last executing test programs: 3m45.940507677s ago: executing program 0 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20008800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000000)) epoll_create1(0x80000) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8df00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00000085000000019c0600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3m45.476100302s ago: executing program 0 (id=1766): socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 3m44.394919241s ago: executing program 0 (id=1771): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@local, 0x4e22, 0x70e, 0x4e20, 0x9, 0x2, 0x30, 0x0, 0x50}, {0x0, 0x4fa1, 0x32, 0x45, 0x4a, 0x7, 0x4000000000005, 0x6}, {0x4, 0xe0a, 0x72c, 0xe16a}, 0x2, 0x6e6bb2, 0x73e4735fefb7cabf, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0xa, @in6=@private1, 0x3505, 0x1, 0x1, 0x8, 0xae8e, 0x6, 0x8}}, 0xe8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140), 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @remote}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x0, 0x3b33d35c87112db7, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x120, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe9, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}, @TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_ACT={0x80, 0x1, [@m_skbmod={0x7c, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x15, 0x6, "ac74a020e69210ef1e4b1bec96d0381169"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r7, 0xffffffffffffffff, 0x32, 0xc, 0x0, @void, @value=r8, @void, @void, r4}, 0x20) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x2, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x300], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3m40.184846366s ago: executing program 0 (id=1797): unshare(0x6020400) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) close(0x3) 3m39.880485373s ago: executing program 0 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x701, 0x20000, 0x25dfdbfb, {0x0, 0x0, 0xef, 0x0, 0x8003, 0x19608}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 3m39.430254862s ago: executing program 0 (id=1804): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000004) unshare(0x6a040000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000240)={0x23, 0x7, 0x37, 0xd8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x2, {{0xa, 0x4e22, 0x8, @mcast1, 0x6}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x97, @mcast2, 0x33}}, {{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80000001}}, {{0xa, 0x4e21, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e21, 0x7, @private2, 0x10}}, {{0xa, 0x4e20, 0xf6, @private2, 0x7}}, {{0xa, 0x4e21, 0x8, @loopback, 0x1aa00}}, {{0xa, 0x4e20, 0x1, @private2, 0x100}}]}, 0x410) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x46, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xab}]}]}, 0x1c}}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) socket$inet6_icmp(0xa, 0x2, 0x3a) 3m31.332134335s ago: executing program 3 (id=1834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3m30.988223477s ago: executing program 3 (id=1837): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000700000002"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r1, 0x100}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000400)={&(0x7f00000006c0)="cd62aa1a2c5cd7ecb03d9bb63e4b46e147db694de1af077daaf1529c86be71d45c050474f11ea3a0e31d31de6d74cb0f43658ce4656debc0bf128d3b9d75d6c72380d245b48fb12507d40b0819269b21efc58a61e4f37d246b230dbb08ba2b5f3fc4", 0x62}}, 0x0) 3m30.624148905s ago: executing program 2 (id=1841): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0100002e00010000000000fcdbdf250b"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018bbf7b1", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x2b, 0x0, &(0x7f00000001c0)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r12, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r13, @ANYBLOB="010028bd7000fedbdf2536000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r11, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r11, 0x3}, &(0x7f0000000040)=0x8) 3m30.515290831s ago: executing program 3 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x0, 0x2b, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @dev={0xac, 0x14, 0x14, 0x2c}}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xff9, &(0x7f0000000cc0)=""/4089, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000e551daa500e4b797bbb9fef610ad7f6f5fbee5d05b8cf30298324fd376270449ff3ec99aa4b85f5a4096dabcb19b199863bc9f97f740466ff80b44d4442f75f2c400a9cde0ebd67e6bf80ae1453864ba68e6a6174dfb3a2b70e5f0d3784d8515f147ae", @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0) 3m29.252015754s ago: executing program 3 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x7ffffffe, r3, &(0x7f0000000140)={0x2000200b}) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x10, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2a}, {[@dstopts={0x32, 0x1, '\x00', [@generic={0x1, 0x2, "1dca"}, @ra={0x5, 0x2, 0x1}]}]}}}}}, 0x0) close(r1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="0000e8ffbbbbbbbbbbbbbbbbbbbbbbbb88a8"], 0x2e) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x52}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3m28.452174259s ago: executing program 4 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e23, 0x8a, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dstopts={{0x18, 0x29, 0x37, {0x32}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x40}, 0x20000010) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000701feff001802000000017c0000040042800c00018006000600800a000014000280100014800c05000000020000004800004d1de5177376e890dbcad95e95788c6c45a8c987fe3859a9e7e78adf70bb51407f3f9a9a11acecfc85a2dd1d521dfab551e06a25ebe7a71231add5b43aaf52138df8074b1cbce5e40fa0c1c1bc0e6c5609e0612971cfa928f8e095cfb6559624cd76379d46ce9bccd47ebb37d41ac543e66f6dc86c036a515a94e6b7982fa5b0ffac59b0c9906b400f7fef43461e210688e890bbae302e7d4d93553638ea563cf450b56f76d742180908a2a1657436d38f76"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x10, 0x12) 3m28.355341309s ago: executing program 4 (id=1849): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@restrict, @func_proto={0x11}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x3e, 0xffa, 0xa}, 0x28) 3m28.235034546s ago: executing program 4 (id=1850): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000500)}, {&(0x7f0000000440)="5338e8033547874f4db020d8caff306fcb62599af06f476b2b", 0x19}], 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfeb0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r2, &(0x7f0000000040)=0x4, 0x12) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000204e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r7 = socket$kcm(0x21, 0x2, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r10, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x2, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x101}, 0x8) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) splice(r10, 0x0, r9, 0x0, 0x7d, 0x8) setsockopt$sock_attach_bpf(r7, 0x110, 0x7, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newchain={0x5c, 0x64, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x2}, {0xfff2, 0x2b1265d98a13c5b4}, {0x2, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0x1}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x590}, &(0x7f0000000200)=0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 3m27.274377772s ago: executing program 4 (id=1851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0) 3m27.217210897s ago: executing program 4 (id=1852): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffe1, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x5c}}, 0x20000010) r3 = socket$netlink(0x10, 0x3, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x74, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "05fee7cbb2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "3652d1712c6f59b16cd7981b64db2232"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0xb, 0x4, "de964559a57dc4"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4880}, 0x4008000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000140)="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") r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r8, 0x29, 0x50, 0x0, &(0x7f0000000280)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r12}]}, 0x20}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x192}}, 0x20}}, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r14, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) socket$kcm(0x21, 0x2, 0xa) 3m26.947864585s ago: executing program 4 (id=1853): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0xd6a3ff79ab9c0cea, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000400"], 0x0, 0x58, 0x0, 0x1000a, 0x1}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bb00000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f00000001c0)={r9, &(0x7f0000000080)='GPL\x00', 0x100, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x3]}, {0x1, 0x8, 0xfffffb36, 0x8000}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8}) r10 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000002b40)="1b", 0x1}, {&(0x7f0000000240)="2dadf590", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43aff87ffffffffffffff0000000000000010ff02000000000000000000000000000589"], 0x340a) 3m26.755815106s ago: executing program 2 (id=1855): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="df0d53ecedd00f909c118641010a", 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (fail_nth: 11) 3m26.55329668s ago: executing program 2 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) 3m26.405334142s ago: executing program 2 (id=1859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xa00000000000000}, 0x0) 3m26.220045165s ago: executing program 2 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x203, @rand_addr=' \x01\x00', 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r2}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x8000) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x68ab, 0x4) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0x0, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x401, 0xdb, &(0x7f00000004c0)=""/219, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x3, 0x4, 0xfffffffb, 0x7}, 0x10, 0x0, r1, 0x8, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1], &(0x7f0000000c80)=[{0x1, 0x5, 0xf, 0x2}, {0x3, 0x5, 0xe, 0x7}, {0x3, 0x3, 0x3, 0x2}, {0x4, 0x5, 0x9, 0x1}, {0x4, 0x3, 0xc, 0xc}, {0x0, 0x1, 0xb, 0xa}, {0x5, 0x3, 0x0, 0x3}, {0x3, 0x3, 0x7, 0x9}], 0x10, 0xff}, 0x94) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socket(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f0000000480)="84bd07cccd", 0x5, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r0, 0x1) 3m25.825106088s ago: executing program 1 (id=1862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}}}}}}, 0x0) 3m25.643797753s ago: executing program 1 (id=1863): socket(0x2, 0x80805, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m25.525586324s ago: executing program 1 (id=1864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x88}}, 0x46) 3m25.421219806s ago: executing program 1 (id=1865): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$FITHAW(r1, 0xc0045878) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x10, 0xc, 0xff, 0x2, 0xff, 0x6, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x7fff}, {0x4, 0x0, 0x1}, {0x7}, {0xc7c7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6b7, 0x0, 0x1}, {0x80}, {0x401, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3}, {0xff680, 0x0, 0x1}, {0x3}, {0x12, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x10}, {0x1}, {0x4, 0x0, 0x1}, {0x9}, {0x8, 0x0, 0x1}, {0x6e, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x72ee}, {0x10, 0x0, 0x1}, {0x7}, {0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40810}, 0x4004044) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113500000000000bfa000000000000007000000ee00160e5e0301000000000016050000000000006916340000000000bf07000000000000260507000fff0720670500003f000000150600000ee60060bf50000000000000ae650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="08001ffbb03d7a6e", 0x8}], 0x1}, 0x84845) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES8=r5, @ANYBLOB="e657c307fb71421a7439779e8789"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040040) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) socket$inet6(0xa, 0x805, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001300)=[@in6={0xa, 0x4e23, 0x3, @mcast1, 0x7}]}, &(0x7f0000000180)=0x10) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r11, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 3m25.269670808s ago: executing program 1 (id=1866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) sendto$inet6(r0, &(0x7f0000000040)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffc}, 0x1c) 3m25.148575388s ago: executing program 1 (id=1867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async, rerun: 64) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r6) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100)=0x3, 0x4) 3m25.030600789s ago: executing program 2 (id=1868): unshare(0x2a020400) bpf$MAP_CREATE(0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r5, 0x0, 0xd88d02a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000005600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000009000000070000000000000700000000000000000000000d04000000040000000000000e0400000000000000060000000000000c02000000000000002e002e2e"], 0x0, 0x55}, 0x28) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r9, @ANYBLOB="60002f8008000100000000000c0002000202aaaaaaaaaaaa480003800800040091f60000340003800800020001000000060001000000000008000200027ffffffe00020007000000000000000000000006000300a2aa0000080001"], 0x7c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010025bd7000fedbdf250000000097c8915470390c2c87a2bed727730c423a1eaf3fc08992268e74bd89c9ccfcde42073df04e4ef4322179c8e0ff1cc0f05622ae2cf40ef93631e3ccb74721d0b5902a400f39f4eb1032cbdec63b04e194", @ANYRES32=0x0, @ANYRESDEC=r7], 0x48}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x20c, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x178, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xb4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "53337e11efb5641b5925b5fcc292e6ad6ffc55b57edee1d66a0c0fb2776de8d4"}, @NL802154_KEY_ATTR_ID={0x9c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2b9f8a373fbfb35dfedc74a0b4acec1d35e220e4e6cffe9ec27f243f45f82f9b"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a6162af70a0c5be036259f3ff273ad6b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0000000}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3m24.791934837s ago: executing program 3 (id=1869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000015000501"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000400)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r5, 0x0, 0xffffff41, 0xfc4}, &(0x7f0000000080)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000083384cbcfe9bfb260fb7bca2b300000000008000000000000083241951d2e7abe3e39a100773b1f314df6630b2613128d82e1e5bd3c494e9068f6d19d39b504668d30f9ec5b55e8067b0220345ea", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x4, 0x5, 0x0, r7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x27aecc9ad699f2c0}, 0xc, &(0x7f00000007c0)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELRULE={0x8c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x54, 0x7, 0x1, 0x0, "447d79b1be19378bed8690bc53ac0f5e53baa6da2a1f4fb8acc3309bde4bbdd0d9d5c12eae7e9f12bee4a6ac08dc28ac0314c09b6299ba50f0ef485fad6a7ca210c8d96df85f303c9989b675be2c11f4"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x88, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x11, 0x8, "882a133b4d3df9806e927f851a"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x184}, 0x1, 0x0, 0x0, 0x200048d1}, 0x240c8004) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r9, &(0x7f00000014c0), 0x0}, 0x20) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x5, 0x2, 0xff69, 0x1, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x7ff, 0x80, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000007200080027bd7000ffdbdf2507000000", @ANYRES32=r13, @ANYBLOB="0800010000000000080001000100000008000100010000000800010501000000d8080001000100000008000100010000000800010000000000"], 0x50}}, 0x4000000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x23, 0x0, &(0x7f0000000fc0)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r14, 0x60046}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x58}}, 0x0) 3m24.476246624s ago: executing program 3 (id=1870): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x136}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m55.227976833s ago: executing program 32 (id=1804): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000004) unshare(0x6a040000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000240)={0x23, 0x7, 0x37, 0xd8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x2, {{0xa, 0x4e22, 0x8, @mcast1, 0x6}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x97, @mcast2, 0x33}}, {{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80000001}}, {{0xa, 0x4e21, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e21, 0x7, @private2, 0x10}}, {{0xa, 0x4e20, 0xf6, @private2, 0x7}}, {{0xa, 0x4e21, 0x8, @loopback, 0x1aa00}}, {{0xa, 0x4e20, 0x1, @private2, 0x100}}]}, 0x410) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x46, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xab}]}]}, 0x1c}}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) socket$inet6_icmp(0xa, 0x2, 0x3a) 0s ago: executing program 33 (id=1867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 64) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async, rerun: 64) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x50) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r6) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100)=0x3, 0x4) kernel console output (not intermixed with test programs): C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 218.611173][ T9272] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 218.616514][ T9274] syzkaller0: entered promiscuous mode [ 218.636089][ T9274] syzkaller0: entered allmulticast mode [ 218.999015][ T9272] tipc: Resetting bearer [ 219.053365][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.197055][ T5367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.505957][ T9278] bond4: Unable to set up delay as MII monitoring is disabled [ 219.522864][ T9278] bond4 (unregistering): Released all slaves [ 220.114039][ T9299] tipc: Enabled bearer , priority 0 [ 220.134550][ T9299] syzkaller0: entered promiscuous mode [ 220.140599][ T9299] syzkaller0: entered allmulticast mode [ 220.167592][ T9297] syzkaller0: entered promiscuous mode [ 220.179254][ T9297] syzkaller0: entered allmulticast mode [ 220.192966][ T9299] tipc: Resetting bearer [ 220.212168][ T9298] tipc: Resetting bearer [ 220.234109][ T9298] tipc: Disabling bearer [ 220.253592][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.643056][ T9318] can: request_module (can-proto-5) failed. [ 220.687552][ T9323] netlink: 'syz.3.1034': attribute type 13 has an invalid length. [ 220.840898][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 220.910708][ T9323] netlink: 'syz.3.1034': attribute type 2 has an invalid length. [ 220.933446][ T9323] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1034'. [ 221.479546][ T9342] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1039'. [ 221.584269][ T9344] syzkaller0: entered promiscuous mode [ 221.603514][ T9344] syzkaller0: entered allmulticast mode [ 222.071043][ T9362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.079863][ T9362] IPv6: NLM_F_CREATE should be set when creating new route [ 222.119185][ T9353] tipc: Enabled bearer , priority 0 [ 222.135537][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 222.365273][ T9379] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 222.496700][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.542371][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.633076][ T9362] tipc: Resetting bearer [ 222.737180][ T9343] tipc: Resetting bearer [ 222.780552][ T9343] tipc: Disabling bearer [ 222.833917][ T9379] bond6: entered promiscuous mode [ 222.839352][ T9379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.867914][ T9383] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.883596][ T9383] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 222.903410][ T9383] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 222.940129][ T1109] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.949485][ T1109] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.961838][ T1109] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.977253][ T1109] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.285929][ T9414] netlink: 480 bytes leftover after parsing attributes in process `syz.2.1054'. [ 223.313313][ T9414] netlink: 480 bytes leftover after parsing attributes in process `syz.2.1054'. [ 223.532820][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 224.014649][ T9441] syzkaller0: entered promiscuous mode [ 224.024825][ T9441] syzkaller0: entered allmulticast mode [ 224.048297][ T9445] netlink: 'syz.3.1061': attribute type 1 has an invalid length. [ 224.248172][ T9445] bond2: entered promiscuous mode [ 224.276696][ T9445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.294788][ T9441] tipc: Enabled bearer , priority 0 [ 224.325264][ T9440] tipc: Resetting bearer [ 224.449320][ T9440] tipc: Disabling bearer [ 224.515922][ T9467] FAULT_INJECTION: forcing a failure. [ 224.515922][ T9467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.546474][ T9467] CPU: 0 UID: 0 PID: 9467 Comm: syz.2.1068 Not tainted syzkaller #0 PREEMPT(full) [ 224.546501][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.546513][ T9467] Call Trace: [ 224.546521][ T9467] [ 224.546529][ T9467] dump_stack_lvl+0xe8/0x150 [ 224.546555][ T9467] should_fail_ex+0x412/0x560 [ 224.546578][ T9467] _copy_from_user+0x2d/0xb0 [ 224.546601][ T9467] ___sys_recvmsg+0x175/0x590 [ 224.546628][ T9467] ? __pfx____sys_recvmsg+0x10/0x10 [ 224.546653][ T9467] ? __fget_files+0x2a/0x420 [ 224.546710][ T9467] do_recvmmsg+0x334/0x800 [ 224.546740][ T9467] ? __pfx_do_recvmmsg+0x10/0x10 [ 224.546771][ T9467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.546808][ T9467] __x64_sys_recvmmsg+0x198/0x250 [ 224.546833][ T9467] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 224.546863][ T9467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.546883][ T9467] do_syscall_64+0x174/0x580 [ 224.546901][ T9467] ? trace_irq_disable+0x3b/0x140 [ 224.546927][ T9467] ? clear_bhb_loop+0x40/0x90 [ 224.546948][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.546966][ T9467] RIP: 0033:0x7f065eb9ce59 [ 224.546983][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.546998][ T9467] RSP: 002b:00007f065fa73028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 224.547017][ T9467] RAX: ffffffffffffffda RBX: 00007f065ee15fa0 RCX: 00007f065eb9ce59 [ 224.547031][ T9467] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 224.547042][ T9467] RBP: 00007f065fa73090 R08: 0000000000000000 R09: 0000000000000000 [ 224.547053][ T9467] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 224.547064][ T9467] R13: 00007f065ee16038 R14: 00007f065ee15fa0 R15: 00007ffd6848fc28 [ 224.547099][ T9467] [ 224.880544][ T9473] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1069'. [ 226.110793][ T9521] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1084'. [ 226.135574][ T9526] tipc: Bearer : already 2 bearers with priority 10 [ 226.143370][ T9526] tipc: Bearer : trying with adjusted priority [ 226.150376][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 226.173695][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'. [ 226.204639][ T9525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1087'. [ 226.228968][ T9525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1087'. [ 226.268976][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 226.295559][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 226.420233][ T9535] bridge0: port 1(vlan2) entered blocking state [ 226.438567][ T9535] bridge0: port 1(vlan2) entered disabled state [ 226.463826][ T9535] vlan2: entered allmulticast mode [ 226.480278][ T9535] bridge0: entered allmulticast mode [ 226.886803][ T9535] vlan2: left allmulticast mode [ 226.911868][ T9535] bridge0: left allmulticast mode [ 227.481163][ T9570] FAULT_INJECTION: forcing a failure. [ 227.481163][ T9570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.511783][ T9570] CPU: 1 UID: 0 PID: 9570 Comm: syz.2.1099 Not tainted syzkaller #0 PREEMPT(full) [ 227.511808][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.511820][ T9570] Call Trace: [ 227.511827][ T9570] [ 227.511833][ T9570] dump_stack_lvl+0xe8/0x150 [ 227.511865][ T9570] should_fail_ex+0x412/0x560 [ 227.511887][ T9570] _copy_from_user+0x2d/0xb0 [ 227.511908][ T9570] ___sys_recvmsg+0x175/0x590 [ 227.511933][ T9570] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.511956][ T9570] ? __fget_files+0x2a/0x420 [ 227.512002][ T9570] do_recvmmsg+0x334/0x800 [ 227.512029][ T9570] ? __pfx_do_recvmmsg+0x10/0x10 [ 227.512057][ T9570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.512091][ T9570] __x64_sys_recvmmsg+0x198/0x250 [ 227.512115][ T9570] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 227.512143][ T9570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.512161][ T9570] do_syscall_64+0x174/0x580 [ 227.512179][ T9570] ? trace_irq_disable+0x3b/0x140 [ 227.512205][ T9570] ? clear_bhb_loop+0x40/0x90 [ 227.512227][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.512244][ T9570] RIP: 0033:0x7f065eb9ce59 [ 227.512262][ T9570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.512277][ T9570] RSP: 002b:00007f065fa73028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 227.512296][ T9570] RAX: ffffffffffffffda RBX: 00007f065ee15fa0 RCX: 00007f065eb9ce59 [ 227.512317][ T9570] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 227.512329][ T9570] RBP: 00007f065fa73090 R08: 0000000000000000 R09: 0000000000000000 [ 227.512340][ T9570] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 227.512351][ T9570] R13: 00007f065ee16038 R14: 00007f065ee15fa0 R15: 00007ffd6848fc28 [ 227.512381][ T9570] [ 228.183988][ T9597] netlink: 'syz.2.1112': attribute type 2 has an invalid length. [ 229.394427][ T9614] bond5: option packets_per_slave: invalid value (1048582) [ 229.410734][ T9614] bond5: option packets_per_slave: allowed values 0 - 65535 [ 229.464102][ T9614] bond5 (unregistering): Released all slaves [ 229.691240][ T9659] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 229.823884][ T9667] __nla_validate_parse: 4 callbacks suppressed [ 229.823902][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'. [ 229.921187][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 230.100597][ T9657] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.196727][ T9681] erspan1: entered promiscuous mode [ 230.204893][ T9681] erspan1: entered allmulticast mode [ 230.627430][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 230.665662][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 231.114187][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 231.379530][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 231.530960][ T9741] team_slave_1: Caught tx_queue_len zero misconfig [ 231.567898][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 231.774645][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 231.892610][ T9760] FAULT_INJECTION: forcing a failure. [ 231.892610][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 231.915047][ T9760] CPU: 1 UID: 0 PID: 9760 Comm: syz.1.1159 Not tainted syzkaller #0 PREEMPT(full) [ 231.915073][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 231.915084][ T9760] Call Trace: [ 231.915091][ T9760] [ 231.915098][ T9760] dump_stack_lvl+0xe8/0x150 [ 231.915123][ T9760] should_fail_ex+0x412/0x560 [ 231.915147][ T9760] should_failslab+0xa8/0x100 [ 231.915167][ T9760] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 231.915192][ T9760] ? __kasan_kmalloc+0x93/0xb0 [ 231.915216][ T9760] ? wakeup_source_register+0x77/0x380 [ 231.915241][ T9760] ? __kmalloc_cache_noprof+0x31c/0x660 [ 231.915266][ T9760] kstrdup+0x42/0x100 [ 231.915286][ T9760] wakeup_source_register+0x77/0x380 [ 231.915314][ T9760] ep_insert+0x1022/0x1a40 [ 231.915350][ T9760] ? __pfx_ep_insert+0x10/0x10 [ 231.915382][ T9760] ? ep_loop_check+0x50/0x1b0 [ 231.915412][ T9760] do_epoll_ctl+0x7f4/0xe80 [ 231.915441][ T9760] __x64_sys_epoll_ctl+0x165/0x1b0 [ 231.915466][ T9760] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 231.915498][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.915527][ T9760] do_syscall_64+0x174/0x580 [ 231.915545][ T9760] ? trace_irq_disable+0x3b/0x140 [ 231.915572][ T9760] ? clear_bhb_loop+0x40/0x90 [ 231.915592][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.915609][ T9760] RIP: 0033:0x7f2d6959ce59 [ 231.915625][ T9760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.915640][ T9760] RSP: 002b:00007f2d6a444028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 231.915659][ T9760] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 231.915672][ T9760] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 231.915683][ T9760] RBP: 00007f2d6a444090 R08: 0000000000000000 R09: 0000000000000000 [ 231.915694][ T9760] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002 [ 231.915705][ T9760] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffe73119458 [ 231.915734][ T9760] [ 232.264096][ T9772] FAULT_INJECTION: forcing a failure. [ 232.264096][ T9772] name failslab, interval 1, probability 0, space 0, times 0 [ 232.346818][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.4.1165 Not tainted syzkaller #0 PREEMPT(full) [ 232.346845][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.346856][ T9772] Call Trace: [ 232.346863][ T9772] [ 232.346871][ T9772] dump_stack_lvl+0xe8/0x150 [ 232.346897][ T9772] should_fail_ex+0x412/0x560 [ 232.346922][ T9772] should_failslab+0xa8/0x100 [ 232.346943][ T9772] __kmalloc_cache_noprof+0x88/0x660 [ 232.346966][ T9772] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 232.346984][ T9772] ? sctp_add_bind_addr+0x8c/0x370 [ 232.347015][ T9772] sctp_add_bind_addr+0x8c/0x370 [ 232.347045][ T9772] sctp_copy_local_addr_list+0x314/0x4f0 [ 232.347074][ T9772] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 232.347100][ T9772] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 232.347127][ T9772] ? sctp_v6_is_any+0x64/0x80 [ 232.347146][ T9772] ? sctp_copy_one_addr+0x93/0x360 [ 232.347174][ T9772] sctp_bind_addr_copy+0xb3/0x3c0 [ 232.347200][ T9772] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 232.347226][ T9772] sctp_connect_new_asoc+0x2ff/0x6b0 [ 232.347250][ T9772] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 232.347277][ T9772] ? sctp_get_af_specific+0x29/0x80 [ 232.347300][ T9772] ? sctp_inet6_send_verify+0x80/0x300 [ 232.347324][ T9772] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 232.347349][ T9772] __sctp_connect+0x5cb/0xdc0 [ 232.347380][ T9772] ? __pfx___sctp_connect+0x10/0x10 [ 232.347399][ T9772] ? sctp_setsockopt+0x21c/0x12c0 [ 232.347416][ T9772] ? security_sctp_bind_connect+0x7e/0x2c0 [ 232.347441][ T9772] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 232.347469][ T9772] sctp_setsockopt+0x708/0x12c0 [ 232.347488][ T9772] ? sock_common_setsockopt+0x36/0xc0 [ 232.347512][ T9772] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.347540][ T9772] do_sock_setsockopt+0x17c/0x1b0 [ 232.347572][ T9772] __x64_sys_setsockopt+0x13d/0x1b0 [ 232.347593][ T9772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.347613][ T9772] do_syscall_64+0x174/0x580 [ 232.347632][ T9772] ? trace_irq_disable+0x3b/0x140 [ 232.347657][ T9772] ? clear_bhb_loop+0x40/0x90 [ 232.347679][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.347694][ T9772] RIP: 0033:0x7fc0b6b9ce59 [ 232.347710][ T9772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.347724][ T9772] RSP: 002b:00007fc0b79ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.347743][ T9772] RAX: ffffffffffffffda RBX: 00007fc0b6e15fa0 RCX: 00007fc0b6b9ce59 [ 232.347755][ T9772] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 232.347766][ T9772] RBP: 00007fc0b79ba090 R08: 000000000000002c R09: 0000000000000000 [ 232.347775][ T9772] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002 [ 232.347785][ T9772] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 232.347809][ T9772] [ 232.716397][ T9780] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 232.725127][ T9780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 232.804436][ T9785] netlink: 'syz.3.1171': attribute type 142 has an invalid length. [ 233.096341][ T9803] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 233.104654][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 233.117709][ T9793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.289097][ T9793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.396300][ T9793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.521773][ T9809] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1177'. [ 233.683673][ T6287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.716527][ T1109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.747419][ T1109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.782335][ T6287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.169528][ T9826] netlink: 'syz.4.1181': attribute type 13 has an invalid length. [ 234.574908][ T9840] erspan0: entered promiscuous mode [ 234.815054][ T9848] FAULT_INJECTION: forcing a failure. [ 234.815054][ T9848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.832501][ T9848] CPU: 0 UID: 0 PID: 9848 Comm: syz.4.1191 Not tainted syzkaller #0 PREEMPT(full) [ 234.832525][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.832535][ T9848] Call Trace: [ 234.832542][ T9848] [ 234.832549][ T9848] dump_stack_lvl+0xe8/0x150 [ 234.832574][ T9848] should_fail_ex+0x412/0x560 [ 234.832595][ T9848] _copy_to_user+0x31/0xb0 [ 234.832616][ T9848] simple_read_from_buffer+0xe1/0x170 [ 234.832643][ T9848] proc_fail_nth_read+0x1bb/0x230 [ 234.832668][ T9848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.832691][ T9848] ? rw_verify_area+0x2a6/0x4d0 [ 234.832714][ T9848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.832737][ T9848] vfs_read+0x20c/0xa70 [ 234.832765][ T9848] ? __pfx___mutex_lock+0x10/0x10 [ 234.832787][ T9848] ? __pfx_vfs_read+0x10/0x10 [ 234.832811][ T9848] ? __fget_files+0x2a/0x420 [ 234.832835][ T9848] ? __fget_files+0x3a0/0x420 [ 234.832852][ T9848] ? __fget_files+0x2a/0x420 [ 234.832880][ T9848] ksys_read+0x150/0x270 [ 234.832907][ T9848] ? __pfx_ksys_read+0x10/0x10 [ 234.832946][ T9848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.832966][ T9848] do_syscall_64+0x174/0x580 [ 234.832983][ T9848] ? trace_irq_disable+0x3b/0x140 [ 234.833005][ T9848] ? clear_bhb_loop+0x40/0x90 [ 234.833025][ T9848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.833042][ T9848] RIP: 0033:0x7fc0b6b5d68e [ 234.833059][ T9848] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.833073][ T9848] RSP: 002b:00007fc0b79b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.833095][ T9848] RAX: ffffffffffffffda RBX: 00007fc0b79ba6c0 RCX: 00007fc0b6b5d68e [ 234.833107][ T9848] RDX: 000000000000000f RSI: 00007fc0b79ba0a0 RDI: 0000000000000005 [ 234.833118][ T9848] RBP: 00007fc0b79ba090 R08: 0000000000000000 R09: 0000000000000000 [ 234.833129][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.833140][ T9848] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 234.833169][ T9848] [ 235.211946][ T9866] netlink: 'syz.0.1197': attribute type 21 has an invalid length. [ 235.271654][ T9866] __nla_validate_parse: 7 callbacks suppressed [ 235.271671][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1197'. [ 235.348970][ T9870] FAULT_INJECTION: forcing a failure. [ 235.348970][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 235.393035][ T9870] CPU: 0 UID: 0 PID: 9870 Comm: syz.2.1198 Not tainted syzkaller #0 PREEMPT(full) [ 235.393060][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.393071][ T9870] Call Trace: [ 235.393078][ T9870] [ 235.393086][ T9870] dump_stack_lvl+0xe8/0x150 [ 235.393112][ T9870] should_fail_ex+0x412/0x560 [ 235.393137][ T9870] should_failslab+0xa8/0x100 [ 235.393157][ T9870] __kmalloc_cache_noprof+0x88/0x660 [ 235.393183][ T9870] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 235.393198][ T9870] ? sctp_v6_cmp_addr+0x15/0xd0 [ 235.393214][ T9870] ? sctp_add_bind_addr+0x8c/0x370 [ 235.393244][ T9870] sctp_add_bind_addr+0x8c/0x370 [ 235.393273][ T9870] sctp_copy_local_addr_list+0x314/0x4f0 [ 235.393302][ T9870] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 235.393325][ T9870] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 235.393352][ T9870] ? sctp_v6_is_any+0x64/0x80 [ 235.393371][ T9870] ? sctp_copy_one_addr+0x93/0x360 [ 235.393398][ T9870] sctp_bind_addr_copy+0xb3/0x3c0 [ 235.393425][ T9870] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 235.393459][ T9870] sctp_connect_new_asoc+0x2ff/0x6b0 [ 235.393488][ T9870] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 235.393516][ T9870] ? __local_bh_enable_ip+0xd0/0x130 [ 235.393533][ T9870] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 235.393558][ T9870] ? security_sctp_bind_connect+0x7e/0x2c0 [ 235.393587][ T9870] sctp_sendmsg+0x1576/0x2c50 [ 235.393623][ T9870] ? __pfx_sctp_sendmsg+0x10/0x10 [ 235.393647][ T9870] ? aa_sk_perm+0x6d5/0x900 [ 235.393669][ T9870] ? __might_fault+0xaf/0x130 [ 235.393698][ T9870] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.393725][ T9870] ? sock_rps_record_flow+0x19/0x350 [ 235.393749][ T9870] ? __pfx_inet_sendmsg+0x10/0x10 [ 235.393775][ T9870] ? inet_sendmsg+0x2f4/0x370 [ 235.393800][ T9870] ? __pfx_inet_sendmsg+0x10/0x10 [ 235.393826][ T9870] __sys_sendto+0x5de/0x710 [ 235.393848][ T9870] ? __pfx___sys_sendto+0x10/0x10 [ 235.393864][ T9870] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 235.393899][ T9870] ? __fget_files+0x3a0/0x420 [ 235.393930][ T9870] ? ksys_write+0x242/0x270 [ 235.393956][ T9870] ? __pfx_ksys_write+0x10/0x10 [ 235.393984][ T9870] __x64_sys_sendto+0xde/0x100 [ 235.394003][ T9870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.394022][ T9870] do_syscall_64+0x174/0x580 [ 235.394040][ T9870] ? trace_irq_disable+0x3b/0x140 [ 235.394065][ T9870] ? clear_bhb_loop+0x40/0x90 [ 235.394087][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.394103][ T9870] RIP: 0033:0x7f065eb9ce59 [ 235.394119][ T9870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.394134][ T9870] RSP: 002b:00007f065fa73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 235.394154][ T9870] RAX: ffffffffffffffda RBX: 00007f065ee15fa0 RCX: 00007f065eb9ce59 [ 235.394167][ T9870] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 235.394178][ T9870] RBP: 00007f065fa73090 R08: 0000200000000080 R09: 000000000000001c [ 235.394189][ T9870] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 235.394199][ T9870] R13: 00007f065ee16038 R14: 00007f065ee15fa0 R15: 00007ffd6848fc28 [ 235.394228][ T9870] [ 235.924391][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1200'. [ 235.937567][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 235.965834][ T9887] openvswitch: netlink: Duplicate or invalid key (type 0). [ 235.971310][ T9889] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1201'. [ 235.973800][ T9887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.991328][ T9887] FAULT_INJECTION: forcing a failure. [ 235.991328][ T9887] name failslab, interval 1, probability 0, space 0, times 0 [ 236.006281][ T9887] CPU: 0 UID: 0 PID: 9887 Comm: syz.1.1202 Not tainted syzkaller #0 PREEMPT(full) [ 236.006302][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.006312][ T9887] Call Trace: [ 236.006318][ T9887] [ 236.006324][ T9887] dump_stack_lvl+0xe8/0x150 [ 236.006346][ T9887] should_fail_ex+0x412/0x560 [ 236.006366][ T9887] should_failslab+0xa8/0x100 [ 236.006382][ T9887] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 236.006404][ T9887] ? __alloc_skb+0x1d0/0x7d0 [ 236.006419][ T9887] ? __local_bh_enable_ip+0xd0/0x130 [ 236.006437][ T9887] __alloc_skb+0x1d0/0x7d0 [ 236.006451][ T9887] ? netlink_ack_tlv_len+0x6c/0x210 [ 236.006468][ T9887] netlink_ack+0x146/0xa50 [ 236.006482][ T9887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.006520][ T9887] netlink_rcv_skb+0x2b6/0x4b0 [ 236.006537][ T9887] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.006556][ T9887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.006583][ T9887] ? down_read+0x270/0x2e0 [ 236.006600][ T9887] ? genl_rcv+0xd/0x40 [ 236.006622][ T9887] genl_rcv+0x28/0x40 [ 236.006640][ T9887] netlink_unicast+0x75c/0x8e0 [ 236.006664][ T9887] netlink_sendmsg+0x813/0xb40 [ 236.006688][ T9887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.006708][ T9887] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.006732][ T9887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.006757][ T9887] ____sys_sendmsg+0x972/0x9f0 [ 236.006777][ T9887] ? __might_fault+0xaf/0x130 [ 236.006803][ T9887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.006830][ T9887] ? import_iovec+0x73/0xa0 [ 236.006853][ T9887] ___sys_sendmsg+0x2a5/0x360 [ 236.006872][ T9887] ? __lock_acquire+0x6b5/0x2cf0 [ 236.006893][ T9887] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.006939][ T9887] ? __fget_files+0x2a/0x420 [ 236.006959][ T9887] ? __fget_files+0x3a0/0x420 [ 236.006988][ T9887] __x64_sys_sendmsg+0x1bd/0x2a0 [ 236.007010][ T9887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.007039][ T9887] ? __pfx_ksys_write+0x10/0x10 [ 236.007070][ T9887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.007088][ T9887] do_syscall_64+0x174/0x580 [ 236.007104][ T9887] ? trace_irq_disable+0x3b/0x140 [ 236.007127][ T9887] ? clear_bhb_loop+0x40/0x90 [ 236.007148][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.007164][ T9887] RIP: 0033:0x7f2d6959ce59 [ 236.007180][ T9887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.007195][ T9887] RSP: 002b:00007f2d6a444028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.007215][ T9887] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 236.007228][ T9887] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 236.007239][ T9887] RBP: 00007f2d6a444090 R08: 0000000000000000 R09: 0000000000000000 [ 236.007250][ T9887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.007261][ T9887] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffe73119458 [ 236.007301][ T9887] [ 236.511786][ T9894] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 236.535096][ T9898] FAULT_INJECTION: forcing a failure. [ 236.535096][ T9898] name failslab, interval 1, probability 0, space 0, times 0 [ 236.549482][ T9898] CPU: 0 UID: 0 PID: 9898 Comm: syz.3.1206 Not tainted syzkaller #0 PREEMPT(full) [ 236.549506][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.549517][ T9898] Call Trace: [ 236.549524][ T9898] [ 236.549532][ T9898] dump_stack_lvl+0xe8/0x150 [ 236.549557][ T9898] should_fail_ex+0x412/0x560 [ 236.549580][ T9898] should_failslab+0xa8/0x100 [ 236.549600][ T9898] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 236.549626][ T9898] ? __kernfs_new_node+0xaa/0x970 [ 236.549655][ T9898] kstrdup+0x42/0x100 [ 236.549674][ T9898] __kernfs_new_node+0xaa/0x970 [ 236.549702][ T9898] ? __pfx___kernfs_new_node+0x10/0x10 [ 236.549724][ T9898] ? kernfs_root+0x1c/0x230 [ 236.549750][ T9898] ? kernfs_root+0x1c/0x230 [ 236.549770][ T9898] ? kernfs_root+0x1c/0x230 [ 236.549789][ T9898] ? kernfs_root+0x1c/0x230 [ 236.549814][ T9898] kernfs_new_node+0x102/0x210 [ 236.549841][ T9898] kernfs_create_dir_ns+0x44/0x130 [ 236.549867][ T9898] sysfs_create_dir_ns+0x12f/0x2a0 [ 236.549892][ T9898] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 236.549917][ T9898] ? do_raw_spin_unlock+0xf5/0x210 [ 236.549945][ T9898] kobject_add_internal+0x62b/0xd00 [ 236.549975][ T9898] kobject_add+0x163/0x240 [ 236.549996][ T9898] ? __pfx_kobject_add+0x10/0x10 [ 236.550020][ T9898] ? __pfx_kobject_add+0x10/0x10 [ 236.550041][ T9898] ? kobject_init+0x83/0x1e0 [ 236.550065][ T9898] ? get_device_parent+0x366/0x3a0 [ 236.550094][ T9898] device_add+0x408/0xbb0 [ 236.550118][ T9898] ? device_initialize+0x26a/0x460 [ 236.550146][ T9898] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 236.550170][ T9898] wakeup_source_register+0x18a/0x380 [ 236.550201][ T9898] ep_insert+0xf34/0x1a40 [ 236.550248][ T9898] ? __pfx_ep_insert+0x10/0x10 [ 236.550281][ T9898] ? bpf_lsm_capable+0x9/0x20 [ 236.550308][ T9898] do_epoll_ctl+0x7f4/0xe80 [ 236.550338][ T9898] __x64_sys_epoll_ctl+0x165/0x1b0 [ 236.550365][ T9898] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 236.550396][ T9898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.550416][ T9898] do_syscall_64+0x174/0x580 [ 236.550435][ T9898] ? trace_irq_disable+0x3b/0x140 [ 236.550460][ T9898] ? clear_bhb_loop+0x40/0x90 [ 236.550482][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.550499][ T9898] RIP: 0033:0x7f467499ce59 [ 236.550517][ T9898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.550531][ T9898] RSP: 002b:00007f4675851028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 236.550551][ T9898] RAX: ffffffffffffffda RBX: 00007f4674c15fa0 RCX: 00007f467499ce59 [ 236.550564][ T9898] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 236.550573][ T9898] RBP: 00007f4675851090 R08: 0000000000000000 R09: 0000000000000000 [ 236.550584][ T9898] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 236.550595][ T9898] R13: 00007f4674c16038 R14: 00007f4674c15fa0 R15: 00007fff02bb3d78 [ 236.550624][ T9898] [ 236.841706][ T9898] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 236.935703][ T9896] syzkaller0: entered promiscuous mode [ 236.941232][ T9896] syzkaller0: entered allmulticast mode [ 237.021023][ T9894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.044981][ T9911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1208'. [ 237.049378][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 239.038431][ T9924] syzkaller0: entered promiscuous mode [ 239.047894][ T9924] syzkaller0: entered allmulticast mode [ 239.160967][ T9950] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 239.171374][ T9950] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1217'. [ 239.194186][ T9950] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1217'. [ 239.204037][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 239.293019][ T9959] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1218'. [ 239.303844][ T9959] NCSI netlink: No device for ifindex 566712438 [ 241.156736][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1222'. [ 241.530930][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 241.577992][T10005] openvswitch: netlink: Duplicate or invalid key (type 0). [ 241.595232][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 241.604536][T10005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.617836][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 242.195096][T10030] bond2: option packets_per_slave: invalid value (1048582) [ 242.202526][T10030] bond2: option packets_per_slave: allowed values 0 - 65535 [ 242.225242][T10030] bond2 (unregistering): Released all slaves [ 242.735151][T10053] syzkaller0: entered promiscuous mode [ 242.766165][T10053] syzkaller0: entered allmulticast mode [ 242.907333][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 242.952476][T10077] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 242.967392][T10072] xt_l2tp: invalid flags combination: 8 [ 243.260669][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 243.583712][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 243.834306][T10119] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1267'. [ 243.849707][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'. [ 243.892714][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 244.106431][T10132] FAULT_INJECTION: forcing a failure. [ 244.106431][T10132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.143458][T10132] CPU: 0 UID: 0 PID: 10132 Comm: syz.0.1271 Not tainted syzkaller #0 PREEMPT(full) [ 244.143484][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.143506][T10132] Call Trace: [ 244.143514][T10132] [ 244.143521][T10132] dump_stack_lvl+0xe8/0x150 [ 244.143546][T10132] should_fail_ex+0x412/0x560 [ 244.143569][T10132] _copy_from_user+0x2d/0xb0 [ 244.143591][T10132] __sys_connect+0x156/0x450 [ 244.143612][T10132] ? __pfx___sys_connect+0x10/0x10 [ 244.143641][T10132] ? __pfx_ksys_write+0x10/0x10 [ 244.143670][T10132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.143688][T10132] __x64_sys_connect+0x7a/0x90 [ 244.143707][T10132] do_syscall_64+0x174/0x580 [ 244.143725][T10132] ? trace_irq_disable+0x3b/0x140 [ 244.143751][T10132] ? clear_bhb_loop+0x40/0x90 [ 244.143771][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.143789][T10132] RIP: 0033:0x7f5c2159ce59 [ 244.143805][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.143818][T10132] RSP: 002b:00007f5c223cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 244.143838][T10132] RAX: ffffffffffffffda RBX: 00007f5c21815fa0 RCX: 00007f5c2159ce59 [ 244.143851][T10132] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 244.143862][T10132] RBP: 00007f5c223cb090 R08: 0000000000000000 R09: 0000000000000000 [ 244.143873][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.143883][T10132] R13: 00007f5c21816038 R14: 00007f5c21815fa0 R15: 00007ffc3df746e8 [ 244.143911][T10132] [ 244.480093][T10140] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 244.715448][T10159] bond3: (slave gretap1): making interface the new active one [ 244.725959][T10159] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 244.835156][T10173] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 244.901235][T10179] FAULT_INJECTION: forcing a failure. [ 244.901235][T10179] name failslab, interval 1, probability 0, space 0, times 0 [ 244.928353][T10177] bond4: entered promiscuous mode [ 244.934140][T10177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.941995][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.2.1287 Not tainted syzkaller #0 PREEMPT(full) [ 244.942020][T10179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.942031][T10179] Call Trace: [ 244.942038][T10179] [ 244.942045][T10179] dump_stack_lvl+0xe8/0x150 [ 244.942071][T10179] should_fail_ex+0x412/0x560 [ 244.942096][T10179] should_failslab+0xa8/0x100 [ 244.942120][T10179] __kmalloc_cache_noprof+0x88/0x660 [ 244.942144][T10179] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 244.942161][T10179] ? sctp_v6_cmp_addr+0x15/0xd0 [ 244.942177][T10179] ? sctp_add_bind_addr+0x8c/0x370 [ 244.942208][T10179] sctp_add_bind_addr+0x8c/0x370 [ 244.942237][T10179] sctp_copy_local_addr_list+0x314/0x4f0 [ 244.942267][T10179] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 244.942293][T10179] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 244.942321][T10179] ? sctp_v6_is_any+0x64/0x80 [ 244.942340][T10179] ? sctp_copy_one_addr+0x93/0x360 [ 244.942369][T10179] sctp_bind_addr_copy+0xb3/0x3c0 [ 244.942396][T10179] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 244.942423][T10179] sctp_connect_new_asoc+0x2ff/0x6b0 [ 244.942447][T10179] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 244.942474][T10179] ? sctp_get_af_specific+0x29/0x80 [ 244.942499][T10179] ? sctp_inet6_send_verify+0x80/0x300 [ 244.942523][T10179] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 244.942547][T10179] __sctp_connect+0x5cb/0xdc0 [ 244.942579][T10179] ? __pfx___sctp_connect+0x10/0x10 [ 244.942598][T10179] ? sctp_setsockopt+0x21c/0x12c0 [ 244.942616][T10179] ? security_sctp_bind_connect+0x7e/0x2c0 [ 244.942642][T10179] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 244.942669][T10179] sctp_setsockopt+0x708/0x12c0 [ 244.942689][T10179] ? sock_common_setsockopt+0x36/0xc0 [ 244.942713][T10179] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 244.942747][T10179] do_sock_setsockopt+0x17c/0x1b0 [ 244.942772][T10179] __x64_sys_setsockopt+0x13d/0x1b0 [ 244.942794][T10179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.942814][T10179] do_syscall_64+0x174/0x580 [ 244.942833][T10179] ? trace_irq_disable+0x3b/0x140 [ 244.942863][T10179] ? clear_bhb_loop+0x40/0x90 [ 244.942885][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.942902][T10179] RIP: 0033:0x7f065eb9ce59 [ 244.942919][T10179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.942934][T10179] RSP: 002b:00007f065fa73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.942951][T10179] RAX: ffffffffffffffda RBX: 00007f065ee15fa0 RCX: 00007f065eb9ce59 [ 244.942963][T10179] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 244.942973][T10179] RBP: 00007f065fa73090 R08: 000000000000002c R09: 0000000000000000 [ 244.942987][T10179] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002 [ 244.942997][T10179] R13: 00007f065ee16038 R14: 00007f065ee15fa0 R15: 00007ffd6848fc28 [ 244.943026][T10179] [ 245.359167][ T5731] IPVS: starting estimator thread 0... [ 245.457807][T10187] IPVS: using max 29 ests per chain, 69600 per kthread [ 245.686309][T10209] syzkaller0: entered promiscuous mode [ 245.705326][T10209] syzkaller0: entered allmulticast mode [ 245.734775][T10206] batadv_slave_0: entered promiscuous mode [ 245.912455][T10214] bond6: Unable to set up delay as MII monitoring is disabled [ 245.922045][T10214] bond6 (unregistering): Released all slaves [ 245.962330][T10206] batadv_slave_0: left promiscuous mode [ 246.309862][T10239] lo: Caught tx_queue_len zero misconfig [ 246.617541][T10254] __nla_validate_parse: 5 callbacks suppressed [ 246.617560][T10254] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1308'. [ 246.682063][T10258] syzkaller0: entered promiscuous mode [ 246.688253][T10258] syzkaller0: entered allmulticast mode [ 246.881297][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 246.957600][T10264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1311'. [ 247.223131][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 247.242161][T10274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.373163][T10278] bond1: (slave bond0): Removing an active aggregator [ 247.408417][T10278] bond1: (slave bond0): Releasing backup interface [ 247.600938][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1322'. [ 247.727849][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 247.833035][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 247.848342][T10309] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 247.912715][T10309] erspan1: entered allmulticast mode [ 248.045978][T10316] netlink: 'syz.0.1329': attribute type 27 has an invalid length. [ 248.077689][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 248.287686][T10327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.367194][T10332] tipc: Enabled bearer , priority 0 [ 248.376013][T10336] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 248.438363][T10336] ipt_ECN: cannot use operation on non-tcp rule [ 248.457465][T10328] xt_CT: No such helper "netbios-ns" [ 248.464081][T10331] tipc: Disabling bearer [ 248.480349][T10327] xt_CT: No such helper "netbios-ns" [ 248.679095][T10351] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 248.691894][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1340'. [ 248.710526][T10351] bond5: entered promiscuous mode [ 248.719468][T10351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.742310][T10350] tipc: Enabling of bearer rejected, already enabled [ 248.806713][T10360] FAULT_INJECTION: forcing a failure. [ 248.806713][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 248.820051][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.0.1342 Not tainted syzkaller #0 PREEMPT(full) [ 248.820075][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.820085][T10360] Call Trace: [ 248.820092][T10360] [ 248.820100][T10360] dump_stack_lvl+0xe8/0x150 [ 248.820125][T10360] should_fail_ex+0x412/0x560 [ 248.820149][T10360] should_failslab+0xa8/0x100 [ 248.820167][T10360] ? __kernfs_new_node+0xea/0x970 [ 248.820190][T10360] kmem_cache_alloc_noprof+0x87/0x650 [ 248.820221][T10360] __kernfs_new_node+0xea/0x970 [ 248.820249][T10360] ? __pfx___kernfs_new_node+0x10/0x10 [ 248.820279][T10360] ? kernfs_root+0x1c/0x230 [ 248.820305][T10360] ? kernfs_root+0x1c/0x230 [ 248.820325][T10360] ? kernfs_root+0x1c/0x230 [ 248.820345][T10360] ? kernfs_root+0x1c/0x230 [ 248.820370][T10360] kernfs_new_node+0x102/0x210 [ 248.820396][T10360] kernfs_create_dir_ns+0x44/0x130 [ 248.820422][T10360] sysfs_create_dir_ns+0x12f/0x2a0 [ 248.820446][T10360] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 248.820468][T10360] ? do_raw_spin_unlock+0xf5/0x210 [ 248.820496][T10360] kobject_add_internal+0x62b/0xd00 [ 248.820526][T10360] kobject_add+0x163/0x240 [ 248.820545][T10360] ? __pfx_kobject_add+0x10/0x10 [ 248.820569][T10360] ? __pfx_kobject_add+0x10/0x10 [ 248.820591][T10360] ? kobject_init+0x83/0x1e0 [ 248.820614][T10360] ? get_device_parent+0x366/0x3a0 [ 248.820642][T10360] device_add+0x408/0xbb0 [ 248.820665][T10360] ? device_initialize+0x26a/0x460 [ 248.820691][T10360] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 248.820714][T10360] wakeup_source_register+0x18a/0x380 [ 248.820744][T10360] ep_insert+0xf34/0x1a40 [ 248.820780][T10360] ? __pfx_ep_insert+0x10/0x10 [ 248.820814][T10360] ? bpf_lsm_capable+0x9/0x20 [ 248.820840][T10360] do_epoll_ctl+0x7f4/0xe80 [ 248.820874][T10360] __x64_sys_epoll_ctl+0x165/0x1b0 [ 248.820905][T10360] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 248.820937][T10360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.820955][T10360] do_syscall_64+0x174/0x580 [ 248.820973][T10360] ? trace_irq_disable+0x3b/0x140 [ 248.820995][T10360] ? clear_bhb_loop+0x40/0x90 [ 248.821014][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.821031][T10360] RIP: 0033:0x7f5c2159ce59 [ 248.821048][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.821063][T10360] RSP: 002b:00007f5c223cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 248.821083][T10360] RAX: ffffffffffffffda RBX: 00007f5c21815fa0 RCX: 00007f5c2159ce59 [ 248.821094][T10360] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 248.821104][T10360] RBP: 00007f5c223cb090 R08: 0000000000000000 R09: 0000000000000000 [ 248.821114][T10360] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 248.821124][T10360] R13: 00007f5c21816038 R14: 00007f5c21815fa0 R15: 00007ffc3df746e8 [ 248.821151][T10360] [ 248.821189][T10360] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 248.846439][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1341'. [ 249.191027][T10369] tipc: Enabling of bearer rejected, failed to enable media [ 249.231628][T10363] veth1_macvtap: left promiscuous mode [ 249.327742][T10363] veth1_macvtap: entered promiscuous mode [ 249.469352][T10383] syzkaller0: entered promiscuous mode [ 249.486905][T10383] syzkaller0: entered allmulticast mode [ 249.518206][T10383] tipc: Enabled bearer , priority 0 [ 249.557521][T10381] tipc: Resetting bearer [ 249.612418][T10381] tipc: Disabling bearer [ 249.696597][T10399] FAULT_INJECTION: forcing a failure. [ 249.696597][T10399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.749116][T10395] geneve2: entered promiscuous mode [ 249.752107][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz.4.1354 Not tainted syzkaller #0 PREEMPT(full) [ 249.752132][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.752143][T10399] Call Trace: [ 249.752150][T10399] [ 249.752157][T10399] dump_stack_lvl+0xe8/0x150 [ 249.752183][T10399] should_fail_ex+0x412/0x560 [ 249.752206][T10399] _copy_from_user+0x2d/0xb0 [ 249.752229][T10399] ___sys_recvmsg+0x175/0x590 [ 249.752255][T10399] ? __pfx____sys_recvmsg+0x10/0x10 [ 249.752280][T10399] ? __fget_files+0x2a/0x420 [ 249.752326][T10399] do_recvmmsg+0x334/0x800 [ 249.752354][T10399] ? __pfx_do_recvmmsg+0x10/0x10 [ 249.752385][T10399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.752420][T10399] __x64_sys_recvmmsg+0x198/0x250 [ 249.752444][T10399] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 249.752473][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.752492][T10399] do_syscall_64+0x174/0x580 [ 249.752512][T10399] ? clear_bhb_loop+0x40/0x90 [ 249.752540][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.752558][T10399] RIP: 0033:0x7fc0b6b9ce59 [ 249.752574][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.752589][T10399] RSP: 002b:00007fc0b79ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 249.752608][T10399] RAX: ffffffffffffffda RBX: 00007fc0b6e15fa0 RCX: 00007fc0b6b9ce59 [ 249.752620][T10399] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 249.752631][T10399] RBP: 00007fc0b79ba090 R08: 0000000000000000 R09: 0000000000000000 [ 249.752642][T10399] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 249.752652][T10399] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 249.752680][T10399] [ 249.968648][T10395] geneve2: entered allmulticast mode [ 249.975914][ T1123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.987169][ T1123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.004055][ T1123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.011393][T10411] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 250.020232][ T1123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.046072][T10410] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 250.065628][T10410] netlink: 'syz.4.1359': attribute type 27 has an invalid length. [ 250.126777][T10402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.266187][T10402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.460465][T10402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.523696][T10430] FAULT_INJECTION: forcing a failure. [ 250.523696][T10430] name failslab, interval 1, probability 0, space 0, times 0 [ 250.536441][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.0.1364 Not tainted syzkaller #0 PREEMPT(full) [ 250.536466][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.536476][T10430] Call Trace: [ 250.536484][T10430] [ 250.536491][T10430] dump_stack_lvl+0xe8/0x150 [ 250.536517][T10430] should_fail_ex+0x412/0x560 [ 250.536541][T10430] should_failslab+0xa8/0x100 [ 250.536559][T10430] ? skb_clone+0x212/0x3a0 [ 250.536580][T10430] kmem_cache_alloc_noprof+0x87/0x650 [ 250.536604][T10430] ? __bpf_redirect+0x9b4/0x12a0 [ 250.536633][T10430] skb_clone+0x212/0x3a0 [ 250.536658][T10430] bpf_clone_redirect+0x16a/0x4b0 [ 250.536692][T10430] ? bpf_test_run+0x1d1/0x830 [ 250.536713][T10430] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 250.536734][T10430] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.536774][T10430] ? __pfx___schedule+0x10/0x10 [ 250.536791][T10430] ? ktime_get+0x45/0x220 [ 250.536827][T10430] ? preempt_schedule_thunk+0x16/0x30 [ 250.536853][T10430] ? preempt_schedule_common+0x82/0xd0 [ 250.536871][T10430] ? bpf_test_run+0x1d1/0x830 [ 250.536893][T10430] ? bpf_test_timer_continue+0x10c/0x320 [ 250.536917][T10430] bpf_test_run+0x354/0x830 [ 250.536958][T10430] ? __pfx_bpf_test_run+0x10/0x10 [ 250.536995][T10430] ? eth_type_trans+0x348/0x7e0 [ 250.537022][T10430] ? skb_dst_set+0x72/0x140 [ 250.537044][T10430] bpf_prog_test_run_skb+0xe2c/0x2260 [ 250.537084][T10430] ? __fget_files+0x3a0/0x420 [ 250.537105][T10430] ? __fget_files+0x2a/0x420 [ 250.537131][T10430] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.537152][T10430] bpf_prog_test_run+0x2c7/0x340 [ 250.537174][T10430] __sys_bpf+0x643/0x950 [ 250.537201][T10430] ? __pfx___sys_bpf+0x10/0x10 [ 250.537246][T10430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.537269][T10430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.537288][T10430] __x64_sys_bpf+0x7c/0x90 [ 250.537312][T10430] do_syscall_64+0x174/0x580 [ 250.537330][T10430] ? trace_irq_disable+0x3b/0x140 [ 250.537354][T10430] ? clear_bhb_loop+0x40/0x90 [ 250.537376][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.537393][T10430] RIP: 0033:0x7f5c2159ce59 [ 250.537409][T10430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.537424][T10430] RSP: 002b:00007f5c223cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.537443][T10430] RAX: ffffffffffffffda RBX: 00007f5c21815fa0 RCX: 00007f5c2159ce59 [ 250.537456][T10430] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 250.537466][T10430] RBP: 00007f5c223cb090 R08: 0000000000000000 R09: 0000000000000000 [ 250.537478][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.537488][T10430] R13: 00007f5c21816038 R14: 00007f5c21815fa0 R15: 00007ffc3df746e8 [ 250.537517][T10430] [ 250.969289][T10402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.565207][T10462] block nbd0: not configured, cannot reconfigure [ 251.929804][ T6287] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.949644][T10466] syzkaller0: entered promiscuous mode [ 251.956492][T10466] syzkaller0: entered allmulticast mode [ 252.050233][ T1123] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.282777][ T1123] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.341798][ T1123] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.363340][T10498] FAULT_INJECTION: forcing a failure. [ 252.363340][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 252.393727][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.3.1378 Not tainted syzkaller #0 PREEMPT(full) [ 252.393751][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.393759][T10498] Call Trace: [ 252.393765][T10498] [ 252.393771][T10498] dump_stack_lvl+0xe8/0x150 [ 252.393792][T10498] should_fail_ex+0x412/0x560 [ 252.393811][T10498] should_failslab+0xa8/0x100 [ 252.393824][T10498] ? skb_clone+0x212/0x3a0 [ 252.393841][T10498] kmem_cache_alloc_noprof+0x87/0x650 [ 252.393859][T10498] ? sk_filter_trim_cap+0x19e/0xce0 [ 252.393881][T10498] skb_clone+0x212/0x3a0 [ 252.393899][T10498] __netlink_deliver_tap+0x404/0x850 [ 252.393924][T10498] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.393940][T10498] netlink_deliver_tap+0x19c/0x1b0 [ 252.393956][T10498] netlink_dump+0x8ed/0xe10 [ 252.393978][T10498] ? __pfx_netlink_dump+0x10/0x10 [ 252.394001][T10498] ? netlink_recvmsg+0x5d6/0xa50 [ 252.394015][T10498] ? kmem_cache_free+0x182/0x650 [ 252.394037][T10498] netlink_recvmsg+0x690/0xa50 [ 252.394059][T10498] ? __pfx_netlink_recvmsg+0x10/0x10 [ 252.394077][T10498] ? __lock_acquire+0x6b5/0x2cf0 [ 252.394097][T10498] ? __pfx_netlink_recvmsg+0x10/0x10 [ 252.394113][T10498] sock_recvmsg_nosec+0x10c/0x140 [ 252.394134][T10498] ____sys_recvmsg+0x3e3/0x4a0 [ 252.394167][T10498] ? __pfx_____sys_recvmsg+0x10/0x10 [ 252.394194][T10498] ? import_iovec+0x73/0xa0 [ 252.394214][T10498] ___sys_recvmsg+0x215/0x590 [ 252.394234][T10498] ? __pfx____sys_recvmsg+0x10/0x10 [ 252.394253][T10498] ? __fget_files+0x2a/0x420 [ 252.394292][T10498] do_recvmmsg+0x334/0x800 [ 252.394314][T10498] ? __pfx_do_recvmmsg+0x10/0x10 [ 252.394339][T10498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.394369][T10498] __x64_sys_recvmmsg+0x198/0x250 [ 252.394388][T10498] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 252.394412][T10498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.394430][T10498] do_syscall_64+0x174/0x580 [ 252.394447][T10498] ? trace_irq_disable+0x3b/0x140 [ 252.394471][T10498] ? clear_bhb_loop+0x40/0x90 [ 252.394491][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.394507][T10498] RIP: 0033:0x7f467499ce59 [ 252.394523][T10498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.394537][T10498] RSP: 002b:00007f4675851028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 252.394554][T10498] RAX: ffffffffffffffda RBX: 00007f4674c15fa0 RCX: 00007f467499ce59 [ 252.394566][T10498] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 252.394576][T10498] RBP: 00007f4675851090 R08: 0000000000000000 R09: 0000000000000000 [ 252.394586][T10498] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 252.394596][T10498] R13: 00007f4674c16038 R14: 00007f4674c15fa0 R15: 00007fff02bb3d78 [ 252.394624][T10498] [ 253.192179][T10515] __nla_validate_parse: 6 callbacks suppressed [ 253.192200][T10515] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1384'. [ 253.211671][T10519] syzkaller0: entered allmulticast mode [ 253.451695][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'. [ 255.529496][T10550] IPv6: addrconf: prefix option has invalid lifetime [ 255.545666][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.636517][T10539] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 256.051373][T10564] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1401'. [ 256.403761][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 256.416945][T10593] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 256.471435][T10593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.656637][T10592] bond2: entered promiscuous mode [ 256.727122][T10592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.776942][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 256.785046][T10612] netlink: 'syz.0.1414': attribute type 27 has an invalid length. [ 256.804273][T10595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.811498][T10595] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 256.831496][T10595] bond2: (slave ip6gre2): Error -95 calling set_mac_address [ 256.903464][T10607] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1413'. [ 257.014753][T10611] 8021q: adding VLAN 0 to HW filter on device eth0 [ 257.031024][T10611] 8021q: adding VLAN 0 to HW filter on device eth1 [ 257.062832][T10611] 8021q: adding VLAN 0 to HW filter on device eth2 [ 257.096889][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 257.100559][T10611] 8021q: adding VLAN 0 to HW filter on device eth3 [ 257.158206][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 257.179194][T10630] veth1: Caught tx_queue_len zero misconfig [ 257.220171][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1417'. [ 257.248174][T10630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1417'. [ 257.334991][T10636] syzkaller0: entered promiscuous mode [ 257.569779][T10651] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 257.948880][ T5647] block nbd0: Receive control failed (result -32) [ 258.640435][T10682] __nla_validate_parse: 2 callbacks suppressed [ 258.640453][T10682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1435'. [ 260.188793][T10651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 260.197573][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.207733][T10656] bond6: (slave bond0): Enslaving as a backup interface with a down link [ 260.220330][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 260.526390][T10698] syzkaller0: entered promiscuous mode [ 260.532050][T10698] syzkaller0: entered allmulticast mode [ 260.548887][T10702] openvswitch: netlink: EtherType 50a is less than min 600 [ 260.592570][T10706] FAULT_INJECTION: forcing a failure. [ 260.592570][T10706] name failslab, interval 1, probability 0, space 0, times 0 [ 260.629740][T10706] CPU: 1 UID: 0 PID: 10706 Comm: syz.4.1447 Not tainted syzkaller #0 PREEMPT(full) [ 260.629766][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.629777][T10706] Call Trace: [ 260.629784][T10706] [ 260.629791][T10706] dump_stack_lvl+0xe8/0x150 [ 260.629817][T10706] should_fail_ex+0x412/0x560 [ 260.629841][T10706] should_failslab+0xa8/0x100 [ 260.629862][T10706] __kmalloc_cache_noprof+0x88/0x660 [ 260.629885][T10706] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 260.629904][T10706] ? sctp_add_bind_addr+0x8c/0x370 [ 260.629935][T10706] sctp_add_bind_addr+0x8c/0x370 [ 260.629964][T10706] sctp_copy_local_addr_list+0x314/0x4f0 [ 260.629993][T10706] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 260.630019][T10706] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 260.630046][T10706] ? sctp_v6_is_any+0x64/0x80 [ 260.630065][T10706] ? sctp_copy_one_addr+0x93/0x360 [ 260.630093][T10706] sctp_bind_addr_copy+0xb3/0x3c0 [ 260.630119][T10706] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 260.630146][T10706] sctp_connect_new_asoc+0x2ff/0x6b0 [ 260.630170][T10706] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 260.630196][T10706] ? __local_bh_enable_ip+0xd0/0x130 [ 260.630213][T10706] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 260.630238][T10706] ? security_sctp_bind_connect+0x7e/0x2c0 [ 260.630263][T10706] sctp_sendmsg+0x1576/0x2c50 [ 260.630298][T10706] ? __pfx_sctp_sendmsg+0x10/0x10 [ 260.630322][T10706] ? aa_sk_perm+0x6d5/0x900 [ 260.630344][T10706] ? __might_fault+0xaf/0x130 [ 260.630373][T10706] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.630399][T10706] ? sock_rps_record_flow+0x19/0x350 [ 260.630424][T10706] ? __pfx_inet_sendmsg+0x10/0x10 [ 260.630449][T10706] ? inet_sendmsg+0x2f4/0x370 [ 260.630474][T10706] ? __pfx_inet_sendmsg+0x10/0x10 [ 260.630499][T10706] __sys_sendto+0x5de/0x710 [ 260.630520][T10706] ? __pfx___sys_sendto+0x10/0x10 [ 260.630536][T10706] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 260.630569][T10706] ? __fget_files+0x3a0/0x420 [ 260.630601][T10706] ? ksys_write+0x242/0x270 [ 260.630635][T10706] ? __pfx_ksys_write+0x10/0x10 [ 260.630662][T10706] __x64_sys_sendto+0xde/0x100 [ 260.630682][T10706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.630699][T10706] do_syscall_64+0x174/0x580 [ 260.630718][T10706] ? trace_irq_disable+0x3b/0x140 [ 260.630744][T10706] ? clear_bhb_loop+0x40/0x90 [ 260.630766][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.630785][T10706] RIP: 0033:0x7fc0b6b9ce59 [ 260.630802][T10706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.630818][T10706] RSP: 002b:00007fc0b79ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 260.630838][T10706] RAX: ffffffffffffffda RBX: 00007fc0b6e15fa0 RCX: 00007fc0b6b9ce59 [ 260.630851][T10706] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 260.630861][T10706] RBP: 00007fc0b79ba090 R08: 0000200000000080 R09: 000000000000001c [ 260.630872][T10706] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 260.630882][T10706] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 260.630910][T10706] [ 260.632793][T10698] bond7: Removing last ns target with arp_interval on [ 261.072644][T10715] bond7: option packets_per_slave: invalid value (1048582) [ 261.107848][T10715] bond7: option packets_per_slave: allowed values 0 - 65535 [ 261.146197][T10715] bond7 (unregistering): Released all slaves [ 261.658138][T10730] FAULT_INJECTION: forcing a failure. [ 261.658138][T10730] name failslab, interval 1, probability 0, space 0, times 0 [ 261.670875][T10730] CPU: 1 UID: 0 PID: 10730 Comm: syz.3.1453 Not tainted syzkaller #0 PREEMPT(full) [ 261.670899][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.670910][T10730] Call Trace: [ 261.670917][T10730] [ 261.670925][T10730] dump_stack_lvl+0xe8/0x150 [ 261.670951][T10730] should_fail_ex+0x412/0x560 [ 261.670976][T10730] should_failslab+0xa8/0x100 [ 261.670994][T10730] ? skb_clone+0x212/0x3a0 [ 261.671015][T10730] kmem_cache_alloc_noprof+0x87/0x650 [ 261.671039][T10730] ? __bpf_redirect+0x9b4/0x12a0 [ 261.671068][T10730] skb_clone+0x212/0x3a0 [ 261.671091][T10730] bpf_clone_redirect+0x16a/0x4b0 [ 261.671124][T10730] ? bpf_test_run+0x1d1/0x830 [ 261.671145][T10730] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 261.671167][T10730] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.671192][T10730] ? arch_stack_walk+0xfb/0x150 [ 261.671222][T10730] ? ktime_get+0x45/0x220 [ 261.671253][T10730] ? ktime_get+0x45/0x220 [ 261.671279][T10730] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 261.671305][T10730] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.671323][T10730] ? ktime_get+0x45/0x220 [ 261.671345][T10730] ? seqcount_lockdep_reader_access+0xea/0x100 [ 261.671370][T10730] ? bpf_test_run+0x1d1/0x830 [ 261.671393][T10730] ? bpf_test_timer_continue+0x10c/0x320 [ 261.671418][T10730] bpf_test_run+0x354/0x830 [ 261.671458][T10730] ? __pfx_bpf_test_run+0x10/0x10 [ 261.671500][T10730] ? eth_type_trans+0x348/0x7e0 [ 261.671528][T10730] ? skb_dst_set+0x72/0x140 [ 261.671558][T10730] bpf_prog_test_run_skb+0xe2c/0x2260 [ 261.671599][T10730] ? __fget_files+0x3a0/0x420 [ 261.671619][T10730] ? __fget_files+0x2a/0x420 [ 261.671645][T10730] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 261.671667][T10730] bpf_prog_test_run+0x2c7/0x340 [ 261.671689][T10730] __sys_bpf+0x643/0x950 [ 261.671716][T10730] ? __pfx___sys_bpf+0x10/0x10 [ 261.671757][T10730] ? ksys_write+0x242/0x270 [ 261.671784][T10730] ? __pfx_ksys_write+0x10/0x10 [ 261.671812][T10730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.671831][T10730] __x64_sys_bpf+0x7c/0x90 [ 261.671856][T10730] do_syscall_64+0x174/0x580 [ 261.671873][T10730] ? trace_irq_disable+0x3b/0x140 [ 261.671897][T10730] ? clear_bhb_loop+0x40/0x90 [ 261.671917][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.671935][T10730] RIP: 0033:0x7f467499ce59 [ 261.671951][T10730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.671965][T10730] RSP: 002b:00007f4675851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.671983][T10730] RAX: ffffffffffffffda RBX: 00007f4674c15fa0 RCX: 00007f467499ce59 [ 261.671996][T10730] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 261.672008][T10730] RBP: 00007f4675851090 R08: 0000000000000000 R09: 0000000000000000 [ 261.672019][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.672030][T10730] R13: 00007f4674c16038 R14: 00007f4674c15fa0 R15: 00007fff02bb3d78 [ 261.672059][T10730] [ 262.137976][T10737] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1456'. [ 262.864192][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 263.220469][T10802] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 263.428200][T10811] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1470'. [ 263.585450][T10817] rdma_rxe: rxe_newlink: failed to add bond0 [ 263.639655][ T1123] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.679478][ T1123] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.771151][ T1123] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.799754][ T1123] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.871654][T10829] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 263.873016][T10822] netlink: 'syz.4.1471': attribute type 5 has an invalid length. [ 263.900088][T10822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1471'. [ 264.074972][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 264.123775][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 264.164680][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 264.369307][ T29] audit: type=1804 audit(1780719687.245:5): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1478" name="/newroot/287/memory.events" dev="tmpfs" ino=1477 res=1 errno=0 [ 264.435509][ T29] audit: type=1800 audit(1780719687.275:6): pid=10849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1478" name="memory.events" dev="tmpfs" ino=1477 res=0 errno=0 [ 264.519466][T10863] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1483'. [ 264.716305][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 264.765366][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 264.931451][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 265.143117][T10894] FAULT_INJECTION: forcing a failure. [ 265.143117][T10894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.173390][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.3.1494 Not tainted syzkaller #0 PREEMPT(full) [ 265.173417][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 265.173428][T10894] Call Trace: [ 265.173435][T10894] [ 265.173443][T10894] dump_stack_lvl+0xe8/0x150 [ 265.173470][T10894] should_fail_ex+0x412/0x560 [ 265.173495][T10894] _copy_from_iter+0x1d3/0x1670 [ 265.173517][T10894] ? rcu_is_watching+0x15/0xb0 [ 265.173545][T10894] ? __pfx__copy_from_iter+0x10/0x10 [ 265.173572][T10894] ? netlink_sendmsg+0x650/0xb40 [ 265.173595][T10894] ? skb_put+0x11b/0x210 [ 265.173618][T10894] netlink_sendmsg+0x6c0/0xb40 [ 265.173648][T10894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.173671][T10894] ? aa_sock_msg_perm+0xf1/0x1b0 [ 265.173699][T10894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.173726][T10894] ____sys_sendmsg+0x972/0x9f0 [ 265.173747][T10894] ? __might_fault+0xaf/0x130 [ 265.173775][T10894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.173803][T10894] ? import_iovec+0x73/0xa0 [ 265.173828][T10894] ___sys_sendmsg+0x2a5/0x360 [ 265.173847][T10894] ? __lock_acquire+0x6b5/0x2cf0 [ 265.173870][T10894] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.173925][T10894] ? __fget_files+0x2a/0x420 [ 265.173946][T10894] ? __fget_files+0x3a0/0x420 [ 265.173976][T10894] __x64_sys_sendmsg+0x1bd/0x2a0 [ 265.173999][T10894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.174028][T10894] ? __pfx_ksys_write+0x10/0x10 [ 265.174061][T10894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.174081][T10894] do_syscall_64+0x174/0x580 [ 265.174101][T10894] ? trace_irq_disable+0x3b/0x140 [ 265.174125][T10894] ? clear_bhb_loop+0x40/0x90 [ 265.174147][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.174165][T10894] RIP: 0033:0x7f467499ce59 [ 265.174182][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.174197][T10894] RSP: 002b:00007f4675851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.174216][T10894] RAX: ffffffffffffffda RBX: 00007f4674c15fa0 RCX: 00007f467499ce59 [ 265.174229][T10894] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 265.174241][T10894] RBP: 00007f4675851090 R08: 0000000000000000 R09: 0000000000000000 [ 265.174252][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.174263][T10894] R13: 00007f4674c16038 R14: 00007f4674c15fa0 R15: 00007fff02bb3d78 [ 265.174291][T10894] [ 265.523704][T10896] smc: net device wlan0 applied user defined pnetid SYZ0 [ 265.547917][T10896] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 265.592192][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1496'. [ 266.184121][T10923] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 266.232041][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 266.370957][T10927] syzkaller0: entered promiscuous mode [ 266.400711][T10927] syzkaller0: entered allmulticast mode [ 267.774225][T10968] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 267.784136][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.211809][T10994] syzkaller0: entered promiscuous mode [ 268.222794][T10994] syzkaller0: entered allmulticast mode [ 268.366933][T10996] nbd: nbd0 already in use [ 268.557539][T11016] syzkaller0: entered promiscuous mode [ 268.563706][T11016] syzkaller0: entered allmulticast mode [ 268.628256][T11020] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 268.670553][T11020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.683068][T11020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.692871][T11020] bond6: (slave bond0): Enslaving as a backup interface with an up link [ 268.848972][T11030] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 269.105103][T11047] netlink: 'syz.3.1543': attribute type 83 has an invalid length. [ 269.202105][ T42] IPVS: starting estimator thread 0... [ 269.305046][T11054] IPVS: using max 35 ests per chain, 84000 per kthread [ 269.348939][T11061] __nla_validate_parse: 4 callbacks suppressed [ 269.348957][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 269.393692][T11056] FAULT_INJECTION: forcing a failure. [ 269.393692][T11056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.422262][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.3.1546 Not tainted syzkaller #0 PREEMPT(full) [ 269.422287][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.422298][T11056] Call Trace: [ 269.422306][T11056] [ 269.422314][T11056] dump_stack_lvl+0xe8/0x150 [ 269.422341][T11056] should_fail_ex+0x412/0x560 [ 269.422368][T11056] copy_folio_from_iter_atomic+0x7ce/0x1ad0 [ 269.422390][T11056] ? shmem_allowable_huge_orders+0x309/0x690 [ 269.422432][T11056] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 269.422461][T11056] ? shmem_write_begin+0x1d8/0x330 [ 269.422492][T11056] generic_perform_write+0x5d9/0x8f0 [ 269.422530][T11056] ? __pfx_generic_perform_write+0x10/0x10 [ 269.422558][T11056] ? do_raw_spin_unlock+0xf5/0x210 [ 269.422582][T11056] ? mnt_put_write_access_file+0xc0/0x100 [ 269.422615][T11056] ? file_update_time_flags+0x400/0x4a0 [ 269.422643][T11056] shmem_file_write_iter+0xf8/0x120 [ 269.422667][T11056] do_iter_readv_writev+0x619/0x8c0 [ 269.422694][T11056] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 269.422738][T11056] vfs_writev+0x33c/0x990 [ 269.422768][T11056] ? __pfx_vfs_writev+0x10/0x10 [ 269.422802][T11056] ? __fget_files+0x2a/0x420 [ 269.422828][T11056] ? __fget_files+0x3a0/0x420 [ 269.422848][T11056] ? __fget_files+0x2a/0x420 [ 269.422883][T11056] do_writev+0x154/0x2e0 [ 269.422906][T11056] ? __pfx_do_writev+0x10/0x10 [ 269.422935][T11056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.422956][T11056] do_syscall_64+0x174/0x580 [ 269.422974][T11056] ? trace_irq_disable+0x3b/0x140 [ 269.423020][T11056] ? clear_bhb_loop+0x40/0x90 [ 269.423040][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.423057][T11056] RIP: 0033:0x7f467499ce59 [ 269.423074][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.423089][T11056] RSP: 002b:00007f4675851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 269.423107][T11056] RAX: ffffffffffffffda RBX: 00007f4674c15fa0 RCX: 00007f467499ce59 [ 269.423119][T11056] RDX: 0000000000000009 RSI: 0000200000003500 RDI: 000000000000000c [ 269.423130][T11056] RBP: 00007f4675851090 R08: 0000000000000000 R09: 0000000000000000 [ 269.423140][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.423150][T11056] R13: 00007f4674c16038 R14: 00007f4674c15fa0 R15: 00007fff02bb3d78 [ 269.423181][T11056] [ 270.063874][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 270.353482][T11102] netlink: 'syz.4.1563': attribute type 3 has an invalid length. [ 270.414774][T11104] netlink: 'syz.1.1562': attribute type 2 has an invalid length. [ 270.428835][T11104] netlink: 'syz.1.1562': attribute type 2 has an invalid length. [ 270.439229][T11106] FAULT_INJECTION: forcing a failure. [ 270.439229][T11106] name failslab, interval 1, probability 0, space 0, times 0 [ 270.455542][T11106] CPU: 1 UID: 0 PID: 11106 Comm: syz.4.1564 Not tainted syzkaller #0 PREEMPT(full) [ 270.455565][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.455575][T11106] Call Trace: [ 270.455583][T11106] [ 270.455590][T11106] dump_stack_lvl+0xe8/0x150 [ 270.455613][T11106] should_fail_ex+0x412/0x560 [ 270.455636][T11106] should_failslab+0xa8/0x100 [ 270.455655][T11106] __kmalloc_cache_noprof+0x88/0x660 [ 270.455677][T11106] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 270.455695][T11106] ? sctp_add_bind_addr+0x8c/0x370 [ 270.455724][T11106] sctp_add_bind_addr+0x8c/0x370 [ 270.455751][T11106] sctp_copy_local_addr_list+0x314/0x4f0 [ 270.455780][T11106] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 270.455806][T11106] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 270.455832][T11106] ? sctp_v6_is_any+0x64/0x80 [ 270.455850][T11106] ? sctp_copy_one_addr+0x93/0x360 [ 270.455878][T11106] sctp_bind_addr_copy+0xb3/0x3c0 [ 270.455903][T11106] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 270.455930][T11106] sctp_connect_new_asoc+0x2ff/0x6b0 [ 270.455964][T11106] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 270.455980][T11106] ? __local_bh_enable_ip+0xd0/0x130 [ 270.455990][T11106] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 270.456005][T11106] ? security_sctp_bind_connect+0x7e/0x2c0 [ 270.456020][T11106] sctp_sendmsg+0x1576/0x2c50 [ 270.456030][T11106] ? unwind_next_frame+0xa6/0x2550 [ 270.456050][T11106] ? __pfx_sctp_sendmsg+0x10/0x10 [ 270.456063][T11106] ? aa_sk_perm+0x6d5/0x900 [ 270.456081][T11106] ? __pfx_aa_sk_perm+0x10/0x10 [ 270.456096][T11106] ? sock_rps_record_flow+0x19/0x350 [ 270.456113][T11106] ? inet_sendmsg+0x2f4/0x370 [ 270.456129][T11106] ____sys_sendmsg+0x80a/0x9f0 [ 270.456146][T11106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.456162][T11106] ? import_iovec+0x73/0xa0 [ 270.456176][T11106] ___sys_sendmsg+0x2a5/0x360 [ 270.456187][T11106] ? __lock_acquire+0x6b5/0x2cf0 [ 270.456200][T11106] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.456230][T11106] ? __fget_files+0x2a/0x420 [ 270.456241][T11106] ? __fget_files+0x3a0/0x420 [ 270.456258][T11106] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.456271][T11106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.456287][T11106] ? __pfx_ksys_write+0x10/0x10 [ 270.456306][T11106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.456317][T11106] do_syscall_64+0x174/0x580 [ 270.456328][T11106] ? trace_irq_disable+0x3b/0x140 [ 270.456343][T11106] ? clear_bhb_loop+0x40/0x90 [ 270.456355][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.456365][T11106] RIP: 0033:0x7fc0b6b9ce59 [ 270.456376][T11106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.456385][T11106] RSP: 002b:00007fc0b79ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.456396][T11106] RAX: ffffffffffffffda RBX: 00007fc0b6e15fa0 RCX: 00007fc0b6b9ce59 [ 270.456403][T11106] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000004 [ 270.456410][T11106] RBP: 00007fc0b79ba090 R08: 0000000000000000 R09: 0000000000000000 [ 270.456416][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.456422][T11106] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 270.456438][T11106] [ 270.467069][T11100] macsec1: entered promiscuous mode [ 270.740293][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 270.936783][T11116] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 270.962045][T11120] tipc: Enabling of bearer rejected, already enabled [ 271.317841][T11132] pimreg: entered allmulticast mode [ 271.369215][T11131] pimreg: left allmulticast mode [ 271.618792][T11146] FAULT_INJECTION: forcing a failure. [ 271.618792][T11146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.653325][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.4.1580 Not tainted syzkaller #0 PREEMPT(full) [ 271.653349][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.653359][T11146] Call Trace: [ 271.653366][T11146] [ 271.653374][T11146] dump_stack_lvl+0xe8/0x150 [ 271.653399][T11146] should_fail_ex+0x412/0x560 [ 271.653421][T11146] _copy_from_iter+0x1d3/0x1670 [ 271.653438][T11146] ? unwind_next_frame+0xa6/0x2550 [ 271.653466][T11146] ? __lock_acquire+0x6b5/0x2cf0 [ 271.653485][T11146] ? __pfx__copy_from_iter+0x10/0x10 [ 271.653517][T11146] tun_get_user+0x267/0x43e0 [ 271.653538][T11146] ? aa_file_perm+0x192/0x15e0 [ 271.653564][T11146] ? aa_file_perm+0x192/0x15e0 [ 271.653584][T11146] ? aa_file_perm+0x50e/0x15e0 [ 271.653600][T11146] ? __pfx_tun_get_user+0x10/0x10 [ 271.653620][T11146] ? __lock_acquire+0x6b5/0x2cf0 [ 271.653642][T11146] ? kstrtoull+0x12f/0x1d0 [ 271.653672][T11146] ? ref_tracker_alloc+0x35c/0x4c0 [ 271.653693][T11146] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 271.653715][T11146] ? tun_get+0x1c/0x2f0 [ 271.653732][T11146] ? tun_get+0x1c/0x2f0 [ 271.653750][T11146] ? tun_get+0x1c/0x2f0 [ 271.653765][T11146] ? tun_get+0x1c/0x2f0 [ 271.653791][T11146] tun_chr_write_iter+0x113/0x200 [ 271.653810][T11146] vfs_write+0x61d/0xb90 [ 271.653843][T11146] ? __pfx_vfs_write+0x10/0x10 [ 271.653881][T11146] ? __fget_files+0x2a/0x420 [ 271.653909][T11146] ksys_write+0x150/0x270 [ 271.653935][T11146] ? __pfx_ksys_write+0x10/0x10 [ 271.653965][T11146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.653985][T11146] do_syscall_64+0x174/0x580 [ 271.654003][T11146] ? trace_irq_disable+0x3b/0x140 [ 271.654027][T11146] ? clear_bhb_loop+0x40/0x90 [ 271.654049][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.654066][T11146] RIP: 0033:0x7fc0b6b9ce59 [ 271.654083][T11146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.654097][T11146] RSP: 002b:00007fc0b79ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.654116][T11146] RAX: ffffffffffffffda RBX: 00007fc0b6e15fa0 RCX: 00007fc0b6b9ce59 [ 271.654129][T11146] RDX: 000000000000007c RSI: 0000200000000280 RDI: 0000000000000003 [ 271.654140][T11146] RBP: 00007fc0b79ba090 R08: 0000000000000000 R09: 0000000000000000 [ 271.654150][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.654160][T11146] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 271.654188][T11146] [ 271.663432][T11149] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1583'. [ 271.920553][T11149] openvswitch: netlink: Flow key attr not present in new flow. [ 272.541750][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 272.572680][T11173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1592'. [ 272.592962][T11171] xt_l2tp: invalid flags combination: 8 [ 272.797307][T11177] netlink: 'syz.0.1594': attribute type 13 has an invalid length. [ 272.821048][T11177] netlink: 'syz.0.1594': attribute type 17 has an invalid length. [ 273.039068][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 273.068877][T11177] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 273.076157][T11177] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 273.089234][T11177] bond2: left promiscuous mode [ 273.096372][T11177] bond3: left promiscuous mode [ 273.101391][T11177] erspan1: left promiscuous mode [ 273.107082][T11177] bond3: left allmulticast mode [ 273.113909][T11177] erspan1: left allmulticast mode [ 273.136066][T11177] bond4: left promiscuous mode [ 273.141577][T11199] rdma_rxe: rxe_newlink: failed to add bond0 [ 273.162045][ T3312] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.181225][ T3312] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.207325][ T3312] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.631139][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 273.676525][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1610'. [ 273.706889][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1612'. [ 274.441401][T11255] __nla_validate_parse: 1 callbacks suppressed [ 274.441419][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 274.830571][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 274.968045][T11284] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 274.988963][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'. [ 274.989080][T11288] FAULT_INJECTION: forcing a failure. [ 274.989080][T11288] name failslab, interval 1, probability 0, space 0, times 0 [ 275.033324][T11288] CPU: 0 UID: 0 PID: 11288 Comm: syz.1.1635 Not tainted syzkaller #0 PREEMPT(full) [ 275.033348][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.033359][T11288] Call Trace: [ 275.033366][T11288] [ 275.033375][T11288] dump_stack_lvl+0xe8/0x150 [ 275.033400][T11288] should_fail_ex+0x412/0x560 [ 275.033426][T11288] should_failslab+0xa8/0x100 [ 275.033445][T11288] __kmalloc_cache_noprof+0x88/0x660 [ 275.033470][T11288] ? gf128mul_init_64k_bbe+0xb7/0xee0 [ 275.033491][T11288] ? __kmalloc_cache_noprof+0x15b/0x660 [ 275.033519][T11288] gf128mul_init_64k_bbe+0xb7/0xee0 [ 275.033550][T11288] lrw_setkey+0x182/0x2d0 [ 275.033575][T11288] ? __pfx_lrw_setkey+0x10/0x10 [ 275.033605][T11288] crypto_skcipher_setkey+0x2bd/0x460 [ 275.033634][T11288] ? __pfx_skcipher_setkey+0x10/0x10 [ 275.033655][T11288] alg_setkey+0x138/0x190 [ 275.033677][T11288] alg_setsockopt+0x3da/0x4a0 [ 275.033702][T11288] ? __pfx_alg_setsockopt+0x10/0x10 [ 275.033722][T11288] do_sock_setsockopt+0x17c/0x1b0 [ 275.033748][T11288] __x64_sys_setsockopt+0x13d/0x1b0 [ 275.033770][T11288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.033790][T11288] do_syscall_64+0x174/0x580 [ 275.033809][T11288] ? trace_irq_disable+0x3b/0x140 [ 275.033833][T11288] ? clear_bhb_loop+0x40/0x90 [ 275.033855][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.033872][T11288] RIP: 0033:0x7f2d6959ce59 [ 275.033889][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.033904][T11288] RSP: 002b:00007f2d6a444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.033923][T11288] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 275.033936][T11288] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 275.033951][T11288] RBP: 00007f2d6a444090 R08: 0000000000000011 R09: 0000000000000000 [ 275.033962][T11288] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000002 [ 275.033973][T11288] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffe73119458 [ 275.034003][T11288] [ 275.481350][T11299] FAULT_INJECTION: forcing a failure. [ 275.481350][T11299] name failslab, interval 1, probability 0, space 0, times 0 [ 275.551632][T11299] CPU: 1 UID: 0 PID: 11299 Comm: syz.0.1638 Not tainted syzkaller #0 PREEMPT(full) [ 275.551656][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.551667][T11299] Call Trace: [ 275.551675][T11299] [ 275.551682][T11299] dump_stack_lvl+0xe8/0x150 [ 275.551709][T11299] should_fail_ex+0x412/0x560 [ 275.551734][T11299] should_failslab+0xa8/0x100 [ 275.551755][T11299] __kmalloc_cache_noprof+0x88/0x660 [ 275.551779][T11299] ? sctp_v6_cmp_addr+0x15/0xd0 [ 275.551796][T11299] ? sctp_add_bind_addr+0x8c/0x370 [ 275.551832][T11299] sctp_add_bind_addr+0x8c/0x370 [ 275.551862][T11299] sctp_copy_local_addr_list+0x314/0x4f0 [ 275.551892][T11299] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 275.551918][T11299] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 275.551946][T11299] ? sctp_v6_is_any+0x64/0x80 [ 275.551965][T11299] ? sctp_copy_one_addr+0x93/0x360 [ 275.551995][T11299] sctp_bind_addr_copy+0xb3/0x3c0 [ 275.552021][T11299] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 275.552049][T11299] sctp_connect_new_asoc+0x2ff/0x6b0 [ 275.552073][T11299] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 275.552100][T11299] ? sctp_get_af_specific+0x29/0x80 [ 275.552125][T11299] ? sctp_inet6_send_verify+0x80/0x300 [ 275.552148][T11299] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 275.552173][T11299] __sctp_connect+0x5cb/0xdc0 [ 275.552211][T11299] ? __pfx___sctp_connect+0x10/0x10 [ 275.552230][T11299] ? sctp_setsockopt+0x21c/0x12c0 [ 275.552249][T11299] ? security_sctp_bind_connect+0x7e/0x2c0 [ 275.552274][T11299] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 275.552303][T11299] sctp_setsockopt+0x708/0x12c0 [ 275.552322][T11299] ? sock_common_setsockopt+0x36/0xc0 [ 275.552347][T11299] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 275.552375][T11299] do_sock_setsockopt+0x17c/0x1b0 [ 275.552400][T11299] __x64_sys_setsockopt+0x13d/0x1b0 [ 275.552423][T11299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.552443][T11299] do_syscall_64+0x174/0x580 [ 275.552462][T11299] ? trace_irq_disable+0x3b/0x140 [ 275.552487][T11299] ? clear_bhb_loop+0x40/0x90 [ 275.552510][T11299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.552527][T11299] RIP: 0033:0x7f5c2159ce59 [ 275.552544][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.552560][T11299] RSP: 002b:00007f5c223cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.552579][T11299] RAX: ffffffffffffffda RBX: 00007f5c21815fa0 RCX: 00007f5c2159ce59 [ 275.552592][T11299] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 275.552603][T11299] RBP: 00007f5c223cb090 R08: 000000000000002c R09: 0000000000000000 [ 275.552614][T11299] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000002 [ 275.552626][T11299] R13: 00007f5c21816038 R14: 00007f5c21815fa0 R15: 00007ffc3df746e8 [ 275.552659][T11299] [ 276.102698][T11311] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1644'. [ 276.158506][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 276.226755][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 276.398029][T11316] syzkaller0: entered promiscuous mode [ 276.407965][T11316] syzkaller0: entered allmulticast mode [ 276.482926][T11319] tipc: Enabled bearer , priority 0 [ 276.515081][T11315] tipc: Resetting bearer [ 276.539360][T11315] tipc: Disabling bearer [ 276.572303][T11321] syzkaller0: entered promiscuous mode [ 276.577900][T11321] syzkaller0: entered allmulticast mode [ 276.625780][T11330] bond0: (slave bond_slave_0): Releasing backup interface [ 276.652153][T11330] bond0: (slave bond_slave_1): Releasing backup interface [ 276.654848][T11332] FAULT_INJECTION: forcing a failure. [ 276.654848][T11332] name failslab, interval 1, probability 0, space 0, times 0 [ 276.672080][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 276.691148][T11332] CPU: 0 UID: 0 PID: 11332 Comm: syz.0.1651 Not tainted syzkaller #0 PREEMPT(full) [ 276.691174][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.691184][T11332] Call Trace: [ 276.691191][T11332] [ 276.691199][T11332] dump_stack_lvl+0xe8/0x150 [ 276.691226][T11332] should_fail_ex+0x412/0x560 [ 276.691251][T11332] should_failslab+0xa8/0x100 [ 276.691271][T11332] __kmalloc_cache_noprof+0x88/0x660 [ 276.691295][T11332] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 276.691324][T11332] ? sctp_add_bind_addr+0x8c/0x370 [ 276.691355][T11332] sctp_add_bind_addr+0x8c/0x370 [ 276.691385][T11332] sctp_copy_local_addr_list+0x314/0x4f0 [ 276.691414][T11332] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 276.691440][T11332] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 276.691468][T11332] ? sctp_v6_is_any+0x64/0x80 [ 276.691488][T11332] ? sctp_copy_one_addr+0x93/0x360 [ 276.691516][T11332] sctp_bind_addr_copy+0xb3/0x3c0 [ 276.691543][T11332] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 276.691576][T11332] sctp_connect_new_asoc+0x2ff/0x6b0 [ 276.691599][T11332] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 276.691624][T11332] ? __local_bh_enable_ip+0xd0/0x130 [ 276.691640][T11332] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 276.691664][T11332] ? security_sctp_bind_connect+0x7e/0x2c0 [ 276.691689][T11332] sctp_sendmsg+0x1576/0x2c50 [ 276.691725][T11332] ? __pfx_sctp_sendmsg+0x10/0x10 [ 276.691749][T11332] ? aa_sk_perm+0x6d5/0x900 [ 276.691771][T11332] ? __might_fault+0xaf/0x130 [ 276.691801][T11332] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.691833][T11332] ? sock_rps_record_flow+0x19/0x350 [ 276.691858][T11332] ? __pfx_inet_sendmsg+0x10/0x10 [ 276.691885][T11332] ? inet_sendmsg+0x2f4/0x370 [ 276.691910][T11332] ? __pfx_inet_sendmsg+0x10/0x10 [ 276.691935][T11332] __sys_sendto+0x5de/0x710 [ 276.691962][T11332] ? __pfx___sys_sendto+0x10/0x10 [ 276.691979][T11332] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 276.692014][T11332] ? __fget_files+0x3a0/0x420 [ 276.692047][T11332] ? ksys_write+0x242/0x270 [ 276.692073][T11332] ? __pfx_ksys_write+0x10/0x10 [ 276.692103][T11332] __x64_sys_sendto+0xde/0x100 [ 276.692122][T11332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.692141][T11332] do_syscall_64+0x174/0x580 [ 276.692159][T11332] ? trace_irq_disable+0x3b/0x140 [ 276.692183][T11332] ? clear_bhb_loop+0x40/0x90 [ 276.692211][T11332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.692228][T11332] RIP: 0033:0x7f5c2159ce59 [ 276.692245][T11332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.692260][T11332] RSP: 002b:00007f5c223cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 276.692279][T11332] RAX: ffffffffffffffda RBX: 00007f5c21815fa0 RCX: 00007f5c2159ce59 [ 276.692292][T11332] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 276.692304][T11332] RBP: 00007f5c223cb090 R08: 0000200000000040 R09: 000000000000001c [ 276.692316][T11332] R10: 00000000200400d0 R11: 0000000000000246 R12: 0000000000000002 [ 276.692327][T11332] R13: 00007f5c21816038 R14: 00007f5c21815fa0 R15: 00007ffc3df746e8 [ 276.692358][T11332] [ 277.008921][T11330] team0: Port device team_slave_0 removed [ 277.017122][T11330] team0: Port device team_slave_1 removed [ 277.033782][T11330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.041887][T11330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.050613][T11330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.511561][T11351] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1657'. [ 278.917570][T11339] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 278.927428][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 279.389685][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 279.392950][T11375] syzkaller0: entered promiscuous mode [ 279.417474][T11375] syzkaller0: entered allmulticast mode [ 279.492717][T11379] IPVS: set_ctl: invalid protocol: 3 9.0.0.0:0 [ 279.535202][T11379] IPVS: set_ctl: invalid protocol: 3 9.0.0.0:0 [ 279.693891][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 279.781678][T11397] __nla_validate_parse: 1 callbacks suppressed [ 279.781700][T11397] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1673'. [ 279.797921][T11397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1673'. [ 279.821419][T11391] veth0: entered promiscuous mode [ 279.831574][T11391] vlan2: entered promiscuous mode [ 279.873099][T11400] FAULT_INJECTION: forcing a failure. [ 279.873099][T11400] name failslab, interval 1, probability 0, space 0, times 0 [ 279.887544][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.2.1674 Not tainted syzkaller #0 PREEMPT(full) [ 279.887569][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.887581][T11400] Call Trace: [ 279.887591][T11400] [ 279.887599][T11400] dump_stack_lvl+0xe8/0x150 [ 279.887625][T11400] should_fail_ex+0x412/0x560 [ 279.887651][T11400] should_failslab+0xa8/0x100 [ 279.887671][T11400] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 279.887696][T11400] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 279.887718][T11400] ? scm_fp_dup+0x5e/0x3a0 [ 279.887738][T11400] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 279.887762][T11400] kmemdup_noprof+0x2b/0x70 [ 279.887782][T11400] scm_fp_dup+0x5e/0x3a0 [ 279.887802][T11400] ? pid_vnr+0xfd/0x1e0 [ 279.887825][T11400] __unix_dgram_recvmsg+0x8ef/0xd60 [ 279.887861][T11400] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 279.887884][T11400] ? irqentry_exit+0x218/0x8b0 [ 279.887907][T11400] ? irqentry_exit+0x218/0x8b0 [ 279.887932][T11400] ? trace_irq_disable+0x3b/0x140 [ 279.887963][T11400] ? __lock_acquire+0x6b5/0x2cf0 [ 279.887987][T11400] ? unix_dgram_recvmsg+0xae/0xd0 [ 279.888007][T11400] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 279.888029][T11400] sock_recvmsg_nosec+0x10c/0x140 [ 279.888057][T11400] ____sys_recvmsg+0x3e3/0x4a0 [ 279.888087][T11400] ? __pfx_____sys_recvmsg+0x10/0x10 [ 279.888124][T11400] ? import_iovec+0x73/0xa0 [ 279.888150][T11400] ___sys_recvmsg+0x215/0x590 [ 279.888177][T11400] ? __pfx____sys_recvmsg+0x10/0x10 [ 279.888203][T11400] ? __fget_files+0x2a/0x420 [ 279.888255][T11400] do_recvmmsg+0x334/0x800 [ 279.888285][T11400] ? __pfx_do_recvmmsg+0x10/0x10 [ 279.888318][T11400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.888357][T11400] __x64_sys_recvmmsg+0x198/0x250 [ 279.888381][T11400] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 279.888411][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.888430][T11400] do_syscall_64+0x174/0x580 [ 279.888449][T11400] ? trace_irq_disable+0x3b/0x140 [ 279.888473][T11400] ? clear_bhb_loop+0x40/0x90 [ 279.888495][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.888513][T11400] RIP: 0033:0x7f065eb9ce59 [ 279.888530][T11400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.888546][T11400] RSP: 002b:00007f065fa73028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 279.888566][T11400] RAX: ffffffffffffffda RBX: 00007f065ee15fa0 RCX: 00007f065eb9ce59 [ 279.888579][T11400] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 279.888590][T11400] RBP: 00007f065fa73090 R08: 0000000000000000 R09: 0000000000000000 [ 279.888601][T11400] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 279.888611][T11400] R13: 00007f065ee16038 R14: 00007f065ee15fa0 R15: 00007ffd6848fc28 [ 279.888642][T11400] [ 280.313099][T11402] rdma_rxe: rxe_newlink: failed to add bond0 [ 280.330233][T11402] netlink: 'syz.0.1675': attribute type 13 has an invalid length. [ 280.507196][T11404] syzkaller0: entered promiscuous mode [ 280.513011][T11404] syzkaller0: entered allmulticast mode [ 280.713385][T11418] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1679'. [ 280.733468][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 280.755499][T11420] xt_hashlimit: overflow, try lower: 6/0 [ 280.887711][T11427] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1684'. [ 281.007128][T11432] tipc: Enabling of bearer rejected, already enabled [ 281.191109][T11445] FAULT_INJECTION: forcing a failure. [ 281.191109][T11445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.222779][T11445] CPU: 0 UID: 0 PID: 11445 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT(full) [ 281.222816][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.222826][T11445] Call Trace: [ 281.222833][T11445] [ 281.222841][T11445] dump_stack_lvl+0xe8/0x150 [ 281.222866][T11445] should_fail_ex+0x412/0x560 [ 281.222889][T11445] _copy_from_user+0x2d/0xb0 [ 281.222911][T11445] xsk_setsockopt+0x43d/0x990 [ 281.222938][T11445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.222968][T11445] ? aa_sock_opt_perm+0xff/0x1a0 [ 281.222995][T11445] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.223018][T11445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.223042][T11445] do_sock_setsockopt+0x17c/0x1b0 [ 281.223067][T11445] __x64_sys_setsockopt+0x13d/0x1b0 [ 281.223089][T11445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.223109][T11445] do_syscall_64+0x174/0x580 [ 281.223127][T11445] ? trace_irq_disable+0x3b/0x140 [ 281.223151][T11445] ? clear_bhb_loop+0x40/0x90 [ 281.223172][T11445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.223191][T11445] RIP: 0033:0x7f2d6959ce59 [ 281.223207][T11445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.223220][T11445] RSP: 002b:00007f2d6a444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.223239][T11445] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 281.223251][T11445] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 281.223262][T11445] RBP: 00007f2d6a444090 R08: 0000000000000020 R09: 0000000000000000 [ 281.223274][T11445] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 281.223285][T11445] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffe73119458 [ 281.223313][T11445] [ 281.488509][T11448] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 281.711392][T11456] netlink: 'syz.1.1695': attribute type 2 has an invalid length. [ 281.720524][T11456] netlink: 'syz.1.1695': attribute type 2 has an invalid length. [ 281.774144][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 281.797666][T11473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1699'. [ 281.812702][T11456] macsec1: entered promiscuous mode [ 281.850863][T11478] netlink: 'syz.3.1699': attribute type 3 has an invalid length. [ 281.890079][T11464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.987340][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'. [ 282.218433][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1704'. [ 282.361044][T11503] FAULT_INJECTION: forcing a failure. [ 282.361044][T11503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.375204][T11503] CPU: 0 UID: 0 PID: 11503 Comm: syz.3.1709 Not tainted syzkaller #0 PREEMPT(full) [ 282.375237][T11503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.375249][T11503] Call Trace: [ 282.375256][T11503] [ 282.375264][T11503] dump_stack_lvl+0xe8/0x150 [ 282.375289][T11503] should_fail_ex+0x412/0x560 [ 282.375314][T11503] _copy_from_iter+0x1d3/0x1670 [ 282.375332][T11503] ? unwind_next_frame+0xa6/0x2550 [ 282.375363][T11503] ? __lock_acquire+0x6b5/0x2cf0 [ 282.375384][T11503] ? __pfx__copy_from_iter+0x10/0x10 [ 282.375419][T11503] tun_get_user+0x6cf/0x43e0 [ 282.375452][T11503] ? aa_file_perm+0x192/0x15e0 [ 282.375475][T11503] ? aa_file_perm+0x50e/0x15e0 [ 282.375492][T11503] ? __pfx_tun_get_user+0x10/0x10 [ 282.375514][T11503] ? __lock_acquire+0x6b5/0x2cf0 [ 282.375536][T11503] ? kstrtoull+0x12f/0x1d0 [ 282.375568][T11503] ? ref_tracker_alloc+0x35c/0x4c0 [ 282.375594][T11503] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 282.375616][T11503] ? tun_get+0x1c/0x2f0 [ 282.375636][T11503] ? tun_get+0x1c/0x2f0 [ 282.375660][T11503] ? tun_get+0x1c/0x2f0 [ 282.375678][T11503] ? tun_get+0x1c/0x2f0 [ 282.375701][T11503] tun_chr_write_iter+0x113/0x200 [ 282.375722][T11503] vfs_write+0x61d/0xb90 [ 282.375755][T11503] ? __pfx_vfs_write+0x10/0x10 [ 282.375790][T11503] ? __fget_files+0x2a/0x420 [ 282.375820][T11503] ksys_write+0x150/0x270 [ 282.375847][T11503] ? __pfx_ksys_write+0x10/0x10 [ 282.375879][T11503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.375900][T11503] do_syscall_64+0x174/0x580 [ 282.375920][T11503] ? trace_irq_disable+0x3b/0x140 [ 282.375945][T11503] ? clear_bhb_loop+0x40/0x90 [ 282.375967][T11503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.375986][T11503] RIP: 0033:0x7f467499ce59 [ 282.376004][T11503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.376020][T11503] RSP: 002b:00007f4675851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.376040][T11503] RAX: ffffffffffffffda RBX: 00007f4674c15fa0 RCX: 00007f467499ce59 [ 282.376054][T11503] RDX: 000000000000007c RSI: 0000200000000280 RDI: 0000000000000003 [ 282.376066][T11503] RBP: 00007f4675851090 R08: 0000000000000000 R09: 0000000000000000 [ 282.376078][T11503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.376090][T11503] R13: 00007f4674c16038 R14: 00007f4674c15fa0 R15: 00007fff02bb3d78 [ 282.376120][T11503] [ 282.631693][T11506] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 282.813508][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 282.818518][T11515] openvswitch: netlink: IP tunnel dst address not specified [ 282.865806][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.958535][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 283.256243][T11537] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 283.267550][T11537] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 283.855060][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 283.983879][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'. [ 284.006837][T11561] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1729'. [ 284.601988][T11579] Bluetooth: MGMT ver 1.23 [ 284.893317][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 285.114418][T11592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.164514][T11596] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 285.804215][ T29] audit: type=1800 audit(1780719708.675:7): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1734" name="memory.events" dev="tmpfs" ino=1778 res=0 errno=0 [ 285.861801][T11606] FAULT_INJECTION: forcing a failure. [ 285.861801][T11606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 285.909256][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.2.1741 Not tainted syzkaller #0 PREEMPT(full) [ 285.909282][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.909293][T11606] Call Trace: [ 285.909300][T11606] [ 285.909308][T11606] dump_stack_lvl+0xe8/0x150 [ 285.909338][T11606] should_fail_ex+0x412/0x560 [ 285.909363][T11606] prepare_alloc_pages+0x22a/0x650 [ 285.909398][T11606] __alloc_frozen_pages_noprof+0x12f/0x380 [ 285.909419][T11606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 285.909451][T11606] ? __pfx_policy_nodemask+0x10/0x10 [ 285.909468][T11606] ? __folio_batch_add_and_move+0x11a/0xc50 [ 285.909492][T11606] ? lock_acquire+0x106/0x350 [ 285.909520][T11606] alloc_pages_mpol+0x235/0x490 [ 285.909543][T11606] folio_alloc_mpol_noprof+0x39/0x160 [ 285.909565][T11606] vma_alloc_folio_noprof+0xe1/0x1e0 [ 285.909587][T11606] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 285.909618][T11606] do_wp_page+0x118a/0x4cc0 [ 285.909647][T11606] ? __pte_offset_map+0x29/0x240 [ 285.909679][T11606] ? __pfx_do_wp_page+0x10/0x10 [ 285.909698][T11606] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.909725][T11606] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 285.909760][T11606] handle_mm_fault+0x1698/0x3170 [ 285.909797][T11606] ? handle_mm_fault+0xf1/0x3170 [ 285.909825][T11606] ? __pfx_handle_mm_fault+0x10/0x10 [ 285.909848][T11606] ? follow_page_pte+0xbd1/0xe60 [ 285.909879][T11606] ? __pfx_follow_page_pte+0x10/0x10 [ 285.909912][T11606] __get_user_pages+0x167f/0x2730 [ 285.909966][T11606] __gup_longterm_locked+0xdcf/0x1630 [ 285.910006][T11606] ? sanity_check_pinned_pages+0x7af/0x870 [ 285.910036][T11606] gup_fast_fallback+0x1d84/0x20d0 [ 285.910085][T11606] ? __pfx_gup_fast_fallback+0x10/0x10 [ 285.910104][T11606] ? ____sys_recvmsg+0x1e6/0x4a0 [ 285.910125][T11606] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 285.910143][T11606] ? do_syscall_64+0x174/0x580 [ 285.910161][T11606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.910184][T11606] ? pin_user_pages_fast+0x4d/0xb0 [ 285.910208][T11606] iov_iter_extract_pages+0x37b/0x5f0 [ 285.910238][T11606] extract_iter_to_sg+0xefb/0x25d0 [ 285.910272][T11606] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 285.910289][T11606] ? rcu_is_watching+0x15/0xb0 [ 285.910311][T11606] ? trace_kmalloc+0x2a/0xf0 [ 285.910342][T11606] ? __kmalloc_noprof+0x1b8/0x760 [ 285.910368][T11606] ? __asan_memset+0x22/0x50 [ 285.910392][T11606] af_alg_get_rsgl+0x4b6/0x8e0 [ 285.910429][T11606] skcipher_recvmsg+0x392/0x1140 [ 285.910466][T11606] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 285.910485][T11606] ? __lock_acquire+0x6b5/0x2cf0 [ 285.910502][T11606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.910530][T11606] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 285.910552][T11606] ? security_socket_recvmsg+0x7e/0x2c0 [ 285.910572][T11606] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 285.910592][T11606] sock_recvmsg+0x172/0x1b0 [ 285.910617][T11606] ____sys_recvmsg+0x1e6/0x4a0 [ 285.910646][T11606] ? __pfx_____sys_recvmsg+0x10/0x10 [ 285.910688][T11606] ? import_iovec+0x73/0xa0 [ 285.910711][T11606] ___sys_recvmsg+0x215/0x590 [ 285.910729][T11606] ? get_pid_task+0x20/0x1f0 [ 285.910755][T11606] ? __pfx____sys_recvmsg+0x10/0x10 [ 285.910779][T11606] ? __fget_files+0x2a/0x420 [ 285.910814][T11606] ? __fget_files+0x3a0/0x420 [ 285.910843][T11606] __x64_sys_recvmsg+0x1ba/0x2a0 [ 285.910865][T11606] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 285.910892][T11606] ? __pfx_ksys_write+0x10/0x10 [ 285.910924][T11606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.910941][T11606] do_syscall_64+0x174/0x580 [ 285.910960][T11606] ? trace_irq_disable+0x3b/0x140 [ 285.910985][T11606] ? clear_bhb_loop+0x40/0x90 [ 285.911016][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.911032][T11606] RIP: 0033:0x7f065eb9ce59 [ 285.911049][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.911064][T11606] RSP: 002b:00007f065fa52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 285.911083][T11606] RAX: ffffffffffffffda RBX: 00007f065ee16090 RCX: 00007f065eb9ce59 [ 285.911096][T11606] RDX: 000000000000f0ff RSI: 00002000000005c0 RDI: 0000000000000004 [ 285.911107][T11606] RBP: 00007f065fa52090 R08: 0000000000000000 R09: 0000000000000000 [ 285.911118][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.911128][T11606] R13: 00007f065ee16128 R14: 00007f065ee16090 R15: 00007ffd6848fc28 [ 285.911155][T11606] [ 285.933829][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.973298][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 287.157654][T11628] x_tables: duplicate underflow at hook 3 [ 287.176327][T11626] tipc: Enabling of bearer rejected, failed to enable media [ 287.970896][T11654] netlink: 'syz.4.1756': attribute type 3 has an invalid length. [ 287.989238][T11654] __nla_validate_parse: 4 callbacks suppressed [ 287.989268][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1756'. [ 288.014198][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 289.053279][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 289.720303][T11633] ±ÿ: Caught tx_queue_len zero misconfig [ 289.752498][T11656] tipc: Enabled bearer , priority 0 [ 289.778083][T11649] syzkaller0: entered promiscuous mode [ 289.807892][T11649] syzkaller0: entered allmulticast mode [ 290.093824][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 290.104881][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 290.175404][T11669] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 290.395765][T11669] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.731838][T11649] tipc: Resetting bearer [ 290.908950][T11649] tipc: Disabling bearer [ 291.052110][T11696] tipc: Enabling of bearer rejected, failed to enable media [ 291.133270][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 291.373569][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.461912][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1770'. [ 291.621369][T11710] syzkaller0: entered allmulticast mode [ 291.670361][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 291.696504][T11710] tipc: Enabled bearer , priority 0 [ 291.822434][T11709] tipc: Disabling bearer [ 292.174320][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 292.237902][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 292.264904][T11721] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 292.304762][T11722] erspan1: entered allmulticast mode [ 292.400690][T11721] bond6: entered promiscuous mode [ 292.411595][T11721] bond6: entered allmulticast mode [ 292.420715][T11721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.213397][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 294.172911][T11753] hmó3)óÿ: entered promiscuous mode [ 294.255199][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 294.331387][T11768] FAULT_INJECTION: forcing a failure. [ 294.331387][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 294.363536][T11768] CPU: 0 UID: 0 PID: 11768 Comm: syz.4.1790 Not tainted syzkaller #0 PREEMPT(full) [ 294.363564][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.363575][T11768] Call Trace: [ 294.363582][T11768] [ 294.363590][T11768] dump_stack_lvl+0xe8/0x150 [ 294.363616][T11768] should_fail_ex+0x412/0x560 [ 294.363647][T11768] should_failslab+0xa8/0x100 [ 294.363665][T11768] ? skb_clone+0x212/0x3a0 [ 294.363687][T11768] kmem_cache_alloc_noprof+0x87/0x650 [ 294.363712][T11768] ? __netlink_lookup+0xc6/0x8b0 [ 294.363739][T11768] skb_clone+0x212/0x3a0 [ 294.363764][T11768] __netlink_deliver_tap+0x404/0x850 [ 294.363797][T11768] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.363819][T11768] netlink_deliver_tap+0x19c/0x1b0 [ 294.363841][T11768] netlink_unicast+0x730/0x8e0 [ 294.363871][T11768] netlink_sendmsg+0x813/0xb40 [ 294.363901][T11768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.363933][T11768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 294.363960][T11768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.363988][T11768] ____sys_sendmsg+0x972/0x9f0 [ 294.364009][T11768] ? __might_fault+0xaf/0x130 [ 294.364038][T11768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.364067][T11768] ? import_iovec+0x73/0xa0 [ 294.364092][T11768] ___sys_sendmsg+0x2a5/0x360 [ 294.364111][T11768] ? __lock_acquire+0x6b5/0x2cf0 [ 294.364135][T11768] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.364191][T11768] ? __fget_files+0x2a/0x420 [ 294.364212][T11768] ? __fget_files+0x3a0/0x420 [ 294.364243][T11768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 294.364267][T11768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.364297][T11768] ? __pfx_ksys_write+0x10/0x10 [ 294.364331][T11768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.364350][T11768] do_syscall_64+0x174/0x580 [ 294.364370][T11768] ? trace_irq_disable+0x3b/0x140 [ 294.364395][T11768] ? clear_bhb_loop+0x40/0x90 [ 294.364417][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.364434][T11768] RIP: 0033:0x7fc0b6b9ce59 [ 294.364452][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.364467][T11768] RSP: 002b:00007fc0b79ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.364487][T11768] RAX: ffffffffffffffda RBX: 00007fc0b6e15fa0 RCX: 00007fc0b6b9ce59 [ 294.364504][T11768] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 294.364514][T11768] RBP: 00007fc0b79ba090 R08: 0000000000000000 R09: 0000000000000000 [ 294.364525][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.364539][T11768] R13: 00007fc0b6e16038 R14: 00007fc0b6e15fa0 R15: 00007fff8334cdf8 [ 294.364570][T11768] [ 295.293274][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 296.333939][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 297.373304][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 297.949140][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 298.413790][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.762096][T11858] FAULT_INJECTION: forcing a failure. [ 300.762096][T11858] name failslab, interval 1, probability 0, space 0, times 0 [ 300.779104][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.1.1821 Not tainted syzkaller #0 PREEMPT(full) [ 300.779150][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.779171][T11858] Call Trace: [ 300.779186][T11858] [ 300.779202][T11858] dump_stack_lvl+0xe8/0x150 [ 300.779247][T11858] should_fail_ex+0x412/0x560 [ 300.779301][T11858] should_failslab+0xa8/0x100 [ 300.779343][T11858] __kmalloc_noprof+0xe8/0x760 [ 300.779396][T11858] ? ioam6_genl_addsc+0x859/0x1800 [ 300.779415][T11858] ? ioam6_genl_addsc+0x134/0x1800 [ 300.779438][T11858] ioam6_genl_addsc+0x859/0x1800 [ 300.779461][T11858] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 300.779487][T11858] ? ioam6_genl_addsc+0x134/0x1800 [ 300.779511][T11858] genl_family_rcv_msg_doit+0x22a/0x330 [ 300.779536][T11858] ? __asan_memcpy+0x40/0x70 [ 300.779561][T11858] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.779599][T11858] ? bpf_lsm_capable+0x9/0x20 [ 300.779616][T11858] ? security_capable+0x7e/0x2c0 [ 300.779647][T11858] genl_rcv_msg+0x61c/0x7a0 [ 300.779677][T11858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.779700][T11858] ? __pfx_ioam6_genl_addsc+0x10/0x10 [ 300.779733][T11858] netlink_rcv_skb+0x232/0x4b0 [ 300.779755][T11858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.779781][T11858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.779818][T11858] ? down_read+0x270/0x2e0 [ 300.779838][T11858] ? genl_rcv+0xd/0x40 [ 300.779862][T11858] genl_rcv+0x28/0x40 [ 300.779884][T11858] netlink_unicast+0x75c/0x8e0 [ 300.779914][T11858] netlink_sendmsg+0x813/0xb40 [ 300.779944][T11858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.779969][T11858] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.779996][T11858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.780023][T11858] ____sys_sendmsg+0x972/0x9f0 [ 300.780050][T11858] ? __might_fault+0xaf/0x130 [ 300.780079][T11858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.780109][T11858] ? import_iovec+0x73/0xa0 [ 300.780134][T11858] ___sys_sendmsg+0x2a5/0x360 [ 300.780153][T11858] ? __lock_acquire+0x6b5/0x2cf0 [ 300.780177][T11858] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.780233][T11858] ? __fget_files+0x2a/0x420 [ 300.780254][T11858] ? __fget_files+0x3a0/0x420 [ 300.780285][T11858] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.780309][T11858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.780339][T11858] ? __pfx_ksys_write+0x10/0x10 [ 300.780372][T11858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.780392][T11858] do_syscall_64+0x174/0x580 [ 300.780411][T11858] ? trace_irq_disable+0x3b/0x140 [ 300.780435][T11858] ? clear_bhb_loop+0x40/0x90 [ 300.780457][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.780475][T11858] RIP: 0033:0x7f2d6959ce59 [ 300.780492][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.780507][T11858] RSP: 002b:00007f2d6a444028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.780526][T11858] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 300.780539][T11858] RDX: 0000000024000080 RSI: 0000200000000780 RDI: 0000000000000003 [ 300.780550][T11858] RBP: 00007f2d6a444090 R08: 0000000000000000 R09: 0000000000000000 [ 300.780561][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.780572][T11858] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffe73119458 [ 300.780602][T11858] [ 301.118205][T11859] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1820'. [ 301.795401][T11880] FAULT_INJECTION: forcing a failure. [ 301.795401][T11880] name failslab, interval 1, probability 0, space 0, times 0 [ 301.856404][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.1.1827 Not tainted syzkaller #0 PREEMPT(full) [ 301.856431][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.856442][T11880] Call Trace: [ 301.856449][T11880] [ 301.856458][T11880] dump_stack_lvl+0xe8/0x150 [ 301.856485][T11880] should_fail_ex+0x412/0x560 [ 301.856509][T11880] should_failslab+0xa8/0x100 [ 301.856527][T11880] ? __kernfs_new_node+0xea/0x970 [ 301.856550][T11880] kmem_cache_alloc_noprof+0x87/0x650 [ 301.856575][T11880] ? kernfs_add_one+0x477/0x5c0 [ 301.856603][T11880] __kernfs_new_node+0xea/0x970 [ 301.856633][T11880] ? __pfx___kernfs_new_node+0x10/0x10 [ 301.856657][T11880] ? kernfs_root+0x1c/0x230 [ 301.856685][T11880] ? kernfs_root+0x1c/0x230 [ 301.856706][T11880] ? kernfs_root+0x1c/0x230 [ 301.856726][T11880] ? kernfs_root+0x1c/0x230 [ 301.856752][T11880] kernfs_new_node+0x102/0x210 [ 301.856780][T11880] __kernfs_create_file+0x4b/0x2e0 [ 301.856803][T11880] sysfs_add_file_mode_ns+0x238/0x300 [ 301.856832][T11880] sysfs_create_file_ns+0x12b/0x1b0 [ 301.856855][T11880] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 301.856879][T11880] ? __dev_fwnode+0x50/0x80 [ 301.856906][T11880] ? device_create_file+0xf4/0x1b0 [ 301.856934][T11880] device_add+0x440/0xbb0 [ 301.856959][T11880] ? device_initialize+0x26a/0x460 [ 301.856985][T11880] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 301.857009][T11880] wakeup_source_register+0x18a/0x380 [ 301.857039][T11880] ep_insert+0x1022/0x1a40 [ 301.857079][T11880] ? __pfx_ep_insert+0x10/0x10 [ 301.857114][T11880] ? ep_loop_check+0x50/0x1b0 [ 301.857145][T11880] do_epoll_ctl+0x7f4/0xe80 [ 301.857177][T11880] __x64_sys_epoll_ctl+0x165/0x1b0 [ 301.857204][T11880] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 301.857237][T11880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.857255][T11880] do_syscall_64+0x174/0x580 [ 301.857274][T11880] ? trace_irq_disable+0x3b/0x140 [ 301.857300][T11880] ? clear_bhb_loop+0x40/0x90 [ 301.857321][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.857340][T11880] RIP: 0033:0x7f2d6959ce59 [ 301.857357][T11880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.857373][T11880] RSP: 002b:00007f2d6a444028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 301.857392][T11880] RAX: ffffffffffffffda RBX: 00007f2d69815fa0 RCX: 00007f2d6959ce59 [ 301.857405][T11880] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 301.857416][T11880] RBP: 00007f2d6a444090 R08: 0000000000000000 R09: 0000000000000000 [ 301.857430][T11880] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002 [ 301.857441][T11880] R13: 00007f2d69816038 R14: 00007f2d69815fa0 R15: 00007ffe73119458 [ 301.857472][T11880] [ 302.631889][T11883] veth0_macvtap: left promiscuous mode [ 304.377569][T11885] netlink: 'syz.1.1831': attribute type 29 has an invalid length. [ 304.732966][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 304.915051][T11907] xt_l2tp: invalid flags combination: 8 [ 305.530939][T11930] netlink: 'syz.2.1841': attribute type 11 has an invalid length. [ 305.565493][T11930] netlink: 'syz.2.1841': attribute type 11 has an invalid length. [ 305.593287][T11930] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1841'. [ 305.680726][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 305.783610][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 305.807924][T11936] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1842'. [ 305.828061][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 305.880168][T11936] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1842'. [ 305.901143][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 306.974619][T11956] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 307.034217][T11956] bond7 (unregistering): Released all slaves [ 307.094343][ T5296] veth0_macvtap: entered promiscuous mode [ 307.121284][ T5296] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.469451][T11970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.774634][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1852'. [ 308.852961][T11995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.862922][T11995] batadv_slave_1: entered promiscuous mode [ 308.982991][T11999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1853'. [ 308.992544][T11999] unsupported nlmsg_type 40 [ 309.783233][ C1] sched: DL replenish lagged too much [ 309.988282][T12018] xt_CT: No such helper "syz0" [ 311.278120][T12051] __nla_validate_parse: 1 callbacks suppressed [ 311.278139][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1868'. [ 317.391995][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.769230][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.857126][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.718645][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.691077][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.214688][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.143229][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 592.150225][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5640/1:b..l [ 592.158570][ C1] rcu: (detected by 1, t=10503 jiffies, g=55333, q=1131551 ncpus=2) [ 592.166744][ C1] task:syz-executor state:R running task stack:21536 pid:5640 tgid:5640 ppid:5628 task_flags:0x400140 flags:0x00080000 [ 592.181353][ C1] Call Trace: [ 592.184739][ C1] [ 592.187684][ C1] __schedule+0x1821/0x5740 [ 592.192205][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 592.197172][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 592.202125][ C1] ? __pfx___schedule+0x10/0x10 [ 592.206993][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 592.211952][ C1] preempt_schedule_irq+0x4d/0xa0 [ 592.216985][ C1] irqentry_exit+0x14f/0x8b0 [ 592.221580][ C1] ? trace_irq_disable+0x3b/0x140 [ 592.226620][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 592.232609][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 592.237900][ C1] Code: ff ff ff e8 31 0f 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b aa 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 56 92 [ 592.257512][ C1] RSP: 0018:ffffc9000437f418 EFLAGS: 00000286 [ 592.263593][ C1] RAX: ee980fed3da5b000 RBX: 0000000000000000 RCX: 0000000000000046 [ 592.271583][ C1] RDX: 000000005014cb4c RSI: ffffffff8e223e09 RDI: ffffffff8c28b9e0 [ 592.279561][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 592.287545][ C1] R10: ffffc9000437f578 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 592.295528][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 592.303514][ C1] ? unwind_next_frame+0xa6/0x2550 [ 592.308646][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.314814][ C1] ? unwind_next_frame+0xa6/0x2550 [ 592.319948][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 592.325595][ C1] ? unwind_next_frame+0xa6/0x2550 [ 592.330730][ C1] unwind_next_frame+0xc3/0x2550 [ 592.335682][ C1] ? unwind_next_frame+0xa6/0x2550 [ 592.340813][ C1] ? unwind_next_frame+0xa6/0x2550 [ 592.345938][ C1] ? qlist_free_all+0x99/0x100 [ 592.350715][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 592.356339][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.362562][ C1] arch_stack_walk+0x11b/0x150 [ 592.367315][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 592.372926][ C1] stack_trace_save+0xa9/0x100 [ 592.377669][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 592.383034][ C1] save_stack+0x122/0x230 [ 592.387349][ C1] ? __pfx_save_stack+0x10/0x10 [ 592.392180][ C1] ? __free_frozen_pages+0xc1c/0xd30 [ 592.397443][ C1] ? __slab_free+0x274/0x2c0 [ 592.402028][ C1] ? qlist_free_all+0x99/0x100 [ 592.406769][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 592.412387][ C1] __reset_page_owner+0x71/0x1f0 [ 592.417305][ C1] __free_frozen_pages+0xc1c/0xd30 [ 592.422407][ C1] __slab_free+0x274/0x2c0 [ 592.426811][ C1] qlist_free_all+0x99/0x100 [ 592.431381][ C1] kasan_quarantine_reduce+0x148/0x160 [ 592.436818][ C1] __kasan_kmalloc+0x22/0xb0 [ 592.441390][ C1] __kmalloc_noprof+0x35c/0x760 [ 592.446224][ C1] ? trace_kmalloc+0x2a/0xf0 [ 592.450888][ C1] ? tomoyo_encode+0x28b/0x550 [ 592.455637][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 592.460652][ C1] tomoyo_encode+0x28b/0x550 [ 592.465232][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 592.470880][ C1] ? tomoyo_domain+0xd7/0x130 [ 592.475544][ C1] tomoyo_path_perm+0x283/0x560 [ 592.480400][ C1] ? tomoyo_path_perm+0x251/0x560 [ 592.485405][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 592.490755][ C1] ? __x64_sys_openat+0x138/0x170 [ 592.495780][ C1] security_inode_getattr+0x12b/0x310 [ 592.501134][ C1] __x64_sys_newfstat+0x13b/0x270 [ 592.506137][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 592.511671][ C1] ? rcu_is_watching+0x15/0xb0 [ 592.516418][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.522503][ C1] do_syscall_64+0x174/0x580 [ 592.527075][ C1] ? trace_irq_disable+0x3b/0x140 [ 592.532087][ C1] ? clear_bhb_loop+0x40/0x90 [ 592.536745][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.542614][ C1] RIP: 0033:0x7f065eb9b467 [ 592.547440][ C1] RSP: 002b:00007ffd6848fec8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 592.555837][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f065eb9b467 [ 592.563799][ C1] RDX: 0000000000000000 RSI: 00007ffd6848fed0 RDI: 0000000000000003 [ 592.571759][ C1] RBP: 00007ffd6848ffcc R08: 0000000000000000 R09: 0000000000000000 [ 592.579718][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000001ab [ 592.587668][ C1] R13: 0000000000000000 R14: 000000000004c014 R15: 00007ffd68490020 [ 592.595632][ C1]