last executing test programs: 4m29.717857306s ago: executing program 3 (id=10813): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3a0, 0x8800}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000680)="03d21a1af597002c3fb99d3bbfe8df8ca8c8dbdc16e5ec4abc4e90b556483e430f8ef9b4b31c3774de2d00b5c756134c0d56573f2dd447076d41f24c92f88b146c9d967448a656ca29753fc917f14d7399c697e55f175b75fb9c72550c881390ef6a1d395ed4097f2a388f6aae8831060fc0a41a79512c5b1c6b42ae51ae5940238e10f38bd5e7e7bfbd51758ac43b21d2ef45ffd1a57e53718940ebd54031ce1e0c866ffaedabbc2d6883131108289bfb10eff811a51e1ceb90395a2b06335931f313887de1b512108963ba90f8464cb5dd4b290e108939fa587cf0b8ac964708fed90444446f12d4", 0xe9}, {0x0}, {&(0x7f0000000f00)="0e04ef5db5966fb39cc2dbe88ea921fa6ed43336fdbe78997e8f5f543a159c55deceaf4f3156afc62058a80c52eb786e721681c57ea6e9bedcefb511b4b7c3eb46be1f9e4237111d131eab1683d632996cdde6c9fb8286103e32132079298be4f5e1efa17c0d97dc987b8833a3963a52eb94ebd462", 0x75}, {&(0x7f0000000f80)="720585dfd29f91769e4b72b413c62559a46be32fbac741ab5459b8ab22bc850a03dbc94f5c48d772a359a72cca9eff7768e80c262d1b7e0e30ce378e3c17c579c5716ce172e1f40eb3b3e9402653024f675c8c233e5af5baee1a7d073aeba83c12cd0be0ba8bb61590fa0bb0a2c9a476d6ee73f9e120fec7d229b360dbabefecf3ab25d09aac10d88ff9fe4a0ba90cbfd03429c85f83010f95605dcb50bd70179d9f95f50383412127ad8ed171bda7572626573a3151fb899f9a1d4005879eee092fe7a2c10508b0e25143817b45fdfd0ae9450c50e28b0bf2b4ff11ebd5309c3180bb428acc7c8864965325931274d484d8f8ab06", 0xf5}], 0x4, &(0x7f00000010c0)=[@iv={0x98, 0x117, 0x2, 0x7d, "61f68996ab6d87e6a66d016a44d116cc7a3e11f2b7fc81c62afa4bf1bed2bbb6b46265747f99c7f9f422459d299214170921ad81c02cd5ca0e4f2ded56c615e3e717a0de314686f59396280929ca5d37bba24d20ed14c0815cd98387122a9f43239b525a36a9984fa0abbc3babcdffa3e0c2cbe4ee89c8ab560ac89b40"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x50, 0x117, 0x2, 0x3b, "bddeed4dfe25656dd9a65261b78b4b175b46cb7b1e3c4fc092626fdd68257a42e4e155a0ac279cd3b780e6d11868f9c9bc4ca8295b142535f9036e"}], 0x100, 0x20000810}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="26237a9428cdc89546edd7dc1c1b7f9abdfa2e3f1a512e8eea46579a0fe211b5a75a89cc5f0d694aebabc7eb5c97cc50e40bacf264e32d33c0a32e1eb40a40aeb8a64fb60316943892e670dd5a52db4a2027cfcea6b1937be1bd36377cf15af9eb7482", 0x63}, {&(0x7f0000001240)="dd7dcb54df090679de128ca8bdc0f240f64338da12e337b5b660f5af7c77adcfba9829d07af5bdb5319a25284392f39aa053fc6bfa265d9c5357e9c1abfea18dc70a67ed", 0x44}], 0x2, &(0x7f0000002380)=[@iv={0xe0, 0x117, 0x2, 0xc5, "9d47d6e7ca5317079fe23b3f9af6b61d26a0d2de23ca051b697c33953c11348f797c041188c7273d5c124a03747ba396316a75e29e700593fba2e28bed348821bcc1a50c97c82c62b4122ab52f05b4111c15584b691a5c37a3ef1764ca7ea4150e16106e404e9e634256c566d61b658b44c9b9fe74431a8e12ec55edfa6cad61721772266bf4026ccd2ccdee99eb693d0e8b63d218bc1e5e85bc2cceb9d24a4636579558e6eab8563d9a96522e9ed4578f1d25d9b8ecbee45d6dc929eb7b0345ce1c10b408"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x110, 0x40014}], 0x3, 0x20048040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4"], 0x1c}}, 0x80) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000880)=""/182, 0xb6}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000580), 0x6e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x10}}], 0x10}}], 0x3, 0x0, 0x0) 4m28.026779374s ago: executing program 3 (id=10825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0xdcc, 0x4) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000180)={0x20, r1, 0x421, 0x70bd26, 0x2ddfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x44084) 4m27.87026081s ago: executing program 3 (id=10827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x178, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}]}}]}, 0x178}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x44, 0x2e, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6, 0xb}, {0xc, 0x1}, {0x0, 0xffe0}}, [{0x8, 0xb, 0x80}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000100)={0x11, @multicast1, 0x4e23, 0x0, 'lblc\x00', 0x30, 0x6, 0x112}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[], 0x6) r9 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r9, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000000"], 0x18}}], 0x2, 0x0) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r7, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x5e, 0x0, 0x1}, 0x28) getsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) r12 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) 4m27.403149637s ago: executing program 3 (id=10835): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3a0, 0x8800}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000680)="03d21a1af597002c3fb99d3bbfe8df8ca8c8dbdc16e5ec4abc4e90b556483e430f8ef9b4b31c3774de2d00b5c756134c0d56573f2dd447076d41f24c92f88b146c9d967448a656ca29753fc917f14d7399c697e55f175b75fb9c72550c881390ef6a1d395ed4097f2a388f6aae8831060fc0a41a79512c5b1c6b42ae51ae5940238e10f38bd5e7e7bfbd51758ac43b21d2ef45ffd1a57e53718940ebd54031ce1e0c866ffaedabbc2d6883131108289bfb10eff811a51e1ceb90395a2b06335931f313887de1b512108963ba90f8464cb5dd4b290e108939fa587cf0b8ac964708fed90444446f12d4", 0xe9}, {0x0}, {&(0x7f0000000f00)="0e04ef5db5966fb39cc2dbe88ea921fa6ed43336fdbe78997e8f5f543a159c55deceaf4f3156afc62058a80c52eb786e721681c57ea6e9bedcefb511b4b7c3eb46be1f9e4237111d131eab1683d632996cdde6c9fb8286103e32132079298be4f5e1efa17c0d97dc987b8833a3963a52eb94ebd462", 0x75}, {&(0x7f0000000f80)="720585dfd29f91769e4b72b413c62559a46be32fbac741ab5459b8ab22bc850a03dbc94f5c48d772a359a72cca9eff7768e80c262d1b7e0e30ce378e3c17c579c5716ce172e1f40eb3b3e9402653024f675c8c233e5af5baee1a7d073aeba83c12cd0be0ba8bb61590fa0bb0a2c9a476d6ee73f9e120fec7d229b360dbabefecf3ab25d09aac10d88ff9fe4a0ba90cbfd03429c85f83010f95605dcb50bd70179d9f95f50383412127ad8ed171bda7572626573a3151fb899f9a1d4005879eee092fe7a2c10508b0e25143817b45fdfd0ae9450c50e28b0bf2b4ff11ebd5309c3180bb428acc7c8864965325931274d484d8f8ab06", 0xf5}], 0x4, &(0x7f00000010c0)=[@iv={0x98, 0x117, 0x2, 0x7d, "61f68996ab6d87e6a66d016a44d116cc7a3e11f2b7fc81c62afa4bf1bed2bbb6b46265747f99c7f9f422459d299214170921ad81c02cd5ca0e4f2ded56c615e3e717a0de314686f59396280929ca5d37bba24d20ed14c0815cd98387122a9f43239b525a36a9984fa0abbc3babcdffa3e0c2cbe4ee89c8ab560ac89b40"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x50, 0x117, 0x2, 0x3b, "bddeed4dfe25656dd9a65261b78b4b175b46cb7b1e3c4fc092626fdd68257a42e4e155a0ac279cd3b780e6d11868f9c9bc4ca8295b142535f9036e"}], 0x100, 0x20000810}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="26237a9428cdc89546edd7dc1c1b7f9abdfa2e3f1a512e8eea46579a0fe211b5a75a89cc5f0d694aebabc7eb5c97cc50e40bacf264e32d33c0a32e1eb40a40aeb8a64fb60316943892e670dd5a52db4a2027cfcea6b1937be1bd36377cf15af9eb7482", 0x63}, {&(0x7f0000001240)="dd7dcb54df090679de128ca8bdc0f240f64338da12e337b5b660f5af7c77adcfba9829d07af5bdb5319a25284392f39aa053fc6bfa265d9c5357e9c1abfea18dc70a67ed", 0x44}], 0x2, &(0x7f0000002380)=[@iv={0xe0, 0x117, 0x2, 0xc5, "9d47d6e7ca5317079fe23b3f9af6b61d26a0d2de23ca051b697c33953c11348f797c041188c7273d5c124a03747ba396316a75e29e700593fba2e28bed348821bcc1a50c97c82c62b4122ab52f05b4111c15584b691a5c37a3ef1764ca7ea4150e16106e404e9e634256c566d61b658b44c9b9fe74431a8e12ec55edfa6cad61721772266bf4026ccd2ccdee99eb693d0e8b63d218bc1e5e85bc2cceb9d24a4636579558e6eab8563d9a96522e9ed4578f1d25d9b8ecbee45d6dc929eb7b0345ce1c10b408"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x110, 0x40014}], 0x3, 0x20048040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a073"], 0x1c}}, 0x80) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000880)=""/182, 0xb6}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000580), 0x6e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x10}}], 0x10}}], 0x3, 0x0, 0x0) 4m26.032672643s ago: executing program 3 (id=10848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xe83}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x4044004) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x41}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x4010) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r4, @ANYBLOB="140003000000010000000000000000000000003414000200fe88"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x9, &(0x7f0000000340)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d0f3b67}, {0x85, 0x0, 0x0, 0x5d}}, @exit], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x4}, 0x94) 4m25.81617471s ago: executing program 3 (id=10854): unshare(0x28000600) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="973b8be215647d8ab487e7a5ee0b723af6e920509cc17de935d7f2f947bdf7674f0151e4c0df5b4229dfb91a4cfc30209c27ac8608d1a270ebbd7ed9e9d4a732fd5b8151790f24b5d01bf5e68265d33b049efaad6009f4febe8d07aa648f8cd86ab3e57fbff43229186248a44d984daa4f35afbde7beb793e18f2a2eb87ce8209705aab75b", 0x85}], 0x1}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000040)}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 4m10.578579167s ago: executing program 32 (id=10854): unshare(0x28000600) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="973b8be215647d8ab487e7a5ee0b723af6e920509cc17de935d7f2f947bdf7674f0151e4c0df5b4229dfb91a4cfc30209c27ac8608d1a270ebbd7ed9e9d4a732fd5b8151790f24b5d01bf5e68265d33b049efaad6009f4febe8d07aa648f8cd86ab3e57fbff43229186248a44d984daa4f35afbde7beb793e18f2a2eb87ce8209705aab75b", 0x85}], 0x1}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000040)}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m37.390555199s ago: executing program 1 (id=12136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000080850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000200020007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES64=r3], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x218, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x207, 0x0, 0x0, 0x1, [@generic="77273e417b3009a815e9152ce966702165ea3196bcec6ba4b0abf0018731d3d736", @generic="03b2b242f8c762d187a6852402a2c22160fd08cf61bc87c3158ca503f693d5fda534b375397d94e7a5", @generic="fec2d8e3dc1e2b2942098f52c7cf5eaca2bf492fbddc3caa880ee09c8e678bd4692c5ea403ea61f11c4ee62aa829520516ad9d2b7b655930c200ef6b52cb96d0f6cfdeb2f58c0728952697057e81d86ca2f79ff6db2d1cd9ec9d1e93ae297493def6f126c2a80f44e5cb7df4085deb4d746160e97d2b6ad2c6b8071bbf8aa472b38e017e9297b0b9ccebd1fb64c4e2598b0bf781157cb64e4afc42884eb3b8c8a5b65bc5265c30d9148abf5f28f203156a890d66c4d6a7b15e2beab06f439d2c59bbc7595e138f8bada2fe3b9daf6058f6299c2cfc616236510c597e7dc8b8da6ac42c49d300ad2b2323a64ecfaacc9ab08e431697367e2357a91f3b", @generic="c6f7c5b183f7d0af47c5916b9f7e9017db195533c508ee7ad2c777e1eaf08d4b92281ead73ccbf53c3d41fb4d13dfa94f7c6ff516316f6170e9739a40ec3ac4b628c875b5b611834dad89811b2b747c3d36c2a0a3a30d908bd13fdd53ed8869babfb5cb1d290684d2cec34c5e7d358893ab00aa53800f024a51999d48f1f7c01b9d46406b900a0037a91a2393784ff82194712f19dd145bce5a08a827ecdca9eccc2d28f9f8f3976d16bd15cea091f358d2f63bededc8669c5d3f2df1b"]}]}, 0x218}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ffd700000800034000000001"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m36.455028093s ago: executing program 1 (id=12145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="4c00000011001d00001100020000140002000000200000", 0x17) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYRES16=r6, @ANYBLOB="e1ed6f2409000d6cb3a5a70500000048930eeb2518c47315734d"], 0xfdef) r7 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x118, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x104, 0x6, "fe3934ffe61f9b0622129333666573e1356c15d14466fe9a1db7837045389efbac432b74545aa778d6ca2afecaf0c994a1612a30ed85519b00fc643edbc9aaad9ea954c2556aca22e8b484b9ac4899427cf416fbdc1db26f06411da9159ca2d54683556c9f52742ed41278190c883001bdd32f2f4321edd333bc68438f34c7d9e8a7c2ffea4850703e721b11723e9540f34ac0433e4d765d9472c5b52f7d01e304a151dc19cf34829f81058a203ed4588590507637644b923ebb645c4b5143723422a6017112ac1fbf49dba78e67ddf3d60ae65343148ed7fd87d7f95ac3ab34d9cce5fb3a3f51b08404a64f81f52694ff00"/256}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x11e0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x11b4, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_KEY={0x8}]}}}, {0x1178, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x116c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1154, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "e700bb6fb5d67e7ae2d69a307ea4551b487757bdb4c4cae6674046a2b5cf1dddb421f2b92ddb2cf4b5833793c54aaa641370859b56a44ddc018812177047dd65b8ec733adff4680e2ad8e976a47e6dd30a52c9c7d12aef01f993961c64944cb8e364589346bf97534b0a4a589e60ec0a1ba8b7ecf40d06021dd162aa998b3b3a9d63484ba45274e37804667fe5296cf0a7fe4abe0aa211d385e5af7dfdcb2eddc623a159681bd859e172e139d0a1f3cb1113c68094d108700368bdd0bc71e79680cbfd054632daa7c22a3e3a27ceb8b8a550411361e9af05d9a1d8c890419dfac8a56180664708d9b7e4b135d84ba27d56cc72e1482ebd4ef8c66fca988460be1928ec27dac6434f1e68e4d6d573dbd72ce539ef6f9cf61a8004e82d64e409c9fd7ee36d8ff92bc88185f7ca12fa08bbd961651d2d8235d36d8c4d61928f3a73f8b4d1afcc432a9f78018477564b1088135695c7fc345e3230138d6d3050c606158647e0c3ad48a17000d4b3c67a30ee8e29e8adffe5110b821f1cc271ab081c0bd87ce71c372ff3d550b1caed29bf0214850b0b4a8eabc554a677819057670172dd79380249f08831195875332d490adab259a7ce7a6bff91eabe8ba91679d82044c47b595ceb69ebcacea6dc29d1db155497074ce72eaef739d65c094f95c3fa408c43f6668a00e2f3700c4b2fc3a384e8e335d8ebd75850ee49fcc7170607daa21eb5537c51645069d91cea57ce3b65a737401bb1d029a3617c72aed3fab3d187a9e5244968dc16bb4439dde8e8b0187e7309018fefb94dbea14c1cc2aeeccb61f5c07bd9f09bab2934c77c2c8f81b292f8cb8d27d7331bcfeedba15187f788cfc64b9e7aaf4108ca440c12866c0e7d6c44fba58d94b0e2b7a28a83e358e41080e316882bdac78eb9b3e20c1c0f1c8c9174d28c6914307be8682211cb8f77ef87c0eaffb39dd69e3d1d1cfffd2a71543ca54b62f14aea1bc736bc097fe52c6f32459f6665ceb70adb425cec96219480d731b9895f5f093a4d75683217636f3f5e9f3b5ac1cba7b35db8bc8675403cc145ff97e608390fe692706ed7790c8ac625414c51b045b9cb3228199dbae2181aa022b3875ced55cc0d39958ed1ee4e0662ad7e72f6589354e19ba341668b9f03139a0bced34f427eee84d47b7be2b05579fed9500969a69efef37998be4004b83e433def3828e8621bf3cc4cddeaa8a99eb9d291d077f59c00a6c44e7c28b4ddc1be36e895953046f1f8a8f01b4f698d60d9d4f5d1551635da81b5858b9f3145769d1198befe4753dc1a4571479007d15e404115b7098c310060be6d2153a2ce854ebc1f5ee5cde92bab4d6cc60340f89b1c69f8ab93bbeaf07afc36396e735657e04485787050d6279db407f4b22c6dfcbf4ef0b9523559ec186391f21a77f44a69eaca0586204d2bdf4813ed76b21a3b7d01e0d6906a293f07a49b2184e63c20cc0fc6bdb0d6a389bed2301692035ddf1c7b0f73c5d8209ab416be5fad03a29e69fa66a1a44fcc2b3ea4f2d62986e09056907158d43136eefad0033f1e669938afd7c52862b994e7fbba919fc61aa6d6f396ba409c79513b37dd241a19504fe1ded58462fa1a5718735497492ff93b86a6e37f5171abeb8a2bd590d8cb68e8006adb63e48ba3d4d6269e7834776b923b3719eb8859aa7188a3977201c8429ac929ce68edeb245b20db010ff519db7295d1ed37ce9fee982d37bdd4d9d481ad3d97c2f68d5b75738d7bfde08e1e7ef4396d69705f40ff098a09aad117113fbde1ce4bb805e9cd1ec20e292e20690affb534699d67dc245d6b47df463e5fcaeec086e0f32bc0ac315ffb1023814df31981bf33759474bbb2e6e6aa6851ab13db8f98a6da6f7c00269502e62e22ceec6242d9c3bb314958ad85e7c41a3213ebcbe0273c99aa68bbc3a75dd24a0fc9e58cda8500870ae12debbd00987574b7e1bbc8897bf3a79669878bd1c6af13691fb2fd5f51cbdcf54efcf2bcb4bb22e9330cd59175b7ce93ef99705ea751738920e2e6dabbe5cd8b29a2c750be5db9382fa9d67826511370bcc56555f0745ca972e1549cbb9fdfe3872402e42a7e38aaf69d30cbb982cdfee6e090d528d9244362e287118c934ca4904ff542008980c063f5914a06276fa794db24d07bf2611fe29efe22e402c1911bce7e807c4b82c338904d7154c78235c55009b9b4a5497f57660b297f8b86e7ab9cac5b324a91f4a34bf9c644ace6e54ae2509bee9e1b7e180f9add89602ca4d5ed3ff994d84899c336cc2ca4c9425297838dcdfab290e52d2648e20713291592faca4bf8f3cef6050559ea4cbd38e185b7a98f31af077714c0d84499eeb880b6043ba190255c160bbe1cf7c6f3702cc27a3a97af8be4a9cac4636603cd8bffcade944061e66fda225991bda0e3478720109d82e15d23d4df069d6d3267ee8dc2f7fd427a0b8dacf953bf29201d99fa3a9f97567b73ae31e57d44144b0af378ea700b666601a58c2b624c6275711ff078667693bb3400eb539e2cab368f8119181c7fbb427cbaa4b9abc7cd8bd2eee6ed3ba97f9071645d35ce613aa9226771cdf288c78d8d7acb2c95fdcd200ce6fb5a3818a93cc16810e9ddb96337a4ede5eed5ebfa6c05b05b3cfadee5958e49fac297fb6928b4425399786b35c90ca567af02cb6c1339115bd3eeac28d533d3d646f1f6db6e7a40c21087c58d60e031f3936b9d54f8825b1b52a3587f1e096ab9a74c0721cfb2f449794e97e0b2f73cc9da4761ffb1e29ed074aaeb9fffad3647c3713c668a71af5566fddf9245abc57573dd1136f756150490a8901960dafd57144dc9c3f28d74ad5ff6b311f5fd13e8f62d5c4c119e5ce13ebb0fb9cb199ee3125acfb3b7d98ac66e113d074842fc489240b734f0746d3095291753fd4a003dde7d72702f9e252c850d48836c6bb5750af020d3fec81b5bfb66991bbd76214e525ec8b0a1b1d1dcadb3a689616cb1764b507b1833bc81cc057b28bf8aa64b81c112a567ecce2492f93a1dc3e8572065c8411877b4aa777be3e7eac0fd4c416bb8b9bb7f125db869c1de172bb35c1a7f72f34d2825006fe40d0a4d0a3946c67cd5e3068bf31300732aed81e2df4bad40a6e6459bfa184cb780457a3ca9f54ad34c67155cb142c7ccf6bd8cf3b329c3c8418ebc35595968b55bbfe82b4f7e8c4a2c1d6d42e6ffce29c468ec2a07195bb35b50ef59e84ea4806b7bed79046629d66231c40bd7f64827a5a2221287571968c2a69b319927b3ad20ffcfddeb8fca1c592fc2999214494c3733964abaebd7c235dbc0ec7bbd4b1f80453668a00565ef15a2469b47acfa01d83f7ae425b0ef0cbe5ec42eb2463dfc3ff9161cfb805c29ddc1e4374d33a7d46a32265e4f0cbf639e41cee7e3a772dd3ec107a895d63d0ea172c1a9e91908ac49452293e265be0e5d4180490d8c28e4febfac37389a5875b78b9d89ea8e1058c1c66d84ae262cb452c1de7390a36f3c6d09d21770294570d7a24f6d4f3c6be530ec7b43484f5df9d518d42995c39e9bbba3e6622686ff0aba38692aaf9a1b783c204c480c817120b6ca7165c5411a20cd1de80b3372d203006372be0bdc981dce035ba071402f031dc33076ed76c6bcd1914222c0bd9edcdafe0c26a2497c19abff911589b0053dfa6a65b9efa818d9f5c74cf625b743eb10fe9fb279ef6aab1533562c66b4ee5c1c71ef583aa48e39bde7f845fec49401668e117b073d0dac0d7d015e5ff8c9ee6a94f6d4abba643dfd828523a84f499ee110b1fe8609d4f8ea864474144b4b48fec146bf7204750313e360df0a04b3106c26f221fade69d698a5490da4e910a3c533a3d0466b5a16d3ea86f82af9a8eec7f728cb41b53568778bcdbb6e918e0eb2f0190418c7b84fcc1aac789089ba15b39197e6874d2d607ad2cf99be410572fd08608f2a1e7f29838a2a868fd2fe4703bd556479c6b4450d4fffc756e1b279ea45fe6cd758941862483f0596bb147c6b331fe2b8b543bd7a5e84f54c8386e06a9633667f0bfed7d9932ae19315fb315a67ad4bb8bdd2dd41e2f1540f806b9e3bff5887011d6fd62703ac5b928f8a518de17dc64f82cb34dbe0fa7f9c172d56a702bfaba2bbea2eabdd5becee2914221e2d2d89e9f4079b7093cc3f0e7f127e7aa1fc2cbbd228543e21efe57a7a3a61eb445d8d6b6c064d428dc7858ff910726e3154a46838dba8cfaec1448e0113ee65a96af003ee40c548f948d504ea5d462f95de0b73b49274297f346392ac9f30807399031e20740194eeae8fdd4e98185634daa573b0322b1f260a083416b6bdfd9a914a1e3b7640f0f00ed9adbc865008e230e607e803224ee06670f19b528a1b39b34ea9433dc404dd8c8855f3b5ea943f5db5a65750fe6160c0ab7b4c8d4018d4c1e2019b843bf825dc36630535b1fccbcd728cd2de9ffa2aed24c6e2846b02adbe6364993b3ed983a41d9cc193a814bd576b3d163f9dc51d02ba3d3bf40754b42962f41fd4952d3df3e49df3660f8c83e61d3101cefd63bd8af1f7516b227d1954761c267d3d88954d559968d657d2da9d9731f9a6c4353bd2c64a24fb77007fac5ce176e5e925d10d203c57f07d825c7e16ab682b3d47ce1cf1244e883f56e193651447ad7dfa6df348aeddf49df1c6320b07932487e4f4cdb893915e053f4856d584dc86cbd06834aef144ba7cf0a16ad8b67851492a77e839d255aa4e4831ad719c3d507aad1c9cd40180a9047a353ecc1561920adeb0561c121009687b2c26e403d3b7cad130fa7fec81be8a487963eb0080c507c523ac6c08624c396f522f46394118eceefaf24306785b6eb1001a96bbf9b29d8619893ad9b03dffdc34a0102081d3b9fb4a124f3dc31c5e9d871ba86df3f7ae29581f87fa9925c0773ace9fda03de10df5411997263f0a722d5a056948cfca44134f0e0e524b9633850a1ec1afd2e81a430ba6fdd777aa37abf2a4f17cba491c681befc4a51790eaab0e5680bb3039bd1140e2b7137cd02e1530e4f373d9ceb9fea536dc3e93fdfe24e539d780ee16714ac7a5db2a303cc3693ecbe0e5f85567a92adc3af053320265b926ec6f63d9943734ded23309bdae4273d20262fb17afae17f2e81a0b02a7714385ced8a6227f88c3f346aaa295f9c56d1999435fed6f1db382e96a23fbc24dac4812777c0b6f8d3fc59288fb3551c9f39372f3c6466cd556ae3de580276a8644ec3d9f9bdb67b13a1de2e8e9ad23e39ea466771803419bcf58e9bca0434325e6a1c44f12eefd3058e838c304b218b44ad5b72b9a3d93acc79d77bf6cef254e13905efcfcad627e5528ca279cdce2190bbde02599af39fa6eaf8abd17ece57a3211f6fec61d1ceba655cefb061069191cd1769d9b066595c05057ddc594a1b35c92a75b57a2481ed40edd6994012b97fe585971ed217a2e772c481ad1b034ce3f0ce35f349aa2787b3ea1a9f83b57ca5713ed6f13485686064713bac6ff1bb788c5268d3adace8ee2a2e0c753da1f0a92040f01111471bc645d3c5c9af68a8f32c56751b00cf3f258a2a72511f305e8fb27afa78c1eb2de00dceaed3defb87c911d57480b61183692a6b63885c7dace63164246c039c67d12fb3ef37f716fe641ded191e3c5165133ce11059554cae964a6b9c0af9f3127f7297e5d969ba73bb8be69d8aa692d32c0f804fd7647ff36f77f5fea26d51efb01f2c3de078a903c1a0dc60d612953eb2f528bbc7301c56724c8f13669a8a29ee415ff51571d8406031a81b48e98fbb"}, @NFTA_DATA_VALUE={0x87, 0x1, "7c20bc8b5db67259bb5972cd261190fd79625b6cff82c5a076475d57503bfc5195c37632079ad9840f2be683fd3b94ae2e66610d7cf1d98d0699768bd5a908af5044c9c7c48f05be4c963b5bed174b5520ef4447984ed17826f39624f877c895e6fc95b23bb6fa717b61ece93a30a571458bf0fd78713812045f7bce31ff49adc222c4"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x137c}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e23, 0x1, 0xcd, 0x4}}, 0x44) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000040)={0x10, [0x7, 0x5c34], 0x6}, 0x10) 2m36.111050246s ago: executing program 1 (id=12155): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002f00090024bd7000000000000500000014000a"], 0x28}}, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3a0, 0x8800}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000680)="03d21a1af597002c3fb99d3bbfe8df8ca8c8dbdc16e5ec4abc4e90b556483e430f8ef9b4b31c3774de2d00b5c756134c0d56573f2dd447076d41f24c92f88b146c9d967448a656ca29753fc917f14d7399c697e55f175b75fb9c72550c881390ef6a1d395ed4097f2a388f6aae8831060fc0a41a79512c5b1c6b42ae51ae5940238e10f38bd5e7e7bfbd51758ac43b21d2ef45ffd1a57e53718940ebd54031ce1e0c866ffaedabbc2d6883131108289bfb10eff811a51e1ceb90395a2b06335931f313887de1b512108963ba90f8464cb5dd4b290e108939fa587cf0b8ac964708fed90444446f12d4", 0xe9}, {0x0}, {&(0x7f0000000f00)="0e04ef5db5966fb39cc2dbe88ea921fa6ed43336fdbe78997e8f5f543a159c55deceaf4f3156afc62058a80c52eb786e721681c57ea6e9bedcefb511b4b7c3eb46be1f9e4237111d131eab1683d632996cdde6c9fb8286103e32132079298be4f5e1efa17c0d97dc987b8833a3963a52eb94ebd462", 0x75}, {&(0x7f0000000f80)="720585dfd29f91769e4b72b413c62559a46be32fbac741ab5459b8ab22bc850a03dbc94f5c48d772a359a72cca9eff7768e80c262d1b7e0e30ce378e3c17c579c5716ce172e1f40eb3b3e9402653024f675c8c233e5af5baee1a7d073aeba83c12cd0be0ba8bb61590fa0bb0a2c9a476d6ee73f9e120fec7d229b360dbabefecf3ab25d09aac10d88ff9fe4a0ba90cbfd03429c85f83010f95605dcb50bd70179d9f95f50383412127ad8ed171bda7572626573a3151fb899f9a1d4005879eee092fe7a2c10508b0e25143817b45fdfd0ae9450c50e28b0bf2b4ff11ebd5309c3180bb428acc7c8864965325931274d484d8f8ab06", 0xf5}], 0x4, &(0x7f00000010c0)=[@iv={0x98, 0x117, 0x2, 0x7d, "61f68996ab6d87e6a66d016a44d116cc7a3e11f2b7fc81c62afa4bf1bed2bbb6b46265747f99c7f9f422459d299214170921ad81c02cd5ca0e4f2ded56c615e3e717a0de314686f59396280929ca5d37bba24d20ed14c0815cd98387122a9f43239b525a36a9984fa0abbc3babcdffa3e0c2cbe4ee89c8ab560ac89b40"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x50, 0x117, 0x2, 0x3b, "bddeed4dfe25656dd9a65261b78b4b175b46cb7b1e3c4fc092626fdd68257a42e4e155a0ac279cd3b780e6d11868f9c9bc4ca8295b142535f9036e"}], 0x100, 0x20000810}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="26237a9428cdc89546edd7dc1c1b7f9abdfa2e3f1a512e8eea46579a0fe211b5a75a89cc5f0d694aebabc7eb5c97cc50e40bacf264e32d33c0a32e1eb40a40aeb8a64fb60316943892e670dd5a52db4a2027cfcea6b1937be1bd36377cf15af9eb7482", 0x63}, {&(0x7f0000001240)="dd7dcb54df090679de128ca8bdc0f240f64338da12e337b5b660f5af7c77adcfba9829d07af5bdb5319a25284392f39aa053fc6bfa265d9c5357e9c1abfea18dc70a67ed", 0x44}], 0x2, &(0x7f0000002380)=[@iv={0xe0, 0x117, 0x2, 0xc5, "9d47d6e7ca5317079fe23b3f9af6b61d26a0d2de23ca051b697c33953c11348f797c041188c7273d5c124a03747ba396316a75e29e700593fba2e28bed348821bcc1a50c97c82c62b4122ab52f05b4111c15584b691a5c37a3ef1764ca7ea4150e16106e404e9e634256c566d61b658b44c9b9fe74431a8e12ec55edfa6cad61721772266bf4026ccd2ccdee99eb693d0e8b63d218bc1e5e85bc2cceb9d24a4636579558e6eab8563d9a96522e9ed4578f1d25d9b8ecbee45d6dc929eb7b0345ce1c10b408"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x110, 0x40014}], 0x3, 0x20048040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x891b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000880)=""/182, 0xb6}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000580), 0x6e, 0x0, 0x0, &(0x7f0000003680)=[@rights={{0x10}}], 0x10}}], 0x3, 0x0, 0x0) 2m34.24595693s ago: executing program 1 (id=12167): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e23, @private=0xa010102}, 0x242, 0x0, 0x0, 0x0, 0xf6c, &(0x7f0000000000)='netpci0\x00', 0xd0, 0x4, 0xee6e}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @vsock={0x28, 0x0, 0x2710, @local}, @llc={0x1a, 0x3, 0x3, 0xd, 0x3, 0x7, @random="85922c6afbc6"}, @llc={0x1a, 0x335, 0x9, 0x6d, 0xad, 0xb5}, 0x20a, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)='vcan0\x00', 0x2, 0x3, 0x4}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000180)=0x6, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@multicast2, 0x4e20, 0xd3, 0x4e23, 0x101, 0x2, 0x0, 0xa0, 0x1d, r2, r3}, {0x4, 0xffffffffffff0001, 0x7, 0x3, 0x0, 0x3, 0x6, 0x3}, {0x7fffffffffffffff, 0x0, 0x2, 0x9}, 0x0, 0x6e6bc0, 0x1, 0x1, 0x1, 0x2}, {{@in=@private=0xa010101, 0x4d3, 0x32}, 0x0, @in=@rand_addr=0x64010100, 0x3501, 0x2, 0x3, 0x0, 0x2, 0x5, 0x6}}, 0xe8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101400, 0x0) write$tun(r4, &(0x7f0000000380)={@void, @val={0x3, 0x6, 0x9, 0x0, 0x0, 0xf65d}, @ipv6=@generic={0x2, 0x6, "d543cf", 0x6c, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[@fragment={0x9e, 0x0, 0xc6, 0x0, 0x0, 0x1a, 0x65}, @srh={0x4, 0x8, 0x4, 0x4, 0x2, 0x0, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1, @loopback, @mcast1]}], "86beed9fc5fe34d6b562212fc96518fd98512cc2b5cd097c2ba5bbd6"}}}, 0x9e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000440)={0x2, 0x7, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000480)='lp', 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000740), 0x4) r8 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r8, &(0x7f0000000780)={0xa, 0x0, 0x0, @private1}, &(0x7f00000007c0)=0x20) ioctl$XFS_IOC_FSGEOMETRY_V1(r8, 0x80705864, &(0x7f0000000800)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000000bc0)={{&(0x7f0000000880)=[{0x40000000, 0x2, 0x6, {0x3, 0xfc8e}, 0x0, 0x4, 0x5}, {0x7, 0x1, 0xe, {0x9, 0x2}, 0xfffffffffffffff1, 0xf, 0x200}, {0x4, 0x0, 0x7, {0x6, 0x6}, 0x0, 0x0, 0xcee4}, {0x5, 0xa439, 0x9, {0x9, 0x6}, 0x8, 0xce, 0x74116871}, {0xffff, 0xa, 0x0, {0x9, 0x2000000000}, 0x1, 0x0, 0x6}], 0x5, 0x40, 0x40, 0x7f}, {&(0x7f00000009c0)=[{0xf6, 0x7}, {0x8000000000000001, 0x4}], 0x2, 0x10, 0x9, 0x4}, {&(0x7f0000000a00)=[0x3, 0x5, 0x1ff, 0x8, 0x8, 0x94], 0x6, 0x8, 0xfffc, 0x3}, {&(0x7f0000000a40)=[{0x8, 0xfffffffffffffffa, 0x2, 0x7, 0x3}, {0x200000000000000, 0x5, 0x8000, 0x2, 0x1f9c}, {0x1, 0x9, 0x5, 0x5, 0x7}, {0x100000000, 0x2, 0x1, 0xd68d, 0x5}, {0xf243, 0x80000000, 0x80000000, 0x6, 0x9a60}, {0x9, 0x8, 0x7, 0x7fffffff, 0x4b}, {0x8, 0x9, 0x0, 0xb4, 0xa0ed}], 0x7, 0x28, 0x9, 0x2}, {&(0x7f0000000b80)=[0x5f1fb33, 0x1, 0x100000000], 0x3, 0x8, 0x0, 0x7}}) splice(r8, &(0x7f0000000c40)=0x3, r7, &(0x7f0000000c80)=0xff, 0x65, 0x2) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000cc0)={0x0, 0x101, 0x9, 0x1}, &(0x7f0000000d00)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000d40)={r10, 0x5}, 0x8) sendmmsg$inet(r5, &(0x7f00000011c0)=[{{&(0x7f0000000d80)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000dc0)="88763f1fb6ca10707682a9e6911f9090dfbe30d96534770d18144c7b347da41ad28fc87bc40683483574630648ce27cc2a1d2a99bf7077124e72b2986ff7f17f269db3cc93dc5fda2f770ead3b73872bd8683042563750322cfa77f9247f250233621a70baf26f7a4812d573c3f6f64c53319eb9c4", 0x75}, {&(0x7f0000000e40)="d5b8d654510464d76fd258c7051111d285d420e6f633179f402a346baab977e5f30f91d573b20a1308dff57acc75935aff2870277d7cc4d3a1a5ccc4f6efb0cfff8674b75179c0b7ab74ca47395f8f79765ca2cef70b12e95218fa29281963cebe9daa40ad110e5f468460d9913b958fc9e691513a72044a7e64997d80a5cc5f7c290d08f8a7196c578cf5952a4d4d089665197f0e468220e4c31d72b57adce3c4c5dd0b2e97a37b08d22064f73518137b27d0cfb66a872533bd114b7f17292c36dc92edce337a6d0fe18e9358eb13050abaf6f73468ecb3ed0bf8f6e842c120edd4bfbc3b36aeef", 0xe8}], 0x2}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000fc0)="b6d1d85de1a9a287c01be08619228bdb9aabaaa4d6c1631e5dd3ef216143cbaf6606ae210c0fb8fffe0816290dc8937975b78fd701793e90303986742df7a105a6faccc7a7341d972b000c1ae1ddef2a107d2584d83114c61878d26884978f77efe5b8474b0a3600bb37ccede169e0689abbf79cec4028e0ec2c767dc2c86f1bfc012851e73054263ee29eb23bc7014b8a70964354a4edcb3be496dafbaa0a775cc7455c4c1677ba230b41eba06d810217c71f3cfbf9ff5cb18b7914f7ed", 0xbe}, {&(0x7f0000001080)="aa7fcadc1931087bb43d9a9f2ed5413e6004ee4952ec66ff22245ec799519dc2a73b5ef8de752a2d2baec0f9b338a296ba51dccbc68daef66c83d404dad9ce03282f07df1febd4d86c8280f23093d621bc19a784aed4bfb159db51fe2b70fe8d331aa19556e801d22a66cc803b7342bd", 0x70}], 0x2, &(0x7f0000001140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x942}}], 0x48}}], 0x2, 0x4040015) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r6) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r11, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24044000) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001380)=0xffffffffffffffff, 0x4) 2m34.042097489s ago: executing program 1 (id=12171): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x10ff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m33.850950067s ago: executing program 1 (id=12174): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10800}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) 2m18.855358971s ago: executing program 33 (id=12174): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10800}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) 1.976146281s ago: executing program 4 (id=14001): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c000f003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) 1.786594203s ago: executing program 4 (id=14004): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.584339143s ago: executing program 5 (id=14008): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x12, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.564207167s ago: executing program 4 (id=14009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="18feffffff00000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x5) 1.470984158s ago: executing program 2 (id=14010): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000003c0), 0x80800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4ec}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040804}, 0x8000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x4c880) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfa, {0xa}}, 0x14}}, 0x8000) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000031400022cbd7000ffdbdf250900020073797a30000000000800410073697700140033006d6163736563300000f9ffffffffffffff00020073797a3000000000080041007278650014003300697036746e6c300000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000000900020073797a30000000000800410072"], 0xb0}, 0x1, 0x0, 0x0, 0x45}, 0x950) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x200, 0x16, 0x0, 0x7f}, {0x0, 0x3, 0xfffffffffffffffe}, 0x4, 0x4, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r11, &(0x7f0000000000)="19533dc861042578dd", 0x9, 0x44800, &(0x7f0000000040)={0x2, 0x1236, @loopback}, 0x10) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010091f645146c6407c4d772425177289d8c99fc7f5cd0d8de3ade08c825c2c07965643f29942b8f51c2ad7f409a900a23f67f90ea81cd81", @ANYRES32=r14, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0040000040060000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 1.351636936s ago: executing program 4 (id=14013): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'hsr0\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000340)="436410", 0x3}], 0x1}}], 0x2, 0x41) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r4}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in=@remote}}, {{@in=@private}}}, &(0x7f0000000540)=0xe8) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x1c, 0x69, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast}, "14f3305280f125e6"}}, 0x2a) 1.315809609s ago: executing program 5 (id=14014): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2, 0x38000000000000}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x9}, &(0x7f00000000c0)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x7, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a3100000000050004000000f8ff13000780050215000500000008001240000000000500050002000000050001000600000011000300686173683a69702c706f7274000000006651478ac767e2e09066530e17c8ff68b047f8eacc04c212b5117dfe5d5ad1ccbc755ec18d1f9384c5e55b18dd87ea8983913051bcfd9df92711e71db1d5f76d6c6519c5f732b71de0607f0ab86809d9a1e56cdb185a72b051bf3223cd7b670a17063b5aec62f3f955616ffc1537f85b607d381597d79656c5ad074ad3"], 0x60}}, 0x20004890) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x3, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185200000a000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0007000000000000b703000000000000850000000c000000b7000000000000009dba0400010000009500000000000000253a10000100000018480000fdffffff0000000000000000"], &(0x7f0000000280)='GPL\x00', 0x6, 0xf2, &(0x7f00000002c0)=""/242, 0x41000, 0x24, '\x00', 0x0, @fallback=0xa, r1, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x1, 0x2, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000440)=[r1, r1, r1, r1], &(0x7f0000000480)=[{0x5, 0x3, 0x8, 0xc}, {0x5, 0x3, 0x7, 0xa}, {0x0, 0x2, 0xc, 0x8}, {0x4, 0x4, 0x6, 0x1a}], 0x10, 0x80}, 0x94) 1.116286593s ago: executing program 6 (id=14018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="6094a836c857dd4f1531af000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.04728369s ago: executing program 0 (id=14019): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x20008024) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x3d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f00000005c0)={0xa, 0x4e26, 0x6, @mcast1, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e", 0x11}], 0x1}}], 0x1, 0x4000801) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES64=r4, @ANYRES8, @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=@newtaction={0x558, 0x30, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{0x4}, {0x4}, {0x53c, 0x1, [@m_csum={0xb4, 0x19, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x0, 0x9, 0x6}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc00, 0xfffffffc, 0x7, 0x3}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x0, 0x7f, 0x48f8}, 0x6c}}]}, {0x31, 0x6, "09e532f137622a6b651cb8e0b84263b2a6b6e47ef227d02da376b468577710d1b15f7016318d6552c4640e64a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x104, 0x4, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "26e608481e2e08c31047982624b940ff"}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}]}, {0xb6, 0x6, "6ce79b07c5cfd3c23f56c3dbe8a061363f2f1c5e35e1e5b213f2ef74d79b92120cfccd77c4f888ef2d6b2fa1ca9f6d539cd0508056d463929fe4e50d2ecf3c317df188ff0bcbe2c6aa5e4fc11fd07888fc7eb98011da59876edd632dc3fe0b1473baaab6c074b02c6a4e923181cb49d313f2428951be1cf049b56fa4fb075b2674e49111fa1f8db4f74e4087de540d3bb6df6d6ad99c6adc9e89abc42ef7766c8ce5c6489049ed2e892b8289477f72302a90"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x380, 0x1c, 0x0, 0x0, {{0x7}, {0x280, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1680}, @TCA_IPT_TARG={0xd9, 0x6, {0x4b, 'security\x00', 0x10, 0x8, "579aed3d43131052a2a7766dadeb16f08bb1e728d4d0761110b906dad4cbca0add0c3ec563b5a22f1ce2ad191b3f82efadedf52adca1a84d8ee32fcc79a7af3873a3ca802ae5e179d7f19d30db31fa28eb11983651c2ea7cb1e23c669d66729ff0aad291de0ed92d788fd5f181bc5d31b631824e7f4269a7119b9e2af9d72046f2f26b37a9c6f9de42d3ac67d4887a5364b1c273383fbaf47edfd19f381461e452454158706854efe74e09a68a7054"}}, @TCA_IPT_TARG={0xde, 0x6, {0xed5b, 'security\x00', 0x4, 0x6, "53e52213d9795540e7f398c10ae588f6216b4f4d0fc480238c96e32aa79a21ba55d0b06f2fa67a71cc6b1ad5e1a634f20a42312ceec7235d40255fa516a0deb4e3408904f4e786759aeeaf5ca7aca8d4f0eb756cfe31c8e64e8a0432322a62f77a5b7b9d10b6d696a3f3b6fcea291e62ddf45602ebf537494845fff4861c4f96e2a7ac4ff6c61c4ec41eddc56ea9a703e407934814c5e34819962fb0e16cf89119ad589a839d9cdc958efe258cb743f101c8a250"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x73, 0x6, {0x5, 'filter\x00', 0x8, 0x0, "2835931a6463209ae0df46b71dab4c14bafd2aff40a70a3ce1bb1a1f0b42f5182ab2bba3b7eaae986ef36ac38a1e1a35a0ca24790592e1979a7f4462f22da11cff3602fa00bcc61277"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xd9, 0x6, "be1e8ccc78ab61f74ded2b5fe58cfa506af31bca11567d29d9e1ce0f946d9fa54512366f17bf18d72bd741cf74e887647bc63148bd64dbcc5d3286ac8c0339bcac2cb16b0d5397d6ec92bbcd3a80759b82bb4337b4d6c655e6fe1cb8cb02b2bcb85586ae0ab6c2b1f939a54817d8b63c6fa229675e74576967e7739b3debf06de5211eab506945a8857d66199ea507ade5fa3b7b78a8b4b32cce1b1590c9f0b5aac182d088a17f1a937a6414eba6ce6824604fedf2044daf9ad583c537f5fea9b90cbe46f29cced0182fe130c3f5897e4a632bbaaa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x558}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000003}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES8=r8], 0x148}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYRESDEC=r8], &(0x7f0000000100)='GPL\x00', 0x3, 0x109, &(0x7f0000000640)=""/265, 0x41000}, 0x94) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.014452928s ago: executing program 2 (id=14020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x74, r1, 0x1, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0xff}}]}]}]}]}]}, 0x74}, 0x1, 0x0, 0x9000000, 0x4004840}, 0x40000) 1.013181202s ago: executing program 4 (id=14021): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0xf1, 0x4000000}, 0x2400400c) 875.613685ms ago: executing program 6 (id=14022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 740.725916ms ago: executing program 4 (id=14023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000300000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) splice(r2, 0x0, r1, 0x0, 0xf3a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000240), 0x0}, 0x20) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x7, 0x3, 0x0, &(0x7f0000000040)="24c2af", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x10ff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 740.393199ms ago: executing program 2 (id=14024): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd632}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000300001000030"], 0x84}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000014) 739.729541ms ago: executing program 0 (id=14025): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000011100000000000000f50000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000600000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 595.73006ms ago: executing program 6 (id=14026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5, {0x1}}}, 0x58}}, 0x0) 595.449472ms ago: executing program 5 (id=14027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072cbd7000fcdbdf2506000000080003003ef6e4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) write$tun(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) 591.768474ms ago: executing program 0 (id=14028): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b700009100000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 526.394232ms ago: executing program 6 (id=14029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000300000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 525.999024ms ago: executing program 2 (id=14030): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x8010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000040000000000000099aa000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703000001000000b704000001000000850000001500000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x1404, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008090) 419.052907ms ago: executing program 0 (id=14031): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000040) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000640)=0xbd91, 0x4) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46dede2a1a3389f7f986", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 418.789253ms ago: executing program 2 (id=14032): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000060000000045000020000000400073907800000300e000000100000000000c9078010337f9"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaa090000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 418.382577ms ago: executing program 6 (id=14033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000130000b7080000475900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000040000000b704000000000000850000005700009500"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="9380000068820000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="73e1b19d132881c63c52ba613126fed250b4adaa3b14776b5c8d59280c0a22b2fe3e6f99e88c90efd723ae5d360e8ea879cdd4d51603"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x3, 0x0, 0x400}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x5) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) write(r8, &(0x7f0000000700)="ffffffffffff0011223344554305", 0xe) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r12) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0x8, 0x0, 0xfffc, 0x6}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4008000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 333.710345ms ago: executing program 5 (id=14034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000140)='syzkaller\x00', 0xa, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom(r2, &(0x7f00000000c0)=""/107, 0x6b, 0x2, &(0x7f0000000180)=@x25, 0x80) 325.774635ms ago: executing program 2 (id=14035): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c0002800500"], 0xac}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x0, 0x148, 0x110, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6erspan0\x00', 'lo\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'amanda\x00'}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffffb}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xf, {0xd}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x2, 0x7}, {0x2, 0x3}, {0x4, 0x4, 0x1}, 0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x40) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x9) r9 = accept(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES8=r9, @ANYRESHEX=r7, @ANYRESDEC=r8, @ANYRESHEX=r7, @ANYRES16=0x0], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ebf6feff000000000a00000091115200000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000004200010000000000000000000301001208004d80040008001200010000112233445566778899aabb884700000800028004002d80040003"], 0x3c}}, 0x4008010) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2d, 0x25dfdc03, {0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x40400c0) r11 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0xcaa}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=r5, @ANYRESOCT=r0, @ANYBLOB="a4a9ee5e0572674d2cbb430dd6a7822145739fbec4d4971e8a79073dfd60719dda393754e00f0095de35e08579bc19f9584059f69554e9eef4b0df45ad371bc0a406378d56f2685620f1cb8c067681e03a8adf7c583610f878012943e5e115a70f992908fe5c3322605030c820c921d38059559777407c9cf0fa0f2a3afc1f1080b699e6007b3bfe4217c6cbb05558abf7847113bc2708aab4ee85a58bbff0ce2579cdedc4f960c6dfcab2e48fde5b79371367ae3c8fb431bf81d81e367cddb047b0cbe5", @ANYRES32=0x0, @ANYRES32=r0], 0xf8}, 0x1, 0x0, 0x0, 0x20050052}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000000)) 211.009511ms ago: executing program 0 (id=14036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001020010000000000000000000500000a74000000060a010400000000000000000a0000010900010073797a31000000000900020073797a32000000004800048044000180080001006c6f6700380002800900024073797a31000000000800054000000200060001"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 167.895902ms ago: executing program 5 (id=14037): r0 = socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) 39.746507ms ago: executing program 0 (id=14038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18afffffffffffffff00000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 806.956µs ago: executing program 5 (id=14039): epoll_create(0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0xb, 0xff6, &(0x7f0000001cc0)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x40, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb0800"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}, @nested={0xc, 0xb, 0x0, 0x1, [@generic="eb802aa35009519b"]}]}, 0x40}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x7fc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 0s ago: executing program 6 (id=14040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x15, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): ff ff f7 d8 64 89 01 48 [ 1327.969055][T16431] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1327.969078][T16431] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1327.969093][T16431] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1327.969106][T16431] RBP: 00007f7b6a03503b R08: 0000000000000004 R09: 0000000000000000 [ 1327.969118][T16431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.969131][T16431] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1327.969163][T16431] [ 1327.969172][T16431] Mem-Info: [ 1327.969182][T16431] active_anon:8814 inactive_anon:0 isolated_anon:0 [ 1327.969182][T16431] active_file:0 inactive_file:44578 isolated_file:0 [ 1327.969182][T16431] unevictable:0 dirty:263 writeback:0 [ 1327.969182][T16431] slab_reclaimable:12957 slab_unreclaimable:130001 [ 1327.969182][T16431] mapped:41612 shmem:1397 pagetables:1344 [ 1327.969182][T16431] sec_pagetables:0 bounce:0 [ 1327.969182][T16431] kernel_misc_reclaimable:0 [ 1327.969182][T16431] free:1194388 free_pcp:20285 free_cma:0 [ 1327.969234][T16431] Node 0 active_anon:35256kB inactive_anon:0kB active_file:0kB inactive_file:178108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166448kB dirty:1052kB writeback:0kB shmem:5588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17828kB pagetables:5240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1327.969290][T16431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1327.969356][T16431] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.969417][T16431] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1327.969457][T16431] Node 0 DMA32 free:820956kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35256kB inactive_anon:0kB active_file:0kB inactive_file:178108kB unevictable:0kB writepending:1052kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:81140kB local_pcp:39604kB free_cma:0kB [ 1327.969518][T16431] lowmem_reserve[]: 0 0 0 0 0 [ 1327.969554][T16431] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.972993][T16431] lowmem_reserve[]: 0 0 0 0 0 [ 1327.973039][T16431] Node 1 Normal free:3941236kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1327.973102][T16431] lowmem_reserve[]: 0 0 0 0 0 [ 1327.973140][T16431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1327.973261][T16431] Node 0 DMA32: 1627*4kB (UME) 1242*8kB (UME) 492*16kB (UME) 491*32kB (UME) 187*64kB (UME) 44*128kB (UM) 54*256kB (UME) 24*512kB (UM) 14*1024kB (UM) 15*2048kB (UME) 169*4096kB (UM) = 821020kB [ 1327.973427][T16431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1327.973529][T16431] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 2*32kB (UM) 7*64kB (UM) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3941236kB [ 1327.973685][T16431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1327.973711][T16431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1327.973728][T16431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1327.973744][T16431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1327.973760][T16431] 45896 total pagecache pages [ 1327.973769][T16431] 0 pages in swap cache [ 1327.973777][T16431] Free swap = 124996kB [ 1327.973785][T16431] Total swap = 124996kB [ 1327.973794][T16431] 2097051 pages RAM [ 1327.973801][T16431] 0 pages HighMem/MovableOnly [ 1327.973809][T16431] 428781 pages reserved [ 1327.973816][T16431] 0 pages cma reserved [ 1328.140144][T16441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13117'. [ 1328.299417][T16431] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1328.463874][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13120'. [ 1328.464015][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13120'. [ 1328.464136][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13120'. [ 1328.464251][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13120'. [ 1328.936675][ T7521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.936712][ T7521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.100555][T16469] batman_adv: batadv0: Adding interface: syzkaller0 [ 1329.100585][T16469] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.100684][T16469] batman_adv: batadv0: Interface activated: syzkaller0 [ 1329.186347][T16467] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1329.276736][T16467] batman_adv: batadv0: Removing interface: syzkaller0 [ 1330.091662][ T31] audit: type=1804 audit(1789458847.563:61): pid=16535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13138" name="/newroot/2572/cgroup.controllers" dev="tmpfs" ino=13174 res=1 errno=0 [ 1330.092178][ T31] audit: type=1800 audit(1789458847.563:62): pid=16535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13138" name="cgroup.controllers" dev="tmpfs" ino=13174 res=0 errno=0 [ 1330.093818][ T31] audit: type=1800 audit(1789458847.563:63): pid=16535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13138" name="cgroup.controllers" dev="tmpfs" ino=13174 res=0 errno=0 [ 1330.290749][T16549] netlink: 'syz.0.13139': attribute type 3 has an invalid length. [ 1330.329917][T16550] syzkaller1: entered promiscuous mode [ 1330.329942][T16550] syzkaller1: entered allmulticast mode [ 1331.070586][T16584] syzkaller1: entered promiscuous mode [ 1331.070625][T16584] syzkaller1: entered allmulticast mode [ 1331.250354][T16594] openvswitch: netlink: Actions may not be safe on all matching packets [ 1331.281253][T16596] __nla_validate_parse: 39 callbacks suppressed [ 1331.281273][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13157'. [ 1331.281292][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13157'. [ 1331.283542][T16596] netlink: 236 bytes leftover after parsing attributes in process `syz.5.13157'. [ 1331.496719][T16604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13159'. [ 1332.224371][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13170'. [ 1332.224398][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13170'. [ 1332.247867][T16635] netlink: 236 bytes leftover after parsing attributes in process `syz.2.13170'. [ 1332.271525][T16637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13171'. [ 1332.402659][T16642] syzkaller0: entered promiscuous mode [ 1332.402692][T16642] syzkaller0: entered allmulticast mode [ 1332.511024][T16645] netlink: 'syz.2.13174': attribute type 1 has an invalid length. [ 1332.515726][T16646] netlink: 228 bytes leftover after parsing attributes in process `syz.0.13175'. [ 1332.717349][T16645] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1332.823667][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13174'. [ 1332.887592][T16658] erspan2: entered promiscuous mode [ 1332.983847][T16632] netlink: 'syz.5.13168': attribute type 10 has an invalid length. [ 1333.493052][T16692] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1333.493102][T16692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.117717][T16717] netlink: 'syz.2.13200': attribute type 10 has an invalid length. [ 1334.153656][T16716] lo speed is unknown, defaulting to 1000 [ 1334.180519][ T31] audit: type=1804 audit(1789458851.653:64): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.13190" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=756 res=1 errno=0 [ 1334.180573][ T31] audit: type=1800 audit(1789458851.653:65): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13190" name="cgroup.controllers" dev="tmpfs" ino=756 res=0 errno=0 [ 1334.185123][ T31] audit: type=1800 audit(1789458851.653:66): pid=16688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13190" name="cgroup.controllers" dev="tmpfs" ino=756 res=0 errno=0 [ 1334.382366][T16731] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1334.423093][T16728] netlink: 'syz.5.13204': attribute type 10 has an invalid length. [ 1334.474041][T16733] bond27: (slave batadv0): Releasing active interface [ 1334.486496][T16733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.503529][T16733] bond28: (slave batadv0): Enslaving as an active interface with an up link [ 1336.151255][T16768] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1336.665512][T16802] bridge0: port 4(macsec1) entered blocking state [ 1336.665796][T16802] bridge0: port 4(macsec1) entered disabled state [ 1336.665928][T16802] macsec1: entered allmulticast mode [ 1336.665945][T16802] bridge0: entered allmulticast mode [ 1336.700981][T16802] macsec1: left allmulticast mode [ 1336.701005][T16802] bridge0: left allmulticast mode [ 1336.743263][T16804] syzkaller0: entered promiscuous mode [ 1336.743286][T16804] syzkaller0: entered allmulticast mode [ 1336.883471][T16814] __nla_validate_parse: 10 callbacks suppressed [ 1336.883493][T16814] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13238'. [ 1337.196622][T16824] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13241'. [ 1337.447164][T16837] netlink: 'syz.0.13244': attribute type 2 has an invalid length. [ 1337.447191][T16837] netlink: 'syz.0.13244': attribute type 2 has an invalid length. [ 1337.496617][T16839] FAULT_INJECTION: forcing a failure. [ 1337.496617][T16839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1337.496650][T16839] CPU: 0 UID: 0 PID: 16839 Comm: syz.2.13245 Not tainted syzkaller #0 PREEMPT(full) [ 1337.496673][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1337.496686][T16839] Call Trace: [ 1337.496694][T16839] [ 1337.496703][T16839] dump_stack_lvl+0xe8/0x150 [ 1337.496738][T16839] should_fail_ex+0x410/0x560 [ 1337.496768][T16839] _copy_to_user+0x31/0xb0 [ 1337.496802][T16839] simple_read_from_buffer+0xe1/0x170 [ 1337.496833][T16839] proc_fail_nth_read+0x1bb/0x230 [ 1337.496862][T16839] ? common_file_perm+0x20e/0x2b0 [ 1337.496889][T16839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1337.496921][T16839] ? rw_verify_area+0x24a/0x4c0 [ 1337.496949][T16839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1337.496977][T16839] vfs_read+0x213/0xa80 [ 1337.497009][T16839] ? __pfx___mutex_lock+0x10/0x10 [ 1337.497032][T16839] ? __pfx_vfs_read+0x10/0x10 [ 1337.497062][T16839] ? __fget_files+0x2a/0x420 [ 1337.497092][T16839] ? __fget_files+0x3a2/0x420 [ 1337.497116][T16839] ? __fget_files+0x2a/0x420 [ 1337.497151][T16839] ksys_read+0x150/0x270 [ 1337.497182][T16839] ? __pfx_ksys_read+0x10/0x10 [ 1337.497224][T16839] do_syscall_64+0x166/0x520 [ 1337.497245][T16839] ? trace_irq_disable+0x3b/0x140 [ 1337.497265][T16839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.497286][T16839] ? clear_bhb_loop+0x70/0xc0 [ 1337.497310][T16839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.497330][T16839] RIP: 0033:0x7f6e88d5e98e [ 1337.497350][T16839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1337.497367][T16839] RSP: 002b:00007f6e89d32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1337.497389][T16839] RAX: ffffffffffffffda RBX: 00007f6e89d336c0 RCX: 00007f6e88d5e98e [ 1337.497404][T16839] RDX: 000000000000000f RSI: 00007f6e89d330a0 RDI: 0000000000000005 [ 1337.497416][T16839] RBP: 00007f6e89d33090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.497427][T16839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.497440][T16839] R13: 00007f6e89026038 R14: 00007f6e89025fa0 R15: 00007ffecbf54f78 [ 1337.497474][T16839] [ 1337.922086][T16849] FAULT_INJECTION: forcing a failure. [ 1337.922086][T16849] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.922120][T16849] CPU: 1 UID: 0 PID: 16849 Comm: syz.5.13249 Not tainted syzkaller #0 PREEMPT(full) [ 1337.922142][T16849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1337.922154][T16849] Call Trace: [ 1337.922162][T16849] [ 1337.922172][T16849] dump_stack_lvl+0xe8/0x150 [ 1337.922207][T16849] should_fail_ex+0x410/0x560 [ 1337.922240][T16849] should_failslab+0xa8/0x100 [ 1337.922267][T16849] __kmalloc_noprof+0xfe/0x720 [ 1337.922286][T16849] ? rcu_is_watching+0x16/0xb0 [ 1337.922310][T16849] ? tomoyo_realpath_from_path+0xef/0x640 [ 1337.922336][T16849] ? tomoyo_realpath_from_path+0xef/0x640 [ 1337.922370][T16849] tomoyo_realpath_from_path+0xef/0x640 [ 1337.922407][T16849] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1337.922429][T16849] tomoyo_path_number_perm+0x246/0x5f0 [ 1337.922455][T16849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1337.922475][T16849] ? __lock_acquire+0x747/0x2de0 [ 1337.922512][T16849] ? hook_file_ioctl+0x1f2/0x600 [ 1337.922556][T16849] ? __fget_files+0x2a/0x420 [ 1337.922586][T16849] ? __fget_files+0x2a/0x420 [ 1337.922611][T16849] ? __fget_files+0x3a2/0x420 [ 1337.922641][T16849] ? __fget_files+0x2a/0x420 [ 1337.922669][T16849] security_file_ioctl+0xc3/0x2a0 [ 1337.922690][T16849] __se_sys_ioctl+0x47/0x170 [ 1337.922715][T16849] do_syscall_64+0x166/0x520 [ 1337.922737][T16849] ? trace_irq_disable+0x3b/0x140 [ 1337.922756][T16849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.922777][T16849] ? clear_bhb_loop+0x70/0xc0 [ 1337.922802][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.922822][T16849] RIP: 0033:0x7facf579e159 [ 1337.922841][T16849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.922858][T16849] RSP: 002b:00007facf66e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1337.922880][T16849] RAX: ffffffffffffffda RBX: 00007facf5a25fa0 RCX: 00007facf579e159 [ 1337.922895][T16849] RDX: 0000200000000040 RSI: 00000000000089b0 RDI: 0000000000000009 [ 1337.922908][T16849] RBP: 00007facf66e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1337.922922][T16849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.922934][T16849] R13: 00007facf5a26038 R14: 00007facf5a25fa0 R15: 00007fff9190e6e8 [ 1337.922969][T16849] [ 1337.923582][T16849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1338.301475][T16860] netlink: 'syz.6.13256': attribute type 2 has an invalid length. [ 1338.301505][T16860] netlink: 'syz.6.13256': attribute type 2 has an invalid length. [ 1338.662101][T16880] ovs-s: entered promiscuous mode [ 1338.676123][T16880] openvswitch: ovs-s: Dropping previously announced user features [ 1338.688026][T16880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13262'. [ 1338.873807][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13264'. [ 1338.977165][ T204] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1338.977212][ T204] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1338.977246][ T204] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1338.977279][ T204] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1341.362380][T16864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1341.368687][T16871] netlink: 'syz.6.13260': attribute type 10 has an invalid length. [ 1341.665769][T16904] netlink: 'syz.4.13268': attribute type 2 has an invalid length. [ 1341.665795][T16904] netlink: 'syz.4.13268': attribute type 2 has an invalid length. [ 1341.858414][T16915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13272'. [ 1341.866615][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13272'. [ 1342.019745][T16924] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13275'. [ 1342.139917][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13270'. [ 1342.228555][T16930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13278'. [ 1342.246521][T16930] tipc: Resetting bearer [ 1342.246563][T16930] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1342.325758][T16909] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1342.325939][T16934] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1342.325959][T16934] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 1342.517996][T16940] netlink: 'syz.5.13282': attribute type 2 has an invalid length. [ 1342.518034][T16940] netlink: 'syz.5.13282': attribute type 2 has an invalid length. [ 1342.721027][T16947] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1342.780525][T16950] 8021q: VLANs not supported on ip_vti0 [ 1342.800075][T16950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13286'. [ 1343.051908][T16963] netlink: 592 bytes leftover after parsing attributes in process `syz.4.13292'. [ 1343.143522][T16965] netlink: 'syz.5.13293': attribute type 2 has an invalid length. [ 1343.143547][T16965] netlink: 'syz.5.13293': attribute type 2 has an invalid length. [ 1343.378457][T16980] syzkaller0: entered promiscuous mode [ 1343.378481][T16980] syzkaller0: entered allmulticast mode [ 1343.403682][T16980] tipc: Enabled bearer , priority 0 [ 1343.415271][T16980] tipc: Resetting bearer [ 1343.440206][T16979] tipc: Resetting bearer [ 1343.471328][T16979] tipc: Disabling bearer [ 1343.542017][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13302'. [ 1343.794624][T16998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13306'. [ 1343.850414][ T31] audit: type=1804 audit(1789458861.323:67): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.13305" name="/newroot/478/cgroup.controllers" dev="tmpfs" ino=2453 res=1 errno=0 [ 1343.850555][ T31] audit: type=1800 audit(1789458861.323:68): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13305" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=0 [ 1343.903145][T17006] netlink: 'syz.6.13307': attribute type 2 has an invalid length. [ 1343.903170][T17006] netlink: 'syz.6.13307': attribute type 2 has an invalid length. [ 1344.050540][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13309'. [ 1344.072122][T17011] hsr_slave_1 (unregistering): left promiscuous mode [ 1344.072662][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13310'. [ 1344.125178][ T31] audit: type=1800 audit(1789458861.593:69): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13305" name="cgroup.controllers" dev="tmpfs" ino=2453 res=0 errno=0 [ 1344.224328][T16997] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1344.304438][T17026] netlink: 'syz.0.13314': attribute type 11 has an invalid length. [ 1344.486089][T17033] lo speed is unknown, defaulting to 1000 [ 1344.623491][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13318'. [ 1344.755006][T17048] netlink: 'syz.6.13320': attribute type 2 has an invalid length. [ 1344.755033][T17048] netlink: 'syz.6.13320': attribute type 2 has an invalid length. [ 1344.828233][T17045] xt_MASQUERADE: bad MAP_IPS. [ 1344.952372][T17055] netlink: 'syz.6.13321': attribute type 12 has an invalid length. [ 1345.139824][T17065] bond_slave_1: entered promiscuous mode [ 1345.139856][T17065] bond_slave_1: entered allmulticast mode [ 1345.356530][T17071] xt_MASQUERADE: bad MAP_IPS. [ 1345.589781][T17073] batman_adv: batadv0: Interface deactivated: macvlan0 [ 1345.638531][T17073] batman_adv: batadv0: Interface deactivated: macvlan3 [ 1346.193234][T17098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1346.208071][T17098] bond4: (slave batadv0): Releasing active interface [ 1346.211395][T17098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.213376][T17098] bond5: (slave batadv0): making interface the new active one [ 1346.214232][T17098] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 1346.272876][T17098] bond5: (slave batadv0): Releasing active interface [ 1346.279163][T17098] bridge_slave_0: left allmulticast mode [ 1346.282157][T17098] bridge_slave_0: left promiscuous mode [ 1346.283387][T17098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.304341][T17098] bridge_slave_1: left allmulticast mode [ 1346.304382][T17098] bridge_slave_1: left promiscuous mode [ 1346.304543][T17098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.321028][T17098] bond0: (slave bond_slave_0): Releasing backup interface [ 1346.339561][T17098] bond0: (slave bond_slave_1): Releasing backup interface [ 1346.343080][T17098] team0: Port device team_slave_0 removed [ 1346.345288][T17098] team0: Port device team_slave_1 removed [ 1346.345653][T17098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.346570][T17098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.355612][T17098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1346.469872][T17105] bridge0: port 4(macsec1) entered blocking state [ 1346.470038][T17105] bridge0: port 4(macsec1) entered disabled state [ 1346.470168][T17105] macsec1: entered allmulticast mode [ 1346.470184][T17105] bridge0: entered allmulticast mode [ 1346.472961][T17105] macsec1: left allmulticast mode [ 1346.472980][T17105] bridge0: left allmulticast mode [ 1346.587348][T17114] : renamed from dummy0 [ 1346.661653][T17120] FAULT_INJECTION: forcing a failure. [ 1346.661653][T17120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.661687][T17120] CPU: 0 UID: 0 PID: 17120 Comm: syz.4.13341 Not tainted syzkaller #0 PREEMPT(full) [ 1346.661738][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.661750][T17120] Call Trace: [ 1346.661759][T17120] [ 1346.661768][T17120] dump_stack_lvl+0xe8/0x150 [ 1346.661802][T17120] should_fail_ex+0x410/0x560 [ 1346.661831][T17120] _copy_from_user+0x2d/0xb0 [ 1346.661860][T17120] __sys_bpf+0x2e7/0xd90 [ 1346.661893][T17120] ? __pfx___sys_bpf+0x10/0x10 [ 1346.661928][T17120] ? __fget_files+0x2a/0x420 [ 1346.661974][T17120] ? ksys_write+0x242/0x270 [ 1346.662007][T17120] ? __pfx_ksys_write+0x10/0x10 [ 1346.662043][T17120] __x64_sys_bpf+0xba/0xd0 [ 1346.662067][T17120] do_syscall_64+0x166/0x520 [ 1346.662090][T17120] ? trace_irq_disable+0x3b/0x140 [ 1346.662110][T17120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.662131][T17120] ? clear_bhb_loop+0x70/0xc0 [ 1346.662155][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.662174][T17120] RIP: 0033:0x7f162519e159 [ 1346.662192][T17120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.662208][T17120] RSP: 002b:00007f16233d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1346.662229][T17120] RAX: ffffffffffffffda RBX: 00007f1625426090 RCX: 00007f162519e159 [ 1346.662243][T17120] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1346.662257][T17120] RBP: 00007f16233d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.662271][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.662284][T17120] R13: 00007f1625426128 R14: 00007f1625426090 R15: 00007ffe4e83e0f8 [ 1346.662318][T17120] [ 1347.249329][T17138] __nla_validate_parse: 5 callbacks suppressed [ 1347.249350][T17138] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13350'. [ 1347.522469][T17149] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1347.522515][T17149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.785625][T17167] netlink: 236 bytes leftover after parsing attributes in process `syz.4.13360'. [ 1347.890291][T17170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.896142][ T7510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.896164][ T7510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.036248][T17177] lo: entered allmulticast mode [ 1348.049034][T17161] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1348.151753][T17181] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13364'. [ 1348.151775][T17181] FAULT_INJECTION: forcing a failure. [ 1348.151775][T17181] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.151800][T17181] CPU: 1 UID: 0 PID: 17181 Comm: syz.6.13364 Not tainted syzkaller #0 PREEMPT(full) [ 1348.151823][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.151834][T17181] Call Trace: [ 1348.151843][T17181] [ 1348.151852][T17181] dump_stack_lvl+0xe8/0x150 [ 1348.151886][T17181] should_fail_ex+0x410/0x560 [ 1348.151914][T17181] should_failslab+0xa8/0x100 [ 1348.151941][T17181] __kmalloc_noprof+0xfe/0x720 [ 1348.151959][T17181] ? nft_pernet+0x23/0x240 [ 1348.151984][T17181] ? nf_tables_newrule+0x1524/0x28a0 [ 1348.152007][T17181] ? nf_tables_newrule+0x1524/0x28a0 [ 1348.152038][T17181] nf_tables_newrule+0x1524/0x28a0 [ 1348.152088][T17181] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1348.152111][T17181] ? lock_acquire+0x115/0x350 [ 1348.152132][T17181] ? nfnl_pernet+0x23/0x240 [ 1348.152166][T17181] ? __nla_parse+0x40/0x60 [ 1348.152196][T17181] nfnetlink_rcv+0x1288/0x28c0 [ 1348.152259][T17181] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1348.152338][T17181] ? lock_acquire+0x115/0x350 [ 1348.152369][T17181] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.152397][T17181] ? netlink_deliver_tap+0x2e/0x1b0 [ 1348.152432][T17181] netlink_unicast+0x7bd/0x940 [ 1348.152470][T17181] netlink_sendmsg+0x813/0xb40 [ 1348.152508][T17181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.152545][T17181] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1348.152570][T17181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1348.152605][T17181] sock_sendmsg_nosec+0x13a/0x180 [ 1348.152638][T17181] ____sys_sendmsg+0x54e/0x850 [ 1348.152669][T17181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1348.152705][T17181] ? import_iovec+0x73/0xa0 [ 1348.152732][T17181] ___sys_sendmsg+0x2a5/0x360 [ 1348.152756][T17181] ? __lock_acquire+0x747/0x2de0 [ 1348.152781][T17181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1348.152845][T17181] ? __fget_files+0x2a/0x420 [ 1348.152870][T17181] ? __fget_files+0x3a2/0x420 [ 1348.152908][T17181] __x64_sys_sendmsg+0x1b1/0x290 [ 1348.152937][T17181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1348.152987][T17181] do_syscall_64+0x166/0x520 [ 1348.153009][T17181] ? trace_irq_disable+0x3b/0x140 [ 1348.153029][T17181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.153049][T17181] ? clear_bhb_loop+0x70/0xc0 [ 1348.153075][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.153101][T17181] RIP: 0033:0x7fa9f4f9e159 [ 1348.153121][T17181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.153138][T17181] RSP: 002b:00007fa9f5f11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1348.153160][T17181] RAX: ffffffffffffffda RBX: 00007fa9f5225fa0 RCX: 00007fa9f4f9e159 [ 1348.153175][T17181] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1348.153189][T17181] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.153202][T17181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.153214][T17181] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1348.153247][T17181] [ 1348.646028][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13372'. [ 1348.761105][T17206] netlink: 144 bytes leftover after parsing attributes in process `syz.5.13374'. [ 1348.881163][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13375'. [ 1348.935602][T17200] batman_adv: batadv0: Interface activated: syzkaller0 [ 1348.935881][T17200] tipc: Resetting bearer [ 1348.936130][T17205] syzkaller1: entered promiscuous mode [ 1348.936148][T17205] syzkaller1: entered allmulticast mode [ 1349.259023][T17225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1349.429735][T17236] FAULT_INJECTION: forcing a failure. [ 1349.429735][T17236] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.429767][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz.6.13389 Not tainted syzkaller #0 PREEMPT(full) [ 1349.429788][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1349.429799][T17236] Call Trace: [ 1349.429807][T17236] [ 1349.429815][T17236] dump_stack_lvl+0xe8/0x150 [ 1349.429847][T17236] should_fail_ex+0x410/0x560 [ 1349.429884][T17236] should_failslab+0xa8/0x100 [ 1349.429909][T17236] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1349.429932][T17236] ? check_stack_access_within_bounds+0x7db/0xb60 [ 1349.429953][T17236] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1349.429972][T17236] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1349.429996][T17236] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1349.430017][T17236] krealloc_node_align_noprof+0x19a/0x390 [ 1349.430045][T17236] bpf_push_jmp_history+0x26c/0x6d0 [ 1349.430076][T17236] check_mem_access+0xf9e/0x2620 [ 1349.430109][T17236] ? __pfx_check_mem_access+0x10/0x10 [ 1349.430136][T17236] ? is_bpf_text_address+0x292/0x2b0 [ 1349.430158][T17236] ? is_bpf_text_address+0x26/0x2b0 [ 1349.430183][T17236] ? kernel_text_address+0xa5/0xe0 [ 1349.430206][T17236] ? __kernel_text_address+0xd/0x30 [ 1349.430230][T17236] check_store_reg+0x664/0xe20 [ 1349.430266][T17236] do_check_insn+0x9df/0x18e70 [ 1349.430301][T17236] ? kasan_save_track+0x3e/0x80 [ 1349.430321][T17236] ? __kasan_kmalloc+0x93/0xb0 [ 1349.430341][T17236] ? __kmalloc_cache_noprof+0x321/0x600 [ 1349.430359][T17236] ? do_check_common+0x352/0x5d30 [ 1349.430381][T17236] ? bpf_check+0x2639/0x2e10 [ 1349.430400][T17236] ? bpf_prog_load+0x14d6/0x1c20 [ 1349.430421][T17236] ? __sys_bpf+0xd0d/0xd90 [ 1349.430440][T17236] ? __x64_sys_bpf+0xba/0xd0 [ 1349.430457][T17236] ? do_syscall_64+0x166/0x520 [ 1349.430478][T17236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.430506][T17236] ? __pfx_do_check_insn+0x10/0x10 [ 1349.430565][T17236] ? rcu_is_watching+0x16/0xb0 [ 1349.430595][T17236] ? __kasan_kmalloc+0x93/0xb0 [ 1349.430621][T17236] ? __asan_memset+0x22/0x50 [ 1349.430648][T17236] ? cnum32_from_urange+0xf/0x30 [ 1349.430682][T17236] do_check_common+0x3c19/0x5d30 [ 1349.430746][T17236] ? __pfx_do_check_common+0x10/0x10 [ 1349.430785][T17236] bpf_check+0x2639/0x2e10 [ 1349.430818][T17236] ? ktime_get_with_offset+0x93/0x2d0 [ 1349.430844][T17236] ? __pfx_bpf_check+0x10/0x10 [ 1349.430876][T17236] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1349.430909][T17236] bpf_prog_load+0x14d6/0x1c20 [ 1349.430945][T17236] ? __pfx_bpf_prog_load+0x10/0x10 [ 1349.430995][T17236] __sys_bpf+0xd0d/0xd90 [ 1349.431026][T17236] ? __pfx___sys_bpf+0x10/0x10 [ 1349.431061][T17236] ? __fget_files+0x2a/0x420 [ 1349.431107][T17236] ? ksys_write+0x242/0x270 [ 1349.431139][T17236] ? __pfx_ksys_write+0x10/0x10 [ 1349.431174][T17236] __x64_sys_bpf+0xba/0xd0 [ 1349.431198][T17236] do_syscall_64+0x166/0x520 [ 1349.431218][T17236] ? trace_irq_disable+0x3b/0x140 [ 1349.431238][T17236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.431257][T17236] ? clear_bhb_loop+0x70/0xc0 [ 1349.431282][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.431302][T17236] RIP: 0033:0x7fa9f4f9e159 [ 1349.431321][T17236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.431338][T17236] RSP: 002b:00007fa9f5f11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1349.431360][T17236] RAX: ffffffffffffffda RBX: 00007fa9f5225fa0 RCX: 00007fa9f4f9e159 [ 1349.431375][T17236] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1349.431388][T17236] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.431401][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.431414][T17236] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1349.431448][T17236] [ 1349.622059][T17250] FAULT_INJECTION: forcing a failure. [ 1349.622059][T17250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.622089][T17250] CPU: 1 UID: 0 PID: 17250 Comm: syz.4.13390 Not tainted syzkaller #0 PREEMPT(full) [ 1349.622112][T17250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1349.622123][T17250] Call Trace: [ 1349.622131][T17250] [ 1349.622140][T17250] dump_stack_lvl+0xe8/0x150 [ 1349.622173][T17250] should_fail_ex+0x410/0x560 [ 1349.622202][T17250] _copy_from_user+0x2d/0xb0 [ 1349.622227][T17250] kstrtouint_from_user+0xd6/0x180 [ 1349.622253][T17250] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1349.622282][T17250] ? lock_acquire+0x115/0x350 [ 1349.622307][T17250] proc_fail_nth_write+0x8e/0x210 [ 1349.622327][T17250] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1349.622373][T17250] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1349.622402][T17250] vfs_write+0x296/0xba0 [ 1349.622439][T17250] ? __pfx_vfs_write+0x10/0x10 [ 1349.622469][T17250] ? __fget_files+0x2a/0x420 [ 1349.622499][T17250] ? __fget_files+0x3a2/0x420 [ 1349.622523][T17250] ? __fget_files+0x2a/0x420 [ 1349.622558][T17250] ksys_write+0x150/0x270 [ 1349.622589][T17250] ? __pfx_ksys_write+0x10/0x10 [ 1349.622630][T17250] do_syscall_64+0x166/0x520 [ 1349.622651][T17250] ? trace_irq_disable+0x3b/0x140 [ 1349.622670][T17250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.622690][T17250] ? clear_bhb_loop+0x70/0xc0 [ 1349.622714][T17250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.622733][T17250] RIP: 0033:0x7f162515e98e [ 1349.622751][T17250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1349.622769][T17250] RSP: 002b:00007f16233d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1349.622789][T17250] RAX: ffffffffffffffda RBX: 00007f16233d56c0 RCX: 00007f162515e98e [ 1349.622804][T17250] RDX: 0000000000000001 RSI: 00007f16233d50a0 RDI: 0000000000000003 [ 1349.622816][T17250] RBP: 00007f16233d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.622829][T17250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.622841][T17250] R13: 00007f1625426128 R14: 00007f1625426090 R15: 00007ffe4e83e0f8 [ 1349.622873][T17250] [ 1349.630852][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13386'. [ 1349.630881][T17238] validate_nla: 8 callbacks suppressed [ 1349.630894][T17238] netlink: 'syz.0.13386': attribute type 30 has an invalid length. [ 1349.712256][T17238] vxlan4: entered promiscuous mode [ 1349.712279][T17238] vxlan4: entered allmulticast mode [ 1349.737174][ T7510] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.737218][ T7510] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.737250][ T7510] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.737281][ T7510] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.826475][T17255] sctp: [Deprecated]: syz.2.13387 (pid 17255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1349.826475][T17255] Use struct sctp_sack_info instead [ 1349.830226][T17255] sctp: [Deprecated]: syz.2.13387 (pid 17255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1349.830226][T17255] Use struct sctp_sack_info instead [ 1349.868998][T17254] bond_slave_1: left promiscuous mode [ 1349.869020][T17254] bond_slave_1: left allmulticast mode [ 1350.167110][T17267] netlink: 'syz.5.13394': attribute type 2 has an invalid length. [ 1350.174696][T17268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13393'. [ 1350.623295][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13400'. [ 1350.640558][T17291] Cannot find del_set index 4 as target [ 1350.643568][T17292] Cannot find del_set index 4 as target [ 1350.668620][T17291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13401'. [ 1350.753547][T17298] xt_MASQUERADE: bad MAP_IPS. [ 1350.813219][T17302] openvswitch: netlink: Actions may not be safe on all matching packets [ 1350.825864][T17292] C: renamed from veth1_to_team [ 1350.833629][T17292] netlink: 'syz.5.13401': attribute type 1 has an invalid length. [ 1350.833654][T17292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1351.324749][T17326] netlink: 'syz.6.13411': attribute type 1 has an invalid length. [ 1351.346945][ C0] ip6_tunnel: ip6tnl10 xmit: Local address not yet configured! [ 1351.351776][T17326] netlink: 'syz.6.13411': attribute type 1 has an invalid length. [ 1351.641102][T17333] FAULT_INJECTION: forcing a failure. [ 1351.641102][T17333] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.641137][T17333] CPU: 0 UID: 0 PID: 17333 Comm: syz.5.13414 Not tainted syzkaller #0 PREEMPT(full) [ 1351.641159][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1351.641171][T17333] Call Trace: [ 1351.641179][T17333] [ 1351.641189][T17333] dump_stack_lvl+0xe8/0x150 [ 1351.641222][T17333] should_fail_ex+0x410/0x560 [ 1351.641252][T17333] should_failslab+0xa8/0x100 [ 1351.641276][T17333] ? alloc_vfsmnt+0x23/0x410 [ 1351.641298][T17333] kmem_cache_alloc_noprof+0xa1/0x600 [ 1351.641331][T17333] ? alloc_vfsmnt+0x23/0x410 [ 1351.641353][T17333] ? lock_acquire+0x115/0x350 [ 1351.641376][T17333] alloc_vfsmnt+0x23/0x410 [ 1351.641401][T17333] clone_mnt+0x4b/0x9b0 [ 1351.641428][T17333] copy_tree+0x3d8/0x940 [ 1351.641463][T17333] copy_mnt_ns+0x3de/0xcc0 [ 1351.641493][T17333] ? rcu_is_watching+0x16/0xb0 [ 1351.641520][T17333] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1351.641546][T17333] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 1351.641587][T17333] create_new_namespaces+0xcf/0x6b0 [ 1351.641624][T17333] ? bpf_lsm_capable+0x9/0x20 [ 1351.641642][T17333] ? security_capable+0x7e/0x2c0 [ 1351.641673][T17333] unshare_nsproxy_namespaces+0x149/0x190 [ 1351.641704][T17333] ksys_unshare+0x5a7/0x950 [ 1351.641739][T17333] ? __pfx_ksys_unshare+0x10/0x10 [ 1351.641767][T17333] ? __pfx_ksys_write+0x10/0x10 [ 1351.641808][T17333] __x64_sys_unshare+0x38/0x50 [ 1351.641835][T17333] do_syscall_64+0x166/0x520 [ 1351.641856][T17333] ? trace_irq_disable+0x3b/0x140 [ 1351.641876][T17333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.641897][T17333] ? clear_bhb_loop+0x70/0xc0 [ 1351.641923][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.641942][T17333] RIP: 0033:0x7facf579e159 [ 1351.641961][T17333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.641979][T17333] RSP: 002b:00007facf66e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1351.642002][T17333] RAX: ffffffffffffffda RBX: 00007facf5a25fa0 RCX: 00007facf579e159 [ 1351.642017][T17333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 1351.642030][T17333] RBP: 00007facf66e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.642043][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.642056][T17333] R13: 00007facf5a26038 R14: 00007facf5a25fa0 R15: 00007fff9190e6e8 [ 1351.642088][T17333] [ 1351.701312][T17334] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1351.702880][T17334] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1352.028470][T17339] bridge0: port 2(macsec0) entered blocking state [ 1352.028652][T17339] bridge0: port 2(macsec0) entered disabled state [ 1352.028780][T17339] macsec0: entered allmulticast mode [ 1352.028796][T17339] bridge0: entered allmulticast mode [ 1352.031568][T17339] macsec0: left allmulticast mode [ 1352.031589][T17339] bridge0: left allmulticast mode [ 1352.267614][T17340] __nla_validate_parse: 5 callbacks suppressed [ 1352.267640][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13416'. [ 1352.645747][T17363] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1352.649723][T17364] netlink: 'syz.6.13425': attribute type 12 has an invalid length. [ 1352.768351][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1352.799361][T17372] macsec0: entered allmulticast mode [ 1352.802547][T17372] veth1_macvtap: entered allmulticast mode [ 1352.802683][T17372] macsec0: left allmulticast mode [ 1352.802697][T17372] veth1_macvtap: left allmulticast mode [ 1352.837517][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1352.969454][T17376] netlink: 830 bytes leftover after parsing attributes in process `syz.6.13429'. [ 1353.683104][T17410] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 1353.715204][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13439'. [ 1353.872987][T17419] netlink: 'syz.4.13442': attribute type 11 has an invalid length. [ 1354.050335][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13449'. [ 1354.224745][T17440] sch_tbf: peakrate 3 is lower than or equals to rate 4938 ! [ 1354.614094][T17460] tipc: Started in network mode [ 1354.614124][T17460] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1354.614285][T17460] tipc: Enabled bearer , priority 10 [ 1354.689427][T17469] netlink: 76 bytes leftover after parsing attributes in process `syz.6.13455'. [ 1354.749658][T17471] netlink: 'syz.0.13459': attribute type 13 has an invalid length. [ 1354.943301][T17481] netlink: 'syz.6.13462': attribute type 1 has an invalid length. [ 1354.995603][T17481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1355.081124][T17487] batman_adv: batadv0: Adding interface: macvtap0 [ 1355.081143][T17487] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.081173][T17487] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1355.085595][T17481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.094625][T17481] bond6: (slave batadv0): making interface the new active one [ 1355.132729][T17498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13468'. [ 1355.155583][T17481] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 1355.195902][T17491] batman_adv: batadv0: Removing interface: macvtap0 [ 1355.245223][T17489] bond6: (slave batadv0): Releasing active interface [ 1355.261464][T17489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1355.286518][T17500] batman_adv: batadv0: Adding interface: syzkaller0 [ 1355.286537][T17500] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.286568][T17500] batman_adv: batadv0: Interface activated: syzkaller0 [ 1355.334974][T17484] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1355.373264][T17484] batman_adv: batadv0: Removing interface: syzkaller0 [ 1355.434228][T17510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1355.678049][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13475'. [ 1355.739359][ T5714] tipc: Node number set to 10136234 [ 1355.837978][T17530] netlink: 'syz.0.13477': attribute type 1 has an invalid length. [ 1355.838000][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13477'. [ 1355.987775][T17539] FAULT_INJECTION: forcing a failure. [ 1355.987775][T17539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.987807][T17539] CPU: 0 UID: 0 PID: 17539 Comm: syz.6.13482 Not tainted syzkaller #0 PREEMPT(full) [ 1355.987830][T17539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1355.987842][T17539] Call Trace: [ 1355.987850][T17539] [ 1355.987859][T17539] dump_stack_lvl+0xe8/0x150 [ 1355.987893][T17539] should_fail_ex+0x410/0x560 [ 1355.987922][T17539] _copy_to_user+0x31/0xb0 [ 1355.987950][T17539] simple_read_from_buffer+0xe1/0x170 [ 1355.987983][T17539] proc_fail_nth_read+0x1bb/0x230 [ 1355.988012][T17539] ? common_file_perm+0x20e/0x2b0 [ 1355.988038][T17539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1355.988072][T17539] ? rw_verify_area+0x24a/0x4c0 [ 1355.988102][T17539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1355.988130][T17539] vfs_read+0x213/0xa80 [ 1355.988171][T17539] ? __pfx___mutex_lock+0x10/0x10 [ 1355.988194][T17539] ? __pfx_vfs_read+0x10/0x10 [ 1355.988221][T17539] ? __fget_files+0x2a/0x420 [ 1355.988250][T17539] ? __fget_files+0x3a2/0x420 [ 1355.988272][T17539] ? __fget_files+0x2a/0x420 [ 1355.988310][T17539] ksys_read+0x150/0x270 [ 1355.988341][T17539] ? __pfx_ksys_read+0x10/0x10 [ 1355.988367][T17539] ? __pfx_sock_ioctl+0x10/0x10 [ 1355.988404][T17539] do_syscall_64+0x166/0x520 [ 1355.988423][T17539] ? trace_irq_disable+0x3b/0x140 [ 1355.988441][T17539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.988458][T17539] ? clear_bhb_loop+0x70/0xc0 [ 1355.988483][T17539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.988501][T17539] RIP: 0033:0x7fa9f4f5e98e [ 1355.988520][T17539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1355.988536][T17539] RSP: 002b:00007fa9f5f10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1355.988557][T17539] RAX: ffffffffffffffda RBX: 00007fa9f5f116c0 RCX: 00007fa9f4f5e98e [ 1355.988572][T17539] RDX: 000000000000000f RSI: 00007fa9f5f110a0 RDI: 000000000000000a [ 1355.988584][T17539] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.988595][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.988607][T17539] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1355.988637][T17539] [ 1356.679116][ T31] audit: type=1804 audit(1789458874.153:70): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.13480" name="/newroot/514/cgroup.controllers" dev="tmpfs" ino=2637 res=1 errno=0 [ 1356.679344][ T31] audit: type=1800 audit(1789458874.153:71): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13480" name="cgroup.controllers" dev="tmpfs" ino=2637 res=0 errno=0 [ 1356.681206][ T31] audit: type=1800 audit(1789458874.153:72): pid=17536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13480" name="cgroup.controllers" dev="tmpfs" ino=2637 res=0 errno=0 [ 1356.857266][T17571] syzkaller1: entered promiscuous mode [ 1356.857290][T17571] syzkaller1: entered allmulticast mode [ 1357.056166][ T13] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1357.152135][T17581] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1357.207174][T17583] netlink: 'syz.0.13494': attribute type 1 has an invalid length. [ 1357.635898][T17611] __nla_validate_parse: 4 callbacks suppressed [ 1357.635918][T17611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13504'. [ 1357.910064][T17623] netlink: 'syz.0.13510': attribute type 1 has an invalid length. [ 1357.945207][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13511'. [ 1357.986170][T17623] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1358.175883][T17623] bond29: (slave geneve5): making interface the new active one [ 1358.184922][T17623] bond29: (slave geneve5): Enslaving as an active interface with an up link [ 1358.257397][ T7507] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.258534][ T7507] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.258584][ T7507] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.258617][ T7507] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.462219][T17661] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1358.462268][T17661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1358.636502][T17673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1358.637359][T17672] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1359.322234][ T31] audit: type=1804 audit(1789458876.793:73): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13531" name="/newroot/2635/cgroup.controllers" dev="tmpfs" ino=13498 res=1 errno=0 [ 1359.322290][ T31] audit: type=1800 audit(1789458876.793:74): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13531" name="cgroup.controllers" dev="tmpfs" ino=13498 res=0 errno=0 [ 1359.376956][ T31] audit: type=1800 audit(1789458876.843:75): pid=17705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13531" name="cgroup.controllers" dev="tmpfs" ino=13498 res=0 errno=0 [ 1359.518508][T17719] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1359.521801][T17719] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1360.182053][T17749] netlink: 'syz.2.13549': attribute type 4 has an invalid length. [ 1360.292702][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13555'. [ 1360.293012][T17755] batadv0: Device is already in use. [ 1360.417616][T17761] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13556'. [ 1360.495181][T17764] netlink: 'syz.0.13558': attribute type 1 has an invalid length. [ 1360.495204][T17764] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1360.495219][T17764] netlink: 'syz.0.13558': attribute type 1 has an invalid length. [ 1360.529669][T17764] netlink: 180 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1360.538594][T17764] Bluetooth: hci0: unsupported parameter 5135 [ 1360.538625][T17764] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 1360.541465][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1360.544742][T17764] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1360.595396][T17765] netlink: 'syz.4.13557': attribute type 3 has an invalid length. [ 1360.755832][T17769] block nbd5: not configured, cannot reconfigure [ 1360.793628][T17784] FAULT_INJECTION: forcing a failure. [ 1360.793628][T17784] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.793662][T17784] CPU: 0 UID: 0 PID: 17784 Comm: syz.0.13565 Not tainted syzkaller #0 PREEMPT(full) [ 1360.793685][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1360.793697][T17784] Call Trace: [ 1360.793703][T17784] [ 1360.793712][T17784] dump_stack_lvl+0xe8/0x150 [ 1360.793747][T17784] should_fail_ex+0x410/0x560 [ 1360.793776][T17784] should_failslab+0xa8/0x100 [ 1360.793810][T17784] ? alloc_vfsmnt+0x23/0x410 [ 1360.793832][T17784] kmem_cache_alloc_noprof+0xa1/0x600 [ 1360.793865][T17784] ? alloc_vfsmnt+0x23/0x410 [ 1360.793887][T17784] ? lock_acquire+0x115/0x350 [ 1360.793912][T17784] alloc_vfsmnt+0x23/0x410 [ 1360.793936][T17784] clone_mnt+0x4b/0x9b0 [ 1360.793964][T17784] copy_tree+0x3d8/0x940 [ 1360.793999][T17784] copy_mnt_ns+0x3de/0xcc0 [ 1360.794027][T17784] ? rcu_is_watching+0x16/0xb0 [ 1360.794058][T17784] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1360.794084][T17784] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 1360.794126][T17784] create_new_namespaces+0xcf/0x6b0 [ 1360.794154][T17784] ? bpf_lsm_capable+0x9/0x20 [ 1360.794173][T17784] ? security_capable+0x7e/0x2c0 [ 1360.794204][T17784] unshare_nsproxy_namespaces+0x149/0x190 [ 1360.794234][T17784] ksys_unshare+0x5a7/0x950 [ 1360.794270][T17784] ? __pfx_ksys_unshare+0x10/0x10 [ 1360.794298][T17784] ? __pfx_ksys_write+0x10/0x10 [ 1360.794339][T17784] __x64_sys_unshare+0x38/0x50 [ 1360.794367][T17784] do_syscall_64+0x166/0x520 [ 1360.794389][T17784] ? trace_irq_disable+0x3b/0x140 [ 1360.794408][T17784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.794428][T17784] ? clear_bhb_loop+0x70/0xc0 [ 1360.794453][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.794473][T17784] RIP: 0033:0x7f7b69f9e159 [ 1360.794490][T17784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.794508][T17784] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1360.794528][T17784] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1360.794542][T17784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 1360.794554][T17784] RBP: 00007f7b6ad9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.794566][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.794578][T17784] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1360.794611][T17784] [ 1360.885997][T17790] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1360.891697][T17790] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1361.070338][T17795] netlink: 'syz.2.13566': attribute type 21 has an invalid length. [ 1361.070438][T17795] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13566'. [ 1361.239941][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13572'. [ 1361.312609][T17801] bond22: entered promiscuous mode [ 1361.313120][T17801] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1361.374578][T17811] netlink: 'syz.0.13573': attribute type 1 has an invalid length. [ 1361.455766][T17811] bond30: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1361.517970][T17811] bond30 (unregistering): Released all slaves [ 1361.572966][T17823] syzkaller0: entered promiscuous mode [ 1361.572988][T17823] syzkaller0: entered allmulticast mode [ 1362.221984][T17844] infiniband syz2: set down [ 1362.222005][T17844] infiniband syz2: added ipvlan1 [ 1362.223363][T17859] xt_MASQUERADE: bad MAP_IPS. [ 1362.252050][T17844] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1362.252074][T17844] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1362.252095][T17844] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1362.325941][T17861] xt_MASQUERADE: bad MAP_IPS. [ 1362.335690][T17844] RDS/IB: syz2: added [ 1362.335752][T17844] smc: adding ib device syz2 with port count 1 [ 1362.335775][T17844] smc: ib device syz2 port 1 has no pnetid [ 1362.615694][T17867] lo: entered allmulticast mode [ 1362.750404][T17870] syzkaller1: entered promiscuous mode [ 1362.750428][T17870] syzkaller1: entered allmulticast mode [ 1362.872002][T17873] FAULT_INJECTION: forcing a failure. [ 1362.872002][T17873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.872035][T17873] CPU: 1 UID: 0 PID: 17873 Comm: syz.0.13596 Not tainted syzkaller #0 PREEMPT(full) [ 1362.872057][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1362.872068][T17873] Call Trace: [ 1362.872076][T17873] [ 1362.872085][T17873] dump_stack_lvl+0xe8/0x150 [ 1362.872119][T17873] should_fail_ex+0x410/0x560 [ 1362.872146][T17873] _copy_to_user+0x31/0xb0 [ 1362.872174][T17873] bpf_test_finish+0x52e/0x690 [ 1362.872213][T17873] ? __pfx_bpf_test_finish+0x10/0x10 [ 1362.872247][T17873] ? _copy_from_user+0x94/0xb0 [ 1362.872272][T17873] ? bpf_test_init+0x113/0x150 [ 1362.872301][T17873] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 1362.872347][T17873] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1362.872382][T17873] ? __fget_files+0x2a/0x420 [ 1362.872414][T17873] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1362.872445][T17873] bpf_prog_test_run+0x2c5/0x340 [ 1362.872474][T17873] __sys_bpf+0xa22/0xd90 [ 1362.872504][T17873] ? __pfx___sys_bpf+0x10/0x10 [ 1362.872539][T17873] ? __fget_files+0x2a/0x420 [ 1362.872591][T17873] ? ksys_write+0x242/0x270 [ 1362.872623][T17873] ? __pfx_ksys_write+0x10/0x10 [ 1362.872658][T17873] __x64_sys_bpf+0xba/0xd0 [ 1362.872682][T17873] do_syscall_64+0x166/0x520 [ 1362.872703][T17873] ? trace_irq_disable+0x3b/0x140 [ 1362.872723][T17873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.872744][T17873] ? clear_bhb_loop+0x70/0xc0 [ 1362.872769][T17873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.872789][T17873] RIP: 0033:0x7f7b69f9e159 [ 1362.872808][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.872825][T17873] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1362.872848][T17873] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1362.872863][T17873] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1362.872877][T17873] RBP: 00007f7b6ad9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.872893][T17873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.872905][T17873] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1362.872939][T17873] [ 1363.200041][T17881] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1363.608639][T17897] __nla_validate_parse: 6 callbacks suppressed [ 1363.608661][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13607'. [ 1364.219706][T17905] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1364.222260][T17905] x_tables: duplicate underflow at hook 3 [ 1364.434440][T17914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13613'. [ 1365.248145][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13618'. [ 1365.294492][T17929] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1365.308572][T17929] bond28: (slave batadv0): Releasing backup interface [ 1365.313509][T17929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.335391][T17929] bond29: (slave batadv0): Enslaving as an active interface with an up link [ 1365.353131][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13618'. [ 1365.622937][T17950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13625'. [ 1365.628562][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13621'. [ 1366.098133][T17954] netlink: 'syz.0.13626': attribute type 10 has an invalid length. [ 1366.128758][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13634'. [ 1366.342441][T17987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13638'. [ 1366.375385][T17987] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1366.403623][T17987] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1366.403993][T17987] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1366.406279][T17987] bond10: (slave wireguard1): Error -95 calling set_mac_address [ 1366.413585][T17984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13639'. [ 1366.511176][T17990] syzkaller0: entered promiscuous mode [ 1366.511200][T17990] syzkaller0: entered allmulticast mode [ 1366.719384][T17995] syzkaller0: entered promiscuous mode [ 1366.719408][T17995] syzkaller0: entered allmulticast mode [ 1367.016130][T18014] FAULT_INJECTION: forcing a failure. [ 1367.016130][T18014] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.016165][T18014] CPU: 0 UID: 0 PID: 18014 Comm: syz.0.13648 Not tainted syzkaller #0 PREEMPT(full) [ 1367.016189][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1367.016202][T18014] Call Trace: [ 1367.016210][T18014] [ 1367.016219][T18014] dump_stack_lvl+0xe8/0x150 [ 1367.016253][T18014] should_fail_ex+0x410/0x560 [ 1367.016282][T18014] should_failslab+0xa8/0x100 [ 1367.016308][T18014] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1367.016330][T18014] ? check_stack_access_within_bounds+0x7db/0xb60 [ 1367.016352][T18014] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1367.016373][T18014] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1367.016397][T18014] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1367.016420][T18014] krealloc_node_align_noprof+0x19a/0x390 [ 1367.016455][T18014] bpf_push_jmp_history+0x26c/0x6d0 [ 1367.016486][T18014] check_mem_access+0xf9e/0x2620 [ 1367.016522][T18014] ? __pfx_check_mem_access+0x10/0x10 [ 1367.016552][T18014] ? is_bpf_text_address+0x292/0x2b0 [ 1367.016576][T18014] ? is_bpf_text_address+0x26/0x2b0 [ 1367.016604][T18014] ? kernel_text_address+0xa5/0xe0 [ 1367.016628][T18014] ? __kernel_text_address+0xd/0x30 [ 1367.016653][T18014] check_store_reg+0x664/0xe20 [ 1367.016691][T18014] do_check_insn+0x9df/0x18e70 [ 1367.016718][T18014] ? arch_stack_walk+0x81/0x150 [ 1367.016747][T18014] ? kasan_save_track+0x3e/0x80 [ 1367.016766][T18014] ? __kasan_kmalloc+0x93/0xb0 [ 1367.016785][T18014] ? __kmalloc_cache_noprof+0x321/0x600 [ 1367.016801][T18014] ? do_check_common+0x352/0x5d30 [ 1367.016822][T18014] ? bpf_check+0x2639/0x2e10 [ 1367.016840][T18014] ? bpf_prog_load+0x14d6/0x1c20 [ 1367.016860][T18014] ? __sys_bpf+0xd0d/0xd90 [ 1367.016879][T18014] ? __x64_sys_bpf+0xba/0xd0 [ 1367.016895][T18014] ? do_syscall_64+0x166/0x520 [ 1367.016917][T18014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.016942][T18014] ? __pfx_do_check_insn+0x10/0x10 [ 1367.016997][T18014] ? rcu_is_watching+0x16/0xb0 [ 1367.017023][T18014] ? __kasan_kmalloc+0x93/0xb0 [ 1367.017050][T18014] ? __asan_memset+0x22/0x50 [ 1367.017076][T18014] ? cnum32_from_urange+0xf/0x30 [ 1367.017109][T18014] do_check_common+0x3c19/0x5d30 [ 1367.017172][T18014] ? __pfx_do_check_common+0x10/0x10 [ 1367.017210][T18014] bpf_check+0x2639/0x2e10 [ 1367.017243][T18014] ? ktime_get_with_offset+0x93/0x2d0 [ 1367.017268][T18014] ? __pfx_bpf_check+0x10/0x10 [ 1367.017293][T18014] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1367.017324][T18014] bpf_prog_load+0x14d6/0x1c20 [ 1367.017360][T18014] ? __pfx_bpf_prog_load+0x10/0x10 [ 1367.017409][T18014] __sys_bpf+0xd0d/0xd90 [ 1367.017439][T18014] ? __pfx___sys_bpf+0x10/0x10 [ 1367.017479][T18014] ? __fget_files+0x2a/0x420 [ 1367.017524][T18014] ? ksys_write+0x242/0x270 [ 1367.017555][T18014] ? __pfx_ksys_write+0x10/0x10 [ 1367.017590][T18014] __x64_sys_bpf+0xba/0xd0 [ 1367.017613][T18014] do_syscall_64+0x166/0x520 [ 1367.017633][T18014] ? trace_irq_disable+0x3b/0x140 [ 1367.017653][T18014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.017673][T18014] ? clear_bhb_loop+0x70/0xc0 [ 1367.017696][T18014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.017714][T18014] RIP: 0033:0x7f7b69f9e159 [ 1367.017734][T18014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.017751][T18014] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1367.017774][T18014] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1367.017790][T18014] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1367.017803][T18014] RBP: 00007f7b6ad9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.017816][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.017829][T18014] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1367.017861][T18014] [ 1367.504193][T18022] netlink: 'syz.0.13652': attribute type 10 has an invalid length. [ 1367.746503][T18028] x_tables: duplicate entry at hook 3 [ 1367.853597][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13658'. [ 1367.995025][T18049] syzkaller0: entered promiscuous mode [ 1367.995040][T18049] syzkaller0: entered allmulticast mode [ 1367.999243][T18049] tipc: Enabled bearer , priority 0 [ 1368.008256][T18049] tipc: Resetting bearer [ 1368.012075][T18049] netlink: 'syz.6.13662': attribute type 1 has an invalid length. [ 1368.012118][T18049] netlink: 'syz.6.13662': attribute type 12 has an invalid length. [ 1368.015337][T18048] tipc: Resetting bearer [ 1368.054117][T18048] tipc: Disabling bearer [ 1368.335673][T18059] FAULT_INJECTION: forcing a failure. [ 1368.335673][T18059] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.335706][T18059] CPU: 0 UID: 0 PID: 18059 Comm: syz.6.13666 Not tainted syzkaller #0 PREEMPT(full) [ 1368.335729][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1368.335742][T18059] Call Trace: [ 1368.335751][T18059] [ 1368.335760][T18059] dump_stack_lvl+0xe8/0x150 [ 1368.335807][T18059] should_fail_ex+0x410/0x560 [ 1368.335836][T18059] ? __alloc_skb+0x1db/0x7a0 [ 1368.335860][T18059] should_failslab+0xa8/0x100 [ 1368.335886][T18059] ? __alloc_skb+0x1db/0x7a0 [ 1368.335905][T18059] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1368.335934][T18059] ? __alloc_skb+0x18d/0x7a0 [ 1368.335956][T18059] ? __alloc_skb+0x1db/0x7a0 [ 1368.335983][T18059] __alloc_skb+0x1db/0x7a0 [ 1368.336010][T18059] netlink_sendmsg+0x5d4/0xb40 [ 1368.336048][T18059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.336084][T18059] ? apparmor_socket_sendmsg+0x98/0x360 [ 1368.336109][T18059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.336136][T18059] sock_sendmsg_nosec+0x13a/0x180 [ 1368.336171][T18059] ____sys_sendmsg+0x54e/0x850 [ 1368.336199][T18059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1368.336233][T18059] ? import_iovec+0x73/0xa0 [ 1368.336261][T18059] ___sys_sendmsg+0x2a5/0x360 [ 1368.336284][T18059] ? __lock_acquire+0x747/0x2de0 [ 1368.336308][T18059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1368.336365][T18059] ? __fget_files+0x2a/0x420 [ 1368.336390][T18059] ? __fget_files+0x3a2/0x420 [ 1368.336425][T18059] __x64_sys_sendmsg+0x1b1/0x290 [ 1368.336453][T18059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1368.336498][T18059] do_syscall_64+0x166/0x520 [ 1368.336520][T18059] ? trace_irq_disable+0x3b/0x140 [ 1368.336540][T18059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.336561][T18059] ? clear_bhb_loop+0x70/0xc0 [ 1368.336585][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.336604][T18059] RIP: 0033:0x7fa9f4f9e159 [ 1368.336623][T18059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.336639][T18059] RSP: 002b:00007fa9f5f11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.336661][T18059] RAX: ffffffffffffffda RBX: 00007fa9f5225fa0 RCX: 00007fa9f4f9e159 [ 1368.336675][T18059] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1368.336687][T18059] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.336699][T18059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.336712][T18059] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1368.336743][T18059] [ 1368.645420][T18067] __nla_validate_parse: 4 callbacks suppressed [ 1368.645441][T18067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13669'. [ 1368.882924][T18079] IPVS: Error connecting to the multicast addr [ 1369.014175][T18082] netlink: 'syz.4.13677': attribute type 10 has an invalid length. [ 1369.049243][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13675'. [ 1369.149977][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13683'. [ 1369.200089][T18101] netlink: 264 bytes leftover after parsing attributes in process `syz.6.13682'. [ 1369.440701][T18110] netlink: 'syz.6.13685': attribute type 1 has an invalid length. [ 1369.593207][T18120] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13688'. [ 1369.595225][T18119] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13688'. [ 1369.678942][T18119] netlink: Failed to add %pK helper -22 [ 1369.678990][T18119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.770985][T18120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.916084][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13695'. [ 1369.918897][T18136] team0: left allmulticast mode [ 1369.919058][T18136] bridge0: port 1(team0) entered disabled state [ 1369.941525][T18136] bond14: (slave ): Releasing active interface [ 1369.943135][T18136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1370.054888][T18140] xfrm1: entered allmulticast mode [ 1370.066619][T18144] block nbd5: NBD_DISCONNECT [ 1370.228862][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13701'. [ 1370.292507][T18158] netlink: 'syz.5.13701': attribute type 13 has an invalid length. [ 1370.509815][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13705'. [ 1370.614249][T18169] netlink: 'syz.5.13706': attribute type 10 has an invalid length. [ 1370.654128][T18177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1370.858058][T18189] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1370.897772][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13713'. [ 1371.204486][T18215] netlink: 'syz.4.13717': attribute type 6 has an invalid length. [ 1371.204509][T18215] netlink: 'syz.4.13717': attribute type 5 has an invalid length. [ 1371.301670][T18222] FAULT_INJECTION: forcing a failure. [ 1371.301670][T18222] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.301703][T18222] CPU: 0 UID: 0 PID: 18222 Comm: syz.6.13723 Not tainted syzkaller #0 PREEMPT(full) [ 1371.301727][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1371.301739][T18222] Call Trace: [ 1371.301748][T18222] [ 1371.301756][T18222] dump_stack_lvl+0xe8/0x150 [ 1371.301792][T18222] should_fail_ex+0x410/0x560 [ 1371.301819][T18222] should_failslab+0xa8/0x100 [ 1371.301850][T18222] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1371.301873][T18222] ? alloc_vfsmnt+0xe6/0x410 [ 1371.301894][T18222] ? alloc_vfsmnt+0xe6/0x410 [ 1371.301922][T18222] kstrdup+0x42/0x100 [ 1371.301946][T18222] alloc_vfsmnt+0xe6/0x410 [ 1371.301979][T18222] clone_mnt+0x4b/0x9b0 [ 1371.302006][T18222] copy_tree+0x3d8/0x940 [ 1371.302042][T18222] copy_mnt_ns+0x3de/0xcc0 [ 1371.302072][T18222] ? rcu_is_watching+0x16/0xb0 [ 1371.302099][T18222] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1371.302126][T18222] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 1371.302168][T18222] create_new_namespaces+0xcf/0x6b0 [ 1371.302198][T18222] ? bpf_lsm_capable+0x9/0x20 [ 1371.302217][T18222] ? security_capable+0x7e/0x2c0 [ 1371.302248][T18222] unshare_nsproxy_namespaces+0x149/0x190 [ 1371.302279][T18222] ksys_unshare+0x5a7/0x950 [ 1371.302314][T18222] ? __pfx_ksys_unshare+0x10/0x10 [ 1371.302343][T18222] ? __pfx_ksys_write+0x10/0x10 [ 1371.302384][T18222] __x64_sys_unshare+0x38/0x50 [ 1371.302411][T18222] do_syscall_64+0x166/0x520 [ 1371.302434][T18222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.302455][T18222] ? clear_bhb_loop+0x70/0xc0 [ 1371.302480][T18222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.302500][T18222] RIP: 0033:0x7fa9f4f9e159 [ 1371.302518][T18222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.302535][T18222] RSP: 002b:00007fa9f5f11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1371.302556][T18222] RAX: ffffffffffffffda RBX: 00007fa9f5225fa0 RCX: 00007fa9f4f9e159 [ 1371.302570][T18222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 1371.302583][T18222] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.302597][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.302610][T18222] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1371.302645][T18222] [ 1371.435038][T18223] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1371.436048][T18223] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1372.545274][T18254] netlink: 'syz.0.13736': attribute type 11 has an invalid length. [ 1373.273422][T18273] netlink: 'syz.2.13741': attribute type 12 has an invalid length. [ 1373.607746][T18282] macsec0: entered allmulticast mode [ 1373.608226][T18282] erspan0: entered allmulticast mode [ 1373.608402][T18282] macsec0: left allmulticast mode [ 1373.608416][T18282] erspan0: left allmulticast mode [ 1373.857639][T18284] netlink: 'syz.5.13746': attribute type 1 has an invalid length. [ 1373.881364][T18284] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1374.175147][T18284] bond9: (slave batadv0): Releasing backup interface [ 1374.191215][T18284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.222856][T18284] bond11: (slave batadv0): making interface the new active one [ 1374.237526][T18284] bond11: (slave batadv0): Enslaving as an active interface with an up link [ 1374.244046][T18286] team0: left allmulticast mode [ 1374.244070][T18286] team_slave_0: left allmulticast mode [ 1374.244087][T18286] team_slave_1: left allmulticast mode [ 1374.244102][T18286] bridge2: left allmulticast mode [ 1374.244120][T18286] team0: left promiscuous mode [ 1374.244133][T18286] team_slave_0: left promiscuous mode [ 1374.244369][T18286] team_slave_1: left promiscuous mode [ 1374.244543][T18286] bridge2: left promiscuous mode [ 1374.245305][T18286] bridge0: port 3(team0) entered disabled state [ 1374.279431][T18286] bond11: (slave batadv0): Releasing active interface [ 1374.294994][T18286] bridge_slave_0: left allmulticast mode [ 1374.295017][T18286] bridge_slave_0: left promiscuous mode [ 1374.295253][T18286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.324563][T18286] bridge_slave_1: left allmulticast mode [ 1374.324587][T18286] bridge_slave_1: left promiscuous mode [ 1374.324789][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.353304][T18286] bond0: (slave bond_slave_0): Releasing backup interface [ 1374.367814][T18286] bond0: (slave bond_slave_1): Releasing backup interface [ 1374.385777][T18286] team0: Port device team_slave_0 removed [ 1374.396537][T18286] team0: Port device team_slave_1 removed [ 1374.404620][T18286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.415329][T18286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.425916][T18286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1374.490367][T18290] netlink: 'syz.4.13748': attribute type 10 has an invalid length. [ 1374.533592][T18297] __nla_validate_parse: 8 callbacks suppressed [ 1374.533622][T18297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1374.771100][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13753'. [ 1374.842816][T18310] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1374.857353][T18310] FAULT_INJECTION: forcing a failure. [ 1374.857353][T18310] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.857385][T18310] CPU: 0 UID: 0 PID: 18310 Comm: syz.0.13753 Not tainted syzkaller #0 PREEMPT(full) [ 1374.857406][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1374.857417][T18310] Call Trace: [ 1374.857425][T18310] [ 1374.857434][T18310] dump_stack_lvl+0xe8/0x150 [ 1374.857469][T18310] should_fail_ex+0x410/0x560 [ 1374.857498][T18310] ? __alloc_skb+0x1db/0x7a0 [ 1374.857520][T18310] should_failslab+0xa8/0x100 [ 1374.857546][T18310] ? __alloc_skb+0x1db/0x7a0 [ 1374.857566][T18310] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1374.857595][T18310] ? __alloc_skb+0x18d/0x7a0 [ 1374.857616][T18310] ? __alloc_skb+0x1db/0x7a0 [ 1374.857643][T18310] __alloc_skb+0x1db/0x7a0 [ 1374.857670][T18310] netlink_sendmsg+0x5d4/0xb40 [ 1374.857708][T18310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1374.857744][T18310] ? apparmor_socket_sendmsg+0x98/0x360 [ 1374.857769][T18310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1374.857796][T18310] sock_sendmsg_nosec+0x13a/0x180 [ 1374.857828][T18310] ____sys_sendmsg+0x54e/0x850 [ 1374.857862][T18310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1374.857896][T18310] ? import_iovec+0x73/0xa0 [ 1374.857925][T18310] ___sys_sendmsg+0x2a5/0x360 [ 1374.857949][T18310] ? __lock_acquire+0x747/0x2de0 [ 1374.857975][T18310] ? __pfx____sys_sendmsg+0x10/0x10 [ 1374.858037][T18310] ? __fget_files+0x2a/0x420 [ 1374.858062][T18310] ? __fget_files+0x3a2/0x420 [ 1374.858108][T18310] __x64_sys_sendmsg+0x1b1/0x290 [ 1374.858136][T18310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1374.858183][T18310] do_syscall_64+0x166/0x520 [ 1374.858203][T18310] ? trace_irq_disable+0x3b/0x140 [ 1374.858223][T18310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.858243][T18310] ? clear_bhb_loop+0x70/0xc0 [ 1374.858268][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.858288][T18310] RIP: 0033:0x7f7b69f9e159 [ 1374.858306][T18310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.858323][T18310] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1374.858345][T18310] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1374.858360][T18310] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 1374.858373][T18310] RBP: 00007f7b6ad9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.858385][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.858398][T18310] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1374.858431][T18310] [ 1375.070590][T18318] bridge2: entered promiscuous mode [ 1375.070612][T18318] bridge2: entered allmulticast mode [ 1375.075350][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13754'. [ 1375.075376][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13754'. [ 1375.084465][T18318] team0: Port device bridge2 added [ 1375.131011][T18318] bridge0: port 1(team0) entered blocking state [ 1375.131106][T18318] bridge0: port 1(team0) entered disabled state [ 1375.131271][T18318] team0: entered allmulticast mode [ 1375.138885][T18318] team0: entered promiscuous mode [ 1375.764348][T18352] netlink: 220 bytes leftover after parsing attributes in process `syz.6.13769'. [ 1375.770292][T18357] netlink: 'syz.2.13768': attribute type 4 has an invalid length. [ 1375.805371][T18357] dvmrp6: entered allmulticast mode [ 1375.805514][T18359] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.13771'. [ 1375.923163][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13768'. [ 1376.083251][T18363] netlink: 'syz.6.13773': attribute type 10 has an invalid length. [ 1376.893334][T18349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1377.150988][T18381] netlink: 'syz.6.13778': attribute type 2 has an invalid length. [ 1377.151018][T18381] netlink: 'syz.6.13778': attribute type 2 has an invalid length. [ 1377.226180][T18384] netlink: 196 bytes leftover after parsing attributes in process `syz.6.13780'. [ 1377.308080][T18389] FAULT_INJECTION: forcing a failure. [ 1377.308080][T18389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.308114][T18389] CPU: 0 UID: 0 PID: 18389 Comm: syz.6.13782 Not tainted syzkaller #0 PREEMPT(full) [ 1377.308136][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.308148][T18389] Call Trace: [ 1377.308156][T18389] [ 1377.308166][T18389] dump_stack_lvl+0xe8/0x150 [ 1377.308201][T18389] should_fail_ex+0x410/0x560 [ 1377.308230][T18389] _copy_from_iter+0x1d3/0x1660 [ 1377.308254][T18389] ? __alloc_skb+0x27a/0x7a0 [ 1377.308278][T18389] ? __alloc_skb+0x27a/0x7a0 [ 1377.308300][T18389] ? __alloc_skb+0x27a/0x7a0 [ 1377.308322][T18389] ? __pfx__copy_from_iter+0x10/0x10 [ 1377.308341][T18389] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1377.308371][T18389] ? __alloc_skb+0x27a/0x7a0 [ 1377.308390][T18389] ? __alloc_skb+0x27a/0x7a0 [ 1377.308415][T18389] ? netlink_sendmsg+0x650/0xb40 [ 1377.308441][T18389] ? skb_put+0x112/0x210 [ 1377.308465][T18389] netlink_sendmsg+0x6c0/0xb40 [ 1377.308500][T18389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1377.308535][T18389] ? apparmor_socket_sendmsg+0x98/0x360 [ 1377.308558][T18389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1377.308584][T18389] sock_sendmsg_nosec+0x13a/0x180 [ 1377.308616][T18389] ____sys_sendmsg+0x54e/0x850 [ 1377.308644][T18389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1377.308677][T18389] ? import_iovec+0x73/0xa0 [ 1377.308704][T18389] ___sys_sendmsg+0x2a5/0x360 [ 1377.308728][T18389] ? __lock_acquire+0x747/0x2de0 [ 1377.308754][T18389] ? __pfx____sys_sendmsg+0x10/0x10 [ 1377.308814][T18389] ? __fget_files+0x2a/0x420 [ 1377.308840][T18389] ? __fget_files+0x3a2/0x420 [ 1377.308877][T18389] __x64_sys_sendmsg+0x1b1/0x290 [ 1377.308905][T18389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1377.308961][T18389] do_syscall_64+0x166/0x520 [ 1377.308982][T18389] ? trace_irq_disable+0x3b/0x140 [ 1377.309002][T18389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.309023][T18389] ? clear_bhb_loop+0x70/0xc0 [ 1377.309047][T18389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.309068][T18389] RIP: 0033:0x7fa9f4f9e159 [ 1377.309087][T18389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.309104][T18389] RSP: 002b:00007fa9f5f11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.309126][T18389] RAX: ffffffffffffffda RBX: 00007fa9f5225fa0 RCX: 00007fa9f4f9e159 [ 1377.309141][T18389] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1377.309155][T18389] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.309168][T18389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.309181][T18389] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1377.309215][T18389] [ 1377.586510][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13784'. [ 1377.661198][T18404] netlink: 'syz.4.13786': attribute type 1 has an invalid length. [ 1377.720171][T18404] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1377.751524][T18404] bond29: (slave batadv0): Releasing backup interface [ 1377.765210][T18404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.774606][T18404] bond30: (slave batadv0): making interface the new active one [ 1377.788759][T18404] bond30: (slave batadv0): Enslaving as an active interface with an up link [ 1377.853468][T18418] batman_adv: batadv0: Adding interface: macvtap1 [ 1377.853487][T18418] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.853513][T18418] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1377.858835][T18404] bond30: (slave batadv0): Releasing active interface [ 1377.932026][T18404] team0: left allmulticast mode [ 1377.932052][T18404] bridge12: left allmulticast mode [ 1377.932072][T18404] team0: left promiscuous mode [ 1377.932084][T18404] bridge12: left promiscuous mode [ 1377.932629][T18404] bridge0: port 1(team0) entered disabled state [ 1377.972712][T18404] team0: Port device bridge12 removed [ 1377.978883][T18404] team0: Port device bridge13 removed [ 1378.048914][T18418] batman_adv: batadv0: Removing interface: macvtap1 [ 1378.120734][T18427] batman_adv: batadv0: Adding interface: syzkaller0 [ 1378.120752][T18427] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.120959][T18427] batman_adv: batadv0: Interface activated: syzkaller0 [ 1378.185115][T18422] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1378.227582][T18412] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1378.267896][T18410] netlink: 'syz.2.13787': attribute type 10 has an invalid length. [ 1378.271442][T18412] batman_adv: batadv0: Removing interface: syzkaller0 [ 1378.481009][T18439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1378.634397][T18443] bridge3: entered promiscuous mode [ 1378.634422][T18443] bridge3: entered allmulticast mode [ 1378.854373][T18450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13797'. [ 1378.946159][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1379.039044][T18452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1379.079267][T18452] syzkaller1: entered promiscuous mode [ 1379.079291][T18452] syzkaller1: entered allmulticast mode [ 1379.367240][T18482] bridge3: entered promiscuous mode [ 1379.367263][T18482] bridge3: entered allmulticast mode [ 1379.639450][T18492] netlink: 'syz.5.13811': attribute type 10 has an invalid length. [ 1379.668930][T18499] ip_tables: iptables: counters copy to user failed while replacing table [ 1379.781393][T18502] ip_tables: iptables: counters copy to user failed while replacing table [ 1379.837739][T18479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1380.373815][T18534] bridge16: entered promiscuous mode [ 1380.373840][T18534] bridge16: entered allmulticast mode [ 1380.381829][T18534] team0: Port device bridge16 added [ 1380.387177][T18534] bridge0: port 1(team0) entered blocking state [ 1380.387811][T18534] bridge0: port 1(team0) entered disabled state [ 1380.387933][T18534] team0: entered allmulticast mode [ 1380.392739][T18534] team0: entered promiscuous mode [ 1381.375471][T18554] netlink: 'syz.2.13833': attribute type 1 has an invalid length. [ 1381.375496][T18554] __nla_validate_parse: 2 callbacks suppressed [ 1381.375509][T18554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13833'. [ 1381.761514][T18563] netlink: 'syz.6.13836': attribute type 10 has an invalid length. [ 1381.866338][T18577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13842'. [ 1382.066969][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1383.236226][T18584] netlink: 'syz.5.13844': attribute type 1 has an invalid length. [ 1383.236249][T18584] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13844'. [ 1383.275579][T18588] FAULT_INJECTION: forcing a failure. [ 1383.275579][T18588] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.275611][T18588] CPU: 0 UID: 0 PID: 18588 Comm: syz.4.13843 Not tainted syzkaller #0 PREEMPT(full) [ 1383.275632][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1383.275644][T18588] Call Trace: [ 1383.275652][T18588] [ 1383.275661][T18588] dump_stack_lvl+0xe8/0x150 [ 1383.275695][T18588] should_fail_ex+0x410/0x560 [ 1383.275725][T18588] should_failslab+0xa8/0x100 [ 1383.275752][T18588] __kvmalloc_node_noprof+0x176/0x820 [ 1383.275779][T18588] ? nf_hook_entries_grow+0x287/0x740 [ 1383.275799][T18588] ? nf_hook_entries_grow+0x287/0x740 [ 1383.275820][T18588] ? __pfx___mutex_lock+0x10/0x10 [ 1383.275851][T18588] nf_hook_entries_grow+0x287/0x740 [ 1383.275885][T18588] __nf_register_net_hook+0x2c9/0x930 [ 1383.275917][T18588] nf_register_net_hook+0xb2/0x190 [ 1383.275940][T18588] nf_register_net_hooks+0x44/0x1b0 [ 1383.275965][T18588] nf_ct_netns_do_get+0x212/0x5c0 [ 1383.276079][T18588] ? __kmalloc_noprof+0x38c/0x720 [ 1383.276098][T18588] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1383.276128][T18588] ? __mutex_trylock_common+0x15f/0x270 [ 1383.276155][T18588] ? nf_ct_netns_get+0xe9/0x320 [ 1383.276180][T18588] xt_ct_tg_check+0xf9/0xa00 [ 1383.276232][T18588] ? rcu_is_watching+0x16/0xb0 [ 1383.276257][T18588] ? trace_contention_end+0x3d/0x140 [ 1383.276284][T18588] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 1383.276318][T18588] xt_check_target+0x619/0xca0 [ 1383.276353][T18588] ? __pfx_xt_check_target+0x10/0x10 [ 1383.276387][T18588] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1383.276428][T18588] ? xt_find_target+0x20f/0x260 [ 1383.276460][T18588] translate_table+0x1917/0x2110 [ 1383.276482][T18588] ? __lock_acquire+0x747/0x2de0 [ 1383.276528][T18588] ? __pfx_translate_table+0x10/0x10 [ 1383.276548][T18588] ? lock_acquire+0x115/0x350 [ 1383.276592][T18588] ? _copy_from_user+0x94/0xb0 [ 1383.276624][T18588] do_ip6t_set_ctl+0xa5c/0xe30 [ 1383.276654][T18588] ? rcu_is_watching+0x16/0xb0 [ 1383.276678][T18588] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1383.276718][T18588] ? __mutex_unlock_slowpath+0x731/0x900 [ 1383.276746][T18588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1383.276783][T18588] nf_setsockopt+0x26f/0x290 [ 1383.276809][T18588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1383.276833][T18588] do_sock_setsockopt+0x17c/0x1b0 [ 1383.276863][T18588] __x64_sys_setsockopt+0x13d/0x1b0 [ 1383.276893][T18588] do_syscall_64+0x166/0x520 [ 1383.276914][T18588] ? trace_irq_disable+0x3b/0x140 [ 1383.276934][T18588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.276954][T18588] ? clear_bhb_loop+0x70/0xc0 [ 1383.276979][T18588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.276998][T18588] RIP: 0033:0x7f162519e159 [ 1383.277017][T18588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.277035][T18588] RSP: 002b:00007f16233f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1383.277057][T18588] RAX: ffffffffffffffda RBX: 00007f1625425fa0 RCX: 00007f162519e159 [ 1383.277072][T18588] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1383.277085][T18588] RBP: 00007f16233f6090 R08: 0000000000001420 R09: 0000000000000000 [ 1383.277098][T18588] R10: 0000200000002880 R11: 0000000000000246 R12: 0000000000000001 [ 1383.277112][T18588] R13: 00007f1625426038 R14: 00007f1625425fa0 R15: 00007ffe4e83e0f8 [ 1383.277145][T18588] [ 1383.672628][T18593] netlink: 'syz.2.13846': attribute type 2 has an invalid length. [ 1383.672651][T18593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13846'. [ 1383.851902][T18608] netlink: 'syz.6.13850': attribute type 2 has an invalid length. [ 1383.881625][T18608] : entered promiscuous mode [ 1384.151267][ T4931] Bluetooth: hci6: command 0x0406 tx timeout [ 1384.221639][T18627] netlink: 'syz.2.13857': attribute type 10 has an invalid length. [ 1384.777919][T18663] netlink: 'syz.5.13868': attribute type 2 has an invalid length. [ 1384.777942][T18663] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13868'. [ 1384.802134][T18663] : entered promiscuous mode [ 1385.150852][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13874'. [ 1385.475593][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13881'. [ 1385.516375][T18706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13882'. [ 1385.533753][T18706] tipc: Resetting bearer [ 1385.533797][T18706] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1385.864531][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13887'. [ 1386.254016][T18729] netlink: 'syz.4.13888': attribute type 10 has an invalid length. [ 1386.534538][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13895'. [ 1386.535357][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13895'. [ 1386.848674][T18766] FAULT_INJECTION: forcing a failure. [ 1386.848674][T18766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.848706][T18766] CPU: 1 UID: 0 PID: 18766 Comm: syz.2.13898 Not tainted syzkaller #0 PREEMPT(full) [ 1386.848728][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.848740][T18766] Call Trace: [ 1386.848748][T18766] [ 1386.848756][T18766] dump_stack_lvl+0xe8/0x150 [ 1386.848786][T18766] should_fail_ex+0x410/0x560 [ 1386.848808][T18766] _copy_to_user+0x31/0xb0 [ 1386.848835][T18766] simple_read_from_buffer+0xe1/0x170 [ 1386.848868][T18766] proc_fail_nth_read+0x1bb/0x230 [ 1386.848899][T18766] ? common_file_perm+0x20e/0x2b0 [ 1386.848926][T18766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1386.848961][T18766] ? rw_verify_area+0x24a/0x4c0 [ 1386.848993][T18766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1386.849025][T18766] vfs_read+0x213/0xa80 [ 1386.849060][T18766] ? __pfx___mutex_lock+0x10/0x10 [ 1386.849085][T18766] ? __pfx_vfs_read+0x10/0x10 [ 1386.849115][T18766] ? __fget_files+0x2a/0x420 [ 1386.849148][T18766] ? __fget_files+0x3a2/0x420 [ 1386.849174][T18766] ? __fget_files+0x2a/0x420 [ 1386.849211][T18766] ksys_read+0x150/0x270 [ 1386.849243][T18766] ? __pfx_ksys_read+0x10/0x10 [ 1386.849293][T18766] do_syscall_64+0x166/0x520 [ 1386.849315][T18766] ? trace_irq_disable+0x3b/0x140 [ 1386.849335][T18766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.849357][T18766] ? clear_bhb_loop+0x70/0xc0 [ 1386.849383][T18766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.849404][T18766] RIP: 0033:0x7f6e88d5e98e [ 1386.849423][T18766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1386.849441][T18766] RSP: 002b:00007f6e89d32fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1386.849463][T18766] RAX: ffffffffffffffda RBX: 00007f6e89d336c0 RCX: 00007f6e88d5e98e [ 1386.849478][T18766] RDX: 000000000000000f RSI: 00007f6e89d330a0 RDI: 0000000000000004 [ 1386.849491][T18766] RBP: 00007f6e89d33090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.849503][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1386.849516][T18766] R13: 00007f6e89026038 R14: 00007f6e89025fa0 R15: 00007ffecbf54f78 [ 1386.849552][T18766] [ 1387.181653][T18770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13900'. [ 1387.830282][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13904'. [ 1387.896536][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13911'. [ 1387.896586][T18804] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13911'. [ 1387.903576][T18804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.933387][T18806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13912'. [ 1388.212412][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13917'. [ 1388.328744][T18824] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 1388.438075][T18815] netlink: 'syz.0.13914': attribute type 10 has an invalid length. [ 1388.550775][T18833] bridge0: port 2(macsec0) entered blocking state [ 1388.550947][T18833] bridge0: port 2(macsec0) entered disabled state [ 1388.551114][T18833] macsec0: entered allmulticast mode [ 1388.551130][T18833] bridge0: entered allmulticast mode [ 1388.554497][T18833] macsec0: left allmulticast mode [ 1388.554516][T18833] bridge0: left allmulticast mode [ 1388.839486][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13925'. [ 1388.965951][T18835] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1389.124222][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13928'. [ 1389.161647][T18855] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1389.764511][T18879] FAULT_INJECTION: forcing a failure. [ 1389.764511][T18879] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.764544][T18879] CPU: 0 UID: 0 PID: 18879 Comm: syz.2.13938 Not tainted syzkaller #0 PREEMPT(full) [ 1389.764568][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1389.764580][T18879] Call Trace: [ 1389.764589][T18879] [ 1389.764597][T18879] dump_stack_lvl+0xe8/0x150 [ 1389.764632][T18879] should_fail_ex+0x410/0x560 [ 1389.764659][T18879] should_failslab+0xa8/0x100 [ 1389.764686][T18879] __kmalloc_noprof+0xfe/0x720 [ 1389.764707][T18879] ? fib6_info_alloc+0x30/0xf0 [ 1389.764726][T18879] ? fib6_info_alloc+0x30/0xf0 [ 1389.764751][T18879] fib6_info_alloc+0x30/0xf0 [ 1389.764771][T18879] ip6_route_info_create+0x149/0x890 [ 1389.764800][T18879] ip6_route_add+0x49/0x1b0 [ 1389.764824][T18879] inet6_rtm_newroute+0x267/0x1a30 [ 1389.764854][T18879] ? lock_acquire+0x115/0x350 [ 1389.764883][T18879] ? lock_acquire+0x115/0x350 [ 1389.764907][T18879] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1389.764941][T18879] ? is_bpf_text_address+0x26/0x2b0 [ 1389.764971][T18879] ? __lock_acquire+0x747/0x2de0 [ 1389.764999][T18879] ? __kernel_text_address+0xd/0x30 [ 1389.765020][T18879] ? unwind_get_return_address+0x4d/0x90 [ 1389.765042][T18879] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1389.765062][T18879] ? arch_stack_walk+0xfb/0x150 [ 1389.765116][T18879] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1389.765144][T18879] rtnetlink_rcv_msg+0x802/0xc00 [ 1389.765166][T18879] ? netlink_sendmsg+0x5d4/0xb40 [ 1389.765194][T18879] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1389.765214][T18879] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1389.765236][T18879] ? __lock_acquire+0x747/0x2de0 [ 1389.765270][T18879] netlink_rcv_skb+0x226/0x4a0 [ 1389.765298][T18879] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1389.765322][T18879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1389.765359][T18879] ? netlink_deliver_tap+0x2e/0x1b0 [ 1389.765383][T18879] ? netlink_deliver_tap+0x2e/0x1b0 [ 1389.765412][T18879] netlink_unicast+0x7bd/0x940 [ 1389.765445][T18879] netlink_sendmsg+0x813/0xb40 [ 1389.765487][T18879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.765520][T18879] ? apparmor_socket_sendmsg+0x98/0x360 [ 1389.765541][T18879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1389.765565][T18879] sock_sendmsg_nosec+0x13a/0x180 [ 1389.765598][T18879] ____sys_sendmsg+0x54e/0x850 [ 1389.765625][T18879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1389.765655][T18879] ? import_iovec+0x73/0xa0 [ 1389.765670][T18879] ___sys_sendmsg+0x2a5/0x360 [ 1389.765683][T18879] ? __lock_acquire+0x747/0x2de0 [ 1389.765695][T18879] ? __pfx____sys_sendmsg+0x10/0x10 [ 1389.765727][T18879] ? __fget_files+0x2a/0x420 [ 1389.765741][T18879] ? __fget_files+0x3a2/0x420 [ 1389.765760][T18879] __x64_sys_sendmsg+0x1b1/0x290 [ 1389.765775][T18879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1389.765799][T18879] do_syscall_64+0x166/0x520 [ 1389.765811][T18879] ? trace_irq_disable+0x3b/0x140 [ 1389.765822][T18879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.765836][T18879] ? clear_bhb_loop+0x70/0xc0 [ 1389.765849][T18879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.765860][T18879] RIP: 0033:0x7f6e88d9e159 [ 1389.765871][T18879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.765881][T18879] RSP: 002b:00007f6e89d33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.765894][T18879] RAX: ffffffffffffffda RBX: 00007f6e89025fa0 RCX: 00007f6e88d9e159 [ 1389.765902][T18879] RDX: 000000000400c8d0 RSI: 0000200000000180 RDI: 0000000000000003 [ 1389.765909][T18879] RBP: 00007f6e89d33090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.765916][T18879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.765923][T18879] R13: 00007f6e89026038 R14: 00007f6e89025fa0 R15: 00007ffecbf54f78 [ 1389.765939][T18879] [ 1389.822919][T18881] FAULT_INJECTION: forcing a failure. [ 1389.822919][T18881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1389.822962][T18881] CPU: 1 UID: 0 PID: 18881 Comm: syz.0.13939 Not tainted syzkaller #0 PREEMPT(full) [ 1389.822984][T18881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1389.822996][T18881] Call Trace: [ 1389.823004][T18881] [ 1389.823012][T18881] dump_stack_lvl+0xe8/0x150 [ 1389.823046][T18881] should_fail_ex+0x410/0x560 [ 1389.823073][T18881] prepare_alloc_pages+0x223/0x600 [ 1389.823100][T18881] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1389.823126][T18881] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1389.823152][T18881] ? __pfx_policy_nodemask+0x10/0x10 [ 1389.823174][T18881] ? __get_vm_area_node+0x155/0x2f0 [ 1389.823199][T18881] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1389.823225][T18881] ? __vmalloc_noprof+0xd2/0x120 [ 1389.823249][T18881] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.823271][T18881] ? bpf_prog_alloc+0x3c/0x1a0 [ 1389.823291][T18881] ? __sys_bpf+0xd0d/0xd90 [ 1389.823311][T18881] ? __x64_sys_bpf+0xba/0xd0 [ 1389.823327][T18881] ? do_syscall_64+0x166/0x520 [ 1389.823347][T18881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.823371][T18881] alloc_pages_mpol+0x21e/0x390 [ 1389.823401][T18881] alloc_pages_noprof+0xb1/0x2b0 [ 1389.823427][T18881] get_free_pages_noprof+0xf/0x80 [ 1389.823449][T18881] __kasan_populate_vmalloc+0x38/0x1c0 [ 1389.823468][T18881] ? do_raw_spin_unlock+0xf5/0x200 [ 1389.823499][T18881] alloc_vmap_area+0xd1a/0x1420 [ 1389.823540][T18881] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1389.823564][T18881] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1389.823585][T18881] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1389.823605][T18881] ? __get_vm_area_node+0x155/0x2f0 [ 1389.823635][T18881] __get_vm_area_node+0x200/0x2f0 [ 1389.823669][T18881] __vmalloc_node_range_noprof+0x343/0x1540 [ 1389.823697][T18881] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.823720][T18881] ? __lock_acquire+0x747/0x2de0 [ 1389.823763][T18881] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1389.823801][T18881] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.823822][T18881] __vmalloc_noprof+0xd2/0x120 [ 1389.823848][T18881] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.823873][T18881] bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.823894][T18881] ? bpf_prog_alloc+0x2a/0x1a0 [ 1389.823918][T18881] bpf_prog_alloc+0x3c/0x1a0 [ 1389.823942][T18881] bpf_prog_load+0x7f8/0x1c20 [ 1389.823982][T18881] ? __pfx_bpf_prog_load+0x10/0x10 [ 1389.824029][T18881] __sys_bpf+0xd0d/0xd90 [ 1389.824058][T18881] ? __pfx___sys_bpf+0x10/0x10 [ 1389.824091][T18881] ? __fget_files+0x2a/0x420 [ 1389.824133][T18881] ? ksys_write+0x242/0x270 [ 1389.824163][T18881] ? __pfx_ksys_write+0x10/0x10 [ 1389.824197][T18881] __x64_sys_bpf+0xba/0xd0 [ 1389.824219][T18881] do_syscall_64+0x166/0x520 [ 1389.824238][T18881] ? trace_irq_disable+0x3b/0x140 [ 1389.824257][T18881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.824277][T18881] ? clear_bhb_loop+0x70/0xc0 [ 1389.824301][T18881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.824321][T18881] RIP: 0033:0x7f7b69f9e159 [ 1389.824338][T18881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.824355][T18881] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1389.824376][T18881] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1389.824391][T18881] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1389.824404][T18881] RBP: 00007f7b6ad9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.824416][T18881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.824427][T18881] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1389.824457][T18881] [ 1389.824588][T18881] syz.0.13939: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1389.824647][T18881] CPU: 1 UID: 0 PID: 18881 Comm: syz.0.13939 Not tainted syzkaller #0 PREEMPT(full) [ 1389.824668][T18881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1389.824679][T18881] Call Trace: [ 1389.824686][T18881] [ 1389.824695][T18881] dump_stack_lvl+0xe8/0x150 [ 1389.824723][T18881] warn_alloc+0x24d/0x270 [ 1389.824742][T18881] ? lockdep_hardirqs_on+0x7b/0x110 [ 1389.824766][T18881] ? __pfx_warn_alloc+0x10/0x10 [ 1389.824784][T18881] ? kfree+0x1c5/0x650 [ 1389.824817][T18881] ? __get_vm_area_node+0x219/0x2f0 [ 1389.824850][T18881] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1389.824879][T18881] ? __lock_acquire+0x747/0x2de0 [ 1389.824922][T18881] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1389.824965][T18881] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.824986][T18881] __vmalloc_noprof+0xd2/0x120 [ 1389.825014][T18881] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.825038][T18881] bpf_prog_alloc_no_stats+0x47/0x560 [ 1389.825058][T18881] ? bpf_prog_alloc+0x2a/0x1a0 [ 1389.825082][T18881] bpf_prog_alloc+0x3c/0x1a0 [ 1389.825106][T18881] bpf_prog_load+0x7f8/0x1c20 [ 1389.825141][T18881] ? __pfx_bpf_prog_load+0x10/0x10 [ 1389.825187][T18881] __sys_bpf+0xd0d/0xd90 [ 1389.825216][T18881] ? __pfx___sys_bpf+0x10/0x10 [ 1389.825249][T18881] ? __fget_files+0x2a/0x420 [ 1389.825291][T18881] ? ksys_write+0x242/0x270 [ 1389.825320][T18881] ? __pfx_ksys_write+0x10/0x10 [ 1389.825354][T18881] __x64_sys_bpf+0xba/0xd0 [ 1389.825375][T18881] do_syscall_64+0x166/0x520 [ 1389.825395][T18881] ? trace_irq_disable+0x3b/0x140 [ 1389.825414][T18881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.825433][T18881] ? clear_bhb_loop+0x70/0xc0 [ 1389.825456][T18881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.825475][T18881] RIP: 0033:0x7f7b69f9e159 [ 1389.825491][T18881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.825507][T18881] RSP: 002b:00007f7b6ad9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1389.825526][T18881] RAX: ffffffffffffffda RBX: 00007f7b6a225fa0 RCX: 00007f7b69f9e159 [ 1389.825540][T18881] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1389.825553][T18881] RBP: 00007f7b6ad9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.825565][T18881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.825576][T18881] R13: 00007f7b6a226038 R14: 00007f7b6a225fa0 R15: 00007ffcc06c9f08 [ 1389.825608][T18881] [ 1389.825615][T18881] Mem-Info: [ 1389.825624][T18881] active_anon:7873 inactive_anon:0 isolated_anon:0 [ 1389.825624][T18881] active_file:0 inactive_file:44602 isolated_file:0 [ 1389.825624][T18881] unevictable:0 dirty:303 writeback:0 [ 1389.825624][T18881] slab_reclaimable:13683 slab_unreclaimable:128635 [ 1389.825624][T18881] mapped:41634 shmem:562 pagetables:1420 [ 1389.825624][T18881] sec_pagetables:0 bounce:0 [ 1389.825624][T18881] kernel_misc_reclaimable:0 [ 1389.825624][T18881] free:1251488 free_pcp:21256 free_cma:0 [ 1389.825673][T18881] Node 0 active_anon:31492kB inactive_anon:0kB active_file:0kB inactive_file:178204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:166536kB dirty:1212kB writeback:0kB shmem:2248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17676kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1389.825725][T18881] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1389.825774][T18881] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.825832][T18881] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1389.825867][T18881] Node 0 DMA32 free:1052884kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31492kB inactive_anon:0kB active_file:0kB inactive_file:178204kB unevictable:0kB writepending:1212kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:81500kB local_pcp:19840kB free_cma:0kB [ 1389.825924][T18881] lowmem_reserve[]: 0 0 0 0 0 [ 1389.825963][T18881] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.826037][T18881] lowmem_reserve[]: 0 0 0 0 0 [ 1389.826069][T18881] Node 1 Normal free:3937708kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1389.826126][T18881] lowmem_reserve[]: 0 0 0 0 0 [ 1389.826158][T18881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1389.826384][T18881] Node 0 DMA32: 677*4kB (UME) 538*8kB (UME) 1187*16kB (UME) 608*32kB (UME) 123*64kB (UME) 159*128kB (UM) 91*256kB (UM) 31*512kB (UME) 20*1024kB (UME) 17*2048kB (UM) 216*4096kB (UM) = 1052884kB [ 1389.826533][T18881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1389.826627][T18881] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3937708kB [ 1389.830781][T18881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.830798][T18881] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1389.830815][T18881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.830851][T18881] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1389.830867][T18881] 45120 total pagecache pages [ 1389.830875][T18881] 0 pages in swap cache [ 1389.830882][T18881] Free swap = 124996kB [ 1389.830890][T18881] Total swap = 124996kB [ 1389.830898][T18881] 2097051 pages RAM [ 1389.830905][T18881] 0 pages HighMem/MovableOnly [ 1389.830913][T18881] 428781 pages reserved [ 1389.830920][T18881] 0 pages cma reserved [ 1390.012041][T18884] FAULT_INJECTION: forcing a failure. [ 1390.012041][T18884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1390.012072][T18884] CPU: 1 UID: 0 PID: 18884 Comm: syz.2.13942 Not tainted syzkaller #0 PREEMPT(full) [ 1390.012094][T18884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1390.012106][T18884] Call Trace: [ 1390.012114][T18884] [ 1390.012122][T18884] dump_stack_lvl+0xe8/0x150 [ 1390.012156][T18884] should_fail_ex+0x410/0x560 [ 1390.012184][T18884] _copy_from_iter+0x1d3/0x1660 [ 1390.012206][T18884] ? __alloc_skb+0x27a/0x7a0 [ 1390.012230][T18884] ? __alloc_skb+0x27a/0x7a0 [ 1390.012253][T18884] ? __alloc_skb+0x27a/0x7a0 [ 1390.012274][T18884] ? __pfx__copy_from_iter+0x10/0x10 [ 1390.012293][T18884] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1390.012323][T18884] ? __alloc_skb+0x27a/0x7a0 [ 1390.012343][T18884] ? __alloc_skb+0x27a/0x7a0 [ 1390.012369][T18884] ? netlink_sendmsg+0x650/0xb40 [ 1390.012396][T18884] ? skb_put+0x112/0x210 [ 1390.012420][T18884] netlink_sendmsg+0x6c0/0xb40 [ 1390.012456][T18884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.012490][T18884] ? apparmor_socket_sendmsg+0x98/0x360 [ 1390.012515][T18884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.012541][T18884] sock_sendmsg_nosec+0x13a/0x180 [ 1390.012573][T18884] ____sys_sendmsg+0x54e/0x850 [ 1390.012602][T18884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1390.012635][T18884] ? import_iovec+0x73/0xa0 [ 1390.012661][T18884] ___sys_sendmsg+0x2a5/0x360 [ 1390.012685][T18884] ? __lock_acquire+0x747/0x2de0 [ 1390.012709][T18884] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.012768][T18884] ? __fget_files+0x2a/0x420 [ 1390.012793][T18884] ? __fget_files+0x3a2/0x420 [ 1390.012828][T18884] __x64_sys_sendmsg+0x1b1/0x290 [ 1390.012856][T18884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1390.012901][T18884] do_syscall_64+0x166/0x520 [ 1390.012921][T18884] ? trace_irq_disable+0x3b/0x140 [ 1390.012946][T18884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.012966][T18884] ? clear_bhb_loop+0x70/0xc0 [ 1390.012990][T18884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.013009][T18884] RIP: 0033:0x7f6e88d9e159 [ 1390.013026][T18884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.013043][T18884] RSP: 002b:00007f6e89d33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.013065][T18884] RAX: ffffffffffffffda RBX: 00007f6e89025fa0 RCX: 00007f6e88d9e159 [ 1390.013079][T18884] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1390.013091][T18884] RBP: 00007f6e89d33090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.013103][T18884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.013114][T18884] R13: 00007f6e89026038 R14: 00007f6e89025fa0 R15: 00007ffecbf54f78 [ 1390.013145][T18884] [ 1390.045788][T18887] FAULT_INJECTION: forcing a failure. [ 1390.045788][T18887] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.045820][T18887] CPU: 1 UID: 0 PID: 18887 Comm: syz.6.13940 Not tainted syzkaller #0 PREEMPT(full) [ 1390.045846][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1390.045860][T18887] Call Trace: [ 1390.045868][T18887] [ 1390.045876][T18887] dump_stack_lvl+0xe8/0x150 [ 1390.045909][T18887] should_fail_ex+0x410/0x560 [ 1390.045943][T18887] should_failslab+0xa8/0x100 [ 1390.045967][T18887] ? security_file_alloc+0x34/0x310 [ 1390.045998][T18887] kmem_cache_alloc_noprof+0xa1/0x600 [ 1390.046026][T18887] ? rcu_is_watching+0x16/0xb0 [ 1390.046050][T18887] ? security_file_alloc+0x34/0x310 [ 1390.046085][T18887] security_file_alloc+0x34/0x310 [ 1390.046116][T18887] init_file+0x90/0x2b0 [ 1390.046142][T18887] alloc_empty_file+0x74/0x1d0 [ 1390.046166][T18887] alloc_file_pseudo+0x115/0x1e0 [ 1390.046193][T18887] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1390.046227][T18887] anon_inode_getfd+0xc8/0x1f0 [ 1390.046254][T18887] bpf_prog_load+0x1612/0x1c20 [ 1390.046289][T18887] ? __pfx_bpf_prog_load+0x10/0x10 [ 1390.046336][T18887] __sys_bpf+0xd0d/0xd90 [ 1390.046365][T18887] ? __pfx___sys_bpf+0x10/0x10 [ 1390.046397][T18887] ? __fget_files+0x2a/0x420 [ 1390.046440][T18887] ? ksys_write+0x242/0x270 [ 1390.046469][T18887] ? __pfx_ksys_write+0x10/0x10 [ 1390.046502][T18887] __x64_sys_bpf+0xba/0xd0 [ 1390.046525][T18887] do_syscall_64+0x166/0x520 [ 1390.046546][T18887] ? trace_irq_disable+0x3b/0x140 [ 1390.046564][T18887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.046584][T18887] ? clear_bhb_loop+0x70/0xc0 [ 1390.046608][T18887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.046627][T18887] RIP: 0033:0x7fa9f4f9e159 [ 1390.046646][T18887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.046662][T18887] RSP: 002b:00007fa9f5f11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1390.046683][T18887] RAX: ffffffffffffffda RBX: 00007fa9f5225fa0 RCX: 00007fa9f4f9e159 [ 1390.046697][T18887] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1390.046710][T18887] RBP: 00007fa9f5f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.046722][T18887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.046734][T18887] R13: 00007fa9f5226038 R14: 00007fa9f5225fa0 R15: 00007ffc5ff00978 [ 1390.046765][T18887] [ 1390.597246][ T7510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.597266][ T7510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.634373][T18906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1391.759875][T18942] __nla_validate_parse: 9 callbacks suppressed [ 1391.759895][T18942] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13959'. [ 1391.759914][T18942] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13959'. [ 1392.148515][T18959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13966'. [ 1392.279915][T18977] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13971'. [ 1392.279945][T18977] netlink: 236 bytes leftover after parsing attributes in process `syz.0.13971'. [ 1392.391256][T18969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13969'. [ 1392.556422][T18993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13973'. [ 1392.556465][T18993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13973'. [ 1392.614319][T18997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13975'. [ 1392.619046][T18997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1392.694714][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13976'. [ 1392.775313][T19003] FAULT_INJECTION: forcing a failure. [ 1392.775313][T19003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1392.775359][T19003] CPU: 1 UID: 0 PID: 19003 Comm: syz.2.13977 Not tainted syzkaller #0 PREEMPT(full) [ 1392.775381][T19003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1392.775394][T19003] Call Trace: [ 1392.775401][T19003] [ 1392.775411][T19003] dump_stack_lvl+0xe8/0x150 [ 1392.775434][T19003] should_fail_ex+0x410/0x560 [ 1392.775450][T19003] prepare_alloc_pages+0x223/0x600 [ 1392.775467][T19003] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1392.775481][T19003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1392.775492][T19003] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 1392.775505][T19003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1392.775519][T19003] ? __pfx_policy_nodemask+0x10/0x10 [ 1392.775531][T19003] ? __get_vm_area_node+0x155/0x2f0 [ 1392.775545][T19003] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1392.775559][T19003] ? __vmalloc_noprof+0xd2/0x120 [ 1392.775575][T19003] __alloc_pages_noprof+0x10/0x100 [ 1392.775587][T19003] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 1392.775602][T19003] ? alloc_pages_noprof+0x140/0x2b0 [ 1392.775617][T19003] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1392.775632][T19003] alloc_vmap_area+0xd1a/0x1420 [ 1392.775653][T19003] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1392.775666][T19003] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1392.775677][T19003] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1392.775694][T19003] ? __get_vm_area_node+0x155/0x2f0 [ 1392.775711][T19003] __get_vm_area_node+0x200/0x2f0 [ 1392.775729][T19003] __vmalloc_node_range_noprof+0x343/0x1540 [ 1392.775744][T19003] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1392.775757][T19003] ? __lock_acquire+0x747/0x2de0 [ 1392.775781][T19003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1392.775801][T19003] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1392.775812][T19003] __vmalloc_noprof+0xd2/0x120 [ 1392.775827][T19003] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1392.775843][T19003] bpf_prog_alloc_no_stats+0x47/0x560 [ 1392.775855][T19003] ? bpf_prog_alloc+0x2a/0x1a0 [ 1392.775867][T19003] bpf_prog_alloc+0x3c/0x1a0 [ 1392.775880][T19003] bpf_prog_load+0x7f8/0x1c20 [ 1392.775899][T19003] ? __pfx_bpf_prog_load+0x10/0x10 [ 1392.775924][T19003] __sys_bpf+0xd0d/0xd90 [ 1392.775940][T19003] ? __pfx___sys_bpf+0x10/0x10 [ 1392.775957][T19003] ? __fget_files+0x2a/0x420 [ 1392.775981][T19003] ? ksys_write+0x242/0x270 [ 1392.775998][T19003] ? __pfx_ksys_write+0x10/0x10 [ 1392.776016][T19003] __x64_sys_bpf+0xba/0xd0 [ 1392.776028][T19003] do_syscall_64+0x166/0x520 [ 1392.776040][T19003] ? trace_irq_disable+0x3b/0x140 [ 1392.776052][T19003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.776072][T19003] ? clear_bhb_loop+0x70/0xc0 [ 1392.776096][T19003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.776116][T19003] RIP: 0033:0x7f6e88d9e159 [ 1392.776133][T19003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.776151][T19003] RSP: 002b:00007f6e89d33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1392.776174][T19003] RAX: ffffffffffffffda RBX: 00007f6e89025fa0 RCX: 00007f6e88d9e159 [ 1392.776188][T19003] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 1392.776201][T19003] RBP: 00007f6e89d33090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.776214][T19003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.776225][T19003] R13: 00007f6e89026038 R14: 00007f6e89025fa0 R15: 00007ffecbf54f78 [ 1392.776254][T19003] [ 1393.223286][T19010] bond31: option primary_reselect: invalid value (6) [ 1393.225792][T19010] bond31 (unregistering): Released all slaves [ 1393.577406][T19035] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1393.969043][T19055] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1393.979978][T19058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.987458][T19058] bond31: (slave batadv0): Enslaving as an active interface with an up link [ 1394.013104][T19055] bond31: (slave batadv0): Releasing backup interface [ 1394.041247][T19055] team0: left allmulticast mode [ 1394.041274][T19055] team0: left promiscuous mode [ 1394.041597][T19055] bridge0: port 1(team0) entered disabled state [ 1394.082664][T19055] team0: Port device bridge16 removed [ 1394.688308][T19095] bridge0: port 1(macsec1) entered blocking state [ 1394.688418][T19095] bridge0: port 1(macsec1) entered disabled state [ 1394.688531][T19095] macsec1: entered allmulticast mode [ 1394.688547][T19095] bridge0: entered allmulticast mode [ 1394.695775][T19095] macsec1: left allmulticast mode [ 1394.695797][T19095] bridge0: left allmulticast mode [ 1394.846289][T19105] netlink: 'syz.2.14010': attribute type 1 has an invalid length. [ 1394.952217][T19099] ip_tables: iptables: counters copy to user failed while replacing table [ 1394.969589][T19105] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1394.981852][T19111] syzkaller1: entered promiscuous mode [ 1394.981872][T19111] syzkaller1: entered allmulticast mode [ 1395.137396][T19127] tipc: Enabling of bearer rejected, failed to enable media [ 1395.958802][T19178] batman_adv: batadv0: Adding interface: syzkaller0 [ 1395.958821][T19178] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.958924][T19178] batman_adv: batadv0: Interface activated: syzkaller0 [ 1396.017846][T19181] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1396.040050][T19169] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1396.079020][T19169] batman_adv: batadv0: Removing interface: syzkaller0 [ 1396.147198][ T32] INFO: task syz.1.12174:13455 blocked for more than 143 seconds. [ 1396.147224][ T32] Not tainted syzkaller #0 [ 1396.147235][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1396.147246][ T32] task:syz.1.12174 state:D stack:27656 pid:13455 tgid:13449 ppid:5613 task_flags:0x400140 flags:0x00080002 [ 1396.147342][ T32] Call Trace: [ 1396.147351][ T32] [ 1396.147365][ T32] __schedule+0x17db/0x58f0 [ 1396.147422][ T32] ? __pfx___schedule+0x10/0x10 [ 1396.147461][ T32] ? schedule+0x90/0x2b0 [ 1396.147484][ T32] schedule+0x164/0x2b0 [ 1396.147503][ T32] schedule_preempt_disabled+0x13/0x30 [ 1396.147521][ T32] __mutex_lock+0x7c1/0x1550 [ 1396.147548][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1396.147574][ T32] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 1396.147707][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1396.147736][ T32] ? __nlmsg_put+0xef/0x1b0 [ 1396.147767][ T32] ? genlmsg_put+0x137/0x2e0 [ 1396.147792][ T32] nfsd_nl_listener_get_doit+0x104/0x610 [ 1396.147819][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1396.147842][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1396.147871][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1396.147899][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1396.147931][ T32] ? __lock_acquire+0x747/0x2de0 [ 1396.147962][ T32] genl_rcv_msg+0x614/0x7a0 [ 1396.147992][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.148013][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1396.148054][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1396.148082][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1396.148105][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1396.148148][ T32] ? down_read+0x2be/0x330 [ 1396.148175][ T32] genl_rcv+0x28/0x40 [ 1396.148195][ T32] netlink_unicast+0x7bd/0x940 [ 1396.148232][ T32] netlink_sendmsg+0x813/0xb40 [ 1396.148282][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1396.148333][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1396.148358][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1396.148386][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1396.148421][ T32] ____sys_sendmsg+0x54e/0x850 [ 1396.148454][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1396.148490][ T32] ? import_iovec+0x73/0xa0 [ 1396.150092][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1396.150125][ T32] ? __lock_acquire+0x747/0x2de0 [ 1396.150153][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1396.150184][ T32] ? futex_wait+0x2a2/0x390 [ 1396.150247][ T32] ? __fget_files+0x2a/0x420 [ 1396.150281][ T32] ? __fget_files+0x3a2/0x420 [ 1396.150320][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1396.150350][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1396.150398][ T32] do_syscall_64+0x166/0x520 [ 1396.150419][ T32] ? trace_irq_disable+0x3b/0x140 [ 1396.150439][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.150460][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1396.150487][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.150506][ T32] RIP: 0033:0x7f4e9539e159 [ 1396.150525][ T32] RSP: 002b:00007f4e96292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1396.150547][ T32] RAX: ffffffffffffffda RBX: 00007f4e95626180 RCX: 00007f4e9539e159 [ 1396.150562][ T32] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000007 [ 1396.150577][ T32] RBP: 00007f4e9543503b R08: 0000000000000000 R09: 0000000000000000 [ 1396.150589][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1396.150602][ T32] R13: 00007f4e95626218 R14: 00007f4e95626180 R15: 00007ffce5760f28 [ 1396.150636][ T32] [ 1396.150687][ T32] [ 1396.150687][ T32] Showing all locks held in the system: [ 1396.150699][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1396.150801][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1396.150887][ T32] locks held by udevd/4983: 1, last CPU#1: [ 1396.150901][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1396.150953][ T32] locks held by getty/5369: 2, on CPU#1: [ 1396.150966][ T32] #0: ffff888035b5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1396.151097][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1396.151147][ T32] locks held by syz-executor/5611: 4, last CPU#1: [ 1396.151161][ T32] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1396.151215][ T32] #1: ffff8880354a69b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1396.151279][ T32] #2: ffff8880263f03b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1396.151339][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1396.151411][ T32] locks held by syz.3.10854/9307: 2, on CPU#1: [ 1396.151426][ T32] #0: ffffffff902c34a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1396.151475][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1396.151526][ T32] locks held by syz-executor/9807: 1, last CPU#1: [ 1396.151540][ T32] #0: ffff8880331e8420 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 1396.151594][ T32] locks held by syz.1.12174/13455: 2, on CPU#0: [ 1396.153184][ T32] #0: ffffffff902c34a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1396.153239][ T32] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 1396.153305][ T32] locks held by syz.4.14023/19149: 1, on CPU#0: [ 1396.153320][ T32] #0: ffff888081c30c60 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x6b0 [ 1396.153377][ T32] locks held by syz.4.14023/19158: 1, on CPU#1: [ 1396.153391][ T32] #0: ffff888081c30c60 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x28f/0x1a30 [ 1396.153445][ T32] [ 1396.153519][ T32] ============================================= [ 1396.153519][ T32] [ 1396.153537][ T32] NMI backtrace for cpu 0 [ 1396.153551][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1396.153574][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.153585][ T32] Call Trace: [ 1396.153594][ T32] [ 1396.153602][ T32] dump_stack_lvl+0xe8/0x150 [ 1396.153632][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1396.153662][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1396.153694][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1396.153724][ T32] sys_info+0x135/0x170 [ 1396.153748][ T32] watchdog+0xfd7/0x1030 [ 1396.153774][ T32] ? watchdog+0x1c7/0x1030 [ 1396.153801][ T32] kthread+0x38b/0x480 [ 1396.153820][ T32] ? __pfx_watchdog+0x10/0x10 [ 1396.153838][ T32] ? __pfx_kthread+0x10/0x10 [ 1396.153859][ T32] ret_from_fork+0x514/0xb70 [ 1396.153882][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1396.153912][ T32] ? __switch_to+0xc89/0x1420 [ 1396.153943][ T32] ? __pfx_kthread+0x10/0x10 [ 1396.153963][ T32] ret_from_fork_asm+0x1a/0x30 [ 1396.154007][ T32] [ 1396.154016][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1396.154085][ C1] NMI backtrace for cpu 1 [ 1396.154099][ C1] CPU: 1 UID: 0 PID: 4983 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1396.154119][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.154129][ C1] RIP: 0010:__lock_acquire+0x502/0x2de0 [ 1396.154149][ C1] Code: 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc 89 d9 83 c1 fe 78 41 45 89 e7 <41> 81 e7 ff ff ff 7f 83 f9 31 73 1d 4b 8d 0c bf 41 8b 8c ce d0 0b [ 1396.154165][ C1] RSP: 0018:ffffc90002f2f810 EFLAGS: 00000057 [ 1396.154181][ C1] RAX: c100000000020007 RBX: 0000000000000002 RCX: 0000000000000000 [ 1396.154193][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: c100000000000000 [ 1396.154206][ C1] RBP: ffff88807f32ab18 R08: ffffffff82790bbc R09: 0000000000000000 [ 1396.154219][ C1] R10: dffffc0000000000 R11: ffffed100385a925 R12: 0000000000000000 [ 1396.154231][ C1] R13: 0000000000000000 R14: ffff88807f329f40 R15: 0000000000000000 [ 1396.154243][ C1] FS: 00007f34bd01d880(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 1396.154259][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1396.154272][ C1] CR2: 00007facf59ed158 CR3: 000000007f0e2000 CR4: 00000000003526f0 [ 1396.154288][ C1] Call Trace: [ 1396.154294][ C1] [ 1396.154305][ C1] ? rcu_is_watching+0x16/0xb0 [ 1396.154327][ C1] ? __up_read+0x29c/0x930 [ 1396.154354][ C1] lock_acquire+0x115/0x350 [ 1396.154370][ C1] ? kernfs_root+0x1c/0x230 [ 1396.154391][ C1] ? kernfs_root+0x1c/0x230 [ 1396.154407][ C1] kernfs_root+0x38/0x230 [ 1396.154422][ C1] ? kernfs_root+0x1c/0x230 [ 1396.154438][ C1] kernfs_dop_revalidate+0xd5/0x650 [ 1396.154459][ C1] lookup_fast+0x25d/0x5d0 [ 1396.154487][ C1] path_openat+0x526/0x1d60 [ 1396.154512][ C1] do_file_open+0x23e/0x4a0 [ 1396.154531][ C1] ? __pfx_do_file_open+0x10/0x10 [ 1396.154557][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1396.154581][ C1] ? alloc_fd+0x651/0x6c0 [ 1396.154607][ C1] do_sys_openat2+0x115/0x200 [ 1396.154630][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1396.154657][ C1] __x64_sys_openat+0x138/0x170 [ 1396.154679][ C1] do_syscall_64+0x166/0x520 [ 1396.154698][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.154716][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1396.154737][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.154754][ C1] RIP: 0033:0x7f34bd115c3a [ 1396.154795][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 1396.154810][ C1] RSP: 002b:00007ffdcaa25998 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1396.154828][ C1] RAX: ffffffffffffffda RBX: 00005580d851a8e0 RCX: 00007f34bd115c3a [ 1396.154841][ C1] RDX: 0000000000090800 RSI: 00005580d84f8510 RDI: 00000000ffffff9c [ 1396.154853][ C1] RBP: 00005580d84f8510 R08: 0000000000000000 R09: 0000000000000001 [ 1396.154864][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00005580d85047b0 [ 1396.154876][ C1] R13: 00000000000000ff R14: 00005580a2891be0 R15: 00007ffdcaa25c20 [ 1396.154897][ C1] [ 1396.155423][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1397.113706][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1397.122807][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1397.132856][ T32] Call Trace: [ 1397.136123][ T32] [ 1397.139048][ T32] vpanic+0x56d/0xa60 [ 1397.143032][ T32] ? __pfx___schedule+0x10/0x10 [ 1397.147880][ T32] ? __pfx_vpanic+0x10/0x10 [ 1397.152390][ T32] panic+0xc5/0xd0 [ 1397.156109][ T32] ? __pfx_panic+0x10/0x10 [ 1397.160529][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1397.165982][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1397.171355][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1397.177506][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1397.183658][ T32] watchdog+0x1030/0x1030 [ 1397.187985][ T32] ? watchdog+0x1c7/0x1030 [ 1397.192396][ T32] kthread+0x38b/0x480 [ 1397.196545][ T32] ? __pfx_watchdog+0x10/0x10 [ 1397.201298][ T32] ? __pfx_kthread+0x10/0x10 [ 1397.205881][ T32] ret_from_fork+0x514/0xb70 [ 1397.210465][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1397.215579][ T32] ? __switch_to+0xc89/0x1420 [ 1397.220256][ T32] ? __pfx_kthread+0x10/0x10 [ 1397.224837][ T32] ret_from_fork_asm+0x1a/0x30 [ 1397.229614][ T32] [ 1397.232894][ T32] Kernel Offset: disabled [ 1397.237229][ T32] Rebooting in 86400 seconds..