66a92a0503603ef66575aa5c5fccc33a1df5d5b2180c390baa48cce0af9683762ad52cd5df4764bde35165daff4173868faaf5904c94ad95a3d16b42614077318c880303a10429a3eb7007877c0da90e2585300f0d33fc36de9acb82ae1c470f4d20c927f117e73d9e2aa0d3d719f51541b272b7b68f3de5c4e5c3c3e134aafca", 0xc3}, {&(0x7f0000000940)="ad139f0e3f681a1f4ed71d667a3a96f28427c9d485ba137142885b4e5bf0297b9e69ed943771a4a299d5f9ddc028adff8b62685282e37ad1e7c45109ce90d8bbca9907b426f9fefbeccd68587e7fcc379e366db32b4006ae7ddfcd80fd7e1b81cbcf9ca2d229bce2271303f8efe6d79dc6074021", 0x74}, {&(0x7f0000000a40)="0b704a7b1a69cf8ab08ec503dc7bd1a9ebc84e09241eb844b0c1adf2f58048f144db8b1390458c4df3d2a436b61973081047066d296fcc3fb1a7a820f16a0360a8ef9b721f4cab0e499583e2fabf4efef17dcb9550ee4423943f74329d", 0x5d}], 0x7, &(0x7f0000001280)=[{0x1010, 0x118, 0x5, "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"}, {0x68, 0x107, 0x7fffffff, "5cd8de6b6944457ad58f62e986586c6b0ea7bb556e53d00ef882bb3567855d806d38107e89452adf0eea1056f137dfbe4a56ed3df27ec3f25e6ba8bcf4922eeb2f7f5294ba29f386bd3801390d5fbab89833feedad6e"}, {0x18, 0x10a, 0x8, "8d6f95134ed52caa"}], 0x1090}, 0x4010000) 422.228984ms ago: executing program 3 (id=2200): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 311.642547ms ago: executing program 4 (id=2201): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000ec0)=""/96, 0x60}, {&(0x7f00000047c0)=""/4029, 0xfbd}, {&(0x7f0000001f40)=""/4058, 0xfda}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000080)=""/82, 0x52}], 0x7, 0x0, 0x0, 0x60000000}, 0x122) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 301.345151ms ago: executing program 0 (id=2202): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000000c0000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) 275.598032ms ago: executing program 3 (id=2203): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x2c020400) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10d00, 0xa) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 188.328943ms ago: executing program 0 (id=2204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) r3 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r3, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) sendmmsg$unix(r3, &(0x7f00000083c0)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000140), 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe91}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="dcb2db64f782cb82302652e80edfcec28e4bc256fcedf2ef82826f13998c91592977b4850f9b4cd0af49488400bdfd164b2d5cc43f514b8d5b7a3a0a56435d2f9e38f6c7c24101f64525b30069f2de6d400d4d03a1c1907788b175cea359adf232f48f012ee70e486e9ee916ec009503beec8a4da5886cf1fa337456a621d92adf3b9ce56026b750278a5a0f10eb"], 0x80}}, 0x0) 187.715097ms ago: executing program 3 (id=2205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x70, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x1c4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x95, 0x6, "bd418f81f6fa0b23791ace80a6b0de938cf4808529990b895f025ceef29553af61bc0d024a057b5d5262f53e5fa898c57782778127005b46411b39efa18de8ca53f0702e0e32f8e29f82f2f2d0e282a9290e38370fd234469f58091bfa1a43f11b216fac88f466f17a03e3a09e8f5dd12c62bca87ec5e8883a8940b2775f6b4bb70b6243d0bc449861b6340189fb20aa31"}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "3b16b8167c65862bc5b5f14e482c3358727abbc1eb772a12409821916248d91c06afa602e47536d0b51e0d3d5e102f7163e96ed9b24e486f16fbdb456c694deb28ffe5ebbf235dcefab858681ddf90141d4b0fd3113e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x140000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x2, '\x00', 0x9, 0xf8}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffb}}]}]}]}, 0x50}}, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20048880) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8902}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xacb565f2d9672548}}, [@NFT_MSG_DELCHAIN={0x10c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xece0776}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xa0, 0xc, "b187e0d3ef1ddbed024a4aa7be9a41bf5f1185fd3a6ddabc5b1fb489643347079e4f2feb37d0ae1ab03a0348eba137036c8fc102b605403ee86bf7d5b452cbd5e4b31760de2e202cdee84165086d36c6bd36dc90facb1d3b4e129f36ed9511b4269ab88c846b2210af619c01c1101d0738307bf8c3ca5f7760895c07eb2bbc3068eafd87c2ed25d053f680dd23941b04c80c6350cf7c94998bc43f67"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x13, 0xc, "62011a77cff4a7ce874fb8a818c3c7"}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x244}, 0x1, 0x0, 0x0, 0x4080}, 0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000008b0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 173.02454ms ago: executing program 4 (id=2206): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee000000000000000002fffe0000", 0x58}], 0x1) 105.783085ms ago: executing program 4 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x10012, r1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0xfffd, 0x5}, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x120, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @generic="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"]}, 0x120}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 32.304482ms ago: executing program 0 (id=2208): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcceb", 0x90) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\"\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="b75183d5fdc2219da0bec9f9b55e23438ec9446e00ea25edbf263f0b15684d40441c70b7bb3ef08b2c8b686305d7e23f245b50ac7f92dc6aaea7edaf752af970419bc7ef65db7b53388d5caa55daee7114148280c70af447933d9b17bf8d80768f18cfc7225c37a38fa2d634547f30b08d360da91f67d7458de458a8a09cf06d6e1836d9ad5a871202c1bcbe3a6f81af75d02114cd3750d89abf9024de658e094ca96fa2a0f4ebdf65503c032dd153027910e428a654375d6d9e9089c58b656f319585df", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x100, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 31.017605ms ago: executing program 3 (id=2209): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x98}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (fail_nth: 6) 5.568461ms ago: executing program 4 (id=2210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448df, &(0x7f0000000040)={0x0, 0x0, '\x00\b\x00'}) close(0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x40, 0x9}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927", @ANYRES32=r2], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="740300005f03ed8bb89e08f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000076000d0b0040000000fbff00030008edff00000008000a000108000008000100010b"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x2) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x61d8, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x24000040) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940300002d00000025bd7000fddbdf251f00000008000e00ff0000004902198008005400", @ANYRES32=r6, @ANYBLOB="08001100", @ANYRES32=r7, @ANYBLOB="c391c8f737d9928e611290beb334c03c0a209015de40d092489de611a8ae3abfae0ac85ee0feda67181efa4a1c6a1747068d8bc68e7a8ad98a77e31a564e32fd93c8d0c501951cbf4bc6d5ec6c9bc089ae98b82ab38db15372fe1966eb91acd203a035572950eadb9c6b30928bbae5578321fbf6f8daa41cb7bd99f0d76b2725a0f589e79179f6f5be9e9ba0db84b0e8bb09c585b9b5d0dd7688f49bdf51dc5dac305e964efc9ddd75ab9530ab199e5155ee011df7185a4efc555e568ed71c4f21d6108b391591ff85f22773aca169e0176f719e447d7b2b99f64c2fbda9397e77dc7597120ca22c4694ec0ea5b59b44d5fe9f539988809c5daad4e91f97780f4833e7f6a34a6dc59d55ec82645d9374eb4e9eda8a24772dddf15d008e2b3babf01a54970b2eaa3f73c82cf1ece487aa0a585805d387ffbaef8a45aacc107c66ad7af8c133717403649701d3279c1c613be4530fad090c382042c5deb3d051b52aac74d707ae7a9a2fd5de811de7ee0ff30b1f2484bf9f49591fab02f6c9c1c608004d00", @ANYRES32=r1, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r5, r5, 0x2f, 0x2c, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=2211): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000fb005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000000006"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x20, 0x30, 0x7, 0xad, {{0xb, 0x4, 0x3, 0x9, 0x2c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xc7, 0x3, 0xd, [{@private=0xa010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x0, 0x9, 0x9, 0x0, 0xffffffffffffff79, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x1c8400, 0x55, &(0x7f0000000100)=""/85, 0x40f00, 0x4, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x5, 0x6, 0x101}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x5, 0x1, 0x5, 0x4}, {0x5, 0x2, 0x10, 0x5}, {0x1, 0x2, 0x7, 0xc}, {0x1, 0x2, 0xa, 0xa}, {0x1, 0x2, 0xd, 0x4}, {0x5, 0x1, 0x4, 0x2}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x4, 0xa, 0x7}, {0x3, 0x3, 0x6, 0x4}, {0x4, 0x5, 0x2, 0x78e5e8c56f3bd2fa}], 0x10, 0x9}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000003e00070127bd700000000000017c00000400fc800c000180e6ffeeff", @ANYRES32=r2, @ANYBLOB="080002"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00ff8000001400", @ANYRES64=r3], 0x38}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) unshare(0x24060400) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001200010a0000e6ffffff000080a0"], 0x26}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x54}}, 0x8000) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000bc0)=@raw=[@ldst={0x1, 0x1, 0x4, 0xa, 0x1, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x6, 0x2, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @generic={0xd7, 0x9, 0x1, 0xff80, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @generic={0x1, 0x6, 0x3, 0x9, 0x800}, @generic={0x0, 0xd, 0x2, 0x6, 0x8000}], &(0x7f0000000c40)='GPL\x00', 0x15e2, 0x4f, &(0x7f0000000c80)=""/79, 0x40f00, 0x1c, '\x00', r1, 0x19, r4, 0x8, &(0x7f0000000d00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x4, 0x3, 0x8, 0x9}, 0x10, 0x21a45, r4, 0x3, &(0x7f0000000d80)=[r4, 0x1, r6, r6], &(0x7f0000000dc0)=[{0x4, 0x1, 0xf, 0x9}, {0x4, 0x1, 0x7, 0x3}, {0x2, 0x2, 0x9, 0x2}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r6, 0x0) sendmsg$sock(r6, &(0x7f0000000540)={&(0x7f0000000740)=@phonet={0x23, 0x9, 0x4, 0x1}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000480)="891577", 0x3}, {&(0x7f00000007c0)="3530a5d7886fc41c6f8885008431628f93c27a742046ccfbde6947f87dc208e8451e3693a4f291661c436bb147ea834d21bac3255c31599f1ba2026db579648f6dc366720cc13ced246e4437a0fcb3d52f5167b0c1146c6f72472b58ab7b379c69f9927a268127ee5f7446dd14ecb33efd9ef6bbe54c01c1d511c2e5aa5ccb1afda16250d593caf2929e452223aae945985c393a8a934938063e0881769b83aa43e4c9fd0504876fcf421258a1b2283408a3ea7c24a957695534cafa664999e86e93e48df87b7d34a6ab75c331cd751ae74d5de091cc961d4c12e0a6aff3e4b2ddb3b702b9a2172b", 0xe8}, {&(0x7f00000008c0)="fc10c8bda56bb3cec65ff4f4536565df56d7a0c8c92148ad4d0feb44442c580adc8c10441126aeb0818a8b46346c6133dbb4d136f038d57a0e3a2a01a98f54d7b9a0ad4290aba596572909e22c20d84c4814e21bbc9b9912beb8554b4b8564f39d5b96475205b2adf46aa5d72485832f7331ac8f1c71", 0x76}, {&(0x7f0000000980)="5c16686067d018ab0806ccf1709b3212e15bd750ec93e1cd6e61213d62a9542384bcecdb252dda3fa9bcb69d4c3c33d983137c1ea6330ad1d3ff8e65e1fe2cc4d3a4a7f8f98f5a6c0ee3cdd5e76ca8136904cd0eb8cbf797d58cf29ac93eea5fcb9e7662a046d816b81a74df24bba40aa8c13e9aabfc724c07dbfabab72e8febabf60bf9b298726af1bc5344dc1144f39aab4c6d42e75255b03854215b1fae3fe0a0d9c090044f42e28356b8b17f1dba5bc702e50915b975c472bcf13033a046a147940c88ff171edcd4bd08298c37f4e38ce418c7fce52c84fa8553f698cf19c55161", 0xe3}, {&(0x7f0000000a80)="e03bfbf4eca67a5b081bd91f4d634f0f796a07c27f7c83aa8a35642fc246ad0b83b4a4943b23deeb79e82a291246c9aec8966d10ef1110a72fd70572c1f394574429b8f2af42f826cfb055de5b077e279a8fb90d4c2460b2af409bc001a18dea6baacd87d5beb648aeedd83f14193f25e805e7457f37ce7ae7cf9490f32d82fea80c8489caf038bffad0accc604b74632c837383357281870c799d72b3d138f11e96f6f0219217f16819", 0xaa}], 0x5}, 0x10) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) kernel console output (not intermixed with test programs): 0 [ 228.282835][ T9455] CPU: 1 UID: 0 PID: 9455 Comm: syz.3.1132 Not tainted syzkaller #0 PREEMPT(full) [ 228.282865][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 228.282877][ T9455] Call Trace: [ 228.282885][ T9455] [ 228.282894][ T9455] dump_stack_lvl+0xe8/0x150 [ 228.282927][ T9455] should_fail_ex+0x412/0x560 [ 228.282962][ T9455] should_failslab+0xa8/0x100 [ 228.282990][ T9455] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 228.283025][ T9455] ? __d_alloc+0x37/0x6f0 [ 228.283061][ T9455] __d_alloc+0x37/0x6f0 [ 228.283087][ T9455] ? do_raw_spin_lock+0x12b/0x2f0 [ 228.283122][ T9455] d_alloc_pseudo+0x21/0xc0 [ 228.283154][ T9455] alloc_file_pseudo+0xdd/0x240 [ 228.283187][ T9455] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 228.283229][ T9455] anon_inode_getfd+0xc8/0x1f0 [ 228.283266][ T9455] btf_new_fd+0xa18/0xd00 [ 228.283286][ T9455] ? apparmor_capable+0x137/0x1a0 [ 228.283315][ T9455] ? __pfx_btf_new_fd+0x10/0x10 [ 228.283344][ T9455] ? bpf_token_put+0x143/0x160 [ 228.283366][ T9455] ? bpf_btf_load+0x126/0x190 [ 228.283401][ T9455] __sys_bpf+0x45a/0x920 [ 228.283434][ T9455] ? __pfx___sys_bpf+0x10/0x10 [ 228.283482][ T9455] ? ksys_write+0x242/0x270 [ 228.283506][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 228.283545][ T9455] __x64_sys_bpf+0x7c/0x90 [ 228.283582][ T9455] do_syscall_64+0xe2/0xf80 [ 228.283614][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.283634][ T9455] ? trace_irq_disable+0x37/0x100 [ 228.283663][ T9455] ? clear_bhb_loop+0x60/0xb0 [ 228.283690][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.283719][ T9455] RIP: 0033:0x7ff68579acb9 [ 228.283748][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.283794][ T9455] RSP: 002b:00007ff68662f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.283826][ T9455] RAX: ffffffffffffffda RBX: 00007ff685a15fa0 RCX: 00007ff68579acb9 [ 228.283842][ T9455] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 228.283856][ T9455] RBP: 00007ff68662f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.283874][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.283887][ T9455] R13: 00007ff685a16038 R14: 00007ff685a15fa0 R15: 00007ffcd7f12ed8 [ 228.283928][ T9455] [ 228.678991][ T9460] lo speed is unknown, defaulting to 1000 [ 228.687355][ T9463] netlink: 'syz.1.1136': attribute type 13 has an invalid length. [ 228.944627][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 229.268579][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 229.426770][ T9482] syzkaller0: entered promiscuous mode [ 229.433418][ T9482] syzkaller0: entered allmulticast mode [ 229.941891][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 230.045383][ T9489] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.116597][ T9489] syzkaller0: entered promiscuous mode [ 230.122824][ T9489] syzkaller0: entered allmulticast mode [ 230.179593][ T9499] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 230.252238][ T9463] tipc: Started in network mode [ 230.296776][ T9463] tipc: Node identity ea1f71d4a99e, cluster identity 4711 [ 230.305678][ T9463] tipc: Enabled bearer , priority 0 [ 230.339636][ T9459] tipc: Resetting bearer [ 230.392237][ T9459] tipc: Disabling bearer [ 230.837115][ T9528] lo speed is unknown, defaulting to 1000 [ 230.992717][ T9542] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1154'. [ 231.125963][ T9542] 0ªî{X¹¦: left allmulticast mode [ 231.190077][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1154'. [ 231.231576][ T9554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1155'. [ 231.254192][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1156'. [ 231.268621][ T9555] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1156'. [ 231.307090][ T9542] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.389424][ T9542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.420070][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 231.445132][ T7552] lo speed is unknown, defaulting to 1000 [ 231.466865][ T7552] syz2: Port: 1 Link ACTIVE [ 231.972208][ T9575] netlink: 'syz.4.1160': attribute type 2 has an invalid length. [ 232.128061][ T9587] FAULT_INJECTION: forcing a failure. [ 232.128061][ T9587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.161839][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.2.1163 Not tainted syzkaller #0 PREEMPT(full) [ 232.161870][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 232.161885][ T9587] Call Trace: [ 232.161894][ T9587] [ 232.161903][ T9587] dump_stack_lvl+0xe8/0x150 [ 232.161939][ T9587] should_fail_ex+0x412/0x560 [ 232.161975][ T9587] _copy_from_user+0x2d/0xb0 [ 232.162001][ T9587] ___sys_recvmsg+0x175/0x590 [ 232.162036][ T9587] ? __pfx____sys_recvmsg+0x10/0x10 [ 232.162063][ T9587] ? __fget_files+0x2a/0x420 [ 232.162125][ T9587] do_recvmmsg+0x334/0x800 [ 232.162156][ T9587] ? __pfx_do_recvmmsg+0x10/0x10 [ 232.162192][ T9587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 232.162252][ T9587] __x64_sys_recvmmsg+0x198/0x250 [ 232.162279][ T9587] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 232.162315][ T9587] do_syscall_64+0xe2/0xf80 [ 232.162347][ T9587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.162368][ T9587] ? trace_irq_disable+0x37/0x100 [ 232.162397][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 232.162424][ T9587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.162444][ T9587] RIP: 0033:0x7fc30f79acb9 [ 232.162464][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.162482][ T9587] RSP: 002b:00007fc3106b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 232.162506][ T9587] RAX: ffffffffffffffda RBX: 00007fc30fa16180 RCX: 00007fc30f79acb9 [ 232.162522][ T9587] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 232.162536][ T9587] RBP: 00007fc3106b8090 R08: 0000000000000000 R09: 0000000000000000 [ 232.162550][ T9587] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 232.162563][ T9587] R13: 00007fc30fa16218 R14: 00007fc30fa16180 R15: 00007ffd2e554a18 [ 232.162598][ T9587] [ 232.444712][ T9594] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 232.802160][ T9607] macsec3: entered promiscuous mode [ 232.811537][ T9607] macsec3: entered allmulticast mode [ 233.505286][ T9646] macsec2: entered promiscuous mode [ 233.514360][ T9646] macsec2: entered allmulticast mode [ 233.792949][ T9658] xt_hashlimit: size too large, truncated to 1048576 [ 233.829595][ T9659] __nla_validate_parse: 89 callbacks suppressed [ 233.829615][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 234.333163][ T9663] netlink: 'syz.0.1187': attribute type 2 has an invalid length. [ 234.824221][ T25] block nbd1: Possible stuck request ffff888024ea0000: control (read@0,1024B). Runtime 30 seconds [ 234.838189][ T25] block nbd1: Possible stuck request ffff888024ea0200: control (read@1024,1024B). Runtime 30 seconds [ 234.850436][ T25] block nbd1: Possible stuck request ffff888024ea0400: control (read@2048,1024B). Runtime 30 seconds [ 234.862862][ T25] block nbd1: Possible stuck request ffff888024ea0600: control (read@3072,1024B). Runtime 30 seconds [ 235.165390][ T9706] macsec1: entered promiscuous mode [ 235.170694][ T9706] macsec1: entered allmulticast mode [ 235.312117][ T9715] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1200'. [ 235.387748][ T9719] FAULT_INJECTION: forcing a failure. [ 235.387748][ T9719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.409924][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.1.1203 Not tainted syzkaller #0 PREEMPT(full) [ 235.409962][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 235.409976][ T9719] Call Trace: [ 235.409985][ T9719] [ 235.409995][ T9719] dump_stack_lvl+0xe8/0x150 [ 235.410030][ T9719] should_fail_ex+0x412/0x560 [ 235.410066][ T9719] _copy_from_user+0x2d/0xb0 [ 235.410090][ T9719] generic_map_update_batch+0x51b/0x810 [ 235.410130][ T9719] ? __pfx_generic_map_update_batch+0x10/0x10 [ 235.410157][ T9719] ? __fget_files+0x2a/0x420 [ 235.410192][ T9719] ? __pfx_generic_map_update_batch+0x10/0x10 [ 235.410217][ T9719] bpf_map_do_batch+0x39b/0x630 [ 235.410256][ T9719] __sys_bpf+0x709/0x920 [ 235.410290][ T9719] ? __pfx___sys_bpf+0x10/0x10 [ 235.410336][ T9719] ? ksys_write+0x242/0x270 [ 235.410361][ T9719] ? __pfx_ksys_write+0x10/0x10 [ 235.410390][ T9719] __x64_sys_bpf+0x7c/0x90 [ 235.410419][ T9719] do_syscall_64+0xe2/0xf80 [ 235.410452][ T9719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.410473][ T9719] ? trace_irq_disable+0x37/0x100 [ 235.410502][ T9719] ? clear_bhb_loop+0x60/0xb0 [ 235.410529][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.410550][ T9719] RIP: 0033:0x7f1674d9acb9 [ 235.410570][ T9719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.410588][ T9719] RSP: 002b:00007f1672ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.410610][ T9719] RAX: ffffffffffffffda RBX: 00007f1675015fa0 RCX: 00007f1674d9acb9 [ 235.410625][ T9719] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 235.410638][ T9719] RBP: 00007f1672ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.410651][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.410664][ T9719] R13: 00007f1675016038 R14: 00007f1675015fa0 R15: 00007ffcbd673898 [ 235.410696][ T9719] [ 235.646073][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1202'. [ 235.900493][ T9731] netlink: 'syz.3.1207': attribute type 11 has an invalid length. [ 235.931296][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 236.092329][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 236.131039][ T9743] FAULT_INJECTION: forcing a failure. [ 236.131039][ T9743] name failslab, interval 1, probability 0, space 0, times 0 [ 236.144513][ T9741] tc_dump_action: action bad kind [ 236.160387][ T9743] CPU: 0 UID: 0 PID: 9743 Comm: syz.2.1211 Not tainted syzkaller #0 PREEMPT(full) [ 236.160415][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 236.160429][ T9743] Call Trace: [ 236.160437][ T9743] [ 236.160447][ T9743] dump_stack_lvl+0xe8/0x150 [ 236.160480][ T9743] should_fail_ex+0x412/0x560 [ 236.160522][ T9743] should_failslab+0xa8/0x100 [ 236.160551][ T9743] kmem_cache_alloc_noprof+0x87/0x6e0 [ 236.160586][ T9743] ? alloc_empty_file+0x55/0x1d0 [ 236.160619][ T9743] alloc_empty_file+0x55/0x1d0 [ 236.160649][ T9743] alloc_file_pseudo+0x155/0x240 [ 236.160681][ T9743] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 236.160725][ T9743] anon_inode_getfd+0xc8/0x1f0 [ 236.160767][ T9743] btf_new_fd+0xa18/0xd00 [ 236.160786][ T9743] ? apparmor_capable+0x137/0x1a0 [ 236.160815][ T9743] ? __pfx_btf_new_fd+0x10/0x10 [ 236.160835][ T9743] ? bpf_token_put+0x143/0x160 [ 236.160858][ T9743] ? bpf_btf_load+0x126/0x190 [ 236.160892][ T9743] __sys_bpf+0x45a/0x920 [ 236.160933][ T9743] ? __pfx___sys_bpf+0x10/0x10 [ 236.160981][ T9743] ? ksys_write+0x242/0x270 [ 236.161003][ T9743] ? __pfx_ksys_write+0x10/0x10 [ 236.161031][ T9743] __x64_sys_bpf+0x7c/0x90 [ 236.161058][ T9743] do_syscall_64+0xe2/0xf80 [ 236.161088][ T9743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.161109][ T9743] ? trace_irq_disable+0x37/0x100 [ 236.161137][ T9743] ? clear_bhb_loop+0x60/0xb0 [ 236.161163][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.161185][ T9743] RIP: 0033:0x7fc30f79acb9 [ 236.161205][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.161222][ T9743] RSP: 002b:00007fc3106fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.161244][ T9743] RAX: ffffffffffffffda RBX: 00007fc30fa15fa0 RCX: 00007fc30f79acb9 [ 236.161259][ T9743] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 236.161273][ T9743] RBP: 00007fc3106fa090 R08: 0000000000000000 R09: 0000000000000000 [ 236.161287][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.161299][ T9743] R13: 00007fc30fa16038 R14: 00007fc30fa15fa0 R15: 00007ffd2e554a18 [ 236.161334][ T9743] [ 236.629362][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 236.671012][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 236.751035][ T9754] netlink: 'syz.3.1216': attribute type 13 has an invalid length. [ 236.759021][ T9754] netlink: 'syz.3.1216': attribute type 17 has an invalid length. [ 236.853872][ T9754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.901552][ T9759] netlink: 'syz.2.1218': attribute type 32 has an invalid length. [ 236.925464][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 236.984534][ T9759] bond0: option coupled_control: invalid value (12) [ 237.028346][ T9759] bond0 (unregistering): Released all slaves [ 237.437675][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 237.484185][ T9784] macvtap2: entered promiscuous mode [ 237.503440][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 237.527636][ T9784] erspan0: entered promiscuous mode [ 237.542110][ T9784] macvtap2: entered allmulticast mode [ 237.556119][ T9784] erspan0: entered allmulticast mode [ 238.019568][ T9804] block nbd0: reconnected socket [ 238.034981][ T9804] nbd: socks must be embedded in a SOCK_ITEM attr [ 238.066900][ T5833] block nbd0: Receive control failed (result -32) [ 238.473211][ T9820] sctp: [Deprecated]: syz.4.1240 (pid 9820) Use of int in maxseg socket option. [ 238.473211][ T9820] Use struct sctp_assoc_value instead [ 238.837810][ T9837] __nla_validate_parse: 4 callbacks suppressed [ 238.837832][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'. [ 238.854197][ T9837] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1245'. [ 238.986143][ T9839] netlink: 'syz.2.1246': attribute type 39 has an invalid length. [ 239.177200][ T9849] tipc: Enabled bearer , priority 0 [ 239.186789][ T9849] syzkaller0: entered promiscuous mode [ 239.194178][ T9849] syzkaller0: entered allmulticast mode [ 239.265907][ T9850] tipc: Resetting bearer [ 239.321273][ T9849] tipc: Resetting bearer [ 239.384773][ T9849] tipc: Disabling bearer [ 239.871899][ T9855] lo speed is unknown, defaulting to 1000 [ 239.882448][ T9868] lo speed is unknown, defaulting to 1000 [ 240.039699][ T9873] lo speed is unknown, defaulting to 1000 [ 240.206454][ T9885] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1252'. [ 240.217763][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 240.297542][ T9860] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 241.876716][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 242.133400][ T9896] ip6t_rpfilter: unknown options [ 242.274324][ T9901] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1262'. [ 242.283735][ T9901] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 242.312955][ T9901] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 242.537080][ T9910] netlink: 'syz.3.1266': attribute type 3 has an invalid length. [ 242.582027][ T9911] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1267'. [ 242.659403][ T9919] netlink: 'syz.0.1269': attribute type 11 has an invalid length. [ 242.681561][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 242.694345][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 242.708949][ T9921] netlink: 'syz.3.1271': attribute type 5 has an invalid length. [ 242.812253][ T9927] sctp: [Deprecated]: syz.1.1272 (pid 9927) Use of int in maxseg socket option. [ 242.812253][ T9927] Use struct sctp_assoc_value instead [ 243.025477][ T9935] netem: change failed [ 243.081445][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.120531][ T9937] lo speed is unknown, defaulting to 1000 [ 243.142572][ T9931] Cannot find add_set index 2 as target [ 243.182385][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 243.471133][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.823429][ T9976] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 243.863941][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.892154][ T9976] team0: Port device bond0 added [ 243.897837][ T9980] __nla_validate_parse: 4 callbacks suppressed [ 243.897858][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 244.160120][ T9986] lo speed is unknown, defaulting to 1000 [ 244.293057][ T9998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1298'. [ 244.309973][ T9991] lo speed is unknown, defaulting to 1000 [ 244.577189][T10011] FAULT_INJECTION: forcing a failure. [ 244.577189][T10011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.620035][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.3.1300 Not tainted syzkaller #0 PREEMPT(full) [ 244.620065][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 244.620089][T10011] Call Trace: [ 244.620097][T10011] [ 244.620106][T10011] dump_stack_lvl+0xe8/0x150 [ 244.620139][T10011] should_fail_ex+0x412/0x560 [ 244.620173][T10011] _copy_to_user+0x31/0xb0 [ 244.620195][T10011] generic_map_lookup_batch+0x83a/0xc70 [ 244.620261][T10011] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 244.620287][T10011] ? __fget_files+0x2a/0x420 [ 244.620318][T10011] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 244.620344][T10011] bpf_map_do_batch+0x285/0x630 [ 244.620376][T10011] ? security_bpf+0x7e/0x2d0 [ 244.620404][T10011] __sys_bpf+0x5a0/0x920 [ 244.620435][T10011] ? __pfx___sys_bpf+0x10/0x10 [ 244.620480][T10011] ? ksys_write+0x242/0x270 [ 244.620502][T10011] ? __pfx_ksys_write+0x10/0x10 [ 244.620531][T10011] __x64_sys_bpf+0x7c/0x90 [ 244.620570][T10011] do_syscall_64+0xe2/0xf80 [ 244.620601][T10011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.620622][T10011] ? trace_irq_disable+0x37/0x100 [ 244.620651][T10011] ? clear_bhb_loop+0x60/0xb0 [ 244.620676][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.620697][T10011] RIP: 0033:0x7ff68579acb9 [ 244.620717][T10011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.620735][T10011] RSP: 002b:00007ff68662f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.620762][T10011] RAX: ffffffffffffffda RBX: 00007ff685a15fa0 RCX: 00007ff68579acb9 [ 244.620776][T10011] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 244.620788][T10011] RBP: 00007ff68662f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.620801][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.620813][T10011] R13: 00007ff685a16038 R14: 00007ff685a15fa0 R15: 00007ffcd7f12ed8 [ 244.620847][T10011] [ 244.900531][T10020] bond0: Caught tx_queue_len zero misconfig [ 244.917660][T10020] ipt_REJECT: TCP_RESET invalid for non-tcp [ 244.982442][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 245.026361][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 245.118219][T10030] tipc: Enabling of bearer rejected, failed to enable media [ 245.174596][T10030] lo speed is unknown, defaulting to 1000 [ 245.616171][T10049] lo speed is unknown, defaulting to 1000 [ 245.921512][T10063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.970234][ T7552] lo speed is unknown, defaulting to 1000 [ 245.980838][ T7552] syz2: Port: 1 Link DOWN [ 246.111434][T10072] FAULT_INJECTION: forcing a failure. [ 246.111434][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.151058][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.4.1319 Not tainted syzkaller #0 PREEMPT(full) [ 246.151093][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 246.151108][T10072] Call Trace: [ 246.151119][T10072] [ 246.151130][T10072] dump_stack_lvl+0xe8/0x150 [ 246.151166][T10072] should_fail_ex+0x412/0x560 [ 246.151203][T10072] _copy_from_user+0x2d/0xb0 [ 246.151229][T10072] ___sys_recvmsg+0x175/0x590 [ 246.151258][T10072] ? __pfx____sys_recvmsg+0x10/0x10 [ 246.151285][T10072] ? __fget_files+0x2a/0x420 [ 246.151346][T10072] do_recvmmsg+0x334/0x800 [ 246.151377][T10072] ? __pfx_do_recvmmsg+0x10/0x10 [ 246.151412][T10072] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.151471][T10072] __x64_sys_recvmmsg+0x198/0x250 [ 246.151497][T10072] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 246.151532][T10072] do_syscall_64+0xe2/0xf80 [ 246.151564][T10072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.151586][T10072] ? trace_irq_disable+0x37/0x100 [ 246.151614][T10072] ? clear_bhb_loop+0x60/0xb0 [ 246.151640][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.151771][T10072] RIP: 0033:0x7fc5b479acb9 [ 246.151805][T10072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.151823][T10072] RSP: 002b:00007fc5b573f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 246.151845][T10072] RAX: ffffffffffffffda RBX: 00007fc5b4a15fa0 RCX: 00007fc5b479acb9 [ 246.151862][T10072] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 246.151877][T10072] RBP: 00007fc5b573f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.151890][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.151903][T10072] R13: 00007fc5b4a16038 R14: 00007fc5b4a15fa0 R15: 00007ffe54bde368 [ 246.151938][T10072] [ 246.649352][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 246.751250][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 247.032972][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'. [ 247.055745][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1329'. [ 247.072383][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 247.130856][T10096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1329'. [ 247.179059][T10098] erspan0: entered promiscuous mode [ 247.187127][T10098] erspan0: left promiscuous mode [ 247.557293][T10125] netlink: 'syz.3.1338': attribute type 11 has an invalid length. [ 247.961517][T10123] bridge0: port 3(vlan3) entered disabled state [ 247.975274][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.983237][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.993631][T10130] netlink: 'syz.1.1339': attribute type 1 has an invalid length. [ 248.236318][T10123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.288777][T10123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.679876][T10131] kthread_run failed with err -4 [ 248.715948][T10130] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 248.736870][T10139] syzkaller1: entered promiscuous mode [ 248.764553][T10139] syzkaller1: entered allmulticast mode [ 248.781652][ T68] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.803578][ T68] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.821569][ T68] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.842806][ T68] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 248.951882][ T68] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.974583][ T68] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.006386][ T68] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.052862][ T68] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 249.205721][T10169] __nla_validate_parse: 4 callbacks suppressed [ 249.205744][T10169] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 249.486631][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 249.505474][T10185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1358'. [ 249.576413][T10191] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1360'. [ 249.598378][T10193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1359'. [ 249.608117][T10193] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 249.688027][T10191] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 249.719730][T10191] 1ªî{X¹¦: entered allmulticast mode [ 249.727471][T10191] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 250.100116][T10218] netlink: 'syz.1.1371': attribute type 12 has an invalid length. [ 250.120223][T10218] netlink: 'syz.1.1371': attribute type 29 has an invalid length. [ 250.138398][T10218] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1371'. [ 250.153778][T10218] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1371'. [ 250.337048][T10231] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 250.446137][T10235] netlink: 'syz.1.1376': attribute type 12 has an invalid length. [ 250.507706][ T30] audit: type=1107 audit(1769049323.531:3): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 250.619753][T10240] lo speed is unknown, defaulting to 1000 [ 250.718863][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 250.773459][T10248] netlink: 'syz.1.1380': attribute type 13 has an invalid length. [ 250.790618][T10245] syzkaller0: entered promiscuous mode [ 250.804774][T10245] syzkaller0: entered allmulticast mode [ 250.861854][T10247] lo speed is unknown, defaulting to 1000 [ 251.176446][T10262] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 251.203562][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 251.249938][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 252.106846][T10291] wg1: left promiscuous mode [ 252.126039][ T7534] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.185917][T10300] Unsupported ieee802154 address type: 0 [ 252.188755][T10291] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 252.214744][T10291] geneve2: left promiscuous mode [ 252.220467][T10291] bond1: left promiscuous mode [ 252.230055][T10291] batadv1: left promiscuous mode [ 252.243701][T10291] gtp0: left promiscuous mode [ 252.249263][T10291] gtp1: left promiscuous mode [ 252.257644][T10291] macsec2: left promiscuous mode [ 252.263521][T10291] macsec3: left promiscuous mode [ 252.398405][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 252.518998][T10310] syzkaller0: entered promiscuous mode [ 252.525882][T10310] syzkaller0: entered allmulticast mode [ 252.536720][T10310] 0: reclassify loop, rule prio 0, protocol 800 [ 252.614181][T10314] ip6gre2: entered promiscuous mode [ 252.619537][T10314] ip6gre2: entered allmulticast mode [ 252.627885][ T1099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.636551][ T1099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.651419][ T6762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.740985][T10318] netlink: 'syz.3.1404': attribute type 1 has an invalid length. [ 252.781008][T10317] FAULT_INJECTION: forcing a failure. [ 252.781008][T10317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.795604][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.2.1403 Not tainted syzkaller #0 PREEMPT(full) [ 252.795632][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 252.795645][T10317] Call Trace: [ 252.795654][T10317] [ 252.795664][T10317] dump_stack_lvl+0xe8/0x150 [ 252.795700][T10317] should_fail_ex+0x412/0x560 [ 252.795737][T10317] _copy_from_user+0x2d/0xb0 [ 252.795763][T10317] kstrtouint_from_user+0xd6/0x180 [ 252.795797][T10317] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 252.795848][T10317] proc_fail_nth_write+0x8e/0x210 [ 252.795872][T10317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.795899][T10317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.795924][T10317] vfs_write+0x29a/0xb90 [ 252.795955][T10317] ? __pfx_vfs_write+0x10/0x10 [ 252.795978][T10317] ? __fget_files+0x2a/0x420 [ 252.796011][T10317] ? __fget_files+0x3a0/0x420 [ 252.796036][T10317] ? __fget_files+0x2a/0x420 [ 252.796073][T10317] ksys_write+0x150/0x270 [ 252.796098][T10317] ? __pfx_ksys_write+0x10/0x10 [ 252.796151][T10317] do_syscall_64+0xe2/0xf80 [ 252.796184][T10317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.796205][T10317] ? trace_irq_disable+0x37/0x100 [ 252.796236][T10317] ? clear_bhb_loop+0x60/0xb0 [ 252.796263][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.796284][T10317] RIP: 0033:0x7fc30f75b58e [ 252.796304][T10317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.796322][T10317] RSP: 002b:00007fc3106f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.796345][T10317] RAX: ffffffffffffffda RBX: 00007fc3106fa6c0 RCX: 00007fc30f75b58e [ 252.796361][T10317] RDX: 0000000000000001 RSI: 00007fc3106fa0a0 RDI: 0000000000000004 [ 252.796373][T10317] RBP: 00007fc3106fa090 R08: 0000000000000000 R09: 0000000000000000 [ 252.796385][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.796399][T10317] R13: 00007fc30fa16038 R14: 00007fc30fa15fa0 R15: 00007ffd2e554a18 [ 252.796432][T10317] [ 253.003354][ T7554] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 253.361571][ T6762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 253.443277][ T3552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.481216][ T3552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.526395][ T3552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.535361][ T3552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.944157][T10367] FAULT_INJECTION: forcing a failure. [ 253.944157][T10367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.960482][T10367] CPU: 1 UID: 0 PID: 10367 Comm: syz.3.1419 Not tainted syzkaller #0 PREEMPT(full) [ 253.960511][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 253.960524][T10367] Call Trace: [ 253.960531][T10367] [ 253.960540][T10367] dump_stack_lvl+0xe8/0x150 [ 253.960572][T10367] should_fail_ex+0x412/0x560 [ 253.960605][T10367] _copy_from_user+0x2d/0xb0 [ 253.960626][T10367] ___sys_sendmsg+0x1c6/0x360 [ 253.960645][T10367] ? __lock_acquire+0x6b5/0x2cf0 [ 253.960671][T10367] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.960689][T10367] ? __lock_acquire+0x6b5/0x2cf0 [ 253.960714][T10367] ? kstrtouint+0x6e/0xe0 [ 253.960788][T10367] __sys_sendmmsg+0x27c/0x4e0 [ 253.960814][T10367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 253.960832][T10367] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 253.960893][T10367] ? ksys_write+0x242/0x270 [ 253.960917][T10367] ? __pfx_ksys_write+0x10/0x10 [ 253.960945][T10367] __x64_sys_sendmmsg+0xa0/0xc0 [ 253.960969][T10367] do_syscall_64+0xe2/0xf80 [ 253.960999][T10367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.961019][T10367] ? clear_bhb_loop+0x60/0xb0 [ 253.961044][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.961063][T10367] RIP: 0033:0x7ff68579acb9 [ 253.961083][T10367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.961110][T10367] RSP: 002b:00007ff68662f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 253.961134][T10367] RAX: ffffffffffffffda RBX: 00007ff685a15fa0 RCX: 00007ff68579acb9 [ 253.961150][T10367] RDX: 0000000000000002 RSI: 0000200000000940 RDI: 0000000000000003 [ 253.961163][T10367] RBP: 00007ff68662f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.961176][T10367] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 253.961188][T10367] R13: 00007ff685a16038 R14: 00007ff685a15fa0 R15: 00007ffcd7f12ed8 [ 253.961223][T10367] [ 254.370641][T10380] tipc: Enabled bearer , priority 0 [ 254.386986][T10380] syzkaller0: entered promiscuous mode [ 254.428148][T10380] syzkaller0: entered allmulticast mode [ 254.457621][T10384] hsr0: entered promiscuous mode [ 254.471736][T10384] __nla_validate_parse: 31 callbacks suppressed [ 254.471756][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 254.518363][T10384] hsr_slave_0: left promiscuous mode [ 254.525819][T10384] hsr_slave_1: left promiscuous mode [ 254.545600][T10384] hsr0 (unregistering): left promiscuous mode [ 254.571484][T10380] tipc: Resetting bearer [ 254.589759][T10377] tipc: Resetting bearer [ 254.630684][T10377] tipc: Disabling bearer [ 254.716700][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 254.783266][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1430'. [ 254.891690][T10397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.903536][T10397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.938637][T10400] geneve3: entered promiscuous mode [ 254.944187][T10400] geneve3: entered allmulticast mode [ 254.953798][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.963400][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.980491][T10394] lo speed is unknown, defaulting to 1000 [ 255.018469][T10397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.029266][T10397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.060367][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.088093][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.152093][T10397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.162591][T10397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.185808][T10403] FAULT_INJECTION: forcing a failure. [ 255.185808][T10403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.199744][T10403] CPU: 1 UID: 0 PID: 10403 Comm: syz.4.1433 Not tainted syzkaller #0 PREEMPT(full) [ 255.199774][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 255.199787][T10403] Call Trace: [ 255.199795][T10403] [ 255.199803][T10403] dump_stack_lvl+0xe8/0x150 [ 255.199832][T10403] should_fail_ex+0x412/0x560 [ 255.199862][T10403] prepare_alloc_pages+0x22a/0x650 [ 255.199889][T10403] __alloc_frozen_pages_noprof+0x12f/0x380 [ 255.199914][T10403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.199941][T10403] ? policy_nodemask+0x27c/0x710 [ 255.199966][T10403] alloc_pages_mpol+0x232/0x4a0 [ 255.199993][T10403] folio_alloc_mpol_noprof+0x39/0x70 [ 255.200016][T10403] shmem_alloc_and_add_folio+0x445/0xf80 [ 255.200048][T10403] ? filemap_get_entry+0xca/0x320 [ 255.200064][T10403] ? filemap_get_entry+0xca/0x320 [ 255.200083][T10403] ? shmem_huge_global_enabled+0x2cd/0x320 [ 255.200107][T10403] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 255.200136][T10403] ? shmem_allowable_huge_orders+0x4c0/0x4e0 [ 255.200166][T10403] shmem_get_folio_gfp+0x5a9/0x1670 [ 255.200212][T10403] shmem_fault+0x179/0x390 [ 255.200252][T10403] __do_fault+0x138/0x390 [ 255.200272][T10403] do_pte_missing+0x6ad/0x3310 [ 255.200301][T10403] ? handle_mm_fault+0xee/0x32a0 [ 255.200329][T10403] handle_mm_fault+0x1b8c/0x32a0 [ 255.200366][T10403] ? handle_mm_fault+0xee/0x32a0 [ 255.200402][T10403] ? __pfx_handle_mm_fault+0x10/0x10 [ 255.200431][T10403] ? follow_page_pte+0x825/0x1460 [ 255.200465][T10403] ? __pfx_follow_page_pte+0x10/0x10 [ 255.200500][T10403] __get_user_pages+0x165b/0x29d0 [ 255.200549][T10403] __gup_longterm_locked+0x7ed/0x1630 [ 255.200594][T10403] gup_fast_fallback+0x1d82/0x22e0 [ 255.200649][T10403] ? __pfx_gup_fast_fallback+0x10/0x10 [ 255.200675][T10403] ? is_valid_gup_args+0x11f/0x200 [ 255.200701][T10403] ? pin_user_pages_fast+0x4d/0xb0 [ 255.200726][T10403] rds_cmsg_rdma_args+0x8f4/0x1240 [ 255.200774][T10403] rds_cmsg_send+0x33d/0x5c0 [ 255.200817][T10403] rds_sendmsg+0x1158/0x1f50 [ 255.200860][T10403] ? __pfx_rds_sendmsg+0x10/0x10 [ 255.200889][T10403] ? __pfx_aa_sk_perm+0x10/0x10 [ 255.200910][T10403] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 255.200942][T10403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.200967][T10403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.200985][T10403] ? __pfx_rds_sendmsg+0x10/0x10 [ 255.201009][T10403] __sock_sendmsg+0x21c/0x270 [ 255.201033][T10403] ____sys_sendmsg+0x4d7/0x810 [ 255.201057][T10403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.201082][T10403] ? import_iovec+0x73/0xa0 [ 255.201103][T10403] ___sys_sendmsg+0x2a5/0x360 [ 255.201118][T10403] ? __lock_acquire+0x6b5/0x2cf0 [ 255.201141][T10403] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.201188][T10403] ? __fget_files+0x2a/0x420 [ 255.201210][T10403] ? __fget_files+0x3a0/0x420 [ 255.201248][T10403] __x64_sys_sendmsg+0x1bd/0x2a0 [ 255.201267][T10403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.201293][T10403] ? __pfx_ksys_write+0x10/0x10 [ 255.201320][T10403] do_syscall_64+0xe2/0xf80 [ 255.201346][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.201363][T10403] ? clear_bhb_loop+0x60/0xb0 [ 255.201385][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.201402][T10403] RIP: 0033:0x7fc5b479acb9 [ 255.201418][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.201433][T10403] RSP: 002b:00007fc5b571e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.201453][T10403] RAX: ffffffffffffffda RBX: 00007fc5b4a16090 RCX: 00007fc5b479acb9 [ 255.201466][T10403] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009 [ 255.201477][T10403] RBP: 00007fc5b571e090 R08: 0000000000000000 R09: 0000000000000000 [ 255.201487][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.201498][T10403] R13: 00007fc5b4a16128 R14: 00007fc5b4a16090 R15: 00007ffe54bde368 [ 255.201525][T10403] [ 255.692859][T10406] : renamed from bond_slave_0 [ 255.765405][T10397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.776608][T10397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 255.811182][T10408] lo speed is unknown, defaulting to 1000 [ 255.949127][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 255.959985][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.089589][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.098215][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.138475][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.147224][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.187235][ T3552] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.205737][ T3552] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.229987][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 256.279530][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'. [ 256.353178][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 256.372693][T10424] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1439'. [ 256.573043][T10430] syzkaller1: entered promiscuous mode [ 256.578868][T10430] syzkaller1: entered allmulticast mode [ 256.631000][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.971082][T10442] nbd3: detected capacity change from 0 to 127 [ 256.987838][ T5833] block nbd3: Receive control failed (result -32) [ 256.996896][ T5844] block nbd3: Dead connection, failed to find a fallback [ 257.005411][T10449] FAULT_INJECTION: forcing a failure. [ 257.005411][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.018961][ T5844] block nbd3: shutting down sockets [ 257.025968][ T5844] blk_print_req_error: 138 callbacks suppressed [ 257.025989][ T5844] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.042286][T10449] CPU: 1 UID: 0 PID: 10449 Comm: syz.1.1448 Not tainted syzkaller #0 PREEMPT(full) [ 257.042317][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 257.042331][T10449] Call Trace: [ 257.042338][T10449] [ 257.042347][T10449] dump_stack_lvl+0xe8/0x150 [ 257.042380][T10449] should_fail_ex+0x412/0x560 [ 257.042501][T10449] _copy_from_user+0x2d/0xb0 [ 257.042584][T10449] ___sys_sendmsg+0x1c6/0x360 [ 257.042648][T10449] ? __lock_acquire+0x6b5/0x2cf0 [ 257.042716][T10449] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.042875][T10449] ? __fget_files+0x2a/0x420 [ 257.042951][T10449] ? __fget_files+0x3a0/0x420 [ 257.043050][T10449] __x64_sys_sendmsg+0x1bd/0x2a0 [ 257.043127][T10449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.043205][T10449] ? __pfx_ksys_write+0x10/0x10 [ 257.043292][T10449] do_syscall_64+0xe2/0xf80 [ 257.043372][T10449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.043427][T10449] ? trace_irq_disable+0x37/0x100 [ 257.043504][T10449] ? clear_bhb_loop+0x60/0xb0 [ 257.043570][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.043624][T10449] RIP: 0033:0x7f1674d9acb9 [ 257.043676][T10449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.043722][T10449] RSP: 002b:00007f1672ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.043785][T10449] RAX: ffffffffffffffda RBX: 00007f1675015fa0 RCX: 00007f1674d9acb9 [ 257.043821][T10449] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 257.043849][T10449] RBP: 00007f1672ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.043897][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.043938][T10449] R13: 00007f1675016038 R14: 00007f1675015fa0 R15: 00007ffcbd673898 [ 257.044038][T10449] [ 257.248951][ T5844] buffer_io_error: 138 callbacks suppressed [ 257.248971][ T5844] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.263338][ T5844] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.353102][ T5844] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.363124][T10455] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.1449'. [ 257.386218][ T5844] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.406381][ T5844] Buffer I/O error on dev nbd3, logical block 2, async page read [ 257.430941][ T5844] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.444260][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1449'. [ 257.451458][ T5844] Buffer I/O error on dev nbd3, logical block 3, async page read [ 257.490241][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1449'. [ 257.494589][ T5844] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.541278][ T5844] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.580569][ T5844] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.600742][ T5844] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.630891][ T5844] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.672949][ T5844] Buffer I/O error on dev nbd3, logical block 2, async page read [ 257.710934][ T5844] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.728523][ T5844] Buffer I/O error on dev nbd3, logical block 3, async page read [ 257.768463][ T5844] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.788034][ T5844] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.821000][ T5844] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.852489][ T5844] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.864282][ T5844] ldm_validate_partition_table(): Disk read failed. [ 257.877621][ T5844] Dev nbd3: unable to read RDB block 0 [ 257.884335][ T5844] nbd3: unable to read partition table [ 257.952415][ T5844] ldm_validate_partition_table(): Disk read failed. [ 257.959652][ T5844] Dev nbd3: unable to read RDB block 0 [ 257.987041][ T5844] nbd3: unable to read partition table [ 258.215047][T10490] FAULT_INJECTION: forcing a failure. [ 258.215047][T10490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.251111][T10490] CPU: 0 UID: 0 PID: 10490 Comm: syz.0.1460 Not tainted syzkaller #0 PREEMPT(full) [ 258.251143][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 258.251157][T10490] Call Trace: [ 258.251166][T10490] [ 258.251175][T10490] dump_stack_lvl+0xe8/0x150 [ 258.251210][T10490] should_fail_ex+0x412/0x560 [ 258.251247][T10490] _copy_to_user+0x31/0xb0 [ 258.251272][T10490] simple_read_from_buffer+0xe1/0x170 [ 258.251304][T10490] proc_fail_nth_read+0x1bb/0x230 [ 258.251330][T10490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.251358][T10490] ? rw_verify_area+0x2a6/0x4d0 [ 258.251391][T10490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.251415][T10490] vfs_read+0x20c/0xa70 [ 258.251434][T10490] ? fdget_pos+0x246/0x320 [ 258.251466][T10490] ? __pfx___mutex_lock+0x10/0x10 [ 258.251499][T10490] ? __pfx_vfs_read+0x10/0x10 [ 258.251521][T10490] ? __fget_files+0x2a/0x420 [ 258.251552][T10490] ? __fget_files+0x3a0/0x420 [ 258.251577][T10490] ? __fget_files+0x2a/0x420 [ 258.251612][T10490] ksys_read+0x150/0x270 [ 258.251635][T10490] ? __pfx_ksys_read+0x10/0x10 [ 258.251667][T10490] do_syscall_64+0xe2/0xf80 [ 258.251700][T10490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.251721][T10490] ? trace_irq_disable+0x37/0x100 [ 258.251750][T10490] ? clear_bhb_loop+0x60/0xb0 [ 258.251776][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.251797][T10490] RIP: 0033:0x7f09eff5b58e [ 258.251816][T10490] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.251835][T10490] RSP: 002b:00007f09f0dc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.251858][T10490] RAX: ffffffffffffffda RBX: 00007f09f0dca6c0 RCX: 00007f09eff5b58e [ 258.251873][T10490] RDX: 000000000000000f RSI: 00007f09f0dca0a0 RDI: 0000000000000004 [ 258.251887][T10490] RBP: 00007f09f0dca090 R08: 0000000000000000 R09: 0000000000000000 [ 258.251900][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.251912][T10490] R13: 00007f09f0216128 R14: 00007f09f0216090 R15: 00007ffc7d453488 [ 258.251955][T10490] [ 258.542563][T10495] netlink: 'syz.2.1463': attribute type 7 has an invalid length. [ 258.616391][T10500] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 258.702950][T10504] bond2: (slave geneve4): making interface the new active one [ 258.712318][T10504] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 258.721790][T10503] tunl0: Caught tx_queue_len zero misconfig [ 258.763677][ T6382] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 258.823272][T10510] bond3: option all_slaves_active: invalid value (13) [ 258.854765][T10510] bond3 (unregistering): Released all slaves [ 258.879756][T10516] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.905462][ T6382] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 258.914906][ T6382] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 258.948481][ T6382] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 259.123631][T10529] FAULT_INJECTION: forcing a failure. [ 259.123631][T10529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.173275][T10529] CPU: 1 UID: 0 PID: 10529 Comm: syz.3.1473 Not tainted syzkaller #0 PREEMPT(full) [ 259.173306][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 259.173320][T10529] Call Trace: [ 259.173329][T10529] [ 259.173340][T10529] dump_stack_lvl+0xe8/0x150 [ 259.173379][T10529] should_fail_ex+0x412/0x560 [ 259.173414][T10529] _copy_from_user+0x2d/0xb0 [ 259.173439][T10529] generic_map_update_batch+0x572/0x810 [ 259.173482][T10529] ? __pfx_generic_map_update_batch+0x10/0x10 [ 259.173509][T10529] ? __fget_files+0x2a/0x420 [ 259.173544][T10529] ? __pfx_generic_map_update_batch+0x10/0x10 [ 259.173568][T10529] bpf_map_do_batch+0x39b/0x630 [ 259.173606][T10529] __sys_bpf+0x709/0x920 [ 259.173645][T10529] ? __pfx___sys_bpf+0x10/0x10 [ 259.173693][T10529] ? ksys_write+0x242/0x270 [ 259.173716][T10529] ? __pfx_ksys_write+0x10/0x10 [ 259.173745][T10529] __x64_sys_bpf+0x7c/0x90 [ 259.173773][T10529] do_syscall_64+0xe2/0xf80 [ 259.173805][T10529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.173826][T10529] ? trace_irq_disable+0x37/0x100 [ 259.173855][T10529] ? clear_bhb_loop+0x60/0xb0 [ 259.173881][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.173902][T10529] RIP: 0033:0x7ff68579acb9 [ 259.173922][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.173941][T10529] RSP: 002b:00007ff68662f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.173964][T10529] RAX: ffffffffffffffda RBX: 00007ff685a15fa0 RCX: 00007ff68579acb9 [ 259.173979][T10529] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 259.173993][T10529] RBP: 00007ff68662f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.174006][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.174019][T10529] R13: 00007ff685a16038 R14: 00007ff685a15fa0 R15: 00007ffcd7f12ed8 [ 259.174054][T10529] [ 259.792260][T10556] __nla_validate_parse: 5 callbacks suppressed [ 259.792281][T10556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 259.849565][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 259.879456][T10551] lo speed is unknown, defaulting to 1000 [ 259.925187][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 259.956917][T10565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 260.083251][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 260.348058][T10583] syzkaller0: entered promiscuous mode [ 260.353875][T10583] syzkaller0: entered allmulticast mode [ 260.532857][T10597] FAULT_INJECTION: forcing a failure. [ 260.532857][T10597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.588173][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.4.1494 Not tainted syzkaller #0 PREEMPT(full) [ 260.588200][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 260.588212][T10597] Call Trace: [ 260.588220][T10597] [ 260.588228][T10597] dump_stack_lvl+0xe8/0x150 [ 260.588257][T10597] should_fail_ex+0x412/0x560 [ 260.588288][T10597] _copy_from_iter+0x1d3/0x1670 [ 260.588315][T10597] ? kmem_cache_alloc_noprof+0x3bd/0x6e0 [ 260.588353][T10597] ? sctp_chunkify+0x5a/0x260 [ 260.588387][T10597] ? __pfx__copy_from_iter+0x10/0x10 [ 260.588413][T10597] ? __asan_memcpy+0x40/0x70 [ 260.588442][T10597] ? sctp_make_datafrag_empty+0x184/0x240 [ 260.588467][T10597] ? skb_put+0x11b/0x210 [ 260.588516][T10597] sctp_user_addto_chunk+0x87/0x240 [ 260.588546][T10597] sctp_datamsg_from_user+0x748/0xef0 [ 260.588586][T10597] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 260.588616][T10597] ? __asan_memcpy+0x40/0x70 [ 260.588650][T10597] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 260.588691][T10597] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 260.588717][T10597] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 260.588753][T10597] ? __local_bh_enable_ip+0xd0/0x130 [ 260.588772][T10597] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 260.588791][T10597] ? security_sctp_bind_connect+0x7e/0x2c0 [ 260.588814][T10597] sctp_sendmsg+0x1b99/0x2920 [ 260.588852][T10597] ? __pfx_sctp_sendmsg+0x10/0x10 [ 260.588878][T10597] ? aa_sk_perm+0x82d/0x960 [ 260.588909][T10597] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.588933][T10597] ? __lock_acquire+0x6b5/0x2cf0 [ 260.588951][T10597] ? sock_rps_record_flow+0x19/0x400 [ 260.588975][T10597] ? inet_sendmsg+0x2f4/0x370 [ 260.588999][T10597] __sock_sendmsg+0x19c/0x270 [ 260.589025][T10597] ____sys_sendmsg+0x500/0x810 [ 260.589051][T10597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.589077][T10597] ? import_iovec+0x73/0xa0 [ 260.589099][T10597] ___sys_sendmsg+0x2a5/0x360 [ 260.589115][T10597] ? __lock_acquire+0x6b5/0x2cf0 [ 260.589138][T10597] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.589161][T10597] ? kstrtouint+0x6e/0xe0 [ 260.589211][T10597] ? __fget_files+0x2a/0x420 [ 260.589233][T10597] ? __fget_files+0x3a0/0x420 [ 260.589265][T10597] __sys_sendmmsg+0x27c/0x4e0 [ 260.589288][T10597] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.589303][T10597] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 260.589357][T10597] ? ksys_write+0x242/0x270 [ 260.589376][T10597] ? __pfx_ksys_write+0x10/0x10 [ 260.589400][T10597] __x64_sys_sendmmsg+0xa0/0xc0 [ 260.589420][T10597] do_syscall_64+0xe2/0xf80 [ 260.589448][T10597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.589465][T10597] ? trace_irq_disable+0x37/0x100 [ 260.589504][T10597] ? clear_bhb_loop+0x60/0xb0 [ 260.589526][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.589544][T10597] RIP: 0033:0x7fc5b479acb9 [ 260.589561][T10597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.589577][T10597] RSP: 002b:00007fc5b573f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.589596][T10597] RAX: ffffffffffffffda RBX: 00007fc5b4a15fa0 RCX: 00007fc5b479acb9 [ 260.589610][T10597] RDX: 0000000000000002 RSI: 0000200000000940 RDI: 0000000000000003 [ 260.589621][T10597] RBP: 00007fc5b573f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.589632][T10597] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 260.589642][T10597] R13: 00007fc5b4a16038 R14: 00007fc5b4a15fa0 R15: 00007ffe54bde368 [ 260.589672][T10597] [ 261.037193][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.046531][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.059430][T10604] syzkaller0: entered promiscuous mode [ 261.089852][T10604] syzkaller0: entered allmulticast mode [ 261.132365][T10608] tipc: Enabled bearer , priority 0 [ 261.239221][T10608] syzkaller0: entered promiscuous mode [ 261.247572][T10608] syzkaller0: entered allmulticast mode [ 261.325086][T10608] tipc: Resetting bearer [ 261.386908][T10608] tipc: Disabling bearer [ 261.425296][T10628] tipc: Enabled bearer , priority 0 [ 261.461520][T10619] lo speed is unknown, defaulting to 1000 [ 261.498526][T10622] syzkaller0: entered promiscuous mode [ 261.516661][T10622] syzkaller0: entered allmulticast mode [ 261.582620][T10622] tipc: Resetting bearer [ 261.599784][T10636] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'. [ 261.626180][T10621] tipc: Resetting bearer [ 261.655996][T10621] tipc: Disabling bearer [ 261.667315][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'. [ 261.680575][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 261.699922][T10638] netlink: 'syz.2.1507': attribute type 15 has an invalid length. [ 261.710992][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1507'. [ 261.851378][T10648] FAULT_INJECTION: forcing a failure. [ 261.851378][T10648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.864941][T10648] CPU: 0 UID: 0 PID: 10648 Comm: syz.2.1512 Not tainted syzkaller #0 PREEMPT(full) [ 261.864971][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 261.864985][T10648] Call Trace: [ 261.864994][T10648] [ 261.865003][T10648] dump_stack_lvl+0xe8/0x150 [ 261.865037][T10648] should_fail_ex+0x412/0x560 [ 261.865073][T10648] _copy_from_user+0x2d/0xb0 [ 261.865096][T10648] ___sys_recvmsg+0x175/0x590 [ 261.865126][T10648] ? __pfx____sys_recvmsg+0x10/0x10 [ 261.865153][T10648] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.865185][T10648] ? irqentry_exit+0x59c/0x620 [ 261.865245][T10648] do_recvmmsg+0x334/0x800 [ 261.865276][T10648] ? __pfx_do_recvmmsg+0x10/0x10 [ 261.865311][T10648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.865364][T10648] __x64_sys_recvmmsg+0x198/0x250 [ 261.865389][T10648] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 261.865433][T10648] do_syscall_64+0xe2/0xf80 [ 261.865465][T10648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.865486][T10648] ? trace_irq_disable+0x37/0x100 [ 261.865514][T10648] ? clear_bhb_loop+0x60/0xb0 [ 261.865541][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.865562][T10648] RIP: 0033:0x7fc30f79acb9 [ 261.865582][T10648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.865600][T10648] RSP: 002b:00007fc3106fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 261.865623][T10648] RAX: ffffffffffffffda RBX: 00007fc30fa15fa0 RCX: 00007fc30f79acb9 [ 261.865647][T10648] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 261.865662][T10648] RBP: 00007fc3106fa090 R08: 0000000000000000 R09: 0000000000000000 [ 261.865673][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.865685][T10648] R13: 00007fc30fa16038 R14: 00007fc30fa15fa0 R15: 00007ffd2e554a18 [ 261.865720][T10648] [ 262.071974][T10649] netlink: 'syz.0.1510': attribute type 13 has an invalid length. [ 262.433409][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1514'. [ 263.425482][T10702] FAULT_INJECTION: forcing a failure. [ 263.425482][T10702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.439692][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.3.1518 Not tainted syzkaller #0 PREEMPT(full) [ 263.439720][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 263.439734][T10702] Call Trace: [ 263.439742][T10702] [ 263.439752][T10702] dump_stack_lvl+0xe8/0x150 [ 263.439785][T10702] should_fail_ex+0x412/0x560 [ 263.439820][T10702] prepare_alloc_pages+0x22a/0x650 [ 263.439852][T10702] __alloc_frozen_pages_noprof+0x12f/0x380 [ 263.439882][T10702] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.439916][T10702] ? policy_nodemask+0x27c/0x710 [ 263.439946][T10702] alloc_pages_mpol+0x232/0x4a0 [ 263.439978][T10702] folio_alloc_mpol_noprof+0x39/0x70 [ 263.440005][T10702] shmem_alloc_and_add_folio+0x445/0xf80 [ 263.440043][T10702] ? filemap_get_entry+0xca/0x320 [ 263.440061][T10702] ? filemap_get_entry+0xca/0x320 [ 263.440085][T10702] ? shmem_huge_global_enabled+0x2cd/0x320 [ 263.440114][T10702] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 263.440148][T10702] ? shmem_allowable_huge_orders+0x4c0/0x4e0 [ 263.440184][T10702] shmem_get_folio_gfp+0x5a9/0x1670 [ 263.440226][T10702] shmem_fault+0x179/0x390 [ 263.440263][T10702] __do_fault+0x138/0x390 [ 263.440284][T10702] do_pte_missing+0x6ad/0x3310 [ 263.440312][T10702] ? handle_mm_fault+0xee/0x32a0 [ 263.440340][T10702] handle_mm_fault+0x1b8c/0x32a0 [ 263.440377][T10702] ? handle_mm_fault+0xee/0x32a0 [ 263.440409][T10702] ? __pfx_handle_mm_fault+0x10/0x10 [ 263.440434][T10702] ? follow_page_pte+0x825/0x1460 [ 263.440467][T10702] ? __pfx_follow_page_pte+0x10/0x10 [ 263.440513][T10702] __get_user_pages+0x165b/0x29d0 [ 263.440563][T10702] __gup_longterm_locked+0x7ed/0x1630 [ 263.440609][T10702] gup_fast_fallback+0x1d82/0x22e0 [ 263.440661][T10702] ? __pfx_gup_fast_fallback+0x10/0x10 [ 263.440687][T10702] ? is_valid_gup_args+0x11f/0x200 [ 263.440713][T10702] ? pin_user_pages_fast+0x4d/0xb0 [ 263.440738][T10702] rds_cmsg_rdma_args+0x8f4/0x1240 [ 263.440790][T10702] rds_cmsg_send+0x33d/0x5c0 [ 263.440825][T10702] rds_sendmsg+0x1158/0x1f50 [ 263.440862][T10702] ? __pfx_rds_sendmsg+0x10/0x10 [ 263.440891][T10702] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.440912][T10702] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 263.440944][T10702] ? aa_sock_msg_perm+0xf1/0x1b0 [ 263.440969][T10702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.440986][T10702] ? __pfx_rds_sendmsg+0x10/0x10 [ 263.441010][T10702] __sock_sendmsg+0x21c/0x270 [ 263.441036][T10702] ____sys_sendmsg+0x4d7/0x810 [ 263.441061][T10702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.441086][T10702] ? import_iovec+0x73/0xa0 [ 263.441108][T10702] ___sys_sendmsg+0x2a5/0x360 [ 263.441124][T10702] ? __lock_acquire+0x6b5/0x2cf0 [ 263.441147][T10702] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.441196][T10702] ? __fget_files+0x2a/0x420 [ 263.441218][T10702] ? __fget_files+0x3a0/0x420 [ 263.441250][T10702] __x64_sys_sendmsg+0x1bd/0x2a0 [ 263.441270][T10702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.441296][T10702] ? __pfx_ksys_write+0x10/0x10 [ 263.441324][T10702] do_syscall_64+0xe2/0xf80 [ 263.441351][T10702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.441368][T10702] ? trace_irq_disable+0x37/0x100 [ 263.441392][T10702] ? clear_bhb_loop+0x60/0xb0 [ 263.441413][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.441430][T10702] RIP: 0033:0x7ff68579acb9 [ 263.441448][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.441463][T10702] RSP: 002b:00007ff68660e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.441483][T10702] RAX: ffffffffffffffda RBX: 00007ff685a16090 RCX: 00007ff68579acb9 [ 263.441505][T10702] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009 [ 263.441516][T10702] RBP: 00007ff68660e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.441527][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.441537][T10702] R13: 00007ff685a16128 R14: 00007ff685a16090 R15: 00007ffcd7f12ed8 [ 263.441577][T10702] [ 264.876935][ T25] block nbd1: Possible stuck request ffff888024ea0000: control (read@0,1024B). Runtime 60 seconds [ 264.887789][ T25] block nbd1: Possible stuck request ffff888024ea0200: control (read@1024,1024B). Runtime 60 seconds [ 264.898982][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.906924][ T25] block nbd1: Possible stuck request ffff888024ea0400: control (read@2048,1024B). Runtime 60 seconds [ 264.918134][ T25] block nbd1: Possible stuck request ffff888024ea0600: control (read@3072,1024B). Runtime 60 seconds [ 265.235498][T10709] syzkaller1: entered promiscuous mode [ 265.245704][T10708] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 265.253036][T10709] syzkaller1: entered allmulticast mode [ 265.304590][T10708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.552014][T10728] __nla_validate_parse: 1 callbacks suppressed [ 265.552033][T10728] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1527'. [ 265.663274][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1529'. [ 265.691556][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1527'. [ 265.701193][T10728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1527'. [ 265.980227][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'. [ 266.040389][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1539'. [ 266.479066][T10786] netlink: 'syz.2.1550': attribute type 15 has an invalid length. [ 266.495744][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1550'. [ 266.605014][T10788] tipc: Enabled bearer , priority 0 [ 266.614171][T10788] syzkaller0: entered promiscuous mode [ 266.619729][T10788] syzkaller0: entered allmulticast mode [ 266.659159][T10788] tipc: Resetting bearer [ 266.659762][T10794] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 266.674694][T10787] tipc: Resetting bearer [ 266.675896][T10794] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 266.705227][T10794] netlink: 'syz.1.1553': attribute type 2 has an invalid length. [ 266.719053][T10787] tipc: Disabling bearer [ 266.843683][T10808] netlink: 'syz.2.1556': attribute type 13 has an invalid length. [ 266.891219][T10808] netlink: 'syz.2.1556': attribute type 17 has an invalid length. [ 266.911928][T10808] netlink: 'syz.2.1556': attribute type 27 has an invalid length. [ 266.924084][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 267.300507][T10824] lo speed is unknown, defaulting to 1000 [ 267.315546][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1561'. [ 267.328603][T10827] netlink: 'syz.0.1561': attribute type 10 has an invalid length. [ 267.434891][ T3552] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.444614][ T3552] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.461195][ T7534] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 267.539876][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 267.556830][T10841] FAULT_INJECTION: forcing a failure. [ 267.556830][T10841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.581292][T10841] CPU: 0 UID: 0 PID: 10841 Comm: syz.2.1567 Not tainted syzkaller #0 PREEMPT(full) [ 267.581321][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 267.581334][T10841] Call Trace: [ 267.581343][T10841] [ 267.581352][T10841] dump_stack_lvl+0xe8/0x150 [ 267.581387][T10841] should_fail_ex+0x412/0x560 [ 267.581425][T10841] _copy_from_user+0x2d/0xb0 [ 267.581450][T10841] kstrtouint_from_user+0xd6/0x180 [ 267.581486][T10841] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.581539][T10841] proc_fail_nth_write+0x8e/0x210 [ 267.581564][T10841] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.581596][T10841] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.581623][T10841] vfs_write+0x29a/0xb90 [ 267.581655][T10841] ? __pfx_vfs_write+0x10/0x10 [ 267.581678][T10841] ? __fget_files+0x2a/0x420 [ 267.581712][T10841] ? __fget_files+0x3a0/0x420 [ 267.581739][T10841] ? __fget_files+0x2a/0x420 [ 267.581777][T10841] ksys_write+0x150/0x270 [ 267.581802][T10841] ? __pfx_ksys_write+0x10/0x10 [ 267.581838][T10841] do_syscall_64+0xe2/0xf80 [ 267.581871][T10841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.581892][T10841] ? trace_irq_disable+0x37/0x100 [ 267.581922][T10841] ? clear_bhb_loop+0x60/0xb0 [ 267.581949][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.581971][T10841] RIP: 0033:0x7fc30f75b58e [ 267.581991][T10841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.582010][T10841] RSP: 002b:00007fc3106f9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.582033][T10841] RAX: ffffffffffffffda RBX: 00007fc3106fa6c0 RCX: 00007fc30f75b58e [ 267.582049][T10841] RDX: 0000000000000001 RSI: 00007fc3106fa0a0 RDI: 0000000000000004 [ 267.582064][T10841] RBP: 00007fc3106fa090 R08: 0000000000000000 R09: 0000000000000000 [ 267.582078][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.582092][T10841] R13: 00007fc30fa16038 R14: 00007fc30fa15fa0 R15: 00007ffd2e554a18 [ 267.582130][T10841] [ 268.011033][ T7534] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 268.041075][ T7534] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 268.133316][T10862] tipc: Enabling of bearer rejected, failed to enable media [ 268.156467][T10864] netlink: 'syz.0.1575': attribute type 15 has an invalid length. [ 268.307867][T10868] lo speed is unknown, defaulting to 1000 [ 268.664860][T10888] tipc: Enabled bearer , priority 0 [ 268.812473][T10888] syzkaller0: entered promiscuous mode [ 268.818555][T10888] syzkaller0: entered allmulticast mode [ 268.845403][T10894] ip6tnl0: Caught tx_queue_len zero misconfig [ 268.876607][T10903] tipc: Resetting bearer [ 268.903364][T10903] tipc: Disabling bearer [ 270.636983][T10939] __nla_validate_parse: 11 callbacks suppressed [ 270.637006][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 270.753382][T10931] lo speed is unknown, defaulting to 1000 [ 270.758417][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 270.779919][T10941] lo speed is unknown, defaulting to 1000 [ 271.142904][T10955] netlink: 'syz.4.1600': attribute type 5 has an invalid length. [ 271.156956][T10956] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.184427][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'. [ 271.190414][T10956] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.314150][T10956] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.365709][T10956] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.409364][T10965] ¾x9ÿ: renamed from bridge_slave_0 [ 271.488868][T10956] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.501220][T10956] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.596452][T10965] syzkaller0: entered promiscuous mode [ 271.602378][T10965] syzkaller0: entered allmulticast mode [ 271.625949][T10978] batadv2: entered promiscuous mode [ 271.632937][T10978] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 271.655617][T10973] tipc: Enabled bearer , priority 0 [ 271.668867][T10956] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.684366][T10980] FAULT_INJECTION: forcing a failure. [ 271.684366][T10980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.704761][T10956] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.711653][T10980] CPU: 0 UID: 0 PID: 10980 Comm: syz.0.1607 Not tainted syzkaller #0 PREEMPT(full) [ 271.711732][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 271.711773][T10980] Call Trace: [ 271.711795][T10980] [ 271.711811][T10980] dump_stack_lvl+0xe8/0x150 [ 271.711905][T10980] should_fail_ex+0x412/0x560 [ 271.712016][T10980] _copy_from_user+0x2d/0xb0 [ 271.712090][T10980] ___sys_recvmsg+0x175/0x590 [ 271.712164][T10980] ? __pfx____sys_recvmsg+0x10/0x10 [ 271.712239][T10980] ? __fget_files+0x2a/0x420 [ 271.712390][T10980] do_recvmmsg+0x334/0x800 [ 271.712467][T10980] ? __pfx_do_recvmmsg+0x10/0x10 [ 271.712571][T10980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.712704][T10980] __x64_sys_recvmmsg+0x198/0x250 [ 271.712769][T10980] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 271.712844][T10980] do_syscall_64+0xe2/0xf80 [ 271.712929][T10980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.712983][T10980] ? trace_irq_disable+0x37/0x100 [ 271.713062][T10980] ? clear_bhb_loop+0x60/0xb0 [ 271.713128][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.713181][T10980] RIP: 0033:0x7f09eff9acb9 [ 271.713227][T10980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.713278][T10980] RSP: 002b:00007f09f0da9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 271.713349][T10980] RAX: ffffffffffffffda RBX: 00007f09f0216180 RCX: 00007f09eff9acb9 [ 271.713408][T10980] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 271.713449][T10980] RBP: 00007f09f0da9090 R08: 0000000000000000 R09: 0000000000000000 [ 271.713483][T10980] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 271.713515][T10980] R13: 00007f09f0216218 R14: 00007f09f0216180 R15: 00007ffc7d453488 [ 271.713611][T10980] [ 271.835254][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.926903][T10973] syzkaller0: entered promiscuous mode [ 271.933369][T10973] syzkaller0: entered allmulticast mode [ 271.987900][T10985] FAULT_INJECTION: forcing a failure. [ 271.987900][T10985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.004347][T10985] CPU: 0 UID: 0 PID: 10985 Comm: syz.2.1609 Not tainted syzkaller #0 PREEMPT(full) [ 272.004378][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 272.004391][T10985] Call Trace: [ 272.004400][T10985] [ 272.004409][T10985] dump_stack_lvl+0xe8/0x150 [ 272.004444][T10985] should_fail_ex+0x412/0x560 [ 272.004478][T10985] _copy_from_user+0x2d/0xb0 [ 272.004502][T10985] ___sys_recvmsg+0x175/0x590 [ 272.004530][T10985] ? __pfx____sys_recvmsg+0x10/0x10 [ 272.004604][T10985] do_recvmmsg+0x334/0x800 [ 272.004633][T10985] ? vfs_write+0x9bc/0xb90 [ 272.004653][T10985] ? __pfx_do_recvmmsg+0x10/0x10 [ 272.004688][T10985] ? kmem_cache_free+0x195/0x610 [ 272.004715][T10985] ? do_sys_openat2+0x168/0x220 [ 272.004759][T10985] __x64_sys_recvmmsg+0x198/0x250 [ 272.004784][T10985] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 272.004825][T10985] do_syscall_64+0xe2/0xf80 [ 272.004863][T10985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.004883][T10985] ? trace_irq_disable+0x37/0x100 [ 272.004913][T10985] ? clear_bhb_loop+0x60/0xb0 [ 272.004938][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.004960][T10985] RIP: 0033:0x7fc30f79acb9 [ 272.004980][T10985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.004998][T10985] RSP: 002b:00007fc3106d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 272.005020][T10985] RAX: ffffffffffffffda RBX: 00007fc30fa16090 RCX: 00007fc30f79acb9 [ 272.005036][T10985] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005 [ 272.005049][T10985] RBP: 00007fc3106d9090 R08: 0000000000000000 R09: 0000000000000000 [ 272.005063][T10985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.005075][T10985] R13: 00007fc30fa16128 R14: 00007fc30fa16090 R15: 00007ffd2e554a18 [ 272.005110][T10985] [ 272.007709][T10972] tipc: Resetting bearer [ 272.247712][T10972] tipc: Disabling bearer [ 272.290608][T10983] lo speed is unknown, defaulting to 1000 [ 272.310207][ T4237] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.322922][ T4237] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.388862][ T2126] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.411006][ T2126] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.458826][ T2126] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.472936][ T2126] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.519537][T10996] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1612'. [ 272.534069][T10989] lo speed is unknown, defaulting to 1000 [ 272.534168][ T2126] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.562661][ T2126] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.571635][T10996] 0ªî{X¹¦: renamed from gretap0 [ 272.579867][T10996] 0ªî{X¹¦: entered allmulticast mode [ 272.588842][T10996] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 272.893016][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 272.956167][T11006] syzkaller0: entered promiscuous mode [ 272.962686][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'. [ 272.964986][T11006] syzkaller0: entered allmulticast mode [ 272.974226][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1617'. [ 273.086070][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1619'. [ 273.153800][T11020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1620'. [ 273.181649][T11020] bond0: entered promiscuous mode [ 273.188171][T11020] bond_slave_0: entered promiscuous mode [ 273.194938][T11020] bond_slave_1: entered promiscuous mode [ 273.208260][T11020] batadv0: entered promiscuous mode [ 273.216066][T11020] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 273.241995][T11020] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 273.265169][T11020] bond0: left promiscuous mode [ 273.270317][T11020] bond_slave_0: left promiscuous mode [ 273.277875][T11020] bond_slave_1: left promiscuous mode [ 273.285051][T11020] batadv0: left promiscuous mode [ 273.398048][T11028] bridge0: port 3(vlan3) entered blocking state [ 273.404609][T11028] bridge0: port 3(vlan3) entered forwarding state [ 273.432632][T11028] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.444386][T11028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.514909][T11018] delete_channel: no stack [ 273.650507][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 273.779188][T11043] lo speed is unknown, defaulting to 1000 [ 273.868044][T11047] lo speed is unknown, defaulting to 1000 [ 274.002756][T11058] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 275.149263][T11108] lo speed is unknown, defaulting to 1000 [ 275.833805][T11139] tipc: Enabled bearer , priority 0 [ 275.861310][T11139] syzkaller0: entered promiscuous mode [ 275.866853][T11139] syzkaller0: entered allmulticast mode [ 275.928331][T11148] Cannot find del_set index 2 as target [ 275.954915][T11139] tipc: Resetting bearer [ 275.990149][T11138] tipc: Resetting bearer [ 276.081786][T11138] tipc: Disabling bearer [ 276.285823][T11162] batadv3: entered promiscuous mode [ 276.301077][ T30] audit: type=1107 audit(1769049349.321:4): pid=11163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 276.316820][T11162] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 276.517681][T11172] __nla_validate_parse: 8 callbacks suppressed [ 276.517701][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 277.043945][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1676'. [ 277.055122][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 277.065115][T11195] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1676'. [ 277.143659][T11194] bond0: Caught tx_queue_len zero misconfig [ 277.388886][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 277.489764][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 277.518826][T11217] xt_ecn: cannot match TCP bits for non-tcp packets [ 278.557183][T11276] syzkaller1: entered promiscuous mode [ 278.582589][T11276] syzkaller1: entered allmulticast mode [ 278.978498][T11289] lo: Caught tx_queue_len zero misconfig [ 279.213779][T11294] lo speed is unknown, defaulting to 1000 [ 279.257803][T11296] FAULT_INJECTION: forcing a failure. [ 279.257803][T11296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.329299][T11296] CPU: 1 UID: 0 PID: 11296 Comm: syz.0.1711 Not tainted syzkaller #0 PREEMPT(full) [ 279.329330][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 279.329344][T11296] Call Trace: [ 279.329353][T11296] [ 279.329363][T11296] dump_stack_lvl+0xe8/0x150 [ 279.329396][T11296] should_fail_ex+0x412/0x560 [ 279.329432][T11296] _copy_from_user+0x2d/0xb0 [ 279.329457][T11296] ___sys_recvmsg+0x175/0x590 [ 279.329486][T11296] ? __pfx____sys_recvmsg+0x10/0x10 [ 279.329550][T11296] do_recvmmsg+0x334/0x800 [ 279.329579][T11296] ? vfs_write+0x9bc/0xb90 [ 279.329606][T11296] ? __pfx_do_recvmmsg+0x10/0x10 [ 279.329643][T11296] ? kmem_cache_free+0x195/0x610 [ 279.329664][T11296] ? do_sys_openat2+0x168/0x220 [ 279.329708][T11296] __x64_sys_recvmmsg+0x198/0x250 [ 279.329735][T11296] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 279.329770][T11296] do_syscall_64+0xe2/0xf80 [ 279.329802][T11296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.329823][T11296] ? trace_irq_disable+0x37/0x100 [ 279.329852][T11296] ? clear_bhb_loop+0x60/0xb0 [ 279.329879][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.329958][T11296] RIP: 0033:0x7f09eff9acb9 [ 279.329978][T11296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.329997][T11296] RSP: 002b:00007f09f0dca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 279.330020][T11296] RAX: ffffffffffffffda RBX: 00007f09f0216090 RCX: 00007f09eff9acb9 [ 279.330037][T11296] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005 [ 279.330051][T11296] RBP: 00007f09f0dca090 R08: 0000000000000000 R09: 0000000000000000 [ 279.330065][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.330077][T11296] R13: 00007f09f0216128 R14: 00007f09f0216090 R15: 00007ffc7d453488 [ 279.330113][T11296] [ 279.888640][T11300] lo speed is unknown, defaulting to 1000 [ 280.246982][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 280.332733][T11319] syzkaller1: entered promiscuous mode [ 280.351091][T11319] syzkaller1: entered allmulticast mode [ 280.517253][T11326] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 280.871338][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.270381][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 281.292347][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 281.379158][T11360] pim6reg99999999: entered allmulticast mode [ 281.511747][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.629524][T11376] tipc: Enabling of bearer rejected, failed to enable media [ 282.232514][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'. [ 282.310235][T11405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.324136][T11405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.453901][T11405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.467730][T11405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.581383][T11421] lo speed is unknown, defaulting to 1000 [ 282.926436][T11405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.939840][T11405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.990529][T11431] netlink: 'syz.3.1755': attribute type 8 has an invalid length. [ 283.049653][T11429] batadv1: entered promiscuous mode [ 283.056500][T11429] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 283.169828][T11405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.191088][T11405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.385036][T11444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.399330][ T3552] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.411296][T11444] ipt_ECN: cannot use operation on non-tcp rule [ 283.420873][ T3552] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.451442][ T3552] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.480876][ T3552] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.511135][ T3552] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.519458][ T3552] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.573974][T11452] FAULT_INJECTION: forcing a failure. [ 283.573974][T11452] name failslab, interval 1, probability 0, space 0, times 0 [ 283.587926][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.599484][T11452] CPU: 1 UID: 0 PID: 11452 Comm: syz.0.1762 Not tainted syzkaller #0 PREEMPT(full) [ 283.599514][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 283.599528][T11452] Call Trace: [ 283.599536][T11452] [ 283.599547][T11452] dump_stack_lvl+0xe8/0x150 [ 283.599590][T11452] should_fail_ex+0x412/0x560 [ 283.599626][T11452] should_failslab+0xa8/0x100 [ 283.599655][T11452] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 283.599691][T11452] ? __alloc_skb+0x1d0/0x7d0 [ 283.599721][T11452] ? __local_bh_enable_ip+0xd0/0x130 [ 283.599751][T11452] __alloc_skb+0x1d0/0x7d0 [ 283.599788][T11452] _sctp_make_chunk+0x59/0x290 [ 283.599823][T11452] sctp_make_datafrag_empty+0x12a/0x240 [ 283.599855][T11452] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 283.599887][T11452] ? sctp_user_addto_chunk+0xa8/0x240 [ 283.599922][T11452] sctp_datamsg_from_user+0x729/0xef0 [ 283.599970][T11452] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 283.600002][T11452] ? __asan_memcpy+0x40/0x70 [ 283.600044][T11452] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 283.600094][T11452] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 283.600126][T11452] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 283.600167][T11452] ? __local_bh_enable_ip+0xd0/0x130 [ 283.600190][T11452] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 283.600212][T11452] ? security_sctp_bind_connect+0x7e/0x2c0 [ 283.600240][T11452] sctp_sendmsg+0x1b99/0x2920 [ 283.600285][T11452] ? __pfx_sctp_sendmsg+0x10/0x10 [ 283.600316][T11452] ? aa_sk_perm+0x82d/0x960 [ 283.600353][T11452] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.600383][T11452] ? sock_rps_record_flow+0x19/0x400 [ 283.600412][T11452] ? inet_sendmsg+0x2f4/0x370 [ 283.600441][T11452] __sock_sendmsg+0x19c/0x270 [ 283.600471][T11452] __sys_sendto+0x3c0/0x550 [ 283.600506][T11452] ? __pfx___sys_sendto+0x10/0x10 [ 283.600535][T11452] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 283.600594][T11452] ? __fget_files+0x3a0/0x420 [ 283.600634][T11452] ? ksys_write+0x242/0x270 [ 283.600657][T11452] ? __pfx_ksys_write+0x10/0x10 [ 283.600684][T11452] __x64_sys_sendto+0xde/0x100 [ 283.600720][T11452] do_syscall_64+0xe2/0xf80 [ 283.600755][T11452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.600774][T11452] ? trace_irq_disable+0x37/0x100 [ 283.600802][T11452] ? clear_bhb_loop+0x60/0xb0 [ 283.600827][T11452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.600847][T11452] RIP: 0033:0x7f09eff9acb9 [ 283.600868][T11452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.600885][T11452] RSP: 002b:00007f09f0deb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 283.600909][T11452] RAX: ffffffffffffffda RBX: 00007f09f0215fa0 RCX: 00007f09eff9acb9 [ 283.600925][T11452] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 283.600940][T11452] RBP: 00007f09f0deb090 R08: 000020000005ffe4 R09: 000000000000001c [ 283.600954][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 283.600967][T11452] R13: 00007f09f0216038 R14: 00007f09f0215fa0 R15: 00007ffc7d453488 [ 283.601003][T11452] [ 283.906759][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.058731][T11460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'. [ 284.082387][T11460] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1763'. [ 284.253928][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 284.327330][T11469] tc_dump_action: action bad kind [ 284.563874][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1771'. [ 284.683655][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1775'. [ 284.932964][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 285.694081][T11527] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1782'. [ 286.018681][T11537] netlink: 'syz.4.1786': attribute type 89 has an invalid length. [ 286.027121][T11536] netlink: 'syz.4.1786': attribute type 89 has an invalid length. [ 286.128221][T11542] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1789'. [ 286.155313][T11544] sch_tbf: peakrate 4 is lower than or equals to rate 5834318465789501358 ! [ 286.222277][T11548] netlink: 'syz.2.1792': attribute type 13 has an invalid length. [ 286.237385][T11549] FAULT_INJECTION: forcing a failure. [ 286.237385][T11549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.272454][T11552] netlink: 'syz.1.1793': attribute type 10 has an invalid length. [ 286.280471][T11549] CPU: 0 UID: 0 PID: 11549 Comm: syz.3.1790 Not tainted syzkaller #0 PREEMPT(full) [ 286.280500][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 286.280514][T11549] Call Trace: [ 286.280528][T11549] [ 286.280538][T11549] dump_stack_lvl+0xe8/0x150 [ 286.280572][T11549] should_fail_ex+0x412/0x560 [ 286.280608][T11549] prepare_alloc_pages+0x22a/0x650 [ 286.280642][T11549] __alloc_frozen_pages_noprof+0x12f/0x380 [ 286.280672][T11549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.280707][T11549] ? policy_nodemask+0x27c/0x710 [ 286.280743][T11549] alloc_pages_mpol+0x232/0x4a0 [ 286.280772][T11549] folio_alloc_mpol_noprof+0x39/0x70 [ 286.280801][T11549] shmem_alloc_and_add_folio+0x445/0xf80 [ 286.280838][T11549] ? filemap_get_entry+0xca/0x320 [ 286.280856][T11549] ? filemap_get_entry+0xca/0x320 [ 286.280880][T11549] ? shmem_huge_global_enabled+0x2cd/0x320 [ 286.280906][T11549] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 286.280939][T11549] ? shmem_allowable_huge_orders+0x4c0/0x4e0 [ 286.280975][T11549] shmem_get_folio_gfp+0x5a9/0x1670 [ 286.281022][T11549] shmem_fault+0x179/0x390 [ 286.281065][T11549] __do_fault+0x138/0x390 [ 286.281090][T11549] do_pte_missing+0x6ad/0x3310 [ 286.281124][T11549] ? handle_mm_fault+0xee/0x32a0 [ 286.281159][T11549] handle_mm_fault+0x1b8c/0x32a0 [ 286.281204][T11549] ? handle_mm_fault+0xee/0x32a0 [ 286.281242][T11549] ? __pfx_handle_mm_fault+0x10/0x10 [ 286.281273][T11549] ? follow_page_pte+0x825/0x1460 [ 286.281308][T11549] ? __pfx_follow_page_pte+0x10/0x10 [ 286.281350][T11549] __get_user_pages+0x165b/0x29d0 [ 286.281411][T11549] __gup_longterm_locked+0x7ed/0x1630 [ 286.281466][T11549] gup_fast_fallback+0x1d82/0x22e0 [ 286.281539][T11549] ? __pfx_gup_fast_fallback+0x10/0x10 [ 286.281573][T11549] ? is_valid_gup_args+0x11f/0x200 [ 286.281605][T11549] ? pin_user_pages_fast+0x4d/0xb0 [ 286.281636][T11549] rds_cmsg_rdma_args+0x8f4/0x1240 [ 286.281691][T11549] rds_cmsg_send+0x33d/0x5c0 [ 286.281735][T11549] rds_sendmsg+0x1158/0x1f50 [ 286.281783][T11549] ? __pfx_rds_sendmsg+0x10/0x10 [ 286.281819][T11549] ? __pfx_aa_sk_perm+0x10/0x10 [ 286.281844][T11549] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 286.281883][T11549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.281914][T11549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.281933][T11549] ? __pfx_rds_sendmsg+0x10/0x10 [ 286.281961][T11549] __sock_sendmsg+0x21c/0x270 [ 286.281992][T11549] ____sys_sendmsg+0x4d7/0x810 [ 286.282023][T11549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.282055][T11549] ? import_iovec+0x73/0xa0 [ 286.282083][T11549] ___sys_sendmsg+0x2a5/0x360 [ 286.282103][T11549] ? __lock_acquire+0x6b5/0x2cf0 [ 286.282131][T11549] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.282193][T11549] ? __fget_files+0x2a/0x420 [ 286.282219][T11549] ? __fget_files+0x3a0/0x420 [ 286.282259][T11549] __x64_sys_sendmsg+0x1bd/0x2a0 [ 286.282283][T11549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.282316][T11549] ? __pfx_ksys_write+0x10/0x10 [ 286.282351][T11549] do_syscall_64+0xe2/0xf80 [ 286.282384][T11549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.282405][T11549] ? trace_irq_disable+0x37/0x100 [ 286.282434][T11549] ? clear_bhb_loop+0x60/0xb0 [ 286.282460][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.282481][T11549] RIP: 0033:0x7ff68579acb9 [ 286.282502][T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.282520][T11549] RSP: 002b:00007ff68660e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.282550][T11549] RAX: ffffffffffffffda RBX: 00007ff685a16090 RCX: 00007ff68579acb9 [ 286.282566][T11549] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009 [ 286.282579][T11549] RBP: 00007ff68660e090 R08: 0000000000000000 R09: 0000000000000000 [ 286.282592][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.282605][T11549] R13: 00007ff685a16128 R14: 00007ff685a16090 R15: 00007ffcd7f12ed8 [ 286.282640][T11549] [ 286.760521][T11557] netlink: 'syz.1.1793': attribute type 10 has an invalid length. [ 286.818562][T11552] team0: Port device dummy0 added [ 286.888952][T11557] team0: Port device dummy0 removed [ 286.971766][T11557] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 287.517860][T11582] lo speed is unknown, defaulting to 1000 [ 287.641155][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 287.651932][T11588] syzkaller0: entered promiscuous mode [ 287.657482][T11588] syzkaller0: entered allmulticast mode [ 287.718329][T11590] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1803'. [ 287.747519][T11590] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 287.774002][T11590] 0ªî{X¹¦: entered allmulticast mode [ 287.782410][T11590] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 288.300553][T11608] FAULT_INJECTION: forcing a failure. [ 288.300553][T11608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.359038][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.2.1809 Not tainted syzkaller #0 PREEMPT(full) [ 288.359069][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 288.359083][T11608] Call Trace: [ 288.359092][T11608] [ 288.359101][T11608] dump_stack_lvl+0xe8/0x150 [ 288.359136][T11608] should_fail_ex+0x412/0x560 [ 288.359172][T11608] _copy_from_user+0x2d/0xb0 [ 288.359197][T11608] do_sock_getsockopt+0x165/0x3f0 [ 288.359234][T11608] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 288.359269][T11608] ? __fget_files+0x3a0/0x420 [ 288.359296][T11608] ? __fget_files+0x2a/0x420 [ 288.359330][T11608] __x64_sys_getsockopt+0x1a4/0x240 [ 288.359373][T11608] do_syscall_64+0xe2/0xf80 [ 288.359405][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.359432][T11608] ? trace_irq_disable+0x37/0x100 [ 288.359461][T11608] ? clear_bhb_loop+0x60/0xb0 [ 288.359487][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.359509][T11608] RIP: 0033:0x7fc30f79acb9 [ 288.359527][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.359545][T11608] RSP: 002b:00007fc3106fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 288.359568][T11608] RAX: ffffffffffffffda RBX: 00007fc30fa15fa0 RCX: 00007fc30f79acb9 [ 288.359583][T11608] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 288.359596][T11608] RBP: 00007fc3106fa090 R08: 0000200000000040 R09: 0000000000000000 [ 288.359610][T11608] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.359623][T11608] R13: 00007fc30fa16038 R14: 00007fc30fa15fa0 R15: 00007ffd2e554a18 [ 288.359658][T11608] [ 289.060991][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 290.128883][T11690] tc_dump_action: action bad kind [ 290.736656][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 290.760194][T11722] batadv1: entered promiscuous mode [ 290.768710][T11722] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 290.956548][ T68] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.964655][ T68] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.981208][ T7534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.031228][ T7534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.042974][ T7534] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.081526][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1856'. [ 291.086002][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1857'. [ 291.092858][T11738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1856'. [ 291.229632][T11749] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 291.240284][T11749] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0/file1 [ 291.270368][T11753] netlink: 'syz.2.1861': attribute type 2 has an invalid length. [ 291.692137][T11780] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 291.699946][T11780] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1869'. [ 292.017754][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 292.786991][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 293.126677][T11815] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 293.508780][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 293.781799][ T7554] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 294.017367][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1891'. [ 294.026543][T11848] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1891'. [ 294.061085][ T7554] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 294.466829][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 294.481269][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 294.970372][T11879] lo speed is unknown, defaulting to 1000 [ 294.989512][ T25] block nbd1: Possible stuck request ffff888024ea0000: control (read@0,1024B). Runtime 90 seconds [ 295.008733][ T25] block nbd1: Possible stuck request ffff888024ea0200: control (read@1024,1024B). Runtime 90 seconds [ 295.021919][ T25] block nbd1: Possible stuck request ffff888024ea0400: control (read@2048,1024B). Runtime 90 seconds [ 295.033161][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.041577][ T25] block nbd1: Possible stuck request ffff888024ea0600: control (read@3072,1024B). Runtime 90 seconds [ 295.149905][T11883] tipc: Enabled bearer , priority 0 [ 295.206039][T11883] syzkaller0: entered promiscuous mode [ 295.220911][T11883] syzkaller0: entered allmulticast mode [ 295.392923][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 295.521639][T11904] FAULT_INJECTION: forcing a failure. [ 295.521639][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.535156][T11904] CPU: 0 UID: 0 PID: 11904 Comm: syz.0.1905 Not tainted syzkaller #0 PREEMPT(full) [ 295.535183][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 295.535196][T11904] Call Trace: [ 295.535205][T11904] [ 295.535214][T11904] dump_stack_lvl+0xe8/0x150 [ 295.535247][T11904] should_fail_ex+0x412/0x560 [ 295.535282][T11904] _copy_from_user+0x2d/0xb0 [ 295.535306][T11904] do_tcp_getsockopt+0x226/0x2930 [ 295.535346][T11904] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 295.535374][T11904] ? sock_recv_errqueue+0x550/0x590 [ 295.535402][T11904] ? __lock_acquire+0x6b5/0x2cf0 [ 295.535428][T11904] ? _parse_integer_limit+0x1ae/0x1f0 [ 295.535455][T11904] ? aa_label_sk_perm+0x529/0x6d0 [ 295.535486][T11904] ? kstrtoull+0x12f/0x1d0 [ 295.535515][T11904] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 295.535542][T11904] ? kstrtouint+0x6e/0xe0 [ 295.535571][T11904] ? get_pid_task+0x20/0x1f0 [ 295.535606][T11904] ? __lock_acquire+0x6b5/0x2cf0 [ 295.535646][T11904] ? aa_sk_perm+0x15a/0x960 [ 295.535675][T11904] ? __might_fault+0xaf/0x130 [ 295.535703][T11904] ? __might_fault+0xaf/0x130 [ 295.535738][T11904] tcp_getsockopt+0x83/0x130 [ 295.535763][T11904] ? sock_recv_errqueue+0x550/0x590 [ 295.535796][T11904] ? sock_recv_errqueue+0x550/0x590 [ 295.535817][T11904] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.535842][T11904] do_sock_getsockopt+0x2d3/0x3f0 [ 295.535872][T11904] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 295.535900][T11904] ? __fget_files+0x3a0/0x420 [ 295.535921][T11904] ? __fget_files+0x2a/0x420 [ 295.535949][T11904] __x64_sys_getsockopt+0x1a4/0x240 [ 295.535984][T11904] do_syscall_64+0xe2/0xf80 [ 295.536010][T11904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.536026][T11904] ? trace_irq_disable+0x37/0x100 [ 295.536049][T11904] ? clear_bhb_loop+0x60/0xb0 [ 295.536070][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.536092][T11904] RIP: 0033:0x7f09eff9acb9 [ 295.536109][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.536124][T11904] RSP: 002b:00007f09f0da9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 295.536143][T11904] RAX: ffffffffffffffda RBX: 00007f09f0216180 RCX: 00007f09eff9acb9 [ 295.536156][T11904] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 295.536166][T11904] RBP: 00007f09f0da9090 R08: 0000200000000040 R09: 0000000000000000 [ 295.536177][T11904] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.536189][T11904] R13: 00007f09f0216218 R14: 00007f09f0216180 R15: 00007ffc7d453488 [ 295.536217][T11904] [ 295.876079][T11906] openvswitch: netlink: Message has 484 unknown bytes. [ 296.993265][T11896] tipc: Resetting bearer [ 297.020238][ T7534] tipc: Node number set to 1 [ 297.147763][T11882] tipc: Resetting bearer [ 297.224787][T11882] tipc: Disabling bearer [ 297.337154][T11925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1914'. [ 297.426379][T11930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.458935][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 297.524755][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 297.912401][T11959] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 297.945053][T11959] tipc: Enabled bearer , priority 10 [ 297.985463][T11953] __nla_validate_parse: 2 callbacks suppressed [ 297.985484][T11953] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1923'. [ 298.197749][T11972] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1929'. [ 298.358199][T11980] veth0: entered promiscuous mode [ 298.424269][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 298.492046][T11973] veth0: left promiscuous mode [ 298.709538][T11991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.750110][ T24] lo speed is unknown, defaulting to 1000 [ 298.756999][ T24] syz2: Port: 1 Link ACTIVE [ 298.791046][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 298.925851][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 299.002116][T12010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1942'. [ 299.061126][ T24] tipc: Node number set to 1132556756 [ 299.074869][T12015] FAULT_INJECTION: forcing a failure. [ 299.074869][T12015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.102698][T12015] CPU: 0 UID: 0 PID: 12015 Comm: syz.0.1943 Not tainted syzkaller #0 PREEMPT(full) [ 299.102729][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 299.102743][T12015] Call Trace: [ 299.102751][T12015] [ 299.102760][T12015] dump_stack_lvl+0xe8/0x150 [ 299.102794][T12015] should_fail_ex+0x412/0x560 [ 299.102831][T12015] _copy_from_iter+0x1d3/0x1670 [ 299.102873][T12015] ? rcu_is_watching+0x15/0xb0 [ 299.102903][T12015] ? __pfx__copy_from_iter+0x10/0x10 [ 299.102932][T12015] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 299.102976][T12015] ? netlink_sendmsg+0x650/0xb40 [ 299.103000][T12015] ? skb_put+0x11b/0x210 [ 299.103035][T12015] netlink_sendmsg+0x6c0/0xb40 [ 299.103071][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.103098][T12015] ? aa_file_perm+0x12d/0x1630 [ 299.103128][T12015] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.103159][T12015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.103179][T12015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.103213][T12015] __sock_sendmsg+0x21c/0x270 [ 299.103243][T12015] ____sys_sendmsg+0x4d7/0x810 [ 299.103263][T12015] ? __might_fault+0xaf/0x130 [ 299.103303][T12015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.103334][T12015] ? import_iovec+0x73/0xa0 [ 299.103360][T12015] ___sys_sendmsg+0x2a5/0x360 [ 299.103379][T12015] ? __lock_acquire+0x6b5/0x2cf0 [ 299.103406][T12015] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.103465][T12015] ? __fget_files+0x2a/0x420 [ 299.103493][T12015] ? __fget_files+0x3a0/0x420 [ 299.103531][T12015] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.103556][T12015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.103587][T12015] ? __pfx_ksys_write+0x10/0x10 [ 299.103627][T12015] do_syscall_64+0xe2/0xf80 [ 299.103659][T12015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.103680][T12015] ? trace_irq_disable+0x37/0x100 [ 299.103710][T12015] ? clear_bhb_loop+0x60/0xb0 [ 299.103736][T12015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.103757][T12015] RIP: 0033:0x7f09eff9acb9 [ 299.103777][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.103795][T12015] RSP: 002b:00007f09f0deb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.103818][T12015] RAX: ffffffffffffffda RBX: 00007f09f0215fa0 RCX: 00007f09eff9acb9 [ 299.103834][T12015] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 299.103848][T12015] RBP: 00007f09f0deb090 R08: 0000000000000000 R09: 0000000000000000 [ 299.103861][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.103874][T12015] R13: 00007f09f0216038 R14: 00007f09f0215fa0 R15: 00007ffc7d453488 [ 299.103909][T12015] [ 299.423448][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1945'. [ 299.624577][T12031] netlink: 'syz.0.1950': attribute type 11 has an invalid length. [ 299.748236][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 299.811783][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 299.849302][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1952'. [ 300.028970][T12044] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1955'. [ 300.120660][T12050] netlink: 'syz.3.1956': attribute type 13 has an invalid length. [ 300.137264][T12050] netlink: 'syz.3.1956': attribute type 17 has an invalid length. [ 300.174508][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880565e8400: rx timeout, send abort [ 300.183425][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880565e8400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.333477][T12062] xt_ipcomp: unknown flags 1D [ 300.374990][ T5198] udevd[5198]: worker [5836] /devices/virtual/block/nbd1 is taking a long time [ 300.401876][T12066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.759247][T12072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.198367][T12093] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 301.249293][T12093] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.354241][T12104] netlink: 'syz.4.1971': attribute type 2 has an invalid length. [ 301.433325][T12104] lo speed is unknown, defaulting to 1000 [ 301.558860][T12110] netlink: 'syz.1.1977': attribute type 13 has an invalid length. [ 301.571193][T12112] xt_connbytes: Forcing CT accounting to be enabled [ 301.662581][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.753655][T12118] lo speed is unknown, defaulting to 1000 [ 301.899903][T12131] delete_channel: no stack [ 301.920034][T12131] delete_channel: no stack [ 302.238454][T12129] lo speed is unknown, defaulting to 1000 [ 302.508086][T12159] nbd: nbd1 already in use [ 302.550113][T12159] netlink: 'syz.1.1993': attribute type 5 has an invalid length. [ 302.631547][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.700339][T12164] macvtap1: entered promiscuous mode [ 302.716022][T12164] veth1_to_hsr: entered promiscuous mode [ 302.746773][T12164] macvtap1: entered allmulticast mode [ 302.753657][T12164] veth1_to_hsr: entered allmulticast mode [ 302.943160][T12185] netlink: 'syz.1.2004': attribute type 13 has an invalid length. [ 302.970844][T12185] netlink: 'syz.1.2004': attribute type 17 has an invalid length. [ 303.004216][T12185] 0ªî{X¹¦: left allmulticast mode [ 303.121820][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.148924][T12185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.238606][T12196] __nla_validate_parse: 8 callbacks suppressed [ 303.238666][T12196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2006'. [ 303.241536][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.264174][T12197] xt_l2tp: v2 tid > 0xffff: 37482740 [ 303.270997][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.473088][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 303.479342][T12207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2009'. [ 303.518823][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 303.723238][T12225] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.813026][T12227] netlink: 'syz.4.2014': attribute type 6 has an invalid length. [ 303.860250][T12234] Cannot find del_set index 2 as target [ 303.881019][T12233] netlink: 7076 bytes leftover after parsing attributes in process `syz.3.2018'. [ 304.032768][T12245] xt_connbytes: Forcing CT accounting to be enabled [ 304.066668][T12244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2022'. [ 304.137931][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 304.200519][ T3552] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.229311][ T3552] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.260983][ T3552] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.269269][ T3552] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.479803][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2021'. [ 304.492738][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 304.589432][T12273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2031'. [ 304.867847][T12280] lo speed is unknown, defaulting to 1000 [ 305.375022][T12309] sctp: [Deprecated]: syz.0.2042 (pid 12309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.375022][T12309] Use struct sctp_sack_info instead [ 305.489612][T12314] syzkaller1: entered promiscuous mode [ 305.495401][T12314] syzkaller1: entered allmulticast mode [ 305.862186][T12328] lo speed is unknown, defaulting to 1000 [ 306.011059][ T30] audit: type=1107 audit(1769049379.041:5): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='âÅx' [ 306.159569][T12350] syzkaller0: entered promiscuous mode [ 306.165371][T12350] syzkaller0: entered allmulticast mode [ 306.688113][T12381] lo speed is unknown, defaulting to 1000 [ 306.712803][T12383] validate_nla: 4 callbacks suppressed [ 306.712824][T12383] netlink: 'syz.2.2068': attribute type 1 has an invalid length. [ 306.731444][T12384] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 306.826421][T12383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.855294][T12396] netlink: 'syz.0.2069': attribute type 4 has an invalid length. [ 306.911873][T12398] netlink: 'syz.0.2069': attribute type 4 has an invalid length. [ 306.920935][T12393] bond1: (slave ip6erspan0): making interface the new active one [ 306.989928][T12393] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 307.098055][T12404] lo speed is unknown, defaulting to 1000 [ 307.106318][T12396] netlink: 'syz.0.2069': attribute type 4 has an invalid length. [ 307.373661][T12413] lo speed is unknown, defaulting to 1000 [ 307.587706][T12425] netlink: 'syz.4.2076': attribute type 13 has an invalid length. [ 307.597570][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.617150][T12423] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.035145][ T5934] lo speed is unknown, defaulting to 1000 [ 308.045651][ T5934] syz2: Port: 1 Link DOWN [ 308.143673][ T4054] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.154052][ T4054] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.169454][ T4054] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 308.188601][ T4054] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.200342][ T4054] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.210887][ T4054] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 308.220345][ T4054] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.234253][ T4054] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.249404][ T4054] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 308.521561][ T4054] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.564050][ T4054] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.584344][ T4054] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 308.598835][T12457] __nla_validate_parse: 12 callbacks suppressed [ 308.598854][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 308.650006][T12460] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2085'. [ 308.710375][T12457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2085'. [ 308.941503][T12472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2090'. [ 309.263204][T12488] tc_dump_action: action bad kind [ 309.287416][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 309.366053][T12491] xt_connbytes: Forcing CT accounting to be enabled [ 309.389175][T12492] netlink: 'syz.2.2100': attribute type 13 has an invalid length. [ 309.791423][ T7554] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.801391][T12522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2100'. [ 309.807567][ T7554] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.834256][T12507] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.854725][T12507] syzkaller0: entered promiscuous mode [ 309.867105][T12507] syzkaller0: entered allmulticast mode [ 309.931620][ T6762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.959204][T12520] syzkaller1: entered promiscuous mode [ 309.965525][T12520] syzkaller1: entered allmulticast mode [ 310.181939][T12528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2105'. [ 310.218903][T12528] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2105'. [ 310.301015][ T7554] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.727775][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'. [ 312.343330][T12554] tc_dump_action: action bad kind [ 312.536463][T12595] tap0: tun_chr_ioctl cmd 1074025681 [ 312.722318][T12595] bridge0: port 3(vlan3) entered disabled state [ 312.807484][T12595] batadv_slave_0: left promiscuous mode [ 312.824295][T12595] batadv_slave_0: left allmulticast mode [ 312.838338][T12595] ipvlan2: left promiscuous mode [ 312.858051][T12595] gtp0: left promiscuous mode [ 312.869834][T12595] gtp0: left allmulticast mode [ 312.888012][T12595] geneve2: left promiscuous mode [ 312.901550][T12595] geneve2: left allmulticast mode [ 312.921743][T12595] batadv1: left promiscuous mode [ 312.938495][T12595] veth1_to_hsr: left allmulticast mode [ 312.944466][T12595] veth1_to_hsr: left promiscuous mode [ 312.950461][T12595] macvtap1: left promiscuous mode [ 312.955977][T12595] macvtap1: left allmulticast mode [ 313.172847][T12622] tc_dump_action: action bad kind [ 313.302878][T12628] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2129'. [ 313.536027][T12640] FAULT_INJECTION: forcing a failure. [ 313.536027][T12640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.591064][T12640] CPU: 1 UID: 0 PID: 12640 Comm: syz.3.2134 Not tainted syzkaller #0 PREEMPT(full) [ 313.591093][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 313.591105][T12640] Call Trace: [ 313.591113][T12640] [ 313.591121][T12640] dump_stack_lvl+0xe8/0x150 [ 313.591154][T12640] should_fail_ex+0x412/0x560 [ 313.591191][T12640] _copy_from_user+0x2d/0xb0 [ 313.591214][T12640] copy_from_sockptr+0x5e/0x90 [ 313.591245][T12640] do_tcp_getsockopt+0x1ceb/0x2930 [ 313.591283][T12640] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 313.591312][T12640] ? sock_recv_errqueue+0x550/0x590 [ 313.591340][T12640] ? __lock_acquire+0x6b5/0x2cf0 [ 313.591367][T12640] ? _parse_integer_limit+0x1ae/0x1f0 [ 313.591394][T12640] ? aa_label_sk_perm+0x529/0x6d0 [ 313.591425][T12640] ? kstrtoull+0x12f/0x1d0 [ 313.591454][T12640] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 313.591480][T12640] ? kstrtouint+0x6e/0xe0 [ 313.591509][T12640] ? get_pid_task+0x20/0x1f0 [ 313.591544][T12640] ? __lock_acquire+0x6b5/0x2cf0 [ 313.591583][T12640] ? aa_sk_perm+0x15a/0x960 [ 313.591614][T12640] ? __might_fault+0xaf/0x130 [ 313.591663][T12640] tcp_getsockopt+0x83/0x130 [ 313.591692][T12640] ? sock_recv_errqueue+0x550/0x590 [ 313.591719][T12640] ? sock_recv_errqueue+0x550/0x590 [ 313.591746][T12640] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 313.591775][T12640] do_sock_getsockopt+0x2d3/0x3f0 [ 313.591813][T12640] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 313.591847][T12640] ? __fget_files+0x3a0/0x420 [ 313.591874][T12640] ? __fget_files+0x2a/0x420 [ 313.591908][T12640] __x64_sys_getsockopt+0x1a4/0x240 [ 313.591953][T12640] do_syscall_64+0xe2/0xf80 [ 313.591994][T12640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.592015][T12640] ? trace_irq_disable+0x37/0x100 [ 313.592046][T12640] ? clear_bhb_loop+0x60/0xb0 [ 313.592077][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.592096][T12640] RIP: 0033:0x7ff68579acb9 [ 313.592114][T12640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.592130][T12640] RSP: 002b:00007ff68662f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 313.592149][T12640] RAX: ffffffffffffffda RBX: 00007ff685a15fa0 RCX: 00007ff68579acb9 [ 313.592163][T12640] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 313.592173][T12640] RBP: 00007ff68662f090 R08: 0000200000000040 R09: 0000000000000000 [ 313.592184][T12640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.592195][T12640] R13: 00007ff685a16038 R14: 00007ff685a15fa0 R15: 00007ffcd7f12ed8 [ 313.592224][T12640] [ 313.937456][T12647] vlan0: entered promiscuous mode [ 313.945029][T12647] 0ªî{X¹¦: entered promiscuous mode [ 314.017231][T12649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2138'. [ 314.513911][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 314.515507][T12680] netlink: 'syz.2.2150': attribute type 13 has an invalid length. [ 314.533059][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 314.601885][ T6762] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 314.620372][ T6762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.683953][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2153'. [ 314.816608][T12697] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2156'. [ 314.832779][ T7554] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 314.884209][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2157'. [ 314.898468][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2157'. [ 314.923435][T12701] erspan0: entered promiscuous mode [ 314.941778][T12701] vlan1: entered promiscuous mode [ 315.001820][ T6762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.171362][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 315.182509][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 315.209309][T12720] netlink: 'syz.2.2164': attribute type 39 has an invalid length. [ 315.491513][T12739] sctp: [Deprecated]: syz.2.2169 (pid 12739) Use of int in max_burst socket option. [ 315.491513][T12739] Use struct sctp_assoc_value instead [ 315.524686][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2169'. [ 315.766152][T12753] lo speed is unknown, defaulting to 1000 [ 315.805769][T12758] tc_dump_action: action bad kind [ 315.907552][T12765] Cannot find add_set index 3 as target [ 316.070954][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 316.317751][T12787] 0ªî{X¹¦: renamed from gretap0 [ 316.333783][T12787] 0ªî{X¹¦: entered allmulticast mode [ 316.347543][T12787] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 316.569134][T12795] macvlan4: entered promiscuous mode [ 316.619012][T12805] netlink: 'syz.2.2190': attribute type 2 has an invalid length. [ 317.245341][T12844] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 317.399126][T12854] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 317.411116][T12854] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 317.419572][T12854] CPU: 1 UID: 0 PID: 12854 Comm: syz.3.2209 Not tainted syzkaller #0 PREEMPT(full) [ 317.428986][T12854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 317.439081][T12854] RIP: 0010:ife_tlv_meta_encode+0x46/0xb0 [ 317.444856][T12854] Code: 50 83 73 f6 45 8d 77 07 4d 8d 65 04 c1 e5 10 44 89 fb 83 c3 04 09 eb 0f cb 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 43 41 89 5d 00 41 81 e6 fc ff 00 00 41 8d 46 [ 317.464503][T12854] RSP: 0018:ffffc9000b58ef60 EFLAGS: 00010246 [ 317.470617][T12854] RAX: 0000000000000000 RBX: 0000000008000300 RCX: dffffc0000000000 [ 317.478628][T12854] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 317.486645][T12854] RBP: 0000000000030000 R08: 0000000000000003 R09: 0000000000000004 [ 317.494659][T12854] R10: dffffc0000000000 R11: ffffffff8979aa80 R12: 0000000000000004 [ 317.502669][T12854] R13: 0000000000000000 R14: 000000000000000b R15: 0000000000000004 [ 317.510670][T12854] FS: 00007ff68662f6c0(0000) GS:ffff888125a29000(0000) knlGS:0000000000000000 [ 317.519625][T12854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.526234][T12854] CR2: 00007f1675b456b8 CR3: 0000000076440000 CR4: 00000000003526f0 [ 317.534229][T12854] Call Trace: [ 317.537533][T12854] [ 317.540489][T12854] ife_encode_meta_u32+0x126/0x1c0 [ 317.545630][T12854] ? __pfx_ife_encode_meta_u32+0x10/0x10 [ 317.551288][T12854] ? lock_acquire+0x221/0x330 [ 317.555990][T12854] tcf_ife_act+0x10fd/0x1d80 [ 317.560613][T12854] ? __pfx_tcf_ife_act+0x10/0x10 [ 317.565575][T12854] ? __kasan_slab_alloc+0x6c/0x80 [ 317.570620][T12854] ? kmem_cache_alloc_node_noprof+0x427/0x6f0 [ 317.576714][T12854] ? __alloc_skb+0x27d/0x7d0 [ 317.581333][T12854] ? alloc_skb_with_frags+0xca/0x890 [ 317.586665][T12854] ? sock_alloc_send_pskb+0x878/0x990 [ 317.592063][T12854] ? packet_sendmsg+0x33e5/0x50f0 [ 317.597113][T12854] ? __sock_sendmsg+0x21c/0x270 [ 317.601990][T12854] ? ____sys_sendmsg+0x4d7/0x810 [ 317.606944][T12854] ? ___sys_sendmsg+0x2a5/0x360 [ 317.611813][T12854] ? do_syscall_64+0xe2/0xf80 [ 317.616517][T12854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.622615][T12854] tcf_action_exec+0x185/0x8e0 [ 317.627412][T12854] tcf_classify+0x4cf/0x1130 [ 317.632030][T12854] multiq_enqueue+0x102/0x4d0 [ 317.636774][T12854] ? __pfx_multiq_enqueue+0x10/0x10 [ 317.642008][T12854] ? do_raw_spin_lock+0x12b/0x2f0 [ 317.647064][T12854] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.652465][T12854] dev_qdisc_enqueue+0x4e/0x240 [ 317.657347][T12854] ? __dev_queue_xmit+0x1916/0x32b0 [ 317.662573][T12854] __dev_queue_xmit+0x1933/0x32b0 [ 317.667628][T12854] ? __dev_queue_xmit+0x2a7/0x32b0 [ 317.672764][T12854] ? _copy_from_iter+0x21b/0x1670 [ 317.677824][T12854] ? __pfx___dev_queue_xmit+0x10/0x10 [ 317.683215][T12854] ? sock_alloc_send_pskb+0x896/0x990 [ 317.688610][T12854] ? packet_parse_headers+0x808/0xb50 [ 317.694012][T12854] ? packet_parse_headers+0x8b5/0xb50 [ 317.699423][T12854] ? skb_copy_datagram_from_iter+0x60c/0x710 [ 317.705436][T12854] ? packet_xmit+0x68/0x320 [ 317.709971][T12854] packet_sendmsg+0x3eb6/0x50f0 [ 317.714864][T12854] ? aa_sk_perm+0x15a/0x960 [ 317.719392][T12854] ? aa_sk_perm+0x82d/0x960 [ 317.723934][T12854] ? __pfx_packet_sendmsg+0x10/0x10 [ 317.729160][T12854] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 317.735607][T12854] ? aa_file_perm+0x12d/0x1630 [ 317.740414][T12854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 317.745381][T12854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.750689][T12854] ? __pfx_packet_sendmsg+0x10/0x10 [ 317.755918][T12854] __sock_sendmsg+0x21c/0x270 [ 317.760638][T12854] ____sys_sendmsg+0x4d7/0x810 [ 317.765430][T12854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.770743][T12854] ? import_iovec+0x73/0xa0 [ 317.775294][T12854] ___sys_sendmsg+0x2a5/0x360 [ 317.779993][T12854] ? __lock_acquire+0x6b5/0x2cf0 [ 317.784955][T12854] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.790190][T12854] ? __fget_files+0x2a/0x420 [ 317.794807][T12854] ? __fget_files+0x3a0/0x420 [ 317.799514][T12854] __x64_sys_sendmsg+0x1bd/0x2a0 [ 317.804491][T12854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.810085][T12854] ? __pfx_ksys_write+0x10/0x10 [ 317.814983][T12854] do_syscall_64+0xe2/0xf80 [ 317.819529][T12854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.825620][T12854] ? trace_irq_disable+0x37/0x100 [ 317.830676][T12854] ? clear_bhb_loop+0x60/0xb0 [ 317.835380][T12854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.841326][T12854] RIP: 0033:0x7ff68579acb9 [ 317.845784][T12854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.865417][T12854] RSP: 002b:00007ff68662f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.873856][T12854] RAX: ffffffffffffffda RBX: 00007ff685a15fa0 RCX: 00007ff68579acb9 [ 317.881949][T12854] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 317.889951][T12854] RBP: 00007ff68662f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.897949][T12854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.905947][T12854] R13: 00007ff685a16038 R14: 00007ff685a15fa0 R15: 00007ffcd7f12ed8 [ 317.913948][T12854] [ 317.916985][T12854] Modules linked in: [ 317.921044][T12854] ---[ end trace 0000000000000000 ]--- [ 317.926547][T12854] RIP: 0010:ife_tlv_meta_encode+0x46/0xb0 [ 317.932383][T12854] Code: 50 83 73 f6 45 8d 77 07 4d 8d 65 04 c1 e5 10 44 89 fb 83 c3 04 09 eb 0f cb 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 43 41 89 5d 00 41 81 e6 fc ff 00 00 41 8d 46 [ 317.952078][T12854] RSP: 0018:ffffc9000b58ef60 EFLAGS: 00010246 [ 317.958194][T12854] RAX: 0000000000000000 RBX: 0000000008000300 RCX: dffffc0000000000 [ 317.966275][T12854] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 317.974327][T12854] RBP: 0000000000030000 R08: 0000000000000003 R09: 0000000000000004 [ 317.982414][T12854] R10: dffffc0000000000 R11: ffffffff8979aa80 R12: 0000000000000004 [ 317.990526][T12854] R13: 0000000000000000 R14: 000000000000000b R15: 0000000000000004 [ 317.998599][T12854] FS: 00007ff68662f6c0(0000) GS:ffff888125a29000(0000) knlGS:0000000000000000 [ 318.007617][T12854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.014288][T12854] CR2: 00007f1675b456b8 CR3: 0000000076440000 CR4: 00000000003526f0 [ 318.022348][T12854] Kernel panic - not syncing: Fatal exception in interrupt [ 318.030199][T12854] Kernel Offset: disabled [ 318.034582][T12854] Rebooting in 86400 seconds..