last executing test programs: 27.513477392s ago: executing program 2 (id=6771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100008510000006", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x600) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1f, 0x4, 0x7, 0x0, 0x229c, 0x1, 0x800000000000004, 0x2}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x2}}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) splice(r0, 0x0, r1, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x45, 0xf7, 0x2, 0x4, @local, @mcast1, 0x8, 0x7, 0x3, 0xfffffffd}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', r5, 0x20, 0x7, 0x5, 0x1, {{0xd, 0x4, 0x2, 0x36, 0x34, 0x66, 0x0, 0x7, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0x3, 0x1a}, @timestamp={0x44, 0x4, 0x43, 0x0, 0x2}, @rr={0x7, 0x17, 0x8, [@dev={0xac, 0x14, 0x14, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @private=0xa010101]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c091033", 0x11, 0x4000, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 26.571628767s ago: executing program 4 (id=6773): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x290, 0x8, 0x7f02ae, 0x0, 0x200, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, 'veth1_to_team\x00', {0xff}, 0xa, 0x17}}, @common=@inet=@iprange={{0x68}, {@ipv4=@rand_addr=0x4, @ipv6=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@private=0xa010100}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2, [0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5, 0x800, 'syz0\x00', {0x600000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)}], 0x1, 0x3e42, 0x407ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x23, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x0, 0x6a98047402e98331, 0x70bd21, 0xff9f, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x82, &(0x7f0000000180)={r7, 0x8000}, 0x8) 26.532465836s ago: executing program 2 (id=6775): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 25.895813158s ago: executing program 3 (id=6779): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000ed03014000000000000000000000000a14000000f303"], 0x28}}, 0x0) 25.843963764s ago: executing program 3 (id=6781): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 25.800896513s ago: executing program 2 (id=6782): accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0xb6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) accept4$alg(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(r7) (async) close(r7) socket$inet(0x2, 0x2, 0x1) (async) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048894) r9 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r10, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1) write$cgroup_devices(r10, 0x0, 0xffdd) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x78d0) (async) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x78d0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002c00)={'batadv0\x00', 0x0}) sendmmsg(r0, &(0x7f0000004000)=[{{&(0x7f0000000000)=@can={0x1d, r11}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="55f0cd9bb7d7874ce79e3e632693c57ec3cddf957eb638d7cdc5f7cf57411eebe6eb2f8df544b8f99e476d11220f24a1e4dddbfbd0955aedec7b5ecfd9d8df7d0f642db1367ce0050543c1c5fe6f4475b96da79b0f76e2bb908ddd092d2fa5cd94d9bba98126aa0f0734eef11e2aaa8863c2893c2c1a31a47bac7b94c945b66ce87c99cdebc869a855a2eb301d197f00f52d27f9142ecee77b4e4a1e766dffbdabf778ad366b37c6ccd1f3b487f98c9bbe9ed1f3", 0xb4}, {&(0x7f00000001c0)="6986f8450d836c77cdfc0b757703ef42d610ecdd9e6f83ee78392b47482ff791bd01d2d03ccf07d6feea450ccbae965cd74cc50eeb99678709fd944a67e32299ab945058729d90affb0c955c013b5d6e557952f588d10aa40d9a01602e1ffeac010cc13e78ae3e954105d2417fa773e64470a5445094b0672ea39e583eedaf766ad5b80d8933b4b6bd5bfd224e7d7b8f76575bffd68ae1129f3436fce02ba77d37d91c1214a7cb3a6719d850b544", 0xae}], 0x2, &(0x7f00000002c0)}}, {{&(0x7f0000000300)=@phonet={0x23, 0x7, 0xa2, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="a16e7d000284c034396833ad402eb1c2bb9ee26ff120ab06951e74fb3651ba477d0122cb7d235688bc370557e66ad7be3cb4878edd651bf12d959fbe3002d42625f0d9d3e03e157b7003a79ca814208ba9b6bb2696666c2089e8246f6f6c378f3fdff4344744a74682eb2706ec411d21dd34c51c07d50109c796f4ca289b1935bd36838fc8e0c52888e28f17889ebeb1fc95296d7a001471747be8", 0x9b}], 0x1, &(0x7f00000044c0)=[{0xa0, 0x107, 0x7f, "17ea587a9f8f48371103928ff9ef6f0cf3b568e611566314ba8f38aa8891f9fce0b9361829f2933034c55631a54a08998d3696679002d2b4b7b3f365d5178038a76d49fe35f86dce6c7da47baa675241f8c9b4f9dfdeac03b190c86b0ae6908b4244efbc329c967104d7eeeeff1f031241122b5092de73f11bc375f6646dcc948db971f0be62e38c7704860eb03391"}, {0xb0, 0x118, 0x7f, "e59909e34cbf494693c55e62520b0a785bea900f3a485e099090ba58947f24ceec095751a601a370649a5f88530ec31cc293f265f95827c3983895cf139ffce2d4a6f4be4f8f8165e639eb290dc432f84ed90b360c4f07e585a93428ff856b438becf110e3ffd786951a8ed503c82e2e7fad182ba096ede942bfac5bf7ce6edadf5408da08737bbe667a5cbe4736543bcdfbe004978d8fb442ad85f3ce"}, {0x40, 0x104, 0x7ff, "68f031f1b264b4ff2614902e763dae4fd17678154152c11420efb8e6f15ff75898371d99b328fa9d23176fc43ff8014b"}, {0xc8, 0xff, 0x40, "60868ebe9f9998fa4e137681745fc8208ac80e17275925eaf6909aea3cb37a9ed49a52ff408da8f51563023c039a979e072e66cce0530d8e388f23f943e8898cba534c583b0471457af29e75c6a237f52bac1760aa1e8be6724b502a6a503f919b57754a56a27c61fdc5d48a5d0dbf843a0c5fdb02e0a4700eca4a0edda9f71b051052eae4251bd1b0ab76da34536e44bd24596dca370f73d5c6300353a7832e07649de02013d543dbe81c9ecfd39c17d8"}, {0x1c8, 0x0, 0x4, "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"}], 0x420}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, r12, 0x0, 0x4, 0x9, 0x7, "3326883f62fb07a8204aa7545349986fb1e60d58ff5b9fda84573bb288acbf69e76a09f408db07fc1ddbd8c3d3de1dacad7b8d53d207c82c295c7a6b1c679c", 0x9}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="4324c7b7382386087fc46a5b7b57dce4fc83e92e19e3e1c7", 0x18}, {&(0x7f0000001880)="cdcbd0ebd769b30e1892e95aa93ecf0589d56f112bbd2e50f8d331556c2c60e3d00f758ae9593fe4e303a2f30bbea34335079e4ac9266d1f62d1a6d439e2d81d34654d7d5a9b6a5158d6ecdb98abe9f7ee61302137970b8d2f7e1d534262b5b5bff651862e191fc7a205e74ff5dc37c102636f78c9213bef660d4cb96b49b475cf65aaea88cdd5e30cc1ea852892ea88b22cc18628c761f607f7a91cf619a690ffeb23862c9743aed4b61905702cd4cb9b7216becef57fd7", 0xb8}, {&(0x7f0000001940)="7662387dbadae23d31b0efe17adaa577e35d0841b052a7dcf880436df7d26dce93b2a98edc65d6e1577276bf9876b69a8fa9994603a3d4df8d86be5ca0a155f3fcd185919d5fb4342246addd4f56b2f37c0d1442d2a112755ee57285c5fa896b63fa9bb3ac3e608437b89e8753a8fb6e6fd9ea6cd5fe9031bdda", 0x7a}], 0x4}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="6f90e23a48bb8dbe397bb918642a7bcc74796d97f47c628eb262818721706394d850febe59c9557013f716597d1ff551596a119d2edfdf6fb7e59697a4625e51f4b6c86b9d99cf67b382399c4c3ee4c93f9597c6763a8635af6048b0122994185fac83bde4f771aa40ce2539a1f0536280da22dbbd8b1d63e9292efb8122a09bddce0e239c5d1a0fa37a480fda0b9449933bd8d0f29a794f5a433bf56fa14aa9996c9ca7c3803100fd19f43e2990541cfecc39b3a079804b606f178810b024425025b8b9113c26464247a8bde9c0144f68cedd7746fa525809b0", 0xda}, {&(0x7f0000001b00)="71cb04ca5e269c59d4007781d5f25ffebe98c8736db4c6cf67677c7f7a", 0x1d}, {&(0x7f0000001b40)="fc5ec481dbef1fea1c444a01fe05a5a264cea95934fa3eb59f9871babc65e731480b43d9c2313b63c46839f8657099190aca0cd2a7568794c8db812d42480e2daf74627eb94de2aca46ac8c9f6ca799a4656691098f9fd723ce3998e20a29c6ef2131dab17b2cb2cc4", 0x69}], 0x3, &(0x7f0000001c00)=[{0xb8, 0x10e, 0x1, "721e1518a9424b5b55b8be4496c5368fe1d10e124c7c08f1d10168719577149011870bd6e330df6aae1c27c4ff9348b1a8369c85021d302748b65927733c83f44fd4840759c75e0ffc36d2ac4a36a55d399fc3fface3a31eeb3e29b5956f25f1542b28faf43cc11e3bf564367688e588b85a832b0347ea2b53479555280d0b0f784435cc80baeecdc5cccd514a72024a199db1bfdaf33f1226e7038b075dc8de93f4caa9"}, {0x40, 0x0, 0xe, "ebd159f3eac2de1f980cbc9925c419571c94d34ed8234dac7d2b6a23846ec5a8865494e81900931fb595f1099b1e4e"}, {0xe8, 0x3, 0x4, "42b900fa1c14473906c6e9bf889619afa6488f526a4352a0d310ea93dd7dc207fd3b74852ca059a4d974ad109d01d6d3bec1b17ec93113a0953460b9664c3f7f2daa577389666a7bb6ed01f103942a0f28e3bcd2356265e139714b72871fbf41d946462f4727ed98b1ec89352d2558801ac4bc27e8d6129f9f0edec492637d488db246379e6e84d1f94689adcab260b67b53d3d3864783df9af5923eee95a9b3d3f97536c99aaf2df65520ea5017abb5eb921efc1f4a0bc722d60c45dc2c1681efd01b11ec12b01c88670fe5c96e0c621754"}, {0x40, 0x29, 0x80000001, "8f787db9eea74e4fa5239fdc2a29bc4de2325c4c23fc5095800ecfe6feed675fa0293c0a7967b72864"}, {0x98, 0x108, 0x1, "e25172b5d97a2e6b4ed22c994ac855136bb0c84ad0b4ecbadedbf76685d34a9bc617f5b36ee967d188e9108e564eb880622b7a47bffc8c3bdc8bc9cafe463df26a8ef001aa0806e9a9001f9c1b47f53bec9c9ea24f14066939767836d0c33260ee5fef72938342506f3020fa63b5395229d608a4f1c8e3a0077f743ca7f48ed099882a687dd932ee"}], 0x2b8}}, {{&(0x7f0000001ec0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001f40)="057b7289f8875700cefe28aaab63c9026b20f574e454ae92cadfc368f7", 0x1d}, {&(0x7f0000001f80)="a1b5011d6aad17ca0f4dae30ec11ed9e866daff6c5bd9b7f498ab6bbec82bf838d379b87f5fd2374cf0994f164a9f77b07bfe57d75ead4bb2b89bf20f5cd01796fbd6807cffe43118130c2e2b35998d12f1565cb4e2472a430924ee536c79013eb83b5df9ca4eb8ffe75c8fb1e103f4ca09fecd96733b5c7ab156803da716da7375c79e59a2b5ec570810020", 0x8c}, {&(0x7f0000002040)="fd51c4bcd188f6f365ab0548e40ecdd26889b6b6caee3eca3e07e1f5f0e71753cd54f5f9d8c16ed5748b90cb375cb7fe80ce21d13773fa03a79f3ab7925e1700c1e6c17c272239270c1290d2f98f1fef120e1d6b228ceca8ea0e385599a83ce166a4243bb4633fce8748f6ebc05b98edfe2f9178768ea9", 0x77}, {&(0x7f00000020c0)="a1f1620805e4111f05334aaa1cf34e697ed17f2a329a9b6938ce667118906e06900d9656e214fe7122e14e5aef725a3e69b9c1e8b9c9e1cc1e6b9a680808d1da76948643cbd947559bd3eaf7a01a55fe94e1de6b1a687e9b9d21c8e2a36ab570bf2b880f632cbaa263006ecd44f23b342214a52548cc8c2fd3fc39", 0x7b}, {&(0x7f0000002140)="4a47b9e44f02c7d9cd476099835f02e28729b48d5e2377dd5d774bb9ee596a48651a847f764f5c9fff01d37f0bdd5aee9389d795e1aac6f24b33d9c843748785cb27fa793309e4a00e0f25708ab8d6267def5f3644cd3aa3ca8be507b91a8cc8170ebc98d9e239200fae2964615d7988478c5d4d5b02e1b3599d74e86d14519ebdfadb", 0x83}, {&(0x7f0000002200)}], 0x6, &(0x7f0000004240)=[{0x1c0, 0x109, 0xf, "031085594dc7f9c21a44a41db7e657046d4b3d22dc7c9dd75289f1675ebdffd82c4aff1979e3acdad6b2ef415867136424b1bc3502c2924fef179ad3b19ddf8b8c8f587b1e57b93e970e6a29a2acc4cdef59b8efeb4a94e7857e22b43f267a170bcfe7b9f13debf66bf1b9c245c813794e1dc3d44c14517123d21fafd406d9d91d04b7bc480d72dd170813cb0f78f8696ab53de06f8b82b7b31cafc9e9ed0852d2b4f1ea1393eb20b33076294f30e090fe53a4768bd86b880a0ab5169c96ffef7f3e924437f48eb21ef08de91abea8364c9070b57dc8044b2d418baade633e92eec9a70d99765ad22a66024eee58f46020adc7f883994ba094520c7ad01321967f16923c0f57f1d54e629ee336eacec3cbb6cdfe52f9f883994a9146738e843bf2aeba153a07f49cfd1521ce0c2ddd9733f2ff8c972b2f4ddcd68126ef0cd1f2cd05dae6ec85033f0f60a124f22542728444166507660a7a0f884af055c83ff850c9df3dbda0e31653da3acb4dfc046b9341aeb5839076cd0d4aefde73ddb9e3325ccc78801b7204d4f6098b8e25ac8128c47594fd91b322e83e43af85c4e376d600"/431}, {0xb8, 0x111, 0x4, "b5a1a9c565f3539f27b88f29824e347256ae074f964ca9dbeac62a4ec513d5e50f4b972fcacabaadcc5f1f5431ffc8ed04d16b1acaee1bfb4151b7ae89e0e7235d5d4b40479e29c4fb73ff9fb457a8150eb1a43db4970f19a43a383744286ffd11b0ecc67a3821f901ed1574a300e79170a0778030a0645b8b5dd4a8742cee0089f42127bab106ff16ec29454dbcd1fa1fcd58dcd38c46e5de4bf82bfe89fb3318fe8ff2b7af"}], 0x278}}, {{&(0x7f0000002480)=@ax25={{0x3, @bcast}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002500)="ab94a6f9ab7d807f3823f27a19699a12ef83268160a2041d0f1df8f8fcbe774266e75ab094fa7396e9c4df001b7e44d339040c6a0d989dc54a8c4ea3b570a1af40483610faf8730cf89ccdf00346b5a37d4471d1ad8ebb4167be63f8fb65a1e2e117dac03160b5ee24c7f91cba861e5bbc9f548290d44a4e7f8a75cc0390cf5d51228408a7c3595f734762c320446c0c74a5a8fba24c42005dec0f5989c8684e182521ac61b7623413b173393ac61fa97f0c2d01d8791b6882de7804f716caee3e79f2bba800a914bbff789a3a3dacd09ec491038ff07d4be74425e91bfa38463c88ad", 0xe3}, {&(0x7f0000002600)="1fa45f3f63aeadef4e005185079fd114ff559705f419acfd7249ee9d9d326e74c69bbfbd66b95c130f262e3f7b2b78ce32c0a6b33bfd4a00238c4fdb7992721a644ae522974615c092c357b7597e82b3aa479cc29efd055dc6ce83a16d8e0d21fc55b1e1cd065ffe7d148d575049db09716b7563510bd173d1385b3160209a967bc4943a7355e30ef88d03944851e98091967f221b9e93465e89e3c7aa09992c6a493efec908113b855da608b23516993776b615ee0978c2ee327168f848235bdc6b82ab2182b038cfb7e565cefd9627e1b0fa2787", 0xd5}], 0x2}}, {{&(0x7f0000002740)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x80, &(0x7f0000002980)=[{&(0x7f00000027c0)="9be79cf79789ec183cee55fe03f01dff3eec3bf8cc9e75fad498c607330d56e987ae60c05ddb147b8aa600a0bf2a73f898ec858a4d74f27a8f01f8bdcc486e0febac6643503537e1e0457a4264f7780d6384351c1758ff5fdb215f70be1290486f1eca5f1450847a0671d3aa26adcfb029df43f451f4aa2d1e01762a0534f5ed7be428269ae228a83351fbc75c88a98e67de6b746c85c1bb82b2c1c39fb3", 0x9e}, {&(0x7f0000002880)="3270135a515f745e44dc4c5d167a5b5f23361cd719978eef31b7a237f2b5d68da17e78b3eac5a5dd18ac2e89a52f138305f24f2e666b76e23aa5d6de9d442ae6a41de8521bb1cfbf25005e4c160678f34341df67e119eec7cc57af178718fa104eaaf7d726d3073d353db256582b9e015e07e064a3fe91c13891a241034e0a0f987603601bb79b1c80f97e69", 0x8c}, {&(0x7f0000002940)="5cc1e926df065b21", 0x8}], 0x3, &(0x7f00000029c0)=[{0x68, 0x113, 0x7, "3bb26c6c4aa9f966e1036e8885e6a4ef20d3fc73e3d56bbfafdfbd334c9f30545d95880d3e1a34906372d0ac1dcbbaad14a20981a642e7a97c45d4a4428b40669ae347cb5170eaf0a0f4b25335403c36c1116823"}, {0xa8, 0x10f, 0x400, "f8d59c351425db28e999ad79d34830a51ea816cddcc790f6a5b33df95c2893e3a69d39fc7e3ed99e8ca497a393017df6c7781cf626f4b59ff51a92648ed7662166c19cd703d53b52a3317e9e3b882be0df1e4517110f80efe295289492d7873ef1c5e198d166841a61c516c31860e57c35ccdbb9724cd6e9cd0e408d0ad7c9cf9614678a095bec7fac86fa2c9248afd318011d6a1a172160"}, {0x90, 0x1, 0x7, "a5e88459b7132bc22ef9d8a4ad1d39f4df015b47a3b0be7f9e55247d7d2edc3810ebc9e2d85cddae1daa6e456ccfca586920d3454d42e64dfa7e0cdd2996c2902caf824601111d74ddc129ccd9b559147249c40f3c335fb0df5eba7891726da2f1ae9ea12ec2722b92e1ff803fc49858b1bd9485e3eeb93209cb"}, {0x98, 0x103, 0x6, "ee3dc556dc1d3d5079888dd4bc3a72a9440e937a1f7ccbb99c5f1f6fab6ef1ee513e49848170cf0343ebe221434e98c674efdc84beb00e4ee37c3f537c8af35d6d976a3df44bcaaeafa1d67fb51250739d77d03752b8429113d042dba9f365a0d57b18e092467f59052f3a0df6a12fe03a89c3d76c9f497a9aca84e7c0436a7864376693568cd1"}], 0x238}}, {{&(0x7f0000002c40)=@ll={0x11, 0x6, r13, 0x1, 0x2, 0x6, @random="dc5d80fd5d05"}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002cc0)="7c6b23dcabe8beb62072a688876675ea1a52afb464efa9bb6732bd30f1e339b82ffc0229be6fe679a6c5211568c581bdf2bd761d36cd3865445e68b1466a15d4840a61dda12f5fdf", 0x48}], 0x1, &(0x7f0000002d80)=[{0xa0, 0x8, 0xfffffffb, "316a829afa1fa97eb6146bd5a00daa5d9ae50246ce55bd08f05d7187930a37bce96e6da64ee6993b9b3cc17f57587474ef5e8989fd91f83ff30125562159528453134aa83750745e91563e0f7b335129122a1b67dae5babf87da485fd1d0e81b3fcb95ab44201de57a6bf1d7e5f9766a32ddbb4175a827755b79e9cafed252eb6846cd8e27e86459d4"}, {0x18, 0x0, 0x1, "42e9ebdd"}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000003e40)="c94fbe9a44133677533c0779a32b02269a99b6b17b203f8209ebb72ceae2e688e38c8216f993824e6c6e62366423e854967034449978ed6bbafcd6d3b94f5b9d321ec956d4d3ae44f250538711d10a789b671bcc4337efda8493a9ed24f96f52ad5670d070521b20fabb880fe0aa04947d23de54ee52622d04e564e2239615bfbd9be7c16b7230a28986906de242cf8fab51ad9a8bce76ad15604abc0814f0e9347f3262018e4d849d8d150fc15b4aeddd8c816f23a3d08b8f99455f9ecb6c910b031511115644e22c5757a1b09fb357614ffe19d3", 0xd5}], 0x2, &(0x7f0000003f80)=[{0x28, 0x115, 0x5, "28541320ae147a09b0c07fa6bd6f2e6eda597b74f034ec8b"}, {0x58, 0x11, 0x7, "47968a276ab3d4921eba885031dbedb169beda4c5ead78450b19c44b196c809f209403c4c72f65d83effad3bfee75a27ee73c884b9d979b8966ccbe8befd89d968e1add4548317c1"}], 0x80}}], 0x9, 0x4008040) socket$packet(0x11, 0x2, 0x300) (async) r14 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r14, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) 25.45389811s ago: executing program 0 (id=6784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x331}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg(r4, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="41f31a07472727233819222dc27bf762e63a31d09e51e299d5cdfcd1d30cefc7063f6938d6f1ec5d922797cda858e1abfada7c1fb8a88738bef654e09dff32524189dc3787244a7e0b7313f6fffc3233bd3670a1d5a2f1d105e4007a9e6f41d1fb7d8090d9d56aa5d0047f8395523fb653365d1a404cf7243469168fc769960dadb119570fac822b5593adfd002233cf1791270a7698ed249c55f37d7ba7f0080a3da62d566e66d4c0758998516557b7133e5b5058a09ad630a1c1beb0e72d346fe135", 0xc3}], 0x1, &(0x7f0000002ac0)=ANY=[@ANYBLOB="100000000000000004000000e29f000018e2f20000000000000104000000000095455b5736000000"], 0x28}}], 0x1, 0x20000040) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x8001, 0x43}, 0xffff, [0xde99, 0x8e9, 0xc, 0xbf2, 0x10, 0xfffffffffffffffb, 0x4000000000, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x6, 0x4, 0x6, 0x8, 0x0, 0x4]}) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, &(0x7f0000000080)) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0xe8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xffffffff}}}, {{@arp={@local, @multicast2, 0x0, 0xff000000, 0x10, 0x4, {@mac, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0xde35, 0x5, 0xd88, 0x9, 0x9, 'veth0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x242}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="16e4ec77bff1", @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) splice(r0, &(0x7f0000000040)=0xfffffffffffffffa, r1, 0x0, 0xb, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000030000000b000000000000111000000009000000100000090000000203000000010000000000000205000000000000"], &(0x7f0000000340)=""/173, 0x43, 0xad, 0x0, 0xb16, 0x10000, @value=r0}, 0x28) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) 25.376229524s ago: executing program 2 (id=6785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000fee000)=0x3fa, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x4) openat$cgroup_int(r4, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r5, 0x0, 0xffffffff000) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b60fae9d6dcd3292ead4c7bedd07ebc778d56527e659dc87ceb97be3739d0088d3e26de14887f9b21aa399fb863b50096097f6249fe90fd38116f43646f5a977b9175c91684f116755499ffa2e93835ad7bfab2535810cdfe7911601fee1cce20eedde58cf53ae7fa633b935ecb874bec5d32d883161fb2db2000000000000000000000000000000005bf8c02462b9b1d09113eb3904cc331fb14fff28041ba0831ac2ec53f7e6d0ff8ffc3adc7b3223ae064f80d18d77e0c34f0ec3eb043e287d921accef9800"/210, 0xd2) r6 = accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$inet(r7, 0x0, 0x0, 0x80800) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r7, @ANYRES32=r7, @ANYRES8=r4, @ANYRES64=r1, @ANYRES64=r9, @ANYRES8=r9, @ANYRESOCT=r8, @ANYRES64=r6], &(0x7f0000000200)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 25.375025052s ago: executing program 3 (id=6786): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, &(0x7f0000000100)=0xc) shutdown(0xffffffffffffffff, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000240)={0x1c, 0x4, 0x1ff, 0x2e964515, 0x3}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x10, 0x5e, 0xe25, 0x1}, 0x10}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x70, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x62, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x1, "5f164567aa7bbbc2a06797efa2decf9c3351c859df4ec623d0f6f2cf12ac14e82a22032acaffb51f56d93d0984be885d1c4b7bbad5f49f43b9fc6dcb1e7363c1dc4120623042"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x8000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 25.1995103s ago: executing program 1 (id=6787): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0xfc) 25.014023878s ago: executing program 1 (id=6788): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe084}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x809000, 0x1000, 0x0, 0x3}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x4, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffffeff, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtclass={0x8e0, 0x28, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xd}, {0xe, 0x8}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xb2, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x5c}}, @tclass_kind_options=@c_htb={{0x8}, {0x850, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x1000}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x2, 0x8, 0x2, 0x6, 0x1}, {0x66, 0x0, 0x4, 0x6, 0x1, 0x4}, 0xfff, 0x1, 0x9, 0x0, 0xad75}}, @TCA_HTB_RTAB={0x404, 0x4, [0x2318, 0x7f, 0x6, 0xf, 0x2, 0xd7, 0xffffffff, 0x9, 0xc00, 0x10000, 0x0, 0x6, 0x2, 0xf3c, 0x1, 0xe, 0xe, 0x6, 0x7f, 0x5, 0x1, 0x3, 0x2, 0x200, 0x200, 0x9, 0x5, 0x9, 0x154d1c9e, 0x7f, 0xda, 0xfffffffe, 0xfffffff9, 0x3, 0x6, 0x80000000, 0x9, 0x8000, 0xd1e, 0x5, 0x10000, 0x5, 0x4, 0x5, 0xfffffffc, 0x401, 0x200, 0x10000, 0x3, 0xcb, 0x457, 0x3, 0x10001, 0x3, 0x4, 0xf, 0x80000000, 0x57b0ca03, 0x364f, 0x0, 0x8, 0x80, 0x1, 0x8, 0x0, 0xbd14, 0xfffffffb, 0x6, 0x7f, 0xba6b, 0x800, 0xc, 0x0, 0x5b5, 0x800, 0x300000, 0x7, 0xffff, 0xfffff801, 0xfffffffd, 0x5, 0x1, 0x1, 0x2, 0x227, 0xf0000000, 0x7fffffff, 0x8, 0x2, 0x1, 0x0, 0x7, 0x1, 0x54, 0x7, 0x0, 0xf, 0x8da4, 0x0, 0x5, 0x5, 0xa, 0x10000, 0x1, 0x6, 0x7f, 0x1, 0x3, 0x5, 0x5, 0xffff, 0x1, 0x9, 0x233d, 0x5, 0x177, 0xff, 0x9, 0x1, 0x7fff, 0xfffffffd, 0x8000, 0x8, 0xffffffff, 0x81, 0x4ced, 0x1, 0x2, 0x7, 0x5, 0x27, 0x4, 0x6, 0xb3, 0xfffffffa, 0x401, 0xc5f5, 0x577, 0x8, 0x656c, 0xbff, 0x9, 0x8032d4d, 0x6, 0x9, 0xe3, 0x5, 0x7fffffff, 0xc9, 0x400, 0x0, 0x1, 0x6, 0x61672fd3, 0x5, 0x1, 0xd, 0x9, 0x101, 0xe, 0x0, 0x5, 0xcf65, 0x0, 0x0, 0xfffffffb, 0x2, 0x0, 0x7, 0x8, 0x6, 0x0, 0x6, 0x8, 0x67d, 0x3, 0x8, 0x0, 0x2, 0xb28, 0xfffffff5, 0x6, 0xffffff8b, 0x6, 0x8, 0x80, 0x3, 0x400, 0x0, 0x8, 0xfff, 0x3f9, 0x0, 0x1, 0x80000001, 0x5, 0x6, 0x7, 0x6, 0x5, 0xffffffff, 0x8, 0xe4f6, 0x8, 0x80000000, 0x6, 0x7, 0x10000, 0x2cd, 0xc, 0x800, 0x0, 0x1a96333f, 0xa, 0x8000, 0x3ff, 0xc11, 0x1, 0x3, 0x9, 0x3, 0x9, 0x1, 0x5, 0x4, 0x4, 0x7ff, 0x58d5, 0x401, 0x4, 0x6, 0x3, 0x36c, 0xfffffffa, 0x1, 0x5b97, 0x3, 0xe2b1, 0x7, 0x74, 0x1, 0xfffffffe, 0x4, 0x1eb, 0x8, 0x8, 0x100, 0x0, 0x4, 0x80000000, 0x6, 0xd, 0x80000000, 0x1, 0x5, 0xe4c]}, @TCA_HTB_RTAB={0x404, 0x4, [0x100, 0x9657, 0x1, 0xffffb907, 0x3, 0x7, 0x7, 0x1, 0xfff, 0x2c7, 0xa40, 0x800, 0x9, 0x6, 0x8, 0x5, 0x400, 0x3, 0x191f6e82, 0x6, 0x2, 0x7fffffff, 0x6, 0x4, 0xfffffeff, 0x400, 0x58e9, 0x6, 0x80, 0x0, 0x8, 0xa, 0x1ff, 0x0, 0x4, 0xd0af, 0x9, 0x8000, 0x1ff, 0x4, 0x2, 0x7, 0x2, 0x1, 0x0, 0x7, 0x8, 0xf0c, 0x9, 0xffff, 0x4ba, 0x2, 0x400, 0x4, 0xe1, 0x67, 0x0, 0x1, 0x5, 0x2, 0xac7b, 0xe, 0x57, 0x4, 0xffff, 0x5, 0x70c, 0x3, 0x800, 0x400, 0x6, 0x10, 0x7, 0x9, 0x2, 0x4, 0x80000001, 0x4, 0xf557, 0x3, 0x3e2, 0x8, 0x5, 0x4, 0xe, 0x7, 0x80000000, 0x5, 0x0, 0x5, 0x7, 0x9, 0xcc, 0x6, 0x6, 0x7, 0x0, 0x0, 0x3, 0xfffffffd, 0x1, 0x5, 0x8, 0x1000, 0x9, 0x3c4e7eb9, 0x0, 0xffff, 0x9, 0x5, 0x100, 0xfffffffb, 0x81, 0x101, 0x0, 0x8, 0x1, 0x4, 0x63f, 0x9, 0x9, 0x81, 0x3, 0x10, 0x5, 0x2, 0x55cd, 0xffff0001, 0x9, 0x2, 0xfffffff4, 0x9, 0x6, 0x22a0, 0x4, 0x3cc, 0x0, 0xd, 0x6, 0x8, 0xffffffd4, 0x3ff, 0x7, 0x81, 0x4, 0x62e2393b, 0x4, 0x2, 0x2, 0x2, 0x58, 0xffffff0f, 0x8000, 0x0, 0xc, 0x8001, 0x9, 0x81, 0x2, 0x2, 0x401, 0x9, 0x4000000, 0x0, 0x5c0, 0x8d1, 0x0, 0x0, 0x9, 0x81, 0x5, 0xc, 0x4, 0x4, 0x3, 0x0, 0x41d8, 0x6, 0x3ff, 0x8, 0xc00e, 0xffff, 0x2, 0x6, 0xe3, 0xfff, 0x2, 0x5, 0xdb, 0x2, 0x2, 0x5, 0x6, 0xc, 0x80000000, 0x10000, 0x8, 0x4, 0x1, 0xff, 0x0, 0x2, 0x6, 0x8, 0x0, 0x8000, 0x400, 0x5, 0x7, 0x6, 0x4, 0x9, 0x6, 0xff, 0x9, 0x9, 0x200, 0x3ff, 0x3, 0x4, 0x3, 0x0, 0x7f9, 0x1, 0x3ff, 0xffffffff, 0x3, 0x9, 0xa322, 0x3, 0x8, 0x9, 0x400, 0x3, 0x4, 0x800, 0x7, 0xcb79, 0x40, 0x7, 0x7, 0x7, 0x1, 0x800, 0x0, 0x0, 0x3, 0x7, 0x5, 0xfffffeda, 0x6, 0x7, 0x54e9bbe8, 0x0, 0x401, 0x8]}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x81}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x120}, @TCA_QFQ_LMAX={0x8, 0x2, 0x79}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x807}]}}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x3, 0xc3}}]}, 0x8e0}}, 0x4008000) 24.937615991s ago: executing program 3 (id=6789): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e23, 0x0, 'fo\x00', 0x20, 0x6d64, 0x6b}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x38}, 0x94) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x7, 0xb2, [@local]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) 24.907900154s ago: executing program 4 (id=6790): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x3ffff}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x484e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@esp={{0x30}, {[0x4d6, 0x4d6]}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x400) 24.334019813s ago: executing program 3 (id=6791): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)=0x28) 24.33376022s ago: executing program 0 (id=6792): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 24.292012433s ago: executing program 4 (id=6793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r0, r0, 0x2f, 0x2c, 0x4}, 0x20) 24.208430248s ago: executing program 2 (id=6794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$sock(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="e77bfe", 0x3}], 0x2}, 0x20000091) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02ffffffffff"}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x1070bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x12000, 0x14800}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_virt_wifi\x00'}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 24.067704891s ago: executing program 3 (id=6795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0)='pimreg0\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}, 0x1, 0x0, 0x6000000}, 0x8000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 23.978046938s ago: executing program 4 (id=6796): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b1000000070000000000000099f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d0000000400000006000000ff0000004200000083467f2a253ce6e82a676ea5b9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r2}, 0x38) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fcffffff7000ffdbdf250400000014000500fe8000000000000000000000000000aa14000500fe8800000000000000000000000001010800040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32, @ANYBLOB="1400350064752c7f23c2399aae61ad6d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x4048006) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=@deltclass={0x2c, 0x29, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x6, 0x5}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x2c}}, 0x0) (async, rerun: 64) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x4acdc0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000001c0)=0x1) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r11 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r11) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000e80)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r12, @ANYBLOB="080026bd7000fcdbdf253e7464657673696d0000000f0002006e657464657673696d30000060008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000995b8c9d7d40668c2051666372a7b0548ff9baea017c0ebfde77eb2f68a7c263933e0abe3a692666c6f5745e70cb005c69b6ce1648dc34ce5eed75fab51aaef3b0160a9709d5a66ad75ccca6f52a25f0f55050f6ba36ffc819b2d397cdfa7ecc56c60fe6e5bf6d28d35b65e660b3c993e27daa3fd9bc00647c3b3fa8298f6fa8912915156da82b8fa205e2b84e0ff8dc13d3a9731ac1cd9bfec414f6d085c36e2e90a95ae207c517688b304b37325bb998a7b"], 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) 23.26483188s ago: executing program 1 (id=6797): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0xff00, &(0x7f0000000100)={0xa, 0x4e23, 0xf8030000, @loopback}, 0x1c) 23.096763408s ago: executing program 0 (id=6798): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44048}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000f0003dd3fdb0321f84cbe72e5ab3511cfa018899703839b64d7ee06884e2caab5ef8c381000000244bf53b7c6514b4521d3ad537001b4f34aaa8b8943dcf08c48f4cab3995336399a7791f1129214bf64704e70a3d28a9e2a29913df", @ANYRES16=0x0, @ANYBLOB="20040c000000fedbdf256d0000000c0099000000000063000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x450, 0x2b0, 0x1d8, 0xffffffff, 0x1d8, 0x1d8, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, &(0x7f0000000080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @local, 0xffffff00, 0xff, 'nr0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x8}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @broadcast, @private=0xa010101, @icmp_id=0x65, @gre_key=0x3}}}}, {{@ip={@rand_addr=0x64010102, @empty, 0xffffffff, 0xffffffff, 'ip6gretap0\x00', 'veth1\x00', {0xff}, {}, 0x16, 0x2, 0x20}, 0x0, 0xd0, 0x108, 0x11e, {}, [@common=@addrtype={{0x30}, {0x400, 0x43a, 0x1, 0x1}}, @common=@ah={{0x30}, {[0x0, 0x7]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xb, @loopback, @empty, @gre_key=0x6, @gre_key=0x3}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010102, 0xff, 0xffffff00, 'caif0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x48}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xfffffff0, 0x5, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @local, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x6, 0x0, 0x4, 0x0, 0x4], 0x0, 0xc}}}, @common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @loopback, @remote, @port=0x4e22, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 23.082877584s ago: executing program 4 (id=6799): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) (async) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x19}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) 23.082313986s ago: executing program 1 (id=6800): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (fail_nth: 69) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec072, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 22.729753484s ago: executing program 0 (id=6801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000030300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 22.728939834s ago: executing program 4 (id=6802): r0 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$inet6(0xa, 0xa, 0x800003d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r5 = socket$kcm(0x29, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x3, 0x4}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)="3046ddb77b8bed1fc729628328d160be8f5832f950dd72af8af2aa3a9824ced622272bcad5dfd7edbafa394bebc0e21ad11c50ffa05f1a6e4cdcd32ff2e832a91cb23828c35698", 0x47}, {&(0x7f0000000400)="888a077c372bbc3b29489293f773792d9c337a9f5cae140514a88096b2fa8602440c56ff6e1312b17bf56680130521778dbc68ce60dcf01e26c86579f50d168333a4e461b0061cce1b48e66223514cb977e2a6be35e80832f583c85d27bc804b7136de439d7f99645681a5259d9db01067ffc3a6a0eb768a390cb0cdf54941b822ac5e5685b2f4e3f0acb40a91ddeb91290e4e386ec51a70697d6102b230ca84e7a23a0ff8c5d268e0336dc985020c818f54ac34e0a182ea7e86d55e2d7aced7da4210f6d1a59f7ab73e", 0xca}, {&(0x7f0000000500)="160729f737b444fe2288acaddf2a646471a547c3c6f14e3cdd6b5627f7328c52ad80e199072f029ca7fdf9e5fb91df52fed4afbaecd8c782b663", 0x3a}, {&(0x7f0000000600)="4f01afd12bea0b44b3e9627ade771504c76fbf455094712a867d684ff3069e2d5ac7df941669bc871f66241561032f5589d9edf3c252249313ad44f62b61a61fac172289003d0acd199d78", 0x4b}], 0x4, &(0x7f00000006c0)=[{0x60, 0x109, 0x200, "1c30d3942cb5d3a61dc8ddddcd67118f09b288d7ffcca70fa9e3a64fb31a85e627ad87ab0d44dbc01cc99b949c2e99818673be3ef4302f6a635f4a59679ebdac457c72fd114afcd1fd6738"}, {0x98, 0x119, 0x6, "285f3bb2cc2f235f393e550b1b1254b4c5810898b11967d6dd62ac042cefadb3ff97017da76874b6de1a5833b88adade650fdb1c35d849273c31fa2220730449a747543525e45a821f727596ac6aec3a8e88719c460e5d80a8e3070eb2fc41e91bd73c2176fb8d6e331513a7f1d2107065e1391f4937fbcf0a4f55538b771fd1730d31"}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="480280f532b103d0b4a4483acf9681167b455661a9638a69764475295389c8124950c83444649a696a4ce44a0457eefb3223fa3135e83dac4b86a0a3cb21ea24667fa31b6403cd654cba14cb5a340b1be8e5c318ccae7373bdd1cd334dcf3980904988a341d987db9353bbb019c13b0e5cf2954eaf6781daa7238d7db2aacd47463883cb09749a284dfdd963dc962223dfdf4182a54c6064937752d9693b143533e75ef910e05a68", 0xa8}, {&(0x7f0000000880)="683991820416881e4d29f4573f68c20be7b9bfeb614b2abff4885438b770cc5741a673af2f5353161896e87210edb5eb6b1de9a0909eb5adae2cb480be97125329a0f3c522771435309e80f09bca46aac491fbc2c0598b32bee29e1603005fde357b2857e4aae4a97eee18ac95b007a21de98a835adefefbba9249afd96a2616a1145ecd7cfbaccba6ac596861d9299235df768275789b73ed38d31597742b1ab70d87a90a8a8b95041f9358573f3aadd61d7fc71ec92ddcee7a72ce208be05ace70579c521d0853c2f519afdc4c642a776b99540259782369e2db1d5480c5", 0xdf}, {&(0x7f0000000980)="8011ded750ea0ba309404237f7e07fb28fb0a709078dc82db3903c25af41ee6e066aadb7ba5a1c3705118ad26d8829c2a12f3fb15b05904b3b3e54106629437d22c285657ecfdd0d0b7c97f32298866406adee855e6e296c4aadf4", 0x5b}, {&(0x7f0000000a00)="05d3f4c7023ca3e19c5ce0b317bf15b9bb9d56d2e07baacdc00b7de60076e77b820db837f3ba7caba5c32b455d583685c390fe48ca5a4091146a29a634064c4db17b69326661edb0f8fc7b6486168c9d122f8391e38fa39e9db71dbf499bf873ca31ae81d1cb", 0x66}], 0x4}}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x30e, 0xff, 0x1, 0xfa, 0xb8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b40)="a3e63d97269082192931af2fce5a94872553aa5851208769db2168b78c46a4785e7b6b4f0f706f8dfc4bc23bb3bdab998dcd1f5976a0264e0ef3e28ebda786faf73f5e9cf6bee0a5dd8e1da1ebfeaf8c3246a9b4f8cc15e6789ee3dced4b6a09bee94ad851a834ca95cc86741c87298ccec6e01475cdaf406b6b60d041e72afbea9b9cf17db648bd409f7ef24d205ae96999f8f6b463bd4ec282ce3542f81a831d7a7033fafce3b629af782b37402d9b1d715927fddd3994eaf2b76b9b1bfad11b0e9bddac7c3afc9869b53d05f4a509f8c5d43c1da7b8899046bc05c5f36fdb5cfe8a0989", 0xe5}, {&(0x7f0000000c40)="82a85f40d25ea7d9d6b6896fe062b813159da55d08f0f9744160da21cf01dd476a7ba11e0c25b566916e8de9f18ff15c43bb668fa650cf0d239941e22c66b7fb94f6d8753e35502e", 0x48}, {&(0x7f0000000cc0)="8be268c7aec7aa22e0ba7bdc74c66abb9acc44c0b12e68c153e659faa4024a0253b5a69b2d0a0805883a3f00090455af8c8f152196ab64093f5cff294259a8f5ede292ea6cc1754c3804cc2f33945b8e0dc7060ad5f0ad5aced6ab95e1b644b7d4f68f401b2ac9c840947d5f0b446e2a4431f3b7ceb5ebc64c57047e8001ec", 0x7f}, {&(0x7f0000000d40)="7694d6d9c235dc32e42fb2f98c9ac572abd1521a51f88b60621e3775fcabf7be6094fa1152255293d7d520b3c585dfba03a72f700bc9c9bdfce62a5707a34e", 0x3f}, {&(0x7f0000000d80)="657e076bef3e1b28011a67caf4988797bf60624f20c73a565a61f158d69d3387f3d3078dd0a19d0945092f0c4407b0d88d54b786973e27229bd84a834eeb7489802559a0df386d275c3a83bc35ae4676c2363c278f7e51be409455f00d9ea88925b23816198c503f9e8b40e228e338bfc45eba37d3e2cfc7265daeae00ac177f", 0x80}, {&(0x7f0000000e00)="1c9585007788bdc5f8055e511fe6b884b100f6af", 0x14}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="aeee5418c8", 0x5}, {&(0x7f0000000ec0)="765da58c2114e1ae93d7341ea9476ab33e43099252ee22", 0x17}], 0x9}}], 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) recvmmsg(r4, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/182, 0xb6}, {&(0x7f00000038c0)=""/24, 0x18}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4, &(0x7f0000003a00)=""/128, 0x80}, 0x583}, {{&(0x7f0000003a80)=@tipc, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b00)=""/243, 0xf3}], 0x1, &(0x7f0000003c40)=""/203, 0xcb}, 0x772}, {{&(0x7f0000003d40)=@nl, 0x80, &(0x7f0000004040)=[{&(0x7f0000003dc0)=""/123, 0x7b}, {&(0x7f0000003e40)=""/44, 0x2c}, {&(0x7f0000003e80)=""/78, 0x4e}, {&(0x7f0000003f00)=""/111, 0x6f}, {&(0x7f0000003f80)=""/129, 0x81}], 0x5}, 0x60}, {{&(0x7f00000040c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004140)=""/38, 0x26}, {&(0x7f0000001080)=""/170, 0xaa}, {&(0x7f0000004240)=""/76, 0x4c}, {&(0x7f00000042c0)=""/2, 0x2}, {&(0x7f0000004300)=""/56, 0x38}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x6}, 0x23}, {{&(0x7f00000053c0)=@un=@abs, 0x80, &(0x7f0000006900)=[{&(0x7f0000005440)=""/2, 0x2}, {&(0x7f0000005480)=""/152, 0x98}, {&(0x7f0000005540)=""/147, 0x93}, {&(0x7f0000005600)=""/88, 0x58}, {&(0x7f0000005680)=""/104, 0x68}, {&(0x7f0000005700)=""/247, 0xf7}, {&(0x7f0000005800)=""/4096, 0x1000}, {&(0x7f0000006800)=""/228, 0xe4}], 0x8}, 0x40}], 0x5, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f00000027c0)={&(0x7f0000001740)={0xa, 0x4e24, 0xfffffffa, @mcast1}, 0x1c, 0x0}, 0x10040800) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="70000006ffffffffffffaaaaaaabaabb080600010800060400bd000000aaaa4064010100000000000000ac1414bb"], 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10020) 22.728494157s ago: executing program 2 (id=6803): r0 = socket$inet6(0xa, 0x2, 0x937) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e8030000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="fc0102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000eb000500030006000000040004000800060041", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffff00000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040001feffff08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES8=r1, @ANYBLOB="800002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r2, @ANYBLOB="b400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000f00000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB], 0x3e8}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000004) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x586) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0), 0x0, 0x24044884) 22.535540099s ago: executing program 1 (id=6804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000240)={0x6, 'pim6reg1\x00', {}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="6516402119560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xffffff69, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) 22.294997994s ago: executing program 0 (id=6805): socket(0x2a, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x1e0, 0x290, 0xffffffff, 0x1e0, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7411051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2a, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 21.913654132s ago: executing program 0 (id=6806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="9200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000e403000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xffffff81, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="42f71500000009000000930820001f1f00000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYBLOB="04000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060040000000000088020000183200000400000000000000000200e309790100d232bd7f85200000010000008762f4ff0800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x400, 0x98, &(0x7f0000000980)=""/152, 0x40f00, 0x5, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r0, r0, r0, r8, r9], &(0x7f0000000bc0)=[{0x5, 0x3, 0x0, 0xa879c93d7c6e4f98}, {0x1, 0x4, 0xb, 0x6}, {0x1, 0x3, 0x7, 0xe06a2c312c83f145}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000540)=0xfff) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xfffffffffffffff9) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x9, 0x4e20, 0x7, 0x2, 0x80, 0x80, 0x2b, r12, r13}, {0x9, 0x58e000, 0x2, 0x4, 0x3, 0x1, 0x7a8, 0x892}, {0x1, 0x8, 0x5, 0x6}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0x2, 0xc, 0x7, 0xffffffff}}, 0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 21.885028044s ago: executing program 1 (id=6807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) accept$unix(r2, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x3, 0x0, &(0x7f0000000000)="c9f7b9", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc8, '\x00', r3, r5, 0x3, 0x3, 0x1}, 0x50) 0s ago: executing program 32 (id=6806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="9200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000e403000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000370400000000000000000000d5d0", @ANYRES32=r7, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390423bd700000000000000003e4", @ANYRES32=r7, @ANYBLOB="00000000000000001800128008000100736974000c00028006000f0041"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xffffff81, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="42f71500000009000000930820001f1f00000000", @ANYRES32=r0, @ANYBLOB="0500"/20, @ANYRES32=r7, @ANYBLOB="04000000010000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000060040000000000088020000183200000400000000000000000200e309790100d232bd7f85200000010000008762f4ff0800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x400, 0x98, &(0x7f0000000980)=""/152, 0x40f00, 0x5, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[r0, r0, r0, r8, r9], &(0x7f0000000bc0)=[{0x5, 0x3, 0x0, 0xa879c93d7c6e4f98}, {0x1, 0x4, 0xb, 0x6}, {0x1, 0x3, 0x7, 0xe06a2c312c83f145}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0xd}, 0x94) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000540)=0xfff) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x5) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xfffffffffffffff9) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x9, 0x4e20, 0x7, 0x2, 0x80, 0x80, 0x2b, r12, r13}, {0x9, 0x58e000, 0x2, 0x4, 0x3, 0x1, 0x7a8, 0x892}, {0x1, 0x8, 0x5, 0x6}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x1, 0x2, 0xc, 0x7, 0xffffffff}}, 0xe8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) kernel console output (not intermixed with test programs): oved [ 754.737823][T12836] tipc: Node number set to 2886997007 [ 754.934854][T25814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6049'. [ 755.096211][T25178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.272292][T25178] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.372374][T17747] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.379588][T17747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.467960][T17748] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.475269][T17748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.544487][T17746] IPVS: stop unused estimator thread 0... [ 756.167447][T25857] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 756.557833][T25873] netlink: 'syz.0.6065': attribute type 15 has an invalid length. [ 756.887895][T25178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.948258][T25890] bond13: option ad_select: invalid value (34) [ 756.956526][T25890] bond13 (unregistering): Released all slaves [ 757.014331][T25884] lo speed is unknown, defaulting to 1000 [ 757.038113][T25884] lo speed is unknown, defaulting to 1000 [ 757.104618][T25178] veth0_vlan: entered promiscuous mode [ 757.152817][T25178] veth1_vlan: entered promiscuous mode [ 757.307879][T25178] veth0_macvtap: entered promiscuous mode [ 757.355928][T25178] veth1_macvtap: entered promiscuous mode [ 757.368935][T25911] FAULT_INJECTION: forcing a failure. [ 757.368935][T25911] name failslab, interval 1, probability 0, space 0, times 0 [ 757.399201][T25911] CPU: 0 UID: 0 PID: 25911 Comm: syz.4.6078 Not tainted syzkaller #0 PREEMPT(full) [ 757.399224][T25911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.399234][T25911] Call Trace: [ 757.399241][T25911] [ 757.399248][T25911] dump_stack_lvl+0xe8/0x150 [ 757.399274][T25911] should_fail_ex+0x412/0x560 [ 757.399297][T25911] should_failslab+0xa8/0x100 [ 757.399315][T25911] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 757.399338][T25911] ? __get_vm_area_node+0x13f/0x300 [ 757.399361][T25911] __get_vm_area_node+0x13f/0x300 [ 757.399383][T25911] __vmalloc_node_range_noprof+0x36a/0x1750 [ 757.399406][T25911] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.399427][T25911] ? __lock_acquire+0x6b5/0x2cf0 [ 757.399469][T25911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 757.399491][T25911] ? __lock_acquire+0x6b5/0x2cf0 [ 757.399512][T25911] ? _parse_integer_limit+0x1ae/0x1f0 [ 757.399541][T25911] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.399555][T25911] __vmalloc_noprof+0xd2/0x120 [ 757.399575][T25911] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.399594][T25911] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.399615][T25911] bpf_prog_alloc+0x3c/0x1a0 [ 757.399634][T25911] bpf_prog_load+0x779/0x1a10 [ 757.399664][T25911] ? __pfx_bpf_prog_load+0x10/0x10 [ 757.399679][T25911] ? __might_fault+0xaf/0x130 [ 757.399712][T25911] ? bpf_lsm_bpf+0x9/0x20 [ 757.399728][T25911] ? security_bpf+0x7e/0x2d0 [ 757.399751][T25911] __sys_bpf+0x618/0x950 [ 757.399776][T25911] ? __pfx___sys_bpf+0x10/0x10 [ 757.399814][T25911] ? ksys_write+0x242/0x270 [ 757.399838][T25911] ? __pfx_ksys_write+0x10/0x10 [ 757.399870][T25911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.399888][T25911] __x64_sys_bpf+0x7c/0x90 [ 757.399910][T25911] do_syscall_64+0x174/0x580 [ 757.399928][T25911] ? trace_irq_disable+0x3b/0x140 [ 757.399951][T25911] ? clear_bhb_loop+0x40/0x90 [ 757.399970][T25911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.399986][T25911] RIP: 0033:0x7fdc8d99ce59 [ 757.400003][T25911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.400016][T25911] RSP: 002b:00007fdc8e893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.400034][T25911] RAX: ffffffffffffffda RBX: 00007fdc8dc15fa0 RCX: 00007fdc8d99ce59 [ 757.400046][T25911] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 757.400056][T25911] RBP: 00007fdc8e893090 R08: 0000000000000000 R09: 0000000000000000 [ 757.400066][T25911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.400075][T25911] R13: 00007fdc8dc16038 R14: 00007fdc8dc15fa0 R15: 00007ffeef36faf8 [ 757.400103][T25911] [ 757.668854][T25178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.682290][T25178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.718444][T25911] syz.4.6078: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 757.770221][T25911] CPU: 1 UID: 0 PID: 25911 Comm: syz.4.6078 Not tainted syzkaller #0 PREEMPT(full) [ 757.770247][T25911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 757.770257][T25911] Call Trace: [ 757.770265][T25911] [ 757.770273][T25911] dump_stack_lvl+0xe8/0x150 [ 757.770299][T25911] warn_alloc+0x249/0x340 [ 757.770327][T25911] ? __pfx_warn_alloc+0x10/0x10 [ 757.770350][T25911] ? __get_vm_area_node+0x13f/0x300 [ 757.770384][T25911] ? __get_vm_area_node+0x2b5/0x300 [ 757.770411][T25911] __vmalloc_node_range_noprof+0x38f/0x1750 [ 757.770436][T25911] ? __lock_acquire+0x6b5/0x2cf0 [ 757.770477][T25911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 757.770499][T25911] ? __lock_acquire+0x6b5/0x2cf0 [ 757.770519][T25911] ? _parse_integer_limit+0x1ae/0x1f0 [ 757.770548][T25911] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.770564][T25911] __vmalloc_noprof+0xd2/0x120 [ 757.770585][T25911] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.770604][T25911] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 757.770625][T25911] bpf_prog_alloc+0x3c/0x1a0 [ 757.770643][T25911] bpf_prog_load+0x779/0x1a10 [ 757.770671][T25911] ? __pfx_bpf_prog_load+0x10/0x10 [ 757.770688][T25911] ? __might_fault+0xaf/0x130 [ 757.770723][T25911] ? bpf_lsm_bpf+0x9/0x20 [ 757.770738][T25911] ? security_bpf+0x7e/0x2d0 [ 757.770762][T25911] __sys_bpf+0x618/0x950 [ 757.770787][T25911] ? __pfx___sys_bpf+0x10/0x10 [ 757.770824][T25911] ? ksys_write+0x242/0x270 [ 757.770848][T25911] ? __pfx_ksys_write+0x10/0x10 [ 757.770871][T25911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.770890][T25911] __x64_sys_bpf+0x7c/0x90 [ 757.770912][T25911] do_syscall_64+0x174/0x580 [ 757.770931][T25911] ? trace_irq_disable+0x3b/0x140 [ 757.770953][T25911] ? clear_bhb_loop+0x40/0x90 [ 757.770972][T25911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.770989][T25911] RIP: 0033:0x7fdc8d99ce59 [ 757.771005][T25911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.771018][T25911] RSP: 002b:00007fdc8e893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.771036][T25911] RAX: ffffffffffffffda RBX: 00007fdc8dc15fa0 RCX: 00007fdc8d99ce59 [ 757.771048][T25911] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 757.771058][T25911] RBP: 00007fdc8e893090 R08: 0000000000000000 R09: 0000000000000000 [ 757.771068][T25911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.771077][T25911] R13: 00007fdc8dc16038 R14: 00007fdc8dc15fa0 R15: 00007ffeef36faf8 [ 757.771105][T25911] [ 757.771124][T25911] Mem-Info: [ 758.070958][T25911] active_anon:6129 inactive_anon:5 isolated_anon:0 [ 758.070958][T25911] active_file:3144 inactive_file:40704 isolated_file:0 [ 758.070958][T25911] unevictable:768 dirty:178 writeback:0 [ 758.070958][T25911] slab_reclaimable:12301 slab_unreclaimable:165472 [ 758.070958][T25911] mapped:33004 shmem:1296 pagetables:1394 [ 758.070958][T25911] sec_pagetables:0 bounce:0 [ 758.070958][T25911] kernel_misc_reclaimable:0 [ 758.070958][T25911] free:1232280 free_pcp:24234 free_cma:0 [ 758.107304][T25916] xt_NFQUEUE: number of total queues is 0 [ 758.151816][T17748] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.162975][T17741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.182438][T25911] Node 0 active_anon:24516kB inactive_anon:20kB active_file:12576kB inactive_file:162620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115632kB dirty:712kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14320kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 758.232788][T25911] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 758.317132][T25911] Node 0 DMA free:11196kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:68kB local_pcp:52kB free_cma:0kB [ 758.348495][T25917] bond4: option arp_all_targets: invalid value (3) [ 758.353310][T25911] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 758.361207][T25911] Node 0 DMA32 free:1075760kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24416kB inactive_anon:20kB active_file:12576kB inactive_file:162620kB unevictable:1536kB writepending:712kB zspages:0kB present:3129332kB managed:2552484kB mlocked:0kB bounce:0kB free_pcp:35312kB local_pcp:16984kB free_cma:0kB [ 758.363393][T25917] bond4 (unregistering): Released all slaves [ 758.401525][T25911] lowmem_reserve[]: 0 0 0 0 0 [ 758.406853][T25911] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.459418][T25911] lowmem_reserve[]: 0 0 0 0 0 [ 758.464706][T25911] Node 1 Normal free:3842164kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61088kB local_pcp:31104kB free_cma:0kB [ 758.470116][T25920] xt_hashlimit: size too large, truncated to 1048576 [ 758.522871][T25911] lowmem_reserve[]: 0 0 0 0 0 [ 758.524409][T17741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.527799][T25911] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11196kB [ 758.554795][T25911] Node 0 DMA32: 9412*4kB (UME) 7496*8kB (UME) 4410*16kB (UM) 550*32kB (UM) 572*64kB (UM) 868*128kB (UME) 701*256kB (UME) 417*512kB (UM) 221*1024kB (UM) 60*2048kB (UM) 0*4096kB = 1075632kB [ 758.570487][T17741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.580771][T25911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 758.631979][T25911] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 8*16kB (UM) 9*32kB (UM) 13*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 932*4096kB (UM) = 3833896kB [ 758.699243][T25911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.710932][T25911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 758.722508][T25911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.745429][T25911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 758.760964][T25911] 45140 total pagecache pages [ 758.765779][T25911] 0 pages in swap cache [ 758.774277][T25911] Free swap = 124996kB [ 758.847818][T25911] Total swap = 124996kB [ 758.879252][T25911] 2097051 pages RAM [ 758.896367][T25911] 0 pages HighMem/MovableOnly [ 758.904845][T25926] netlink: 'syz.0.6081': attribute type 1 has an invalid length. [ 758.918036][T25911] 427148 pages reserved [ 758.926426][T25911] 0 pages cma reserved [ 759.072011][T25926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 759.087346][T17746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.118423][T17746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.278656][T17747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.291970][T17747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.346718][T25943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6085'. [ 759.487045][T25943] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6085'. [ 759.508237][T25953] FAULT_INJECTION: forcing a failure. [ 759.508237][T25953] name failslab, interval 1, probability 0, space 0, times 0 [ 759.532066][T25953] CPU: 0 UID: 0 PID: 25953 Comm: syz.2.5859 Not tainted syzkaller #0 PREEMPT(full) [ 759.532092][T25953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 759.532103][T25953] Call Trace: [ 759.532110][T25953] [ 759.532118][T25953] dump_stack_lvl+0xe8/0x150 [ 759.532144][T25953] should_fail_ex+0x412/0x560 [ 759.532167][T25953] should_failslab+0xa8/0x100 [ 759.532186][T25953] __kmalloc_noprof+0xe8/0x760 [ 759.532209][T25953] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 759.532233][T25953] tomoyo_realpath_from_path+0xe3/0x5d0 [ 759.532259][T25953] ? tomoyo_domain+0xd7/0x130 [ 759.532282][T25953] ? tomoyo_path_number_perm+0x219/0x630 [ 759.532304][T25953] tomoyo_path_number_perm+0x246/0x630 [ 759.532328][T25953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 759.532348][T25953] ? __lock_acquire+0x6b5/0x2cf0 [ 759.532382][T25953] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 759.532422][T25953] ? __fget_files+0x2a/0x420 [ 759.532445][T25953] ? __fget_files+0x2a/0x420 [ 759.532463][T25953] ? __fget_files+0x3a0/0x420 [ 759.532480][T25953] ? __fget_files+0x2a/0x420 [ 759.532503][T25953] security_file_ioctl+0xc3/0x2a0 [ 759.532527][T25953] __se_sys_ioctl+0x47/0x170 [ 759.532550][T25953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.532568][T25953] do_syscall_64+0x174/0x580 [ 759.532585][T25953] ? trace_irq_disable+0x3b/0x140 [ 759.532608][T25953] ? clear_bhb_loop+0x40/0x90 [ 759.532628][T25953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.532644][T25953] RIP: 0033:0x7f22a3d9ce59 [ 759.532659][T25953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.532673][T25953] RSP: 002b:00007f22a4c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.532691][T25953] RAX: ffffffffffffffda RBX: 00007f22a4015fa0 RCX: 00007f22a3d9ce59 [ 759.532703][T25953] RDX: 0000200000000680 RSI: 00000000000089e1 RDI: 0000000000000003 [ 759.532713][T25953] RBP: 00007f22a4c65090 R08: 0000000000000000 R09: 0000000000000000 [ 759.532724][T25953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.532733][T25953] R13: 00007f22a4016038 R14: 00007f22a4015fa0 R15: 00007ffe0f7b2838 [ 759.532761][T25953] [ 759.533463][T25953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 760.288963][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 760.304551][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 760.323898][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 760.333956][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 760.345177][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 760.957341][T16595] syz_tun (unregistering): left allmulticast mode [ 761.307560][T17747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.596293][T17747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.655643][T25973] lo speed is unknown, defaulting to 1000 [ 761.679104][T25973] lo speed is unknown, defaulting to 1000 [ 761.808954][T17747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.001690][T26031] FAULT_INJECTION: forcing a failure. [ 762.001690][T26031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.047235][T26031] CPU: 1 UID: 0 PID: 26031 Comm: syz.2.6105 Not tainted syzkaller #0 PREEMPT(full) [ 762.047261][T26031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.047270][T26031] Call Trace: [ 762.047276][T26031] [ 762.047284][T26031] dump_stack_lvl+0xe8/0x150 [ 762.047309][T26031] should_fail_ex+0x412/0x560 [ 762.047333][T26031] _copy_from_user+0x2d/0xb0 [ 762.047359][T26031] ___sys_sendmsg+0x1c6/0x360 [ 762.047379][T26031] ? __lock_acquire+0x6b5/0x2cf0 [ 762.047401][T26031] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.047419][T26031] ? __lock_acquire+0x6b5/0x2cf0 [ 762.047439][T26031] ? kstrtouint+0x6e/0xe0 [ 762.047497][T26031] __sys_sendmmsg+0x27c/0x4e0 [ 762.047518][T26031] ? __pfx___sys_sendmmsg+0x10/0x10 [ 762.047533][T26031] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 762.047571][T26031] ? ksys_write+0x242/0x270 [ 762.047597][T26031] ? __pfx_ksys_write+0x10/0x10 [ 762.047628][T26031] __x64_sys_sendmmsg+0xa0/0xc0 [ 762.047651][T26031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.047668][T26031] do_syscall_64+0x174/0x580 [ 762.047686][T26031] ? trace_irq_disable+0x3b/0x140 [ 762.047709][T26031] ? clear_bhb_loop+0x40/0x90 [ 762.047729][T26031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.047745][T26031] RIP: 0033:0x7f22a3d9ce59 [ 762.047762][T26031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.047776][T26031] RSP: 002b:00007f22a4c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 762.047794][T26031] RAX: ffffffffffffffda RBX: 00007f22a4015fa0 RCX: 00007f22a3d9ce59 [ 762.047806][T26031] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 762.047817][T26031] RBP: 00007f22a4c65090 R08: 0000000000000000 R09: 0000000000000000 [ 762.047828][T26031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 762.047838][T26031] R13: 00007f22a4016038 R14: 00007f22a4015fa0 R15: 00007ffe0f7b2838 [ 762.047866][T26031] [ 762.438579][ T5635] Bluetooth: hci5: command tx timeout [ 762.546220][T26039] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6108'. [ 762.739320][T17747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.299125][T26054] netlink: 'syz.0.6113': attribute type 6 has an invalid length. [ 763.316648][T26054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6113'. [ 763.586728][ T530] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.766104][T25973] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.790489][T25973] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.800742][T25973] bridge_slave_0: entered allmulticast mode [ 763.820836][T25973] bridge_slave_0: entered promiscuous mode [ 763.871369][T17740] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.904187][T25973] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.919690][T25973] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.937942][T25973] bridge_slave_1: entered allmulticast mode [ 763.950844][T25973] bridge_slave_1: entered promiscuous mode [ 764.092727][T17740] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.140232][T17740] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.215100][T25973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.294591][T17747] bridge_slave_1: left allmulticast mode [ 764.316886][T17747] bridge_slave_1: left promiscuous mode [ 764.338390][T17747] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.377930][T17747] bridge_slave_0: left allmulticast mode [ 764.396425][T26089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6120'. [ 764.401773][T17747] bridge_slave_0: left promiscuous mode [ 764.432350][T17747] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.453456][T26089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6120'. [ 764.510686][ T5635] Bluetooth: hci5: command tx timeout [ 764.635604][T17747] dvmrp0: left allmulticast mode [ 765.325768][T17747] erspan0 (unregistering): left promiscuous mode [ 765.790336][T26138] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6126'. [ 765.841778][T26134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6126'. [ 765.913133][T26134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6126'. [ 765.955178][T17747] gretap0 (unregistering): left promiscuous mode [ 766.012973][T26134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6126'. [ 766.138622][T17747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.150853][T17747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.160719][T17747] bond0 (unregistering): Released all slaves [ 766.171144][T17747] bond1 (unregistering): Released all slaves [ 766.185795][T17747] bond2 (unregistering): Released all slaves [ 766.204444][T17747] bond3 (unregistering): (slave veth3): Releasing backup interface [ 766.213527][T17747] bond3 (unregistering): Released all slaves [ 766.228781][T17747] bond4 (unregistering): Released all slaves [ 766.247516][T17747] bond5 (unregistering): Released all slaves [ 766.266344][T25973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.283501][T26084] bridge_slave_0: Caught tx_queue_len zero misconfig [ 766.294461][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6119'. [ 766.312451][T26112] batadv0: entered promiscuous mode [ 766.320293][T26112] batadv0: left promiscuous mode [ 766.368160][T26118] syz_tun: entered allmulticast mode [ 766.391130][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 766.556948][T17747] tipc: Disabling bearer [ 766.576800][T17747] tipc: Left network mode [ 766.590026][ T5635] Bluetooth: hci5: command tx timeout [ 766.599687][T26127] lo speed is unknown, defaulting to 1000 [ 766.631187][T25973] team0: Port device team_slave_0 added [ 766.647178][T25973] team0: Port device team_slave_1 added [ 766.712573][T26127] lo speed is unknown, defaulting to 1000 [ 766.812133][T25973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.848196][T25973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.957162][T25973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.979135][T26163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6130'. [ 767.018096][T25973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.050718][T25973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.080254][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.098201][T25973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.453721][T25973] hsr_slave_0: entered promiscuous mode [ 767.487802][T25973] hsr_slave_1: entered promiscuous mode [ 767.506922][T25973] debugfs: 'hsr0' already exists in 'hsr' [ 767.523465][T25973] Cannot create hsr debugfs directory [ 767.618427][T26183] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 768.351021][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 768.464019][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 768.669950][ T5635] Bluetooth: hci5: command tx timeout [ 768.705150][T26214] syzkaller1: entered promiscuous mode [ 768.718217][T26214] syzkaller1: entered allmulticast mode [ 768.991408][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 769.022900][T26225] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6143'. [ 769.066915][T26225] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6143'. [ 769.284395][T25973] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.492235][T17740] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.513064][T17740] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.604062][T17740] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.651803][T26240] pim6reg1: entered promiscuous mode [ 769.657773][T26240] pim6reg1: entered allmulticast mode [ 769.740375][T25973] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.277828][T17747] hsr_slave_0: left promiscuous mode [ 770.323878][T17747] hsr_slave_1: left promiscuous mode [ 770.338390][T17747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.364735][T17747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.377671][T17747] batman_adv: batadv0: Interface deactivated: dummy0 [ 770.390655][T17747] batman_adv: batadv0: Removing interface: dummy0 [ 770.895771][T17747] team0 (unregistering): Port device team_slave_1 removed [ 771.107658][T26268] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 771.233655][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6158'. [ 771.250513][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6159'. [ 771.277828][T25973] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.527006][T25973] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.694003][T26291] syzkaller0: entered promiscuous mode [ 771.699502][T26291] syzkaller0: entered allmulticast mode [ 771.707680][T26296] lo: Caught tx_queue_len zero misconfig [ 771.714786][T26296] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 771.957495][T26314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6165'. [ 772.835586][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 776.075042][T26369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6166'. [ 778.334976][T26395] FAULT_INJECTION: forcing a failure. [ 778.334976][T26395] name failslab, interval 1, probability 0, space 0, times 0 [ 778.404610][T25973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 778.410629][T17747] IPVS: stop unused estimator thread 0... [ 778.411649][T26395] CPU: 0 UID: 0 PID: 26395 Comm: syz.4.6173 Not tainted syzkaller #0 PREEMPT(full) [ 778.411677][T26395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.411688][T26395] Call Trace: [ 778.411696][T26395] [ 778.411703][T26395] dump_stack_lvl+0xe8/0x150 [ 778.411730][T26395] should_fail_ex+0x412/0x560 [ 778.411754][T26395] should_failslab+0xa8/0x100 [ 778.411771][T26395] ? __kernfs_new_node+0xea/0x970 [ 778.411793][T26395] kmem_cache_alloc_noprof+0x87/0x650 [ 778.411822][T26395] __kernfs_new_node+0xea/0x970 [ 778.411849][T26395] ? __pfx___kernfs_new_node+0x10/0x10 [ 778.411870][T26395] ? kernfs_root+0x1c/0x230 [ 778.411896][T26395] ? kernfs_root+0x1c/0x230 [ 778.411914][T26395] ? kernfs_root+0x1c/0x230 [ 778.411930][T26395] ? kernfs_root+0x1c/0x230 [ 778.411954][T26395] kernfs_new_node+0x102/0x210 [ 778.411979][T26395] __kernfs_create_file+0x4b/0x2e0 [ 778.411999][T26395] sysfs_add_file_mode_ns+0x238/0x300 [ 778.412025][T26395] internal_create_group+0x673/0x1190 [ 778.412060][T26395] ? __pfx_internal_create_group+0x10/0x10 [ 778.412078][T26395] ? kernfs_add_one+0x477/0x5c0 [ 778.412102][T26395] ? up_write+0x1ab/0x410 [ 778.412125][T26395] sysfs_create_groups+0x59/0x120 [ 778.412147][T26395] device_add_attrs+0x1bf/0x5b0 [ 778.412174][T26395] ? __pfx_device_add_attrs+0x10/0x10 [ 778.412194][T26395] ? kobject_put+0x516/0x560 [ 778.412221][T26395] ? device_add_class_symlinks+0x21f/0x240 [ 778.412246][T26395] device_add+0x496/0xbb0 [ 778.412272][T26395] ? device_initialize+0x26a/0x460 [ 778.412296][T26395] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 778.412317][T26395] wakeup_source_register+0x18a/0x380 [ 778.412345][T26395] ep_insert+0x1022/0x1a40 [ 778.412381][T26395] ? __pfx_ep_insert+0x10/0x10 [ 778.412414][T26395] ? ep_loop_check+0x50/0x1b0 [ 778.412444][T26395] do_epoll_ctl+0x7f4/0xe80 [ 778.412473][T26395] __x64_sys_epoll_ctl+0x165/0x1b0 [ 778.412497][T26395] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 778.412526][T26395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.412544][T26395] do_syscall_64+0x174/0x580 [ 778.412562][T26395] ? trace_irq_disable+0x3b/0x140 [ 778.412584][T26395] ? clear_bhb_loop+0x40/0x90 [ 778.412604][T26395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.412620][T26395] RIP: 0033:0x7fdc8d99ce59 [ 778.412637][T26395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.412650][T26395] RSP: 002b:00007fdc8e893028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 778.412675][T26395] RAX: ffffffffffffffda RBX: 00007fdc8dc15fa0 RCX: 00007fdc8d99ce59 [ 778.412687][T26395] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000004 [ 778.412696][T26395] RBP: 00007fdc8e893090 R08: 0000000000000000 R09: 0000000000000000 [ 778.412706][T26395] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 778.412716][T26395] R13: 00007fdc8dc16038 R14: 00007fdc8dc15fa0 R15: 00007ffeef36faf8 [ 778.412745][T26395] [ 778.755371][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.796663][T25973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 778.869186][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.893281][T25973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 778.922001][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.929481][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6178'. [ 778.941398][T25973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 779.026470][T25973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 779.384101][T26422] syzkaller0: entered promiscuous mode [ 779.392885][T26422] syzkaller0: entered allmulticast mode [ 783.656610][T25973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.694347][T25973] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.753389][T17749] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.760598][T17749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.795140][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.802367][ T530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.810677][T26448] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6187'. [ 783.863381][T26448] FAULT_INJECTION: forcing a failure. [ 783.863381][T26448] name failslab, interval 1, probability 0, space 0, times 0 [ 783.876380][T26448] CPU: 0 UID: 0 PID: 26448 Comm: syz.0.6187 Not tainted syzkaller #0 PREEMPT(full) [ 783.876400][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.876409][T26448] Call Trace: [ 783.876416][T26448] [ 783.876423][T26448] dump_stack_lvl+0xe8/0x150 [ 783.876449][T26448] should_fail_ex+0x412/0x560 [ 783.876472][T26448] should_failslab+0xa8/0x100 [ 783.876488][T26448] kmem_cache_alloc_bulk_noprof+0x8c/0x7c0 [ 783.876514][T26448] ? pfn_valid+0x125/0x4c0 [ 783.876535][T26448] ? pfn_valid+0x125/0x4c0 [ 783.876556][T26448] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 783.876593][T26448] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 783.876621][T26448] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 783.876658][T26448] ? 0xffffffffa0201808 [ 783.876673][T26448] ? 0xffffffffa0201a48 [ 783.876709][T26448] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 783.876737][T26448] ? _copy_from_user+0x94/0xb0 [ 783.876756][T26448] ? bpf_test_init+0x113/0x150 [ 783.876771][T26448] ? xdp_convert_md_to_buff+0x5b/0x330 [ 783.876792][T26448] bpf_prog_test_run_xdp+0x81c/0x1160 [ 783.876825][T26448] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 783.876850][T26448] ? __fget_files+0x2a/0x420 [ 783.876874][T26448] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 783.876893][T26448] bpf_prog_test_run+0x2c7/0x340 [ 783.876912][T26448] __sys_bpf+0x643/0x950 [ 783.876936][T26448] ? __pfx___sys_bpf+0x10/0x10 [ 783.876972][T26448] ? ksys_write+0x242/0x270 [ 783.876997][T26448] ? __pfx_ksys_write+0x10/0x10 [ 783.877023][T26448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.877040][T26448] __x64_sys_bpf+0x7c/0x90 [ 783.877063][T26448] do_syscall_64+0x174/0x580 [ 783.877081][T26448] ? trace_irq_disable+0x3b/0x140 [ 783.877103][T26448] ? clear_bhb_loop+0x40/0x90 [ 783.877123][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.877139][T26448] RIP: 0033:0x7fe88e59ce59 [ 783.877155][T26448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.877168][T26448] RSP: 002b:00007fe88f4ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.877186][T26448] RAX: ffffffffffffffda RBX: 00007fe88e815fa0 RCX: 00007fe88e59ce59 [ 783.877197][T26448] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 783.877207][T26448] RBP: 00007fe88f4ca090 R08: 0000000000000000 R09: 0000000000000000 [ 783.877217][T26448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.877226][T26448] R13: 00007fe88e816038 R14: 00007fe88e815fa0 R15: 00007ffec6736d08 [ 783.877252][T26448] [ 783.889274][T26450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6188'. [ 784.253854][T26450] ip6gre2: entered promiscuous mode [ 784.289280][T26450] ip6gre2: entered allmulticast mode [ 784.708792][T26472] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6192'. [ 784.734889][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6192'. [ 784.746266][T26472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6192'. [ 785.196430][T26507] netlink: 'syz.0.6201': attribute type 1 has an invalid length. [ 785.338308][T26507] bond5: entered promiscuous mode [ 785.344577][T26507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.411220][T26513] xt_hashlimit: Unknown mode mask 1D8, kernel too old? [ 785.426717][T26493] syzkaller0: entered promiscuous mode [ 785.433840][T26493] syzkaller0: entered allmulticast mode [ 785.484343][T26507] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 786.531714][T26536] netlink: 'syz.4.6206': attribute type 3 has an invalid length. [ 786.549984][T26536] netlink: 'syz.4.6206': attribute type 1 has an invalid length. [ 786.560458][T26536] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6206'. [ 789.824051][T25973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.839413][T26507] team0: Port device batadv0 removed [ 790.066748][T25973] veth0_vlan: entered promiscuous mode [ 790.086710][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6209'. [ 790.182987][T25973] veth1_vlan: entered promiscuous mode [ 790.196870][T26549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6211'. [ 790.284381][T26555] xt_NFQUEUE: number of total queues is 0 [ 790.326390][T26555] bond13: option arp_all_targets: invalid value (3) [ 790.337062][T26555] bond13 (unregistering): Released all slaves [ 790.389435][T25973] veth0_macvtap: entered promiscuous mode [ 790.435398][T25973] veth1_macvtap: entered promiscuous mode [ 790.477913][T25973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.525333][T25973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.551097][T17737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.569297][T26566] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6217'. [ 790.623185][T17737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.640129][T17737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.671244][T17735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.829643][T26568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6218'. [ 790.830904][T17747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.861643][T17747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.956187][T17747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.965643][T17747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.977841][T26574] syzkaller0: entered promiscuous mode [ 790.978141][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6218'. [ 790.984229][T26574] syzkaller0: entered allmulticast mode [ 791.047203][T26568] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 791.070492][T26568] bond13 (unregistering): Released all slaves [ 791.515502][T26587] tipc: Started in network mode [ 791.528960][T26587] tipc: Node identity aa6af175815d, cluster identity 4711 [ 791.560337][T26587] tipc: Enabled bearer , priority 2 [ 791.593100][T26590] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6227'. [ 791.670443][T24772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.673073][T26590] xt_ipcomp: unknown flags 1D [ 791.687777][T24772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.702366][T24772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.726304][T24772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.735001][T24772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 791.818932][T26600] netlink: 'syz.2.6229': attribute type 6 has an invalid length. [ 791.851412][T26600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6229'. [ 792.147221][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6234'. [ 792.188023][T15904] syz_tun (unregistering): left allmulticast mode [ 792.368040][T26616] bond6: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 792.402338][T26616] bond6 (unregistering): Released all slaves [ 792.635502][T26629] syzkaller0: entered promiscuous mode [ 792.651485][T26629] syzkaller0: entered allmulticast mode [ 792.868417][ T5742] tipc: Node number set to 725086581 [ 792.894793][T26594] lo speed is unknown, defaulting to 1000 [ 792.915214][T26594] lo speed is unknown, defaulting to 1000 [ 793.310416][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 793.448476][T26663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6250'. [ 793.557673][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6251'. [ 793.656149][T26670] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 793.691222][T26673] netlink: 'syz.0.6252': attribute type 1 has an invalid length. [ 793.712903][T26674] netlink: 'syz.4.6253': attribute type 1 has an invalid length. [ 793.766012][T26674] 8021q: adding VLAN 0 to HW filter on device bond13 [ 793.795179][ T5635] Bluetooth: hci0: command tx timeout [ 793.861760][T26670] bond6: entered promiscuous mode [ 793.867332][T26670] bond6: entered allmulticast mode [ 793.908793][T26677] bond13: (slave veth19): Enslaving as an active interface with a down link [ 793.918528][T26682] netlink: 'syz.4.6253': attribute type 10 has an invalid length. [ 793.938781][T26679] bond6: (slave geneve2): making interface the new active one [ 793.948002][T26679] geneve2: entered promiscuous mode [ 793.956554][T26679] geneve2: entered allmulticast mode [ 793.963032][T26679] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 793.978636][T26674] bond13: (slave dummy0): making interface the new active one [ 793.987638][T26674] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 794.026492][T26682] dummy0: entered promiscuous mode [ 794.043621][T26682] bond13: (slave dummy0): Releasing active interface [ 794.065379][T17747] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 794.099209][T17747] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 794.156719][T17747] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 794.252656][T26684] netlink: 'syz.3.6256': attribute type 4 has an invalid length. [ 794.463068][T26698] syzkaller0: entered promiscuous mode [ 794.468645][T26698] syzkaller0: entered allmulticast mode [ 794.545060][T17747] syzkaller0: tun_net_xmit 48 [ 795.207679][T26720] __nla_validate_parse: 7 callbacks suppressed [ 795.207699][T26720] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6266'. [ 795.871908][ T5635] Bluetooth: hci0: command tx timeout [ 797.163973][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 797.172085][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 797.962472][ T5635] Bluetooth: hci0: command tx timeout [ 799.895231][T26733] syzkaller0: entered promiscuous mode [ 799.907229][T26733] syzkaller0: entered allmulticast mode [ 800.030087][ T5635] Bluetooth: hci0: command tx timeout [ 800.047757][T26748] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 800.047757][T26748] Please contact the netfilter-devel mailing list or update your nftables rules. [ 800.332263][T26749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6272'. [ 803.563521][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 804.081535][T26594] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.100035][T26594] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.120138][T26594] bridge_slave_0: entered allmulticast mode [ 804.131103][T26594] bridge_slave_0: entered promiscuous mode [ 804.140137][T26594] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.150015][T26594] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.158862][T26594] bridge_slave_1: entered allmulticast mode [ 804.166870][T26594] bridge_slave_1: entered promiscuous mode [ 804.243403][T26594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.288767][T26594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.345203][T26762] Bluetooth: MGMT ver 1.23 [ 804.377404][T26762] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 804.428713][T26594] team0: Port device team_slave_0 added [ 804.447471][T26762] tipc: Enabled bearer , priority 0 [ 804.472183][T26594] team0: Port device team_slave_1 added [ 804.565833][T26594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.573781][T26594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.605495][T26594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.660792][T26594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.677843][T26594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.804833][T26594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.015485][T26776] lo speed is unknown, defaulting to 1000 [ 805.088420][T26594] hsr_slave_0: entered promiscuous mode [ 805.114652][T26594] hsr_slave_1: entered promiscuous mode [ 805.126899][T26594] debugfs: 'hsr0' already exists in 'hsr' [ 805.140540][T26594] Cannot create hsr debugfs directory [ 805.147155][T26776] lo speed is unknown, defaulting to 1000 [ 805.215092][T26790] FAULT_INJECTION: forcing a failure. [ 805.215092][T26790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.253513][T26790] CPU: 0 UID: 0 PID: 26790 Comm: syz.2.6286 Not tainted syzkaller #0 PREEMPT(full) [ 805.253537][T26790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.253548][T26790] Call Trace: [ 805.253555][T26790] [ 805.253563][T26790] dump_stack_lvl+0xe8/0x150 [ 805.253589][T26790] should_fail_ex+0x412/0x560 [ 805.253612][T26790] _copy_to_user+0x31/0xb0 [ 805.253642][T26790] simple_read_from_buffer+0xe1/0x170 [ 805.253669][T26790] proc_fail_nth_read+0x1bb/0x230 [ 805.253694][T26790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.253718][T26790] ? rw_verify_area+0x2a6/0x4d0 [ 805.253740][T26790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.253760][T26790] vfs_read+0x20c/0xa70 [ 805.253783][T26790] ? __pfx___mutex_lock+0x10/0x10 [ 805.253800][T26790] ? __pfx_vfs_read+0x10/0x10 [ 805.253819][T26790] ? __fget_files+0x2a/0x420 [ 805.253839][T26790] ? __fget_files+0x3a0/0x420 [ 805.253855][T26790] ? __fget_files+0x2a/0x420 [ 805.253883][T26790] ksys_read+0x150/0x270 [ 805.253916][T26790] ? __pfx_ksys_read+0x10/0x10 [ 805.253935][T26790] ? __pfx_sock_ioctl+0x10/0x10 [ 805.253963][T26790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.253983][T26790] do_syscall_64+0x174/0x580 [ 805.254001][T26790] ? trace_irq_disable+0x3b/0x140 [ 805.254026][T26790] ? clear_bhb_loop+0x40/0x90 [ 805.254045][T26790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.254060][T26790] RIP: 0033:0x7f22a3d5d68e [ 805.254076][T26790] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 805.254089][T26790] RSP: 002b:00007f22a4c64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 805.254107][T26790] RAX: ffffffffffffffda RBX: 00007f22a4c656c0 RCX: 00007f22a3d5d68e [ 805.254118][T26790] RDX: 000000000000000f RSI: 00007f22a4c650a0 RDI: 0000000000000005 [ 805.254127][T26790] RBP: 00007f22a4c65090 R08: 0000000000000000 R09: 0000000000000000 [ 805.254138][T26790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.254147][T26790] R13: 00007f22a4016038 R14: 00007f22a4015fa0 R15: 00007ffe0f7b2838 [ 805.254173][T26790] [ 806.015962][T26803] syz_tun: entered allmulticast mode [ 806.131292][T26807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6291'. [ 806.772272][T26594] tipc: Disabling bearer [ 807.154215][T26828] Cannot find del_set index 4 as target [ 807.206947][T26831] FAULT_INJECTION: forcing a failure. [ 807.206947][T26831] name failslab, interval 1, probability 0, space 0, times 0 [ 807.244520][T26831] CPU: 1 UID: 0 PID: 26831 Comm: syz.3.6299 Not tainted syzkaller #0 PREEMPT(full) [ 807.244546][T26831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 807.244557][T26831] Call Trace: [ 807.244564][T26831] [ 807.244572][T26831] dump_stack_lvl+0xe8/0x150 [ 807.244597][T26831] should_fail_ex+0x412/0x560 [ 807.244620][T26831] should_failslab+0xa8/0x100 [ 807.244639][T26831] ? skb_clone+0x212/0x3a0 [ 807.244658][T26831] kmem_cache_alloc_noprof+0x87/0x650 [ 807.244689][T26831] skb_clone+0x212/0x3a0 [ 807.244711][T26831] __netlink_deliver_tap+0x404/0x850 [ 807.244744][T26831] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.244773][T26831] netlink_deliver_tap+0x19c/0x1b0 [ 807.244793][T26831] netlink_sendskb+0x68/0x140 [ 807.244812][T26831] netlink_rcv_skb+0x2b6/0x4b0 [ 807.244832][T26831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.244930][T26831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.244961][T26831] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.244980][T26831] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.245003][T26831] netlink_unicast+0x75c/0x8e0 [ 807.245032][T26831] netlink_sendmsg+0x813/0xb40 [ 807.245065][T26831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.245088][T26831] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.245114][T26831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.245139][T26831] ____sys_sendmsg+0x972/0x9f0 [ 807.245159][T26831] ? __might_fault+0xaf/0x130 [ 807.245186][T26831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.245214][T26831] ? import_iovec+0x73/0xa0 [ 807.245238][T26831] ___sys_sendmsg+0x2a5/0x360 [ 807.245255][T26831] ? __lock_acquire+0x6b5/0x2cf0 [ 807.245279][T26831] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.245332][T26831] ? __fget_files+0x2a/0x420 [ 807.245351][T26831] ? __fget_files+0x3a0/0x420 [ 807.245384][T26831] __x64_sys_sendmsg+0x1bd/0x2a0 [ 807.245405][T26831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.245439][T26831] ? __pfx_ksys_write+0x10/0x10 [ 807.245471][T26831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.245488][T26831] do_syscall_64+0x174/0x580 [ 807.245506][T26831] ? trace_irq_disable+0x3b/0x140 [ 807.245531][T26831] ? clear_bhb_loop+0x40/0x90 [ 807.245549][T26831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.245566][T26831] RIP: 0033:0x7f953c99ce59 [ 807.245582][T26831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.245596][T26831] RSP: 002b:00007f953d7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.245613][T26831] RAX: ffffffffffffffda RBX: 00007f953cc16090 RCX: 00007f953c99ce59 [ 807.245625][T26831] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 807.245636][T26831] RBP: 00007f953d7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 807.245646][T26831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.245656][T26831] R13: 00007f953cc16128 R14: 00007f953cc16090 R15: 00007ffcf64ca378 [ 807.245685][T26831] [ 807.778636][T26594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 807.858210][T26594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.869261][T26594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 807.923017][T26594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.957792][T26594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 807.986782][T26594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.015761][T26853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6303'. [ 808.016318][T26594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 808.089348][T26594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 808.332500][T26594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.409350][T26594] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.436025][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.443254][ T530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.487599][T17746] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.495254][T17746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.580242][T26878] openvswitch: netlink: Missing valid actions attribute. [ 808.597651][T26878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.695229][T26882] xt_hashlimit: size too large, truncated to 1048576 [ 808.776451][T26887] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.868267][T26887] bridge_slave_0 (unregistering): left allmulticast mode [ 808.883569][T26891] x_tables: ip_tables: string.1 match: invalid size 160 (kernel) != (user) 264 [ 808.919238][T26887] bridge_slave_0 (unregistering): left promiscuous mode [ 808.958489][T26887] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.685184][T26919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 809.975994][T26594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.169011][T26594] veth0_vlan: entered promiscuous mode [ 810.268255][T26594] veth1_vlan: entered promiscuous mode [ 810.368949][T26594] veth0_macvtap: entered promiscuous mode [ 810.408617][T26594] veth1_macvtap: entered promiscuous mode [ 810.479249][T26594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.524621][T26594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.567062][T17740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.585498][T17740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.627834][T17740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.642396][T26953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6335'. [ 810.656875][T17740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.728731][T26957] syzkaller0: entered promiscuous mode [ 810.742861][T26957] syzkaller0: entered allmulticast mode [ 810.755054][T26957] 0: reclassify loop, rule prio 0, protocol 800 [ 810.766860][T26959] netlink: 'syz.2.6335': attribute type 1 has an invalid length. [ 810.936541][T26965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6339'. [ 810.951998][T26965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6339'. [ 810.962511][T26965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6339'. [ 811.046684][T17740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.078515][T17740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.113644][T17746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.122960][T17746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.290371][T26979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6341'. [ 811.339336][T26982] FAULT_INJECTION: forcing a failure. [ 811.339336][T26982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.356998][T26982] CPU: 0 UID: 0 PID: 26982 Comm: syz.1.6222 Not tainted syzkaller #0 PREEMPT(full) [ 811.357021][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 811.357032][T26982] Call Trace: [ 811.357048][T26982] [ 811.357055][T26982] dump_stack_lvl+0xe8/0x150 [ 811.357080][T26982] should_fail_ex+0x412/0x560 [ 811.357103][T26982] _copy_from_user+0x2d/0xb0 [ 811.357124][T26982] ___sys_recvmsg+0x175/0x590 [ 811.357150][T26982] ? __pfx____sys_recvmsg+0x10/0x10 [ 811.357174][T26982] ? __fget_files+0x2a/0x420 [ 811.357222][T26982] do_recvmmsg+0x334/0x800 [ 811.357250][T26982] ? __pfx_do_recvmmsg+0x10/0x10 [ 811.357281][T26982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 811.357317][T26982] __x64_sys_recvmmsg+0x198/0x250 [ 811.357340][T26982] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 811.357368][T26982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.357386][T26982] do_syscall_64+0x174/0x580 [ 811.357404][T26982] ? trace_irq_disable+0x3b/0x140 [ 811.357427][T26982] ? clear_bhb_loop+0x40/0x90 [ 811.357449][T26982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.357465][T26982] RIP: 0033:0x7fe96ed9ce59 [ 811.357497][T26982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.357510][T26982] RSP: 002b:00007fe96fcbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 811.357531][T26982] RAX: ffffffffffffffda RBX: 00007fe96f015fa0 RCX: 00007fe96ed9ce59 [ 811.357543][T26982] RDX: 00000000040000c2 RSI: 0000200000004480 RDI: 0000000000000003 [ 811.357554][T26982] RBP: 00007fe96fcbb090 R08: 0000000000000000 R09: 0000000000000000 [ 811.357564][T26982] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 811.357574][T26982] R13: 00007fe96f016038 R14: 00007fe96f015fa0 R15: 00007ffe81911928 [ 811.357602][T26982] [ 811.813105][T24772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 811.838649][T24772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.854416][T24772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 811.870080][T24772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 811.882169][T24772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 812.262398][T16257] syz_tun (unregistering): left allmulticast mode [ 812.517300][T27007] syzkaller0: entered promiscuous mode [ 812.524012][T27005] netlink: 'syz.0.6349': attribute type 1 has an invalid length. [ 812.539492][T27007] syzkaller0: entered allmulticast mode [ 812.573934][T27007] 0: reclassify loop, rule prio 0, protocol 800 [ 812.703825][T27018] netlink: 'syz.1.6351': attribute type 2 has an invalid length. [ 812.713689][T27018] netlink: 'syz.1.6351': attribute type 8 has an invalid length. [ 812.722273][T27018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6351'. [ 812.933816][T26984] lo speed is unknown, defaulting to 1000 [ 812.953346][T26984] lo speed is unknown, defaulting to 1000 [ 813.043274][T27030] netlink: 'syz.3.6356': attribute type 6 has an invalid length. [ 813.063555][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6356'. [ 813.092170][T27027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.134820][T27035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.278627][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6357'. [ 813.508701][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6359'. [ 813.605024][T27044] team0: Port device team_slave_0 removed [ 813.770408][T27053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6361'. [ 813.962164][T24772] Bluetooth: hci2: command tx timeout [ 814.379607][T27070] syzkaller0: entered promiscuous mode [ 814.408283][T27070] syzkaller0: entered allmulticast mode [ 814.466531][T27060] 0: reclassify loop, rule prio 0, protocol 800 [ 814.571473][T27062] netlink: 'syz.3.6364': attribute type 2 has an invalid length. [ 814.591577][T27062] netlink: 'syz.3.6364': attribute type 9 has an invalid length. [ 814.634694][T27062] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6364'. [ 814.780042][T26984] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.802068][T26984] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.817495][T26984] bridge_slave_0: entered allmulticast mode [ 814.838486][T26984] bridge_slave_0: entered promiscuous mode [ 814.873079][T26984] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.892855][T26984] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.901303][T26984] bridge_slave_1: entered allmulticast mode [ 814.930521][T26984] bridge_slave_1: entered promiscuous mode [ 814.957429][T27094] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6375'. [ 814.990726][T27094] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 815.009754][T26984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.027117][T26984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.108116][T26984] team0: Port device team_slave_0 added [ 815.135925][T26984] team0: Port device team_slave_1 added [ 815.214732][T26984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.238309][T26984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.279652][T26984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.358614][T26984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.386438][T26984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.425116][T26984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.583135][T26984] hsr_slave_0: entered promiscuous mode [ 815.617631][T26984] hsr_slave_1: entered promiscuous mode [ 815.643916][T26984] debugfs: 'hsr0' already exists in 'hsr' [ 815.664094][T26984] Cannot create hsr debugfs directory [ 815.842801][T27127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6387'. [ 815.856557][T27120] syzkaller0: entered promiscuous mode [ 815.866604][T27120] syzkaller0: entered allmulticast mode [ 815.907737][T27127] FAULT_INJECTION: forcing a failure. [ 815.907737][T27127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.934438][T27127] CPU: 1 UID: 0 PID: 27127 Comm: syz.1.6387 Not tainted syzkaller #0 PREEMPT(full) [ 815.934463][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.934473][T27127] Call Trace: [ 815.934481][T27127] [ 815.934489][T27127] dump_stack_lvl+0xe8/0x150 [ 815.934514][T27127] should_fail_ex+0x412/0x560 [ 815.934545][T27127] _copy_from_user+0x2d/0xb0 [ 815.934566][T27127] generic_map_update_batch+0x648/0x990 [ 815.934597][T27127] ? __pfx_generic_map_update_batch+0x10/0x10 [ 815.934617][T27127] ? __fget_files+0x2a/0x420 [ 815.934644][T27127] ? __pfx_generic_map_update_batch+0x10/0x10 [ 815.934664][T27127] bpf_map_do_batch+0x39b/0x630 [ 815.934685][T27127] __sys_bpf+0x7c1/0x950 [ 815.934709][T27127] ? __pfx___sys_bpf+0x10/0x10 [ 815.934741][T27127] ? ksys_write+0x242/0x270 [ 815.934764][T27127] ? __pfx_ksys_write+0x10/0x10 [ 815.934789][T27127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.934807][T27127] __x64_sys_bpf+0x7c/0x90 [ 815.934837][T27127] do_syscall_64+0x174/0x580 [ 815.934858][T27127] ? trace_irq_disable+0x3b/0x140 [ 815.934879][T27127] ? clear_bhb_loop+0x40/0x90 [ 815.934899][T27127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.934914][T27127] RIP: 0033:0x7fe96ed9ce59 [ 815.934929][T27127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.934944][T27127] RSP: 002b:00007fe96fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 815.934962][T27127] RAX: ffffffffffffffda RBX: 00007fe96f015fa0 RCX: 00007fe96ed9ce59 [ 815.934974][T27127] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 815.934985][T27127] RBP: 00007fe96fcbb090 R08: 0000000000000000 R09: 0000000000000000 [ 815.934995][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.935005][T27127] R13: 00007fe96f016038 R14: 00007fe96f015fa0 R15: 00007ffe81911928 [ 815.935034][T27127] [ 816.219980][T24772] Bluetooth: hci2: command tx timeout [ 816.469173][T27146] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 816.582355][T27152] netlink: 'syz.0.6396': attribute type 15 has an invalid length. [ 817.204590][T27158] syzkaller0: entered promiscuous mode [ 817.214311][T27158] syzkaller0: entered allmulticast mode [ 817.673707][T27178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6405'. [ 818.281086][T24772] Bluetooth: hci2: command tx timeout [ 820.350132][T24772] Bluetooth: hci2: command tx timeout [ 821.897967][T26984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.919250][T27206] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 821.939490][T26984] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.298866][T26984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.325129][T26984] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.723502][T26984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.746870][T26984] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.820026][T27219] IPVS: set_ctl: invalid protocol: 24 3.0.0.0:0 [ 822.841143][T27219] IPVS: set_ctl: invalid protocol: 0 48.0.0.0:0 [ 822.909390][T26984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.945718][T26984] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.081246][T27239] syzkaller1: entered promiscuous mode [ 823.123981][T27239] syzkaller1: entered allmulticast mode [ 823.162430][T27239] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6420'. [ 823.519221][T27249] syzkaller0: entered promiscuous mode [ 823.528622][T27249] syzkaller0: entered allmulticast mode [ 823.593463][T27246] syzkaller1: entered promiscuous mode [ 823.599102][T27246] syzkaller1: entered allmulticast mode [ 823.696233][T26984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 823.743482][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.758210][T26984] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 823.780871][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.796859][T26984] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 823.819096][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.835033][T26984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 823.843832][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6427'. [ 823.860850][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.866628][T27262] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6428'. [ 823.947347][T27269] netlink: 'syz.3.6429': attribute type 1 has an invalid length. [ 824.200341][T27269] bond1: entered promiscuous mode [ 824.220419][T27269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.353184][T27284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6433'. [ 824.443239][T26984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.551593][T26984] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.603715][T17746] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.611125][T17746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.677646][T17741] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.684862][T17741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.715684][T27302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6440'. [ 824.995639][T27304] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 825.509169][T27333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6449'. [ 825.581654][T27337] FAULT_INJECTION: forcing a failure. [ 825.581654][T27337] name failslab, interval 1, probability 0, space 0, times 0 [ 825.644837][T27337] CPU: 1 UID: 0 PID: 27337 Comm: syz.1.6448 Not tainted syzkaller #0 PREEMPT(full) [ 825.644862][T27337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.644872][T27337] Call Trace: [ 825.644880][T27337] [ 825.644887][T27337] dump_stack_lvl+0xe8/0x150 [ 825.644912][T27337] should_fail_ex+0x412/0x560 [ 825.644933][T27337] should_failslab+0xa8/0x100 [ 825.644951][T27337] __kmalloc_cache_noprof+0x88/0x660 [ 825.644973][T27337] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 825.644991][T27337] ? sctp_v6_cmp_addr+0x15/0xd0 [ 825.645014][T27337] ? sctp_add_bind_addr+0x8c/0x370 [ 825.645044][T27337] sctp_add_bind_addr+0x8c/0x370 [ 825.645071][T27337] sctp_copy_local_addr_list+0x314/0x4f0 [ 825.645099][T27337] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 825.645123][T27337] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 825.645148][T27337] ? sctp_v6_is_any+0x64/0x80 [ 825.645166][T27337] ? sctp_copy_one_addr+0x93/0x360 [ 825.645192][T27337] sctp_bind_addr_copy+0xb3/0x3c0 [ 825.645216][T27337] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 825.645250][T27337] sctp_connect_new_asoc+0x2ff/0x6b0 [ 825.645273][T27337] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 825.645304][T27337] ? __local_bh_enable_ip+0xd0/0x130 [ 825.645321][T27337] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 825.645343][T27337] ? security_sctp_bind_connect+0x7e/0x2c0 [ 825.645368][T27337] sctp_sendmsg+0x1576/0x2c50 [ 825.645391][T27337] ? unwind_next_frame+0xa6/0x2550 [ 825.645426][T27337] ? __pfx_sctp_sendmsg+0x10/0x10 [ 825.645449][T27337] ? aa_sk_perm+0x6d5/0x900 [ 825.645478][T27337] ? __pfx_aa_sk_perm+0x10/0x10 [ 825.645502][T27337] ? sock_rps_record_flow+0x19/0x350 [ 825.645528][T27337] ? inet_sendmsg+0x2f4/0x370 [ 825.645553][T27337] ____sys_sendmsg+0x80a/0x9f0 [ 825.645582][T27337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.645611][T27337] ? import_iovec+0x73/0xa0 [ 825.645633][T27337] ___sys_sendmsg+0x2a5/0x360 [ 825.645651][T27337] ? __lock_acquire+0x6b5/0x2cf0 [ 825.645674][T27337] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.645728][T27337] ? __fget_files+0x2a/0x420 [ 825.645747][T27337] ? __fget_files+0x3a0/0x420 [ 825.645777][T27337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 825.645799][T27337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.645826][T27337] ? __pfx_ksys_write+0x10/0x10 [ 825.645858][T27337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.645876][T27337] do_syscall_64+0x174/0x580 [ 825.645897][T27337] ? trace_irq_disable+0x3b/0x140 [ 825.645918][T27337] ? clear_bhb_loop+0x40/0x90 [ 825.645938][T27337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.645954][T27337] RIP: 0033:0x7fe96ed9ce59 [ 825.645970][T27337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.645983][T27337] RSP: 002b:00007fe96fc9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.646007][T27337] RAX: ffffffffffffffda RBX: 00007fe96f016090 RCX: 00007fe96ed9ce59 [ 825.646018][T27337] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000005 [ 825.646029][T27337] RBP: 00007fe96fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 825.646040][T27337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 825.646053][T27337] R13: 00007fe96f016128 R14: 00007fe96f016090 R15: 00007ffe81911928 [ 825.646083][T27337] [ 826.177271][T26984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.678966][T27368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6453'. [ 826.737225][T27368] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.744698][T27368] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.786140][T27375] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6453'. [ 826.804064][T27375] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.811324][T27375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.818896][T27375] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.826110][T27375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.873778][T27375] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6453'. [ 826.903388][T27375] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.910882][T27375] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.944179][T27379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6457'. [ 826.985446][T27379] gretap0: entered promiscuous mode [ 827.000324][T27379] gretap0: left promiscuous mode [ 827.072580][T26984] veth0_vlan: entered promiscuous mode [ 827.130077][T26984] veth1_vlan: entered promiscuous mode [ 827.248346][T26984] veth0_macvtap: entered promiscuous mode [ 827.290312][T26984] veth1_macvtap: entered promiscuous mode [ 827.597639][T26984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.645353][T26984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.697825][T17746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.742341][T17746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.786868][T17746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.816192][T17746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.003739][T27422] xt_TCPMSS: Only works on TCP SYN packets [ 828.401428][T27431] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 828.431417][T27431] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 828.635693][T17749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.680926][T17749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.739561][T27441] __nla_validate_parse: 1 callbacks suppressed [ 828.739582][T27441] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6479'. [ 828.819037][ T530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.843136][ T530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.073635][T27443] lo speed is unknown, defaulting to 1000 [ 829.095488][T27443] lo speed is unknown, defaulting to 1000 [ 829.176550][T27450] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6482'. [ 829.468879][T27465] FAULT_INJECTION: forcing a failure. [ 829.468879][T27465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.525477][T27465] CPU: 0 UID: 0 PID: 27465 Comm: syz.4.6487 Not tainted syzkaller #0 PREEMPT(full) [ 829.525502][T27465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.525513][T27465] Call Trace: [ 829.525520][T27465] [ 829.525528][T27465] dump_stack_lvl+0xe8/0x150 [ 829.525554][T27465] should_fail_ex+0x412/0x560 [ 829.525577][T27465] _copy_from_user+0x2d/0xb0 [ 829.525598][T27465] ___sys_recvmsg+0x175/0x590 [ 829.525629][T27465] ? __pfx____sys_recvmsg+0x10/0x10 [ 829.525652][T27465] ? __fget_files+0x2a/0x420 [ 829.525699][T27465] do_recvmmsg+0x334/0x800 [ 829.525726][T27465] ? __pfx_do_recvmmsg+0x10/0x10 [ 829.525756][T27465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 829.525800][T27465] __x64_sys_recvmmsg+0x198/0x250 [ 829.525823][T27465] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 829.525851][T27465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.525869][T27465] do_syscall_64+0x174/0x580 [ 829.525886][T27465] ? trace_irq_disable+0x3b/0x140 [ 829.525908][T27465] ? clear_bhb_loop+0x40/0x90 [ 829.525938][T27465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.525955][T27465] RIP: 0033:0x7f0cd519ce59 [ 829.525972][T27465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.525986][T27465] RSP: 002b:00007f0cd5f8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 829.526005][T27465] RAX: ffffffffffffffda RBX: 00007f0cd5415fa0 RCX: 00007f0cd519ce59 [ 829.526017][T27465] RDX: 00000000040000c2 RSI: 0000200000004480 RDI: 0000000000000003 [ 829.526027][T27465] RBP: 00007f0cd5f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 829.526038][T27465] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 829.526048][T27465] R13: 00007f0cd5416038 R14: 00007f0cd5415fa0 R15: 00007ffd8c155918 [ 829.526077][T27465] [ 829.556946][T27468] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6489'. [ 829.831616][T27468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6489'. [ 829.869391][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6489'. [ 829.963359][T17743] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.972742][T27468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6489'. [ 829.987110][T17743] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.024827][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 830.030441][T27468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6489'. [ 830.052446][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 830.063923][T17743] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.063952][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 830.086334][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 830.100698][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.155886][T17743] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.545370][T27494] netlink: 592 bytes leftover after parsing attributes in process `syz.3.6494'. [ 830.646060][T17301] syz_tun (unregistering): left allmulticast mode [ 830.855035][T27505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6497'. [ 830.935202][T27505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.998868][T27505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.053879][T27505] bond0 (unregistering): Released all slaves [ 831.265066][T27515] x_tables: duplicate underflow at hook 2 [ 831.383046][T27477] lo speed is unknown, defaulting to 1000 [ 831.407088][T27477] lo speed is unknown, defaulting to 1000 [ 831.707232][T27539] xt_hashlimit: size too large, truncated to 1048576 [ 831.915105][T27550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6510'. [ 831.997702][T27550] ip6tnl0: entered promiscuous mode [ 832.008127][T27550] ip6tnl0: entered allmulticast mode [ 832.190100][ T5635] Bluetooth: hci1: command tx timeout [ 832.511705][T27568] netlink: 'syz.3.6515': attribute type 83 has an invalid length. [ 832.713753][T27477] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.721540][T27477] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.740730][T27477] bridge_slave_0: entered allmulticast mode [ 832.748562][T27477] bridge_slave_0: entered promiscuous mode [ 832.759623][T27477] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.770082][T27477] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.780474][T27477] bridge_slave_1: entered allmulticast mode [ 832.794461][T27477] bridge_slave_1: entered promiscuous mode [ 832.866691][T27477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.903858][T27477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.022434][T27477] team0: Port device team_slave_0 added [ 833.050108][T27477] team0: Port device team_slave_1 added [ 833.251550][T27584] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 833.277727][T27584] mac80211_hwsim hwsim64 wlan0: entered allmulticast mode [ 833.302435][T27584] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 833.355417][T27477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.381227][T27477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.450064][T27477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.491238][T27477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.504601][T27477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.559454][T27477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.586197][T27597] Cannot find add_set index 0 as target [ 833.749988][T27477] hsr_slave_0: entered promiscuous mode [ 833.764862][T27477] hsr_slave_1: entered promiscuous mode [ 833.778276][T27477] debugfs: 'hsr0' already exists in 'hsr' [ 833.785374][T27477] Cannot create hsr debugfs directory [ 833.991063][T27617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.281914][ T5635] Bluetooth: hci1: command tx timeout [ 834.546178][T27477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.559244][T27477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.586096][T27477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 834.667426][T27639] FAULT_INJECTION: forcing a failure. [ 834.667426][T27639] name failslab, interval 1, probability 0, space 0, times 0 [ 834.716420][T27639] CPU: 1 UID: 0 PID: 27639 Comm: syz.4.6538 Not tainted syzkaller #0 PREEMPT(full) [ 834.716445][T27639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.716455][T27639] Call Trace: [ 834.716462][T27639] [ 834.716469][T27639] dump_stack_lvl+0xe8/0x150 [ 834.716493][T27639] should_fail_ex+0x412/0x560 [ 834.716515][T27639] should_failslab+0xa8/0x100 [ 834.716534][T27639] __kmalloc_cache_noprof+0x88/0x660 [ 834.716555][T27639] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 834.716573][T27639] ? sctp_add_bind_addr+0x8c/0x370 [ 834.716601][T27639] sctp_add_bind_addr+0x8c/0x370 [ 834.716628][T27639] sctp_copy_local_addr_list+0x314/0x4f0 [ 834.716656][T27639] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 834.716679][T27639] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 834.716703][T27639] ? sctp_v6_is_any+0x64/0x80 [ 834.716721][T27639] ? sctp_copy_one_addr+0x93/0x360 [ 834.716748][T27639] sctp_bind_addr_copy+0xb3/0x3c0 [ 834.716783][T27639] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 834.716813][T27639] sctp_connect_new_asoc+0x2ff/0x6b0 [ 834.716836][T27639] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 834.716863][T27639] ? __local_bh_enable_ip+0xd0/0x130 [ 834.716879][T27639] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 834.716904][T27639] ? security_sctp_bind_connect+0x7e/0x2c0 [ 834.716928][T27639] sctp_sendmsg+0x1576/0x2c50 [ 834.716946][T27639] ? unwind_next_frame+0xa6/0x2550 [ 834.716979][T27639] ? __pfx_sctp_sendmsg+0x10/0x10 [ 834.717001][T27639] ? aa_sk_perm+0x6d5/0x900 [ 834.717030][T27639] ? __pfx_aa_sk_perm+0x10/0x10 [ 834.717055][T27639] ? sock_rps_record_flow+0x19/0x350 [ 834.717082][T27639] ? inet_sendmsg+0x2f4/0x370 [ 834.717109][T27639] ____sys_sendmsg+0x80a/0x9f0 [ 834.717134][T27639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.717160][T27639] ? import_iovec+0x73/0xa0 [ 834.717181][T27639] ___sys_sendmsg+0x2a5/0x360 [ 834.717198][T27639] ? __lock_acquire+0x6b5/0x2cf0 [ 834.717228][T27639] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.717278][T27639] ? __fget_files+0x2a/0x420 [ 834.717296][T27639] ? __fget_files+0x3a0/0x420 [ 834.717323][T27639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.717344][T27639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.717373][T27639] ? __pfx_ksys_write+0x10/0x10 [ 834.717405][T27639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.717424][T27639] do_syscall_64+0x174/0x580 [ 834.717442][T27639] ? trace_irq_disable+0x3b/0x140 [ 834.717465][T27639] ? clear_bhb_loop+0x40/0x90 [ 834.717486][T27639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.717501][T27639] RIP: 0033:0x7f0cd519ce59 [ 834.717519][T27639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.717532][T27639] RSP: 002b:00007f0cd5f8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.717551][T27639] RAX: ffffffffffffffda RBX: 00007f0cd5415fa0 RCX: 00007f0cd519ce59 [ 834.717562][T27639] RDX: 0000000000040085 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 834.717572][T27639] RBP: 00007f0cd5f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 834.717582][T27639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.717591][T27639] R13: 00007f0cd5416038 R14: 00007f0cd5415fa0 R15: 00007ffd8c155918 [ 834.717616][T27639] [ 835.119467][T27644] FAULT_INJECTION: forcing a failure. [ 835.119467][T27644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.140774][T27644] CPU: 1 UID: 0 PID: 27644 Comm: syz.3.6540 Not tainted syzkaller #0 PREEMPT(full) [ 835.140798][T27644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 835.140808][T27644] Call Trace: [ 835.140816][T27644] [ 835.140823][T27644] dump_stack_lvl+0xe8/0x150 [ 835.140850][T27644] should_fail_ex+0x412/0x560 [ 835.140880][T27644] _copy_from_iter+0x1d3/0x1670 [ 835.140897][T27644] ? sctp_chunkify+0x5a/0x260 [ 835.140914][T27644] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 835.140944][T27644] ? __pfx__copy_from_iter+0x10/0x10 [ 835.140961][T27644] ? __asan_memcpy+0x40/0x70 [ 835.140982][T27644] ? sctp_make_datafrag_empty+0x184/0x240 [ 835.141001][T27644] ? skb_put+0x11b/0x210 [ 835.141023][T27644] sctp_user_addto_chunk+0x87/0x240 [ 835.141046][T27644] sctp_datamsg_from_user+0x748/0xef0 [ 835.141088][T27644] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 835.141133][T27644] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 835.141154][T27644] ? sctp_assoc_add_peer+0xcad/0x13b0 [ 835.141185][T27644] sctp_sendmsg+0x1b85/0x2c50 [ 835.141219][T27644] ? __pfx_sctp_sendmsg+0x10/0x10 [ 835.141242][T27644] ? __might_fault+0xaf/0x130 [ 835.141269][T27644] ? __pfx_aa_sk_perm+0x10/0x10 [ 835.141294][T27644] ? sock_rps_record_flow+0x19/0x350 [ 835.141320][T27644] ? inet_sendmsg+0x2f4/0x370 [ 835.141341][T27644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 835.141365][T27644] ____sys_sendmsg+0x80a/0x9f0 [ 835.141393][T27644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.141421][T27644] ? import_iovec+0x73/0xa0 [ 835.141444][T27644] ___sys_sendmsg+0x2a5/0x360 [ 835.141461][T27644] ? __lock_acquire+0x6b5/0x2cf0 [ 835.141484][T27644] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.141538][T27644] ? __fget_files+0x2a/0x420 [ 835.141556][T27644] ? __fget_files+0x3a0/0x420 [ 835.141589][T27644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 835.141610][T27644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 835.141639][T27644] ? __pfx_ksys_write+0x10/0x10 [ 835.141670][T27644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.141688][T27644] do_syscall_64+0x174/0x580 [ 835.141706][T27644] ? trace_irq_disable+0x3b/0x140 [ 835.141729][T27644] ? clear_bhb_loop+0x40/0x90 [ 835.141750][T27644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.141766][T27644] RIP: 0033:0x7f953c99ce59 [ 835.141783][T27644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.141797][T27644] RSP: 002b:00007f953d80d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.141816][T27644] RAX: ffffffffffffffda RBX: 00007f953cc15fa0 RCX: 00007f953c99ce59 [ 835.141828][T27644] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 835.141839][T27644] RBP: 00007f953d80d090 R08: 0000000000000000 R09: 0000000000000000 [ 835.141849][T27644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.141864][T27644] R13: 00007f953cc16038 R14: 00007f953cc15fa0 R15: 00007ffcf64ca378 [ 835.141893][T27644] [ 835.536361][T27477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.547462][T27477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.559002][T27477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 835.627010][T27477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.640741][T27477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.651159][T27477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 835.693599][T27655] x_tables: duplicate underflow at hook 3 [ 835.854097][T27658] FAULT_INJECTION: forcing a failure. [ 835.854097][T27658] name failslab, interval 1, probability 0, space 0, times 0 [ 835.940091][T27658] CPU: 0 UID: 0 PID: 27658 Comm: syz.2.6546 Not tainted syzkaller #0 PREEMPT(full) [ 835.940115][T27658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 835.940125][T27658] Call Trace: [ 835.940132][T27658] [ 835.940139][T27658] dump_stack_lvl+0xe8/0x150 [ 835.940164][T27658] should_fail_ex+0x412/0x560 [ 835.940187][T27658] should_failslab+0xa8/0x100 [ 835.940205][T27658] __kmalloc_cache_noprof+0x88/0x660 [ 835.940232][T27658] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 835.940252][T27658] ? __kmalloc_cache_noprof+0x15b/0x660 [ 835.940276][T27658] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 835.940328][T27658] genl_family_rcv_msg_doit+0x22a/0x330 [ 835.940361][T27658] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 835.940395][T27658] ? bpf_lsm_capable+0x9/0x20 [ 835.940412][T27658] ? security_capable+0x7e/0x2c0 [ 835.940441][T27658] genl_rcv_msg+0x61c/0x7a0 [ 835.940469][T27658] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.940489][T27658] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 835.940507][T27658] ? __pfx_ref_tracker_free+0x10/0x10 [ 835.940534][T27658] netlink_rcv_skb+0x232/0x4b0 [ 835.940555][T27658] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.940578][T27658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.940613][T27658] ? down_read+0x270/0x2e0 [ 835.940632][T27658] ? genl_rcv+0xd/0x40 [ 835.940655][T27658] genl_rcv+0x28/0x40 [ 835.940673][T27658] netlink_unicast+0x75c/0x8e0 [ 835.940701][T27658] netlink_sendmsg+0x813/0xb40 [ 835.940730][T27658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.940752][T27658] ? aa_sock_msg_perm+0xf1/0x1b0 [ 835.940783][T27658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 835.940807][T27658] ____sys_sendmsg+0x972/0x9f0 [ 835.940827][T27658] ? __might_fault+0xaf/0x130 [ 835.940853][T27658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.940881][T27658] ? import_iovec+0x73/0xa0 [ 835.940903][T27658] ___sys_sendmsg+0x2a5/0x360 [ 835.940921][T27658] ? __lock_acquire+0x6b5/0x2cf0 [ 835.940944][T27658] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.940997][T27658] ? __fget_files+0x2a/0x420 [ 835.941014][T27658] ? __fget_files+0x3a0/0x420 [ 835.941043][T27658] __x64_sys_sendmsg+0x1bd/0x2a0 [ 835.941065][T27658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 835.941093][T27658] ? __pfx_ksys_write+0x10/0x10 [ 835.941129][T27658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.941147][T27658] do_syscall_64+0x174/0x580 [ 835.941165][T27658] ? trace_irq_disable+0x3b/0x140 [ 835.941187][T27658] ? clear_bhb_loop+0x40/0x90 [ 835.941208][T27658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.941223][T27658] RIP: 0033:0x7f22a3d9ce59 [ 835.941240][T27658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.941255][T27658] RSP: 002b:00007f22a4c65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.941273][T27658] RAX: ffffffffffffffda RBX: 00007f22a4015fa0 RCX: 00007f22a3d9ce59 [ 835.941285][T27658] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 835.941296][T27658] RBP: 00007f22a4c65090 R08: 0000000000000000 R09: 0000000000000000 [ 835.941306][T27658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.941316][T27658] R13: 00007f22a4016038 R14: 00007f22a4015fa0 R15: 00007ffe0f7b2838 [ 835.941344][T27658] [ 836.101467][T27477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 836.355411][ T5635] Bluetooth: hci1: command tx timeout [ 836.467301][T27477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 836.497950][T27477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 836.540550][T27477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 836.568724][T27477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 836.628377][T27477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.694749][T27477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 836.701971][T27685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6554'. [ 836.722043][T27685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6554'. [ 836.734930][T27477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.743408][T27668] lo speed is unknown, defaulting to 1000 [ 836.754272][T27685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6554'. [ 836.765965][T27685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6554'. [ 836.780331][T27668] lo speed is unknown, defaulting to 1000 [ 836.856666][T27695] FAULT_INJECTION: forcing a failure. [ 836.856666][T27695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.884639][T27695] CPU: 0 UID: 0 PID: 27695 Comm: syz.4.6556 Not tainted syzkaller #0 PREEMPT(full) [ 836.884664][T27695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 836.884674][T27695] Call Trace: [ 836.884681][T27695] [ 836.884689][T27695] dump_stack_lvl+0xe8/0x150 [ 836.884714][T27695] should_fail_ex+0x412/0x560 [ 836.884737][T27695] _copy_from_user+0x2d/0xb0 [ 836.884758][T27695] __sys_bpf+0x229/0x950 [ 836.884782][T27695] ? __pfx___sys_bpf+0x10/0x10 [ 836.884819][T27695] ? ksys_write+0x242/0x270 [ 836.884844][T27695] ? __pfx_ksys_write+0x10/0x10 [ 836.884871][T27695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.884888][T27695] __x64_sys_bpf+0x7c/0x90 [ 836.884911][T27695] do_syscall_64+0x174/0x580 [ 836.884931][T27695] ? trace_irq_disable+0x3b/0x140 [ 836.884952][T27695] ? clear_bhb_loop+0x40/0x90 [ 836.884973][T27695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.884989][T27695] RIP: 0033:0x7f0cd519ce59 [ 836.885005][T27695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.885019][T27695] RSP: 002b:00007f0cd5f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.885037][T27695] RAX: ffffffffffffffda RBX: 00007f0cd5415fa0 RCX: 00007f0cd519ce59 [ 836.885049][T27695] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 836.885060][T27695] RBP: 00007f0cd5f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 836.885070][T27695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.885080][T27695] R13: 00007f0cd5416038 R14: 00007f0cd5415fa0 R15: 00007ffd8c155918 [ 836.885106][T27695] [ 837.014476][T27477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.130202][T27477] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.187492][T17746] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.194717][T17746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.272333][T17735] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.279555][T17735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.754885][T27716] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6563'. [ 837.802251][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6563'. [ 838.014842][T27716] veth3: entered allmulticast mode [ 838.255315][T27727] netlink: 'syz.2.6566': attribute type 1 has an invalid length. [ 838.427503][T27727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.434481][ T5635] Bluetooth: hci1: command tx timeout [ 838.520846][T27727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6566'. [ 838.586927][T27732] bond0: (slave veth3): Enslaving as an active interface with a down link [ 838.693539][T27733] bond0: (slave veth5): Enslaving as an active interface with a down link [ 838.794102][T27727] bond0: (slave bridge1): Enslaving as an active interface with a down link [ 838.867813][T27477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.918257][T27745] Bluetooth: MGMT ver 1.23 [ 838.958662][T27747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6572'. [ 839.027977][T27750] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 839.122528][T27477] veth0_vlan: entered promiscuous mode [ 839.165585][T27477] veth1_vlan: entered promiscuous mode [ 839.211924][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6577'. [ 839.274727][T27477] veth0_macvtap: entered promiscuous mode [ 839.317658][T27477] veth1_macvtap: entered promiscuous mode [ 839.390094][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 839.409068][T27768] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 839.537700][ T530] bridge_slave_1: left allmulticast mode [ 839.568936][ T530] bridge_slave_1: left promiscuous mode [ 839.606126][ T530] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.657030][ T530] bridge_slave_0: left allmulticast mode [ 839.675221][ T530] bridge_slave_0: left promiscuous mode [ 839.691747][ T530] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.788362][T27793] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6583'. [ 840.975224][ T530] erspan0 (unregistering): left promiscuous mode [ 841.008959][ T530] gretap0 (unregistering): left promiscuous mode [ 841.053370][ T530] bond3 (unregistering): (slave gretap1): Releasing active interface [ 841.183960][ T530] bond6 (unregistering): (slave geneve2): Releasing active interface [ 841.199189][ T530] geneve2 (unregistering): left promiscuous mode [ 841.206070][ T530] geneve2 (unregistering): left allmulticast mode [ 841.317861][ T530] bond1 (unregistering): Released all slaves [ 841.407140][ T530] bond0 (unregistering): Released all slaves [ 841.429634][ T530] bond2 (unregistering): (slave veth3): Releasing active interface [ 841.441064][ T530] bond2 (unregistering): Released all slaves [ 841.460570][ T530] bond3 (unregistering): Released all slaves [ 841.480306][ T530] bond4 (unregistering): Released all slaves [ 841.499601][ T530] bond5 (unregistering): Released all slaves [ 841.524447][ T530] bond6 (unregistering): Released all slaves [ 841.573960][T27803] ip6tnl1: entered promiscuous mode [ 841.597867][T27477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.686847][T27477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.696711][T27815] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 841.731395][T27815] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 841.893859][ T530] tipc: Left network mode [ 841.899302][T17743] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.940024][T17743] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.001945][T17743] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.031490][T17743] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.415819][T27841] FAULT_INJECTION: forcing a failure. [ 842.415819][T27841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.441988][T27841] CPU: 0 UID: 0 PID: 27841 Comm: syz.3.6599 Not tainted syzkaller #0 PREEMPT(full) [ 842.442015][T27841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.442025][T27841] Call Trace: [ 842.442033][T27841] [ 842.442041][T27841] dump_stack_lvl+0xe8/0x150 [ 842.442074][T27841] should_fail_ex+0x412/0x560 [ 842.442098][T27841] _copy_from_user+0x2d/0xb0 [ 842.442119][T27841] ___sys_sendmsg+0x1c6/0x360 [ 842.442139][T27841] ? __lock_acquire+0x6b5/0x2cf0 [ 842.442167][T27841] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.442219][T27841] ? __fget_files+0x2a/0x420 [ 842.442239][T27841] ? __fget_files+0x3a0/0x420 [ 842.442268][T27841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 842.442287][T27841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 842.442313][T27841] ? __pfx_ksys_write+0x10/0x10 [ 842.442341][T27841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.442358][T27841] do_syscall_64+0x174/0x580 [ 842.442375][T27841] ? trace_irq_disable+0x3b/0x140 [ 842.442396][T27841] ? clear_bhb_loop+0x40/0x90 [ 842.442415][T27841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.442430][T27841] RIP: 0033:0x7f953c99ce59 [ 842.442445][T27841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.442459][T27841] RSP: 002b:00007f953d80d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.442476][T27841] RAX: ffffffffffffffda RBX: 00007f953cc15fa0 RCX: 00007f953c99ce59 [ 842.442486][T27841] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 842.442495][T27841] RBP: 00007f953d80d090 R08: 0000000000000000 R09: 0000000000000000 [ 842.442503][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.442512][T27841] R13: 00007f953cc16038 R14: 00007f953cc15fa0 R15: 00007ffcf64ca378 [ 842.442537][T27841] [ 842.581617][T27846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.598927][T27847] netlink: 'syz.2.6596': attribute type 4 has an invalid length. [ 842.846702][T17747] wlan1: Trigger new scan to find an IBSS to join [ 843.019704][T27860] __nla_validate_parse: 2 callbacks suppressed [ 843.019723][T27860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6603'. [ 843.067121][T17748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.085957][T17748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.132984][T27860] ip6gre1: entered promiscuous mode [ 843.159633][T27860] ip6gre1: entered allmulticast mode [ 843.276589][T17748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.297494][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6605'. [ 843.298308][T17748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.366054][T17750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.388097][ T24] IPVS: starting estimator thread 0... [ 843.411824][T17750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.425173][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.480170][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.500134][T27865] IPVS: using max 30 ests per chain, 72000 per kthread [ 843.512814][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 843.662442][T27869] netlink: 'syz.1.6607': attribute type 3 has an invalid length. [ 843.686093][T27869] netlink: 'syz.1.6607': attribute type 3 has an invalid length. [ 843.696984][T27869] netlink: 'syz.1.6607': attribute type 1 has an invalid length. [ 843.707227][T27869] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6607'. [ 843.749233][T27871] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6486'. [ 844.034877][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6613'. [ 844.302517][ T530] veth1_vlan: left promiscuous mode [ 844.314848][ T530] veth0_vlan: left promiscuous mode [ 844.509493][ T530] team0 (unregistering): Port device veth1_to_hsr removed [ 844.626369][ T530] team0 (unregistering): Port device team_slave_1 removed [ 845.337878][ T530] IPVS: stop unused estimator thread 0... [ 845.558576][T27936] netlink: 'syz.1.6629': attribute type 6 has an invalid length. [ 845.596578][T27936] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6629'. [ 845.756497][T27940] netlink: zone id is out of range [ 845.764109][T27940] netlink: zone id is out of range [ 845.769526][T27940] netlink: zone id is out of range [ 845.776001][T27940] netlink: zone id is out of range [ 845.781592][T27940] netlink: zone id is out of range [ 845.786984][T27940] netlink: zone id is out of range [ 845.809590][T27940] netlink: zone id is out of range [ 845.873524][T17746] wlan1: Trigger new scan to find an IBSS to join [ 846.426691][T27967] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 846.453749][T27969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6638'. [ 846.463017][T27969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6638'. [ 846.591241][T27969] gretap0: entered promiscuous mode [ 846.613418][T27969] gretap0: left promiscuous mode [ 846.702486][T27975] syzkaller0: entered promiscuous mode [ 846.741344][T27975] syzkaller0: entered allmulticast mode [ 846.844377][T17743] wlan1: Creating new IBSS network, BSSID da:a8:a2:7b:8a:34 [ 847.150162][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 847.570529][T28014] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 847.927413][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 847.945832][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6657'. [ 848.303611][T28046] FAULT_INJECTION: forcing a failure. [ 848.303611][T28046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.358455][T28046] CPU: 1 UID: 0 PID: 28046 Comm: syz.2.6664 Not tainted syzkaller #0 PREEMPT(full) [ 848.358480][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 848.358491][T28046] Call Trace: [ 848.358499][T28046] [ 848.358506][T28046] dump_stack_lvl+0xe8/0x150 [ 848.358532][T28046] should_fail_ex+0x412/0x560 [ 848.358554][T28046] _copy_from_user+0x2d/0xb0 [ 848.358575][T28046] ___sys_recvmsg+0x175/0x590 [ 848.358606][T28046] ? __pfx____sys_recvmsg+0x10/0x10 [ 848.358639][T28046] ? __fget_files+0x2a/0x420 [ 848.358688][T28046] do_recvmmsg+0x334/0x800 [ 848.358715][T28046] ? __pfx_do_recvmmsg+0x10/0x10 [ 848.358746][T28046] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 848.358782][T28046] __x64_sys_recvmmsg+0x198/0x250 [ 848.358804][T28046] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 848.358832][T28046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.358850][T28046] do_syscall_64+0x174/0x580 [ 848.358867][T28046] ? trace_irq_disable+0x3b/0x140 [ 848.358890][T28046] ? clear_bhb_loop+0x40/0x90 [ 848.358911][T28046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.358927][T28046] RIP: 0033:0x7f22a3d9ce59 [ 848.358943][T28046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.358957][T28046] RSP: 002b:00007f22a4c65028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 848.358976][T28046] RAX: ffffffffffffffda RBX: 00007f22a4015fa0 RCX: 00007f22a3d9ce59 [ 848.358988][T28046] RDX: 00000000040000c2 RSI: 0000200000004480 RDI: 0000000000000003 [ 848.358999][T28046] RBP: 00007f22a4c65090 R08: 0000000000000000 R09: 0000000000000000 [ 848.359008][T28046] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 848.359016][T28046] R13: 00007f22a4016038 R14: 00007f22a4015fa0 R15: 00007ffe0f7b2838 [ 848.359044][T28046] [ 848.582064][T28055] net_ratelimit: 169 callbacks suppressed [ 848.582083][T28055] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 848.619768][ T9] IPVS: starting estimator thread 0... [ 848.730953][T28059] IPVS: using max 33 ests per chain, 79200 per kthread [ 849.009597][T28078] netlink: 'syz.3.6672': attribute type 2 has an invalid length. [ 849.020688][T28079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6675'. [ 849.024266][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6673'. [ 849.671336][T28102] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6681'. [ 849.681176][T28102] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 850.313874][T28128] netlink: 'syz.3.6689': attribute type 1 has an invalid length. [ 850.372636][T28128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 850.475373][T28138] netlink: 'syz.3.6689': attribute type 10 has an invalid length. [ 850.505426][T28138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6689'. [ 850.552308][T28138] dummy0: entered promiscuous mode [ 850.624554][T28131] bond2: (slave veth3): Enslaving as an active interface with a down link [ 850.644639][T28128] dummy0: left promiscuous mode [ 850.714448][T28128] bond2: (slave dummy0): making interface the new active one [ 850.732200][T28128] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 850.809081][T28149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.845115][T28149] batadv_slave_1: entered promiscuous mode [ 851.383857][T28176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 851.655397][T28182] netlink: 'syz.3.6708': attribute type 14 has an invalid length. [ 851.711278][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 851.992628][T28189] syzkaller0: entered promiscuous mode [ 852.008939][T28189] syzkaller0: entered allmulticast mode [ 852.065657][T28191] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 852.099902][T28189] tipc: Started in network mode [ 852.131753][T28189] tipc: Node identity be19837c6a75, cluster identity 4711 [ 852.167209][T28189] tipc: Enabled bearer , priority 0 [ 852.218429][T28187] tipc: Resetting bearer [ 852.327727][T28187] tipc: Disabling bearer [ 852.396596][T28215] FAULT_INJECTION: forcing a failure. [ 852.396596][T28215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.432211][T28215] CPU: 0 UID: 0 PID: 28215 Comm: syz.0.6719 Not tainted syzkaller #0 PREEMPT(full) [ 852.432237][T28215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 852.432247][T28215] Call Trace: [ 852.432255][T28215] [ 852.432263][T28215] dump_stack_lvl+0xe8/0x150 [ 852.432287][T28215] should_fail_ex+0x412/0x560 [ 852.432310][T28215] _copy_from_user+0x2d/0xb0 [ 852.432329][T28215] do_sock_getsockopt+0x200/0x7e0 [ 852.432352][T28215] ? __pfx_vfs_write+0x10/0x10 [ 852.432374][T28215] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 852.432392][T28215] ? do_sys_openat2+0x14c/0x200 [ 852.432409][T28215] ? kmem_cache_free+0x182/0x650 [ 852.432429][T28215] ? fd_install+0x94/0x3d0 [ 852.432461][T28215] ? ksys_write+0x1fc/0x270 [ 852.432495][T28215] __x64_sys_getsockopt+0x1a4/0x240 [ 852.432519][T28215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.432537][T28215] do_syscall_64+0x174/0x580 [ 852.432555][T28215] ? trace_irq_disable+0x3b/0x140 [ 852.432577][T28215] ? clear_bhb_loop+0x40/0x90 [ 852.432597][T28215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.432613][T28215] RIP: 0033:0x7f2ceed9ce59 [ 852.432630][T28215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.432644][T28215] RSP: 002b:00007f2cefc80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 852.432661][T28215] RAX: ffffffffffffffda RBX: 00007f2cef015fa0 RCX: 00007f2ceed9ce59 [ 852.432673][T28215] RDX: 0000000000000001 RSI: 400000000000003a RDI: 0000000000000004 [ 852.432683][T28215] RBP: 00007f2cefc80090 R08: 0000000000000000 R09: 0000000000000000 [ 852.432693][T28215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.432703][T28215] R13: 00007f2cef016038 R14: 00007f2cef015fa0 R15: 00007ffed6765fc8 [ 852.432732][T28215] [ 852.779538][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6722'. [ 852.792582][T28224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6721'. [ 852.928668][T28227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6724'. [ 852.996922][T28229] FAULT_INJECTION: forcing a failure. [ 852.996922][T28229] name failslab, interval 1, probability 0, space 0, times 0 [ 853.037638][T28229] CPU: 1 UID: 0 PID: 28229 Comm: syz.1.6725 Not tainted syzkaller #0 PREEMPT(full) [ 853.037660][T28229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 853.037669][T28229] Call Trace: [ 853.037675][T28229] [ 853.037682][T28229] dump_stack_lvl+0xe8/0x150 [ 853.037705][T28229] should_fail_ex+0x412/0x560 [ 853.037725][T28229] should_failslab+0xa8/0x100 [ 853.037740][T28229] __kmalloc_cache_noprof+0x88/0x660 [ 853.037758][T28229] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 853.037773][T28229] ? sctp_add_bind_addr+0x8c/0x370 [ 853.037796][T28229] sctp_add_bind_addr+0x8c/0x370 [ 853.037817][T28229] sctp_copy_local_addr_list+0x314/0x4f0 [ 853.037839][T28229] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 853.037858][T28229] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 853.037877][T28229] ? sctp_v6_is_any+0x64/0x80 [ 853.037900][T28229] ? sctp_copy_one_addr+0x93/0x360 [ 853.037920][T28229] sctp_bind_addr_copy+0xb3/0x3c0 [ 853.037939][T28229] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 853.037961][T28229] sctp_connect_new_asoc+0x2ff/0x6b0 [ 853.037979][T28229] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 853.038000][T28229] ? __local_bh_enable_ip+0xd0/0x130 [ 853.038013][T28229] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 853.038032][T28229] ? security_sctp_bind_connect+0x7e/0x2c0 [ 853.038053][T28229] sctp_sendmsg+0x1576/0x2c50 [ 853.038068][T28229] ? unwind_next_frame+0xa6/0x2550 [ 853.038100][T28229] ? __pfx_sctp_sendmsg+0x10/0x10 [ 853.038121][T28229] ? aa_sk_perm+0x6d5/0x900 [ 853.038145][T28229] ? __pfx_aa_sk_perm+0x10/0x10 [ 853.038165][T28229] ? sock_rps_record_flow+0x19/0x350 [ 853.038188][T28229] ? inet_sendmsg+0x2f4/0x370 [ 853.038212][T28229] ____sys_sendmsg+0x80a/0x9f0 [ 853.038239][T28229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.038266][T28229] ? import_iovec+0x73/0xa0 [ 853.038286][T28229] ___sys_sendmsg+0x2a5/0x360 [ 853.038303][T28229] ? __lock_acquire+0x6b5/0x2cf0 [ 853.038319][T28229] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.038366][T28229] ? __fget_files+0x2a/0x420 [ 853.038397][T28229] ? __fget_files+0x3a0/0x420 [ 853.038424][T28229] __x64_sys_sendmsg+0x1bd/0x2a0 [ 853.038445][T28229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.038472][T28229] ? __pfx_ksys_write+0x10/0x10 [ 853.038504][T28229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.038522][T28229] do_syscall_64+0x174/0x580 [ 853.038539][T28229] ? trace_irq_disable+0x3b/0x140 [ 853.038561][T28229] ? clear_bhb_loop+0x40/0x90 [ 853.038582][T28229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.038596][T28229] RIP: 0033:0x7fe96ed9ce59 [ 853.038612][T28229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.038624][T28229] RSP: 002b:00007fe96fcbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.038640][T28229] RAX: ffffffffffffffda RBX: 00007fe96f015fa0 RCX: 00007fe96ed9ce59 [ 853.038651][T28229] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 853.038661][T28229] RBP: 00007fe96fcbb090 R08: 0000000000000000 R09: 0000000000000000 [ 853.038671][T28229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.038680][T28229] R13: 00007fe96f016038 R14: 00007fe96f015fa0 R15: 00007ffe81911928 [ 853.038708][T28229] [ 853.566501][T28235] netlink: 164476 bytes leftover after parsing attributes in process `syz.1.6726'. [ 853.930642][T28258] netlink: 'syz.4.6736': attribute type 8 has an invalid length. [ 853.947015][T28258] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.948352][T28254] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 853.954787][T28258] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.183490][T28269] bridge0: port 3(vlan2) entered blocking state [ 854.190204][T28269] bridge0: port 3(vlan2) entered disabled state [ 854.196944][T28269] vlan2: entered allmulticast mode [ 854.202574][T28269] geneve0: entered allmulticast mode [ 854.210729][T28269] vlan2: entered promiscuous mode [ 854.216069][T28269] geneve0: entered promiscuous mode [ 854.484236][T28275] bond1: option packets_per_slave: invalid value (1048582) [ 854.491643][T28275] bond1: option packets_per_slave: allowed values 0 - 65535 [ 854.527337][T28275] bond1 (unregistering): Released all slaves [ 854.750576][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 854.758493][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.767365][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 854.952917][T28308] v: renamed from veth0_vlan (while UP) [ 855.057163][T28312] netlink: 'syz.2.6755': attribute type 1 has an invalid length. [ 855.095328][T28312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.124361][T28312] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 855.140763][T28312] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 855.151014][T28312] netlink: 'syz.2.6755': attribute type 10 has an invalid length. [ 855.159118][T28312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6755'. [ 855.170101][T28312] bond1: (slave dummy0): Releasing backup interface [ 855.224746][T28316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6756'. [ 855.248671][T28316] syzkaller0: entered allmulticast mode [ 855.348735][T28318] netlink: 592 bytes leftover after parsing attributes in process `syz.2.6757'. [ 855.543437][T28324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6760'. [ 855.709482][T28326] FAULT_INJECTION: forcing a failure. [ 855.709482][T28326] name failslab, interval 1, probability 0, space 0, times 0 [ 855.723520][T28326] CPU: 1 UID: 0 PID: 28326 Comm: syz.2.6761 Not tainted syzkaller #0 PREEMPT(full) [ 855.723546][T28326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 855.723557][T28326] Call Trace: [ 855.723564][T28326] [ 855.723573][T28326] dump_stack_lvl+0xe8/0x150 [ 855.723610][T28326] should_fail_ex+0x412/0x560 [ 855.723633][T28326] should_failslab+0xa8/0x100 [ 855.723653][T28326] __kmalloc_noprof+0xe8/0x760 [ 855.723678][T28326] ? bpf_test_init+0x9f/0x150 [ 855.723707][T28326] bpf_test_init+0x9f/0x150 [ 855.723728][T28326] bpf_prog_test_run_xdp+0x529/0x1160 [ 855.723761][T28326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 855.723785][T28326] ? __fget_files+0x2a/0x420 [ 855.723809][T28326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 855.723828][T28326] bpf_prog_test_run+0x2c7/0x340 [ 855.723848][T28326] __sys_bpf+0x643/0x950 [ 855.723873][T28326] ? __pfx___sys_bpf+0x10/0x10 [ 855.723915][T28326] ? rcu_is_watching+0x15/0xb0 [ 855.723940][T28326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.723958][T28326] __x64_sys_bpf+0x7c/0x90 [ 855.723976][T28326] do_syscall_64+0x174/0x580 [ 855.723995][T28326] ? trace_irq_disable+0x3b/0x140 [ 855.724016][T28326] ? clear_bhb_loop+0x40/0x90 [ 855.724035][T28326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.724049][T28326] RIP: 0033:0x7f22a3d9ce59 [ 855.724064][T28326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.724075][T28326] RSP: 002b:00007f22a4c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.724092][T28326] RAX: ffffffffffffffda RBX: 00007f22a4015fa0 RCX: 00007f22a3d9ce59 [ 855.724103][T28326] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 855.724112][T28326] RBP: 00007f22a4c65090 R08: 0000000000000000 R09: 0000000000000000 [ 855.724120][T28326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.724128][T28326] R13: 00007f22a4016038 R14: 00007f22a4015fa0 R15: 00007ffe0f7b2838 [ 855.724170][T28326] [ 856.182055][T28343] netlink: 592 bytes leftover after parsing attributes in process `syz.4.6768'. [ 857.116037][T28262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.511358][T28371] FAULT_INJECTION: forcing a failure. [ 857.511358][T28371] name failslab, interval 1, probability 0, space 0, times 0 [ 857.542005][T28371] CPU: 0 UID: 0 PID: 28371 Comm: syz.3.6777 Not tainted syzkaller #0 PREEMPT(full) [ 857.542031][T28371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.542041][T28371] Call Trace: [ 857.542048][T28371] [ 857.542056][T28371] dump_stack_lvl+0xe8/0x150 [ 857.542083][T28371] should_fail_ex+0x412/0x560 [ 857.542105][T28371] should_failslab+0xa8/0x100 [ 857.542132][T28371] __kmalloc_cache_noprof+0x88/0x660 [ 857.542156][T28371] ? sctp_add_bind_addr+0x8c/0x370 [ 857.542186][T28371] sctp_add_bind_addr+0x8c/0x370 [ 857.542214][T28371] sctp_copy_local_addr_list+0x314/0x4f0 [ 857.542242][T28371] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 857.542266][T28371] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 857.542292][T28371] ? sctp_v6_is_any+0x64/0x80 [ 857.542310][T28371] ? sctp_copy_one_addr+0x93/0x360 [ 857.542337][T28371] sctp_bind_addr_copy+0xb3/0x3c0 [ 857.542359][T28371] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 857.542383][T28371] sctp_connect_new_asoc+0x2ff/0x6b0 [ 857.542407][T28371] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 857.542432][T28371] ? __local_bh_enable_ip+0xd0/0x130 [ 857.542447][T28371] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 857.542469][T28371] ? security_sctp_bind_connect+0x7e/0x2c0 [ 857.542493][T28371] sctp_sendmsg+0x1576/0x2c50 [ 857.542514][T28371] ? unwind_next_frame+0xa6/0x2550 [ 857.542547][T28371] ? __pfx_sctp_sendmsg+0x10/0x10 [ 857.542570][T28371] ? aa_sk_perm+0x6d5/0x900 [ 857.542600][T28371] ? __pfx_aa_sk_perm+0x10/0x10 [ 857.542624][T28371] ? sock_rps_record_flow+0x19/0x350 [ 857.542650][T28371] ? inet_sendmsg+0x2f4/0x370 [ 857.542677][T28371] ____sys_sendmsg+0x80a/0x9f0 [ 857.542701][T28371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 857.542729][T28371] ? import_iovec+0x73/0xa0 [ 857.542752][T28371] ___sys_sendmsg+0x2a5/0x360 [ 857.542770][T28371] ? __lock_acquire+0x6b5/0x2cf0 [ 857.542791][T28371] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.542844][T28371] ? __fget_files+0x2a/0x420 [ 857.542863][T28371] ? __fget_files+0x3a0/0x420 [ 857.542892][T28371] __x64_sys_sendmsg+0x1bd/0x2a0 [ 857.542914][T28371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 857.542942][T28371] ? __pfx_ksys_write+0x10/0x10 [ 857.542972][T28371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.542991][T28371] do_syscall_64+0x174/0x580 [ 857.543008][T28371] ? trace_irq_disable+0x3b/0x140 [ 857.543031][T28371] ? clear_bhb_loop+0x40/0x90 [ 857.543051][T28371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.543067][T28371] RIP: 0033:0x7f953c99ce59 [ 857.543083][T28371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.543096][T28371] RSP: 002b:00007f953d80d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.543121][T28371] RAX: ffffffffffffffda RBX: 00007f953cc15fa0 RCX: 00007f953c99ce59 [ 857.543133][T28371] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000005 [ 857.543144][T28371] RBP: 00007f953d80d090 R08: 0000000000000000 R09: 0000000000000000 [ 857.543154][T28371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 857.543164][T28371] R13: 00007f953cc16038 R14: 00007f953cc15fa0 R15: 00007ffcf64ca378 [ 857.543193][T28371] [ 858.006621][T28382] netlink: 592 bytes leftover after parsing attributes in process `syz.0.6780'. [ 859.245875][T28418] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 860.043119][T28434] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 860.197777][T28434] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 860.494205][T17748] wlan1: Selected IBSS BSSID da:a8:a2:7b:8a:34 based on configured SSID [ 861.213629][T28457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6801'. [ 861.283388][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6803'. [ 861.337255][T28457] ip6gre1: entered promiscuous mode [ 861.366558][T28457] ip6gre1: entered allmulticast mode [ 861.457847][T17743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.497263][T26571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.506610][T17743] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 863.270466][T28483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6807'. [ 863.732740][T12836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 865.791991][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 867.077082][ C0] sched: DL replenish lagged too much [ 869.482753][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 873.963241][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 880.364444][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 888.577273][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 888.870698][ T5813] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 889.963028][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 898.910829][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 920.676567][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 962.277162][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 967.396198][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 972.523441][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 982.754053][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1013.476542][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1036.029836][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1036.037181][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27477/1:b..l [ 1036.045949][ C1] rcu: (detected by 1, t=10503 jiffies, g=154033, q=1275282 ncpus=2) [ 1036.054132][ C1] task:syz-executor state:R running task stack:21712 pid:27477 tgid:27477 ppid:1 task_flags:0x40054c flags:0x00080002 [ 1036.069188][ C1] Call Trace: [ 1036.072515][ C1] [ 1036.075468][ C1] __schedule+0x1821/0x5740 [ 1036.080001][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1036.084981][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1036.089946][ C1] ? __pfx___schedule+0x10/0x10 [ 1036.094832][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1036.099887][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1036.104933][ C1] irqentry_exit+0x14f/0x8b0 [ 1036.109655][ C1] ? trace_irq_disable+0x3b/0x140 [ 1036.114731][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1036.120836][ C1] RIP: 0010:unwind_next_frame+0xda5/0x2550 [ 1036.126684][ C1] Code: 7c 24 68 48 89 9c 24 80 00 00 00 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 <74> 08 48 89 df e8 c1 1f ba 00 48 89 5c 24 60 4c 89 64 24 18 49 8d [ 1036.146347][ C1] RSP: 0018:ffffc900048cf0d8 EFLAGS: 00000246 [ 1036.152453][ C1] RAX: dffffc0000000000 RBX: ffffc900048cf1b8 RCX: ffffffff904a0b3c [ 1036.160453][ C1] RDX: ffffffff90c614fa RSI: 0000000000000002 RDI: ffffffff8c28a600 [ 1036.168530][ C1] RBP: 1ffff92000919e36 R08: 0000000000000010 R09: ffffffff8e95cd20 [ 1036.176614][ C1] R10: ffffc900048cf1f8 R11: ffffffff81b0e210 R12: ffffc900048cfb00 [ 1036.184609][ C1] R13: 1ffff92000919e37 R14: ffffc900048cf1a8 R15: ffffc900048c8000 [ 1036.192605][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1036.198808][ C1] ? unwind_next_frame+0xd5/0x2550 [ 1036.203960][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1036.209116][ C1] ? exit_mm+0x1f6/0x2d0 [ 1036.213387][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1036.219570][ C1] arch_stack_walk+0x11b/0x150 [ 1036.224367][ C1] ? exit_mm+0x1f6/0x2d0 [ 1036.228639][ C1] ? fill_pool+0x156/0x580 [ 1036.233077][ C1] stack_trace_save+0xa9/0x100 [ 1036.237867][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1036.243275][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1036.248767][ C1] ? fill_pool+0x156/0x580 [ 1036.253221][ C1] kasan_save_track+0x3e/0x80 [ 1036.257930][ C1] ? kasan_save_track+0x3e/0x80 [ 1036.262800][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1036.267857][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 1036.273575][ C1] ? fill_pool+0x156/0x580 [ 1036.278015][ C1] ? debug_object_activate+0x4a3/0x580 [ 1036.283496][ C1] ? call_rcu+0x43/0x890 [ 1036.287856][ C1] ? kmem_cache_free+0x462/0x650 [ 1036.292839][ C1] ? tear_down_vmas+0x312/0x520 [ 1036.297721][ C1] ? exit_mmap+0x4b6/0x9e0 [ 1036.302190][ C1] ? __mmput+0x118/0x430 [ 1036.306474][ C1] ? exit_mm+0x1f6/0x2d0 [ 1036.310786][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1036.315669][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1036.321156][ C1] ? fill_pool+0x156/0x580 [ 1036.325592][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1036.331258][ C1] fill_pool+0x156/0x580 [ 1036.335533][ C1] ? debug_object_activate+0x47a/0x580 [ 1036.341014][ C1] ? __pfx_fill_pool+0x10/0x10 [ 1036.345807][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1036.351981][ C1] ? debug_object_activate+0x47a/0x580 [ 1036.357499][ C1] debug_object_activate+0x4a3/0x580 [ 1036.363442][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1036.369627][ C1] ? tear_down_vmas+0x312/0x520 [ 1036.374618][ C1] call_rcu+0x43/0x890 [ 1036.379251][ C1] ? tear_down_vmas+0x312/0x520 [ 1036.384143][ C1] kmem_cache_free+0x462/0x650 [ 1036.389383][ C1] tear_down_vmas+0x312/0x520 [ 1036.394110][ C1] exit_mmap+0x4b6/0x9e0 [ 1036.398383][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1036.403181][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 1036.408372][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1036.413132][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 1036.418377][ C1] __mmput+0x118/0x430 [ 1036.422489][ C1] exit_mm+0x1f6/0x2d0 [ 1036.426608][ C1] do_exit+0x6a2/0x22c0 [ 1036.430801][ C1] ? cgroup1_freezing+0x20/0x350 [ 1036.435815][ C1] ? __pfx_do_exit+0x10/0x10 [ 1036.440453][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1036.445529][ C1] do_group_exit+0x21b/0x2d0 [ 1036.450329][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1036.455660][ C1] get_signal+0x1284/0x1330 [ 1036.460210][ C1] arch_do_signal_or_restart+0xbc/0x840 [ 1036.465808][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1036.472134][ C1] exit_to_user_mode_loop+0xa9/0x680 [ 1036.477453][ C1] ? rcu_is_watching+0x15/0xb0 [ 1036.482264][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.488364][ C1] do_syscall_64+0x353/0x580 [ 1036.492983][ C1] ? trace_irq_disable+0x3b/0x140 [ 1036.498058][ C1] ? clear_bhb_loop+0x40/0x90 [ 1036.502774][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.508948][ C1] RIP: 0033:0x7f2ceed3e3e7 [ 1036.513421][ C1] RSP: 002b:00007ffed6766328 EFLAGS: 00000293 ORIG_RAX: 000000000000003e [ 1036.521885][ C1] RAX: 0000000000000000 RBX: 000000000000005c RCX: 00007f2ceed3e3e7 [ 1036.529923][ C1] RDX: 0000000000000297 RSI: 0000000000000009 RDI: 00000000ffffffa4 [ 1036.537932][ C1] RBP: 00007ffed676636c R08: 00000000278c8c1f R09: 0000000000000000 [ 1036.545938][ C1] R10: 4000000000000000 R11: 0000000000000293 R12: 0000000000000022 [ 1036.553952][ C1] R13: 0000000000000064 R14: 00000000000d645f R15: 00007ffed67663c0 [ 1036.561979][ C1] [ 1041.070196][ T30] INFO: task kworker/u8:8:5778 blocked for more than 146 seconds. [ 1041.078066][ T30] Not tainted syzkaller #0